last executing test programs: 25.030281479s ago: executing program 0 (id=63): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(r0, 0x0, 0x3, 0x20000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (fail_nth: 4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) sendmsg$auto_L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x66871c73e4a73b9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0xfffffff9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x840) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000000) 23.146527604s ago: executing program 0 (id=66): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmmsg$auto(r0, 0x0, 0x3, 0x20000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (fail_nth: 4) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) sendmsg$auto_L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x66871c73e4a73b9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0xfffffff9}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x840) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000000) 16.265883741s ago: executing program 1 (id=74): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r1, 0x7ffe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub1/xrun_injection\x00', 0x701000, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) mmap$auto(0x1f, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) 14.907746886s ago: executing program 0 (id=80): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='&&\x00', 0x80, 0x7d6498b423d9a0e6) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x636) timerfd_settime$auto(r0, 0x800, &(0x7f0000000000)={{0x8000000000000001, 0x4}, {0x5, 0x2}}, &(0x7f0000000040)={{0x0, 0x2}, {0x5, 0x91b1}}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0xfffff800, 0x30, 0x0, 0x56b) ioctl$auto_PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000000c0)=0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x92001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0) mmap$auto(0x0, 0x7, 0xe4, 0x12, 0x47, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) 13.907669879s ago: executing program 0 (id=83): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x2, 0x801, 0x106) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty26\x00', 0x182102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = setfsuid$auto(0xee00) (async, rerun: 64) r7 = setfsuid$auto(0xee01) (rerun: 64) setresuid$auto(r6, r7, r6) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) sendfile$auto(r8, r8, 0x0, 0x1000000000001) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x2404c810) r9 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x3, 0x8, 0xffffffffffffffff, [], {0x9, 0x801, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x1, 0x104, 0x8, 0x100000000}}) r10 = syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = semctl$auto(0x401, 0x3, 0x0, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0xffffff01, 0x52, &(0x7f0000000340)='],^]\x00', &(0x7f0000000380)=0x1) (async, rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000100)={{@inferred=r11, 0x2, 0x815e, 0x1220, "453382edf5ab21efb5380c8aca00e4ec75992ddebd9d98216bd23731d43372f570fee4321167544dbc88e83d", @inferred=r10}, 0xffffffff, 0x4, 0x80000001, @raw=0x80000001, @reserved="75faa77ca59bf5d0d83c7c0e701db43323c466e944b559a1bbafe2536303adfe12d0358c7faa2dfbd54a78a822dad038bdaf04eb47814e8ba9c2a0cb62c026ebfa874f37fd60045a522b0b4420cafca894fa5a8cf33197cf0dc29b8fb788ed08fd06353172fcc9e0cc89bc40d184061711e6aaea2b2636d65eec8bfb1668da10", "f404e784d3634452d3ae96537c2cff37d37db81c75f3a29a1b6033fd4c4b5d488cf473ef7047857be8d3e03bad53ca1801c3345a869603396ea0f83c1729c166"}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x1e8, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "f9f519b5549d17a9779752c2477b62095e8be886bbcb02925b1c7cc93ec1ddcfa70c7872ae96631f9fe914bab8aed243ac491abacd40d2b61e340de9b42e2bbba8f8e4599bafbfcd6c85dcb1941754bfcfb555481f01e6f7be1c97f4fb0fa19b93e7a145bb261f19de323a9ae9ea6426253094d8506bd44f0597172812bdc3d22220f092d1387cb646f40ddcf5866358e058c74301de0c20ca3957ee9726677e12165107e2a8b2f5b92937e422548fa37b2c80faa170869217ef4803125d2dad69ae5fa4da3b63f36122c0496616af2fc0de96"}, @NL80211_ATTR_AUTH_DATA={0xd8, 0x9c, "9203a57a699c98872470bfe9d6657156bf04de5828433dd8f3b64e49f35c51055223418e0f53bede9b4eca820814ddc15ce2e6b6912225d23d9fa70bb371d1409bc9113d08d790d498e2d26b15bb00774a08d5e1128d8ba702b641057b38877c6fe0695bfec8a505e29f8c20435bf293e9f68d26e6022fb13c1e34f55953d72e1d4f8fca99c1fb3711436d46426ebc9c749af68e49075a40cd0e0e4a732ca600ce770498f0218a3e7bdd180ccba9847c4a12f7f23c68fe0c364753ef10f2c2a2980b9bb1b7adf0090e29bc7b0d0a5cb4ae4b3043"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1}]}, 0x1e8}}, 0x20000000) (async, rerun: 64) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000440)) (async, rerun: 64) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) (async) setregid$auto(0xee01, 0x0) (async) getsockopt$auto_SO_DOMAIN(r0, 0x5, 0x27, &(0x7f0000000280)='![{}:-&*!,@+#+)\x00', &(0x7f0000000300)=0xa66) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000002c0)="174c") (async) getsockopt$auto(r8, 0x11c, 0x800004, 0x0, 0x0) 12.20827674s ago: executing program 1 (id=87): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x2, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0), 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r3 = socket(0xa, 0x3, 0x3a) close$auto(r3) io_uring_register$auto(r3, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) getsockopt$auto_SO_LOCK_FILTER(r0, 0x5196, 0x2c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', &(0x7f0000000100)=0x2) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 11.866751804s ago: executing program 0 (id=89): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)) mmap$auto(0x8004, 0xed83, 0x0, 0xdb, r1, 0x8000) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x47) read$auto(r0, 0x0, 0x1f40) r6 = socket(0x2, 0x801, 0x106) setsockopt$auto(r6, 0x6, 0x12, 0x0, 0xa1) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x5) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 9.515748298s ago: executing program 3 (id=94): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e3, 0x91) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x8800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 7.885838182s ago: executing program 1 (id=97): socket(0x10, 0x2, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\xd3', 0xfdef) (fail_nth: 4) 7.880087668s ago: executing program 3 (id=98): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x2, 0xffffffffffffffff, 0x400000000d, 0x3}, 0x6f4) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) (async) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0xff, 0x400, r1, 0x100000, 0x7fff) (async) prctl$auto(0xff, 0x400, r1, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 7.542870218s ago: executing program 2 (id=100): mmap$auto(0x0, 0x3, 0xfffffffffffffffc, 0x10, 0x401, 0x96a1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x101142, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0x400008, 0x20000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x7, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d638828712, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) pipe$auto(0x0) writev$auto(0x1, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5c}, 0x8) mmap$auto(0xfffffffffffffffa, 0x400008, 0x8, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r2, 0x0, 0x2, 0x0) mmap$auto(0x4, 0x202000d, 0x3, 0x4000eb1, 0xfffffffffffffffa, 0x8005) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ttye8/power/autosuspend_delay_ms\x00', 0x2062, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) write$auto(r0, &(0x7f0000000080)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x572013fe) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f00000001c0)="56b1b4818cd48a1861e96a7e48c52d76896bb35c40e7828f68689dacf6380d6f40748befeb7ee86318ca8c8acdd178a857f42acefb73cd44f71da0424d9484bfce87dae3f35fc41688d73b39d78bc172b19a2ae5ff8efe7e5e642f23b32d57ac07", 0x4) 6.096029945s ago: executing program 2 (id=101): r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000100)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x40) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop3/events_async\x00', 0x66140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r2, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28341, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1) socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(r1, 0xfffffffb, 0x2000098, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) 5.723832994s ago: executing program 3 (id=102): r0 = io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0x841) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) msgrcv$auto(0x2, 0x0, 0xfffffffffffffffa, 0xf, 0xc) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0xfffffc96) readlink$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) readlink$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mincore$auto(0x0, 0x1, 0x0) faccessat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0xa) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r5 = socket(0x0, 0x3, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 5.631413401s ago: executing program 2 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca60923c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd1040749a6baead0620566fcf6eb9bb66bf56ed7568510c72b380fa6efbca845bde90f767270800000001b6e576cf8cc075d464fd0bc4d9fd5351ebe9bf8cf359c7ce26dd259bc611ef87c8a511dd0c05fbd490d5492f24a5224d58db3ac9385a16e737f4ce9a7dfdc1f90a7c67a1e1ed85ea2597c00e2d6f2b07ca61421faae6afb42c11a035d7b01c8c2f29ea821e5438cd53b7b530297d73803c972bad2571fd2f53a2ac8be7ac5cb43c76d45e0085eef2bdc149bcc84f782813dc9f26eb28fca80e90536939547b22cb2ea9178044d121c33323d455766d6370b4fc4f4284e92a8b510314fbb22423b9705bfcbd1d57cc9b4e612e878372bf7e520b98431e") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x4, 0x200) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x10, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) mmap$auto(0xc000000000000000, 0xd48, 0x4, 0x19, r1, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000180)) 5.052269458s ago: executing program 1 (id=104): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) socket(0xa, 0x2, 0x3a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyz9\x00', 0x600882, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e3, 0x91) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x8800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 3.877015887s ago: executing program 2 (id=105): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x100, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)={0xb3, 0x3, 0x100, 0x7f, "6b873cce473ecd7db344fad94c84a27883d6b100d05c5976217a1cee78a421e8"}) r1 = setfsuid$auto(0xffffffffffffffff) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x3, 0x0, 0x9, 