last executing test programs: 7.692675186s ago: executing program 0 (id=159): mmap$auto(0x2, 0x2020009, 0x3, 0x16, 0xffffffffffffffff, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/fs/cifs/dfscache\x00', 0x131401, 0x0) pread64$auto(r0, 0x0, 0x8, 0x75e8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xf, 0x9b72, 0x2, 0x7fff) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dri/card2\x00', 0xa0580, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\a\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) mmap$auto(0x0, 0x20004, 0x9, 0xeb1, 0x8000000000000024, 0x2008000) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r2, 0xc, r3) socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r4, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=0x0, @ANYBLOB="000000007000020000000500000008000100e2d29573d790ec1984aa699d6109d8203835ad31b7239870b4e9d843fdce54383381a6ee611563ca670446d3d05fb1d58b41110abb83561a12da0ec5bb065db8e202d47244e923a6967064cab45262faa6a2835a2b71b3d82a8c557319d888ed6997c1fa237a76d293de4a25a22082f6e73a66774d8532d96f594be1eda32c599ea1e6b68f89c91de825bbf1d528cc54cb5b00"/180, @ANYRES32=0x0, @ANYBLOB="42691682c9bb77815cd102b196a1568531c8d47dc9b6ea47d11c9b042a95fda58edc4d715642a1e3625cae1b03417040d5a6ce7a2f8ed95b051d1fccce3331f8aece3b82ad1a6d0af803d883560d85895b5c8e40534dd7cd069011fe6c154a4e8a9f9010a69cabd0874f9fd2c92d573c1365392eb71adcd865bf88f717cf2d1056eefe354d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) mmap$auto(0x3, 0x40000b, 0x100000000adf, 0xb173, 0x2, 0xffffffff) pread64$auto(r1, 0x0, 0x7, 0x101) write$auto(0x3, 0x0, 0x1) gettid() 6.327562897s ago: executing program 3 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000200)='/dev/dvb/adapter0/frontend0\x00', 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001080), r0) 5.51178053s ago: executing program 1 (id=163): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2008, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(0xffffffffffffffff, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a6ebee37d") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x2a, 0x1, 0xb0) getpeername$auto(0x200000003, 0x0, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0x5, 0x10, r4, 0xc80) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mmap$auto(0x4, 0x4, 0x3, 0x200000000000eb1, r1, 0x2) close_range$auto(r2, r4, 0x3fb) socket(0x8, 0x80002, 0xff) mbind$auto(0x3, 0x4, 0x4, &(0x7f0000000000)=0x2, 0x9, 0x2) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) 5.500001054s ago: executing program 3 (id=164): mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x1000200) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) r2 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) setsockopt$auto(r2, 0x107, 0x8, 0x0, 0x6) recvmmsg$auto(r2, 0x0, 0x10001, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r3, 0x4, 0x38, &(0x7f0000000040)='/proc/kcore\x00', &(0x7f00000000c0)=0x80) 4.896074051s ago: executing program 0 (id=165): mmap$auto(0x0, 0xffff, 0xdf, 0xeb1, 0x401, 0x8004) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0xec, 0x22, 0x400000000063, 0xeb1, r1, 0x7f) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000200200004000000000000000c000100000002000000000000000100fd04000000000000"], 0x50}, 0x1, 0x100000000000000, 0x0, 0x4048000}, 0x0) 4.717879207s ago: executing program 2 (id=166): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x16, 0x401, 0x8000) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf25010000000800010600000001080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xffffffff) socket(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="57e72cbd700003dcdf", @ANYRES32=r0], 0x1c}}, 0x10) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0x6a000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.492782518s ago: executing program 3 (id=167): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x1, 0x0, 0x800) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40000403c6f2b, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x3, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r4, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 4.045589553s ago: executing program 2 (id=168): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r1, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) read$auto(0xffffffffffffffff, 0x0, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00982a", @ANYRES16=r3, @ANYBLOB="000227bd7000ffdbdf2504000000080001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f00000025c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002580)={&(0x7f0000001440)=ANY=[@ANYBLOB="34110000", @ANYRES16=r3, @ANYBLOB="200029bd7000fbdbd4250300000008000800", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="4400060005000000000000000004000000000000680f0000000000009700000000000000ff7f00000000000006000000000000000400000000000000b001000000000000bc100a8008001500ac1e000127ba639691009ff1cff42b971eaf79df722247e3e98f2874bfd6656abbcaa438eade03f08c4d4415877e900105ff6f0ff065bd4e0edccd4893cfc754b0808aefa9634a926a0076939fc9511d3816246fff364750b6f6990b9cfc3cbaa45b85d89e10bde3085ad5acf26ccb350e940b830b9b2cd3c48afb67f00a7c2f6ef228878f65bc632bdfd6159b2d3b654669822e7df6e7b7f873ffc4a5ba776357a2a263a265c93a7b9db953d7c3185b258270e54bf3c0b519ffb0876eaa87affbae1431e1a7dcad0cf4ceaa67c30ce0c2d504630c664c2a8ad9428d94ad70a87534b3b75348c1c1c868993e206d43b8beffb4d308ee42d7da281fabdc775f50fc35ecdca8a1650e5af9d62cb9bd58fd0abb1036274057189c0fe84ef05c50692bd73cca2cb8b9bb294c52452656ab574a830151fe009405c7964c1b7d627d7a866d5495e5602f3cb16f92d6e68ee7d9f950d5eccb3564d80460d4e1f92334dd18ac85cb3a02d892cd790922df65e153308cbc87592e47b8e4afe685f620bf20b4420bdd309037c162c336a87ec18061272454745b60233e93f60177fe7f1bdd0a1492dc52086e67db79839c6f6c485463b1fcb7c99fc1ba6706993c82ba6a8d57e6982c7fdf529e4d042ee13d097d0c4106156966df13af13e884c7c53e7f1a79180f467f4a791b1676ebbb641c1b4bfcb64ee7bfeec9fd5fa27c3285f1a5d02576b205ba64e739ad736573881315d0c8ebc96235dc8f9a258f958b07596d57e6598aaa3829e244a2df1679488e0e7fbaf8ec66d33e342ba3cb6a22f7dfbbaf306b596a7981e78728ad66783f4e1b6e33393707aed7e2535c43cc51370e484a708a5174dd9b2a9070230f4dc06c467bc1013cae3ffad83efc8844ad5ac944e443bcda009de1add8bae9af5695e6857d6fc21ed925c460ff151243c0982824caf39124cb07fa2a755ccc0d26e6fdb5622dc00a2ce8ee05aa217fd508740d6e66a4736fdfbf23746dadd3d1ce4a17c5ee99f2136cf109dab98e58815d502f31059ba6c3789446b6284a4124ea0d2fc1ad977000c73ef34a3ec0d1ed4f1307bf7eed617f89635ca81dd423bbd85707628ad1d912fdf97b1a01385dfbd41d10c2107edc1daa0a12899b8ff33afc4f143a2f2ceabc971085546c1ee46dab27b83684b36eb03fae9500fc943c0a8a8f3a987aaee43e6258bc59c2b0475843ef9f9e17a31f15dfa913e53c4d336f860e900b530580c178b434b4c69f597200a910d57152fecc6966f9b6028b4ece6b0406218e67450ed90132e6756e06042db813600cebc35804395400116fa8e82a4e7f011d1ac97df0006cd32ed530ae07491adbcd0eb38c452ec081d3242ba1b46e55609ef360fbc80e07dc581d9459c8ef0a387a31a5cf44fc28cb3c7cc401001ed1915929f01b1ed9b8844a1f4bb82269280ccbc22a4d52cfad5a25b8446d5dbb5b5c2230e918492824170f236d603e92c295b9716a0592dc4b196806663f39dd9b1c04179345848a1dc19c8314bb003bce2eb4483c303ce18aa06ae2099fd2c84304323b01556f2e7892609f106e8f7b340abdf160eaf9c740f5063515bae156047066036c824bbb38ae0bcce2be77df7ce7f1ac8f2afaa1977956a6b6d3ba8eb78f8f6a3f64a0a89a2459cef571c54ac0b552fac0af875be8ba0e23d57e447bd381944523cb07db1ca85d543bf91f3897ca72a86b3e5a8b2afc4451e57d6e738f959dcf4a61cc4007ff7e5c68d9fc7eb239a45bce6099a9bcdf9642cdeaefae7588a73d4f7ef5085d28e04ec0859928439b85ea4ebb2319032de1162c719f201f8a398ccd573541d4587ca58d4ce16a2ac200969fc9d86c9d92c5e3f53cab5658b02fac85d7f79cb605a8c187c490680fa0b8aada0cdaca40460cdda7ffc92ffc7cc62548036f2f2bc8613cd058b3d987c2f194bb8ab8ccd69567835ae8c697ddbfdc96035ee374e1412d6431ead8f11915ee4321178c5d45d33dff06df0e8c19ab14dc69263b7ff504973b1361fb73c43b42fd1b7f1336a897b896d87f0100e23a643739230743b4aa6a557b196ee41aeb25b35a02741ac158f690c4c108af44ead0f269e4f38f40f19c9ec3e5277f4801e89b9cb4c8c5f6098acd2ad3dd03a041a1ea69a762cb90314e9d47faa2020f81736a9554b74a096f978837ebd4192a60b64e683ebb8fec310311c433bbb9fbed99ec181285f6c2a87ca74742ba37cbc8b5619267d8df49f5b0593cbd2cb58ed2e1d47cc9d41f67f2826cc287e361fa68caa8c6f9e6934f8a655896ca69f23bc83ef1729bd31c8a5181a5aa2d140e36aaf2dbad04b3dde4e5b9d5e3997b882d9730479c963a2e8d4a4794a46ac8740d1d2c8288a5a1aa1ee15752ba071addbacef4510da608c52060e7a0dbe5293e77f77644538aad8bc90936c90567fb360ba02cc42132ea4839bbe080105c6f735581ef9235a6beacc9cc25d84f3ca0859736975f1d64868a08969852717e73df0ed86c28ff3d5c63ea50d8803ef01d9db9f23c6299f1024a859e54241c8c767684a3c796359c30d4f366c4d28256246be39d09228dc3cae68c3183e88f33a64a4f98bde44ee4538df64004e48044c16d71702384c22b1194bfdf377d432c6ba23d350f315271d13148474142f25cb026fd7f531964e912e9c030a192ca35eb887c75540b48a8dca87506f70ef18c983ed0364191a58670506fa9c9ae128eefd3395c43b61e9332f134350bce5834d3d714c6c8078f6370e2f02abfff518436165981f33c547cd5338e819db7f98ebfb100698c31ce0c578421308d91b1ccffd9f5e837302304a6cc89661f116ae94e888943c410aac103038006cc2cb75dc8ba30ab13018658e47c8e9fd2abb36cf1381a51d687a7127305faa2e6b0003ff000d81d297585a135b7f4f0f4d03d8b709162aa562299a9b7f12ce9f788938b066856b38f730680520ad728cf47cdb6b2ef4c3834599816a94a97810d2eb85e4861ae125a8d2b24f7a1c50d7d7f77e62e7b24b1a0a5860abcdba0dfd0782ec675db87b3cebb572078fe1ac44266c585efe77516626c1ece9f9f50f1ae3f51acc363078697d3f97d66b9461f02066c3e447da61b30bf7ff2b399e4b6a2cd563b96cd40df6e8e0075f6c06d568255caba7671df987366d8289960850f2647e50e9cf65cf2443a3682e93c6adb06712a2d542c70262fd4c65e333416d0fbc37b325d5ba5b6c54db54c6b22e5d7598633d23a838824fc20a78f1e04dd7540ad91ddab682f91952912559e3c0e316cec17fb76fca104e24aa870e96e72d470052dacfec512