last executing test programs: 8.223334348s ago: executing program 2 (id=141): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) inotify_init1$auto(0x2e) memfd_create$auto(0x0, 0xe) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2525000000050019009a000000060004000000000005002300080000003566ca2e7ce8e02b4f3aac6302c7fa3e483c90375aeb3d70008f14bae39cb08ee304e1ac864f6b96459a56356ead3f8f5d1b9f71288edad8ffe347074d3c703c0de2438c331b417fcdd06fb38aaac50b2505b4816590884e9cc67c2ce29515ca2b79c6b803bf98c6a1101619adeff3ae9226caa0e561e9d33b0d345f8e32c4f625926c97ca1c4075ac17714a09dbfbd8313ca91658e5bccad54b17d4803824f501943b540792e0363f7c2f08f2ee76834f08eea9d7a36a0c08c7e6216fbe48c0713d37478aa304fe0531be7c061c7f6e163e5041be29927f80ad0a76"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x5, 0x4cbd5d) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) socket(0xa, 0x1, 0x84) getsockopt$auto(0xffffffffffffffff, 0x10, 0x54, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xb, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, 0x0) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) 7.132791109s ago: executing program 3 (id=144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 6.179923153s ago: executing program 2 (id=148): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)="158f4a2b") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) statx$auto(r3, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x0, 0x5, 0xee00, 0x0, 0xa267, 0xf801, 0x3, 0x7, 0x401, 0x0, {0x4000000000000004, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x5]}) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 6.117084158s ago: executing program 0 (id=150): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 6.015909519s ago: executing program 1 (id=151): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) statx$auto(r3, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x0, 0x5, 0xee00, 0x0, 0xa267, 0xf801, 0x3, 0x7, 0x401, 0x0, {0x4000000000000004, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x5]}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 5.905205222s ago: executing program 3 (id=152): inotify_init1$auto(0x2e) close_range$auto(0xffffffffffffffff, 0x8, 0x10000) memfd_create$auto(0x0, 0xe) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x5, 0x4cbd5d) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) socket(0xa, 0x1, 0x84) getsockopt$auto(0xffffffffffffffff, 0x10, 0x54, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xb, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, 0x0) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) 5.284041015s ago: executing program 2 (id=153): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 5.069877083s ago: executing program 1 (id=154): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 4.973876679s ago: executing program 0 (id=155): mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0c/sub0/hw_params\x00', 0x60800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) futex$auto(0x0, 0x9, 0x7, &(0x7f0000000040)={0xb, 0x401}, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0xffffffffffffffff, 0xa, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000200)=""/220, 0xdc) r5 = open(0x0, 0x22040, 0x75) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) epoll_create$auto(0x3e) renameat2$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00', 0x9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) 4.263353961s ago: executing program 2 (id=156): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) inotify_init1$auto(0x2e) memfd_create$auto(0x0, 0xe) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x5, 0x4cbd5d) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) socket(0xa, 0x1, 0x84) getsockopt$auto(0xffffffffffffffff, 0x10, 0x54, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xb, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, 0x0) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) 4.00225044s ago: executing program 1 (id=157): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) inotify_init1$auto(0x2e) close_range$auto(0xffffffffffffffff, 0x8, 0x10000) memfd_create$auto(0x0, 0xe) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x5, 0x4cbd5d) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='#-$@(,\'H.]&]-[$\x00', 0x0, 0x7fff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x8, 0x4, 0x10, 0x0, 0x20000001, "0573830014ae6d1c64f0c9cfc40a01", "354d40de", ' \x00', "0bea5a5a", ["8844f3d239ba5a2b00d1d4f1", "39eb04fad47fb285746e614c", '\x00', "19c57f7fee8d089a10cdd8c3"]}) write$auto(0x3, 0x0, 0x400000000000050) socket(0xa, 0x1, 0x84) getsockopt$auto(0xffffffffffffffff, 0x10, 0x54, 0x0, 0x0) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0xb, 0x2, 0x0) socket(0xa, 0x1, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000005, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) waitid$auto_P_PIDFD(0x3, r5, &(0x7f0000000000)={@_si_pad}, 0x6, 0x0) capset$auto(&(0x7f0000000140)={0x2, 0xffffffffffffffff}, &(0x7f0000000180)={0x0, 0xfff, 0xf}) 3.447348034s ago: executing program 3 (id=158): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(r2, r3, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) statx$auto(r4, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 3.154688505s ago: executing program 0 (id=159): landlock_restrict_self$auto(0xffffffffffffffff, 0x4) getsockopt$auto_SO_RCVLOWAT(0xffffffffffffffff, 0xff, 0x12, &(0x7f0000000000)='/dev/ppp\x00', &(0x7f0000000040)=0xa) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) mmap$auto(0x0, 0x20009, 0xb, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x10001) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) socket(0x22, 0x6, 0x1) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) mmap$auto(0x0, 0x8001, 0xdf, 0xebe, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) socket(0x2, 0x80000, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop8\x00', 0x6440, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) 2.65832285s ago: executing program 3 (id=160): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050) ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) bpf$auto(0x401, &(0x7f0000000180)=@raw_tracepoint={0x4, r0, 0x0, 0x400}, 0x4) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 2.588706037s ago: executing program 2 (id=161): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)="158f4a2b") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) statx$auto(r3, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x0, 0x5, 0xee00, 0x0, 0xa267, 0xf801, 0x3, 0x7, 0x401, 0x0, {0x4000000000000004, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x5]}) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.422501029s ago: executing program 0 (id=162): close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x48c83, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.953492548s ago: executing program 0 (id=163): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 1.903737672s ago: executing program 1 (id=164): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x40044620, 0x0) 1.652621363s ago: executing program 3 (id=165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRESHEX=r0], 0x1ac}}, 0x40000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 1.062470504s ago: executing program 2 (id=166): preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r2, 0x0, 0x1000200) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) 781.974353ms ago: executing program 0 (id=167): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, 0x0, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r3 = socket(0x2, 0x80002, 0x73) bind$auto(r3, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) open(0x0, 0x22240, 0x154) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x7, 0x1027181, 0x8a0d, 0x8, 0x7, 0x7fc, 0xff, 0x26, 0x4, 0x200000080001, 0x20384, 0xfffffffffffffff4, 0x8, 0x4, 0x30, 0x1ff, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x3b232dd1, 0x0, 0x0, 0x0, 0x200000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x9, 0x0, 0x100000000000, 0x0, 0x4]}, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000100)=0x296) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x2282, 0x0) 694.366248ms ago: executing program 1 (id=168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(r2, r3, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) statx$auto(r4, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x0, 0x5, 0xee00, 0x0, 0xa267, 0xf801, 0x3, 0x7, 0x401, 0x0, {0x4000000000000004, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x5]}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 6.904562ms ago: executing program 1 (id=169): close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r2, 0x1, 0x101, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f0, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xbb}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x2c}, @NCSI_ATTR_PACKAGE_LIST={0x1a5, 0x2, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x10001}, @generic="b80653757eed11b991913c24eb5229f5a8e120d84e2a4d5c79b870f8bdc3ba0d45cf1a264c624b9a2edf3b4ef7e290e2bda0472bc31590d6284437f534220529339812d65eb0bf85335ba736fb2f78f4feec23b8f7b76e1450ea8a14460c6f4e106b942ad9ff3f1f12520ad55eb4c8c0cd1515dbc9d79f73bc2c6010b73a2485c3fb0c9254402c7184f897bee47453e418b82af3d14e1d3fc163c70275d6de14066436d606257c812d8b30faf4a2e50a9ea112ae957d7580ae9e", @generic="bb03e9dd1d8b45c7cb5e357f99d54b7d456a39af90364060b21c28e053d91979936a02c94621138f228167025fceead3e67de20671625a13079c7a7c386512402cfef0c83935746f1bfdbf6ed8af4f0d17300b42e54a7498700025987f46a23c1566ce2e79366cda50ef3a5a543be48eb936b1169ab062911d88e4f04fc447423fb4ad7b571bad3e68a52ec5c6695b8f83b8c65e320cb28662743f516841f621b1496809ac6f2431ed7301bca3a1c2a32bbe7a2a86fdf48edb5c1cf6a8eee4e300dc4b33dd83d60ed7f18ccbf39ad9f6539d3e0082e5fa94dc90013d168ddc"]}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r4}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x1}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xfffffff2}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x49490}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x1}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5f3a286e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x5, 0x2, '\x00'}]}, 0xb4}}, 0x4001) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x69, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x462, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x8000000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0xfffffffe, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xcd8, 0x2000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7e) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r6, 0x65, 0x2, 0x0, 0x5) listen$auto(0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) 0s ago: executing program 3 (id=177): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)="158f4a2b") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) statx$auto(r3, 0x0, 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x0, 0x5, 0xee00, 0x0, 0xa267, 0xf801, 0x3, 0x7, 0x401, 0x0, {0x4000000000000004, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x5]}) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 70.867783][ T5618] cgroup: Unknown subsys name 'net' [ 71.016855][ T5618] cgroup: Unknown subsys name 'cpuset' [ 71.026441][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.506766][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.513877][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.489908][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.507694][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.519265][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.528012][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.537116][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.545718][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.547149][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.556491][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.561315][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.573601][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.583808][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.585298][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.591231][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.599627][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.613428][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.616279][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.635047][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.639104][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.647809][ T4945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.658458][ T4945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.659623][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.146234][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.153518][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.161123][ T5631] bridge_slave_0: entered allmulticast mode [ 76.169712][ T5631] bridge_slave_0: entered promiscuous mode [ 76.212999][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.220488][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.227785][ T5631] bridge_slave_1: entered allmulticast mode [ 76.234855][ T5631] bridge_slave_1: entered promiscuous mode [ 76.320502][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.327794][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.335347][ T5630] bridge_slave_0: entered allmulticast mode [ 76.342523][ T5630] bridge_slave_0: entered promiscuous mode [ 76.353822][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.380332][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.387747][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.395152][ T5630] bridge_slave_1: entered allmulticast mode [ 76.402283][ T5630] bridge_slave_1: entered promiscuous mode [ 76.411756][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.436942][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.444393][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.451727][ T5629] bridge_slave_0: entered allmulticast mode [ 76.458768][ T5629] bridge_slave_0: entered promiscuous mode [ 76.489437][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.496803][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.504363][ T5629] bridge_slave_1: entered allmulticast mode [ 76.511952][ T5629] bridge_slave_1: entered promiscuous mode [ 76.530469][ T5631] team0: Port device team_slave_0 added [ 76.559733][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.571992][ T5631] team0: Port device team_slave_1 added [ 76.604845][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.622579][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.630160][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.637695][ T5632] bridge_slave_0: entered allmulticast mode [ 76.645006][ T5632] bridge_slave_0: entered promiscuous mode [ 76.654643][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.684635][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.692074][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.700142][ T5632] bridge_slave_1: entered allmulticast mode [ 76.704410][ T5634] Bluetooth: hci3: command tx timeout [ 76.706545][ T50] Bluetooth: hci0: command tx timeout [ 76.712644][ T4945] Bluetooth: hci2: command tx timeout [ 76.718523][ T5643] Bluetooth: hci1: command tx timeout [ 76.727575][ T5632] bridge_slave_1: entered promiscuous mode [ 76.738719][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.758901][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.766154][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.792321][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.823730][ T5630] team0: Port device team_slave_0 added [ 76.834534][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.841643][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.867989][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.902370][ T5630] team0: Port device team_slave_1 added [ 76.919296][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.930897][ T5629] team0: Port device team_slave_0 added [ 76.960191][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.971585][ T5629] team0: Port device team_slave_1 added [ 76.987656][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.994668][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.020842][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.067017][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.074491][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.100475][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.130254][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.137443][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.164307][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.186491][ T5632] team0: Port device team_slave_0 added [ 77.198118][ T5631] hsr_slave_0: entered promiscuous mode [ 77.205480][ T5631] hsr_slave_1: entered promiscuous mode [ 77.212530][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.219659][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.245976][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.261092][ T5632] team0: Port device team_slave_1 added [ 77.325266][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.332320][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.358489][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.385299][ T5630] hsr_slave_0: entered promiscuous mode [ 77.391549][ T5630] hsr_slave_1: entered promiscuous mode [ 77.398105][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 77.404045][ T5630] Cannot create hsr debugfs directory [ 77.417282][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.424421][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.450461][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.478007][ T5629] hsr_slave_0: entered promiscuous mode [ 77.484701][ T5629] hsr_slave_1: entered promiscuous mode [ 77.491003][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 77.497380][ T5629] Cannot create hsr debugfs directory [ 77.645618][ T5632] hsr_slave_0: entered promiscuous mode [ 77.651950][ T5632] hsr_slave_1: entered promiscuous mode [ 77.658890][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 77.664687][ T5632] Cannot create hsr debugfs directory [ 78.005987][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.022821][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.031791][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.043902][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.051853][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.061904][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.073187][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.084147][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.165679][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.176365][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.185871][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.195537][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.205494][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.215423][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.223794][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.234158][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.327774][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.341157][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.349835][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.359327][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.367758][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.377249][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.385432][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.398077][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.522842][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.574736][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.585660][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.604267][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.617600][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.632367][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.642497][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.650891][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.660826][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.681027][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.717127][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.729329][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.737000][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.760005][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.767280][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.783856][ T50] Bluetooth: hci3: command tx timeout [ 78.789856][ T5643] Bluetooth: hci2: command tx timeout [ 78.795621][ T50] Bluetooth: hci1: command tx timeout [ 78.796589][ T4945] Bluetooth: hci0: command tx timeout [ 78.833782][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.851740][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.887597][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.894773][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.911922][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.940960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.948348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.964814][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.972015][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.000616][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.007814][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.200918][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.291299][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.326213][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.333437][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.372691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.380038][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.482903][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.037057][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.130394][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.226145][ T5631] veth0_vlan: entered promiscuous mode [ 80.271019][ T5631] veth1_vlan: entered promiscuous mode [ 80.309981][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.401427][ T5630] veth0_vlan: entered promiscuous mode [ 80.426896][ T5631] veth0_macvtap: entered promiscuous mode [ 80.450647][ T5630] veth1_vlan: entered promiscuous mode [ 80.458657][ T5631] veth1_macvtap: entered promiscuous mode [ 80.469036][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.498576][ T5629] veth0_vlan: entered promiscuous mode [ 80.518159][ T5629] veth1_vlan: entered promiscuous mode [ 80.537342][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.561030][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.595862][ T5630] veth0_macvtap: entered promiscuous mode [ 80.606077][ T200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.616553][ T200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.635927][ T5630] veth1_macvtap: entered promiscuous mode [ 80.643921][ T200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.653995][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.706580][ T5632] veth0_vlan: entered promiscuous mode [ 80.717652][ T5629] veth0_macvtap: entered promiscuous mode [ 80.728541][ T5629] veth1_macvtap: entered promiscuous mode [ 80.748133][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.782385][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.792716][ T5632] veth1_vlan: entered promiscuous mode [ 80.824076][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.850056][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860122][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.869978][ T4945] Bluetooth: hci0: command tx timeout [ 80.869992][ T50] Bluetooth: hci3: command tx timeout [ 80.873677][ T5643] Bluetooth: hci2: command tx timeout [ 80.877182][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.880818][ T50] Bluetooth: hci1: command tx timeout [ 80.908119][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.931360][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.947401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.966704][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.009836][ T200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.020975][ T200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.052623][ T200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080092][ T200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.096886][ T5632] veth0_macvtap: entered promiscuous mode [ 81.125268][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.137917][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.156673][ T5632] veth1_macvtap: entered promiscuous mode [ 81.214468][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.231871][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.244017][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.284321][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.311215][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.399979][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.409293][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.421418][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.430051][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445401][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.460052][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.472357][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.494819][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.608945][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.625518][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.784713][ T3308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.807296][ T3308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.886377][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.922778][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.394280][ T5791] smpboot: CPU 1 is now offline [ 82.557433][ T5803] ubi0: attaching mtd0 [ 82.711350][ T5803] ubi0: scanning is finished [ 82.759363][ T5795] process 'syz.0.5' launched ':,' with NULL argv: empty string added [ 82.777863][ T5803] ubi0: empty MTD device detected [ 82.883543][ T50] Bluetooth: hci0: command tx timeout [ 82.903914][ T50] Bluetooth: hci1: command tx timeout [ 82.943510][ T50] Bluetooth: hci2: command tx timeout [ 82.949496][ T5643] Bluetooth: hci3: command tx timeout [ 83.362787][ T5803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.362817][ T5803] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 83.362831][ T5803] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.362843][ T5803] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 83.362856][ T5803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.362868][ T5803] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 83.362880][ T5803] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2330593479 [ 83.362895][ T5803] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.366430][ T5814] ubi0: background thread "ubi_bgt0d" started, PID 5814 [ 83.369373][ T5787] ubi0: detaching mtd0 [ 83.503022][ T5787] ubi0: mtd0 is detached [ 83.789161][ T5810] ubi0: attaching mtd0 [ 83.799740][ T5810] ubi0: scanning is finished [ 84.128199][ T5810] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 84.128221][ T5810] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 84.128240][ T5810] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 84.128252][ T5810] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 84.128276][ T5810] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 84.128288][ T5810] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 84.128300][ T5810] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 84.128314][ T5810] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 84.135143][ T5819] ubi0: background thread "ubi_bgt0d" started, PID 5819 [ 84.143737][ T5813] ubi0: detaching mtd0 [ 84.212410][ T5813] ubi0: mtd0 is detached [ 84.487247][ T24] cfg80211: failed to load regulatory.db [ 85.643547][ T5826] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.044520][ T5826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.409576][ T5826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.540242][ T5826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.836964][ T5826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.400897][ T5859] netlink: 342 bytes leftover after parsing attributes in process `syz.1.16'. [ 87.459197][ T5859] Zero length message leads to an empty skb [ 89.586513][ T5881] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.751045][ T5883] FAULT_INJECTION: forcing a failure. [ 89.751045][ T5883] name failslab, interval 1, probability 0, space 0, times 1 [ 89.764531][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 89.764553][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.764568][ T5883] Call Trace: [ 89.764574][ T5883] [ 89.764581][ T5883] dump_stack_lvl+0x100/0x190 [ 89.764607][ T5883] should_fail_ex.cold+0x5/0xa [ 89.764628][ T5883] should_failslab+0xc2/0x120 [ 89.764647][ T5883] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 89.764662][ T5883] ? __alloc_skb+0x140/0x710 [ 89.764682][ T5883] __alloc_skb+0x140/0x710 [ 89.764699][ T5883] ? __pfx___alloc_skb+0x10/0x10 [ 89.764717][ T5883] ? lock_acquire+0x1b1/0x370 [ 89.764734][ T5883] tipc_buf_acquire+0x26/0xe0 [ 89.764756][ T5883] tipc_msg_create+0x39/0x1d0 [ 89.764778][ T5883] tipc_group_create_event+0x25f/0x6b0 [ 89.764806][ T5883] ? __pfx_tipc_group_create_event+0x10/0x10 [ 89.764832][ T5883] ? tipc_group_proto_xmit+0x150/0x7c0 [ 89.764854][ T5883] ? tipc_group_proto_xmit+0x3bf/0x7c0 [ 89.764877][ T5883] tipc_group_proto_rcv+0x186c/0x1e40 [ 89.764892][ T5883] ? drm_connector_set_orientation_from_panel+0x14b/0x250 [ 89.764916][ T5883] tipc_sk_filter_rcv+0x18e6/0x3230 [ 89.764951][ T5883] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 89.764970][ T5883] ? tipc_sk_lookup+0x474/0xa00 [ 89.765002][ T5883] tipc_sk_rcv+0xea5/0x1c90 [ 89.765023][ T5883] ? __kasan_slab_alloc+0x89/0x90 [ 89.765040][ T5883] ? tipc_buf_acquire+0x26/0xe0 [ 89.765061][ T5883] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 89.765091][ T5883] ? find_held_lock+0x2b/0x80 [ 89.765109][ T5883] ? tipc_node_xmit+0x1f6/0xfb0 [ 89.765130][ T5883] ? lockdep_init_map_type+0x5c/0x250 [ 89.765148][ T5883] tipc_node_xmit+0x23e/0xfb0 [ 89.765172][ T5883] ? __pfx_tipc_node_xmit+0x10/0x10 [ 89.765193][ T5883] ? __kasan_slab_alloc+0x89/0x90 [ 89.765215][ T5883] ? kmalloc_reserve+0xf9/0x350 [ 89.765239][ T5883] ? tipc_node_distr_xmit+0x177/0x3c0 [ 89.765261][ T5883] tipc_node_distr_xmit+0x177/0x3c0 [ 89.765289][ T5883] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 89.765318][ T5883] ? tipc_group_update_member+0x118/0x540 [ 89.765344][ T5883] tipc_group_join+0xfa/0x220 [ 89.765367][ T5883] ? __pfx_tipc_group_join+0x10/0x10 [ 89.765399][ T5883] tipc_setsockopt+0x841/0xe30 [ 89.765417][ T5883] ? __pfx_tipc_setsockopt+0x10/0x10 [ 89.765441][ T5883] ? __pfx_tipc_setsockopt+0x10/0x10 [ 89.765459][ T5883] do_sock_setsockopt+0xf3/0x1d0 [ 89.765483][ T5883] __sys_setsockopt+0x119/0x190 [ 89.765504][ T5883] __x64_sys_setsockopt+0xbd/0x160 [ 89.765521][ T5883] ? do_syscall_64+0x90/0xf80 [ 89.765534][ T5883] ? lockdep_hardirqs_on+0x78/0x100 [ 89.765556][ T5883] do_syscall_64+0x10b/0xf80 [ 89.765569][ T5883] ? clear_bhb_loop+0x40/0x90 [ 89.765587][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.765602][ T5883] RIP: 0033:0x7fecc8b9ce59 [ 89.765616][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.765630][ T5883] RSP: 002b:00007fecc9a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.765650][ T5883] RAX: ffffffffffffffda RBX: 00007fecc8e15fa0 RCX: 00007fecc8b9ce59 [ 89.765660][ T5883] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 89.765668][ T5883] RBP: 00007fecc8c32d6f R08: 0000000000000014 R09: 0000000000000000 [ 89.765677][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.765685][ T5883] R13: 00007fecc8e16038 R14: 00007fecc8e15fa0 R15: 00007ffe03d15478 [ 89.765704][ T5883] [ 91.011848][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 91.068939][ T5889] ubi0: attaching mtd0 [ 91.084545][ T5889] ubi0: scanning is finished [ 91.465741][ T5889] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.500671][ T5889] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.608857][ T5889] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.656233][ T5889] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 91.702224][ T5889] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.741886][ T5889] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.783338][ T5889] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 91.843632][ T5889] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.898169][ T5900] ubi0: background thread "ubi_bgt0d" started, PID 5900 [ 91.905698][ T5888] ubi0: detaching mtd0 [ 91.956758][ T5888] ubi0: mtd0 is detached [ 91.987971][ T5899] ubi0: attaching mtd0 [ 92.027847][ T5899] ubi0: scanning is finished [ 92.274318][ T5899] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 92.335904][ T5899] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 92.403842][ T5899] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 92.455328][ T5899] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 92.546188][ T5899] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 92.622025][ T5899] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 92.670115][ T5899] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 92.726864][ T5899] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 92.786974][ T5909] ubi0: background thread "ubi_bgt0d" started, PID 5909 [ 92.794161][ T5901] ubi0: detaching mtd0 [ 92.838179][ T5901] ubi0: mtd0 is detached [ 93.115754][ T5913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.132533][ T5923] netlink: zone id is out of range [ 93.164839][ T5923] netlink: zone id is out of range [ 93.200032][ T5923] netlink: zone id is out of range [ 93.227483][ T5923] netlink: zone id is out of range [ 93.260682][ T5925] netlink: zone id is out of range [ 93.286841][ T5923] netlink: zone id is out of range [ 93.303393][ T5925] netlink: zone id is out of range [ 93.320652][ T5923] netlink: zone id is out of range [ 93.358422][ T5925] netlink: zone id is out of range [ 93.386740][ T5923] netlink: zone id is out of range [ 93.679120][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 94.945282][ T5939] ubi0: attaching mtd0 [ 94.978025][ T5939] ubi0: scanning is finished [ 95.245590][ T5939] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.291398][ T5939] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 95.346340][ T5939] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.391867][ T5939] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 95.480566][ T5939] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.522869][ T5939] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 95.578139][ T5939] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 95.640611][ T5939] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.709810][ T5941] ubi0: detaching mtd0 [ 95.714021][ T5953] ubi0: background thread "ubi_bgt0d" started, PID 5953 [ 95.730725][ T5957] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 95.742836][ T5948] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.769288][ T5941] ubi0: mtd0 is detached [ 96.017935][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.126569][ T5960] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.180099][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 97.105075][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 97.778839][ T5980] smpboot: CPU 1 is now offline [ 97.811569][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.098330][ T6056] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 102.333525][ T6058] ubi0: attaching mtd0 [ 102.340971][ T6058] ubi0: scanning is finished [ 102.541141][ T6058] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 102.581561][ T6058] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 102.651810][ T6058] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 102.697086][ T6058] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 102.737035][ T6058] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 102.781514][ T6058] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 102.806503][ T6058] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 102.882084][ T6058] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 102.959514][ T6064] ubi0: background thread "ubi_bgt0d" started, PID 6064 [ 102.961079][ T6060] ubi0: detaching mtd0 [ 103.018223][ T6060] ubi0: mtd0 is detached [ 103.978631][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 104.160817][ T6092] smpboot: CPU 1 is now offline [ 104.341592][ T6099] ubi0: attaching mtd0 [ 104.362087][ T6099] ubi0: scanning is finished [ 104.583100][ T6099] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.583138][ T6099] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.583151][ T6099] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.583163][ T6099] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 104.583176][ T6099] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.587290][ T6099] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.587310][ T6099] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 104.587324][ T6099] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.589142][ T6106] ubi0: background thread "ubi_bgt0d" started, PID 6106 [ 104.589187][ T6102] ubi0: detaching mtd0 [ 104.601814][ T6102] ubi0: mtd0 is detached [ 105.369064][ T6116] ubi0: attaching mtd0 [ 105.399267][ T6116] ubi0: scanning is finished [ 105.701502][ T6116] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 105.767978][ T6123] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 105.813507][ T6116] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 105.895516][ T6116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 105.902574][ T6116] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 105.910201][ T6116] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 105.917164][ T6116] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 105.925402][ T6116] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 105.935480][ T6116] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 105.946883][ T6127] ubi0: background thread "ubi_bgt0d" started, PID 6127 [ 105.966028][ T6118] ubi0: detaching mtd0 [ 106.088294][ T6118] ubi0: mtd0 is detached [ 106.746511][ T6139] random: crng reseeded on system resumption [ 106.902950][ T6140] smpboot: CPU 1 is now offline [ 108.016727][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 108.561849][ T6163] ubi0: attaching mtd0 [ 108.598212][ T6163] ubi0: scanning is finished [ 108.852864][ T6163] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 108.852885][ T6163] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 108.852898][ T6163] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 108.852920][ T6163] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 108.852933][ T6163] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 108.852945][ T6163] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 108.852957][ T6163] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 108.852971][ T6163] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 108.854380][ T6173] ubi0: background thread "ubi_bgt0d" started, PID 6173 [ 108.855208][ T6165] ubi0: detaching mtd0 [ 108.922538][ T6165] ubi0: mtd0 is detached [ 110.064485][ T6183] ubi0: attaching mtd0 [ 110.089293][ T6183] ubi0: scanning is finished [ 110.188129][ T6183] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.239559][ T6183] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.317264][ T6183] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.378980][ T6183] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 110.379002][ T6183] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.379014][ T6183] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.379027][ T6183] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 110.379041][ T6183] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.379077][ T6191] ubi0: background thread "ubi_bgt0d" started, PID 6191 [ 110.380631][ T6187] ubi0: detaching mtd0 [ 110.416259][ T6187] ubi0: mtd0 is detached [ 111.124445][ T6200] ubi0: attaching mtd0 [ 111.145527][ T6200] ubi0: scanning is finished [ 111.347298][ T6200] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.409248][ T6205] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 111.431879][ T6200] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.524275][ T6200] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.608010][ T6200] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 111.615633][ T6200] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.622608][ T6200] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.630714][ T6200] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 111.640877][ T6200] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.651369][ T6208] ubi0: background thread "ubi_bgt0d" started, PID 6208 [ 111.674546][ T6204] ubi0: detaching mtd0 [ 111.835153][ T6204] ubi0: mtd0 is detached [ 113.091438][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 114.008738][ T6241] netlink: 342 bytes leftover after parsing attributes in process `syz.0.88'. [ 115.104310][ T6252] random: crng reseeded on system resumption [ 115.509817][ T6245] ubi0: attaching mtd0 [ 115.532264][ T6245] ubi0: scanning is finished [ 115.790348][ T6245] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.790384][ T6245] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.790409][ T6245] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.790432][ T6245] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.790456][ T6245] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.790479][ T6245] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.790502][ T6245] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 115.790529][ T6245] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.790599][ T6261] ubi0: background thread "ubi_bgt0d" started, PID 6261 [ 115.790609][ T6251] ubi0: detaching mtd0 [ 115.888714][ T6251] ubi0: mtd0 is detached [ 116.175868][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.2.91'. [ 116.470810][ T6269] smpboot: CPU 1 is now offline [ 120.949811][ T6310] ubi0: attaching mtd0 [ 120.982657][ T6310] ubi0: scanning is finished [ 121.260330][ T6310] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 121.315695][ T6310] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 121.372602][ T6310] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 121.414166][ T6310] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 121.457020][ T6310] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 121.512672][ T6310] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 121.584861][ T6310] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 121.646926][ T6310] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 121.711423][ T6315] ubi0: detaching mtd0 [ 121.724293][ T6326] ubi0: background thread "ubi_bgt0d" started, PID 6326 [ 121.787501][ T6315] ubi0: mtd0 is detached [ 122.280608][ T6338] random: crng reseeded on system resumption [ 123.424003][ T6344] ubi0: attaching mtd0 [ 123.462576][ T6344] ubi0: scanning is finished [ 123.813362][ T6344] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.912197][ T6344] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 124.012712][ T6344] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 124.095549][ T6344] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 124.177739][ T6344] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 124.252100][ T6344] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.349365][ T6344] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 124.464915][ T6344] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.564675][ T6342] ubi0: detaching mtd0 [ 124.570316][ T6354] ubi0: background thread "ubi_bgt0d" started, PID 6354 [ 124.625762][ T6342] ubi0: mtd0 is detached [ 124.970951][ T6357] ubi0: attaching mtd0 [ 124.995026][ T6357] ubi0: scanning is finished [ 125.177573][ T6357] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 125.258964][ T6357] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 125.258986][ T6357] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 125.258999][ T6357] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 125.259011][ T6357] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 125.259023][ T6357] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 125.259035][ T6357] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 125.259049][ T6357] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 125.259092][ T6359] ubi0: detaching mtd0 [ 125.476853][ T6359] ubi0: mtd0 is detached [ 127.502569][ T6385] ubi0: attaching mtd0 [ 127.569745][ T6385] ubi0: scanning is finished [ 127.866681][ T6385] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 127.920964][ T6385] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 127.997829][ T6385] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.043989][ T6385] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 128.090467][ T6385] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.139689][ T6385] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.225895][ T6385] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 128.285685][ T6385] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.341769][ T6388] ubi0: detaching mtd0 [ 128.350036][ T6403] ubi0: background thread "ubi_bgt0d" started, PID 6403 [ 128.392308][ T6388] ubi0: mtd0 is detached [ 128.905797][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 130.682833][ T6432] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 131.727204][ T29] audit: type=1800 audit(1779579610.895:2): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.125" name="file0" dev="tmpfs" ino=193 res=0 errno=0 [ 132.324415][ T6455] netlink: 342 bytes leftover after parsing attributes in process `syz.0.128'. [ 132.947492][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953958][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.326429][ T6481] ubi0: attaching mtd0 [ 134.345795][ T6481] ubi0: scanning is finished [ 134.500795][ T6481] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 134.500827][ T6481] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 134.500850][ T6481] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 134.500871][ T6481] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 134.502303][ T6481] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 134.502331][ T6481] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 134.502355][ T6481] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 134.502382][ T6481] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 134.502467][ T6482] ubi0: detaching mtd0 [ 134.512038][ T6482] ubi0: mtd0 is detached [ 135.183655][ T29] audit: type=1800 audit(1779579614.365:3): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.137" name="file0" dev="tmpfs" ino=194 res=0 errno=0 [ 135.238151][ T29] audit: type=1800 audit(1779579614.405:4): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.136" name="file0" dev="tmpfs" ino=203 res=0 errno=0 [ 136.242651][ T6512] ubi0: attaching mtd0 [ 136.255647][ T6512] ubi0: scanning is finished [ 136.442941][ T6512] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 136.457119][ T6512] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 136.485637][ T6512] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 136.504559][ T6512] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 136.524831][ T6512] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 136.541974][ T6512] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 136.576224][ T6512] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 136.625054][ T6512] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 136.692074][ T6521] ubi0: background thread "ubi_bgt0d" started, PID 6521 [ 136.701554][ T6515] ubi0: detaching mtd0 [ 136.769279][ T6515] ubi0: mtd0 is detached [ 139.306207][ T6577] smpboot: CPU 1 is now offline [ 139.482318][ T29] audit: type=1800 audit(1779579618.655:5): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="file0" dev="tmpfs" ino=222 res=0 errno=0 [ 140.078780][ T6589] FAULT_INJECTION: forcing a failure. [ 140.078780][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 140.154932][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 140.154956][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.154965][ T6589] Call Trace: [ 140.154971][ T6589] [ 140.154978][ T6589] dump_stack_lvl+0x100/0x190 [ 140.155024][ T6589] should_fail_ex.cold+0x5/0xa [ 140.155044][ T6589] ? tomoyo_realpath_from_path+0xb6/0x690 [ 140.155065][ T6589] should_failslab+0xc2/0x120 [ 140.155084][ T6589] __kmalloc_noprof+0xe0/0x850 [ 140.155097][ T6589] ? kfree+0x1dd/0x6c0 [ 140.155128][ T6589] tomoyo_realpath_from_path+0xb6/0x690 [ 140.155153][ T6589] tomoyo_path_number_perm+0x23c/0x580 [ 140.155171][ T6589] ? tomoyo_path_number_perm+0x22e/0x580 [ 140.155190][ T6589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.155209][ T6589] ? rcu_read_unlock+0x17/0x60 [ 140.155245][ T6589] ? current_check_access_path+0x269/0x430 [ 140.155266][ T6589] ? __pfx_current_check_access_path+0x10/0x10 [ 140.155287][ T6589] ? d_alloc_parallel+0x864/0x14e0 [ 140.155306][ T6589] tomoyo_path_mknod+0x164/0x190 [ 140.155327][ T6589] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 140.155348][ T6589] ? find_held_lock+0x2b/0x80 [ 140.155368][ T6589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.155392][ T6589] security_path_mknod+0x161/0x300 [ 140.155413][ T6589] may_o_create+0x30/0x3a0 [ 140.155438][ T6589] lookup_open.isra.0+0xa0d/0x11b0 [ 140.155458][ T6589] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 140.155477][ T6589] ? __pfx___might_resched+0x10/0x10 [ 140.155494][ T6589] ? mnt_get_write_access+0x52/0x2f0 [ 140.155520][ T6589] ? __pfx_down_write+0x10/0x10 [ 140.155536][ T6589] ? mnt_get_write_access+0x1e9/0x2f0 [ 140.155561][ T6589] path_openat+0x2291/0x31a0 [ 140.155583][ T6589] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 140.155602][ T6589] ? __pfx_path_openat+0x10/0x10 [ 140.155627][ T6589] do_file_open+0x20e/0x430 [ 140.155647][ T6589] ? __pfx_do_file_open+0x10/0x10 [ 140.155679][ T6589] ? _raw_spin_unlock+0x28/0x50 [ 140.155698][ T6589] ? alloc_fd+0x476/0x790 [ 140.155722][ T6589] do_sys_openat2+0x10d/0x1e0 [ 140.155744][ T6589] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.155774][ T6589] __x64_sys_open+0xfe/0x1d0 [ 140.155795][ T6589] ? __pfx___x64_sys_open+0x10/0x10 [ 140.155816][ T6589] ? ksys_read+0x1ac/0x250 [ 140.155835][ T6589] ? rcu_is_watching+0x12/0xc0 [ 140.155855][ T6589] do_syscall_64+0x10b/0xf80 [ 140.155868][ T6589] ? clear_bhb_loop+0x40/0x90 [ 140.155885][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.155900][ T6589] RIP: 0033:0x7fecc8b9ce59 [ 140.155922][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.155937][ T6589] RSP: 002b:00007fecc9a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 140.155953][ T6589] RAX: ffffffffffffffda RBX: 00007fecc8e15fa0 RCX: 00007fecc8b9ce59 [ 140.155963][ T6589] RDX: 0000000000000075 RSI: 0000000000022040 RDI: 0000000000000000 [ 140.155972][ T6589] RBP: 00007fecc8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 140.155981][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.155990][ T6589] R13: 00007fecc8e16038 R14: 00007fecc8e15fa0 R15: 00007ffe03d15478 [ 140.156010][ T6589] [ 140.156028][ T6589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.685502][ T6629] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 143.575343][ T6637] ubi0: attaching mtd0 [ 143.592012][ T6637] ubi0: scanning is finished [ 143.874242][ T6637] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 143.874279][ T6637] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 143.874303][ T6637] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 143.874325][ T6637] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 143.874350][ T6637] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 143.874372][ T6637] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 143.874395][ T6637] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2330593479 [ 143.874423][ T6637] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 143.874473][ T6648] ubi0: background thread "ubi_bgt0d" started, PID 6648 [ 143.887280][ T6640] ubi0: detaching mtd0 [ 143.911873][ T6640] ubi0: mtd0 is detached [ 144.595253][ T6661] smpboot: CPU 1 is now offline [ 145.096121][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 145.204669][ T6668] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 145.232495][ T2035] ------------[ cut here ]------------ [ 145.233364][ T2035] [ 145.233369][ T2035] ====================================================== [ 145.233374][ T2035] WARNING: possible circular locking dependency detected [ 145.233380][ T2035] syzkaller #0 Not tainted [ 145.233387][ T2035] ------------------------------------------------------ [ 145.233391][ T2035] kworker/0:1H/2035 is trying to acquire lock: [ 145.233398][ T2035] ffffffff8e6f1560 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 145.233437][ T2035] [ 145.233437][ T2035] but task is already holding lock: [ 145.233441][ T2035] ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 145.233475][ T2035] [ 145.233475][ T2035] which lock already depends on the new lock. [ 145.233475][ T2035] [ 145.233479][ T2035] [ 145.233479][ T2035] the existing dependency chain (in reverse order) is: [ 145.233483][ T2035] [ 145.233483][ T2035] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 145.233502][ T2035] _raw_spin_lock_nested+0x31/0x40 [ 145.233523][ T2035] raw_spin_rq_lock_nested+0x2c/0x140 [ 145.233541][ T2035] _task_rq_lock+0xcf/0x510 [ 145.233558][ T2035] cgroup_move_task+0x81/0x320 [ 145.233577][ T2035] css_set_move_task+0x285/0x600 [ 145.233589][ T2035] cgroup_post_fork+0x202/0x9b0 [ 145.233609][ T2035] copy_process+0x5b9a/0x7ed0 [ 145.233636][ T2035] kernel_clone+0x12e/0x9c0 [ 145.233654][ T2035] user_mode_thread+0xcc/0x110 [ 145.233672][ T2035] rest_init+0x21/0x260 [ 145.233690][ T2035] start_kernel+0x484/0x490 [ 145.233711][ T2035] x86_64_start_reservations+0x24/0x30 [ 145.233724][ T2035] x86_64_start_kernel+0x12b/0x130 [ 145.233735][ T2035] common_startup_64+0x13e/0x148 [ 145.233753][ T2035] [ 145.233753][ T2035] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 145.233770][ T2035] _raw_spin_lock_irqsave+0x3a/0x60 [ 145.233788][ T2035] try_to_wake_up+0xb5/0x1900 [ 145.233805][ T2035] __wake_up_common+0x135/0x1f0 [ 145.233817][ T2035] __wake_up+0x31/0x60 [ 145.233836][ T2035] tty_port_default_wakeup+0x52/0x70 [ 145.233850][ T2035] serial8250_tx_chars+0x68f/0x860 [ 145.233864][ T2035] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 145.233880][ T2035] serial8250_handle_irq.part.0+0xb4/0x530 [ 145.233895][ T2035] serial8250_default_handle_irq+0xc2/0x290 [ 145.233909][ T2035] serial8250_interrupt+0xf8/0x1c0 [ 145.233925][ T2035] __handle_irq_event_percpu+0x235/0x8c0 [ 145.233943][ T2035] handle_irq_event+0xab/0x1e0 [ 145.233959][ T2035] handle_edge_irq+0x35e/0x960 [ 145.233974][ T2035] __common_interrupt+0xd8/0x2f0 [ 145.233995][ T2035] common_interrupt+0xb9/0xe0 [ 145.234010][ T2035] asm_common_interrupt+0x26/0x40 [ 145.234024][ T2035] get_page_from_freelist+0x932/0x33b0 [ 145.234045][ T2035] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 145.234067][ T2035] alloc_pages_mpol+0x1fb/0x540 [ 145.234082][ T2035] folio_alloc_mpol_noprof+0x36/0x260 [ 145.234099][ T2035] vma_alloc_folio_noprof+0xed/0x1d0 [ 145.234116][ T2035] do_wp_page+0x1ee1/0x4380 [ 145.234133][ T2035] __handle_mm_fault+0x1ab6/0x2a00 [ 145.234152][ T2035] handle_mm_fault+0x36d/0xa20 [ 145.234171][ T2035] do_user_addr_fault+0x5a3/0x12f0 [ 145.234187][ T2035] exc_page_fault+0x6f/0xd0 [ 145.234206][ T2035] asm_exc_page_fault+0x26/0x30 [ 145.234218][ T2035] [ 145.234218][ T2035] -> #2 (&tty->write_wait){-...}-{3:3}: [ 145.234235][ T2035] _raw_spin_lock_irqsave+0x3a/0x60 [ 145.234253][ T2035] __wake_up+0x1c/0x60 [ 145.234271][ T2035] tty_port_default_wakeup+0x52/0x70 [ 145.234284][ T2035] serial8250_tx_chars+0x68f/0x860 [ 145.234297][ T2035] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 145.234311][ T2035] serial8250_handle_irq.part.0+0xb4/0x530 [ 145.234325][ T2035] serial8250_default_handle_irq+0xc2/0x290 [ 145.234339][ T2035] serial8250_interrupt+0xf8/0x1c0 [ 145.234355][ T2035] __handle_irq_event_percpu+0x235/0x8c0 [ 145.234372][ T2035] handle_irq_event+0xab/0x1e0 [ 145.234387][ T2035] handle_edge_irq+0x35e/0x960 [ 145.234402][ T2035] __common_interrupt+0xd8/0x2f0 [ 145.234421][ T2035] common_interrupt+0xb9/0xe0 [ 145.234437][ T2035] asm_common_interrupt+0x26/0x40 [ 145.234449][ T2035] _raw_spin_unlock_irqrestore+0x31/0x80 [ 145.234468][ T2035] uart_write+0x29d/0xb20 [ 145.234479][ T2035] n_tty_write+0x431/0x11c0 [ 145.234494][ T2035] file_tty_write.isra.0+0x4d2/0x890 [ 145.234514][ T2035] redirected_tty_write+0xd4/0x120 [ 145.234534][ T2035] vfs_write+0x6ac/0x1070 [ 145.234549][ T2035] ksys_write+0x12a/0x250 [ 145.234563][ T2035] do_syscall_64+0x10b/0xf80 [ 145.234574][ T2035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.234587][ T2035] [ 145.234587][ T2035] -> #1 (&port_lock_key){-...}-{3:3}: [ 145.234603][ T2035] _raw_spin_lock_irqsave+0x3a/0x60 [ 145.234622][ T2035] serial8250_console_write+0x17e/0x1900 [ 145.234642][ T2035] console_flush_one_record+0x790/0xe50 [ 145.234659][ T2035] console_unlock+0x103/0x260 [ 145.234674][ T2035] vprintk_emit+0x407/0x6b0 [ 145.234690][ T2035] _printk+0xcf/0x110 [ 145.234702][ T2035] register_console.cold+0xc0/0x248 [ 145.234715][ T2035] univ8250_console_init+0x6f/0x80 [ 145.234733][ T2035] console_init+0x3f7/0x5e0 [ 145.234748][ T2035] start_kernel+0x30a/0x490 [ 145.234767][ T2035] x86_64_start_reservations+0x24/0x30 [ 145.234779][ T2035] x86_64_start_kernel+0x12b/0x130 [ 145.234791][ T2035] common_startup_64+0x13e/0x148 [ 145.234807][ T2035] [ 145.234807][ T2035] -> #0 (console_owner){-...}-{0:0}: [ 145.234823][ T2035] __lock_acquire+0x14b8/0x2630 [ 145.234835][ T2035] lock_acquire+0x1b1/0x370 [ 145.234846][ T2035] console_lock_spinning_enable+0x72/0x80 [ 145.234862][ T2035] console_flush_one_record+0x739/0xe50 [ 145.234880][ T2035] console_unlock+0x103/0x260 [ 145.234896][ T2035] vprintk_emit+0x407/0x6b0 [ 145.234911][ T2035] _printk+0xcf/0x110 [ 145.234922][ T2035] __report_bug.cold+0x15/0x137 [ 145.234935][ T2035] report_bug+0xb2/0x220 [ 145.234954][ T2035] handle_bug+0x16a/0x2a0 [ 145.234967][ T2035] exc_invalid_op+0x17/0x50 [ 145.234980][ T2035] asm_exc_invalid_op+0x1a/0x20 [ 145.234992][ T2035] update_rq_clock+0x40a/0xd20 [ 145.235010][ T2035] __schedule+0x1e84/0x67a0 [ 145.235028][ T2035] schedule+0xdd/0x390 [ 145.235045][ T2035] worker_thread+0x53b/0xe50 [ 145.235058][ T2035] kthread+0x370/0x450 [ 145.235068][ T2035] ret_from_fork+0x72b/0xd50 [ 145.235082][ T2035] ret_from_fork_asm+0x1a/0x30 [ 145.235099][ T2035] [ 145.235099][ T2035] other info that might help us debug this: [ 145.235099][ T2035] [ 145.235103][ T2035] Chain exists of: [ 145.235103][ T2035] console_owner --> &p->pi_lock --> &rq->__lock [ 145.235103][ T2035] [ 145.235122][ T2035] Possible unsafe locking scenario: [ 145.235122][ T2035] [ 145.235125][ T2035] CPU0 CPU1 [ 145.235129][ T2035] ---- ---- [ 145.235132][ T2035] lock(&rq->__lock); [ 145.235140][ T2035] lock(&p->pi_lock); [ 145.235148][ T2035] lock(&rq->__lock); [ 145.235157][ T2035] lock(console_owner); [ 145.235165][ T2035] [ 145.235165][ T2035] *** DEADLOCK *** [ 145.235165][ T2035] [ 145.235168][ T2035] 3 locks held by kworker/0:1H/2035: [ 145.235175][ T2035] #0: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 145.235210][ T2035] #1: ffffffff8e7d19a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 145.235239][ T2035] #2: ffffffff8e7d1a18 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 145.235273][ T2035] [ 145.235273][ T2035] stack backtrace: [ 145.235280][ T2035] CPU: 0 UID: 0 PID: 2035 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 145.235296][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.235309][ T2035] Workqueue: 0x0 (events_highpri) [ 145.235325][ T2035] Call Trace: [ 145.235330][ T2035] [ 145.235336][ T2035] dump_stack_lvl+0x100/0x190 [ 145.235350][ T2035] print_circular_bug.cold+0x178/0x1c7 [ 145.235373][ T2035] check_noncircular+0x146/0x160 [ 145.235396][ T2035] __lock_acquire+0x14b8/0x2630 [ 145.235412][ T2035] lock_acquire+0x1b1/0x370 [ 145.235424][ T2035] ? console_lock_spinning_enable+0x61/0x80 [ 145.235442][ T2035] ? console_lock_spinning_enable+0x4a/0x80 [ 145.235460][ T2035] console_lock_spinning_enable+0x72/0x80 [ 145.235478][ T2035] ? console_lock_spinning_enable+0x61/0x80 [ 145.235494][ T2035] console_flush_one_record+0x739/0xe50 [ 145.235513][ T2035] ? __pfx_console_flush_one_record+0x10/0x10 [ 145.235533][ T2035] ? is_printk_cpu_sync_owner+0x32/0x40 [ 145.235553][ T2035] console_unlock+0x103/0x260 [ 145.235570][ T2035] ? __pfx_console_unlock+0x10/0x10 [ 145.235588][ T2035] ? do_raw_spin_unlock+0x145/0x1e0 [ 145.235605][ T2035] ? _printk+0xcf/0x110 [ 145.235618][ T2035] vprintk_emit+0x407/0x6b0 [ 145.235642][ T2035] ? __pfx_vprintk_emit+0x10/0x10 [ 145.235660][ T2035] ? pick_eevdf+0x4d3/0x860 [ 145.235681][ T2035] _printk+0xcf/0x110 [ 145.235693][ T2035] ? __pfx__printk+0x10/0x10 [ 145.235707][ T2035] ? wakeup_preempt_fair+0x630/0x1050 [ 145.235725][ T2035] ? find_held_lock+0x2b/0x80 [ 145.235742][ T2035] ? try_to_wake_up+0x5ec/0x1900 [ 145.235759][ T2035] ? __report_bug.cold+0x5/0x137 [ 145.235772][ T2035] ? __report_bug+0x377/0x3d0 [ 145.235792][ T2035] __report_bug.cold+0x15/0x137 [ 145.235804][ T2035] ? update_rq_clock+0x40a/0xd20 [ 145.235823][ T2035] ? __pfx___report_bug+0x10/0x10 [ 145.235846][ T2035] ? update_cfs_rq_load_avg+0x51/0x550 [ 145.235866][ T2035] ? update_rq_clock+0x40a/0xd20 [ 145.235887][ T2035] report_bug+0xb2/0x220 [ 145.235906][ T2035] ? update_rq_clock+0x40a/0xd20 [ 145.235925][ T2035] handle_bug+0x16a/0x2a0 [ 145.235939][ T2035] exc_invalid_op+0x17/0x50 [ 145.235953][ T2035] asm_exc_invalid_op+0x1a/0x20 [ 145.235966][ T2035] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 145.235986][ T2035] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 145.235999][ T2035] RSP: 0018:ffffc90006eafbd0 EFLAGS: 00010046 [ 145.236010][ T2035] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 145.236019][ T2035] RDX: 0000000000000046 RSI: ffffffff8deface7 RDI: ffffffff8c1c4180 [ 145.236028][ T2035] RBP: ffffc90006eafd80 R08: 0000000000000001 R09: 0000000000000001 [ 145.236036][ T2035] R10: 0000000000000000 R11: 00000000000001c9 R12: ffffffff90d843c4 [ 145.236044][ T2035] R13: ffff8880b853c220 R14: ffff88802acebd80 R15: ffff8880b853b380 [ 145.236058][ T2035] ? pick_task_fair+0x85/0x350 [ 145.236076][ T2035] __schedule+0x1e84/0x67a0 [ 145.236100][ T2035] ? __pfx___schedule+0x10/0x10 [ 145.236119][ T2035] ? find_held_lock+0x2b/0x80 [ 145.236136][ T2035] ? schedule+0x2bf/0x390 [ 145.236156][ T2035] schedule+0xdd/0x390 [ 145.236175][ T2035] ? worker_thread+0x4c0/0xe50 [ 145.236188][ T2035] worker_thread+0x53b/0xe50 [ 145.236203][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 145.236217][ T2035] ? kthread+0x13a/0x450 [ 145.236228][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 145.236241][ T2035] kthread+0x370/0x450 [ 145.236252][ T2035] ? __pfx_kthread+0x10/0x10 [ 145.236265][ T2035] ret_from_fork+0x72b/0xd50 [ 145.236279][ T2035] ? __pfx_ret_from_fork+0x10/0x10 [ 145.236294][ T2035] ? __switch_to+0x800/0x1100 [ 145.236313][ T2035] ? __switch_to_asm+0x39/0x70 [ 145.236331][ T2035] ? __pfx_kthread+0x10/0x10 [ 145.236343][ T2035] ret_from_fork_asm+0x1a/0x30 [ 145.236364][ T2035] [ 146.369209][ T2035] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 146.369221][ T2035] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: kworker/0:1H/2035 [ 146.387641][ T2035] Modules linked in: [ 146.391544][ T2035] CPU: 0 UID: 0 PID: 2035 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 146.401086][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.411141][ T2035] Workqueue: 0x0 (events_highpri) [ 146.416252][ T2035] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 146.421876][ T2035] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 146.443126][ T2035] RSP: 0018:ffffc90006eafbd0 EFLAGS: 00010046 [ 146.449292][ T2035] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 146.457273][ T2035] RDX: 0000000000000046 RSI: ffffffff8deface7 RDI: ffffffff8c1c4180 [ 146.465236][ T2035] RBP: ffffc90006eafd80 R08: 0000000000000001 R09: 0000000000000001 [ 146.473205][ T2035] R10: 0000000000000000 R11: 00000000000001c9 R12: ffffffff90d843c4 [ 146.481197][ T2035] R13: ffff8880b853c220 R14: ffff88802acebd80 R15: ffff8880b853b380 [ 146.489173][ T2035] FS: 0000000000000000(0000) GS:ffff888124371000(0000) knlGS:0000000000000000 [ 146.498110][ T2035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.504700][ T2035] CR2: 00007f33fffea540 CR3: 00000000774a0000 CR4: 00000000003526f0 [ 146.512666][ T2035] Call Trace: [ 146.515932][ T2035] [ 146.518858][ T2035] ? pick_task_fair+0x85/0x350 [ 146.523626][ T2035] __schedule+0x1e84/0x67a0 [ 146.528130][ T2035] ? __pfx___schedule+0x10/0x10 [ 146.532977][ T2035] ? find_held_lock+0x2b/0x80 [ 146.537702][ T2035] ? schedule+0x2bf/0x390 [ 146.542025][ T2035] schedule+0xdd/0x390 [ 146.546172][ T2035] ? worker_thread+0x4c0/0xe50 [ 146.550919][ T2035] worker_thread+0x53b/0xe50 [ 146.555492][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 146.560591][ T2035] ? kthread+0x13a/0x450 [ 146.564827][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 146.569954][ T2035] kthread+0x370/0x450 [ 146.574024][ T2035] ? __pfx_kthread+0x10/0x10 [ 146.578609][ T2035] ret_from_fork+0x72b/0xd50 [ 146.583202][ T2035] ? __pfx_ret_from_fork+0x10/0x10 [ 146.588317][ T2035] ? __switch_to+0x800/0x1100 [ 146.592993][ T2035] ? __switch_to_asm+0x39/0x70 [ 146.597777][ T2035] ? __pfx_kthread+0x10/0x10 [ 146.602549][ T2035] ret_from_fork_asm+0x1a/0x30 [ 146.607603][ T2035] [ 146.610635][ T2035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.617909][ T2035] CPU: 0 UID: 0 PID: 2035 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 146.627381][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.637420][ T2035] Workqueue: 0x0 (events_highpri) [ 146.642531][ T2035] Call Trace: [ 146.645794][ T2035] [ 146.648708][ T2035] dump_stack_lvl+0x100/0x190 [ 146.653374][ T2035] vpanic+0x552/0x970 [ 146.657338][ T2035] ? __pfx_vpanic+0x10/0x10 [ 146.661825][ T2035] ? lock_release+0x245/0x310 [ 146.666506][ T2035] panic+0xd1/0xe0 [ 146.670226][ T2035] ? __pfx_panic+0x10/0x10 [ 146.674644][ T2035] ? check_panic_on_warn+0x1f/0x90 [ 146.679917][ T2035] check_panic_on_warn.cold+0x19/0x34 [ 146.685287][ T2035] ? update_rq_clock+0x40a/0xd20 [ 146.690660][ T2035] __warn.cold+0x191/0x328 [ 146.695061][ T2035] __report_bug+0x296/0x3d0 [ 146.699562][ T2035] ? update_rq_clock+0x40a/0xd20 [ 146.704576][ T2035] ? __pfx___report_bug+0x10/0x10 [ 146.709591][ T2035] ? update_cfs_rq_load_avg+0x51/0x550 [ 146.715125][ T2035] ? update_rq_clock+0x40a/0xd20 [ 146.720054][ T2035] report_bug+0xb2/0x220 [ 146.724375][ T2035] ? update_rq_clock+0x40a/0xd20 [ 146.729297][ T2035] handle_bug+0x16a/0x2a0 [ 146.733622][ T2035] exc_invalid_op+0x17/0x50 [ 146.738284][ T2035] asm_exc_invalid_op+0x1a/0x20 [ 146.743117][ T2035] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 146.748694][ T2035] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 146.768284][ T2035] RSP: 0018:ffffc90006eafbd0 EFLAGS: 00010046 [ 146.774336][ T2035] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 146.782302][ T2035] RDX: 0000000000000046 RSI: ffffffff8deface7 RDI: ffffffff8c1c4180 [ 146.790269][ T2035] RBP: ffffc90006eafd80 R08: 0000000000000001 R09: 0000000000000001 [ 146.798227][ T2035] R10: 0000000000000000 R11: 00000000000001c9 R12: ffffffff90d843c4 [ 146.806211][ T2035] R13: ffff8880b853c220 R14: ffff88802acebd80 R15: ffff8880b853b380 [ 146.814171][ T2035] ? pick_task_fair+0x85/0x350 [ 146.818929][ T2035] __schedule+0x1e84/0x67a0 [ 146.823432][ T2035] ? __pfx___schedule+0x10/0x10 [ 146.828278][ T2035] ? find_held_lock+0x2b/0x80 [ 146.833119][ T2035] ? schedule+0x2bf/0x390 [ 146.837438][ T2035] schedule+0xdd/0x390 [ 146.841510][ T2035] ? worker_thread+0x4c0/0xe50 [ 146.846279][ T2035] worker_thread+0x53b/0xe50 [ 146.850862][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 146.855965][ T2035] ? kthread+0x13a/0x450 [ 146.860205][ T2035] ? __pfx_worker_thread+0x10/0x10 [ 146.865401][ T2035] kthread+0x370/0x450 [ 146.869470][ T2035] ? __pfx_kthread+0x10/0x10 [ 146.874060][ T2035] ret_from_fork+0x72b/0xd50 [ 146.878668][ T2035] ? __pfx_ret_from_fork+0x10/0x10 [ 146.883850][ T2035] ? __switch_to+0x800/0x1100 [ 146.888541][ T2035] ? __switch_to_asm+0x39/0x70 [ 146.893377][ T2035] ? __pfx_kthread+0x10/0x10 [ 146.898045][ T2035] ret_from_fork_asm+0x1a/0x30 [ 146.902828][ T2035] [ 146.905927][ T2035] Kernel Offset: disabled [ 146.910343][ T2035] Rebooting in 86400 seconds..