last executing test programs: 15.367458015s ago: executing program 0 (id=116): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0xb8, 0x7, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9503, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x9, 0x5148d73f, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x100000000, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x4, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d18"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x63, 0x4000008000001f, 0x7, 0x6d3e, 0x20000009, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) 13.249592237s ago: executing program 0 (id=119): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x4, 0xfffffffe) socket(0xa, 0x801, 0x84) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) rmdir$auto(&(0x7f0000000040)='./file0\x00') writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 9.37996587s ago: executing program 2 (id=124): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf4, 0xb0, @raw=0xfffff03c}}) setsockopt$auto(0x4, 0x0, 0x3, 0x0, 0x800000e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0xb8, 0x7, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9503, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x9, 0x5148d73f, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x100000000, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x4, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d18"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x63, 0x4000008000001f, 0x7, 0x6d3e, 0x20000009, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) 8.915793799s ago: executing program 0 (id=126): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x4, 0xfffffffe) socket(0xa, 0x801, 0x84) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) rmdir$auto(&(0x7f0000000040)='./file0\x00') writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 6.662208231s ago: executing program 2 (id=128): mmap$auto(0x200000000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/cec29/power/autosuspend_delay_ms\x00', 0x129000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r1, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) read$auto(r2, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710d}, 0x8) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000100)=@batch={0xfffffffffffffffd, 0x7, 0x8000, 0x30, 0x401, r0, 0x3, 0x27aa}, 0x3) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xffffffff, 0xa, 0x4000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0x7, 0x4) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) pread64$auto(r5, 0x0, 0x3, 0x5) getsockopt$auto(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) 6.642464683s ago: executing program 1 (id=129): unshare$auto(0xd) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x2, 0x80802, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x101, 0x0, &(0x7f0000000180)=0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x4, 0x4, 0x7, 0x7, 0x1001ff000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 6.412773923s ago: executing program 3 (id=130): r0 = pipe2$auto(0x0, 0x0) open_tree_attr$auto(r0, &(0x7f0000000180)='./file0\x00', 0xffffffec, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xcd, 0x9, 0x4, 0x4, "7cb8e90fe76905a94f442bf88cdd8c74fd83d02fb20481e651870471aebf9750"}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x5100, 0xffffffffffffffff) ioctl$auto(r3, 0x4020ae76, r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r3, 0x0, 0x40d0) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x1000000000a) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) close_range$auto(0x2, 0x8, 0x0) 5.694334761s ago: executing program 2 (id=131): unshare$auto(0xd) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x2, 0x80802, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x101, &(0x7f0000000080)=0x1, &(0x7f0000000180)=0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x4, 0x4, 0x7, 0x7, 0x1001ff000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) 5.510068306s ago: executing program 3 (id=132): mkdir$auto(0x0, 0x9) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) unshare$auto(0x20700) mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x53, 0x0, 0x9) r2 = socket(0xa, 0x800, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25110000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080001", @ANYRES32=r4, @ANYBLOB="7dea97f5a5f1dbf6c85bbf8932db246361475edd18378a3b35c2df71a2bda8bef4c4c06401a805e5074ab4ab60703d878da3dbfbbbe7820a29df198ee3bcc220de3085f863a864947be87b49988a11e026fe800489c07791a18f0072"], 0x30}}, 0x80) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3, 0x4000000000de, 0x40eb1, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000400)=0xfffff000) socket(0x2, 0x80002, 0x73) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) setsockopt$auto(0xffffffffffffffff, 0x64, 0xfffffffe, 0x0, 0xffffff00) getsockopt$auto(r5, 0x0, 0x487, 0x0, &(0x7f0000000040)=0x83) 5.003827408s ago: executing program 3 (id=133): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xfffffffffffffffb, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r1, 0x0, 0x400000, 0xc) 4.35790801s ago: executing program 1 (id=134): socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x4, 0xff, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0xef95, 0x9, 0x4, 0x5, 0x10000, 0xe, 0xa5, 0x1, 0x4, 0x0, 0x3, 0x101}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 4.198183577s ago: executing program 0 (id=135): mmap$auto(0x200000000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/cec29/power/autosuspend_delay_ms\x00', 0x129000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r0, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710d}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xffffffff, 0xa, 0x4000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x7, 0x4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r6, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) pread64$auto(r4, 0x0, 0x3, 0x5) getsockopt$auto(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) 3.587401188s ago: executing program 1 (id=136): socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x4, 0xff, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0xef95, 0x9, 0x4, 0x5, 0x10000, 0xe, 0xa5, 0x1, 0x4, 0x0, 0x3, 0x101}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) 3.487509727s ago: executing program 3 (id=137): r0 = pipe2$auto(0x0, 0x0) open_tree_attr$auto(r0, &(0x7f0000000180)='./file0\x00', 0xffffffec, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xcd, 0x9, 0x4, 0x4, "7cb8e90fe76905a94f442bf88cdd8c74fd83d02fb20481e651870471aebf9750"}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x5100, 0xffffffffffffffff) ioctl$auto(r3, 0x4020ae76, r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x1000000000a) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) 2.965072949s ago: executing program 0 (id=138): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 2.865508036s ago: executing program 1 (id=139): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf4, 0xb0, @raw=0xfffff03c}}) setsockopt$auto(0x4, 0x0, 0x3, &(0x7f0000000000)='!