513c8cc8585680be52c146c534109e9fee13add78d0a5ba16f7a41c54195c1c8b8613396f479939a6f014c1fd6fb0154eb75f37e2e6e7d401a31990bed5cb31eeb48d641b6deaf4164b253cf5231597890d55b7e220604309eadd1996cd03e8032fab051725c96e054d62f84121a35d42a0a59ff0b1125997e9c4532d8e082b3b54c83315124fbe125f9942a0662934d94f8d277125eb7f00ee84d8ab542f2e633a4bc0fb4d10f667c1e18d37e4c6d2c9d84e9c0a6d258e5338918ff19018e88b3dc4e68f84f6769229f53f84f0a72216dbd55b0252e5c4da5d7aa0b69e894057c61519d7dc3ac867a2d3a3b518fabd2bcc3643669d9c06d9bc21eb816d46ce4d834054f4e3c72d591e6daee7b348809d761e74dcc5bd6878a7e79a48eef4149b2ef9a06bb0999fb731b2eadb779b0129e3f08460afa7436801f018c10d7d41f7d60fb95b3e5626d34ea6e247c7ebf5d750ee180f9a80b9839ed46dfd5ba880d0803dcdbd12cde2cffe57a874c5c1c77b48c92c6fabcf317ee838e8dcc74c9482eb8367ef7acd73316fd142c61530534545ad28ded2cc5dbb19e275a9fe1e9471c5050f2f011797b3374aed2799cb80948a0c38aae54210015bc70c597e154f4c4717d6727601878e839f6574497a7a9b9735c411b91331d0bf0f58f8f1d4a5190fcbecaa6e59bb2d0faa16481dbc82c78e2397a37dd48bcacc11348d847eb9e16f6f9e61fa5439b730ced4b0d43449214adfa6382825343d055620d4bd7da3ecf241633b9ee41ade011b14bdf11786646d2962a24c0e60f3c20ad0c5920a942a7c8515ee44608a5a36d37fd020c78d901c8086b7e225737de39171b234291109a01d639d679665d5a7fb37bef735a7621b5da6ae62cce4da740abbc1d0d24d4d8e72387408e5663193ba26589cec8b4bd223664ec74ecf164b00802881472f07c2a9c896c9c6e298e056d798cf9597a1c78ce72f9f4411728040e1aa2b81ceb03f9f135e7443476d7444083dfccb57fff1e7089794cfa97152e6bce38c74b5df63ca4ae65177259169f1afcf1226adf4a6374d0285dd6aa9a1d8556a774c1fbd134f1ee4b4643c5dbc59491954674892300b7a0b8788b76248b0c074c9bcbf86f6315f2b3e9ec75e2234eb117bdf948fb24d53c61163be6858a1c1b347416f4c7987013edd146613d765cff9c05f265060bfebb37a4b3a468c1254ed16ef1510e071757a8f1f7e91db8289250ab4b6971814fa395ac01f1dbd324416a31bd0c65bcbb967380274169d6ee6235cd1fc214e12d2d81b4c5d7821bc7b23c5ded4614b8b7ea4a4fe121dbd3d484814872e7fe5eab95317735a717d5e443341406627df953a09fd72140fda38c5a77bf30d07896bfebf1db5c23fa66d10cf7a914e437359c673550801194295acc223dfb9fb7c9ca92da2bf324f73dfabadedb69872f9a5664e2a2d90a1f48effff3607d0a9b94bfa0426d4759814b8b2b73e93a39faa168de01d1f073b01be2519ff444856bcba43084e606f765d8b2ddce620f8944baee7b22fdc80be126ef9df6fca18fd60113a7f0358ef32250bf344787a3095b00f11d607a3f26b1560d3291160105fe086b99dafb34c73f7fc6736a2ae91a8d88b40991d75ae1038d1f0453e29704dffce6e0565a90636217e24782df0fc78a653f12738a5a6844ba18cabfb437ee0e1d23350ca286c05bf3eef8c613580de9d598810f98d58f27ca50d4b68e8b281758633acc6d25c981a85fa9679b9309b89b1e007a483e765e9ccb5bdac05dd2066e9a89dc2242e4c19d2ce3e1942d77ca5452362f4955822964b786b3385586fffe0d4f5923b9010e2e6392b70f4b80038cc9a6e477e31e9dc1ce6af8296939576a2ae12bfc6905a11be91a18ea513bc110790a48f6401d9780d5a400394159edb88b17d9f9a86329667d9612b8f872c3c7ef5eed34fb69b8b7e1547abb11c70912a0aa95ecf164b2be5e59ce5d0f706814fb1e83c67117ea8d30dd316373e53f62c5161fcdbedf6c20a954786ad65f9d4f0fd3b29cbbcddabe167f4c754415d2892077b7272ec32a6908ea39b00645f62675cc27048ba47883863ea3127cca8f38782d2e1089b0634c0cbb05749af1e4d3efd7bbf4af8ea06f0b9576875ea8eae6c89fb4401fc091264f07b9c706728abd59e4d8bd431eb89622ad2b547c2cd675ea83ae64f06c570da7eb9bba9ad380539eac267b64b7a59a88da51e8e0c417c378bb81419bdd856fcdc6140c0da06ff4d25f32ab0dfd2ffce80c57138909048ba354353c1a375a923ab37f6ac070f4431d6dbab203c8ab186570f68fc39306836732cc358d7cb443e2553eb5f40b6872f1a27c8660a280950ffd4e13e37b3c0d447f0589bed7f09d6bff4041edb7a02edee714e7d99f065bbd9f5119f9ad61b0f6ff09408fde1d99f25d06f07ea015c4a681f2f74ee019379c9a013ab6054e61bf4fc75ccbca233ff7f0698d2d095244410a0589f28c3e83505f9d9d797aedcab446324b5811a582b78e74864ee90d2af93c2a0fa9647baaf00fbcf0b6158faef366875e7e9f11a78ee8c0836165026ef7f91b83f31837a7e25e7a27e2b22ce38e6b1a4b44e65f0443f075e5f1995f35c3f304bfb7f97a50caa88671de130f097dae827590cf9b5cdfc9a0858b545d56c2d29d8abe439c1219eeebd5f1c06e0193769174b412f60fab1d804210c720d02a4caaaf08000200810000000800010000000000"], 0x1134}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8004) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 3.863544756s ago: executing program 0 (id=169): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getgroups$auto(0x0, 0x0) socket(0x2, 0x1, 0x106) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @local}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 3.603955099s ago: executing program 0 (id=170): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) syz_clone3(0x0, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0xe0400, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f0000000140)='./file0\x00', 0x801, 0xbc) (async) open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r1, 0x0, 0x1ff) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x2, 0x5) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x1) (async) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) prctl$auto(0x5, 0x3, 0x4, 0x5, 0x7) (async) setsockopt$auto(r2, 0x8, 0x22, 0x0, 0xffffffff) (async) r3 = fanotify_init$auto(0x5, 0x2000000000002) (async) r4 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r3, 0x9, 0x9, r4, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getcwd$auto(0x0, 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.541687399s ago: executing program 3 (id=171): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2af01, 0x0) ioctl$auto(r1, 0xc0585611, r1) 3.512412684s ago: executing program 1 (id=172): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0xfdef) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) (async) r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) preadv$auto(r0, &(0x7f00000000c0)={0x0, 0x80}, 0x6, 0x8, 0x5c53) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket(0xa, 0x2, 0x3a) ppoll$auto(&(0x7f0000000040)={r1, 0x9, 0xfffe}, 0x7, &(0x7f0000000080)={0x2, 0x9}, &(0x7f00000000c0)={0x4}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) statmount$auto(&(0x7f00000001c0)={0x29e8, @raw=0x1, 0x9, 0x3, 0x4}, &(0x7f0000000200)={0xc5, 0xfffffffe, 0x3463, 0xe52e, 0x0, 0x0, 0xd3, 0x5, 0xffffffffffffffff, 0x8000000000000000, 0x3, 0x8, 0xd02, 0x2, 0x200, 0x4, 0x2, 0x4a, 0x96b9, 0x2, 0x2, 0x6, 0xfffffffb, 0x7, 0xb48, 0x5, 0x0, 0xc, 0x40, 0x9, 0xf, [0xfffffffffffffffe, 0x200, 0x0, 0xe2, 0x0, 0xda9, 0xffffffffffffffff, 0x40, 0x5de, 0x1ff, 0x3, 0x8, 0x3, 0x4, 0xd2b, 0x101, 0x4, 0x9, 0x3, 0x3, 0x1, 0x10, 0x5, 0x8, 0x6, 0x0, 0x6, 0x1, 0x1, 0x3, 0xfffffffffffffff7, 0x7, 0x8, 0x8, 0x1, 0xfff, 0x2, 0xd303, 0x1, 0x10000, 0x0, 0x6, 0x656], "70ae202f6e08160ecb957bc77d55ec30637680fdcfeca23ecb90ee0f2f456ead13232146ffd8666f2e30e340a5ee80c446a675a16ad3c5806078416aaff03a16edf890d0ab83a587c84a0f3096f44ebfd2f6a3c42e8efb94610e42609b1c56a39153d3c23249d6fa355bf9f3a36687ee264aef8c94436d05eb4a71270eead0787e61d125d69b1ca3cc83e3e38bef3659a9de97bbd79956119ff4e1a9a6d0d36143329005ba919d7c8615949a32f2454f10794376d2e2212dbef7fd987a6172bb3d04aad17eb5"}, 0x3, 0x9) (async) statmount$auto(&(0x7f00000001c0)={0x29e8, @raw=0x1, 0x9, 0x3, 0x4}, &(0x7f0000000200)={0xc5, 0xfffffffe, 0x3463, 0xe52e, 0x0, 0x0, 0xd3, 0x5, 0xffffffffffffffff, 0x8000000000000000, 0x3, 0x8, 0xd02, 0x2, 0x200, 0x4, 0x2, 0x4a, 0x96b9, 0x2, 0x2, 0x6, 0xfffffffb, 0x7, 0xb48, 0x5, 0x0, 0xc, 0x40, 0x9, 0xf, [0xfffffffffffffffe, 0x200, 0x0, 0xe2, 0x0, 0xda9, 0xffffffffffffffff, 0x40, 0x5de, 0x1ff, 0x3, 0x8, 0x3, 0x4, 0xd2b, 0x101, 0x4, 0x9, 0x3, 0x3, 0x1, 0x10, 0x5, 0x8, 0x6, 0x0, 0x6, 0x1, 0x1, 0x3, 0xfffffffffffffff7, 0x7, 0x8, 0x8, 0x1, 0xfff, 0x2, 0xd303, 0x1, 0x10000, 0x0, 0x6, 0x656], "70ae202f6e08160ecb957bc77d55ec30637680fdcfeca23ecb90ee0f2f456ead13232146ffd8666f2e30e340a5ee80c446a675a16ad3c5806078416aaff03a16edf890d0ab83a587c84a0f3096f44ebfd2f6a3c42e8efb94610e42609b1c56a39153d3c23249d6fa355bf9f3a36687ee264aef8c94436d05eb4a71270eead0787e61d125d69b1ca3cc83e3e38bef3659a9de97bbd79956119ff4e1a9a6d0d36143329005ba919d7c8615949a32f2454f10794376d2e2212dbef7fd987a6172bb3d04aad17eb5"}, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x110) socket(0x2a, 0x2, 0x800009) 2.848048937s ago: executing program 3 (id=173): pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) timer_create$auto(0x9, 0x0, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/tty41\x00', 0x68000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd0000040002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r3, 0x100000003, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x400007, 0x6d3f, 0x6, 0xa, 0x1]}, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xfffffffffffffffb, 0xc40, 0x4, 0x3, 0x3, 0x3, 0x3, 0x1ff, 0x8000000000400000, 0x2, 0x6d3c, 0x1000000000000003, 0x2, 0x8000000000000006]}, 0x0) 2.847737305s ago: executing program 1 (id=174): r0 = socket(0x29, 0x5, 0x4) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea1\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) setresuid$auto(0x0, 0x7, 0x8080) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r1, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r3, 0x32f, 0x70bd2a, 0x25dfdbfd, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4008001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/crash_hotplug\x00', 0x121000, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) ioctl$auto(0x3, 0x40103e05, r5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/5, 0x5) r8 = socket(0x6, 0x2, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x180) write$auto(r8, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(r0, r0, 0xfffffffc) fchdir$auto(r6) readv$auto(r8, &(0x7f0000000300)={&(0x7f0000000240)="228321b7dc2f3c8e825144860466256f8f793875b641568f352f7629caedcb5ccdf493f1ca6ea6ae21de18af232cb5937c684e23807222af484e60147c8a0a874df293bf48f0dbc5a46164abb124c9cd4aa24aaf67017f7f76c17a79068930b481658eb16df05c7c625a1f92b31a4a05c757d1e6eaa8f3d48bae6f3e0684b225eb39569402d86759d4fd0f5759ea2bac4cd00bdc25568018bf4a196f0d4037dc289068b9", 