last executing test programs: 1m20.88110113s ago: executing program 3 (id=428): close_range$auto(0x2, 0x8, 0x0) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = socket(0x2, 0x801, 0x106) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x1008, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000000000000]}, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="fe33c6953b24c2a9e37124000000", @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x20048894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x8, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x2140, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="addb4337db52b87310d7d5f1eb", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf258800000008006900070000003300f200c6b4e353ca1971880f12fcbf9533a85d7e4333513b453d1fa55393ef233fb5be23cba6429a0ea4b271f263e22336b700050008000000000008006b000b000000"], 0x60}, 0x1, 0x0, 0x0, 0x24044005}, 0x40000) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000001b40), 0x700, 0x0) 1m19.163744411s ago: executing program 3 (id=433): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x443d) unshare$auto(0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) timerfd_create$auto(0x61e1, 0x2) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x4, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1b, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1fb, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x1007ffd) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m18.349834089s ago: executing program 3 (id=437): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xc00000002, 0x400008, 0x2000000, 0x10, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x4040044) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mmap$auto(0x6, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1, 0x5, 0x2000008001, &(0x7f0000000280)=0xc9e, 0xcca, 0x1) mmap$auto(0x8, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) munlock$auto(0x10000000000ffff, 0xffffffdffffdfffe) mlockall$auto(0x7) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, &(0x7f0000000240)="003bf0dea2d07ba00c00000071a2320fa813300400b7123265ec37779047b1f4d198c06b7a0c5cfb16e8a9d1769e30852aae5ab574e19dc18eb97ea463f60b326fb3e41233f88421656b4cfc2d7c938701a0b54d44e015c77d8e1a065d5a83228c30bb386589bbc49fdd0be4538d9c32fb5af2e184b9a3568a62254d7315e761427192554a0638bc8cc033b75d5141aadcd772920300cb4a7c98507409875e9cc332a9cba867e7fde534d02b770297467f93a035715c47050d3d34c4e19a6502c63aa1de39098c49a962539ee1a1868a78f43007e1bbd6efee6d11ceac5ed8dbb35ef2a435a0c64e48f64fa2297195d91aa8759402", 0xf5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x15, 0x1, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp1\x00', 0x20342, 0x0) 1m17.913623493s ago: executing program 3 (id=439): ioperm$auto(0x7, 0xffd, 0x6) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x1) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 32) sysfs$auto(0x2, 0x27, 0x0) (async) mmap$auto(0x8, 0x2, 0xffff, 0x18, 0xffffffffffffffff, 0x7a) (async, rerun: 32) r0 = fsopen$auto(0x0, 0x1) (rerun: 32) fsconfig$auto(r0, 0x5, 0x0, 0x0, 0x0) (async) ioctl$auto_RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)=0x7fff) (async) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000001040)=@link_update={r0, @new_prog_fd=r0, 0xfffffffd, @old_map_fd=r0}, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) read$auto_zero_fops_mem(r0, &(0x7f0000000040)=""/4096, 0x1000) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r3 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x2000, 0x0) (rerun: 32) preadv$auto(r3, &(0x7f0000000180)={0x0, 0x4}, 0x6, 0x7, 0xe68) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/8/actions\x00', 0x0, 0x0) r5 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x448102, 0x0) connect$auto(r5, &(0x7f0000001140)=@xdp={0x2c, 0xe, 0x0, 0x1e}, 0xffffffc0) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)=""/73, 0x49) (async, rerun: 32) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) (rerun: 32) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 1m17.474318111s ago: executing program 