last executing test programs: 9.792547351s ago: executing program 2 (id=112): connect$auto(0x3, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e108baf1000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x1e, 0x2, 0x3) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f0000000140)={0x0, 0xc4}, 0x2, 0x0, 0x100, 0x80000000}, 0x5}, 0x3, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x4, 0xdf, 0x93, r1, 0x140000000) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/13/smp_affinity_list\x00', 0x101002, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) write$auto(r2, 0x0, 0x100) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) unshare$auto(0xfffffffffffffff7) mmap$auto(0x80000001, 0x3, 0x400ffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000004040a6, 0x2, 0x4000000eb5, r2, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x9) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) 7.90695339s ago: executing program 0 (id=121): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0xa) clock_nanosleep$auto(0x0, 0x2, 0x0, &(0x7f0000000340)={0x66, 0x727}) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000140), 0x12, &(0x7f0000000280)={0x0, 0x4b}, 0x4, 0x0, 0x3, 0x800}, 0x7}, 0x8, 0x7fff) mmap$auto(0x2b, 0x2000a, 0x80000000, 0x13, 0xffffffffffffffff, 0x1) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x2a, 0x801, 0x4405) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sysfs$auto(0x2, 0x26, 0x0) fsopen$auto(0x0, 0x1) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)="0040e89a57f9752def5516f43100", 0xe) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffd, 0x5508, 0x0) init_module$auto(0x0, 0xfffff, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x404840, 0x0) madvise$auto(0x0, 0xffffffffffff000d, 0x80000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cx231xx/parameters/radio_nr\x00', 0x202540, 0x0) madvise$auto(0x80000000, 0x8000000000000005, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) capset$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x3, 0x13, 0xfffffffffffffffa, 0x40) fallocate$auto(r1, 0xfffffffd, 0x58f, 0x100000004) 7.830446165s ago: executing program 2 (id=122): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) fspick$auto(r0, &(0x7f0000000180)='./file0\x00', 0x1000) mmap$auto(0x6, 0x20009, 0x20004000000000df, 0x11, 0x401, 0x8000) r1 = prctl$auto_PR_SYS_DISPATCH_OFF(0x2, 0x0, 0x0, 0x1, 0x3) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000)="60393d9bfaf62645055edf09cfd0d9725a45ed8c27362fe4ee536e082e685112bbeaa7c4ffa78d74dee1f1e09a45d9cebd0ed1bb507123af49aa5456f45a09138cdfd6", 0x81, &(0x7f00000000c0)={&(0x7f0000000080)="f7325d16b856c8bb552d529531ee88872062e06451fad6a42193c9688920bd29f8e5", 0x8001}, 0x5, &(0x7f0000000100)="3ab367eb", 0x7, 0x4}, 0x2}, 0x0, 0x8e) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0xffff) landlock_restrict_self$auto(r2, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x1) 7.251515466s ago: executing program 0 (id=126): openat$auto_clk_summary_fops_(0xffffffffffffff9c, 0x0, 0x701, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xf, 0x0) getsockopt$auto(0xffffffffffffffff, 0x4, 0x9856, 0xfffffffffffffffe, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x140000000) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) r4 = socket(0x10, 0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) read$auto_ima_measure_policy_ops_ima_fs(r3, &(0x7f0000000000), 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="51032bbd7000fcdddf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) 6.784886819s ago: executing program 3 (id=128): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x47cd}, 0x800}, 0x4, 0x4008) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0x3, 0x4040ae79, 0x38) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) 6.006388092s ago: executing program 3 (id=130): connect$auto(0x3, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e108baf1000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x1e, 0x2, 0x3) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f0000000140)={0x0, 0xc4}, 0x2, 0x0, 0x100, 0x80000000}, 0x5}, 0x3, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x4, 0xdf, 0x93, r1, 0x140000000) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/13/smp_affinity_list\x00', 0x101002, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) write$auto(r2, 0x0, 0x100) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) unshare$auto(0xfffffffffffffff7) mmap$auto(0x80000001, 0x3, 0x400ffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000004040a6, 0x2, 0x4000000eb5, r2, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x9) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) 5.812937379s ago: executing program 1 (id=131): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) write$auto(0x3, 0x0, 0x200ffd8) close_range$auto(0x2, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/177, 0xb1) 5.563697471s ago: executing program 1 (id=132): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b4d, r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x5}, 0x1) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.378214657s ago: executing program 2 (id=133): r0 = socket(0x26, 0x801, 0x7) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getpeername$auto(r1, &(0x7f0000000180)=@can, &(0x7f00000001c0)=0x2) (async) getpeername$auto(r1, &(0x7f0000000180)=@can, &(0x7f00000001c0)=0x2) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dmmidi2\x00', 0x305001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) (async) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) open(0x0, 0x123440, 0x291) (async) open(0x0, 0x123440, 0x291) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto(0x3, 0x80286f4e, r3) ioctl$auto(0x3, 0x6f41, 0x38) 5.223694108s ago: executing program 1 (id=134): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r2 = socket(0x12, 0x4, 0x440a) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x810, r1, 0x5d63) io_setup$auto(0x80002, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6}) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000030c0), 0x7) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) pread64$auto(r5, &(0x7f0000000080)='/dev/ram7\x00', 0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r4, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x11, 0x80003, 0x300) sendmsg$auto_NFC_CMD_STOP_POLL(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x10, 0x2, 0xc) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r0, 0x4b46, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4.445080607s ago: executing program 2 (id=135): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000002c0)="d05d6f2f716f74230faba010656e878f1af86cd29108de4bf8bb61f80c2d38d4a7038ba0c7c51f76e06d4a15ba90d087513109136561924733c1d54fc9a8f5ee48b052879f664c3f8328365e88c643d7de7d513c46d805b35a6cae38c311835bed572cd39d6b1a5bbf0d8d56cb1076a94e85efd3508e8bd8def432f349860acb37d323f298ec9b4feb8b7ac48f397930a1fcf4f29bff8a8b28ac893866859ec288ac1b44d22ba0ec052a304f187342c3f6129dd96052217f549f3c71105d481a399a8262df0fd090807cdbb56033bbe801", 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x8, 0x6, 0x1, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x2, 0x8, 0x1, 0x1, 0x2, 0xff, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r3, r4, 0x0, 0x4) munlock$auto(0xffff, 0x1) mprotect$auto(0x200000000000, 0x806124, 0x8) socket(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) mmap$auto(0xffffffffffffffff, 0x3, 0x4, 0x9b72, r0, 0x1000000028000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x840000000002, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x2) 4.281079976s ago: executing program 0 (id=136): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101120, 0x0) ioctl$auto_TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll$auto(&(0x7f00000001c0)={r0, 0xfffd, 0x1000}, 0x7, 0x4) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) clone$auto(0x1, 0x3, 0x0, 0x0, 0x3) sysfs$auto(0x2, 0x0, 0x0) epoll_wait$auto(0xffffffffffffffff, 0x0, 0xe007, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8947, &(0x7f0000000240)={'vlan1\x00'}) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) bpf$auto(0xe, &(0x7f000000f400)=@bpf_attr_3={0xa8, 0x40, 0x8, 0x0, 0x93, 0x8, 0x400, 0xd59, 0x0, "234609151bc4e66f54a7396fbd7fcaa2", 0x0, 0xb6d, 0xffffffffffffffff, 0x9, 0x6, 0x7, 0x81, 0x9, 0x8000, 0xe, @attach_prog_fd, 0x2, 0x2, 0xc, 0xc937, 0x51014626}, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x100000000, 0x2, 0x5, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000}, 0x1fe, 0x81) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.21580569s ago: executing program 3 (id=137): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c2580, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/napi_defer_hard_irqs\x00', 0xc2481, 0x0) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, 0x0, 0x2000005) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/51, 0x33) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) fadvise64$auto(0xffffffffffffffff, 0x8, 0x400000000000006, 0x4) (async) fadvise64$auto(0xffffffffffffffff, 0x8, 0x400000000000006, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) mmap$auto(0x0, 0x8695a45000000000, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x8695a45000000000, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) (async) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 4.104429124s