0x80000001}, 0x5) 2.813034548s ago: executing program 2 (id=175): mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) unshare$auto(0x40000080) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) write$auto(r1, 0x0, 0x7) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x9a1}, 0x6, 0x4, 0x6, @inferred, @integer64={0x442df60c, 0x81, 0x7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) (async) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0xeda5, 0xc86) (async) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3ff, 0x402, 0x24f0, 0x4, 0x6, 0x5, 0x4, 0x1ff}) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 2.522761936s ago: executing program 1 (id=176): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r1, &(0x7f00000006c0)={0x0, 0x9e, &(0x7f00000001c0)={&(0x7f0000000e80)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x1000060}, 0x400c080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r4 = gettid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0xffffffffffffffff, 0x1, r4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.132261598s ago: executing program 0 (id=177): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x2, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) getsockopt$auto_SO_DEBUG(r0, 0xff, 0x1, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/veth0_to_bond/src_valid_mark\x00', 0x200080, 0x0) r2 = socket(0x2c, 0x1, 0x10001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x2, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, 0x0, 0x0) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop7/hctx0/sched_tags_bitmap\x00', 0x2, 0x0) pread64$auto(r6, 0x0, 0x3, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) sendfile$auto(r3, r3, 0x0, 0x443) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010102}, 0x54) getsockopt$auto(r2, 0x84, 0x7a, 0x0, &(0x7f0000000000)=0x7ffe) 1.215272196s ago: executing program 3 (id=178): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0x13, 0x9, 0x7f, 0x5, 0xf9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socket(0x1, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 1.003501396s ago: executing program 0 (id=179): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x4400000000006) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = socket(0xa, 0x800, 0x0) r3 = getsockopt$auto(r2, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r3, r3, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) r9 = socket(0xa, 0x5, 0x0) getsockopt$auto(r9, 0x84, 0x10, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) r10 = socket(0x25, 0x80000, 0x3a) setsockopt$auto(r10, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) capget$auto(&(0x7f0000000440)={0x9, r8}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r8, 0xc, 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r1, 0x921064a2, 0x20000000020000a) r11 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000280), 0x4cc82, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r11, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) 805.66308ms ago: executing program 1 (id=180): semctl$auto_SETVAL(0x3, 0x4, 0x10, 0x8) semctl$auto_SETVAL(0x7fffffff, 0x4, 0x10, 0x100) semctl$auto_SETVAL(0x1a2, 0x3, 0x10, 0x0) semctl$auto_SETVAL(0xc77e, 0x0, 0x10, 0x10000) semctl$auto_SETVAL(0xfffffe01, 0x2, 0x10, 0x1) semctl$auto_SETVAL(0x8, 0x800, 0x10, 0x8) semctl$auto_SETVAL(0x0, 0x7fffffff, 0x10, 0x3) semctl$auto_SETVAL(0x7f06, 0x1, 0x10, 0x7fffffffffffffff) semctl$auto_SETVAL(0xe, 0x7fffffff, 0x10, 0x3) semctl$auto_SETVAL(0x9, 0x0, 0x10, 0xc6) semctl$auto_SETVAL(0xc2, 0x4, 0x10, 0x0) semctl$auto_SETVAL(0x8, 0x5, 0x10, 0x7) semctl$auto_SETVAL(0x5, 0xdb2, 0x10, 0x8) semctl$auto_SETVAL(0x7fff, 0x7c5, 0x10, 0x6f) semctl$auto_SETVAL(0x5, 0x1000, 0x10, 0x5) semctl$auto_SETVAL(0x81, 0x200, 0x10, 0x7) semctl$auto_SETVAL(0x5, 0x2, 0x10, 0x3) semctl$auto_SETVAL(0x3, 0x6, 0x10, 0xfd) semctl$auto_SETVAL(0x2, 0x0, 0x10, 0x5) semctl$auto_SETVAL(0x4, 0x2, 0x10, 0xa00000000000) semctl$auto_SETVAL(0x6, 0x5, 0x10, 0x614) semctl$auto_SETVAL(0x8, 0x80, 0x10, 0x3) semctl$auto_SETVAL(0x8, 0xc, 0x10, 0x7) semctl$auto_SETVAL(0x7, 0x7, 0x10, 0x9) semctl$auto_SETVAL(0x4, 0xdb2, 0x10, 0x3) semctl$auto_SETVAL(0x8, 0x3, 0x10, 0xed) semctl$auto_SETVAL(0x9, 0x3db, 0x10, 0xf1a) semctl$auto_SETVAL(0x7, 0x4, 0x10, 0x400) semctl$auto_SETVAL(0x47, 0x8000, 0x10, 0xffffffff) semctl$auto_SETVAL(0x2, 0x7, 0x10, 0x100000001) 652.164065ms ago: executing program 2 (id=181): r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x4340, 0x0) read$auto(r0, 0x0, 0x0) 594.555705ms ago: executing program 1 (id=182): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) ioctl$auto(r1, 0xc0585611, r1) (fail_nth: 1) 474.123114ms ago: executing program 2 (id=183): r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x800000000000eb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r2) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2af01, 0x0) ioctl$auto(r4, 0xc0585611, r4) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) 0s ago: executing program 2 (id=184): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) keyctl$auto(0x1f, 0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "ce6232e4c38adc3600", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x4000010, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000100)="986ea9c84c97234a40c621c0d009486624b0fc55d6cbf33c8bbf6b64c6b3c4793ee05fef696668e638ac86ae0305", 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) (async) keyctl$auto(0x1f, 0x0, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0x15, 0x5, 0x0) (async) getsockopt$auto(r0, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "ce6232e4c38adc3600", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x4000010, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) (async) getpid() (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000100)="986ea9c84c97234a40c621c0d009486624b0fc55d6cbf33c8bbf6b64c6b3c4793ee05fef696668e638ac86ae0305", 0x1ffffffff}, 0x6, 0x0) (async) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r2, 0xc2604110, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. [ 74.865120][ T5614] cgroup: Unknown subsys name 'net' [ 75.017287][ T5614] cgroup: Unknown subsys name 'cpuset' [ 75.025791][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.532010][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.758340][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.767704][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.770959][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.777476][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.791260][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.792365][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.800642][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.815000][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.823505][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.826122][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.840196][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.847189][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.850662][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.859218][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.863242][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.870616][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.878510][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.884218][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.897041][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.898526][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.380300][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.389122][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.396991][ T5626] bridge_slave_0: entered allmulticast mode [ 80.404340][ T5626] bridge_slave_0: entered promiscuous mode [ 80.446929][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.454245][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.461434][ T5626] bridge_slave_1: entered allmulticast mode [ 80.468899][ T5626] bridge_slave_1: entered promiscuous mode [ 80.490638][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.498217][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.505579][ T5628] bridge_slave_0: entered allmulticast mode [ 80.513508][ T5628] bridge_slave_0: entered promiscuous mode [ 80.557020][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.564335][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.571626][ T5628] bridge_slave_1: entered allmulticast mode [ 80.578964][ T5628] bridge_slave_1: entered promiscuous mode [ 80.594281][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.601446][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.609639][ T5627] bridge_slave_0: entered allmulticast mode [ 80.616984][ T5627] bridge_slave_0: entered promiscuous mode [ 80.642458][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.651821][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.660321][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.667781][ T5627] bridge_slave_1: entered allmulticast mode [ 80.674944][ T5627] bridge_slave_1: entered promiscuous mode [ 80.699408][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.736554][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.778343][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.789584][ T5626] team0: Port device team_slave_0 added [ 