0x70000}) msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000140)={{0x5, r1, r2, 0x7, 0x5, 0xfffffffb, 0x8ae}, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0xfe, 0x9, 0x4, 0x8000000000000001, 0x9, 0xff, 0x800, 0x6, 0x3, @raw=0x81, @raw=0x1}) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000001c0), 0x5c400, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r3, 0x4004550a, &(0x7f0000000200)=0x401000) r4 = socket(0x2a, 0xa, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0\x00'}) r5 = getpid() r6 = pidfd_open$auto(r5, 0xd) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000280)=""/227, 0xe3) ioctl$auto_BLKTRACESETUP2(r6, 0xc0481273, &(0x7f0000000380)={"c60c0534b5b048791cd6021b950e2f3b5f85bf2787886f620e5c6ef1e942f718", 0x0, 0x4, 0x2, 0xe, 0x805, r5}) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x61c3, 0x0) r8 = ioctl$auto_TUNGETVNETHDRSZ2(r6, 0x800454d7, &(0x7f0000000440)=0x1ff) tee$auto(r7, r8, 0x9, 0x2) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), r6) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x340, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1b3, 0x7, 0x0, 0x1, [@nested={0xf8, 0xbe, 0x0, 0x1, [@generic="321c44aef723b0eab688b0959f53708387794943bb18c8f44cf007833b4a9f34c5a688727c2cc3be132f1e949bf11052cd4bcc6c53b10b84820054d7214fc5294f886bd8a3ae04ec6a383596227990c874ca96df7f7cfed33c9ba84068985f77b15e1ce0b21d4d9e33caa7707dc33b28740dcfc91fd3933d2fc1d8ff9babd222f27d692fa9af4cb64b2a76ad496f4ad4e23a7278f022330bae448f757896b1114e6d4a9b17de3f87e4de408cc5c96e55a6a9d17d44a5a282fe48cd2d6ea79cad5b33a1e3b03c44d7da7be9fc70a1ca82f0f71d37a1b07e8bcd38581f", @typed={0x16, 0x6a, 0x0, 0x0, @binary="9e81e781de9e3722c456809c3183ba671da5"}]}, @generic="1259fe521dc1c0987fb0ef5ca82d0a5b8713d0f826c3da4d5a78e9c2f25fdb777dec5a349f3ee981062c485a0aef20d7e854ad01f0766b536a1079457ea9016d3e76213ca8e8fa0116c8b0bd8315980e67ab093120ed07dc143eab04a7ca9e354ef16115915d9deaa71ced81317527cb8722717ab78219801e70b0e2fb7d5b997cdd533daaf8f5cedd34505b1b9b0e546c4b3fbe7cf1abb035d5d0f8b937f197e06ada642b243ee4e2239d4ec591c6cf32584b0c9ea719"]}, @TIPC_NLA_LINK={0x175, 0x4, 0x0, 0x1, [@generic="ef598cde5ce0844ce2a8a33623f89c6eeed98b459fa672ded51a91ce0cfa399b573963d18c87149ab25227a4ac73ee6bfb9ba2d82d8b35b443b8e2211e154f0456fa79f76e87eb9331e6f1528a381d9470bb374fb41f831f694264266be4436bc75b2d9b954b13319ea74342a0fd87d4a5869fe1", @generic="27007f1cba00f4e43aea6ed7c1438745cf4b3743cbaa4a6926298ba39997a7b5e4d50fbe4d8cef9f5947068b5bf3e8a89e9c7c67af2e8c2114e2f067ba566182652026f2bc2246d8fe9947b4e62f8ee6a0ad1c108002b04749c8ec2de9d7c0aa4ccdef2df979aaa407e6f71a4f2b28b42741d2af66996d84ced0165d69ada1c7cc7e4d7a83140024ada68250a6ea3f684e890a7fc54835d6b03e0f2c201b8ca25c4c7d5476581575069e9789d7fbebd1e88c1f89dba3ef35ab14485c97dd3bcca4102be9d9b6fae138061279e1601269754008825077c4bf20829b9f1b7a6ccfb8c09f8e8dffe66cbe7720f77c278f9b6d", @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x9}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x8080}, 0x20000014) r10 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sg1\x00', 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000940), r8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r12, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x6}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x88}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r13 = pipe2$auto(&(0x7f0000000a40)=r7, 0x6) madvise$auto(0x3ff, 0x5, 0xf) setsockopt$auto_SO_PASSCRED(r10, 0x2, 0x10, &(0x7f0000000a80)='nl802154\x00', 0x3) vmsplice$auto(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)="dae0cc8b7e22c1c20179b08633c8389f47c0b16b5e5e857f072bf632ca2843185739ae790f7afcfcfeb9b26164d6b1859b545a9702659723996e7187ada7f029e2f8339a063a98343bfe36be7898e77efa9f95f6ab1dfd4f29dabd928b003d6a2cc9a15e5013601915f45edde6a1bf6c64db98dd71d23f163b78d190c8ac6aff3825c1570ff66dcf96e8619d3b57062728630d1f", 0x8}, 0x0, 0x0) socketpair$auto(0x2, 0x101, 0x4, &(0x7f0000000bc0)=0x9) getsockopt$auto_SO_COOKIE(r13, 0xd187, 0x39, &(0x7f0000000c00)='/dev/snd/timer\x00', &(0x7f0000000c40)=0xfc4) setsockopt$auto_SO_ERROR(r3, 0x10000, 0x4, &(0x7f0000000c80)='/dev/raw-gadget\x00', 0x0) getsockopt$auto_SO_REUSEADDR(r6, 0xa, 0x2, &(0x7f0000000cc0)='#\x00', &(0x7f0000000d00)=0x9) 3.805239s ago: executing program 1 (id=106): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x100480, 0x3f) ioctl$auto_TIOCGICOUNT2(r0, 0x545d, &(0x7f0000000680)) 3.459804539s ago: executing program 0 (id=107): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x100480, 0x0) ioctl$auto_TIOCGICOUNT2(r0, 0x5451, &(0x7f0000000680)) 3.103628566s ago: executing program 3 (id=108): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/max_sg_segs\x00', 0x183080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/198, 0xffffffffffffff15) 1.875978494s ago: executing program 1 (id=109): pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) mmap$auto(0x0, 0x4020009, 0x2, 0xeb1, 0x401, 0x8000) r0 = memfd_create$auto(0x0, 0x4) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200e1, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x2) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) setsockopt$auto(r0, 0xc, 0xc56e, 0x0, 0x5) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000100)="e3e3231a9a4c4bfd4c9294cd69862ad3bc32f0a51ffaa31c190fbd1a5e0b6f5b7eff405cb6e16a6c823e885b08f2f268dad2b87bdbdd000ccd13f18ab2aafc152f17496e21fd", 0x57, &(0x7f0000000280)="6df302bc83852a0601870532d4c1e89a54dda9928c656f50d00d4b709ef6c3fc3daefbd8e7e55967996f03e4825a77b4cceac2026c3ba5ba7ee3088a06ec77d87abe19bdc68afa9ab159d396da8eda70fca4d8da9fafd6d314948c712433ee0d2feb0c", 0x4, &(0x7f0000000440)="56aad404b68e6f65c93d85e14ec4a0a6b67264db531d8d5ca2ba613d8919b01e78bf3de8bb48ba3fe75ca90a314d628990518daceb0e18638c9edadb23fdeb33ebe8a605873ff89e2ae1978855d528483b727ee32e820e81136ddb1591e38b3cce4cfe56ea1e9bf3272c0333fea18eb7210105d8210dea057d096230615deea2ba26e60c6b77b4fd592848312f5a914faadd19823313279ff590c7170638e3151fd662dc340e5bb19e063435ba4bdc0d9bfb3446cd71eba3d0", &(0x7f0000000500)=0xa}, {[0xfff, 0x5, 0x1ff, 0xffffff80]}, 0x9, 0xfffffffb, &(0x7f0000000540)="e858bb67de5cebe78d4f0c2064795d2b8415e1db3a4a81a703911f805ff75a4de427b05c3783f9958f121da8070960959739293376b4e3a5217418ac9a7e83cae664a830e3ced9168e513d94a8ba0c8f7f2868e12c55c34e92cbd8535aee71984d871376cc08cb91857e77c5693293b91f74a119"}) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) prctl$auto(0x8, 0x674, 0x0, 0x6, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x18bd01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x80002, 0x73) 1.873531317s ago: executing program 2 (id=110): poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x7) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) (fail_nth: 4) write$auto(0x1, 0x0, 0x7ffbfffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, 0x0, 0x8346, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) mount$auto(&(0x7f00000000c0)='veth1_vlan\x00', 0x0, 0x0, 0x19b7f249, 0x0) 1.563226327s ago: executing program 3 (id=111): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC\x00\x00\x00\x00\x00\x00\x00\x00\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7 %\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7\xff\x7f\a\xd0\x83{_>/\xff', 0x280) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 230.753461ms ago: executing program 3 (id=112): mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 2 (id=113): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyz9\x00', 0x600882, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e3, 0x91) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x8800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 92.296094][ T5617] cgroup: Unknown subsys name 'net' [ 92.412940][ T5617] cgroup: Unknown subsys name 'cpuset' [ 92.423138][ T5617] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.221854][ T5617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.268235][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.277003][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.289606][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.296776][ T5646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.305735][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.307209][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.315251][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.329516][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.339358][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.348140][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.355624][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.364614][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.365037][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.375274][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.385516][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.394618][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.402540][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.411692][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.419980][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.428847][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.201682][ T42] cfg80211: failed to load regulatory.db [ 98.030378][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.038842][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.046563][ T5634] bridge_slave_0: entered allmulticast mode [ 98.055698][ T5634] bridge_slave_0: entered promiscuous mode [ 98.084245][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.092087][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.099873][ T5634] bridge_slave_1: entered allmulticast mode [ 98.108008][ T5634] bridge_slave_1: entered promiscuous mode [ 98.227368][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.263821][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.284173][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.292377][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.299809][ T5633] bridge_slave_0: entered allmulticast mode [ 98.307501][ T5633] bridge_slave_0: entered promiscuous mode [ 98.346508][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.354062][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.362053][ T5633] bridge_slave_1: entered allmulticast mode [ 98.369740][ T5633] bridge_slave_1: entered promiscuous mode [ 98.434280][ T5634] team0: Port device team_slave_0 added [ 98.443553][ T5634] team0: Port device team_slave_1 added [ 98.479498][ T4947] Bluetooth: hci0: command tx timeout [ 98.479933][ T5636] Bluetooth: hci1: command tx timeout [ 98.492037][ T5648] Bluetooth: hci2: command tx timeout [ 98.499211][ T5644] Bluetooth: hci3: command tx timeout [ 98.539509][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.549116][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.556552][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.563905][ T5632] bridge_slave_0: entered allmulticast mode [ 98.571846][ T5632] bridge_slave_0: entered