ago: executing program 1 (id=138): openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) shmctl$auto_SHM_STAT_ANY(0x8000, 0xf, &(0x7f0000000380)={{0x9, 0xee00, 0x0, 0x80000001, 0x7ff, 0x4, 0x400}, 0x7, 0x0, 0x100, 0x8, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f00000002c0)}) flock$auto(0x1, 0x8) (async) flock$auto(0x1, 0x8) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x73) setsockopt$auto(0x400000000000003, 0xff, 0x24, 0x0, 0xfff) (async) setsockopt$auto(0x400000000000003, 0xff, 0x24, 0x0, 0xfff) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) (async) read$auto(r0, 0x0, 0x2) socketpair$auto(0x4, 0x3, 0x804, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) socket(0x10, 0x2, 0x6) (async) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 3.301109619s ago: executing program 1 (id=139): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x274683, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) socket(0x10, 0x2, 0xf) ioctl$auto(0x3, 0x80108907, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) open(0x0, 0xa240, 0x15e) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) 3.182453383s ago: executing program 3 (id=140): mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000001c0)={0x7fffffff, &(0x7f0000000140)="09c992f401af1f859ebfe90103b3d8a9139d0970cdf0a7a7a9c49d95bdc723a16e08b6ef4d59dc172922fcc13f25246544ded54a668268195253ac0a53667cafbc89ad715d9f68f20bda4f65abaaaac32c0fcacab6304e12f117"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000340)={0xd, 0x13, 0x9, 0x9, 0x80000003, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/net\x00') r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2184c1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ioctl$auto(0xc8, 0x80000000, r1) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) capset$auto(0x0, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x5, 0x100000003, 0x9, 0x6, 0x1ff, 0x8, 0x3, 0x4, 0x401, 0x0, 0x7, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x8000000000000000, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x18f, 0xfffffffffffffff9, 0x4000003, 0x8, 0x1000, 0x80000001, 0x1]}, 0x0, &(0x7f0000000280)={0x10006, 0xcc}) 2.671059558s ago: executing program 0 (id=141): mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyzf\x00', 0x610000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x1) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r2, 0xb21064a7, 0x20000a) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) (async) mmap$auto(0x0, 0x400004, 0x7, 0x8000000009b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x8, 0x1, 0x948b, 0x8003, 0x15f4da0d, 0x3, 0x3, 0x262, 0x8000001e, 0x7, 0x6d3e, 0xc, 0x2, 0x5]}, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async) kcmp$auto(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [0xd2, 0xfffffffc], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0x20d, 0xfffffff8, 0x18, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) (async) select$auto(0x11, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x5, 0xc, 0x40, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x8, 0x8000001f, 0xfffffffffffffffd, 0x6d3d, 0x7, 0x3, 0x8]}, 0x0) (async) capset$auto(0x0, 0x0) 2.208821s ago: executing program 0 (id=142): ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc9, 0x1000, 0xd, 0x9}) ioctl$auto_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) mmap$auto(0x80000000000000, 0x2000000000c34, 0x1, 0xeb1, r0, 0xf1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305615, 0x38) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) pivot_root$auto(&(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', &(0x7f0000000140)='[&,\x00') mmap$auto(0x4, 0x3, 0x800000003, 0xeb1, r0, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x200000000080d, 0xe0, 0x968b, 0x100, 0x15f4da05, 0x3, 0x3, 0x200000000fff, 0x8002001f, 0x0, 0x80080000002, 0x7, 0x6, 0x8]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r3, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="02002abd7000ffdbdf251200f000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80a0) mmap$auto(0x773d, 0x4, 0x0, 0x78, r3, 0xfffdfffffffff98b) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x2910df51) 1.883174949s ago: executing program 2 (id=143): mmap$auto(0x2000000000, 0xe, 0xdb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) (async) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) execveat$auto(r1, 0x0, &(0x7f00000000c0)=&(0x7f0000000040)='/sys/kerneh/deync\x00'/31, 0x0, 0x7cc9) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) read$auto(r3, &(0x7f0000000100)='MAC80\x03\x00\x00\x00\x00\x00\x00\x00IM\x00\xda?\x1c\x9d\xaaQ9\xfd\x8d\xdb\aQ@\xe1\xc3,\xc6\x97E\x17S\x9eK*\x86\xa63m\x94F\x80\xe8~\xe2<\xbe\b\x1e\x97\xdd\xdf\xa5o', 0x3) ioctl$auto(0x3, 0x80000541b, 0x38) (async) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) writev$auto(0x8, &(0x7f0000000040)={0x0, 0x2000000000001}, 0xabc) io_uring_register$auto(0x2, 0x18, &(0x7f0000000040), 0x1) (async) io_uring_register$auto(0x2, 0x18, &(0x7f0000000040), 0x1) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xe8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40006, 0xb3, 0x9b72, r3, 0x1) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r6, 0x0, 0x40) (async) write$auto(r6, 0x0, 0x40) mmap$auto(0x20000000, 0x2004020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x108000, 0x800034, 0x0) (async) madvise$auto(0x108000, 0x800034, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x14) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) (async) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) 1.33894755s ago: executing program 3 (id=144): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x2e40, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000080)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f_\xf3\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa3\xd2({\xe71\xc48\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2', 0x0, 0x0, 0x1, 0x8010) socket(0x28, 0x2, 0x9) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) 901.039786ms ago: executing program 2 (id=145): connect$auto(0x3, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e108baf1000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x1e, 0x2, 0x3) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f0000000140)={0x0, 0xc4}, 0x2, 0x0, 0x100, 0x80000000}, 0x5}, 0x3, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x4, 0xdf, 0x93, r1, 0x140000000) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/13/smp_affinity_list\x00', 0x101002, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) write$auto(r2, 0x0, 0x100) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) unshare$auto(0xfffffffffffffff7) mmap$auto(0x80000001, 0x3, 0x400ffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000004040a6, 0x2, 0x4000000eb5, r2, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x9) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) 704.480594ms ago: executing program 3 (id=146): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3c3880, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) read$auto(r0, &(0x7f0000000280)='&\x00', 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/vlan/vlan1\x00', 0x2a8b02, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/wakeup_max_time_ms\x00', 0x80000, 0x0) read$auto(r7, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r6, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 454.052384ms ago: executing program 0 (id=147): mlockall$auto(0x7) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xf0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0xee00, 0x20000000004) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) getsockopt$auto(r1, 0x0, 0x481, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0xa, 0x3, 0x3b) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(r2, r0, 0x4) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket(0xa, 0x2, 0x0) 0s ago: executing program 1 (id=148): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80503, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 73.222714][ T5833] cgroup: Unknown subsys name 'net' [ 73.378255][ T5833] cgroup: Unknown subsys name 'cpuset' [ 73.388888][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.834509][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.915519][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.928554][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.941660][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.945973][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.956912][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.965556][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.973121][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.981283][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.983671][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.989814][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.997535][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.004207][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.017606][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.018932][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.032923][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.041671][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.050959][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.065277][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.079857][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.087390][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.602198][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.728084][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 