/*:(*\'\x00', 0x800000e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0xb8, 0x7, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9503, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x9, 0x5148d73f, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x100000000, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x4, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d18"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x63, 0x4000008000001f, 0x7, 0x6d3e, 0x20000009, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) 2.580006854s ago: executing program 3 (id=140): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xfffffffffffffffb, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r1, 0x0, 0x400000, 0xc) 2.54552039s ago: executing program 2 (id=141): unshare$auto(0xd) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x2, 0x80802, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x101, &(0x7f0000000080)=0x1, &(0x7f0000000180)=0x4) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0x4, 0x4, 0x7, 0x7, 0x1001ff000) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 1.00062458s ago: executing program 1 (id=142): socket(0xa, 0x3, 0x3b) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x4, 0xff, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0xef95, 0x9, 0x4, 0x5, 0x10000, 0xe, 0xa5, 0x1, 0x4, 0x0, 0x3, 0x101}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x44, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) semop$auto(0x0, &(0x7f00000000c0)={0xd2, 0x1, 0x5}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x9, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 950.942438ms ago: executing program 2 (id=143): mmap$auto(0x200000000000, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r0, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710d}, 0x8) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000100)=@batch={0xfffffffffffffffd, 0x7, 0x8000, 0x30, 0x401, 0xffffffffffffffff, 0x3, 0x27aa}, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xffffffff, 0xa, 0x4000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x7, 0x4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r6, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) pread64$auto(r4, 0x0, 0x3, 0x5) getsockopt$auto(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) 719.691978ms ago: executing program 3 (id=144): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 644.48232ms ago: executing program 0 (id=145): r0 = pipe2$auto(0x0, 0x0) open_tree_attr$auto(r0, &(0x7f0000000180)='./file0\x00', 0xffffffec, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xcd, 0x9, 0x4, 0x4, "7cb8e90fe76905a94f442bf88cdd8c74fd83d02fb20481e651870471aebf9750"}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x5100, 0xffffffffffffffff) ioctl$auto(r3, 0x4020ae76, r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r3, 0x0, 0x40d0) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x1000000000a) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) 81.812953ms ago: executing program 2 (id=146): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x6, 0x8000000000000001, &(0x7f0000000080)=0xcf, &(0x7f00000000c0)=0xffff7fff, 0x1000) socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0xa) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf4, 0xb0, @raw=0xfffff03c}}) setsockopt$auto(0x4, 0x0, 0x3, 0x0, 0x800000e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) statmount$auto(&(0x7f0000000040)={0xffff, @raw=0xb8, 0x7, 0x4, 0xfffffffffffffff8}, &(0x7f0000000340)={0x3ff, 0x1, 0x7fff, 0x8, 0x6, 0x3, 0x0, 0x5, 0x8, 0x8, 0x3, 0x690, 0x1604000000000, 0x2, 0x100, 0xfff, 0x2, 0x9, 0xfffff1a0, 0x8, 0xc, 0xfff, 0x3, 0x9503, 0x0, 0x9, 0xeb, 0x5c1f, 0x1, 0x9, 0x20000000, [0x9, 0x1ff, 0x8, 0x2, 0x0, 0x2, 0x2, 0x7, 0x6, 0x7f, 0x100, 0x2, 0x9, 0x1, 0x4, 0x3, 0x0, 0x10001, 0x9, 0x5148d73f, 0x7, 0xa5, 0xc, 0x1, 0x8000000000000000, 0x100000000, 0x3, 0x80000001, 0x2, 0x2, 0x0, 0x9, 0xe23f, 0x7fff, 0x3, 0x0, 0x9, 0x4, 0x6, 0x0, 0x7, 0xfff, 0xffffffff], "0d4da07757fc0a8e5de18bd363ce4cd41558fdae0643974f4f329960f2cb8c8e546a2541ef8227735f9d60e3cb50f6712c580dab3d8d18"}, 0x6, 0x7) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x63, 0x4000008000001f, 0x7, 0x6d3e, 0x20000009, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) 0s ago: executing program 1 (id=147): r0 = pipe2$auto(0x0, 0x0) open_tree_attr$auto(r0, &(0x7f0000000180)='./file0\x00', 0xffffffec, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0xcd, 0x9, 0x4, 0x4, "7cb8e90fe76905a94f442bf88cdd8c74fd83d02fb20481e651870471aebf9750"}) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x1) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x141080, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0x5100, 0xffffffffffffffff) ioctl$auto(r3, 0x4020ae76, r4) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r3, 0x0, 0x40d0) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x1000000000a) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 86.087342][ T5811] cgroup: Unknown subsys name 'net' [ 86.205884][ T5811] cgroup: Unknown subsys name 'cpuset' [ 86.215053][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.160367][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.990192][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.002471][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.011630][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.011647][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.012397][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.035418][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.036011][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.052565][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.063355][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.079945][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.090977][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.090999][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.116536][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.125166][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.133164][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.147026][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.169523][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.178278][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.201594][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.209787][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.617404][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 90.774388][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.835226][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.948695][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.957788][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.965873][ T5823] bridge_slave_0: entered allmulticast mode [ 90.975108][ T5823] bridge_slave_0: entered promiscuous mode [ 91.020512][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.028309][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.035727][ T5823] bridge_slave_1: entered allmulticast mode [ 91.043248][ T5823] bridge_slave_1: entered promiscuous mode [ 91.099949][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.109735][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.132932][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.140103][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.148813][ T5827] bridge_slave_0: entered allmulticast mode [ 91.156604][ T5827] bridge_slave_0: entered promiscuous mode [ 91.166804][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.195017][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.202406][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.209560][ T5827] bridge_slave_1: entered allmulticast mode [ 91.216978][ T5827] bridge_slave_1: entered promiscuous mode [ 91.258729][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.266480][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.273867][ T5832] bridge_slave_0: entered allmulticast mode [ 91.281667][ T5832] bridge_slave_0: entered promiscuous mode [ 91.311709][ T5823] team0: Port device team_slave_0 added [ 