3 (id=442): unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/19u\x00', 0x1800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0x3, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0xfffff81a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf2507000000080004001801000006000100ff030000a2aae45443f70b6f883ef121fc367cb73672c469ffb4907a51c7007f805f73d82e942968a14b8e78b80967f5c73038493ff32422069bd6693a5d0bfe2a2b6cf6e25b0fc7e47fda0448e09c5c172fc8998702a2be"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r3) clone3$auto(&(0x7f00000000c0)={0x3, 0xdb, 0x7, 0x5, 0xac9f, 0x42f4, 0x1, 0x8, 0x3, 0x9, 0x7ff}, 0x4) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0x1, 0xa2, 0x2, 0x3}, 0x0, &(0x7f0000000180)=0x4, 0x1c8, 0xdb0, 0x4, 0x6, 0x80, 0xff56, 0x1000, 0x9, @raw=0x3, @raw=0x1}) mprotect$auto(0x110c230000, 0xa588, 0x6) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 1m16.650029291s ago: executing program 3 (id=445): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x125}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840) socket(0x1d, 0x2, 0x2) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x3, 0x100) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r4 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000004040)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x10b002, 0x0) (rerun: 64) write$auto_nsim_nexthop_bucket_activity_fops_fib(r4, 0x0, 0x55) (async) getsockopt$auto(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x40, 0x0) (async) fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0xcd, &(0x7f00000002c0)='/dev/pts/ptmx\x00', &(0x7f0000000300)="cee51483ec45fb7d3f89c7a93d5abaf5a596a0d94bdc3d2c3859a69551adfb967861ddd474b482127ac1b9cdd0e56ba32ac10b73da32ab3395b18c975032acfbde7df1e9cfd835810d04e7cf0ee0eb9c833060ec270e04825e6d19831e716f303875594db50acb9cfe1df5281a63bb5e4830f9a6d2f258d6471ea6bd521fd2202e8ecd5dbdc8ccd0a1dfab60df4895927d231b4280bb2a5273d9", 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m1.234204063s ago: executing program 32 (id=445): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x125}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840) socket(0x1d, 0x2, 0x2) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x3, 0x100) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r4 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000004040)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x10b002, 0x0) (rerun: 64) write$auto_nsim_nexthop_bucket_activity_fops_fib(r4, 0x0, 0x55) (async) getsockopt$auto(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x40, 0x0) (async) fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0xcd, &(0x7f00000002c0)='/dev/pts/ptmx\x00', &(0x7f0000000300)="cee51483ec45fb7d3f89c7a93d5abaf5a596a0d94bdc3d2c3859a69551adfb967861ddd474b482127ac1b9cdd0e56ba32ac10b73da32ab3395b18c975032acfbde7df1e9cfd835810d04e7cf0ee0eb9c833060ec270e04825e6d19831e716f303875594db50acb9cfe1df5281a63bb5e4830f9a6d2f258d6471ea6bd521fd2202e8ecd5dbdc8ccd0a1dfab60df4895927d231b4280bb2a5273d9", 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 27.377939371s ago: executing program 1 (id=582): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x9, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x8}, 0xa3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) socketpair$auto(0x1f, 0x7fff, 0x8000000000000000, 0x0) r1 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(r1, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\x7f\x82S%h*SI', 0x3) bind$auto(r1, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, 0x0, 0x55) syz_open_procfs$namespace(0x0, 0x0) r2 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x400, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x1ff) fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x105, 0x10000f2b, 0xffffffffffffffff, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) 26.763016935s ago: executing program 1 (id=585): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x55) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, 0xffffffffffffffff) r0 = setfsuid$auto(0xee01) ioprio_get$auto_IOPRIO_WHO_USER(0x3, r0) r1 = getpgid(0xffffffffffffffff) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, r1, 0xb, 0xfffffffffffffffb) getpid() ioctl$auto(0x3, 0x541b, 0x74) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, 0x0, 0x4004840) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) 25.870550132s ago: executing program 1 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x3000000000000, 0x800}, 0x40) 25.49626156s ago: executing program 1 (id=587): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x200, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000040)="cb58d4a920887ae657bbbbe2b6197548961afe23dfbc91", 0x17) r1 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x20000, 0x0) read$auto_proc_auxv_operations_base(r1, &(0x7f00000000c0)=""/158, 0x9e) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x42000, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0x40047452, &(0x7f00000001c0)=0xff) poll$auto(&(0x7f0000000200)={r0, 0xc4}, 0xfff, 0xd98) r4 = socket(0xa, 0x5, 0x9) mq_getsetattr$auto(r0, &(0x7f0000000240)={0x7660454, 0x6, 0xd, 0x1}, &(0x7f0000000280)={0x8, 0x2, 0x7, 0x3}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x100, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEC_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x7e}, @ETHTOOL_A_FEC_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r12 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000680), r3) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r12, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xdf}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xf540}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x5}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) close_range$auto(r2, r2, 0x9) cachestat$auto(r1, &(0x7f00000007c0)={0x1, 0x8}, &(0x7f0000000800)={0x4, 0x10, 0xfffffffffffffffa, 0x2, 0x9}, 0x8) close_range$auto(r2, 0xffffffffffffffff, 0x10001) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r3) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x590423}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_MNTR_FLAGS={0x3b, 0x17, "fbdf688d290e94744c9a6698daf9b03f4234766beb1eda9643a59b666e8a2edd14bf8efbf7be96d2254a94121f415f8c9794de38226fab"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfa}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008005) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f00000009c0), 0xc8400, 0x0) r14 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000a00), 0x410000, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000001e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000a80)={0x1310, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_NAME={0x6, 0x2, ',\x00'}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xb}, @NL80211_ATTR_EHT_CAPABILITY={0x1004, 0x136, "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"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xcd}, @NL80211_ATTR_IE_ASSOC_RESP={0x2d4, 0x80, "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"}]}, 0x1310}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e40)=@iter_create={r2}, 0x0) r15 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000001f00)=@link_update={r4, @new_prog_fd=r14, 0x25c, @old_prog_fd=r0}, 0xd82) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r15, &(0x7f0000003340)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003300)={&(0x7f0000002000)={0x12d0, r13, 0x700, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x106f, 0x6e, 0x0, 0x1, [@generic="5bec935a3edc62f4d4ea4871ad8fe85ca3b66ecaefbb8a3070a0e05ae4db93ee2d371e016075c53c4b0d72429ab5e0d9b63831cc558c7d8a61d5113b714bbb8be39e376f84fd9ba448f3f0e4f26325bad260f171c0bbefcb76f6b0", @typed={0x6, 0x98, 0x0, 0x0, @str=']\x00'}, @generic="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", @typed={0x8, 0x52, 0x0, 0x0, @uid}]}, @NL80211_ATTR_SCAN_SSIDS={0x249, 0x2d, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @generic="9518065f0c6b64edf96f511ecb55392cd0889d7a47b124063e02514772123576b5f5c25c673a9f9b02b98eb205a558ebf4f679e349825ce4f9439a7eb2ad6409afd5a89f2f557d88db4df63af0be59c6e7ca5d54ae5bea12bd4155f99451f9f9bc006ae0422cf3bce4e8fde9653ced94797df700e4edaa9c64abc6c20d9a251968dac75ff093704739977d6b52d94edc5789ec879172544c960dde1bee6cf780c00bf5af6d98c83bcd91899e8f80666cde5e41021510d3d466", @nested={0x177, 