77.761808][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 77.831784][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 77.888217][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.896180][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.903522][ T5845] bridge_slave_0: entered allmulticast mode [ 77.911244][ T5845] bridge_slave_0: entered promiscuous mode [ 77.955659][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.962816][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.971091][ T5845] bridge_slave_1: entered allmulticast mode [ 77.978381][ T5845] bridge_slave_1: entered promiscuous mode [ 78.051348][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.058839][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.066850][ T5844] bridge_slave_0: entered allmulticast mode [ 78.073880][ T5844] bridge_slave_0: entered promiscuous mode [ 78.094198][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.101513][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.109266][ T5851] bridge_slave_0: entered allmulticast mode [ 78.116398][ T5851] bridge_slave_0: entered promiscuous mode [ 78.127265][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.139606][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.168667][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.176008][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.183230][ T5844] bridge_slave_1: entered allmulticast mode [ 78.191109][ T5844] bridge_slave_1: entered promiscuous mode [ 78.197869][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.205336][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.212678][ T5851] bridge_slave_1: entered allmulticast mode [ 78.220267][ T5851] bridge_slave_1: entered promiscuous mode [ 78.250556][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.257929][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.265975][ T5853] bridge_slave_0: entered allmulticast mode [ 78.273165][ T5853] bridge_slave_0: entered promiscuous mode [ 78.314044][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.321324][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.328706][ T5853] bridge_slave_1: entered allmulticast mode [ 78.337881][ T5853] bridge_slave_1: entered promiscuous mode [ 78.371439][ T5845] team0: Port device team_slave_0 added [ 78.392060][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.405859][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.418508][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.429856][ T5845] team0: Port device team_slave_1 added [ 78.477132][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.501487][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.538909][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.545924][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.572177][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.588154][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.613100][ T5844] team0: Port device team_slave_0 added [ 78.631179][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.638407][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.665533][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.690633][ T5844] team0: Port device team_slave_1 added [ 78.699010][ T5851] team0: Port device team_slave_0 added [ 78.716244][ T5853] team0: Port device team_slave_0 added [ 78.734507][ T5851] team0: Port device team_slave_1 added [ 78.747423][ T5853] team0: Port device team_slave_1 added [ 78.800398][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.807634][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.834119][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.847738][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.855375][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.882573][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.908507][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.915563][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.941527][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.980660][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.988085][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.014491][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.034087][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.041093][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.067255][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.080756][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.087944][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.113911][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.131336][ T5845] hsr_slave_0: entered promiscuous mode [ 79.135978][ T5856] Bluetooth: hci2: command tx timeout [ 79.138239][ T5845] hsr_slave_1: entered promiscuous mode [ 79.142603][ T5856] Bluetooth: hci1: command tx timeout [ 79.153708][ T5861] Bluetooth: hci0: command tx timeout [ 79.159685][ T5855] Bluetooth: hci3: command tx timeout [ 79.268093][ T5851] hsr_slave_0: entered promiscuous mode [ 79.274582][ T5851] hsr_slave_1: entered promiscuous mode [ 79.281391][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.289906][ T5851] Cannot create hsr debugfs directory [ 79.300976][ T5844] hsr_slave_0: entered promiscuous mode [ 79.307303][ T5844] hsr_slave_1: entered promiscuous mode [ 79.313446][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.321062][ T5844] Cannot create hsr debugfs directory [ 79.413833][ T5853] hsr_slave_0: entered promiscuous mode [ 79.422175][ T5853] hsr_slave_1: entered promiscuous mode [ 79.428434][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.436780][ T5853] Cannot create hsr debugfs directory [ 79.743124][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.762108][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.805437][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.815820][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.897455][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.920714][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.931432][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.947567][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.033308][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.051253][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.077763][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.101141][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.174528][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.186393][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.197507][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.220477][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.252963][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.317428][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.339797][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.371876][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.379157][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.402500][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.409658][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.442086][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.491617][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.498817][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.524074][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.531290][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.663227][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.711970][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.744096][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.777902][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.785112][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.804379][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.823022][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.830223][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.870759][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.877966][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.932908][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.940207][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.032842][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.064360][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.179898][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.215211][ T5856] Bluetooth: hci2: command tx timeout [ 81.220672][ T5856] Bluetooth: hci1: command tx timeout [ 81.224825][ T5855] Bluetooth: hci3: command tx timeout [ 81.228080][ T5856] Bluetooth: hci0: command tx timeout [ 81.297099][ T5845] veth0_vlan: entered promiscuous mode [ 81.342878][ T5845] veth1_vlan: entered promiscuous mode [ 81.467808][ T5851] veth0_vlan: entered promiscuous mode [ 81.484602][ T5851] veth1_vlan: entered promiscuous mode [ 81.493958][ T5845] veth0_macvtap: entered promiscuous mode [ 81.517336][ T5845] veth1_macvtap: entered promiscuous mode [ 81.533375][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.579481][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.594085][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.620620][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.633503][ T5851] veth0_macvtap: entered promiscuous mode [ 