91.317537][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.325743][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.333203][ T5832] bridge_slave_1: entered allmulticast mode [ 91.340375][ T5832] bridge_slave_1: entered promiscuous mode [ 91.366154][ T5823] team0: Port device team_slave_1 added [ 91.385894][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.429556][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.457359][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.502955][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.509960][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.536189][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.550232][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.575011][ T5827] team0: Port device team_slave_0 added [ 91.581892][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.588887][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.615250][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.637320][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.645309][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.652677][ T5833] bridge_slave_0: entered allmulticast mode [ 91.660065][ T5833] bridge_slave_0: entered promiscuous mode [ 91.670515][ T5827] team0: Port device team_slave_1 added [ 91.696893][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.704371][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.711714][ T5833] bridge_slave_1: entered allmulticast mode [ 91.719063][ T5833] bridge_slave_1: entered promiscuous mode [ 91.751446][ T5832] team0: Port device team_slave_0 added [ 91.779371][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.786714][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.813199][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.826262][ T5832] team0: Port device team_slave_1 added [ 91.865963][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.876080][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.883345][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.909849][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.959455][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.985478][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.992723][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.018903][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.035561][ T5823] hsr_slave_0: entered promiscuous mode [ 92.042237][ T5823] hsr_slave_1: entered promiscuous mode [ 92.062678][ T5833] team0: Port device team_slave_0 added [ 92.069130][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.076282][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.102254][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.122192][ T51] Bluetooth: hci1: command tx timeout [ 92.122196][ T5826] Bluetooth: hci0: command tx timeout [ 92.148146][ T5833] team0: Port device team_slave_1 added [ 92.201874][ T5826] Bluetooth: hci2: command tx timeout [ 92.214827][ T5827] hsr_slave_0: entered promiscuous mode [ 92.221592][ T5827] hsr_slave_1: entered promiscuous mode [ 92.227770][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.233848][ T5827] Cannot create hsr debugfs directory [ 92.240292][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.247430][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.273746][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.281447][ T5826] Bluetooth: hci3: command tx timeout [ 92.321582][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.328605][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.355160][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.368171][ T10] cfg80211: failed to load regulatory.db [ 92.441173][ T5832] hsr_slave_0: entered promiscuous mode [ 92.448100][ T5832] hsr_slave_1: entered promiscuous mode [ 92.454738][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 92.460571][ T5832] Cannot create hsr debugfs directory [ 92.575777][ T5833] hsr_slave_0: entered promiscuous mode [ 92.582518][ T5833] hsr_slave_1: entered promiscuous mode [ 92.588792][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 92.594637][ T5833] Cannot create hsr debugfs directory [ 92.937772][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.967589][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.993811][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.005663][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.047182][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.063316][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.090643][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.113455][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.194708][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.228829][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.239979][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.257064][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.408177][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.426404][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.444091][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.453000][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.466378][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.514036][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.550676][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.578065][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.596436][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.604030][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.617535][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.645177][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.652419][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.686461][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.693661][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.706522][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.713798][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.749878][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.801136][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.808381][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.835196][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.842384][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.006253][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.107952][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.139636][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.147027][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.192162][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.199489][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.215798][ T5826] Bluetooth: hci0: command tx timeout [ 94.215809][ T51] Bluetooth: hci1: command tx timeout [ 94.286961][ T5826] Bluetooth: hci2: command tx timeout [ 94.364357][ T5826] Bluetooth: hci3: command tx timeout [ 94.441197][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.466976][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.594251][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.616634][ T5823] veth0_vlan: entered promiscuous mode [ 94.679266][ T5827] veth0_vlan: entered promiscuous mode [ 94.705338][ T5823] veth1_vlan: entered promiscuous mode [ 94.775554][ T5833] veth0_vlan: entered promiscuous mode [ 94.792941][ T5827] veth1_vlan: entered promiscuous mode [ 94.805613][ T5833] veth1_vlan: entered promiscuous mode [ 94.840789][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.868297][ T5823] veth0_macvtap: entered promiscuous mode [ 94.880048][ T5823] veth1_macvtap: entered promiscuous mode [ 94.915544][ T5827] veth0_macvtap: entered promiscuous mode [ 94.927607][ T5827] veth1_macvtap: entered promiscuous mode [ 94.978696][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.993378][ T5833] veth0_macvtap: entered promiscuous mode [ 95.018356][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.032137][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.046962][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.057457][ T5832] veth0_vlan: entered promiscuous mode [ 95.066061][ T5833] veth1_macvtap: entered promiscuous mode [ 95.096464][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.106156][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.120333][ T5832] veth1_vlan: entered promiscuous mode [ 95.135316][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.144472][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164014][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173177][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.187528][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.199947][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.209774][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.255520][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.307897][ T1028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.325406][ T1028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.352346][ T1028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.361472][ T1028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.402658][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.410672][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.475886][ T5832] veth0_macvtap: entered promiscuous mode [ 95.486810][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.498223][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.515182][ T5832] veth1_macvtap: entered promiscuous mode [ 95.529023][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.543518][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.567064][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.597784][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.639504][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.657951][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.681079][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.695069][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.715622][ T1028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.724997][ T1028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.775226][ T1028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814550][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.861360][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.921879][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.929769][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.076940][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.076940][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.086466][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.105097][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.285839][ T5826] Bluetooth: hci1: command tx timeout [ 96.285849][ T51] Bluetooth: hci0: command tx timeout [ 96.364526][ T5826] Bluetooth: hci2: command tx timeout [ 96.421440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.442635][ T5826] Bluetooth: hci3: command tx timeout [ 96.472061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.991697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.291620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.641658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.111686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.380969][ T5826] Bluetooth: hci1: command tx timeout [ 98.386570][ T5826] Bluetooth: hci0: command tx timeout [ 98.461408][ T5826] Bluetooth: hci2: command tx timeout [ 98.522367][ T5826] Bluetooth: hci3: command tx timeout [ 99.431910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.440704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.642276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.652129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.392052][ T5937] binder: 5936:5937 ioctl c018620c 0 returned -1 [ 105.832084][ T5964] binder: 5963:5964 ioctl c018620c 0 returned -1 [ 107.514535][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.380810][ T6059] binder: 6056:6059 ioctl c018620c 0 returned -1 Ijn9_UVQ8j@:Un M%Ux[ 119.898982][ T6085] binder: 6084:6085 ioctl c018620c 0 returned -1 [ 122.543273][ T6115] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 122.551572][ T6115] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) Ijn9_UVQ8j@:Un M%Ux[ 131.974209][ T6205] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 131.991445][ T6205] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 133.381933][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.388536][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.835541][ T6265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.611649][ T6279] binder: 6278:6279 ioctl c018620c 0 returned -1 [ 144.540780][ T6295] binder: 6294:6295 ioctl c018620c 0 returned -1 [ 148.285430][ T6338] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 148.291553][ T6338] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.462312][ T6331] binder: 6328:6331 ioctl c018620c 0 returned -1 [ 148.599781][ T6337] ima: policy update failed [ 148.632919][ T30] audit: type=1802 audit(1773188517.198:2): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.75" res=0 errno=0 [ 149.572035][ T6344] binder: 6342:6344 ioctl c018620c 0 returned -1 Ijn9_UVQ8j@:Un M%Ux[ 151.363252][ T6359] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 151.465876][ T6359] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 152.962136][ T6381] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 152.969515][ T6381] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 154.745852][ T6396] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 154.773718][ T6396] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.243286][ T6395] ima: policy update failed [ 155.311651][ T30] audit: type=1802 audit(1773188523.888:3): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.85" res=0 errno=0 [ 156.034953][ T6411] binder: 6410:6411 ioctl c018620c 0 returned -1 [ 157.607438][ T6414] binder: 6407:6414 ioctl c018620c 0 returned -1 Ijn9_UVQ8j@:Un M%Ux[ 163.558534][ T6463] binder: 6462:6463 ioctl c018620c 0 returned -1 [ 164.617220][ T6490] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 164.618808][ T6490] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.993740][ T6488] ima: policy update failed [ 165.022306][ T30] audit: type=1802 audit(1773188533.598:4): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.102" res=0 errno=0 [ 166.174157][ T6494] binder: 6493:6494 ioctl c018620c 0 returned -1 [ 166.237410][ T6496] binder: 6495:6496 ioctl c018620c 0 returned -1 [ 167.830172][ T6487] binder: 6486:6487 ioctl c018620c 0 returned -1 [ 174.685111][ T6557] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 174.846089][ T6555] ima: policy update failed [ 174.892036][ T30] audit: type=1802 audit(1773188543.438:5): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.114" res=0 errno=0 [ 174.952132][ T6550] binder: 6547:6550 ioctl c018620c 0 returned -1 [ 179.384049][ T6589] binder: 6583:6589 ioctl c018620c 0 returned -1 [ 179.553273][ T6579] binder: 6578:6579 ioctl c018620c 0 returned -1 [ 179.741733][ T6597] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 180.047162][ T6596] ima: policy update failed [ 180.191430][ T30] audit: type=1802 audit(1773188548.738:6): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.122" res=0 errno=0 [ 182.624363][ T6615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.630442][ T6615] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.647315][ T6615] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.679229][ T6615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.691966][ T6615] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.049549][ T6615] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.139709][ T6615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.153031][ T6615] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.207775][ T6615] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.283486][ T6615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.299439][ T6615] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.604729][ T6615] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.986556][ T6621] binder: 6616:6621 ioctl c018620c 0 returned -1 [ 184.503394][ T6635] ima: policy update failed [ 184.508161][ T30] audit: type=1802 audit(1773188553.078:7): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.128" res=0 errno=0 [ 184.684288][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.763894][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.044276][ T6646] zswap: compressor not available [ 185.161482][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.321956][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.430336][ T6664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.554130][ T6664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.623114][ T6664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.670655][ T6664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.824114][ T6674] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 186.983861][ T6670] ima: policy update failed [ 187.009926][ T6676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.048463][ T6676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.068855][ T30] audit: type=1802 audit(1773188555.638:8): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.135" res=0 errno=0 [ 187.097285][ T6676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.105857][ T6676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.060192][ T6687] smpboot: CPU 1 is now offline [ 189.111872][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.117971][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.124127][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.130168][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.615242][ T6707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.753235][ T6707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.774222][ T6709] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 189.798224][ T30] audit: type=1807 audit(1773188558.368:9): UNKNOWN=1 res=0 [ 189.904544][ T6707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.920133][ T30] audit: type=1802 audit(1773188558.368:10): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.143" res=0 errno=0 [ 190.011716][ T6707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.104747][ T6708] ima: policy update failed [ 190.114113][ T30] audit: type=1802 audit(1773188558.678:11): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.143" res=0 errno=0 [ 190.460634][ T6716] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 190.518902][ T6690] ------------[ cut here ]------------ [ 190.519246][ T6690] [ 190.519252][ T6690] ====================================================== [ 190.519260][ T6690] WARNING: possible circular locking dependency detected [ 190.519268][ T6690] syzkaller #0 Not tainted [ 190.519279][ T6690] ------------------------------------------------------ [ 190.519286][ T6690] syz.1.139/6690 is trying to acquire lock: [ 190.519297][ T6690] ffffffff8e6f3600 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 190.519365][ T6690] [ 190.519365][ T6690] but task is already holding lock: [ 190.519371][ T6690] ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 190.519418][ T6690] [ 190.519418][ T6690] which lock already depends on the new lock. [ 190.519418][ T6690] [ 190.519424][ T6690] [ 190.519424][ T6690] the existing dependency chain (in reverse order) is: [ 190.519431][ T6690] [ 190.519431][ T6690] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 190.519459][ T6690] _raw_spin_lock_nested+0x31/0x40 [ 190.519482][ T6690] raw_spin_rq_lock_nested+0x2c/0x140 [ 190.519502][ T6690] _task_rq_lock+0xcf/0x490 [ 190.519523][ T6690] cgroup_move_task+0x81/0x2b0 [ 190.519545][ T6690] css_set_move_task+0x285/0x600 [ 190.519566][ T6690] cgroup_post_fork+0x202/0x9b0 [ 190.519586][ T6690] copy_process+0x5f26/0x7a10 [ 190.519610][ T6690] kernel_clone+0xfc/0x9a0 [ 190.519632][ T6690] user_mode_thread+0xcc/0x110 [ 190.519656][ T6690] rest_init+0x21/0x260 [ 190.519686][ T6690] start_kernel+0x47f/0x480 [ 190.519715][ T6690] x86_64_start_reservations+0x24/0x30 [ 190.519746][ T6690] x86_64_start_kernel+0x12b/0x130 [ 190.519776][ T6690] common_startup_64+0x13e/0x148 [ 190.519798][ T6690] [ 190.519798][ T6690] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 190.519825][ T6690] _raw_spin_lock_irqsave+0x3a/0x60 [ 190.519847][ T6690] try_to_wake_up+0xb2/0x1a80 [ 190.519865][ T6690] __wake_up_common+0x135/0x1f0 [ 190.519892][ T6690] __wake_up+0x31/0x60 [ 190.519913][ T6690] tty_port_default_wakeup+0x47/0x60 [ 190.519944][ T6690] serial8250_tx_chars+0x68f/0x860 [ 190.519980][ T6690] serial8250_handle_irq+0x73e/0xcb0 [ 190.520010][ T6690] serial8250_default_handle_irq+0x9e/0x270 [ 190.520041][ T6690] serial8250_interrupt+0xf8/0x1d0 [ 190.520075][ T6690] __handle_irq_event_percpu+0x232/0x8e0 [ 190.520109][ T6690] handle_irq_event+0xab/0x1e0 [ 190.520141][ T6690] handle_edge_irq+0x375/0x970 [ 190.520172][ T6690] __common_interrupt+0xd8/0x2f0 [ 190.520200][ T6690] common_interrupt+0xb9/0xe0 [ 190.520231][ T6690] asm_common_interrupt+0x26/0x40 [ 190.520253][ T6690] lock_acquire+0x5e/0x380 [ 190.520277][ T6690] down_read+0x99/0x460 [ 190.520305][ T6690] validate_mm+0x1f1/0x4e0 [ 190.520333][ T6690] vms_complete_munmap_vmas+0x83b/0xdd0 [ 190.520363][ T6690] __mmap_region+0xa09/0x29e0 [ 190.520391][ T6690] mmap_region+0x180/0x3e0 [ 190.520421][ T6690] do_mmap+0xc63/0x12f0 [ 190.520442][ T6690] vm_mmap_pgoff+0x29e/0x470 [ 190.520464][ T6690] ksys_mmap_pgoff+0x3c8/0x650 [ 190.520485][ T6690] __x64_sys_mmap+0x125/0x190 [ 190.520516][ T6690] do_syscall_64+0x106/0xf80 [ 190.520541][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.520562][ T6690] [ 190.520562][ T6690] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 190.520590][ T6690] _raw_spin_lock_irqsave+0x3a/0x60 [ 190.520612][ T6690] __wake_up+0x1c/0x60 [ 190.520633][ T6690] tty_port_default_wakeup+0x47/0x60 [ 190.520662][ T6690] serial8250_tx_chars+0x68f/0x860 [ 190.520689][ T6690] serial8250_handle_irq+0x73e/0xcb0 [ 190.520719][ T6690] serial8250_default_handle_irq+0x9e/0x270 [ 190.520750][ T6690] serial8250_interrupt+0xf8/0x1d0 [ 190.520783][ T6690] __handle_irq_event_percpu+0x232/0x8e0 [ 190.520817][ T6690] handle_irq_event+0xab/0x1e0 [ 190.520850][ T6690] handle_edge_irq+0x375/0x970 [ 190.520880][ T6690] __common_interrupt+0xd8/0x2f0 [ 190.520907][ T6690] common_interrupt+0xb9/0xe0 [ 190.520937][ T6690] asm_common_interrupt+0x26/0x40 [ 190.520965][ T6690] pv_native_safe_halt+0xf/0x20 [ 190.520988][ T6690] default_idle+0x9/0x10 [ 190.521016][ T6690] default_idle_call+0x6c/0xb0 [ 190.521045][ T6690] do_idle+0x35b/0x4b0 [ 190.521062][ T6690] cpu_startup_entry+0x4f/0x60 [ 190.521082][ T6690] rest_init+0x251/0x260 [ 190.521112][ T6690] start_kernel+0x47f/0x480 [ 190.521140][ T6690] x86_64_start_reservations+0x24/0x30 [ 190.521171][ T6690] x86_64_start_kernel+0x12b/0x130 [ 190.521201][ T6690] common_startup_64+0x13e/0x148 [ 190.521221][ T6690] [ 190.521221][ T6690] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 190.521249][ T6690] _raw_spin_lock_irqsave+0x3a/0x60 [ 190.521270][ T6690] serial8250_console_write+0x17e/0x1900 [ 190.521302][ T6690] console_flush_one_record+0x790/0xe50 [ 190.521336][ T6690] console_unlock+0x103/0x260 [ 190.521367][ T6690] vprintk_emit+0x407/0x6b0 [ 190.521385][ T6690] _printk+0xcf/0x110 [ 190.521403][ T6690] register_console.cold+0xc0/0x248 [ 190.521425][ T6690] univ8250_console_init+0x6f/0x80 [ 190.521448][ T6690] console_init+0x423/0x620 [ 190.521468][ T6690] start_kernel+0x305/0x480 [ 190.521495][ T6690] x86_64_start_reservations+0x24/0x30 [ 190.521526][ T6690] x86_64_start_kernel+0x12b/0x130 [ 190.521555][ T6690] common_startup_64+0x13e/0x148 [ 190.521576][ T6690] [ 190.521576][ T6690] -> #0 (console_owner){....