promiscuous mode [ 98.581293][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.588406][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.614487][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.641035][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.650741][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.658000][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.665526][ T5632] bridge_slave_1: entered allmulticast mode [ 98.673211][ T5632] bridge_slave_1: entered promiscuous mode [ 98.680974][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.687957][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.714134][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.730436][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.737699][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.745097][ T5631] bridge_slave_0: entered allmulticast mode [ 98.752574][ T5631] bridge_slave_0: entered promiscuous mode [ 98.792331][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.800549][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.807815][ T5631] bridge_slave_1: entered allmulticast mode [ 98.815560][ T5631] bridge_slave_1: entered promiscuous mode [ 98.850967][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.879461][ T5633] team0: Port device team_slave_0 added [ 98.888770][ T5633] team0: Port device team_slave_1 added [ 98.896807][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.968911][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.003750][ T5632] team0: Port device team_slave_0 added [ 99.012724][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.027979][ T5634] hsr_slave_0: entered promiscuous mode [ 99.034794][ T5634] hsr_slave_1: entered promiscuous mode [ 99.042518][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.049707][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.076051][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.089806][ T5632] team0: Port device team_slave_1 added [ 99.118465][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.125736][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.151869][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.188266][ T5631] team0: Port device team_slave_0 added [ 99.197303][ T5631] team0: Port device team_slave_1 added [ 99.222319][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.229481][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.255612][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.299745][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.306846][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.333062][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.352429][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.359603][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.385751][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.421021][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.428090][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.454620][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.518483][ T5633] hsr_slave_0: entered promiscuous mode [ 99.525052][ T5633] hsr_slave_1: entered promiscuous mode [ 99.531903][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 99.537717][ T5633] Cannot create hsr debugfs directory [ 99.571683][ T5632] hsr_slave_0: entered promiscuous mode [ 99.578124][ T5632] hsr_slave_1: entered promiscuous mode [ 99.584731][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 99.591016][ T5632] Cannot create hsr debugfs directory [ 99.660904][ T5631] hsr_slave_0: entered promiscuous mode [ 99.667330][ T5631] hsr_slave_1: entered promiscuous mode [ 99.674180][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 99.680029][ T5631] Cannot create hsr debugfs directory [ 100.116507][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.134609][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.142945][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.157498][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.165866][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.179914][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.188227][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.199367][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.283754][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.294704][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.303157][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.313826][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.329490][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.342025][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.352614][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.362410][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.475500][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.486594][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.494863][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.506243][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.523213][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.534495][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.550419][ T5636] Bluetooth: hci2: command tx timeout [ 100.550654][ T4947] Bluetooth: hci1: command tx timeout [ 100.556792][ T5648] Bluetooth: hci0: command tx timeout [ 100.561354][ T5644] Bluetooth: hci3: command tx timeout [ 100.575276][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.587938][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.693144][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.705451][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.722751][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.733981][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.747812][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.757452][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.765827][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.777003][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.791377][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.862799][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.891797][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.899312][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.918291][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.937776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.944967][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.031432][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.050227][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.077176][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.084458][ T3280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.113051][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.120292][ T3280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.160001][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.175718][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.183049][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.234325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.241596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.305566][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.405111][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.454644][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.461928][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.522132][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.529365][ T3280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.342831][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.510175][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.556205][ T5634] veth0_vlan: entered promiscuous mode [ 102.610092][ T5634] veth1_vlan: entered promiscuous mode [ 102.632712][ T5648] Bluetooth: hci2: command tx timeout [ 102.634388][ T5636] Bluetooth: hci1: command tx timeout [ 102.638278][ T5648] Bluetooth: hci3: command tx timeout [ 102.643999][ T4947] Bluetooth: hci0: command tx timeout [ 102.671368][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.728513][ T5633] veth0_vlan: entered promiscuous mode [ 102.754782][ T5633] veth1_vlan: entered promiscuous mode [ 102.810540][ T5634] veth0_macvtap: entered promiscuous mode [ 102.830691][ T5634] veth1_macvtap: entered promiscuous mode [ 102.844252][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.900045][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.912574][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.931645][ T5633] veth0_macvtap: entered promiscuous mode [ 102.954305][ T3280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.963953][ T3280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.974536][ T5631] veth0_vlan: entered promiscuous mode [ 102.985629][ T3280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.994601][ T3280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.011446][ T5633] veth1_macvtap: entered promiscuous mode [ 103.042836][ T5631] veth1_vlan: entered promiscuous mode [ 103.124424][ T5632] veth0_vlan: entered promiscuous mode [ 103.139254][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.163759][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.214553][ T5632] veth1_vlan: entered promiscuous mode [ 103.222787][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.232031][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.245986][ T3280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.256361][ T3280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.276533][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.287353][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.361862][ T5631] veth0_macvtap: entered promiscuous mode [ 103.375735][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.384970][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.404473][ T5631] veth1_macvtap: entered promiscuous mode [ 103.496817][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.522069][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.532034][ T5632] veth0_macvtap: entered promiscuous mode [ 103.553273][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.583214][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.630583][ T5632] veth1_macvtap: entered promiscuous mode [ 103.677015][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.702802][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.712652][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.720584][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.732755][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.749955][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.785663][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.797811][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.845306][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.897229][ T3326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.918783][ T3326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.947942][ T3326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.969980][ T3326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.184387][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.213942][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.335905][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.355086][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.466672][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.496520][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.709866][ T4947] Bluetooth: hci3: command tx timeout [ 104.715384][ T5636] Bluetooth: hci2: command tx timeout [ 104.720888][ T5644] Bluetooth: hci0: command tx timeout [ 104.720921][ T5648] Bluetooth: hci1: command tx timeout [ 104.731892][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.753108][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.701396][ T5806] syz.0.1 (5806) used greatest stack depth: 18992 bytes left [ 106.579677][ T5821] ubi0: attaching mtd0 [ 106.614350][ T5821] ubi0: scanning is finished [ 106.639348][ T5821] ubi0: empty MTD device detected [ 107.183997][ T5821] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 107.201819][ T5821] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 107.225355][ T5821] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 107.248383][ T5821] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 107.339154][ T5821] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 107.423086][ T5821] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 107.638800][ T5821] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3658594891 [ 107.698561][ T5821] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 107.901184][ T5835] ubi0: background thread "ubi_bgt0d" started, PID 5835 [ 108.574002][ T5851] ubi: mtd0 is already attached to ubi0 [ 108.738945][ T5855] ubi0: detaching mtd0 [ 108.876117][ T5855] ubi0: mtd0 is detached [ 110.238280][ T5863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.267417][ T5863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.367123][ T5863] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.405356][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.424904][ T5863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.473584][ T5863] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.516604][ T5863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.532044][ T5863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.578918][ T5863] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.626639][ T5863] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.645919][ T5863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.701074][ T5863] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.589738][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.475422][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.550606][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.631693][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.680993][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.558819][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.628732][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.708743][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.753334][ T5648] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.628939][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.710794][ T5648] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.789154][ T5648] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.169604][ T5944] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.246038][ T5969] ubi0: attaching mtd0 [ 118.433847][ T5969] ubi0: scanning is finished [ 119.004045][ T5975] smpboot: CPU 1 is now offline [ 119.044253][ T5969] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 119.307883][ T5969] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 119.619832][ T5969] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 119.635088][ T5986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.896248][ T5969] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 120.190175][ T5969] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 120.422506][ T5969] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 120.685089][ T5969] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3658594891 [ 121.029133][ T5969] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 121.373090][ T5980] ubi0: background thread "ubi_bgt0d" started, PID 5980 [ 127.984104][ T6048] FAULT_INJECTION: forcing a failure. [ 127.984104][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.152084][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 128.152115][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.152135][ T6048] Call Trace: [ 128.152142][ T6048] [ 128.152151][ T6048] dump_stack_lvl+0x100/0x190 [ 128.152184][ T6048] should_fail_ex.cold+0x5/0xa [ 128.152213][ T6048] _copy_from_user+0x2e/0xd0 [ 128.152237][ T6048] ip_tunnel_parm_from_user+0xa5/0x370 [ 128.152279][ T6048] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 128.152328][ T6048] ip_tunnel_siocdevprivate+0xa1/0x1b0 [ 128.152364][ T6048] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 128.152408][ T6048] ? netdev_name_node_lookup+0x107/0x150 [ 128.152450][ T6048] dev_ifsioc+0xc2f/0x1f10 [ 128.152477][ T6048] ? __pfx_dev_ifsioc+0x10/0x10 [ 128.152499][ T6048] ? __pfx___mutex_lock+0x10/0x10 [ 128.152546][ T6048] ? dev_load+0x8e/0x240 [ 128.152566][ T6048] ? dev_load+0x8e/0x240 [ 128.152595][ T6048] dev_ioctl+0x70e/0x1070 [ 128.152621][ T6048] sock_ioctl+0x494/0x6b0 [ 128.152657][ T6048] ? __pfx_sock_ioctl+0x10/0x10 [ 128.152689][ T6048] ? hook_file_ioctl_common+0x149/0x410 [ 128.152721][ T6048] ? __fget_files+0x21f/0x3d0 [ 128.152753][ T6048] ? __pfx_sock_ioctl+0x10/0x10 [ 128.152789][ T6048] __x64_sys_ioctl+0x18e/0x210 [ 128.152814][ T6048] do_syscall_64+0x10b/0xf80 [ 128.152848][ T6048] ? clear_bhb_loop+0x40/0x90 [ 128.152875][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.152899][ T6048] RIP: 0033:0x7ff12d79ce59 [ 128.152921][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.152942][ T6048] RSP: 002b:00007ff12e65c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.152968][ T6048] RAX: ffffffffffffffda RBX: 00007ff12da15fa0 RCX: 00007ff12d79ce59 [ 128.152983][ T6048] RDX: 0000200000000000 RSI: 00000000000089fc RDI: 0000000000000006 [ 128.152997][ T6048] RBP: 00007ff12e65c090 R08: 0000000000000000 R09: 0000000000000000 [ 128.153010][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.153023][ T6048] R13: 00007ff12da16038 R14: 00007ff12da15fa0 R15: 00007ffcc4862378 [ 128.153052][ T6048] [ 132.698199][ T6077] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 132.951038][ T5648] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 133.039710][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051971][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.839175][ T6089] FAULT_INJECTION: forcing a failure. [ 134.839175][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.614712][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(full) [ 135.614743][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.614757][ T6089] Call Trace: [ 135.614765][ T6089] [ 135.614773][ T6089] dump_stack_lvl+0x100/0x190 [ 135.614803][ T6089] should_fail_ex.cold+0x5/0xa [ 135.614831][ T6089] _copy_from_user+0x2e/0xd0 [ 135.614855][ T6089] kstrtouint_from_user+0xd6/0x1d0 [ 135.614886][ T6089] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 135.614915][ T6089] ? __lock_acquire+0x4a5/0x2630 [ 135.614943][ T6089] ? lock_acquire+0x1b1/0x370 [ 135.614969][ T6089] proc_fail_nth_write+0x83/0x220 [ 135.615015][ T6089] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.615060][ T6089] vfs_write+0x2aa/0x1070 [ 135.615088][ T6089] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.615128][ T6089] ? __pfx_vfs_write+0x10/0x10 [ 135.615154][ T6089] ? __fget_files+0x215/0x3d0 [ 135.615187][ T6089] ? __fget_files+0x21f/0x3d0 [ 135.615222][ T6089] ksys_write+0x12a/0x250 [ 135.615248][ T6089] ? __pfx_ksys_write+0x10/0x10 [ 135.615277][ T6089] ? rcu_is_watching+0x12/0xc0 [ 135.615309][ T6089] do_syscall_64+0x10b/0xf80 [ 135.615343][ T6089] ? clear_bhb_loop+0x40/0x90 [ 135.615374][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.615398][ T6089] RIP: 0033:0x7fa69275d68e [ 135.615416][ T6089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.615438][ T6089] RSP: 002b:00007fa6909d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.615459][ T6089] RAX: ffffffffffffffda RBX: 00007fa6909d56c0 RCX: 00007fa69275d68e [ 135.615474][ T6089] RDX: 0000000000000001 RSI: 00007fa6909d50a0 RDI: 0000000000000004 [ 135.615488][ T6089] RBP: 00007fa6909d5090 R08: 0000000000000000 R09: 0000000000000000 [ 135.615501][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.615514][ T6089] R13: 00007fa692a16128 R14: 00007fa692a16090 R15: 00007fff27927758 [ 135.615543][ T6089] [ 138.179864][ T6084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.108369][ T6084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.732547][ T6084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.183003][ T6114] ubi: mtd0 is already attached to ubi0 [ 140.275484][ T6115] FAULT_INJECTION: forcing a failure. [ 140.275484][ T6115] name failslab, interval 1, probability 0, space 0, times 1 [ 140.381378][ T6114] ubi0: detaching mtd0 [ 140.596087][ T6114] ubi0: mtd0 is detached [ 140.642294][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 140.642324][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.642338][ T6115] Call Trace: [ 140.642354][ T6115] [ 140.642362][ T6115] dump_stack_lvl+0x100/0x190 [ 140.642391][ T6115] should_fail_ex.cold+0x5/0xa [ 140.642420][ T6115] ? sk_prot_alloc+0x10b/0x2a0 [ 140.642450][ T6115] should_failslab+0xc2/0x120 [ 140.642477][ T6115] __kmalloc_noprof+0xe0/0x850 [ 140.642503][ T6115] sk_prot_alloc+0x10b/0x2a0 [ 140.642537][ T6115] sk_alloc+0x36/0xe80 [ 140.642561][ T6115] __netlink_create+0x5e/0x2c0 [ 140.642588][ T6115] ? __wake_up+0x3f/0x60 [ 140.642623][ T6115] netlink_create+0x29b/0x610 [ 140.642651][ T6115] ? __pfx_genl_bind+0x10/0x10 [ 140.642683][ T6115] ? __pfx_genl_unbind+0x10/0x10 [ 140.642716][ T6115] ? __pfx_genl_release+0x10/0x10 [ 140.642754][ T6115] __sock_create+0x339/0x860 [ 140.642793][ T6115] __sys_socket+0x14d/0x260 [ 140.642826][ T6115] ? exc_page_fault+0x6f/0xd0 [ 140.642859][ T6115] ? __pfx___sys_socket+0x10/0x10 [ 140.642901][ T6115] __x64_sys_socket+0x72/0xb0 [ 140.642934][ T6115] ? lockdep_hardirqs_on+0x78/0x100 [ 140.642968][ T6115] do_syscall_64+0x10b/0xf80 [ 140.643001][ T6115] ? clear_bhb_loop+0x40/0x90 [ 140.643032][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.643056][ T6115] RIP: 0033:0x7f7bf6b9e6c7 [ 140.643074][ T6115] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.643096][ T6115] RSP: 002b:00007f7bf79adf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 140.643117][ T6115] RAX: ffffffffffffffda RBX: 00007f7bf6e16090 RCX: 00007f7bf6b9e6c7 [ 140.643132][ T6115] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 140.643146][ T6115] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 140.643159][ T6115] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 140.643172][ T6115] R13: 00007f7bf6e16128 R14: 00007f7bf6e16090 R15: 00007ffd3296a918 [ 140.643200][ T6115] [ 140.643607][ T6084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.227550][ T6132] ubi0: attaching mtd0 [ 142.357261][ T6135] FAULT_INJECTION: forcing a failure. [ 142.357261][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 142.515942][ T6132] ubi0: scanning is finished [ 142.738352][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 142.738419][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.738434][ T6135] Call Trace: [ 142.738448][ T6135] [ 142.738457][ T6135] dump_stack_lvl+0x100/0x190 [ 142.738531][ T6135] should_fail_ex.cold+0x5/0xa [ 142.738576][ T6135] should_failslab+0xc2/0x120 [ 142.738603][ T6135] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 142.738640][ T6135] ? vm_area_alloc+0x1f/0x160 [ 142.738673][ T6135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.738711][ T6135] vm_area_alloc+0x1f/0x160 [ 142.738744][ T6135] __mmap_region+0x104d/0x2da0 [ 142.738784][ T6135] ? __pfx___mmap_region+0x10/0x10 [ 142.738825][ T6135] ? find_held_lock+0x2b/0x80 [ 142.738854][ T6135] ? process_measurement+0x4c8/0x2350 [ 142.738888][ T6135] ? process_measurement+0x4c8/0x2350 [ 142.738933][ T6135] ? process_measurement+0x1f4/0x2350 [ 142.738971][ T6135] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 142.738996][ T6135] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 142.739035][ T6135] ? __lock_acquire+0x4a5/0x2630 [ 142.739070][ T6135] ? find_held_lock+0x2b/0x80 [ 142.739099][ T6135] ? is_bpf_text_address+0x8a/0x1a0 [ 142.739180][ T6135] mmap_region+0x35d/0x620 [ 142.739202][ T6135] ? rcu_is_watching+0x12/0xc0 [ 142.739230][ T6135] ? __pfx_mmap_region+0x10/0x10 [ 142.739255][ T6135] ? cap_mmap_addr+0x4b/0x120 [ 142.739288][ T6135] ? bpf_lsm_mmap_addr+0x9/0x30 [ 142.739309][ T6135] ? security_mmap_addr+0x71/0x1e0 [ 142.739336][ T6135] ? __get_unmapped_area+0x255/0x3e0 [ 142.739370][ T6135] do_mmap+0xc63/0x12f0 [ 142.739403][ T6135] ? __pfx_do_mmap+0x10/0x10 [ 142.739431][ T6135] ? __pfx_down_write_killable+0x10/0x10 [ 142.739460][ T6135] vm_mmap_pgoff+0x29e/0x470 [ 142.739494][ T6135] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 142.739523][ T6135] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 142.739560][ T6135] ? __fget_files+0x215/0x3d0 [ 142.739588][ T6135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.739629][ T6135] ksys_mmap_pgoff+0xe4/0x610 [ 142.739659][ T6135] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 142.739684][ T6135] ? fput+0x79/0x100 [ 142.739715][ T6135] ? ksys_write+0x1ac/0x250 [ 142.739740][ T6135] ? __pfx_ksys_write+0x10/0x10 [ 142.739769][ T6135] __x64_sys_mmap+0x125/0x190 [ 142.739798][ T6135] do_syscall_64+0x10b/0xf80 [ 142.739832][ T6135] ? clear_bhb_loop+0x40/0x90 [ 142.739861][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.739884][ T6135] RIP: 0033:0x7f7bf6b9ce59 [ 142.739902][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.739923][ T6135] RSP: 002b:00007f7bf798e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 142.739944][ T6135] RAX: ffffffffffffffda RBX: 00007f7bf6e16180 RCX: 00007f7bf6b9ce59 [ 142.739959][ T6135] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 142.739972][ T6135] RBP: 00007f7bf798e090 R08: fffffffffffffffa R09: 0000000000008000 [ 142.739986][ T6135] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 142.739999][ T6135] R13: 00007f7bf6e16218 R14: 00007f7bf6e16180 R15: 00007ffd3296a918 [ 142.740027][ T6135] [ 145.777645][ T6132] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 145.916642][ T6132] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 146.065786][ T6132] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 146.220497][ T6132] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 146.397094][ T6132] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 146.588384][ T6132] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 146.779397][ T6132] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3658594891 [ 146.960454][ T6132] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 147.115626][ T6159] zswap: compressor not available [ 147.150318][ T6152] ubi0: background thread "ubi_bgt0d" started, PID 6152 [ 150.234979][ T5836] syz.2.7 (5836) used greatest stack depth: 18624 bytes left [ 151.370211][ T6191] FAULT_INJECTION: forcing a failure. [ 151.370211][ T6191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.442015][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 151.442046][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.442059][ T6191] Call Trace: [ 151.442067][ T6191] [ 151.442075][ T6191] dump_stack_lvl+0x100/0x190 [ 151.442105][ T6191] should_fail_ex.cold+0x5/0xa [ 151.442134][ T6191] _copy_to_user+0x32/0xd0 [ 151.442159][ T6191] simple_read_from_buffer+0xcb/0x170 [ 151.442188][ T6191] proc_fail_nth_read+0x1af/0x230 [ 151.442226][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.442265][ T6191] ? rw_verify_area+0xce/0x6d0 [ 151.442288][ T6191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.442325][ T6191] vfs_read+0x1e4/0xb30 [ 151.442354][ T6191] ? __pfx_vfs_read+0x10/0x10 [ 151.442379][ T6191] ? __fget_files+0x215/0x3d0 [ 151.442431][ T6191] ? __fget_files+0x21f/0x3d0 [ 151.442466][ T6191] ksys_read+0x12a/0x250 [ 151.442491][ T6191] ? __pfx_ksys_read+0x10/0x10 [ 151.442520][ T6191] ? rcu_is_watching+0x12/0xc0 [ 151.442552][ T6191] do_syscall_64+0x10b/0xf80 [ 151.442586][ T6191] ? clear_bhb_loop+0x40/0x90 [ 151.442614][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.442637][ T6191] RIP: 0033:0x7ff12d75d68e [ 151.442655][ T6191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.442677][ T6191] RSP: 002b:00007ff12e65bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.442698][ T6191] RAX: ffffffffffffffda RBX: 00007ff12e65c6c0 RCX: 00007ff12d75d68e [ 151.442713][ T6191] RDX: 000000000000000f RSI: 00007ff12e65c0a0 RDI: 0000000000000007 [ 151.442726][ T6191] RBP: 00007ff12e65c090 R08: 0000000000000000 R09: 0000000000000000 [ 151.442740][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.442753][ T6191] R13: 00007ff12da16038 R14: 00007ff12da15fa0 R15: 00007ffcc4862378 [ 151.442781][ T6191] [ 152.094829][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 152.114048][ T6198] netlink: 28905 bytes leftover after parsing attributes in process `syz.2.85'. [ 153.066434][ T6209] ubi: mtd0 is already attached to ubi0 [ 153.199302][ T6212] netlink: 342 bytes leftover after parsing attributes in process `syz.2.90'. [ 153.316312][ T6217] FAULT_INJECTION: forcing a failure. [ 153.316312][ T6217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.382136][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 153.382167][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.382180][ T6217] Call Trace: [ 153.382188][ T6217] [ 153.382196][ T6217] dump_stack_lvl+0x100/0x190 [ 153.382241][ T6217] should_fail_ex.cold+0x5/0xa [ 153.382270][ T6217] _copy_to_user+0x32/0xd0 [ 153.382294][ T6217] simple_read_from_buffer+0xcb/0x170 [ 153.382324][ T6217] proc_fail_nth_read+0x1af/0x230 [ 153.382362][ T6217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.382401][ T6217] ? rw_verify_area+0xce/0x6d0 [ 153.382423][ T6217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.382460][ T6217] vfs_read+0x1e4/0xb30 [ 153.382492][ T6217] ? __pfx_vfs_read+0x10/0x10 [ 153.382517][ T6217] ? __fget_files+0x215/0x3d0 [ 153.382557][ T6217] ? __fget_files+0x21f/0x3d0 [ 153.382592][ T6217] ksys_read+0x12a/0x250 [ 153.382617][ T6217] ? __pfx_ksys_read+0x10/0x10 [ 153.382645][ T6217] ? rcu_is_watching+0x12/0xc0 [ 153.382677][ T6217] do_syscall_64+0x10b/0xf80 [ 153.382711][ T6217] ? clear_bhb_loop+0x40/0x90 [ 153.382738][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.382761][ T6217] RIP: 0033:0x7ff12d75d68e [ 153.382779][ T6217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.382800][ T6217] RSP: 002b:00007ff12e65bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.382821][ T6217] RAX: ffffffffffffffda RBX: 00007ff12e65c6c0 RCX: 00007ff12d75d68e [ 153.382836][ T6217] RDX: 000000000000000f RSI: 00007ff12e65c0a0 RDI: 0000000000000004 [ 153.382849][ T6217] RBP: 00007ff12e65c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.382863][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.382875][ T6217] R13: 00007ff12da16038 R14: 00007ff12da15fa0 R15: 00007ffcc4862378 [ 153.382904][ T6217] [ 156.215436][ T6241] FAULT_INJECTION: forcing a failure. [ 156.215436][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 156.276738][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 156.276782][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.276795][ T6241] Call Trace: [ 156.276802][ T6241] [ 156.276810][ T6241] dump_stack_lvl+0x100/0x190 [ 156.276840][ T6241] should_fail_ex.cold+0x5/0xa [ 156.276867][ T6241] should_failslab+0xc2/0x120 [ 156.276894][ T6241] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 156.276929][ T6241] ? skb_clone+0x190/0x400 [ 156.276958][ T6241] skb_clone+0x190/0x400 [ 156.276984][ T6241] netlink_deliver_tap+0xaed/0xcc0 [ 156.277020][ T6241] netlink_unicast+0x62b/0x850 [ 156.277066][ T6241] ? __pfx_netlink_unicast+0x10/0x10 [ 156.277096][ T6241] ? __build_skb_around+0x278/0x390 [ 156.277131][ T6241] ? is_vmalloc_addr+0x86/0xa0 [ 156.277171][ T6241] netlink_sendmsg+0x8b0/0xda0 [ 156.277208][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.277243][ T6241] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 156.277283][ T6241] sock_write_iter+0x524/0x5a0 [ 156.277314][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.277346][ T6241] ? __pfx_sock_write_iter+0x10/0x10 [ 156.277386][ T6241] ? bpf_lsm_file_permission+0x9/0x10 [ 156.277408][ T6241] ? security_file_permission+0x76/0x210 [ 156.277435][ T6241] ? rw_verify_area+0xce/0x6d0 [ 156.277479][ T6241] vfs_write+0x6ac/0x1070 [ 156.277506][ T6241] ? __pfx_sock_write_iter+0x10/0x10 [ 156.277540][ T6241] ? __pfx_vfs_write+0x10/0x10 [ 156.277564][ T6241] ? find_held_lock+0x2b/0x80 [ 156.277611][ T6241] ksys_write+0x1f8/0x250 [ 156.277637][ T6241] ? __pfx_ksys_write+0x10/0x10 [ 156.277665][ T6241] ? rcu_is_watching+0x12/0xc0 [ 156.277696][ T6241] do_syscall_64+0x10b/0xf80 [ 156.277729][ T6241] ? clear_bhb_loop+0x40/0x90 [ 156.277757][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.277779][ T6241] RIP: 0033:0x7fcef699ce59 [ 156.277797][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.277818][ T6241] RSP: 002b:00007fcef4bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.277838][ T6241] RAX: ffffffffffffffda RBX: 00007fcef6c15fa0 RCX: 00007fcef699ce59 [ 156.277853][ T6241] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 156.277866][ T6241] RBP: 00007fcef4bee090 R08: 0000000000000000 R09: 