0xd7, 0x0, 0x1, [@generic="97d9766902d1ea41811ab16a446a680c0c3cc6ba5982c9d568f876f662e6b23d3fbdb123274871603f248f4c95b5b6f8de32a89409fdbbe94c68a92a49ba15bf99ac9b5ca974af14b572e6dddf5badcc35d9b132a3ea4fb576b9d8c32f8583580f706074077c271101470e228b14c4", @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@loopback}, @generic="7ea7ef731c25feed487021d489d374382f779b15624b27d9feee078530c723d8e05910efb89b5663d64bec615f837447facbf91029251e378d995ed4bdddfabf606fa11f03b342c162230d687dd2a371f49f27abd0f1e68050f743d8b87efad0c6de48ae0388acb4a52dabb3e52488ef6ac295ad26254e03517972dc66bbf7dae7e418b269598e94a505ce0b0add665da7060ae193c04a6ade7e7f97dff7a36e86ab1990e7d3e52d2874980a329414d2eeb9a65bc63926e172783647cb3f0fcc66dd5bfe569663f549207c7aad65780fdcddeced557aa90c4b44fb8099ac2d53243753919481bc07852a08187763b8ceab678a496a763ecd", @nested={0x4, 0x169}]}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4, 0xd9}]}]}, 0x12d0}, 0x1, 0x0, 0x0, 0x10000114}, 0x10) 24.49426524s ago: executing program 1 (id=593): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1f, 0x7fff, 0x8000000000000000, 0x0) r0 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(r0, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\x7f\x82S%h*SI', 0x3) bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, 0x0, 0x55) syz_open_procfs$namespace(0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x105, 0x10000f27, 0xffffffffffffffff, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) 23.917912651s ago: executing program 1 (id=595): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400202, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/byte_queue_limits/limit\x00', 0x8a001, 0x0) write$auto(r1, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) keyctl$auto(0x20, 0x72510000000, 0x69c9, 0x2, 0x6) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r3, 0x84, 0x8, 0x0, 0x0) 20.391215581s ago: executing program 2 (id=605): mmap$auto(0x80000000000, 0x400008, 0xfffffffffffffffd, 0x8000000000000010, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)=@info={r1, 0x100, 0xe}, 0x1) write$auto(0x3, 0x0, 0x1) setsockopt$auto(r1, 0x4, 0x1ff, &(0x7f00000000c0)='\x00', 0x5f8) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x1, 0x20009, 0x4000400000e0, 0xeb1, 0x401, 0xde2) fanotify_init$auto(0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = socket(0x10, 0x2, 0x0) r4 = fanotify_init$auto(0x5, 0x2000000000002) epoll_pwait2$auto(r4, 0xffffffffffffffff, 0x27, 0x0, 0x0, 0x8) r5 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x22000, 0x0) read$auto_bdi_debug_stats_fops_(r5, &(0x7f0000000040)=""/69, 0x45) bind$auto(r3, 0x0, 0x6b) ioctl$auto_SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000200)="b23bac23c7629726e133cbd4e59d116499d8033716ff07a63b0d611a9abb9b4feb45379b05ca576f90f5436e7abf4aeb46e14695f7e134331f22798abe233a52c06972428d5356d6be2796ee44f341161557efecd11f12494aa078adceddb19e29577a7b62f285f602cab90cac79430f3aecdf6c03dc4495d6a3b07218723e8800ec6b27a8db30d2a9e5567ea01164f9958ae5c3251656f8715eb27db0409df8a59b987506c92ad785b361985ed0dc73d18533ab6e5face40bd6c3158c842b91e8472af25f9206a7ae0d76ce9b1ff4") prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) write$auto(0x3, 0x0, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x1f, 0x800, 0x1) connect$auto(r6, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) 20.089442189s ago: executing program 2 (id=606): socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x86, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40201, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) ioctl$auto(r1, 0xc0845658, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000180)={0x8000, &(0x7f00000000c0)={0x2, 0x3, 0x5, @raw=0xa77}}) socket(0x1d, 0x3, 0x1) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000040)=0x12fa) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) 18.857431244s ago: executing program 2 (id=607): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x3, 0x3040, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x4, 0x3, 0x7c1e, 0x3, 0x7c, 0x1ff, 0x102, 0xffffffffffffffff}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x100076c5, 0x10000008, 0x100000000}}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0xd57) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'ipvlan1\x00', 0x0}) getpeername$auto(r0, &(0x7f0000000040)=@can={0x1d, r1}, &(0x7f0000000100)) landlock_create_ruleset$auto(&(0x7f0000000080)={0x6, 0x8000000000001, 0xc}, 0xb, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x8) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket(0x11, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x44, r4, 0x1, 0x70bd26, 0x25dfdbf7, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x19, 0xfffffffffffffffe, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf25050000001c0001800800058004007d00100001800a"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 18.000135214s ago: executing program 4 (id=609): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000000, 0xd, 0x1fc0, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x100006, 0x8, 0x29f, 0x100, 0x7f, 0x105, 0x3f, 0x7f}, {0x100, 0x1, 0xb, 0x7, 0x1, 0x40, 0x3, 0x8, 0x100000000}}) 17.760151422s ago: executing program 2 (id=610): pread64$auto(0xffffffffffffffff, 0x0, 0x594c, 0x9fffffffd) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 64) shmctl$auto_SHM_STAT_ANY(0xfffffffd, 0xf, &(0x7f0000000440)={{0xade, 0xee01, 0xee01, 0x7, 0x8, 0x0, 0x1601}, 0x8, 0x6000000000, 0x4, 0x4, @raw=0x3, @raw=0x7, 0x1, 0x0, &(0x7f0000000100), 0x0}) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x400000000008) fsconfig$auto(r0, 0x8, &(0x7f0000000080)='[\x00', &(0x7f00000000c0)="7cc7218f60cf6b6c6ecd41b9ff6d831ea118f07fb6024b67301d9be695d494e5", r1) read$auto(0x3, 0x0, 0x8080) (async, rerun: 64) socket(0xa, 0x1, 0x100) (rerun: 64) write$auto(0x3, 0x0, 0xffd8) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r3, 0x5429, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x88cc2, 0x20) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r5, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x1, 0x100000000000003, 0x405, 0x1, 0x3, 0x10000062, 0x8, 0xd, 0x6d3f, 0x6, 0x8, 0xfffffffffffffffe]}, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 64) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x1, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 17.695576296s ago: executing program 4 (id=611): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x4) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(0x0, 0x4, 0x996, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf25030000000810030003020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000060007000600000008000300"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 17.304369998s ago: executing program 4 (id=612): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0xfffffffffffffffa, 0x10000006, 0xfffffffe, 0x2}, 0x8006, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe}, 0x8006, 0x1, 0x6) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xf4) setsockopt$auto(r0, 0x7ff, 0x5, &(0x7f0000000040)='/dev/video7\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20000020) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000180)={0x0, 0x3}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_thrs\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY2(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)=ANY=[@ANYBLOB="14001000", @ANYRES16=r2, @ANYBLOB="7d932abd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048004) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4010000fed157"], 0x1e4}, 0x1, 0x0, 0x0, 0x84}, 0x44080) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000140)=""/39, 0xffffffd3) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r7 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r8 = open_by_handle_at$auto(r7, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) setresuid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$auto(r8, 0x0, 0x401) r9 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r9, 