80.798370][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.829444][ T5626] team0: Port device team_slave_1 added [ 80.836957][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.846560][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.854137][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.862925][ T5625] bridge_slave_0: entered allmulticast mode [ 80.870006][ T5625] bridge_slave_0: entered promiscuous mode [ 80.916992][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.924255][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.931541][ T5625] bridge_slave_1: entered allmulticast mode [ 80.938814][ T5625] bridge_slave_1: entered promiscuous mode [ 80.947646][ T5628] team0: Port device team_slave_0 added [ 80.963096][ T50] Bluetooth: hci1: command tx timeout [ 80.963099][ T5644] Bluetooth: hci2: command tx timeout [ 80.963405][ T5644] Bluetooth: hci0: command tx timeout [ 80.969242][ T5630] Bluetooth: hci3: command tx timeout [ 80.980553][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.993254][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.019612][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.033927][ T5627] team0: Port device team_slave_0 added [ 81.053883][ T5628] team0: Port device team_slave_1 added [ 81.065901][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.073511][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.100054][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.112990][ T5627] team0: Port device team_slave_1 added [ 81.157783][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.178624][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.185630][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.211638][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.224306][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.231331][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.257506][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.281604][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.306832][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.314080][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.340020][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.370774][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.377825][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.404151][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.431576][ T5626] hsr_slave_0: entered promiscuous mode [ 81.438401][ T5626] hsr_slave_1: entered promiscuous mode [ 81.446835][ T5625] team0: Port device team_slave_0 added [ 81.480199][ T5625] team0: Port device team_slave_1 added [ 81.511045][ T5628] hsr_slave_0: entered promiscuous mode [ 81.517680][ T5628] hsr_slave_1: entered promiscuous mode [ 81.524226][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 81.530024][ T5628] Cannot create hsr debugfs directory [ 81.557680][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.564915][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.590933][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.604036][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.611270][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.637442][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.688104][ T5627] hsr_slave_0: entered promiscuous mode [ 81.694398][ T5627] hsr_slave_1: entered promiscuous mode [ 81.700434][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 81.706253][ T5627] Cannot create hsr debugfs directory [ 81.795295][ T5625] hsr_slave_0: entered promiscuous mode [ 81.801734][ T5625] hsr_slave_1: entered promiscuous mode [ 81.808139][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 81.814369][ T5625] Cannot create hsr debugfs directory [ 82.193262][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.215920][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.226742][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.236653][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.245321][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.254882][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.263499][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.273777][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.350151][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.360603][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.369552][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.379719][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.387752][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.398308][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.406955][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.416676][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.524159][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.535743][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.551629][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.563572][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.585618][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.596190][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.609970][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.619579][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.707744][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.718860][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.727517][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.737010][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.748656][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.760858][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.771573][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.779479][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.789949][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.838006][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.879479][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.887179][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.918673][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.925819][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.949782][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.016585][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.042619][ T4943] Bluetooth: hci0: command tx timeout [ 83.042634][ T5630] Bluetooth: hci2: command tx timeout [ 83.043699][ T50] Bluetooth: hci1: command tx timeout [ 83.054221][ T4943] Bluetooth: hci3: command tx timeout [ 83.056904][ T5626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.087570][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.094812][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.131698][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.138938][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.157115][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.239869][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.257455][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.293329][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.300536][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.325564][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.332763][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.378263][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.431106][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.438420][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.505213][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.512454][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.045666][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.203428][ T5626] veth0_vlan: entered promiscuous mode [ 84.236476][ T5626] veth1_vlan: entered promiscuous mode [ 84.349376][ T5626] veth0_macvtap: entered promiscuous mode [ 84.379102][ T5626] veth1_macvtap: entered promiscuous mode [ 84.415521][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.465779][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.518057][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.561550][ T409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.576642][ T409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.591381][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.608365][ T409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.618020][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.711758][ T5627] veth0_vlan: entered promiscuous mode [ 84.771850][ T5627] veth1_vlan: entered promiscuous mode [ 84.783496][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.799696][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.818848][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.888176][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.896525][ T5625] veth0_vlan: entered promiscuous mode [ 84.902931][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.941502][ T5627] veth0_macvtap: entered promiscuous mode [ 84.967588][ T5627] veth1_macvtap: entered promiscuous mode [ 84.977505][ T5625] veth1_vlan: entered promiscuous mode [ 85.003188][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.013720][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.048150][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.064955][ T5628] veth0_vlan: entered promiscuous mode [ 85.105082][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.123024][ T50] Bluetooth: hci3: command tx timeout [ 85.123673][ T5630] Bluetooth: hci0: command tx timeout [ 85.129008][ T50] Bluetooth: hci2: command tx timeout [ 85.134139][ T4943] Bluetooth: hci1: command tx timeout [ 85.148146][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.166686][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.185868][ T5628] veth1_vlan: entered promiscuous mode [ 85.198094][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.242114][ T5625] veth0_macvtap: entered promiscuous mode [ 85.290780][ T5625] veth1_macvtap: entered promiscuous mode [ 85.463634][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.485236][ T5628] veth0_macvtap: entered promiscuous mode [ 85.496377][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.531653][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.550855][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.573744][ T5628] veth1_macvtap: entered promiscuous mode [ 85.600896][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.623207][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.661449][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.681766][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.716644][ T409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.738536][ T409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.757785][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.799870][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.871048][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.888472][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.919600][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.955183][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.099820][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.115484][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261001][ T5802] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 86.341627][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.355756][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.475232][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.511665][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.623335][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.637938][ T5807] random: crng reseeded on system resumption [ 86.654394][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.808579][ T24] cfg80211: failed to load regulatory.db [ 87.030535][ T5810] ovs_: entered promiscuous mode [ 87.203119][ T4943] Bluetooth: hci1: command tx timeout [ 87.203170][ T50] Bluetooth: hci0: command tx timeout [ 87.208797][ T5630] Bluetooth: hci2: command tx timeout [ 87.214111][ T50] Bluetooth: hci3: command tx timeout [ 87.411737][ T5828] Zero length message leads to an empty skb [ 88.260249][ T5841] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 88.350494][ T5838] process 'syz.2.8' launched './file0' with NULL argv: empty string added [ 88.485831][ T5841] FAULT_INJECTION: forcing a failure. [ 88.485831][ T5841] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.541558][ T5630] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 88.541584][ T5630] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 88.558811][ T5630] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 88.559564][ T5630] Bluetooth: hci0: Malformed LE Event: 0x0d [ 88.594427][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 88.594524][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.594550][ T5841] Call Trace: [ 88.594559][ T5841] [ 88.594566][ T5841] dump_stack_lvl+0x100/0x190 [ 88.594595][ T5841] should_fail_ex.cold+0x5/0xa [ 88.594612][ T5841] ? prepare_alloc_pages+0x16d/0x5f0 [ 88.594636][ T5841] should_fail_alloc_page+0xeb/0x140 [ 88.594658][ T5841] prepare_alloc_pages+0x1f0/0x5f0 [ 88.594683][ T5841] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 88.594702][ T5841] ? mark_held_locks+0x40/0x70 [ 88.594725][ T5841] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 88.594750][ T5841] ? lockdep_hardirqs_on+0x78/0x100 [ 88.594767][ T5841] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 88.594791][ T5841] ? stack_depot_save_flags+0x479/0x9d0 [ 88.594813][ T5841] ? kasan_save_stack+0x3f/0x50 [ 88.594831][ T5841] ? kasan_save_stack+0x30/0x50 [ 88.594848][ T5841] ? kasan_save_track+0x14/0x30 [ 88.594866][ T5841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.594886][ T5841] ? snd_pcm_open_substream+0x90/0x1850 [ 88.594906][ T5841] ? snd_pcm_playback_open+0x86/0xe0 [ 88.594927][ T5841] ? chrdev_open+0x234/0x6a0 [ 88.594941][ T5841] ? do_dentry_open+0x6ab/0x14d0 [ 88.594954][ T5841] ? vfs_open+0x82/0x3f0 [ 88.594973][ T5841] ? path_openat+0x2873/0x4280 [ 88.594987][ T5841] ? do_file_open+0x20e/0x430 [ 88.595000][ T5841] ? do_sys_openat2+0x10f/0x1e0 [ 88.595017][ T5841] ? __x64_sys_openat+0x12d/0x210 [ 88.595042][ T5841] ? do_syscall_64+0x115/0x840 [ 88.595062][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.595082][ T5841] ? __lock_acquire+0x49f/0x1a40 [ 88.595114][ T5841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.595137][ T5841] ? policy_nodemask+0xed/0x4f0 [ 88.595159][ T5841] alloc_pages_mpol+0x1fb/0x540 [ 88.595181][ T5841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.595200][ T5841] ? __split_page_owner+0x1fe/0x350 [ 88.595221][ T5841] ? split_page_memcg+0x1e/0x1a0 [ 88.595245][ T5841] alloc_pages_noprof+0x1a/0x160 [ 88.595268][ T5841] alloc_pages_exact_noprof+0x32/0xf0 [ 88.595292][ T5841] snd_pcm_attach_substream+0x4b0/0xd20 [ 88.595318][ T5841] snd_pcm_open_substream+0x90/0x1850 [ 88.595339][ T5841] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 88.595360][ T5841] ? rcu_is_watching+0x12/0xc0 [ 88.595382][ T5841] snd_pcm_open+0x2a3/0x710 [ 88.595403][ T5841] ? __pfx_snd_pcm_open+0x10/0x10 [ 88.595426][ T5841] ? __pfx_default_wake_function+0x10/0x10 [ 88.595448][ T5841] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 88.595477][ T5841] snd_pcm_playback_open+0x86/0xe0 [ 88.595498][ T5841] snd_open+0x201/0x450 [ 88.595514][ T5841] ? __pfx_snd_open+0x10/0x10 [ 88.595528][ T5841] chrdev_open+0x234/0x6a0 [ 88.595544][ T5841] ? __pfx_chrdev_open+0x10/0x10 [ 88.595560][ T5841] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 88.595581][ T5841] do_dentry_open+0x6ab/0x14d0 [ 88.595595][ T5841] ? __pfx_chrdev_open+0x10/0x10 [ 88.595614][ T5841] vfs_open+0x82/0x3f0 [ 88.595634][ T5841] path_openat+0x2873/0x4280 [ 88.595657][ T5841] ? __pfx_path_openat+0x10/0x10 [ 88.595677][ T5841] do_file_open+0x20e/0x430 [ 88.595693][ T5841] ? __pfx_do_file_open+0x10/0x10 [ 88.595722][ T5841] ? alloc_fd+0x471/0x7a0 [ 88.595738][ T5841] ? do_getname+0x191/0x390 [ 88.595757][ T5841] do_sys_openat2+0x10f/0x1e0 [ 88.595776][ T5841] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.595802][ T5841] __x64_sys_openat+0x12d/0x210 [ 88.595821][ T5841] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.595848][ T5841] do_syscall_64+0x115/0x840 [ 88.595864][ T5841] ? clear_bhb_loop+0x40/0x90 [ 88.595882][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.595897][ T5841] RIP: 0033:0x7f68ea79ce59 [ 88.595922][ T5841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.595940][ T5841] RSP: 002b:00007f68eb656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.595961][ T5841] RAX: ffffffffffffffda RBX: 00007f68eaa16090 RCX: 00007f68ea79ce59 [ 88.595972][ T5841] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 88.595982][ T5841] RBP: 00007f68ea832e6f R08: 0000000000000000 R09: 0000000000000000 [ 88.595991][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.596001][ T5841] R13: 00007f68eaa16128 R14: 00007f68eaa16090 R15: 00007fff2ab97788 [ 88.596022][ T5841] [ 89.367808][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.758916][ T5907] netlink: 334 bytes leftover after parsing attributes in process `syz.1.19'. [ 92.166101][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.004974][ T5919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 93.024649][ T5921] netlink: 342 bytes leftover after parsing attributes in process `syz.1.25'. [ 93.035732][ T5921] netlink: 334 bytes leftover after parsing attributes in process `syz.1.25'. [ 93.198635][ T29] audit: type=1800 audit(1782332573.608:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.26" name="version" dev="configfs" ino=8538 res=0 errno=0 [ 93.823425][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 93.885636][ T5942] netlink: 13 bytes leftover after parsing attributes in process `syz.2.28'. [ 94.087139][ T5931] bond0: invalid ARP target specified [ 94.336256][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'. [ 94.628657][ T5947] binder: 5944:5947 ioctl 40086602 e20 returned -22 [ 95.475851][ T5630] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 95.539803][ T5957] FAULT_INJECTION: forcing a failure. [ 95.539803][ T5957] name failslab, interval 1, probability 0, space 0, times 1 [ 95.610828][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 95.610868][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.610886][ T5957] Call Trace: [ 95.610896][ T5957] [ 95.610907][ T5957] dump_stack_lvl+0x100/0x190 [ 95.610951][ T5957] should_fail_ex.cold+0x5/0xa [ 95.610992][ T5957] should_failslab+0xc2/0x120 [ 95.611033][ T5957] kmem_cache_alloc_noprof+0x91/0x6a0 [ 95.611069][ T5957] ? __alloc_skb+0x4e9/0x710 [ 95.611106][ T5957] ? __alloc_skb+0x5b7/0x710 [ 95.611143][ T5957] ? sctp_chunkify+0x51/0x2f0 [ 95.611183][ T5957] sctp_chunkify+0x51/0x2f0 [ 95.611218][ T5957] _sctp_make_chunk+0x148/0x270 [ 95.611254][ T5957] sctp_make_datafrag_empty+0x14e/0x230 [ 95.611293][ T5957] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 95.611333][ T5957] ? sctp_datamsg_from_user+0x8e/0x1360 [ 95.611380][ T5957] sctp_datamsg_from_user+0x5ea/0x1360 [ 95.611432][ T5957] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 95.611475][ T5957] ? __lock_acquire+0x430/0x1a40 [ 95.611526][ T5957] ? aa_label_sk_perm+0x194/0x5f0 [ 95.611560][ T5957] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 