}-{0:0}: [ 190.521603][ T6690] __lock_acquire+0x14b8/0x2630 [ 190.521628][ T6690] lock_acquire+0x1cf/0x380 [ 190.521653][ T6690] console_lock_spinning_enable+0x72/0x80 [ 190.521685][ T6690] console_flush_one_record+0x739/0xe50 [ 190.521718][ T6690] console_unlock+0x103/0x260 [ 190.521750][ T6690] vprintk_emit+0x407/0x6b0 [ 190.521767][ T6690] _printk+0xcf/0x110 [ 190.521786][ T6690] __report_bug.cold+0x15/0x137 [ 190.521815][ T6690] report_bug+0xb2/0x220 [ 190.521836][ T6690] handle_bug+0x16a/0x2a0 [ 190.521863][ T6690] exc_invalid_op+0x17/0x50 [ 190.521892][ T6690] asm_exc_invalid_op+0x1a/0x20 [ 190.521912][ T6690] update_rq_clock+0x40a/0xd20 [ 190.521932][ T6690] __schedule+0x1b7d/0x6120 [ 190.521954][ T6690] preempt_schedule_common+0x42/0xc0 [ 190.521985][ T6690] preempt_schedule_thunk+0x16/0x30 [ 190.522011][ T6690] __folio_batch_add_and_move+0x616/0xc60 [ 190.522045][ T6690] shmem_alloc_and_add_folio+0x72a/0xd40 [ 190.522077][ T6690] shmem_get_folio_gfp+0x6ab/0x1900 [ 190.522108][ T6690] shmem_write_begin+0x1a4/0x420 [ 190.522139][ T6690] generic_perform_write+0x292/0xa40 [ 190.522168][ T6690] shmem_file_write_iter+0x10e/0x140 [ 190.522190][ T6690] __kernel_write_iter+0x2ac/0x920 [ 190.522223][ T6690] dump_user_range+0x3f9/0xb50 [ 190.522245][ T6690] elf_core_dump+0x2d5f/0x3d10 [ 190.522270][ T6690] vfs_coredump+0x27bc/0x5570 [ 190.522291][ T6690] get_signal+0x1f2a/0x21e0 [ 190.522312][ T6690] arch_do_signal_or_restart+0x91/0x770 [ 190.522337][ T6690] irqentry_exit+0x1f8/0x670 [ 190.522361][ T6690] asm_exc_stack_segment+0x26/0x30 [ 190.522382][ T6690] [ 190.522382][ T6690] other info that might help us debug this: [ 190.522382][ T6690] [ 190.522388][ T6690] Chain exists of: [ 190.522388][ T6690] console_owner --> &p->pi_lock --> &rq->__lock [ 190.522388][ T6690] [ 190.522420][ T6690] Possible unsafe locking scenario: [ 190.522420][ T6690] [ 190.522426][ T6690] CPU0 CPU1 [ 190.522431][ T6690] ---- ---- [ 190.522437][ T6690] lock(&rq->__lock); [ 190.522450][ T6690] lock(&p->pi_lock); [ 190.522465][ T6690] lock(&rq->__lock); [ 190.522479][ T6690] lock(console_owner); [ 190.522492][ T6690] [ 190.522492][ T6690] *** DEADLOCK *** [ 190.522492][ T6690] [ 190.522497][ T6690] 5 locks held by syz.1.139/6690: [ 190.522510][ T6690] #0: ffff888029c62420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 190.522565][ T6690] #1: ffff888027773688 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 190.522623][ T6690] #2: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 190.522672][ T6690] #3: ffffffff8e7d3a40 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 190.522720][ T6690] #4: ffffffff8e7d3ab8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 190.522784][ T6690] [ 190.522784][ T6690] stack backtrace: [ 190.522794][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 190.522821][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 190.522834][ T6690] Call Trace: [ 190.522841][ T6690] [ 190.522850][ T6690] dump_stack_lvl+0x100/0x190 [ 190.522882][ T6690] print_circular_bug.cold+0x178/0x1c7 [ 190.522918][ T6690] check_noncircular+0x146/0x160 [ 190.522947][ T6690] __lock_acquire+0x14b8/0x2630 [ 190.523008][ T6690] lock_acquire+0x1cf/0x380 [ 190.523035][ T6690] ? console_lock_spinning_enable+0x61/0x80 [ 190.523070][ T6690] ? console_lock_spinning_enable+0x4a/0x80 [ 190.523107][ T6690] console_lock_spinning_enable+0x72/0x80 [ 190.523140][ T6690] ? console_lock_spinning_enable+0x61/0x80 [ 190.523174][ T6690] console_flush_one_record+0x739/0xe50 [ 190.523211][ T6690] ? __pfx_console_flush_one_record+0x10/0x10 [ 190.523251][ T6690] ? is_printk_cpu_sync_owner+0x32/0x40 [ 190.523276][ T6690] console_unlock+0x103/0x260 [ 190.523310][ T6690] ? __pfx_console_unlock+0x10/0x10 [ 190.523346][ T6690] ? do_raw_spin_unlock+0x145/0x1e0 [ 190.523380][ T6690] ? _printk+0xcf/0x110 [ 190.523402][ T6690] vprintk_emit+0x407/0x6b0 [ 190.523422][ T6690] ? __pfx_vprintk_emit+0x10/0x10 [ 190.523446][ T6690] _printk+0xcf/0x110 [ 190.523467][ T6690] ? __pfx__printk+0x10/0x10 [ 190.523490][ T6690] ? __page_table_check_zero+0x338/0x410 [ 190.523514][ T6690] ? __report_bug.cold+0x5/0x137 [ 190.523543][ T6690] ? __report_bug+0x377/0x3d0 [ 190.523567][ T6690] __report_bug.cold+0x15/0x137 [ 190.523596][ T6690] ? update_rq_clock+0x40a/0xd20 [ 190.523619][ T6690] ? __pfx___report_bug+0x10/0x10 [ 190.523645][ T6690] ? __pfx___might_resched+0x10/0x10 [ 190.523677][ T6690] ? prepare_alloc_pages+0x16d/0x5f0 [ 190.523705][ T6690] ? update_rq_clock+0x40a/0xd20 [ 190.523728][ T6690] report_bug+0xb2/0x220 [ 190.523750][ T6690] ? update_rq_clock+0x40a/0xd20 [ 190.523773][ T6690] handle_bug+0x16a/0x2a0 [ 190.523803][ T6690] exc_invalid_op+0x17/0x50 [ 190.523833][ T6690] asm_exc_invalid_op+0x1a/0x20 [ 190.523855][ T6690] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 190.523880][ T6690] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 4b ba 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 190.523902][ T6690] RSP: 0018:ffffc9000c7a6948 EFLAGS: 00010046 [ 190.523919][ T6690] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 190.523934][ T6690] RDX: 0000000000000046 RSI: ffffffff8de57654 RDI: ffffffff8c1afaa0 [ 190.523949][ T6690] RBP: ffffc9000c7a6af0 R08: 0000000000000001 R09: 0000000000000001 [ 190.523970][ T6690] R10: ffffffff90d9af17 R11: 0000000000000000 R12: ffffffff90d9e2e4 [ 190.523984][ T6690] R13: ffff8880b853c0c0 R14: ffff88801e691e80 R15: ffff8880b853b280 [ 190.524006][ T6690] ? update_rq_clock+0x9c/0xd20 [ 190.524030][ T6690] __schedule+0x1b7d/0x6120 [ 190.524054][ T6690] ? folios_put_refs+0x66d/0x840 [ 190.524094][ T6690] ? __pfx___schedule+0x10/0x10 [ 190.524118][ T6690] ? folio_batch_move_lru+0x2da/0x460 [ 190.524151][ T6690] ? __pfx_lru_add+0x10/0x10 [ 190.524185][ T6690] ? preempt_schedule_thunk+0x16/0x30 [ 190.524213][ T6690] preempt_schedule_common+0x42/0xc0 [ 190.524239][ T6690] preempt_schedule_thunk+0x16/0x30 [ 190.524268][ T6690] ? __folio_batch_add_and_move+0x604/0xc60 [ 190.524303][ T6690] ? __folio_batch_add_and_move+0x611/0xc60 [ 190.524338][ T6690] __folio_batch_add_and_move+0x616/0xc60 [ 190.524373][ T6690] ? __pfx_lru_add+0x10/0x10 [ 190.524408][ T6690] shmem_alloc_and_add_folio+0x72a/0xd40 [ 190.524444][ T6690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 190.524479][ T6690] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 190.524517][ T6690] shmem_get_folio_gfp+0x6ab/0x1900 [ 190.524552][ T6690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 190.524589][ T6690] shmem_write_begin+0x1a4/0x420 [ 190.524623][ T6690] ? __pfx_shmem_write_begin+0x10/0x10 [ 190.524657][ T6690] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 190.524683][ T6690] ? lockdep_hardirqs_on+0x78/0x100 [ 190.524711][ T6690] generic_perform_write+0x292/0xa40 [ 190.524746][ T6690] ? __pfx_generic_perform_write+0x10/0x10 [ 190.524780][ T6690] ? file_update_time_flags+0x373/0x500 [ 190.524809][ T6690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 190.524833][ T6690] shmem_file_write_iter+0x10e/0x140 [ 190.524858][ T6690] __kernel_write_iter+0x2ac/0x920 [ 190.524893][ T6690] ? __pfx___kernel_write_iter+0x10/0x10 [ 190.524929][ T6690] ? __up_read+0x2c5/0x700 [ 190.524973][ T6690] ? dump_user_range+0x73b/0xb50 [ 190.525000][ T6690] dump_user_range+0x3f9/0xb50 [ 190.525026][ T6690] ? __pfx_dump_user_range+0x10/0x10 [ 190.525055][ T6690] ? __pfx_writenote+0x10/0x10 [ 190.525083][ T6690] elf_core_dump+0x2d5f/0x3d10 [ 190.525117][ T6690] ? __pfx_elf_core_dump+0x10/0x10 [ 190.525144][ T6690] ? kasan_save_stack+0x3f/0x50 [ 190.525178][ T6690] ? kasan_save_stack+0x30/0x50 [ 190.525211][ T6690] ? __kasan_kmalloc+0xaa/0xb0 [ 190.525243][ T6690] ? __kvmalloc_node_noprof+0x360/0xa00 [ 190.525278][ T6690] ? vfs_coredump+0x2105/0x5570 [ 190.525302][ T6690] ? asm_exc_stack_segment+0x26/0x30 [ 190.525325][ T6690] ? 