0x43403d0e, 0x0) 16.688354538s ago: executing program 4 (id=613): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x8200, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100)) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x408201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92) 15.043095478s ago: executing program 4 (id=616): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) r0 = getpid() prctl$auto(0x0, 0xfffffffffffffffd, r0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) close_range$auto(0x2, 0x8, 0x0) 14.359551763s ago: executing program 2 (id=617): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0xa0200, 0x0) pread64$auto(r0, 0x0, 0x6, 0x40008) (fail_nth: 1) 14.130702117s ago: executing program 2 (id=618): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) (async) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto_VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) (async) ioctl$auto_VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x68, 0xffffffff, 0xd, 0x4, 0x8000000000c, 0x7fb4, 0x9, 0x5, 0x200000000003, 0x416c7c0c, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x3, 0x9}) socket(0x29, 0x2, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty23\x00', 0x101100, 0x0) getsockopt$auto_SO_COOKIE(r3, 0x6, 0x39, &(0x7f0000000040)='\x00', &(0x7f0000000100)=0x4) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) ppoll$auto(&(0x7f0000000080)={r0, 0x11b, 0x801}, 0xc, &(0x7f00000000c0)={0x9b85, 0x7f}, 0x0, 0x8) 13.951846843s ago: executing program 4 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x300000000000000, 0x800}, 0x40) 8.714425264s ago: executing program 0 (id=625): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1f, 0x7fff, 0x8000000000000000, 0x0) r0 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(r0, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\x7f\x82S%h*SI', 0x3) bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, 0x0, 0x55) syz_open_procfs$namespace(0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x28, 0x1, 0x0) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0x10080c, 0x18007}, {0x8}}, 0x0) timer_gettime$auto(0x0, 0x0) getsockopt$auto(r1, 0x28, 0x2, 0x0, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0x3) fanotify_init$auto(0xc00, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x105, 0x10000f2b, 0xffffffffffffffff, 0x0) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket(0x10, 0x6, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) 8.594169482s ago: executing program 33 (id=595): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400202, 0x0) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/byte_queue_limits/limit\x00', 0x8a001, 0x0) write$auto(r1, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) keyctl$auto(0x20, 0x72510000000, 0x69c9, 0x2, 0x6) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r3, 0x84, 0x8, 0x0, 0x0) 8.338453168s ago: executing program 0 (id=627): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x7) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x7ffbfffc) munmap$auto(0x1775387, 0x5) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x122) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, 0x0, 0x8346, 0x0) mmap$auto(0x4, 0xe983, 0xdf, 0xeb1, 0x401, 0x40008000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) lsm_list_modules$auto(0x0, 0x0, 0x2) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000d, 0x5b, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) socket(0xa, 0x3, 0xff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x9, 0x0, 0x0, 0x25}, 0x20100007}, 0x3, 0x4) 1.985032293s ago: executing program 0 (id=628): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) migrate_pages$auto(r0, 0x3, &(0x7f00000000c0)=0x7, &(0x7f0000000140)=0x80000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) 1.060770439s ago: executing program 0 (id=629): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) r0 = getpid() prctl$auto(0x0, 0xfffffffffffffffd, r0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) close_range$auto(0x2, 0x8, 0x0) 