81.652645][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.662222][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.671604][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.681391][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.696649][ T5851] veth1_macvtap: entered promiscuous mode [ 81.737477][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.762673][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.794474][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.803916][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.812901][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.821723][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.877538][ T5853] veth0_vlan: entered promiscuous mode [ 81.931708][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.934967][ T5844] veth0_vlan: entered promiscuous mode [ 81.950495][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.961478][ T5844] veth1_vlan: entered promiscuous mode [ 81.990966][ T5853] veth1_vlan: entered promiscuous mode [ 82.043028][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.058603][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.091048][ T5853] veth0_macvtap: entered promiscuous mode [ 82.121703][ T5853] veth1_macvtap: entered promiscuous mode [ 82.148201][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.164009][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.172764][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.196584][ T5844] veth0_macvtap: entered promiscuous mode [ 82.228376][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.266312][ T5844] veth1_macvtap: entered promiscuous mode [ 82.303613][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.318185][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.326668][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.335435][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.345844][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.355366][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.364139][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.417557][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.442463][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.501123][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.520427][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.535369][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544124][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.847096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.867045][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.893391][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.932789][ T5938] Zero length message leads to an empty skb [ 82.973866][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.998347][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.006902][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.025985][ T5938] nfs4: Unknown parameter '€' [ 83.035091][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.199683][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.217203][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.296869][ T5856] Bluetooth: hci3: command tx timeout [ 83.302859][ T5859] Bluetooth: hci1: command tx timeout [ 83.302882][ T5855] Bluetooth: hci2: command tx timeout [ 83.308313][ T5859] Bluetooth: hci0: command tx timeout [ 84.046247][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.992255][ T5950] kexec: Could not allocate control_code_buffer [ 85.375540][ T5855] Bluetooth: hci2: command tx timeout [ 85.381022][ T5855] Bluetooth: hci3: command tx timeout [ 85.386607][ T5855] Bluetooth: hci0: command tx timeout [ 85.392003][ T5855] Bluetooth: hci1: command tx timeout [ 85.507445][ T5971] could not allocate digest TFM handle [ 85.524997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.534299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 85.544197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.555032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.961156][ T5973] capability: warning: `' uses 32-bit capabilities (legacy support in use) [ 86.153486][ T5986] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 87.702065][ T5998] sp0: Synchronizing with TNC [ 87.931666][ T6003] sp0: Synchronizing with TNC [ 88.242130][ T6006] FAULT_INJECTION: forcing a failure. [ 88.242130][ T6006] name failslab, interval 1, probability 0, space 0, times 0 [ 88.256350][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.1.13 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 88.256386][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.256406][ T6006] Call Trace: [ 88.256423][ T6006] [ 88.256437][ T6006] dump_stack_lvl+0x16c/0x1f0 [ 88.256486][ T6006] should_fail_ex+0x512/0x640 [ 88.256520][ T6006] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 88.256638][ T6006] should_failslab+0xc2/0x120 [ 88.256665][ T6006] __kmalloc_cache_noprof+0x6a/0x3e0 [ 88.256700][ T6006] ? alloc_netdev_mqs+0xf3a/0x1570 [ 88.256738][ T6006] ? kasan_save_track+0x14/0x30 [ 88.256802][ T6006] alloc_netdev_mqs+0xf3a/0x1570 [ 88.256851][ T6006] __ip_tunnel_create+0x3ad/0x6e0 [ 88.256881][ T6006] ? __pfx___ip_tunnel_create+0x10/0x10 [ 88.256921][ T6006] ip_tunnel_init_net+0x22f/0x7d0 [ 88.256952][ T6006] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 88.256986][ T6006] ? trace_kmalloc+0x2b/0xd0 [ 88.257010][ T6006] ? __kmalloc_noprof+0x242/0x510 [ 88.257053][ T6006] ? __pfx_ipip_init_net+0x10/0x10 [ 88.257084][ T6006] ops_init+0x1e2/0x5f0 [ 88.257134][ T6006] setup_net+0x1ff/0x510 [ 88.257170][ T6006] ? lockdep_init_map_type+0x5c/0x280 [ 88.257203][ T6006] ? __pfx_setup_net+0x10/0x10 [ 88.257245][ T6006] ? debug_mutex_init+0x37/0x70 [ 88.257276][ T6006] copy_net_ns+0x2a6/0x5f0 [ 88.257306][ T6006] create_new_namespaces+0x3ea/0xa90 [ 88.257343][ T6006] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 88.257375][ T6006] ksys_unshare+0x45b/0xa40 [ 88.257411][ T6006] ? __pfx_ksys_unshare+0x10/0x10 [ 88.257446][ T6006] ? xfd_validate_state+0x61/0x180 [ 88.257488][ T6006] __x64_sys_unshare+0x31/0x40 [ 88.257519][ T6006] do_syscall_64+0xcd/0x490 [ 88.257560][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.257587][ T6006] RIP: 0033:0x7f09d218e929 [ 88.257609][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.257633][ T6006] RSP: 002b:00007f09d3098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 88.257659][ T6006] RAX: ffffffffffffffda RBX: 00007f09d23b5fa0 RCX: 00007f09d218e929 [ 88.257676][ T6006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 88.257691][ T6006] RBP: 00007f09d2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.257707][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.257721][ T6006] R13: 0000000000000000 R14: 00007f09d23b5fa0 R15: 00007ffc07a33fd8 [ 88.257758][ T6006] [ 88.956079][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 88.993988][ T6020] netlink: 338 bytes leftover after parsing attributes in process `syz.2.15'. [ 89.082345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.096112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.106095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.416166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.522467][ T6015] hsr_slave_0 (unregistering): left promiscuous mode [ 89.565416][ T6027] €>< [ 89.827387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.864893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.965479][ T6008] kexec: Could not allocate control_code_buffer [ 91.925054][ T977] cfg80211: failed to load regulatory.db [ 95.208575][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 95.419959][ T6100] block2mtd: error: cannot open device çi [ 96.058109][ T6095] team0: Port device team_slave_0 removed [ 98.566504][ T6128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.573367][ T6123] syz.1.33 (6123) used greatest stack depth: 19784 bytes left [ 98.585720][ T6128] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.674859][ T6128] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.692494][ T6128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.699847][ T6128] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.722128][ T6128] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.744343][ T6128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.755589][ T6128] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.789400][ T6128] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.814907][ T6128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.843743][ T6128] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.872043][ T6128] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.995994][ T6144] FAULT_INJECTION: forcing a failure. [ 98.995994][ T6144] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.009697][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.0.37 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 99.009731][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.009745][ T6144] Call Trace: [ 99.009753][ T6144] [ 99.009763][ T6144] dump_stack_lvl+0x16c/0x1f0 [ 99.009808][ T6144] should_fail_ex+0x512/0x640 [ 99.009840][ T6144] ? kmem_cache_free+0x2d1/0x4d0 [ 99.009875][ T6144] get_futex_key+0x1d0/0x1540 [ 99.009909][ T6144] ? __pfx_get_futex_key+0x10/0x10 [ 99.009952][ T6144] futex_wake+0xe7/0x4e0 [ 99.009992][ T6144] ? __pfx_futex_wake+0x10/0x10 [ 99.010034][ T6144] ? rcu_is_watching+0x12/0xc0 [ 99.010059][ T6144] ? kasan_quarantine_put+0x10a/0x240 [ 99.010093][ T6144] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.010131][ T6144] do_futex+0x1e3/0x350 [ 99.010162][ T6144] ? __pfx_do_futex+0x10/0x10 [ 99.010201][ T6144] __x64_sys_futex+0x1e0/0x4c0 [ 99.010237][ T6144] ? __pfx___x64_sys_futex+0x10/0x10 [ 99.010268][ T6144] ? getname_flags.part.0+0x1c5/0x550 [ 99.010307][ T6144] do_syscall_64+0xcd/0x490 [ 99.010352][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.010379][ T6144] RIP: 0033:0x7fa94598e929 [ 99.010401][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.010433][ T6144] RSP: 002b:00007fa9467170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.010458][ T6144] RAX: ffffffffffffffda RBX: 00007fa945bb5fa8 RCX: 00007fa94598e929 [ 99.010477][ T6144] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa945bb5fac [ 99.010493][ T6144] RBP: 00007fa945bb5fa0 R08: 00007fa946718000 R09: 0000000000000000 [ 99.010508][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa945bb5fac [ 99.010524][ T6144] R13: 0000000000000000 R14: 00007fff5c11e800 R15: 00007fff5c11e8e8 [ 99.010559][ T6144] [ 99.329138][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.719361][ T6153] ptrace attach of "./syz-executor exec"[5845] was attempted by ""[6153] [ 100.576837][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.685385][ T6162] mmap: syz.0.42 (6162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.721797][ T5861] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 100.814160][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.814442][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.450872][ T6174] netlink: 186 bytes leftover after parsing attributes in process `syz.3.44'. [ 102.005360][ T6177] FAULT_INJECTION: forcing a failure. [ 102.005360][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 102.073621][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.2.45 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 102.073646][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.073655][ T6177] Call Trace: [ 102.073660][ T6177] [ 102.073666][ T6177] dump_stack_lvl+0x16c/0x1f0 [ 102.073693][ T6177] should_fail_ex+0x512/0x640 [ 102.073714][ T6177] ? __kmalloc_noprof+0xbf/0x510 [ 102.073738][ T6177] ? public_key_verify_signature+0x25b/0x970 [ 102.073755][ T6177] should_failslab+0xc2/0x120 [ 102.073769][ T6177] __kmalloc_noprof+0xd2/0x510 [ 102.073793][ T6177] public_key_verify_signature+0x25b/0x970 [ 102.073813][ T6177] ? __pfx_public_key_verify_signature+0x10/0x10 [ 102.073844][ T6177] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 102.073862][ T6177] verify_signature+0xdf/0x130 [ 102.073878][ T6177] pkcs7_validate_trust+0x220/0x7e0 [ 102.073902][ T6177] verify_pkcs7_message_sig+0x12c/0x250 [ 102.073919][ T6177] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 102.073938][ T6177] ? kfree+0x2b4/0x4d0 [ 102.073954][ T6177] ? public_key_signature_free+0xda/0x110 [ 102.073975][ T6177] ? pkcs7_parse_message+0x536/0x720 [ 102.073996][ T6177] verify_pkcs7_signature+0x6d/0xa0 [ 102.074013][ T6177] valid_regdb+0x215/0x590 [ 102.074028][ T6177] ? __pfx___mutex_lock+0x10/0x10 [ 102.074050][ T6177] ? __pfx_valid_regdb+0x10/0x10 [ 102.074068][ T6177] reg_reload_regdb+0x11e/0x460 [ 102.074085][ T6177] ? __pfx_reg_reload_regdb+0x10/0x10 [ 102.074111][ T6177] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 102.074132][ T6177] ? nl80211_pre_doit+0x1b0/0xb10 [ 102.074155][ T6177] genl_family_rcv_msg_doit+0x206/0x2f0 [ 102.074176][ T6177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 102.074192][ T6177] ? rcu_is_watching+0x12/0xc0 [ 102.074213][ T6177] ? bpf_lsm_capable+0x9/0x10 [ 102.074230][ T6177] ? security_capable+0x7e/0x260 [ 102.074247][ T6177] genl_rcv_msg+0x55c/0x800 [ 102.074266][ T6177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.074282][ T6177] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 102.074301][ T6177] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 102.074315][ T6177] ? __pfx_nl80211_post_doit+0x10/0x10 [ 102.074341][ T6177] netlink_rcv_skb+0x155/0x420 [ 102.074356][ T6177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.074373][ T6177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.074395][ T6177] ? netlink_deliver_tap+0x1ae/0xd30 [ 102.074420][ T6177] genl_rcv+0x28/0x40 [ 102.074434][ T6177] netlink_unicast+0x58d/0x850 [ 102.074451][ T6177] ? __pfx_netlink_unicast+0x10/0x10 [ 102.074471][ T6177] netlink_sendmsg+0x8d1/0xdd0 [ 102.074488][ T6177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.074510][ T6177] ____sys_sendmsg+0xa95/0xc70 [ 102.074527][ T6177] ? copy_msghdr_from_user+0x10a/0x160 [ 102.074546][ T6177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.074566][ T6177] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.074589][ T6177] ___sys_sendmsg+0x134/0x1d0 [ 102.074611][ T6177] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.074628][ T6177] ? __lock_acquire+0x622/0x1c90 [ 102.074670][ T6177] __sys_sendmsg+0x16d/0x220 [ 102.074691][ T6177] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.074711][ T6177] ? __x64_sys_futex+0x1e0/0x4c0 [ 102.074739][ T6177] do_syscall_64+0xcd/0x490 [ 102.074761][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.074776][ T6177] RIP: 0033:0x7f143978e929 [ 102.074789][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.074802][ T6177] RSP: 002b:00007f143a51f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.074816][ T6177] RAX: ffffffffffffffda RBX: 00007f14399b5fa0 RCX: 00007f143978e929 [ 102.074826][ T6177] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 102.074835][ T6177] RBP: 00007f1439810b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.074844][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.074852][ T6177] R13: 0000000000000000 R14: 00007f14399b5fa0 R15: 00007ffff7395918 [ 102.074872][ T6177] [ 102.152274][ T6164] kexec: Could not allocate control_code_buffer [ 102.268496][ T6177] binder: 6176:6177 ioctl 400c620e 0 returned -22 [ 102.654860][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.893188][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.893201][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.732212][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.972143][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.981988][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.968290][ T6244] sd 0:0:1:0: PR command failed: 1026 [ 107.011233][ T6244] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 107.056923][ T6244] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 107.477960][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880337a4000: rx timeout, send abort [ 107.487499][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880337a4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.885427][ T5855] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 114.822211][ T6314] kexec: Could not allocate control_code_buffer [ 115.640193][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 115.668453][ T6333] unsupported nlmsg_type 40 [ 121.467321][ T6378] kexec: Could not allocate control_code_buffer [ 122.613922][ T6414] ptrace attach of "./syz-executor exec"[5851] was attempted by ""[6414] [ 123.104399][ T6417] FAULT_INJECTION: forcing a failure. [ 123.104399][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 123.293852][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.3.85 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 123.293876][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.293896][ T6417] Call Trace: [ 123.293902][ T6417] [ 123.293908][ T6417] dump_stack_lvl+0x16c/0x1f0 [ 123.293936][ T6417] should_fail_ex+0x512/0x640 [ 123.293957][ T6417] ? __kmalloc_node_noprof+0xc5/0x500 [ 123.293987][ T6417] should_failslab+0xc2/0x120 [ 123.294001][ T6417] __kmalloc_node_noprof+0xd8/0x500 [ 123.294024][ T6417] ? blk_mq_alloc_tag_set+0x534/0x1260 [ 123.294048][ T6417] blk_mq_alloc_tag_set+0x534/0x1260 [ 123.294074][ T6417] loop_add+0x3b9/0xb70 [ 123.294090][ T6417] ? do_vfs_ioctl+0x523/0x1a60 [ 123.294106][ T6417] ? __pfx_loop_add+0x10/0x10 [ 123.294120][ T6417] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 123.294150][ T6417] ? find_held_lock+0x2b/0x80 [ 123.294168][ T6417] loop_control_ioctl+0x13e/0x630 [ 123.294184][ T6417] ? __pfx_loop_control_ioctl+0x10/0x10 [ 123.294203][ T6417] ? __pfx_loop_control_ioctl+0x10/0x10 [ 123.294221][ T6417] __x64_sys_ioctl+0x18e/0x210 [ 123.294238][ T6417] do_syscall_64+0xcd/0x490 [ 123.294260][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.294274][ T6417] RIP: 0033:0x7f662578e929 [ 123.294286][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.294304][ T6417] RSP: 002b:00007f66235f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.294320][ T6417] RAX: ffffffffffffffda RBX: 00007f66259b5fa0 RCX: 00007f662578e929 [ 123.294330][ T6417] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 123.294339][ T6417] RBP: 00007f6625810b39 R08: 0000000000000000 R09: 0000000000000000 [ 123.294347][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.294355][ T6417] R13: 0000000000000000 R14: 00007f66259b5fa0 R15: 00007ffdd096e848 [ 123.294374][ T6417] [ 123.679719][ T6427] program syz.0.