0xffffffffff600000 [ 190.525362][ T6690] ? vfs_coredump+0x27bc/0x5570 [ 190.525384][ T6690] vfs_coredump+0x27bc/0x5570 [ 190.525412][ T6690] ? __pfx_vfs_coredump+0x10/0x10 [ 190.525436][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 190.525470][ T6690] ? lock_acquire+0x1cf/0x380 [ 190.525502][ T6690] ? is_bpf_text_address+0x8a/0x1a0 [ 190.525536][ T6690] ? bpf_ksym_find+0x124/0x1c0 [ 190.525565][ T6690] ? __kernel_text_address+0xd/0x30 [ 190.525598][ T6690] ? unwind_get_return_address+0x59/0xa0 [ 190.525622][ T6690] ? arch_stack_walk+0xa6/0xf0 [ 190.525647][ T6690] ? __sigqueue_free+0xbe/0x2a0 [ 190.525676][ T6690] ? stack_trace_save+0x8e/0xc0 [ 190.525697][ T6690] ? __pfx_stack_trace_save+0x10/0x10 [ 190.525719][ T6690] ? stack_depot_save_flags+0x27/0x9d0 [ 190.525743][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 190.525792][ T6690] ? proc_coredump_connector+0x2d3/0x4f0 [ 190.525819][ T6690] ? __pfx_proc_coredump_connector+0x10/0x10 [ 190.525849][ T6690] ? rcu_is_watching+0x12/0xc0 [ 190.525886][ T6690] get_signal+0x1f2a/0x21e0 [ 190.525913][ T6690] ? __pfx_get_signal+0x10/0x10 [ 190.525936][ T6690] ? force_sig+0xbf/0x100 [ 190.525967][ T6690] arch_do_signal_or_restart+0x91/0x770 [ 190.525995][ T6690] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 190.526026][ T6690] ? rcu_is_watching+0x12/0xc0 [ 190.526061][ T6690] irqentry_exit+0x1f8/0x670 [ 190.526089][ T6690] asm_exc_stack_segment+0x26/0x30 [ 190.526111][ T6690] RIP: 0033:0x7f146a59c7a1 [ 190.526129][ T6690] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 190.526150][ T6690] RSP: 002b:8000000000000001 EFLAGS: 00010217 [ 190.526167][ T6690] RAX: 0000000000000000 RBX: 00007f146a816090 RCX: 00007f146a59c799 [ 190.526182][ T6690] RDX: 0000200000000080 RSI: 8000000000000001 RDI: 0000000000000006 [ 190.526196][ T6690] RBP: 00007f146a632c99 R08: 0000000000001000 R09: 0000000000000000 [ 190.526210][ T6690] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 190.526224][ T6690] R13: 00007f146a816128 R14: 00007f146a816090 R15: 00007ffd7a9ea6b8 [ 190.526245][ T6690] [ 192.057166][ T6690] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 192.057182][ T6690] WARNING: kernel/sched/sched.h:1600 at update_rq_clock+0x40a/0xd20, CPU#0: syz.1.139/6690 [ 192.074990][ T6690] Modules linked in: [ 192.078905][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 192.088125][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 192.098194][ T6690] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 192.103770][ T6690] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 4b ba 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 192.123406][ T6690] RSP: 0018:ffffc9000c7a6948 EFLAGS: 00010046 [ 192.129671][ T6690] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 192.137673][ T6690] RDX: 0000000000000046 RSI: ffffffff8de57654 RDI: ffffffff8c1afaa0 [ 192.145687][ T6690] RBP: ffffc9000c7a6af0 R08: 0000000000000001 R09: 0000000000000001 [ 192.153698][ T6690] R10: ffffffff90d9af17 R11: 0000000000000000 R12: ffffffff90d9e2e4 [ 192.161701][ T6690] R13: ffff8880b853c0c0 R14: ffff88801e691e80 R15: ffff8880b853b280 [ 192.169781][ T6690] FS: 00007f146b3be6c0(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 192.178752][ T6690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.185374][ T6690] CR2: 00007f595c017dac CR3: 000000007d6fa000 CR4: 00000000003526f0 [ 192.193469][ T6690] Call Trace: [ 192.196873][ T6690] [ 192.199820][ T6690] __schedule+0x1b7d/0x6120 [ 192.204351][ T6690] ? folios_put_refs+0x66d/0x840 [ 192.209337][ T6690] ? __pfx___schedule+0x10/0x10 [ 192.214211][ T6690] ? folio_batch_move_lru+0x2da/0x460 [ 192.219608][ T6690] ? __pfx_lru_add+0x10/0x10 [ 192.224231][ T6690] ? preempt_schedule_thunk+0x16/0x30 [ 192.229627][ T6690] preempt_schedule_common+0x42/0xc0 [ 192.235028][ T6690] preempt_schedule_thunk+0x16/0x30 [ 192.240248][ T6690] ? __folio_batch_add_and_move+0x604/0xc60 [ 192.246170][ T6690] ? __folio_batch_add_and_move+0x611/0xc60 [ 192.252100][ T6690] __folio_batch_add_and_move+0x616/0xc60 [ 192.257850][ T6690] ? __pfx_lru_add+0x10/0x10 [ 192.262467][ T6690] shmem_alloc_and_add_folio+0x72a/0xd40 [ 192.268131][ T6690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 192.274313][ T6690] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 192.280326][ T6690] shmem_get_folio_gfp+0x6ab/0x1900 [ 192.285560][ T6690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 192.291250][ T6690] shmem_write_begin+0x1a4/0x420 [ 192.296238][ T6690] ? __pfx_shmem_write_begin+0x10/0x10 [ 192.301732][ T6690] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 192.308618][ T6690] ? lockdep_hardirqs_on+0x78/0x100 [ 192.313839][ T6690] generic_perform_write+0x292/0xa40 [ 192.319160][ T6690] ? __pfx_generic_perform_write+0x10/0x10 [ 192.325083][ T6690] ? file_update_time_flags+0x373/0x500 [ 192.330662][ T6690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 192.336501][ T6690] shmem_file_write_iter+0x10e/0x140 [ 192.341840][ T6690] __kernel_write_iter+0x2ac/0x920 [ 192.347002][ T6690] ? __pfx___kernel_write_iter+0x10/0x10 [ 192.352669][ T6690] ? __up_read+0x2c5/0x700 [ 192.357117][ T6690] ? dump_user_range+0x73b/0xb50 [ 192.362077][ T6690] dump_user_range+0x3f9/0xb50 [ 192.366863][ T6690] ? __pfx_dump_user_range+0x10/0x10 [ 192.372182][ T6690] ? __pfx_writenote+0x10/0x10 [ 192.376971][ T6690] elf_core_dump+0x2d5f/0x3d10 [ 192.381763][ T6690] ? __pfx_elf_core_dump+0x10/0x10 [ 192.386894][ T6690] ? kasan_save_stack+0x3f/0x50 [ 192.391781][ T6690] ? kasan_save_stack+0x30/0x50 [ 192.396660][ T6690] ? __kasan_kmalloc+0xaa/0xb0 [ 192.401453][ T6690] ? __kvmalloc_node_noprof+0x360/0xa00 [ 192.407031][ T6690] ? vfs_coredump+0x2105/0x5570 [ 192.411900][ T6690] ? asm_exc_stack_segment+0x26/0x30 [ 192.417208][ T6690] ? 