0000000000000000 [ 156.277880][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.277892][ T6241] R13: 00007fcef6c16038 R14: 00007fcef6c15fa0 R15: 00007ffd0be0c918 [ 156.277921][ T6241] [ 157.105770][ T5648] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 157.114196][ T5648] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 157.302778][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 157.373196][ T6252] FAULT_INJECTION: forcing a failure. [ 157.373196][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 157.436922][ T6254] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.484556][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) [ 157.484586][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.484600][ T6252] Call Trace: [ 157.484607][ T6252] [ 157.484616][ T6252] dump_stack_lvl+0x100/0x190 [ 157.484645][ T6252] should_fail_ex.cold+0x5/0xa [ 157.484674][ T6252] should_failslab+0xc2/0x120 [ 157.484701][ T6252] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 157.484738][ T6252] ? skb_clone+0x190/0x400 [ 157.484768][ T6252] skb_clone+0x190/0x400 [ 157.484795][ T6252] netlink_deliver_tap+0xaed/0xcc0 [ 157.484833][ T6252] netlink_unicast+0x62b/0x850 [ 157.484870][ T6252] ? __pfx_netlink_unicast+0x10/0x10 [ 157.484907][ T6252] ? __build_skb_around+0x278/0x390 [ 157.484944][ T6252] ? is_vmalloc_addr+0x86/0xa0 [ 157.484984][ T6252] netlink_sendmsg+0x8b0/0xda0 [ 157.485022][ T6252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.485058][ T6252] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 157.485100][ T6252] sock_write_iter+0x524/0x5a0 [ 157.485132][ T6252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.485165][ T6252] ? __pfx_sock_write_iter+0x10/0x10 [ 157.485207][ T6252] ? bpf_lsm_file_permission+0x9/0x10 [ 157.485230][ T6252] ? security_file_permission+0x76/0x210 [ 157.485258][ T6252] ? rw_verify_area+0xce/0x6d0 [ 157.485284][ T6252] vfs_write+0x6ac/0x1070 [ 157.485311][ T6252] ? __pfx_sock_write_iter+0x10/0x10 [ 157.485346][ T6252] ? __pfx_vfs_write+0x10/0x10 [ 157.485370][ T6252] ? find_held_lock+0x2b/0x80 [ 157.485418][ T6252] ksys_write+0x1f8/0x250 [ 157.485445][ T6252] ? __pfx_ksys_write+0x10/0x10 [ 157.485473][ T6252] ? rcu_is_watching+0x12/0xc0 [ 157.485505][ T6252] do_syscall_64+0x10b/0xf80 [ 157.485539][ T6252] ? clear_bhb_loop+0x40/0x90 [ 157.485567][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.485595][ T6252] RIP: 0033:0x7fa69279ce59 [ 157.485613][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.485634][ T6252] RSP: 002b:00007fa6909d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.485655][ T6252] RAX: ffffffffffffffda RBX: 00007fa692a16090 RCX: 00007fa69279ce59 [ 157.485670][ T6252] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 157.485683][ T6252] RBP: 00007fa6909d5090 R08: 0000000000000000 R09: 0000000000000000 [ 157.485697][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.485723][ T6252] R13: 00007fa692a16128 R14: 00007fa692a16090 R15: 00007fff27927758 [ 157.485751][ T6252] [ 158.423905][ T6252] netlink: 24481 bytes leftover after parsing attributes in process `syz.1.97'. [ 158.952649][ T6243] Process accounting resumed [ 159.978880][ T6269] process 'syz.2.103' launched './file0' with NULL argv: empty string added [ 161.589468][ T6123] syz.0.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 161.650830][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full) [ 161.650860][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.650873][ T6123] Call Trace: [ 161.650880][ T6123] [ 161.650888][ T6123] dump_stack_lvl+0x100/0x190 [ 161.650924][ T6123] dump_header+0xfb/0x606 [ 161.650950][ T6123] oom_kill_process.cold+0xd/0x330 [ 161.650977][ T6123] out_of_memory+0x340/0x14f0 [ 161.651025][ T6123] ? __pfx_out_of_memory+0x10/0x10 [ 161.651069][ T6123] mem_cgroup_out_of_memory+0xc6/0x130 [ 161.651104][ T6123] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 161.651137][ T6123] ? find_held_lock+0x2b/0x80 [ 161.651172][ T6123] ? do_raw_spin_unlock+0x145/0x1e0 [ 161.651199][ T6123] ? _raw_spin_unlock+0x28/0x50 [ 161.651231][ T6123] try_charge_memcg+0x6e5/0xdf0 [ 161.651263][ T6123] ? __pfx_try_charge_memcg+0x10/0x10 [ 161.651290][ T6123] ? find_held_lock+0x2b/0x80 [ 161.651318][ T6123] ? rcu_read_unlock+0x17/0x60 [ 161.651344][ T6123] ? rcu_read_unlock+0x17/0x60 [ 161.651372][ T6123] ? find_held_lock+0x2b/0x80 [ 161.651401][ T6123] ? rcu_read_unlock+0x17/0x60 [ 161.651435][ T6123] charge_memcg+0x19f/0x210 [ 161.651462][ T6123] __mem_cgroup_charge+0x2b/0x1c0 [ 161.651494][ T6123] shmem_alloc_and_add_folio+0x451/0xd40 [ 161.651539][ T6123] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 161.651579][ T6123] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 161.651608][ T6123] shmem_get_folio_gfp+0x6ab/0x1900 [ 161.651636][ T6123] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 161.651686][ T6123] shmem_write_begin+0x1a4/0x420 [ 161.651719][ T6123] ? __pfx_shmem_write_begin+0x10/0x10 [ 161.651745][ T6123] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 161.651774][ T6123] ? lockdep_hardirqs_on+0x78/0x100 [ 161.651811][ T6123] generic_perform_write+0x292/0xa40 [ 161.651855][ T6123] ? __pfx_generic_perform_write+0x10/0x10 [ 161.651894][ T6123] ? file_update_time_flags+0x373/0x500 [ 161.651941][ T6123] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 161.651968][ T6123] shmem_file_write_iter+0x10e/0x140 [ 161.652010][ T6123] __kernel_write_iter+0x2ac/0x920 [ 161.652040][ T6123] ? __pfx___kernel_write_iter+0x10/0x10 [ 161.652066][ T6123] ? __up_read+0x2c1/0x6e0 [ 161.652094][ T6123] ? dump_user_range+0x65e/0xad0 [ 161.652128][ T6123] ? copy_mc_enhanced_fast_string+0x6/0xf [ 161.652158][ T6123] dump_user_range+0x3f9/0xad0 [ 161.652197][ T6123] ? __pfx_dump_user_range+0x10/0x10 [ 161.652240][ T6123] ? __pfx_writenote+0x10/0x10 [ 161.652282][ T6123] elf_core_dump+0x2d5f/0x3d10 [ 161.652333][ T6123] ? __pfx_elf_core_dump+0x10/0x10 [ 161.652368][ T6123] ? kasan_save_stack+0x3f/0x50 [ 161.652392][ T6123] ? kasan_save_stack+0x30/0x50 [ 161.652414][ T6123] ? __kasan_kmalloc+0xaa/0xb0 [ 161.652435][ T6123] ? __kvmalloc_node_noprof+0x360/0xa00 [ 161.652457][ T6123] ? vfs_coredump+0x22db/0x5770 [ 161.652490][ T6123] ? asm_exc_page_fault+0x26/0x30 [ 161.652516][ T6123] ? 0xffffffffff600000 [ 161.652579][ T6123] ? vfs_coredump+0x29a0/0x5770 [ 161.652610][ T6123] vfs_coredump+0x29a0/0x5770 [ 161.652654][ T6123] ? __pfx_vfs_coredump+0x10/0x10 [ 161.652689][ T6123] ? __lock_acquire+0x4a5/0x2630 [ 161.652722][ T6123] ? lock_acquire+0x1b1/0x370 [ 161.652755][ T6123] ? is_bpf_text_address+0x8a/0x1a0 [ 161.652787][ T6123] ? bpf_ksym_find+0x124/0x1c0 [ 161.652818][ T6123] ? __kernel_text_address+0xd/0x30 [ 161.652841][ T6123] ? unwind_get_return_address+0x59/0xa0 [ 161.652872][ T6123] ? arch_stack_walk+0xa6/0xf0 [ 161.652922][ T6123] ? __sigqueue_free+0xbe/0x2a0 [ 161.652957][ T6123] ? stack_trace_save+0x8e/0xc0 [ 161.653001][ T6123] ? __pfx_stack_trace_save+0x10/0x10 [ 161.653044][ T6123] ? stack_depot_save_flags+0x27/0x9d0 [ 161.653078][ T6123] ? __lock_acquire+0x4a5/0x2630 [ 161.653146][ T6123] ? proc_coredump_connector+0x2d3/0x4f0 [ 161.653188][ T6123] ? __pfx_proc_coredump_connector+0x10/0x10 [ 161.653241][ T6123] ? rcu_is_watching+0x12/0xc0 [ 161.653274][ T6123] get_signal+0x1f2a/0x21e0 [ 161.653314][ T6123] ? __pfx_get_signal+0x10/0x10 [ 161.653343][ T6123] ? find_held_lock+0x2b/0x80 [ 161.653372][ T6123] ? bad_area_access_error+0xab/0x1d0 [ 161.653399][ T6123] ? fixup_vdso_exception+0x2d1/0x370 [ 161.653437][ T6123] arch_do_signal_or_restart+0x91/0x7a0 [ 161.653474][ T6123] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 161.653520][ T6123] ? rcu_is_watching+0x12/0xc0 [ 161.653551][ T6123] irqentry_exit+0x410/0x7e0 [ 161.653589][ T6123] asm_exc_page_fault+0x26/0x30 [ 161.653611][ T6123] RIP: 0033:0x0 [ 161.653626][ T6123] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 161.653636][ T6123] RSP: 002b:0000000000000011 EFLAGS: 00010217 [ 161.653654][ T6123] RAX: 0000000000000000 RBX: 00007f7bf6e16180 RCX: 00007f7bf6b9ce59 [ 161.653668][ T6123] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008 [ 161.653682][ T6123] RBP: 00007f7bf6c32d6f R08: 0000000004000006 R09: 0000000000000000 [ 161.653696][ T6123] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.653710][ T6123] R13: 00007f7bf6e16218 R14: 00007f7bf6e16180 R15: 00007ffd3296a918 [ 161.653729][ T6123] ? 0xffffffff81000000 [ 161.653754][ T6123] [ 162.679491][ T6123] memory: usage 307200kB, limit 307200kB, failcnt 10905 [ 162.698643][ T6123] memory+swap: usage 353228kB, limit 9007199254740988kB, failcnt 0 [ 162.722449][ T6123] kmem: usage 2608kB, limit 9007199254740988kB, failcnt 0 [ 162.742469][ T6123] Memory cgroup stats for /syz0: [ 162.742805][ T6123] cache 311795712 [ 162.771894][ T6123] rss 53248 [ 162.778805][ T6123] rss_huge 0 [ 162.790160][ T6123] shmem 311795712 [ 162.802786][ T6123] mapped_file 105082880 [ 162.815050][ T6123] dirty 0 [ 162.824616][ T6123] writeback 0 [ 162.836256][ T6123] workingset_refault_anon 58 [ 162.849203][ T6123] workingset_refault_file 94 [ 162.867176][ T6123] swap 47132672 [ 162.894862][ T6123] swapcached 51531776 [ 162.915901][ T6123] pgpgin 149295 [ 162.938274][ T6123] pgpgout 73156 [ 162.952512][ T6123] pgfault 40379 [ 162.966605][ T6123] pgmajfault 42 [ 162.983180][ T6123] inactive_anon 293294080 [ 163.008614][ T6123] active_anon 18571264 [ 163.036315][ T6123] inactive_file 0 [ 163.060465][ T6123] active_file 0 [ 163.085071][ T6123] unevictable 0 [ 163.107181][ T6123] hierarchical_memory_limit 314572800 [ 163.136236][ T6123] hierarchical_memsw_limit 9223372036854771712 [ 163.165041][ T6123] total_cache 311795712 [ 163.180902][ T6123] total_rss 53248 [ 163.214399][ T6123] total_rss_huge 0 [ 163.241787][ T6123] total_shmem 311795712 [ 163.266392][ T6123] total_mapped_file 105082880 [ 163.286324][ T6123] total_dirty 0 [ 163.303288][ T6123] total_writeback 0 [ 163.325745][ T6123] total_workingset_refault_anon 58 [ 163.345715][ T6123] total_workingset_refault_file 94 [ 163.367500][ T6123] total_swap 47132672 [ 163.385418][ T6123] total_swapcached 51531776 [ 163.398776][ T6123] total_pgpgin 149295 [ 163.411886][ T6123] total_pgpgout 73156 [ 163.422812][ T6123] total_pgfault 40379 [ 163.435855][ T6123] total_pgmajfault 42 [ 163.449572][ T6123] total_inactive_anon 293294080 [ 163.467281][ T6123] total_active_anon 18571264 [ 163.493756][ T6123] total_inactive_file 0 [ 163.519367][ T6123] total_active_file 0 [ 163.536730][ T6123] total_unevictable 0 [ 163.553259][ T6123] anon_cost 0 [ 163.568290][ T6123] file_cost 0 [ 163.577310][ T6123] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.26,pid=5985,uid=0 [ 163.612934][ T6290] FAULT_INJECTION: forcing a failure. [ 163.612934][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.632178][ T6123] Memory cgroup out of memory: Killed process 5985 (syz.0.26) total-vm:305448kB, anon-rss:1240kB, file-rss:56400kB, shmem-rss:65420kB, UID:0 