95.611601][ T5957] ? do_raw_spin_lock+0x128/0x260 [ 95.611634][ T5957] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.611674][ T5957] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 95.611718][ T5957] sctp_sendmsg+0x1144/0x22e0 [ 95.611755][ T5957] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.611780][ T5957] ? kernel_text_address+0x8d/0x100 [ 95.611830][ T5957] ? aa_sk_perm+0x309/0xaa0 [ 95.611861][ T5957] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.611894][ T5957] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.611919][ T5957] inet_sendmsg+0x11c/0x140 [ 95.611954][ T5957] sock_sendmsg+0x352/0x410 [ 95.611980][ T5957] ? __pfx_inet_sendmsg+0x10/0x10 [ 95.612016][ T5957] ? __pfx_sock_sendmsg+0x10/0x10 [ 95.612042][ T5957] ? do_splice_direct+0x174/0x240 [ 95.612090][ T5957] splice_to_socket+0xb3c/0x11a0 [ 95.612139][ T5957] ? __pfx_splice_to_socket+0x10/0x10 [ 95.612212][ T5957] ? lockdep_init_map_type+0x5c/0x250 [ 95.612242][ T5957] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 95.612287][ T5957] ? __pfx_splice_to_socket+0x10/0x10 [ 95.612320][ T5957] direct_splice_actor+0x192/0x690 [ 95.612353][ T5957] splice_direct_to_actor+0x345/0xa30 [ 95.612397][ T5957] ? __pfx_direct_splice_actor+0x10/0x10 [ 95.612434][ T5957] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 95.612476][ T5957] do_splice_direct+0x174/0x240 [ 95.612507][ T5957] ? __pfx_do_splice_direct+0x10/0x10 [ 95.612537][ T5957] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 95.612585][ T5957] ? bpf_lsm_file_permission+0x9/0x10 [ 95.612612][ T5957] ? security_file_permission+0x76/0x210 [ 95.612643][ T5957] ? rw_verify_area+0xce/0x6d0 [ 95.612688][ T5957] do_sendfile+0xadc/0xe20 [ 95.612738][ T5957] ? __pfx_do_sendfile+0x10/0x10 [ 95.612780][ T5957] ? __fget_files+0x21f/0x3d0 [ 95.612828][ T5957] ? __x64_sys_futex+0x34f/0x4d0 [ 95.612859][ T5957] ? __x64_sys_futex+0x358/0x4d0 [ 95.612893][ T5957] __x64_sys_sendfile64+0x1d8/0x220 [ 95.612927][ T5957] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 95.612970][ T5957] do_syscall_64+0x115/0x840 [ 95.613001][ T5957] ? clear_bhb_loop+0x40/0x90 [ 95.613038][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.613068][ T5957] RIP: 0033:0x7f681679ce59 [ 95.613093][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.613120][ T5957] RSP: 002b:00007f681768b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 95.613147][ T5957] RAX: ffffffffffffffda RBX: 00007f6816a16090 RCX: 00007f681679ce59 [ 95.613167][ T5957] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 95.613183][ T5957] RBP: 00007f6816832e6f R08: 0000000000000000 R09: 0000000000000000 [ 95.613201][ T5957] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 95.613218][ T5957] R13: 00007f6816a16128 R14: 00007f6816a16090 R15: 00007ffcfe0a3c18 [ 95.613255][ T5957] [ 96.533275][ T5976] netlink: 342 bytes leftover after parsing attributes in process `syz.2.36'. [ 96.544738][ T5976] netlink: 334 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.197220][ T5990] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 98.930898][ T6020] netlink: 342 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.069403][ T6020] netlink: 334 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.218969][ T6024] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.900785][ T6037] zram0: detected capacity change from 0 to 16 [ 99.903716][ T6041] zram: Cannot change disksize for initialized device [ 100.248129][ T6042] netlink: 25 bytes leftover after parsing attributes in process `syz.0.51'. [ 100.741060][ T6049] FAULT_INJECTION: forcing a failure. [ 100.741060][ T6049] name failslab, interval 1, probability 0, space 0, times 0 [ 100.775960][ T6049] CPU: 0 UID: 0 PID: 6049 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 100.775997][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 100.776012][ T6049] Call Trace: [ 100.776020][ T6049] [ 100.776030][ T6049] dump_stack_lvl+0x100/0x190 [ 100.776070][ T6049] should_fail_ex.cold+0x5/0xa [ 100.776105][ T6049] should_failslab+0xc2/0x120 [ 100.776142][ T6049] __kmalloc_cache_noprof+0x91/0x6c0 [ 100.776167][ T6049] ? kasan_save_track+0x14/0x30 [ 100.776197][ T6049] ? __kasan_kmalloc+0xaa/0xb0 [ 100.776227][ T6049] ? nfc_allocate_device+0x15b/0x5e0 [ 100.776264][ T6049] nfc_allocate_device+0x15b/0x5e0 [ 100.776295][ T6049] ? __init_swait_queue_head+0xca/0x150 [ 100.776330][ T6049] nci_allocate_device+0x23b/0x410 [ 100.776375][ T6049] virtual_ncidev_open+0x6f/0x220 [ 100.776409][ T6049] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 100.776440][ T6049] misc_open+0x26d/0x450 [ 100.776476][ T6049] ? __pfx_misc_open+0x10/0x10 [ 100.776523][ T6049] chrdev_open+0x234/0x6a0 [ 100.776552][ T6049] ? __pfx_chrdev_open+0x10/0x10 [ 100.776580][ T6049] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.776618][ T6049] do_dentry_open+0x6ab/0x14d0 [ 100.776645][ T6049] ? __pfx_chrdev_open+0x10/0x10 [ 100.776679][ T6049] vfs_open+0x82/0x3f0 [ 100.776713][ T6049] path_openat+0x2873/0x4280 [ 100.776759][ T6049] ? __pfx_path_openat+0x10/0x10 [ 100.776798][ T6049] do_file_open+0x20e/0x430 [ 100.776828][ T6049] ? __pfx_do_file_open+0x10/0x10 [ 100.776883][ T6049] ? alloc_fd+0x471/0x7a0 [ 100.776913][ T6049] ? do_getname+0x191/0x390 [ 100.776949][ T6049] do_sys_openat2+0x10f/0x1e0 [ 100.776982][ T6049] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.777030][ T6049] __x64_sys_openat+0x12d/0x210 [ 100.777066][ T6049] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.777116][ T6049] do_syscall_64+0x115/0x840 [ 100.777145][ T6049] ? clear_bhb_loop+0x40/0x90 [ 100.777179][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.777207][ T6049] RIP: 0033:0x7f110ff9ce59 [ 100.777230][ T6049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.777254][ T6049] RSP: 002b:00007f1110eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.777280][ T6049] RAX: ffffffffffffffda RBX: 00007f1110215fa0 RCX: 00007f110ff9ce59 [ 100.777298][ T6049] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 100.777316][ T6049] RBP: 00007f1110032e6f R08: 0000000000000000 R09: 0000000000000000 [ 100.777332][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.777348][ T6049] R13: 00007f1110216038 R14: 00007f1110215fa0 R15: 00007fff9108bf98 [ 100.777386][ T6049] [ 101.676551][ T6066] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 101.707212][ T6066] netlink: 86 bytes leftover after parsing attributes in process `syz.0.55'. [ 102.712923][ T6079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.270167][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 103.348385][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'. [ 103.385102][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.412592][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.482092][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.516043][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.943171][ T6101] vivid-007: ================= START STATUS ================= [ 103.956793][ T6101] vivid-007: Generate PTS: true [ 103.986171][ T6101] vivid-007: Generate SCR: true [ 104.002076][ T6101] tpg source WxH: 320x240 (Y'CbCr) [ 104.026754][ T6101] tpg field: 1 [ 104.044075][ T6101] tpg crop: (0,0)/320x240 [ 104.065959][ T6101] tpg compose: (0,0)/320x240 [ 104.082006][ T6101] tpg colorspace: 8 [ 104.101548][ T6101] tpg transfer function: 0/0 [ 104.113918][ T6101] tpg Y'CbCr encoding: 0/0 [ 104.137266][ T6101] tpg quantization: 0/0 [ 104.141749][ T6101] tpg RGB range: 0/2 [ 104.146259][ T6101] vivid-007: ================== END STATUS ================== [ 104.383903][ T6114] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 104.421265][ T6114] netlink: 86 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.484468][ T6118] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 104.484653][ T6115] ima: policy update failed [ 104.530394][ T29] audit: type=1802 audit(1782332584.938:3): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.66" res=0 errno=0 [ 104.919453][ T5630] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 105.030069][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 105.240747][ T6141] syz.1.71 (6141) used greatest stack depth: 16384 bytes left [ 105.983420][ T6161] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 106.003673][ T6161] netlink: 86 bytes leftover after parsing attributes in process `syz.1.76'. [ 106.413442][ T6178] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 106.512245][ T6181] netlink: 25 bytes leftover after parsing attributes in process `syz.1.80'. [ 107.773013][ T6204] : Can't lookup blockdev [ 107.828603][ T6204] [U] 0="/ [ 107.863166][ T6204] [U] [ 107.866095][ T6204] [U] EeQ@ [ 107.904704][ T6202] [U]  [ 108.171464][ T6215] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 108.197369][ T6215] netlink: 86 bytes leftover after parsing attributes in process `syz.3.88'. [ 108.519875][ T6228] can: request_module (can-proto-0) failed. [ 108.636478][ T6226] can: request_module (can-proto-0) failed. [ 111.479208][ T6282] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 111.514966][ T6282] netlink: 86 bytes leftover after parsing attributes in process `syz.0.99'. [ 112.805493][ T6321] Process accounting resumed [ 113.707658][ T6332] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.611591][ T6353] netlink: 'syz.3.111': attribute type 4 has an invalid length. [ 114.652150][ T6353] netlink: 86 bytes leftover after parsing attributes in process `syz.3.111'. [ 115.696640][ T6376] nvme_fabrics: missing parameter 'transport=%s' [ 115.727685][ T6376] nvme_fabrics: missing parameter 'nqn=%s' [ 115.938771][ T6383] ubi0: attaching mtd0 [ 116.011848][ T6383] ubi0: scanning is finished [ 116.039697][ T6383] ubi0: empty MTD device detected [ 116.228098][ T6390] vivid-007: ================= START STATUS ================= [ 116.273742][ T6390] vivid-007: Generate PTS: true [ 116.322765][ T6390] vivid-007: Generate SCR: true [ 116.362800][ T6390] tpg source WxH: 320x240 (Y'CbCr) [ 116.391602][ T6390] tpg field: 1 [ 116.409809][ T6393] WARNING! power/level is deprecated; use power/control instead [ 116.439295][ T6390] tpg crop: (0,0)/320x240 [ 116.485262][ T6390] tpg compose: (0,0)/320x240 [ 116.533244][ T6390] tpg colorspace: 8 [ 116.557653][ T6390] tpg transfer function: 0/0 [ 116.576546][ T6390] tpg Y'CbCr encoding: 0/0 [ 116.595590][ T6390] tpg quantization: 0/0 [ 116.604239][ T6390] tpg RGB range: 0/2 [ 116.614333][ T6390] vivid-007: ================== END STATUS ================== [ 116.641716][ T6403] netlink: 'syz.3.121': attribute type 4 has an invalid length. [ 116.674785][ T6403] netlink: 86 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.814666][ T6383] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 116.840744][ T6383] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 116.871495][ T6383] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 117.007165][ T6383] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 117.040395][ T6383] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 117.056030][ T6383] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 117.123911][ T6383] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 222178760 [ 117.139524][ T6414] random: crng reseeded on system resumption [ 117.202398][ T6383] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 117.269479][ T6407] ubi0: background thread "ubi_bgt0d" started, PID 6407 [ 117.435750][ T6384] ubi0: detaching mtd0 [ 117.649375][ T6384] ubi0: mtd0 is detached [ 119.016026][ T6438] netlink: 350 bytes leftover after parsing attributes in process `syz.1.126'. [ 119.043509][ T6438] netlink: 334 bytes leftover after parsing attributes in process `syz.1.126'. [ 119.528695][ T6449] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 119.556781][ T6449] netlink: 86 bytes leftover after parsing attributes in process `syz.1.131'. [ 120.632573][ T6486] netlink: 350 bytes leftover after parsing attributes in process `syz.0.137'. [ 120.759903][ T6486] netlink: 334 bytes leftover after parsing attributes in process `syz.0.137'. [ 121.416729][ T6494] NFSD: Failed to start, no listeners configured. [ 121.665767][ T6514] vivid-007: ================= START STATUS ================= [ 121.705904][ T6514] vivid-007: Generate PTS: true [ 121.734789][ T6514] vivid-007: Generate SCR: true [ 121.759289][ T6514] tpg source WxH: 320x240 (Y'CbCr) [ 121.772052][ T6514] tpg field: 1 [ 121.782385][ T6514] tpg crop: (0,0)/320x240 [ 121.809774][ T6514] tpg compose: (0,0)/320x240 [ 121.839310][ T6514] tpg colorspace: 8 [ 121.864339][ T6514] tpg transfer function: 0/0 [ 121.904997][ T6514] tpg Y'CbCr encoding: 0/0 [ 121.930226][ T6514] tpg quantization: 0/0 [ 121.953810][ T6514] tpg RGB range: 0/2 [ 121.975181][ T6514] vivid-007: ================== END STATUS ================== [ 122.021587][ T6519] vivid-007: ================= START STATUS ================= [ 122.030282][ T6519] vivid-007: Generate PTS: true [ 122.037171][ T6519] vivid-007: Generate SCR: true [ 122.044195][ T6519] tpg source WxH: 320x240 (Y'CbCr) [ 122.054200][ T6519] tpg field: 1 [ 122.078714][ T6519] tpg crop: (0,0)/320x240 [ 122.112755][ T6519] tpg compose: (0,0)/320x240 [ 122.138047][ T6519] tpg colorspace: 8 [ 122.162930][ T6519] tpg transfer function: 0/0 [ 122.183732][ T6519] tpg Y'CbCr encoding: 0/0 [ 122.209473][ T6519] tpg quantization: 0/0 [ 122.232841][ T6519] tpg RGB range: 0/2 [ 122.257640][ T6519] vivid-007: ================== END STATUS ================== [ 122.302568][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 122.520604][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.147'. [ 122.540298][ T6533] netlink: 350 bytes leftover after parsing attributes in process `syz.3.146'. [ 122.653493][ T6533] netlink: 334 bytes leftover after parsing attributes in process `syz.3.146'. [ 123.014397][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 124.546249][ T6572] vivid-007: ================= START STATUS ================= [ 124.585686][ T6572] vivid-007: Generate PTS: true [ 124.613104][ T6572] vivid-007: Generate SCR: true [ 124.623564][ T6572] tpg source WxH: 320x240 (Y'CbCr) [ 124.641710][ T6572] tpg field: 1 [ 124.660688][ T6572] tpg crop: (0,0)/320x240 [ 124.688581][ T6572] tpg compose: (0,0)/320x240 [ 124.716050][ T6572] tpg colorspace: 8 [ 124.735304][ T6572] tpg transfer function: 0/0 [ 124.763560][ T6572] tpg Y'CbCr encoding: 0/0 [ 124.797823][ T6572] tpg quantization: 0/0 [ 124.820299][ T6572] tpg RGB range: 0/2 [ 124.840015][ T6572] vivid-007: ================== END STATUS ================== [ 125.100239][ T6586] netlink: 350 bytes leftover after parsing attributes in process `syz.3.157'. [ 125.169317][ T6586] netlink: 334 bytes leftover after parsing attributes in process `syz.3.157'. [ 125.980074][ T6584] wlan1: mtu less than device minimum [ 128.641436][ T6661] vivid-007: ================= START STATUS ================= [ 128.694978][ T6661] vivid-007: Generate PTS: true [ 128.736843][ T6661] vivid-007: Generate SCR: true [ 128.777542][ T6661] tpg source WxH: 320x240 (Y'CbCr) [ 128.819436][ T6661] tpg field: 1 [ 128.847697][ T6661] tpg crop: (0,0)/320x240 [ 128.907802][ T6661] tpg compose: (0,0)/320x240 [ 128.972084][ T6661] tpg colorspace: 8 [ 128.996881][ T6667] netlink: 350 bytes leftover after parsing attributes in process `syz.2.166'. [ 129.023221][ T6661] tpg transfer function: 0/0 [ 129.085604][ T6661] tpg Y'CbCr encoding: 0/0 [ 129.098487][ T6669] netlink: 334 bytes leftover after parsing attributes in process `syz.2.166'. [ 129.125975][ T6661] tpg quantization: 0/0 [ 129.178210][ T6661] tpg RGB range: 0/2 [ 129.221827][ T6661] vivid-007: ================== END STATUS ================== [ 129.308088][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. getty: ttyS0: read error: Resource temporarily unavailable [ 130.772774][ T6707] nfsd: Unknown parameter '' [ 131.046628][ T6704] netlink: ct_mark mask cannot be 0 [ 131.695262][ T6715] smpboot: CPU 1 is now offline syzkaller syzkaller login: [ 132.845872][ T6737] sctp: [Deprecated]: syz.0.179 (pid 6737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.845872][ T6737] Use struct sctp_sack_info instead [ 132.894824][ T6739] FAULT_INJECTION: forcing a failure. [ 132.894824][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 132.910450][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919966][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.967831][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.1.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.967857][ T6739] Tainted: [L]=SOFTLOCKUP [ 132.967862][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.967871][ T6739] Call Trace: [ 132.967876][ T6739] [ 132.967882][ T6739] dump_stack_lvl+0x100/0x190 [ 132.967905][ T6739] should_fail_ex.cold+0x5/0xa [ 132.967925][ T6739] should_failslab+0xc2/0x120 [ 132.967946][ T6739] __kmalloc_noprof+0xfc/0x820 [ 132.967963][ T6739] ? rcu_is_watching+0x12/0xc0 [ 132.967981][ T6739] ? tomoyo_realpath_from_path+0xb6/0x690 [ 132.968003][ T6739] tomoyo_realpath_from_path+0xb6/0x690 [ 132.968023][ T6739] tomoyo_path_number_perm+0x23c/0x580 [ 132.968046][ T6739] ? tomoyo_path_number_perm+0x22e/0x580 [ 132.968070][ T6739] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.968099][ T6739] ? rcu_read_lock_any_held+0x6a/0xa0 [ 132.968130][ T6739] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.968153][ T6739] ? hook_file_ioctl_common+0x140/0x440 [ 132.968188][ T6739] security_file_ioctl+0xd3/0x230 [ 132.968213][ T6739] __x64_sys_ioctl+0xb7/0x210 [ 132.968236][ T6739] do_syscall_64+0x115/0x840 [ 132.968251][ T6739] ? clear_bhb_loop+0x40/0x90 [ 132.968269][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.968284][ T6739] RIP: 0033:0x7f68ea79ce59 [ 132.968308][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.968322][ T6739] RSP: 002b:00007f68eb677028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.968337][ T6739] RAX: ffffffffffffffda RBX: 00007f68eaa15fa0 RCX: 00007f68ea79ce59 [ 132.968346][ T6739] RDX: 0000000000000000 RSI: 00000000c0585611 RDI: 0000000000000000 [ 132.968354][ T6739] RBP: 00007f68eb677090 R08: 0000000000000000 R09: 0000000000000000 [ 132.968363][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.968371][ T6739] R13: 00007f68eaa16038 R14: 00007f68eaa15fa0 R15: 00007fff2ab97788 [ 132.968390][ T6739] [ 132.968405][ T6739] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.308573][ T6732] FAULT_INJECTION: forcing a failure. [ 133.308573][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 133.439913][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.0.