0xffffffffff600000 [ 192.421395][ T6690] ? vfs_coredump+0x27bc/0x5570 [ 192.426267][ T6690] vfs_coredump+0x27bc/0x5570 [ 192.430970][ T6690] ? __pfx_vfs_coredump+0x10/0x10 [ 192.436024][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 192.440988][ T6690] ? lock_acquire+0x1cf/0x380 [ 192.445690][ T6690] ? is_bpf_text_address+0x8a/0x1a0 [ 192.450915][ T6690] ? bpf_ksym_find+0x124/0x1c0 [ 192.455703][ T6690] ? __kernel_text_address+0xd/0x30 [ 192.460932][ T6690] ? unwind_get_return_address+0x59/0xa0 [ 192.466791][ T6690] ? arch_stack_walk+0xa6/0xf0 [ 192.471583][ T6690] ? __sigqueue_free+0xbe/0x2a0 [ 192.476461][ T6690] ? stack_trace_save+0x8e/0xc0 [ 192.481327][ T6690] ? __pfx_stack_trace_save+0x10/0x10 [ 192.486735][ T6690] ? stack_depot_save_flags+0x27/0x9d0 [ 192.492322][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 192.497310][ T6690] ? proc_coredump_connector+0x2d3/0x4f0 [ 192.502977][ T6690] ? __pfx_proc_coredump_connector+0x10/0x10 [ 192.509079][ T6690] ? rcu_is_watching+0x12/0xc0 [ 192.513876][ T6690] get_signal+0x1f2a/0x21e0 [ 192.518405][ T6690] ? __pfx_get_signal+0x10/0x10 [ 192.523276][ T6690] ? force_sig+0xbf/0x100 [ 192.527644][ T6690] arch_do_signal_or_restart+0x91/0x770 [ 192.533244][ T6690] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.539438][ T6690] ? rcu_is_watching+0x12/0xc0 [ 192.544235][ T6690] irqentry_exit+0x1f8/0x670 [ 192.548854][ T6690] asm_exc_stack_segment+0x26/0x30 [ 192.554015][ T6690] RIP: 0033:0x7f146a59c7a1 [ 192.558446][ T6690] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 192.578078][ T6690] RSP: 002b:8000000000000001 EFLAGS: 00010217 [ 192.584165][ T6690] RAX: 0000000000000000 RBX: 00007f146a816090 RCX: 00007f146a59c799 [ 192.592255][ T6690] RDX: 0000200000000080 RSI: 8000000000000001 RDI: 0000000000000006 [ 192.600257][ T6690] RBP: 00007f146a632c99 R08: 0000000000001000 R09: 0000000000000000 [ 192.608243][ T6690] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 192.616232][ T6690] R13: 00007f146a816128 R14: 00007f146a816090 R15: 00007ffd7a9ea6b8 [ 192.624313][ T6690] [ 192.627348][ T6690] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.634643][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.1.139 Not tainted syzkaller #0 PREEMPT(full) [ 192.643856][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 192.653924][ T6690] Call Trace: [ 192.657221][ T6690] [ 192.660187][ T6690] dump_stack_lvl+0x100/0x190 [ 192.664947][ T6690] vpanic+0x552/0x970 [ 192.668954][ T6690] ? __pfx_vpanic+0x10/0x10 [ 192.673480][ T6690] ? lock_release+0x263/0x320 [ 192.678184][ T6690] panic+0xd1/0xe0 [ 192.682012][ T6690] ? __pfx_panic+0x10/0x10 [ 192.686459][ T6690] ? check_panic_on_warn+0x1f/0x90 [ 192.691597][ T6690] check_panic_on_warn.cold+0x19/0x34 [ 192.696989][ T6690] ? update_rq_clock+0x40a/0xd20 [ 192.702030][ T6690] __warn.cold+0x191/0x348 [ 192.706465][ T6690] __report_bug+0x296/0x3d0 [ 192.710986][ T6690] ? update_rq_clock+0x40a/0xd20 [ 192.715945][ T6690] ? __pfx___report_bug+0x10/0x10 [ 192.720989][ T6690] ? __pfx___might_resched+0x10/0x10 [ 192.726305][ T6690] ? prepare_alloc_pages+0x16d/0x5f0 [ 192.731627][ T6690] ? update_rq_clock+0x40a/0xd20 [ 192.736582][ T6690] report_bug+0xb2/0x220 [ 192.740844][ T6690] ? update_rq_clock+0x40a/0xd20 [ 192.745803][ T6690] handle_bug+0x16a/0x2a0 [ 192.750159][ T6690] exc_invalid_op+0x17/0x50 [ 192.754688][ T6690] asm_exc_invalid_op+0x1a/0x20 [ 192.759555][ T6690] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 192.765127][ T6690] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 4b ba 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 192.784778][ T6690] RSP: 0018:ffffc9000c7a6948 EFLAGS: 00010046 [ 192.790950][ T6690] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 192.798961][ T6690] RDX: 0000000000000046 RSI: ffffffff8de57654 RDI: ffffffff8c1afaa0 [ 192.806946][ T6690] RBP: ffffc9000c7a6af0 R08: 0000000000000001 R09: 0000000000000001 [ 192.814930][ T6690] R10: ffffffff90d9af17 R11: 0000000000000000 R12: ffffffff90d9e2e4 [ 192.822923][ T6690] R13: ffff8880b853c0c0 R14: ffff88801e691e80 R15: ffff8880b853b280 [ 192.830925][ T6690] ? update_rq_clock+0x9c/0xd20 [ 192.835797][ T6690] __schedule+0x1b7d/0x6120 [ 192.840337][ T6690] ? folios_put_refs+0x66d/0x840 [ 192.845344][ T6690] ? __pfx___schedule+0x10/0x10 [ 192.850242][ T6690] ? folio_batch_move_lru+0x2da/0x460 [ 192.855642][ T6690] ? __pfx_lru_add+0x10/0x10 [ 192.860695][ T6690] ? preempt_schedule_thunk+0x16/0x30 [ 192.866096][ T6690] preempt_schedule_common+0x42/0xc0 [ 192.871412][ T6690] preempt_schedule_thunk+0x16/0x30 [ 192.876647][ T6690] ? __folio_batch_add_and_move+0x604/0xc60 [ 192.882570][ T6690] ? __folio_batch_add_and_move+0x611/0xc60 [ 192.888494][ T6690] __folio_batch_add_and_move+0x616/0xc60 [ 192.894266][ T6690] ? __pfx_lru_add+0x10/0x10 [ 192.898943][ T6690] shmem_alloc_and_add_folio+0x72a/0xd40 [ 192.904620][ T6690] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 192.910834][ T6690] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 192.916850][ T6690] shmem_get_folio_gfp+0x6ab/0x1900 [ 192.922089][ T6690] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 192.927756][ T6690] shmem_write_begin+0x1a4/0x420 [ 192.932724][ T6690] ? __pfx_shmem_write_begin+0x10/0x10 [ 192.938243][ T6690] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 192.945137][ T6690] ? lockdep_hardirqs_on+0x78/0x100 [ 192.950369][ T6690] generic_perform_write+0x292/0xa40 [ 192.955860][ T6690] ? __pfx_generic_perform_write+0x10/0x10 [ 192.961694][ T6690] ? file_update_time_flags+0x373/0x500 [ 192.967310][ T6690] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 192.973181][ T6690] shmem_file_write_iter+0x10e/0x140 [ 192.978508][ T6690] __kernel_write_iter+0x2ac/0x920 [ 192.983660][ T6690] ? __pfx___kernel_write_iter+0x10/0x10 [ 192.989327][ T6690] ? __up_read+0x2c5/0x700 [ 192.993798][ T6690] ? dump_user_range+0x73b/0xb50 [ 192.998761][ T6690] dump_user_range+0x3f9/0xb50 [ 193.003552][ T6690] ? __pfx_dump_user_range+0x10/0x10 [ 193.008869][ T6690] ? __pfx_writenote+0x10/0x10 [ 193.013656][ T6690] elf_core_dump+0x2d5f/0x3d10 [ 193.018454][ T6690] ? __pfx_elf_core_dump+0x10/0x10 [ 193.023590][ T6690] ? kasan_save_stack+0x3f/0x50 [ 193.028471][ T6690] ? kasan_save_stack+0x30/0x50 [ 193.033355][ T6690] ? __kasan_kmalloc+0xaa/0xb0 [ 193.038146][ T6690] ? __kvmalloc_node_noprof+0x360/0xa00 [ 193.043725][ T6690] ? vfs_coredump+0x2105/0x5570 [ 193.048596][ T6690] ? asm_exc_stack_segment+0x26/0x30 [ 193.053901][ T6690] ? 0xffffffffff600000 [ 193.058118][ T6690] ? vfs_coredump+0x27bc/0x5570 [ 193.062993][ T6690] vfs_coredump+0x27bc/0x5570 [ 193.067815][ T6690] ? __pfx_vfs_coredump+0x10/0x10 [ 193.072910][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 193.077965][ T6690] ? lock_acquire+0x1cf/0x380 [ 193.082671][ T6690] ? is_bpf_text_address+0x8a/0x1a0 [ 193.087902][ T6690] ? bpf_ksym_find+0x124/0x1c0 [ 193.092696][ T6690] ? __kernel_text_address+0xd/0x30 [ 193.097923][ T6690] ? unwind_get_return_address+0x59/0xa0 [ 193.103575][ T6690] ? arch_stack_walk+0xa6/0xf0 [ 193.108361][ T6690] ? __sigqueue_free+0xbe/0x2a0 [ 193.113237][ T6690] ? stack_trace_save+0x8e/0xc0 [ 193.118103][ T6690] ? __pfx_stack_trace_save+0x10/0x10 [ 193.123491][ T6690] ? stack_depot_save_flags+0x27/0x9d0 [ 193.128976][ T6690] ? __lock_acquire+0x4a5/0x2630 [ 193.133955][ T6690] ? proc_coredump_connector+0x2d3/0x4f0 [ 193.139612][ T6690] ? __pfx_proc_coredump_connector+0x10/0x10 [ 193.145622][ T6690] ? rcu_is_watching+0x12/0xc0 [ 193.150417][ T6690] get_signal+0x1f2a/0x21e0 [ 193.154953][ T6690] ? __pfx_get_signal+0x10/0x10 [ 193.159824][ T6690] ? force_sig+0xbf/0x100 [ 193.164172][ T6690] arch_do_signal_or_restart+0x91/0x770 [ 193.169744][ T6690] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 193.175925][ T6690] ? rcu_is_watching+0x12/0xc0 [ 193.180718][ T6690] irqentry_exit+0x1f8/0x670 [ 193.185519][ T6690] asm_exc_stack_segment+0x26/0x30 [ 193.190652][ T6690] RIP: 0033:0x7f146a59c7a1 [ 193.195091][ T6690] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 193.214717][ T6690] RSP: 002b:8000000000000001 EFLAGS: 00010217 [ 193.220807][ T6690] RAX: 0000000000000000 RBX: 00007f146a816090 RCX: 00007f146a59c799 [ 193.228795][ T6690] RDX: 0000200000000080 RSI: 8000000000000001 RDI: 0000000000000006 [ 193.236781][ T6690] RBP: 00007f146a632c99 R08: 0000000000001000 R09: 0000000000000000 [ 193.244767][ T6690] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 193.253274][ T6690] R13: 00007f146a816128 R14: 00007f146a816090 R15: 00007ffd7a9ea6b8 [ 193.261277][ T6690] [ 193.264514][ T6690] Kernel Offset: disabled [ 193.268851][ T6690] Rebooting in 86400 seconds..