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.587949][ T5861] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 127.516636][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 127.575240][ T6463] team0: Port device team_slave_0 removed [ 127.604503][ T6467] block2mtd: error: cannot open device çi [ 127.809531][ T6465] FAULT_INJECTION: forcing a failure. [ 127.809531][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 127.870621][ T6465] CPU: 1 UID: 0 PID: 6465 Comm: syz.3.97 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 127.870659][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.870673][ T6465] Call Trace: [ 127.870690][ T6465] [ 127.870701][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 127.870740][ T6465] should_fail_ex+0x512/0x640 [ 127.870773][ T6465] ? __kvmalloc_node_noprof+0x124/0x620 [ 127.870812][ T6465] should_failslab+0xc2/0x120 [ 127.870838][ T6465] __kvmalloc_node_noprof+0x137/0x620 [ 127.870873][ T6465] ? lockdep_init_map_type+0x5c/0x280 [ 127.870908][ T6465] ? alloc_netdev_mqs+0xcf8/0x1570 [ 127.870952][ T6465] ? alloc_netdev_mqs+0xcf8/0x1570 [ 127.870987][ T6465] alloc_netdev_mqs+0xcf8/0x1570 [ 127.871030][ T6465] ? __pfx_loopback_net_init+0x10/0x10 [ 127.871060][ T6465] loopback_net_init+0x38/0x170 [ 127.871090][ T6465] ? __pfx_loopback_net_init+0x10/0x10 [ 127.871118][ T6465] ops_init+0x1e2/0x5f0 [ 127.871159][ T6465] setup_net+0x1ff/0x510 [ 127.871193][ T6465] ? lockdep_init_map_type+0x5c/0x280 [ 127.871227][ T6465] ? __pfx_setup_net+0x10/0x10 [ 127.871266][ T6465] ? debug_mutex_init+0x37/0x70 [ 127.871297][ T6465] copy_net_ns+0x2a6/0x5f0 [ 127.871326][ T6465] create_new_namespaces+0x3ea/0xa90 [ 127.871364][ T6465] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 127.871395][ T6465] ksys_unshare+0x45b/0xa40 [ 127.871428][ T6465] ? __pfx_ksys_unshare+0x10/0x10 [ 127.871462][ T6465] ? xfd_validate_state+0x61/0x180 [ 127.871505][ T6465] __x64_sys_unshare+0x31/0x40 [ 127.871537][ T6465] do_syscall_64+0xcd/0x490 [ 127.871576][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.871603][ T6465] RIP: 0033:0x7f662578e929 [ 127.871622][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.871646][ T6465] RSP: 002b:00007f66235f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 127.871670][ T6465] RAX: ffffffffffffffda RBX: 00007f66259b5fa0 RCX: 00007f662578e929 [ 127.871718][ T6465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 127.871734][ T6465] RBP: 00007f6625810b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.871749][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.871765][ T6465] R13: 0000000000000000 R14: 00007f66259b5fa0 R15: 00007ffdd096e848 [ 127.871802][ T6465] [ 128.198647][ T6460] kexec: Could not allocate control_code_buffer [ 129.310178][ T6489] FAULT_INJECTION: forcing a failure. [ 129.310178][ T6489] name failslab, interval 1, probability 0, space 0, times 0 [ 129.346250][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.1.101 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 129.346290][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.346306][ T6489] Call Trace: [ 129.346315][ T6489] [ 129.346325][ T6489] dump_stack_lvl+0x16c/0x1f0 [ 129.346377][ T6489] should_fail_ex+0x512/0x640 [ 129.346412][ T6489] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 129.346452][ T6489] should_failslab+0xc2/0x120 [ 129.346478][ T6489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 129.346514][ T6489] ? __kernfs_new_node+0xd2/0x8e0 [ 129.346553][ T6489] __kernfs_new_node+0xd2/0x8e0 [ 129.346590][ T6489] ? __pfx___kernfs_new_node+0x10/0x10 [ 129.346631][ T6489] ? find_held_lock+0x2b/0x80 [ 129.346659][ T6489] ? kernfs_root+0xee/0x2a0 [ 129.346700][ T6489] kernfs_new_node+0x13c/0x1e0 [ 129.346738][ T6489] ? net_ns_get_ownership+0xf8/0x1b0 [ 129.346778][ T6489] kernfs_create_dir_ns+0x4c/0x1a0 [ 129.346818][ T6489] internal_create_group+0x34d/0xf30 [ 129.346859][ T6489] ? __pfx_internal_create_group+0x10/0x10 [ 129.346896][ T6489] ? kernfs_create_link+0x1bd/0x240 [ 129.346926][ T6489] internal_create_groups+0x9d/0x150 [ 129.346960][ T6489] device_add+0xf30/0x1a70 [ 129.346991][ T6489] ? __pfx_device_add+0x10/0x10 [ 129.347018][ T6489] ? lockdep_init_map_type+0x5c/0x280 [ 129.347049][ T6489] ? __init_waitqueue_head+0xca/0x150 [ 129.347079][ T6489] netdev_register_kobject+0x182/0x3a0 [ 129.347107][ T6489] register_netdevice+0x13dc/0x2270 [ 129.347138][ T6489] ? __pfx_register_netdevice+0x10/0x10 [ 129.347174][ T6489] __ip_tunnel_create+0x540/0x6e0 [ 129.347205][ T6489] ? __pfx___ip_tunnel_create+0x10/0x10 [ 129.347246][ T6489] ip_tunnel_init_net+0x22f/0x7d0 [ 129.347280][ T6489] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 129.347318][ T6489] ? trace_kmalloc+0x2b/0xd0 [ 129.347350][ T6489] ? __kmalloc_noprof+0x242/0x510 [ 129.347386][ T6489] ? lockdep_init_map_type+0x5c/0x280 [ 129.347426][ T6489] ? __pfx_ipgre_init_net+0x10/0x10 [ 129.347465][ T6489] ops_init+0x1e2/0x5f0 [ 129.347508][ T6489] setup_net+0x1ff/0x510 [ 129.347542][ T6489] ? lockdep_init_map_type+0x5c/0x280 [ 129.347576][ T6489] ? __pfx_setup_net+0x10/0x10 [ 129.347616][ T6489] ? debug_mutex_init+0x37/0x70 [ 129.347647][ T6489] copy_net_ns+0x2a6/0x5f0 [ 129.347677][ T6489] create_new_namespaces+0x3ea/0xa90 [ 129.347714][ T6489] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 129.347747][ T6489] ksys_unshare+0x45b/0xa40 [ 129.347781][ T6489] ? __pfx_ksys_unshare+0x10/0x10 [ 129.347816][ T6489] ? xfd_validate_state+0x61/0x180 [ 129.347860][ T6489] __x64_sys_unshare+0x31/0x40 [ 129.347892][ T6489] do_syscall_64+0xcd/0x490 [ 129.347930][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.347955][ T6489] RIP: 0033:0x7f09d218e929 [ 129.347977][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.348001][ T6489] RSP: 002b:00007f09d3098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.348026][ T6489] RAX: ffffffffffffffda RBX: 00007f09d23b5fa0 RCX: 00007f09d218e929 [ 129.348043][ T6489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 129.348059][ T6489] RBP: 00007f09d2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 129.348076][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.348092][ T6489] R13: 0000000000000000 R14: 00007f09d23b5fa0 R15: 00007ffc07a33fd8 [ 129.348128][ T6489] [ 129.705276][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.015210][ T6504] random: crng reseeded on system resumption [ 130.380376][ T6471] kexec: Could not allocate control_code_buffer [ 131.724553][ T6548] phram: not enough arguments [ 131.727788][ T6548] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.663700][ T6571] FAULT_INJECTION: forcing a failure. [ 132.663700][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 132.814395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.824884][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.859513][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: syz.2.112 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 132.859555][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.859571][ T6571] Call Trace: [ 132.859580][ T6571] [ 132.859590][ T6571] dump_stack_lvl+0x16c/0x1f0 [ 132.859633][ T6571] should_fail_ex+0x512/0x640 [ 132.859668][ T6571] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 132.859713][ T6571] should_failslab+0xc2/0x120 [ 132.859739][ T6571] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 132.859780][ T6571] ? mark_held_locks+0x49/0x80 [ 132.859812][ T6571] ? neigh_sysctl_register+0xb2/0x670 [ 132.859855][ T6571] kmemdup_noprof+0x29/0x60 [ 132.859891][ T6571] neigh_sysctl_register+0xb2/0x670 [ 132.859924][ T6571] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 132.859955][ T6571] ? __pfx___debug_object_init+0x10/0x10 [ 132.859981][ T6571] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 132.860023][ T6571] ? lockdep_init_map_type+0x5c/0x280 [ 132.860062][ T6571] ? mld_in_v1_mode+0x2b2/0x3a0 [ 132.860096][ T6571] addrconf_sysctl_register+0xb9/0x1f0 [ 132.860136][ T6571] ipv6_add_dev+0xb39/0x15f0 [ 132.860185][ T6571] addrconf_notify+0x53e/0x19e0 [ 132.860216][ T6571] ? ip6mr_device_event+0x1bc/0x230 [ 132.860252][ T6571] notifier_call_chain+0xbc/0x410 [ 132.860279][ T6571] ? __pfx_addrconf_notify+0x10/0x10 [ 132.860314][ T6571] call_netdevice_notifiers_info+0xbe/0x140 [ 132.860346][ T6571] register_netdevice+0x182e/0x2270 [ 132.860377][ T6571] ? __pfx_register_netdevice+0x10/0x10 [ 132.860408][ T6571] ? __pfx_loopback_net_init+0x10/0x10 [ 132.860437][ T6571] register_netdev+0x34/0x50 [ 132.860461][ T6571] loopback_net_init+0x7a/0x170 [ 132.860493][ T6571] ? __pfx_loopback_net_init+0x10/0x10 [ 132.860518][ T6571] ops_init+0x1e2/0x5f0 [ 132.860558][ T6571] setup_net+0x1ff/0x510 [ 132.860592][ T6571] ? lockdep_init_map_type+0x5c/0x280 [ 132.860626][ T6571] ? __pfx_setup_net+0x10/0x10 [ 132.860666][ T6571] ? debug_mutex_init+0x37/0x70 [ 132.860695][ T6571] copy_net_ns+0x2a6/0x5f0 [ 132.860725][ T6571] create_new_namespaces+0x3ea/0xa90 [ 132.860765][ T6571] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 132.860797][ T6571] ksys_unshare+0x45b/0xa40 [ 132.860831][ T6571] ? __pfx_ksys_unshare+0x10/0x10 [ 132.860867][ T6571] ? xfd_validate_state+0x61/0x180 [ 132.860909][ T6571] __x64_sys_unshare+0x31/0x40 [ 132.860940][ T6571] do_syscall_64+0xcd/0x490 [ 132.860979][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.861006][ T6571] RIP: 0033:0x7f143978e929 [ 132.861029][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.861053][ T6571] RSP: 002b:00007f143a51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 132.861078][ T6571] RAX: ffffffffffffffda RBX: 00007f14399b5fa0 RCX: 00007f143978e929 [ 132.861096][ T6571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 132.861111][ T6571] RBP: 