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.439941][ T6732] Tainted: [L]=SOFTLOCKUP [ 133.439946][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.439956][ T6732] Call Trace: [ 133.439961][ T6732] [ 133.439967][ T6732] dump_stack_lvl+0x100/0x190 [ 133.439991][ T6732] should_fail_ex.cold+0x5/0xa [ 133.440011][ T6732] should_failslab+0xc2/0x120 [ 133.440032][ T6732] __kmalloc_noprof+0xfc/0x820 [ 133.440051][ T6732] ? tracepoint_add_func+0x3a8/0x1150 [ 133.440076][ T6732] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 133.440097][ T6732] tracepoint_add_func+0x3a8/0x1150 [ 133.440118][ T6732] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 133.440142][ T6732] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 133.440162][ T6732] tracepoint_probe_register+0xc4/0x110 [ 133.440185][ T6732] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 133.440207][ T6732] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 133.440229][ T6732] ? relay_open+0x793/0xa00 [ 133.440250][ T6732] blk_register_tracepoints+0x129/0x440 [ 133.440296][ T6732] blk_trace_setup_finalize+0x320/0x3a0 [ 133.440314][ T6732] blk_trace_setup+0x254/0x440 [ 133.440337][ T6732] ? __pfx_blk_trace_setup+0x10/0x10 [ 133.440354][ T6732] ? lockdep_hardirqs_on+0x16/0x100 [ 133.440377][ T6732] ? __pfx_vsnprintf+0x10/0x10 [ 133.440404][ T6732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.440426][ T6732] ? do_vfs_ioctl+0x226/0x13e0 [ 133.440450][ T6732] blk_trace_ioctl+0x245/0x320 [ 133.440470][ T6732] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 133.440492][ T6732] ? find_held_lock+0x2b/0x80 [ 133.440510][ T6732] ? __fget_files+0x215/0x3d0 [ 133.440531][ T6732] ? hook_file_ioctl_common+0x140/0x440 [ 133.440557][ T6732] blkdev_ioctl+0x17c/0x6f0 [ 133.440577][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 133.440599][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 133.440618][ T6732] __x64_sys_ioctl+0x18e/0x210 [ 133.440640][ T6732] do_syscall_64+0x115/0x840 [ 133.440656][ T6732] ? clear_bhb_loop+0x40/0x90 [ 133.440674][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.440689][ T6732] RIP: 0033:0x7f110ff9ce59 [ 133.440703][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.440716][ T6732] RSP: 002b:00007f1110e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.440731][ T6732] RAX: ffffffffffffffda RBX: 00007f1110216180 RCX: 00007f110ff9ce59 [ 133.440742][ T6732] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 133.440757][ T6732] RBP: 00007f1110032e6f R08: 0000000000000000 R09: 0000000000000000 [ 133.440769][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.440778][ T6732] R13: 00007f1110216218 R14: 00007f1110216180 R15: 00007fff9108bf98 [ 133.440799][ T6732] [ 133.722122][ T6732] ------------[ cut here ]------------ [ 133.728370][ T6732] ret [ 133.728381][ T6732] WARNING: kernel/trace/blktrace.c:1344 at blk_register_tracepoints+0x390/0x440, CPU#0: syz.0.179/6732 [ 133.742067][ T6732] Modules linked in: [ 133.746247][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.0.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.758005][ T6732] Tainted: [L]=SOFTLOCKUP [ 133.762554][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.772637][ T6732] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 133.779830][ T6732] Code: 0f 0b 90 e9 47 fd ff ff e8 cd 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 bf 8e f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 b1 8e f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 a3 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 133.800265][ T6732] RSP: 0018:ffffc900052e7af8 EFLAGS: 00010287 [ 133.806465][ T6732] RAX: 0000000000048f21 RBX: 00000000fffffff4 RCX: ffffc9000ef99000 [ 133.814497][ T6732] RDX: 0000000000080000 RSI: ffffffff82114ccf RDI: ffff888021fe5d00 [ 133.822516][ T6732] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 133.830496][ T6732] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 133.838602][ T6732] R13: ffff88802756a540 R14: ffffc900052e7d98 R15: 0000000000000001 [ 133.846772][ T6732] FS: 00007f1110e886c0(0000) GS:ffff8881242f3000(0000) knlGS:0000000000000000 [ 133.855819][ T6732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.862634][ T6732] CR2: 00007f46253bae9c CR3: 000000007c46a000 CR4: 00000000003526f0 [ 133.870623][ T6732] Call Trace: [ 133.873947][ T6732] [ 133.876864][ T6732] blk_trace_setup_finalize+0x320/0x3a0 [ 133.883259][ T6732] blk_trace_setup+0x254/0x440 [ 133.888023][ T6732] ? __pfx_blk_trace_setup+0x10/0x10 [ 133.893961][ T6732] ? lockdep_hardirqs_on+0x16/0x100 [ 133.899161][ T6732] ? __pfx_vsnprintf+0x10/0x10 [ 133.903983][ T6732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.909876][ T6732] ? do_vfs_ioctl+0x226/0x13e0 [ 133.914715][ T6732] blk_trace_ioctl+0x245/0x320 [ 133.919476][ T6732] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 133.924999][ T6732] ? find_held_lock+0x2b/0x80 [ 133.929700][ T6732] ? __fget_files+0x215/0x3d0 [ 133.934484][ T6732] ? hook_file_ioctl_common+0x140/0x440 [ 133.940030][ T6732] blkdev_ioctl+0x17c/0x6f0 [ 133.944553][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 133.949570][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 133.954718][ T6732] __x64_sys_ioctl+0x18e/0x210 [ 133.959586][ T6732] do_syscall_64+0x115/0x840 [ 133.964249][ T6732] ? clear_bhb_loop+0x40/0x90 [ 133.968973][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.974916][ T6732] RIP: 0033:0x7f110ff9ce59 [ 133.979351][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.000224][ T6732] RSP: 002b:00007f1110e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.009401][ T6732] RAX: ffffffffffffffda RBX: 00007f1110216180 RCX: 00007f110ff9ce59 [ 134.017430][ T6732] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 134.025454][ T6732] RBP: 00007f1110032e6f R08: 0000000000000000 R09: 0000000000000000 [ 134.033456][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.041452][ T6732] R13: 00007f1110216218 R14: 00007f1110216180 R15: 00007fff9108bf98 [ 134.049471][ T6732] [ 134.052531][ T6732] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.059802][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.0.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.070570][ T6732] Tainted: [L]=SOFTLOCKUP [ 134.074888][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.084958][ T6732] Call Trace: [ 134.088241][ T6732] [ 134.091177][ T6732] dump_stack_lvl+0x100/0x190 [ 134.095851][ T6732] vpanic+0x552/0x970 [ 134.099823][ T6732] ? __pfx_vpanic+0x10/0x10 [ 134.104425][ T6732] panic+0xd1/0xe0 [ 134.108184][ T6732] ? __pfx_panic+0x10/0x10 [ 134.112612][ T6732] check_panic_on_warn.cold+0x19/0x34 [ 134.118084][ T6732] ? blk_register_tracepoints+0x390/0x440 [ 134.123800][ T6732] __warn.cold+0x191/0x318 [ 134.128454][ T6732] __report_bug+0x30f/0x440 [ 134.132977][ T6732] ? blk_register_tracepoints+0x390/0x440 [ 134.138788][ T6732] ? __pfx___report_bug+0x10/0x10 [ 134.143804][ T6732] ? tracepoint_probe_register+0xd2/0x110 [ 134.149541][ T6732] ? __kasan_kmalloc+0x8a/0xb0 [ 134.154351][ T6732] ? __mutex_unlock_slowpath+0x35d/0x930 [ 134.159992][ T6732] ? blk_register_tracepoints+0x390/0x440 [ 134.165704][ T6732] report_bug+0xb2/0x220 [ 134.169942][ T6732] ? blk_register_tracepoints+0x390/0x440 [ 134.175652][ T6732] handle_bug+0x16a/0x2a0 [ 134.179975][ T6732] exc_invalid_op+0x17/0x50 [ 134.184489][ T6732] asm_exc_invalid_op+0x1a/0x20 [ 134.189345][ T6732] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 134.196119][ T6732] Code: 0f 0b 90 e9 47 fd ff ff e8 cd 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 bf 8e f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 b1 8e f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 a3 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 134.215729][ T6732] RSP: 0018:ffffc900052e7af8 EFLAGS: 00010287 [ 134.221788][ T6732] RAX: 0000000000048f21 RBX: 00000000fffffff4 RCX: ffffc9000ef99000 [ 134.229745][ T6732] RDX: 0000000000080000 RSI: ffffffff82114ccf RDI: ffff888021fe5d00 [ 134.237712][ T6732] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 134.245672][ T6732] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 134.253659][ T6732] R13: ffff88802756a540 R14: ffffc900052e7d98 R15: 0000000000000001 [ 134.261657][ T6732] ? blk_register_tracepoints+0x38f/0x440 [ 134.267387][ T6732] ? blk_register_tracepoints+0x38f/0x440 [ 134.273121][ T6732] blk_trace_setup_finalize+0x320/0x3a0 [ 134.278689][ T6732] blk_trace_setup+0x254/0x440 [ 134.283475][ T6732] ? __pfx_blk_trace_setup+0x10/0x10 [ 134.288761][ T6732] ? lockdep_hardirqs_on+0x16/0x100 [ 134.293982][ T6732] ? __pfx_vsnprintf+0x10/0x10 [ 134.298918][ T6732] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.304807][ T6732] ? do_vfs_ioctl+0x226/0x13e0 [ 134.309577][ T6732] blk_trace_ioctl+0x245/0x320 [ 134.314337][ T6732] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 134.319630][ T6732] ? find_held_lock+0x2b/0x80 [ 134.324299][ T6732] ? __fget_files+0x215/0x3d0 [ 134.328969][ T6732] ? hook_file_ioctl_common+0x140/0x440 [ 134.334516][ T6732] blkdev_ioctl+0x17c/0x6f0 [ 134.339033][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.344069][ T6732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.349136][ T6732] __x64_sys_ioctl+0x18e/0x210 [ 134.353915][ T6732] do_syscall_64+0x115/0x840 [ 134.358507][ T6732] ? clear_bhb_loop+0x40/0x90 [ 134.363201][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.369150][ T6732] RIP: 0033:0x7f110ff9ce59 [ 134.373647][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.393439][ T6732] RSP: 002b:00007f1110e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.401856][ T6732] RAX: ffffffffffffffda RBX: 00007f1110216180 RCX: 00007f110ff9ce59 [ 134.409833][ T6732] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 134.417813][ T6732] RBP: 00007f1110032e6f R08: 0000000000000000 R09: 0000000000000000 [ 134.425793][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.433782][ T6732] R13: 00007f1110216218 R14: 00007f1110216180 R15: 00007fff9108bf98 [ 134.441753][ T6732] [ 134.444838][ T6732] Kernel Offset: disabled [ 134.449156][ T6732] Rebooting in 86400 seconds..