pgtables:332kB oom_score_adj:1000 [ 163.759564][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 163.759596][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.759610][ T6290] Call Trace: [ 163.759617][ T6290] [ 163.759625][ T6290] dump_stack_lvl+0x100/0x190 [ 163.759656][ T6290] should_fail_ex.cold+0x5/0xa [ 163.759686][ T6290] _copy_from_iter+0x1f4/0x1690 [ 163.759711][ T6290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.759748][ T6290] ? __pfx__copy_from_iter+0x10/0x10 [ 163.759772][ T6290] ? alloc_pages_mpol+0x25a/0x540 [ 163.759801][ T6290] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.759832][ T6290] copy_page_from_iter+0x238/0x300 [ 163.759858][ T6290] anon_pipe_write+0xaf0/0x18c0 [ 163.759898][ T6290] ? __pfx_anon_pipe_write+0x10/0x10 [ 163.759928][ T6290] ? apparmor_file_permission+0x13f/0x1c0 [ 163.759957][ T6290] ? bpf_lsm_file_permission+0x9/0x10 [ 163.759986][ T6290] ? security_file_permission+0x76/0x210 [ 163.760015][ T6290] ? rw_verify_area+0xce/0x6d0 [ 163.760040][ T6290] vfs_write+0x6ac/0x1070 [ 163.760067][ T6290] ? __pfx_anon_pipe_write+0x10/0x10 [ 163.760098][ T6290] ? __pfx_vfs_write+0x10/0x10 [ 163.760122][ T6290] ? find_held_lock+0x2b/0x80 [ 163.760170][ T6290] ksys_write+0x1f8/0x250 [ 163.760196][ T6290] ? __pfx_ksys_write+0x10/0x10 [ 163.760224][ T6290] ? rcu_is_watching+0x12/0xc0 [ 163.760255][ T6290] do_syscall_64+0x10b/0xf80 [ 163.760288][ T6290] ? clear_bhb_loop+0x40/0x90 [ 163.760316][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.760338][ T6290] RIP: 0033:0x7fcef699ce59 [ 163.760356][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.760377][ T6290] RSP: 002b:00007fcef4bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.760398][ T6290] RAX: ffffffffffffffda RBX: 00007fcef6c16090 RCX: 00007fcef699ce59 [ 163.760425][ T6290] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 163.760439][ T6290] RBP: 00007fcef4bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 163.760452][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.760466][ T6290] R13: 00007fcef6c16128 R14: 00007fcef6c16090 R15: 00007ffd0be0c918 [ 163.760495][ T6290] [ 164.914263][ T6294] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 164.947347][ T5634] ------------[ cut here ]------------ [ 164.947891][ T5634] [ 164.947899][ T5634] ====================================================== [ 164.947907][ T5634] WARNING: possible circular locking dependency detected [ 164.947917][ T5634] syzkaller #0 Not tainted [ 164.947928][ T5634] ------------------------------------------------------ [ 164.947936][ T5634] syz-executor/5634 is trying to acquire lock: [ 164.947948][ T5634] ffffffff8e6f1420 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 164.948013][ T5634] [ 164.948013][ T5634] but task is already holding lock: [ 164.948020][ T5634] ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 164.948080][ T5634] [ 164.948080][ T5634] which lock already depends on the new lock. [ 164.948080][ T5634] [ 164.948088][ T5634] [ 164.948088][ T5634] the existing dependency chain (in reverse order) is: [ 164.948096][ T5634] [ 164.948096][ T5634] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 164.948141][ T5634] _raw_spin_lock_nested+0x31/0x40 [ 164.948171][ T5634] raw_spin_rq_lock_nested+0x2c/0x140 [ 164.948203][ T5634] _task_rq_lock+0xcf/0x510 [ 164.948234][ T5634] cgroup_move_task+0x81/0x320 [ 164.948268][ T5634] css_set_move_task+0x285/0x600 [ 164.948290][ T5634] cgroup_post_fork+0x202/0x9b0 [ 164.948325][ T5634] copy_process+0x5b9a/0x7ed0 [ 164.948358][ T5634] kernel_clone+0x12e/0x9c0 [ 164.948389][ T5634] user_mode_thread+0xcc/0x110 [ 164.948422][ T5634] rest_init+0x21/0x260 [ 164.948445][ T5634] start_kernel+0x484/0x490 [ 164.948476][ T5634] x86_64_start_reservations+0x24/0x30 [ 164.948546][ T5634] x86_64_start_kernel+0x12b/0x130 [ 164.948579][ T5634] common_startup_64+0x13e/0x148 [ 164.948609][ T5634] [ 164.948609][ T5634] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 164.948638][ T5634] _raw_spin_lock_irqsave+0x3a/0x60 [ 164.948668][ T5634] try_to_wake_up+0xb5/0x1900 [ 164.948697][ T5634] __wake_up_common+0x135/0x1f0 [ 164.948718][ T5634] __wake_up+0x31/0x60 [ 164.948751][ T5634] tty_port_default_wakeup+0x52/0x70 [ 164.948772][ T5634] serial8250_tx_chars+0x68f/0x860 [ 164.948793][ T5634] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 164.948816][ T5634] serial8250_handle_irq.part.0+0xb4/0x530 [ 164.948839][ T5634] serial8250_default_handle_irq+0xc2/0x290 [ 164.948862][ T5634] serial8250_interrupt+0xf8/0x1c0 [ 164.948888][ T5634] __handle_irq_event_percpu+0x235/0x8c0 [ 164.948924][ T5634] handle_irq_event+0xab/0x1e0 [ 164.948971][ T5634] handle_edge_irq+0x35e/0x960 [ 164.948998][ T5634] __common_interrupt+0xd8/0x2f0 [ 164.949037][ T5634] common_interrupt+0xb9/0xe0 [ 164.949062][ T5634] asm_common_interrupt+0x26/0x40 [ 164.949086][ T5634] debug_lockdep_rcu_enabled+0x26/0x40 [ 164.949123][ T5634] unwind_next_frame+0x3a8/0x2090 [ 164.949156][ T5634] arch_stack_walk+0x94/0xf0 [ 164.949194][ T5634] stack_trace_save+0x8e/0xc0 [ 164.949222][ T5634] kasan_save_stack+0x30/0x50 [ 164.949242][ T5634] kasan_save_track+0x14/0x30 [ 164.949261][ T5634] __kasan_slab_alloc+0x89/0x90 [ 164.949284][ T5634] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 164.949321][ T5634] __alloc_skb+0x140/0x710 [ 164.949341][ T5634] alloc_skb_with_frags+0xdd/0x760 [ 164.949366][ T5634] sock_alloc_send_pskb+0x801/0x980 [ 164.949385][ T5634] unix_dgram_sendmsg+0x3c7/0x1810 [ 164.949404][ T5634] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 164.949424][ T5634] sock_write_iter+0x524/0x5a0 [ 164.949453][ T5634] do_iter_readv_writev+0x6ee/0x920 [ 164.949473][ T5634] vfs_writev+0x360/0xe10 [ 164.949493][ T5634] do_writev+0x28a/0x340 [ 164.949514][ T5634] do_syscall_64+0x10b/0xf80 [ 164.949550][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.949572][ T5634] [ 164.949572][ T5634] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 164.949599][ T5634] _raw_spin_lock_irqsave+0x3a/0x60 [ 164.949626][ T5634] __wake_up+0x1c/0x60 [ 164.949655][ T5634] tty_port_default_wakeup+0x52/0x70 [ 164.949674][ T5634] serial8250_tx_chars+0x68f/0x860 [ 164.949692][ T5634] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 164.949713][ T5634] serial8250_handle_irq.part.0+0xb4/0x530 [ 164.949734][ T5634] serial8250_default_handle_irq+0xc2/0x290 [ 164.949755][ T5634] serial8250_interrupt+0xf8/0x1c0 [ 164.949779][ T5634] __handle_irq_event_percpu+0x235/0x8c0 [ 164.949806][ T5634] handle_irq_event+0xab/0x1e0 [ 164.949832][ T5634] handle_edge_irq+0x35e/0x960 [ 164.949855][ T5634] __common_interrupt+0xd8/0x2f0 [ 164.949888][ T5634] common_interrupt+0xb9/0xe0 [ 164.949910][ T5634] asm_common_interrupt+0x26/0x40 [ 164.949930][ T5634] _raw_spin_unlock_irqrestore+0x31/0x80 [ 164.949959][ T5634] uart_write+0x29d/0xb20 [ 164.949991][ T5634] n_tty_write+0x431/0x11c0 [ 164.950012][ T5634] file_tty_write.isra.0+0x4d2/0x890 [ 164.950044][ T5634] redirected_tty_write+0xd4/0x120 [ 164.950076][ T5634] vfs_write+0x6ac/0x1070 [ 164.950099][ T5634] ksys_write+0x12a/0x250 [ 164.950134][ T5634] do_syscall_64+0x10b/0xf80 [ 164.950164][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.950184][ T5634] [ 164.950184][ T5634] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 164.950209][ T5634] _raw_spin_lock_irqsave+0x3a/0x60 [ 164.950235][ T5634] serial8250_console_write+0x17e/0x1900 [ 164.950258][ T5634] console_flush_one_record+0x790/0xe50 [ 164.950285][ T5634] console_unlock+0x103/0x260 [ 164.950309][ T5634] vprintk_emit+0x407/0x6b0 [ 164.950335][ T5634] _printk+0xcf/0x110 [ 164.950352][ T5634] register_console.cold+0xc0/0x248 [ 164.950373][ T5634] univ8250_console_init+0x6f/0x80 [ 164.950395][ T5634] console_init+0x3f7/0x5e0 [ 164.950412][ T5634] start_kernel+0x30a/0x490 [ 164.950458][ T5634] x86_64_start_reservations+0x24/0x30 [ 164.950489][ T5634] x86_64_start_kernel+0x12b/0x130 [ 164.950518][ T5634] common_startup_64+0x13e/0x148 [ 164.950551][ T5634] [ 164.950551][ T5634] -> #0 (console_owner){-.-.}-{0:0}: [ 164.950577][ T5634] __lock_acquire+0x14b8/0x2630 [ 164.950596][ T5634] lock_acquire+0x1b1/0x370 [ 164.950613][ T5634] console_lock_spinning_enable+0x72/0x80 [ 164.950639][ T5634] console_flush_one_record+0x739/0xe50 [ 164.950665][ T5634] console_unlock+0x103/0x260 [ 164.950689][ T5634] vprintk_emit+0x407/0x6b0 [ 164.950715][ T5634] _printk+0xcf/0x110 [ 164.950733][ T5634] __report_bug.cold+0x15/0x137 [ 164.950752][ T5634] report_bug+0xb2/0x220 [ 164.950780][ T5634] handle_bug+0x16a/0x2a0 [ 164.950798][ T5634] exc_invalid_op+0x17/0x50 [ 164.950816][ T5634] asm_exc_invalid_op+0x1a/0x20 [ 164.950835][ T5634] update_rq_clock+0x40a/0xd20 [ 164.950864][ T5634] __schedule+0x1e84/0x67a0 [ 164.950890][ T5634] schedule+0xdd/0x390 [ 164.950916][ T5634] do_nanosleep+0x158/0x570 [ 164.950939][ T5634] hrtimer_nanosleep+0x14f/0x350 [ 164.950966][ T5634] common_nsleep+0xa1/0xd0 [ 164.950984][ T5634] __x64_sys_clock_nanosleep+0x336/0x480 [ 164.951014][ T5634] do_syscall_64+0x10b/0xf80 [ 164.951045][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.951065][ T5634] [ 164.951065][ T5634] other info that might help us debug this: [ 164.951065][ T5634] [ 164.951072][ T5634] Chain exists of: [ 164.951072][ T5634] console_owner --> &p->pi_lock --> &rq->__lock [ 164.951072][ T5634] [ 164.951102][ T5634] Possible unsafe locking scenario: [ 164.951102][ T5634] [ 164.951107][ T5634] CPU0 CPU1 [ 164.951113][ T5634] ---- ---- [ 164.951118][ T5634] lock(&rq->__lock); [ 164.951130][ T5634] lock(&p->pi_lock); [ 164.951144][ T5634] lock(&rq->__lock); [ 164.951158][ T5634] lock(console_owner); [ 164.951171][ T5634] [ 164.951171][ T5634] *** DEADLOCK *** [ 164.951171][ T5634] [ 164.951175][ T5634] 3 locks held by syz-executor/5634: [ 164.951187][ T5634] #0: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 164.951245][ T5634] #1: ffffffff8e7d1860 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 164.951293][ T5634] #2: ffffffff8e7d18d8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 164.951350][ T5634] [ 164.951350][ T5634] stack backtrace: [ 164.951360][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 164.951385][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.951398][ T5634] Call Trace: [ 164.951405][ T5634] [ 164.951413][ T5634] dump_stack_lvl+0x100/0x190 [ 164.951435][ T5634] print_circular_bug.cold+0x178/0x1c7 [ 164.951472][ T5634] check_noncircular+0x146/0x160 [ 164.951510][ T5634] __lock_acquire+0x14b8/0x2630 [ 164.951541][ T5634] lock_acquire+0x1b1/0x370 [ 164.951560][ T5634] ? console_lock_spinning_enable+0x61/0x80 [ 164.951589][ T5634] ? console_lock_spinning_enable+0x4a/0x80 [ 164.951619][ T5634] console_lock_spinning_enable+0x72/0x80 [ 164.951646][ T5634] ? console_lock_spinning_enable+0x61/0x80 [ 164.951673][ T5634] console_flush_one_record+0x739/0xe50 [ 164.951705][ T5634] ? __pfx_console_flush_one_record+0x10/0x10 [ 164.951737][ T5634] ? is_printk_cpu_sync_owner+0x32/0x40 [ 164.951771][ T5634] console_unlock+0x103/0x260 [ 164.951798][ T5634] ? __pfx_console_unlock+0x10/0x10 [ 164.951827][ T5634] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.951853][ T5634] ? _printk+0xcf/0x110 [ 164.951875][ T5634] vprintk_emit+0x407/0x6b0 [ 164.951904][ T5634] ? __pfx_vprintk_emit+0x10/0x10 [ 164.951938][ T5634] _printk+0xcf/0x110 [ 164.951958][ T5634] ? __pfx__printk+0x10/0x10 [ 164.951981][ T5634] ? ktime_get+0x9f/0x320 [ 164.952013][ T5634] ? ktime_get+0x1a4/0x320 [ 164.952046][ T5634] ? __report_bug.cold+0x5/0x137 [ 164.952066][ T5634] ? __report_bug+0x377/0x3d0 [ 164.952097][ T5634] __report_bug.cold+0x15/0x137 [ 164.952117][ T5634] ? update_rq_clock+0x40a/0xd20 [ 164.952148][ T5634] ? __pfx___report_bug+0x10/0x10 [ 164.952177][ T5634] ? kvm_sched_clock_read+0x11/0x20 [ 164.952207][ T5634] ? sched_clock+0x38/0x60 [ 164.952226][ T5634] ? rcu_is_watching+0x12/0xc0 [ 164.952251][ T5634] ? trace_pelt_se_tp+0x13b/0x190 [ 164.952274][ T5634] ? update_cfs_rq_load_avg+0x51/0x550 [ 164.952307][ T5634] ? update_rq_clock+0x40a/0xd20 [ 164.952338][ T5634] report_bug+0xb2/0x220 [ 164.952367][ T5634] ? update_rq_clock+0x40a/0xd20 [ 164.952397][ T5634] handle_bug+0x16a/0x2a0 [ 164.952417][ T5634] exc_invalid_op+0x17/0x50 [ 164.952438][ T5634] asm_exc_invalid_op+0x1a/0x20 [ 164.952459][ T5634] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 164.952490][ T5634] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 164.952511][ T5634] RSP: 0018:ffffc90003de7a70 EFLAGS: 00010046 [ 164.952534][ T5634] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 164.952548][ T5634] RDX: 0000000000000046 RSI: ffffffff8def6f7c RDI: ffffffff8c1c2800 [ 164.952562][ T5634] RBP: ffffc90003de7c20 R08: 0000000000000001 R09: 0000000000000001 [ 164.952576][ T5634] R10: ffffffff90d7dc57 R11: 0000000000000001 R12: ffffffff90d80fc4 [ 164.952590][ T5634] R13: ffff8880b853c220 R14: ffff888032ac9ec0 R15: ffff8880b853b380 [ 164.952611][ T5634] ? pick_task_fair+0x85/0x350 [ 164.952641][ T5634] __schedule+0x1e84/0x67a0 [ 164.952678][ T5634] ? __pfx___schedule+0x10/0x10 [ 164.952706][ T5634] ? find_held_lock+0x2b/0x80 [ 164.952734][ T5634] ? schedule+0x2bf/0x390 [ 164.952764][ T5634] schedule+0xdd/0x390 [ 164.952792][ T5634] do_nanosleep+0x158/0x570 [ 164.952818][ T5634] ? __pfx_do_nanosleep+0x10/0x10 [ 164.952843][ T5634] ? __asan_memset+0x23/0x50 [ 164.952876][ T5634] ? __hrtimer_setup+0x208/0x330 [ 164.952901][ T5634] hrtimer_nanosleep+0x14f/0x350 [ 164.952929][ T5634] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 164.952960][ T5634] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 164.952985][ T5634] ? get_timespec64+0x136/0x1b0 [ 164.953017][ T5634] ? __pfx_get_timespec64+0x10/0x10 [ 164.953051][ T5634] common_nsleep+0xa1/0xd0 [ 164.953073][ T5634] __x64_sys_clock_nanosleep+0x336/0x480 [ 164.953105][ T5634] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 164.953151][ T5634] ? rcu_is_watching+0x12/0xc0 [ 164.953180][ T5634] do_syscall_64+0x10b/0xf80 [ 164.953211][ T5634] ? clear_bhb_loop+0x40/0x90 [ 164.953236][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.953257][ T5634] RIP: 0033:0x7fa69275d68e [ 164.953274][ T5634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.953295][ T5634] RSP: 002b:00007fff27927a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 164.953314][ T5634] RAX: ffffffffffffffda RBX: 000055558e7cd500 RCX: 00007fa69275d68e [ 164.953328][ T5634] RDX: 00007fff27927a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.953341][ T5634] RBP: 00007fff27927afc R08: 0000000000000000 R09: 0000000000000000 [ 164.953354][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 164.953367][ T5634] R13: 00000000000927c0 R14: 0000000000027e85 R15: 00007fff27927b50 [ 164.953387][ T5634] [ 166.234171][ T5634] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 166.234185][ T5634] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: syz-executor/5634 [ 166.252251][ T5634] Modules linked in: [ 166.256150][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 166.265611][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.275669][ T5634] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 166.281244][ T5634] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 166.300861][ T5634] RSP: 0018:ffffc90003de7a70 EFLAGS: 00010046 [ 166.306934][ T5634] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 166.314908][ T5634] RDX: 0000000000000046 RSI: ffffffff8def6f7c RDI: ffffffff8c1c2800 [ 166.322901][ T5634] RBP: ffffc90003de7c20 R08: 0000000000000001 R09: 0000000000000001 [ 166.330887][ T5634] R10: ffffffff90d7dc57 R11: 0000000000000001 R12: ffffffff90d80fc4 [ 166.338875][ T5634] R13: ffff8880b853c220 R14: ffff888032ac9ec0 R15: ffff8880b853b380 [ 166.346867][ T5634] FS: 000055558e7cd500(0000) GS:ffff888124377000(0000) knlGS:0000000000000000 [ 166.355810][ T5634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.362414][ T5634] CR2: 00000000014be000 CR3: 00000000363ca000 CR4: 00000000003526f0 [ 166.370397][ T5634] Call Trace: [ 166.373682][ T5634] [ 166.376626][ T5634] ? pick_task_fair+0x85/0x350 [ 166.381430][ T5634] __schedule+0x1e84/0x67a0 [ 166.385977][ T5634] ? __pfx___schedule+0x10/0x10 [ 166.390878][ T5634] ? find_held_lock+0x2b/0x80 [ 166.395585][ T5634] ? schedule+0x2bf/0x390 [ 166.399962][ T5634] schedule+0xdd/0x390 [ 166.404184][ T5634] do_nanosleep+0x158/0x570 [ 166.408712][ T5634] ? __pfx_do_nanosleep+0x10/0x10 [ 166.413758][ T5634] ? __asan_memset+0x23/0x50 [ 166.418374][ T5634] ? __hrtimer_setup+0x208/0x330 [ 166.423330][ T5634] hrtimer_nanosleep+0x14f/0x350 [ 166.428286][ T5634] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 166.433768][ T5634] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 166.438981][ T5634] ? get_timespec64+0x136/0x1b0 [ 166.443866][ T5634] ? __pfx_get_timespec64+0x10/0x10 [ 166.449087][ T5634] common_nsleep+0xa1/0xd0 [ 166.453527][ T5634] __x64_sys_clock_nanosleep+0x336/0x480 [ 166.459192][ T5634] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 166.465411][ T5634] ? rcu_is_watching+0x12/0xc0 [ 166.470195][ T5634] do_syscall_64+0x10b/0xf80 [ 166.474806][ T5634] ? clear_bhb_loop+0x40/0x90 [ 166.479501][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.485403][ T5634] RIP: 0033:0x7fa69275d68e [ 166.489831][ T5634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.509461][ T5634] RSP: 002b:00007fff27927a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 166.517888][ T5634] RAX: ffffffffffffffda RBX: 000055558e7cd500 RCX: 00007fa69275d68e [ 166.525870][ T5634] RDX: 00007fff27927a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.533861][ T5634] RBP: 00007fff27927afc R08: 0000000000000000 R09: 0000000000000000 [ 166.541904][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 166.549905][ T5634] R13: 00000000000927c0 R14: 0000000000027e85 R15: 00007fff27927b50 [ 166.557903][ T5634] [ 166.560938][ T5634] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.568282][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 166.577757][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.587827][ T5634] Call Trace: [ 166.591129][ T5634] [ 166.594075][ T5634] dump_stack_lvl+0x100/0x190 [ 166.598768][ T5634] vpanic+0x552/0x970 [ 166.602762][ T5634] ? __pfx_vpanic+0x10/0x10 [ 166.607278][ T5634] ? lock_release+0x245/0x310 [ 166.611969][ T5634] panic+0xd1/0xe0 [ 166.615825][ T5634] ? __pfx_panic+0x10/0x10 [ 166.620264][ T5634] ? check_panic_on_warn+0x1f/0x90 [ 166.625392][ T5634] check_panic_on_warn.cold+0x19/0x34 [ 166.630778][ T5634] ? update_rq_clock+0x40a/0xd20 [ 166.635741][ T5634] __warn.cold+0x191/0x328 [ 166.640187][ T5634] __report_bug+0x296/0x3d0 [ 166.644822][ T5634] ? update_rq_clock+0x40a/0xd20 [ 166.649787][ T5634] ? __pfx___report_bug+0x10/0x10 [ 166.654836][ T5634] ? kvm_sched_clock_read+0x11/0x20 [ 166.660059][ T5634] ? sched_clock+0x38/0x60 [ 166.664504][ T5634] ? rcu_is_watching+0x12/0xc0 [ 166.669299][ T5634] ? trace_pelt_se_tp+0x13b/0x190 [ 166.674349][ T5634] ? update_cfs_rq_load_avg+0x51/0x550 [ 166.679835][ T5634] ? update_rq_clock+0x40a/0xd20 [ 166.684792][ T5634] report_bug+0xb2/0x220 [ 166.689073][ T5634] ? update_rq_clock+0x40a/0xd20 [ 166.694032][ T5634] handle_bug+0x16a/0x2a0 [ 166.698396][ T5634] exc_invalid_op+0x17/0x50 [ 166.702931][ T5634] asm_exc_invalid_op+0x1a/0x20 [ 166.707803][ T5634] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 166.713367][ T5634] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 166.732995][ T5634] RSP: 0018:ffffc90003de7a70 EFLAGS: 00010046 [ 166.739074][ T5634] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 166.747052][ T5634] RDX: 0000000000000046 RSI: ffffffff8def6f7c RDI: ffffffff8c1c2800 [ 166.755033][ T5634] RBP: ffffc90003de7c20 R08: 0000000000000001 R09: 0000000000000001 [ 166.763006][ T5634] R10: ffffffff90d7dc57 R11: 0000000000000001 R12: ffffffff90d80fc4 [ 166.770981][ T5634] R13: ffff8880b853c220 R14: ffff888032ac9ec0 R15: ffff8880b853b380 [ 166.778962][ T5634] ? pick_task_fair+0x85/0x350 [ 166.783757][ T5634] __schedule+0x1e84/0x67a0 [ 166.788282][ T5634] ? __pfx___schedule+0x10/0x10 [ 166.793148][ T5634] ? find_held_lock+0x2b/0x80 [ 166.797930][ T5634] ? schedule+0x2bf/0x390 [ 166.802279][ T5634] schedule+0xdd/0x390 [ 166.806389][ T5634] do_nanosleep+0x158/0x570 [ 166.810919][ T5634] ? __pfx_do_nanosleep+0x10/0x10 [ 166.815967][ T5634] ? __asan_memset+0x23/0x50 [ 166.820571][ T5634] ? __hrtimer_setup+0x208/0x330 [ 166.825544][ T5634] hrtimer_nanosleep+0x14f/0x350 [ 166.830501][ T5634] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 166.835997][ T5634] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 166.841207][ T5634] ? get_timespec64+0x136/0x1b0 [ 166.846239][ T5634] ? __pfx_get_timespec64+0x10/0x10 [ 166.851469][ T5634] common_nsleep+0xa1/0xd0 [ 166.855904][ T5634] __x64_sys_clock_nanosleep+0x336/0x480 [ 166.861563][ T5634] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 166.867752][ T5634] ? rcu_is_watching+0x12/0xc0 [ 166.872544][ T5634] do_syscall_64+0x10b/0xf80 [ 166.877162][ T5634] ? clear_bhb_loop+0x40/0x90 [ 166.881866][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.887774][ T5634] RIP: 0033:0x7fa69275d68e [ 166.892203][ T5634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.911836][ T5634] RSP: 002b:00007fff27927a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 166.920273][ T5634] RAX: ffffffffffffffda RBX: 000055558e7cd500 RCX: 00007fa69275d68e [ 166.928251][ T5634] RDX: 00007fff27927a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.936245][ T5634] RBP: 00007fff27927afc R08: 0000000000000000 R09: 0000000000000000 [ 166.944230][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 166.952224][ T5634] R13: 00000000000927c0 R14: 0000000000027e85 R15: 00007fff27927b50 [ 166.960235][ T5634] [ 166.963518][ T5634] Kernel Offset: disabled [ 166.967850][ T5634] Rebooting in 86400 seconds..