00007f1439810b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.861127][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.861141][ T6571] R13: 0000000000000000 R14: 00007f14399b5fa0 R15: 00007ffff7395918 [ 132.861186][ T6571] [ 133.481954][ T6599] i2c i2c-0: new_device: Missing parameters [ 134.302200][ T6593] kexec: Could not allocate control_code_buffer [ 134.444193][ T6633] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 134.545328][ T6636] Invalid ELF header magic: != ELF [ 135.411845][ T6647] FAULT_INJECTION: forcing a failure. [ 135.411845][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 135.483251][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.0.126 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 135.483292][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.483308][ T6647] Call Trace: [ 135.483317][ T6647] [ 135.483326][ T6647] dump_stack_lvl+0x16c/0x1f0 [ 135.483367][ T6647] should_fail_ex+0x512/0x640 [ 135.483399][ T6647] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 135.483440][ T6647] should_failslab+0xc2/0x120 [ 135.483465][ T6647] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 135.483500][ T6647] ? __kernfs_new_node+0xd2/0x8e0 [ 135.483539][ T6647] __kernfs_new_node+0xd2/0x8e0 [ 135.483575][ T6647] ? kernfs_add_one+0x37d/0x840 [ 135.483610][ T6647] ? __pfx___kernfs_new_node+0x10/0x10 [ 135.483654][ T6647] ? find_held_lock+0x2b/0x80 [ 135.483678][ T6647] ? kernfs_root+0xee/0x2a0 [ 135.483718][ T6647] kernfs_new_node+0x13c/0x1e0 [ 135.483772][ T6647] __kernfs_create_file+0x53/0x350 [ 135.483805][ T6647] sysfs_add_file_mode_ns+0x207/0x3c0 [ 135.483843][ T6647] sysfs_create_file_ns+0x13d/0x1d0 [ 135.483873][ T6647] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 135.483902][ T6647] ? down_read+0x13d/0x480 [ 135.483927][ T6647] ? __pfx___up_read+0x10/0x10 [ 135.483962][ T6647] ? acpi_device_notify+0x351/0x480 [ 135.484002][ T6647] device_create_file+0xf2/0x1e0 [ 135.484034][ T6647] device_add+0x2bf/0x1a70 [ 135.484059][ T6647] ? __pfx_dev_set_name+0x10/0x10 [ 135.484087][ T6647] ? __pfx_device_add+0x10/0x10 [ 135.484112][ T6647] ? lockdep_init_map_type+0x5c/0x280 [ 135.484146][ T6647] ? __init_waitqueue_head+0xca/0x150 [ 135.484178][ T6647] netdev_register_kobject+0x182/0x3a0 [ 135.484211][ T6647] register_netdevice+0x13dc/0x2270 [ 135.484243][ T6647] ? __pfx_register_netdevice+0x10/0x10 [ 135.484280][ T6647] __ip_tunnel_create+0x540/0x6e0 [ 135.484311][ T6647] ? __pfx___ip_tunnel_create+0x10/0x10 [ 135.484351][ T6647] ip_tunnel_init_net+0x22f/0x7d0 [ 135.484383][ T6647] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 135.484416][ T6647] ? trace_kmalloc+0x2b/0xd0 [ 135.484439][ T6647] ? __kmalloc_noprof+0x242/0x510 [ 135.484473][ T6647] ? lockdep_init_map_type+0x5c/0x280 [ 135.484511][ T6647] ? __pfx_ipgre_init_net+0x10/0x10 [ 135.484547][ T6647] ops_init+0x1e2/0x5f0 [ 135.484588][ T6647] setup_net+0x1ff/0x510 [ 135.484623][ T6647] ? lockdep_init_map_type+0x5c/0x280 [ 135.484657][ T6647] ? __pfx_setup_net+0x10/0x10 [ 135.484697][ T6647] ? debug_mutex_init+0x37/0x70 [ 135.484727][ T6647] copy_net_ns+0x2a6/0x5f0 [ 135.484768][ T6647] create_new_namespaces+0x3ea/0xa90 [ 135.484808][ T6647] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 135.484841][ T6647] ksys_unshare+0x45b/0xa40 [ 135.484876][ T6647] ? __pfx_ksys_unshare+0x10/0x10 [ 135.484910][ T6647] ? xfd_validate_state+0x61/0x180 [ 135.484954][ T6647] __x64_sys_unshare+0x31/0x40 [ 135.484986][ T6647] do_syscall_64+0xcd/0x490 [ 135.485020][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.485047][ T6647] RIP: 0033:0x7fa94598e929 [ 135.485069][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.485093][ T6647] RSP: 002b:00007fa946717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.485118][ T6647] RAX: ffffffffffffffda RBX: 00007fa945bb5fa0 RCX: 00007fa94598e929 [ 135.485135][ T6647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 135.485151][ T6647] RBP: 00007fa945a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.485165][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.485178][ T6647] R13: 0000000000000000 R14: 00007fa945bb5fa0 R15: 00007fff5c11e8e8 [ 135.485210][ T6647] [ 135.907165][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.126'. [ 135.918994][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.126'. [ 135.928581][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.126'. [ 135.937908][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.126'. [ 135.947243][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.0.126'. [ 136.437853][ T6670] FAULT_INJECTION: forcing a failure. [ 136.437853][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 136.534093][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.3.130 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 136.534131][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.534146][ T6670] Call Trace: [ 136.534155][ T6670] [ 136.534165][ T6670] dump_stack_lvl+0x16c/0x1f0 [ 136.534209][ T6670] should_fail_ex+0x512/0x640 [ 136.534244][ T6670] ? __kvmalloc_node_noprof+0x124/0x620 [ 136.534283][ T6670] should_failslab+0xc2/0x120 [ 136.534310][ T6670] __kvmalloc_node_noprof+0x137/0x620 [ 136.534344][ T6670] ? lockdep_init_map_type+0x5c/0x280 [ 136.534378][ T6670] ? alloc_netdev_mqs+0xcf8/0x1570 [ 136.534423][ T6670] ? alloc_netdev_mqs+0xcf8/0x1570 [ 136.534458][ T6670] alloc_netdev_mqs+0xcf8/0x1570 [ 136.534499][ T6670] ? __pfx_loopback_net_init+0x10/0x10 [ 136.534530][ T6670] loopback_net_init+0x38/0x170 [ 136.534561][ T6670] ? __pfx_loopback_net_init+0x10/0x10 [ 136.534588][ T6670] ops_init+0x1e2/0x5f0 [ 136.534629][ T6670] setup_net+0x1ff/0x510 [ 136.534664][ T6670] ? lockdep_init_map_type+0x5c/0x280 [ 136.534698][ T6670] ? __pfx_setup_net+0x10/0x10 [ 136.534737][ T6670] ? debug_mutex_init+0x37/0x70 [ 136.534768][ T6670] copy_net_ns+0x2a6/0x5f0 [ 136.534798][ T6670] create_new_namespaces+0x3ea/0xa90 [ 136.534835][ T6670] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 136.534877][ T6670] ksys_unshare+0x45b/0xa40 [ 136.534914][ T6670] ? __pfx_ksys_unshare+0x10/0x10 [ 136.534949][ T6670] ? xfd_validate_state+0x61/0x180 [ 136.534994][ T6670] __x64_sys_unshare+0x31/0x40 [ 136.535026][ T6670] do_syscall_64+0xcd/0x490 [ 136.535064][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.535089][ T6670] RIP: 0033:0x7f662578e929 [ 136.535110][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.535134][ T6670] RSP: 002b:00007f66235f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 136.535160][ T6670] RAX: ffffffffffffffda RBX: 00007f66259b5fa0 RCX: 00007f662578e929 [ 136.535177][ T6670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 136.535192][ T6670] RBP: 00007f6625810b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.535208][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.535223][ T6670] R13: 0000000000000000 R14: 00007f66259b5fa0 R15: 00007ffdd096e848 [ 136.535257][ T6670] [ 137.432853][ T6654] kexec: Could not allocate control_code_buffer [ 137.874288][ T6696] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 138.924324][ T6697] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 139.008991][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.136'. [ 139.260896][ T6710] vcan0: entered promiscuous mode [ 140.589773][ T6732] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[6732] [ 141.715757][ T6769] FAULT_INJECTION: forcing a failure. [ 141.715757][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 141.809448][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.2.145 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 141.809484][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.809498][ T6769] Call Trace: [ 141.809506][ T6769] [ 141.809515][ T6769] dump_stack_lvl+0x16c/0x1f0 [ 141.809557][ T6769] should_fail_ex+0x512/0x640 [ 141.809590][ T6769] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 141.809625][ T6769] should_failslab+0xc2/0x120 [ 141.809651][ T6769] __kmalloc_cache_noprof+0x6a/0x3e0 [ 141.809678][ T6769] ? __asan_memset+0x23/0x50 [ 141.809713][ T6769] ? alloc_netdev_mqs+0xece/0x1570 [ 141.809752][ T6769] alloc_netdev_mqs+0xece/0x1570 [ 141.809796][ T6769] ? __pfx_vti6_init_net+0x10/0x10 [ 141.809825][ T6769] vti6_init_net+0xf5/0x490 [ 141.809853][ T6769] ? __pfx_vti6_init_net+0x10/0x10 [ 141.809881][ T6769] ops_init+0x1e2/0x5f0 [ 141.809922][ T6769] setup_net+0x1ff/0x510 [ 141.809956][ T6769] ? lockdep_init_map_type+0x5c/0x280 [ 141.809991][ T6769] ? __pfx_setup_net+0x10/0x10 [ 141.810029][ T6769] ? debug_mutex_init+0x37/0x70 [ 141.810057][ T6769] copy_net_ns+0x2a6/0x5f0 [ 141.810084][ T6769] create_new_namespaces+0x3ea/0xa90 [ 141.810121][ T6769] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 141.810152][ T6769] ksys_unshare+0x45b/0xa40 [ 141.810186][ T6769] ? __pfx_ksys_unshare+0x10/0x10 [ 141.810218][ T6769] ? xfd_validate_state+0x61/0x180 [ 141.810259][ T6769] __x64_sys_unshare+0x31/0x40 [ 141.810290][ T6769] do_syscall_64+0xcd/0x490 [ 141.810325][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.810358][ T6769] RIP: 0033:0x7f143978e929 [ 141.810380][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.810405][ T6769] RSP: 002b:00007f143a51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.810432][ T6769] RAX: ffffffffffffffda RBX: 00007f14399b5fa0 RCX: 00007f143978e929 [ 141.810449][ T6769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 141.810464][ T6769] RBP: 00007f1439810b39 R08: 0000000000000000 R09: 0000000000000000 [ 141.810479][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.810491][ T6769] R13: 0000000000000000 R14: 00007f14399b5fa0 R15: 00007ffff7395918 [ 141.810524][ T6769] [ 142.230139][ T6772] [ 142.232521][ T6772] ====================================================== [ 142.239649][ T6772] WARNING: possible circular locking dependency detected [ 142.246708][ T6772] 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 Not tainted [ 142.253924][ T6772] ------------------------------------------------------ [ 142.261049][ T6772] syz.3.146/6772 is trying to acquire lock: [ 142.267061][ T6772] ffff888143b505e0 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 142.277198][ T6772] [ 142.277198][ T6772] but task is already holding lock: [ 142.284574][ T6772] ffff888143b500a8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 142.295927][ T6772] [ 142.295927][ T6772] which lock already depends on the new lock. [ 142.295927][ T6772] [ 142.306335][ T6772] [ 142.306335][ T6772] the existing dependency chain (in reverse order) is: [ 142.315443][ T6772] [ 142.315443][ T6772] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 142.324070][ T6772] blk_alloc_queue+0x619/0x760 [ 142.329470][ T6772] blk_mq_alloc_queue+0x175/0x290 [ 142.335038][ T6772] __blk_mq_alloc_disk+0x29/0x120 [ 142.340594][ T6772] nbd_dev_add+0x4a0/0xbc0 [ 142.345553][ T6772] nbd_init+0x181/0x320 [ 142.350247][ T6772] do_one_initcall+0x120/0x6e0 [ 142.355547][ T6772] kernel_init_freeable+0x5c2/0x900 [ 142.361285][ T6772] kernel_init+0x1c/0x2b0 [ 142.366151][ T6772] ret_from_fork+0x5d7/0x6f0 [ 142.371293][ T6772] ret_from_fork_asm+0x1a/0x30 [ 142.376597][ T6772] [ 142.376597][ T6772] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 142.383917][ T6772] fs_reclaim_acquire+0x102/0x150 [ 142.389478][ T6772] prepare_alloc_pages+0x162/0x610 [ 142.395159][ T6772] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 142.401634][ T6772] __alloc_pages_noprof+0xb/0x1b0 [ 142.407242][ T6772] pcpu_populate_chunk+0x110/0xb00 [ 142.412922][ T6772] pcpu_alloc_noprof+0x86a/0x1470 [ 142.418495][ T6772] bpf_map_alloc_percpu+0x9a/0x4b0 [ 142.424147][ T6772] htab_map_alloc+0x10ca/0x1570 [ 142.429541][ T6772] map_create+0x58f/0x1db0 [ 142.434520][ T6772] __sys_bpf+0x47cc/0x4d80 [ 142.439478][ T6772] __x64_sys_bpf+0x78/0xc0 [ 142.444513][ T6772] do_syscall_64+0xcd/0x490 [ 142.449596][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.456041][ T6772] [ 142.456041][ T6772] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 142.463870][ T6772] __mutex_lock+0x199/0xb90 [ 142.468909][ T6772] pcpu_alloc_noprof+0xb4c/0x1470 [ 142.474467][ T6772] sbitmap_init_node+0x2fd/0x770 [ 142.479936][ T6772] sbitmap_queue_init_node+0x41/0x560 [ 142.485839][ T6772] blk_mq_init_tags+0x12d/0x2b0 [ 142.491239][ T6772] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 142.497369][ T6772] blk_mq_init_sched+0x30c/0x610 [ 142.502844][ T6772] elevator_switch+0x1e1/0x7f0 [ 142.508148][ T6772] elevator_change+0x2ac/0x400 [ 142.513470][ T6772] elevator_set_default+0x292/0x320 [ 142.519216][ T6772] blk_register_queue+0x393/0x4f0 [ 142.524937][ T6772] __add_disk+0x74a/0xf00 [ 142.529888][ T6772] add_disk_fwnode+0x13f/0x5d0 [ 142.535203][ T6772] nbd_dev_add+0x791/0xbc0 [ 142.540172][ T6772] nbd_init+0x181/0x320 [ 142.544895][ T6772] do_one_initcall+0x120/0x6e0 [ 142.550255][ T6772] kernel_init_freeable+0x5c2/0x900 [ 142.556008][ T6772] kernel_init+0x1c/0x2b0 [ 142.560964][ T6772] ret_from_fork+0x5d7/0x6f0 [ 142.566395][ T6772] ret_from_fork_asm+0x1a/0x30 [ 142.571715][ T6772] [ 142.571715][ T6772] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 142.580422][ T6772] __lock_acquire+0x126f/0x1c90 [ 142.585809][ T6772] lock_acquire+0x179/0x350 [ 142.590843][ T6772] __mutex_lock+0x199/0xb90 [ 142.595964][ T6772] queue_requests_store+0x1c7/0x310 [ 142.601754][ T6772] queue_attr_store+0x276/0x320 [ 142.607254][ T6772] sysfs_kf_write+0xef/0x150 [ 142.612470][ T6772] kernfs_fop_write_iter+0x354/0x510 [ 142.618285][ T6772] iter_file_splice_write+0x91f/0x1150 [ 142.624274][ T6772] direct_splice_actor+0x192/0x6c0 [ 142.629915][ T6772] splice_direct_to_actor+0x342/0xa30 [ 142.635813][ T6772] do_splice_direct+0x174/0x240 [ 142.641196][ T6772] do_sendfile+0xb06/0xe50 [ 142.646149][ T6772] __x64_sys_sendfile64+0x1d8/0x220 [ 142.651874][ T6772] do_syscall_64+0xcd/0x490 [ 142.656931][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.663362][ T6772] [ 142.663362][ T6772] other info that might help us debug this: [ 142.663362][ T6772] [ 142.673771][ T6772] Chain exists of: [ 142.673771][ T6772] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 142.673771][ T6772] [ 142.687540][ T6772] Possible unsafe locking scenario: [ 142.687540][ T6772] [ 142.694993][ T6772] CPU0 CPU1 [ 142.700354][ T6772] ---- ---- [ 142.705715][ T6772] lock(&q->q_usage_counter(io)#59); [ 142.711100][ T6772] lock(fs_reclaim); [ 142.717608][ T6772] lock(&q->q_usage_counter(io)#59); [ 142.725515][ T6772] lock(&q->elevator_lock); [ 142.730117][ T6772] [ 142.730117][ T6772] *** DEADLOCK *** [ 142.730117][ T6772] [ 142.738378][ T6772] 5 locks held by syz.3.146/6772: [ 142.743421][ T6772] #0: ffff888032540428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 142.753495][ T6772] #1: ffff888056596c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 142.763280][ T6772] #2: ffff8881433bac38 (kn->active#87){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 142.773320][ T6772] #3: ffff888143b500a8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 142.785016][ T6772] #4: ffff888143b500e0 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 142.796989][ T6772] [ 142.796989][ T6772] stack backtrace: [ 142.802875][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.3.146 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 142.802903][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.802916][ T6772] Call Trace: [ 142.802924][ T6772] [ 142.802933][ T6772] dump_stack_lvl+0x116/0x1f0 [ 142.802966][ T6772] print_circular_bug+0x275/0x350 [ 142.803003][ T6772] check_noncircular+0x14c/0x170 [ 142.803035][ T6772] __lock_acquire+0x126f/0x1c90 [ 142.803066][ T6772] ? __lock_acquire+0xb8a/0x1c90 [ 142.803095][ T6772] lock_acquire+0x179/0x350 [ 142.803123][ T6772] ? queue_requests_store+0x1c7/0x310 [ 142.803158][ T6772] ? __pfx___might_resched+0x10/0x10 [ 142.803183][ T6772] ? do_raw_spin_lock+0x12c/0x2b0 [ 142.803217][ T6772] __mutex_lock+0x199/0xb90 [ 142.803253][ T6772] ? queue_requests_store+0x1c7/0x310 [ 142.803287][ T6772] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 142.803315][ T6772] ? queue_requests_store+0x1c7/0x310 [ 142.803347][ T6772] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.803378][ T6772] ? __pfx___mutex_lock+0x10/0x10 [ 142.803412][ T6772] ? __pfx_autoremove_wake_function+0x10/0x10 [ 142.803443][ T6772] ? queue_requests_store+0x1c7/0x310 [ 142.803476][ T6772] queue_requests_store+0x1c7/0x310 [ 142.803510][ T6772] ? __pfx_queue_requests_store+0x10/0x10 [ 142.803544][ T6772] ? __mutex_trylock_common+0xe9/0x250 [ 142.803575][ T6772] ? __pfx_queue_requests_store+0x10/0x10 [ 142.803608][ T6772] queue_attr_store+0x276/0x320 [ 142.803640][ T6772] ? __pfx_queue_attr_store+0x10/0x10 [ 142.803670][ T6772] ? __lock_acquire+0x622/0x1c90 [ 142.803705][ T6772] ? find_held_lock+0x2b/0x80 [ 142.803727][ T6772] ? sysfs_file_kobj+0xe4/0x290 [ 142.803754][ T6772] ? __pfx_queue_attr_store+0x10/0x10 [ 142.803786][ T6772] sysfs_kf_write+0xef/0x150 [ 142.803811][ T6772] kernfs_fop_write_iter+0x354/0x510 [ 142.803833][ T6772] ? __pfx_sysfs_kf_write+0x10/0x10 [ 142.803859][ T6772] iter_file_splice_write+0x91f/0x1150 [ 142.803896][ T6772] ? __pfx_iter_file_splice_write+0x10/0x10 [ 142.803928][ T6772] ? __pfx_copy_splice_read+0x10/0x10 [ 142.803962][ T6772] ? __pfx_iter_file_splice_write+0x10/0x10 [ 142.803996][ T6772] direct_splice_actor+0x192/0x6c0 [ 142.804025][ T6772] splice_direct_to_actor+0x342/0xa30 [ 142.804053][ T6772] ? __pfx_direct_splice_actor+0x10/0x10 [ 142.804083][ T6772] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 142.804114][ T6772] do_splice_direct+0x174/0x240 [ 142.804140][ T6772] ? __pfx_do_splice_direct+0x10/0x10 [ 142.804167][ T6772] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 142.804196][ T6772] ? rw_verify_area+0xcf/0x680 [ 142.804224][ T6772] do_sendfile+0xb06/0xe50 [ 142.804255][ T6772] ? __pfx_do_sendfile+0x10/0x10 [ 142.804282][ T6772] ? handle_mm_fault+0x2ab/0xd10 [ 142.804311][ T6772] ? __x64_sys_futex+0x1e0/0x4c0 [ 142.804336][ T6772] ? __x64_sys_futex+0x1e9/0x4c0 [ 142.804363][ T6772] __x64_sys_sendfile64+0x1d8/0x220 [ 142.804384][ T6772] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 142.804410][ T6772] do_syscall_64+0xcd/0x490 [ 142.804442][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.804464][ T6772] RIP: 0033:0x7f662578e929 [ 142.804482][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.804503][ T6772] RSP: 002b:00007f66235f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.804523][ T6772] RAX: ffffffffffffffda RBX: 00007f66259b5fa0 RCX: 00007f662578e929 [ 142.804538][ T6772] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 142.804551][ T6772] RBP: 00007f6625810b39 R08: 0000000000000000 R09: 0000000000000000 [ 142.804565][ T6772] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 142.804578][ T6772] R13: 0000000000000000 R14: 00007f66259b5fa0 R15: 00007ffdd096e848 [ 142.804599][ T6772] [ 143.648925][ T6770] kexec: Could not allocate control_code_buffer