514.422957ms ago: executing program 0 (id=630): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) shmctl$auto_SHM_UNLOCK(0x7, 0xc, &(0x7f0000000100)={{0x5, 0xffffffffffffffff, 0xee00, 0x4, 0x800, 0x6, 0x8}, 0x7, 0x33b3, 0x6, 0x1, @raw=0x6, @inferred, 0x3, 0x0, &(0x7f0000000040)="056e6477e94bd1139cba", &(0x7f00000000c0)="9ad5dd4eacd06be519c3f1f08652b40e83"}) shmctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000002240)={{0x4, 0xee01, 0xee01, 0x4349f541, 0x5, 0x80, 0x3}, 0x9, 0x3, 0x760d8d53, 0xffffffffffffffff, @raw=0x7, @raw=0x2, 0x3, 0x0, &(0x7f0000001200)="4f3f40b1b2d56eb0776fe26cf559227e6bfd7e93911bd3f8c8b18ec641fa6345f113fbf1ba531ac695ce685e074e083699bfb5aae0f60503e7ff67b859f03c51f41f71cd2772f78a20d634b02543683059220de6413fe5947957a34d983d01ff702a6a68c1eb69fedbcda533419c63d9f77f6925e5554e37aee23d95f5f1d843fa046f4d0e1c03d3afa66f2610aee625e9e0378930ccb3a04cbe526f411d2cbcc99e49b4013695560b60bc200b822a5c4acf5cc193c8a0293389fcc71a3f4316452da3ffacb7340b0d8bd2ccf191aee11a5fda8b6d18056896c89a98385281f8812938bbeadd031b80a7e71f2dc2dab68afa2c0f6b2d17b9abdbd9bc835b914d23f0ef1ba46446d888cf9a96d864c4a7c03aa89f330f74165d749d4e13ffc92f57480ec77834ba629c57d615d8f3e08695e5f17662420d23a834846095d9acdf7f6fd3f5f0e0001fe26cc1ddd847b209b8eed1b3678526f0308ca01b6af82111e0fca9e9fd6e9ff99bf6a02bd974ac7de023205e9b950486d83be10f77c70d48a4c5ec55d4ad239fd665a79e7ddbc48f21c3b20db76d7b5a7b6bd3cb975a9953ac9aa649942f5a68024dfcf1851b7c96337a5252f1d467a3e1db2a5fee60ebadf32b237a78283d9af12de7ccf00de75fc840a7f0b73c1b0227c50d6aa17fa1b4089e3bf3d9074a106e042c1182842495943b024955c0ba52c75113cd39f1b3cb3cdcaf3a933678d0e468c44a11eb4b6886c6000bc1761ea8ab1dfac4fb923f8657b0093af880b73b314002d6e4dec5390a0914109c15a9793f0ae301a7a956d5be3ad4c99eaa56910ee36bc75fcf5348e0d8270ccbab2fbbd68166f4f717eb0249f89f8389d5369d6013f895758d768c0f5f8f3a04d06768aa2abde2263cba9d90dc15dab2b65b99554199e85d80fea6085a6fcc4bd9b00a9e3d1d018eba2db9ae9291da7faff89b31b01bf80eff8bf375b980e8897ac3d4c0a69b952f861aedc09de2143d5bd34270870e6cfb513ae22d5c5109d0c75feb7d2fc3dcbdc850e264388eb50dba10caa997ec1d1987a48b9440286bc08da896cfc0736e2fae40ee33ddef0380eb16c6b284711e4f644dfe9a999e43033360ac5ae130df895401909629c5adc2f5822b347de9eb55a97459e6323b7653fee94e04ccd83b2966d7466242c4ffeda0302a20272911c3825fe0cfeb4a40f6b563016ce8a0ef23f11c7639d0f3cc711183b78a70173f59bcbeab3cf198d393fdeb9311fd610c943ebcced51d27076fbe3304bf814096d506c24f838252771dbfd904ced9a12fc20a5f7d16db505fad4cf99376601bf54941c4e5a78046f85fa69f2928d1cc85f030106cef1fa37e5729735fca60d2750adb03fb10e1fc7ea942e1ab7e519686330899dfa719b225b6f366365025cd41b8825771a61645452388158c357c628378b3da51263b8abd9a1af6aae4ccb2f98aac4473688630e1d8e88ef7a1dde35f7f3a11412abe13176b40cd52da41ad21ec71b3c9d13d1a7ce9def8a9f141e78b6af75e7cf82126157e9d0e575231dd5abf4dfb6b82648c1abfa8f2f87b34f46202774e9cbd7f25dd766f8647693132b1da6e59a23c39dbb5428fba2ed4843413d19942165b452c90544b391dd314d446eb5a77c7d7e92ec41d1937730ea383e7402bdb818a574bf1217351e8e839a101ff165340553de81b0adc07cf14dd55120c34430ede4703cfce9543003c2067411267bd20cc7e5aa74fbe911e8a8742f8b1c57994d726bcae3405db36ed173af40731afa13917e6feff66fe04736e265cfce63b060437f0c5f51b24463c5174718203a6500ba72314375eeeb6507f61e280a59905114b9a6d3cab2bfe7fb049dfb1ba1d3f9e7bc7e3decb2c4a819d1e6bea3c54170260f32737faa8a141dd5e01130f83f3bd208de6a32634dd18c6a00d08003b2f4972680c05d66ea47ced5243c64f75e9355bc22910d71ce0289a10bc05dbfff0cc02e69eabc4bbeeacbe708abd45f3284897bc808f3d993de9ac4ffdacc2a1da099ce91b644d44589a37b44669a00bab6dd49742a68574bed08829c4f21b8d8c114909592c8e93923f2b1caececbdf8000761a96cdba2955fe9d2cfc80cf35923df486ca6582c2519fca1e17ff7414fc172a9dd96e0e09a90f8f47fcfe67aec57c8a77934af8f974658e64709ec0cce3874a304f6b94444c1809d664a293709570ae257b3dabbeb91623f46bbd83a0aae60dc944af1e57a95015377de84a9ac45850a07dd745017d704fdfd7ed42adfa2d47a617af4c86de1da460d6b4ee60a92e47dd280099d119a9cbbf2ab94d74a4b5795340f594ce1081604cd27ed890a0a749722e6ade29f622d6bbfc2eb9a5d12de67fd07ca36eac2f934adb821bc2eb4a6eac3b1e9d95ec6ec7070f4aa82d233f95b7a9c45646c08c8f9ab6beb83cc82b93b20eb22dccdeef033903334bbec9c5ecfe4be8e6bd6816743fed4811e23bc62c076ee106d7fd69d2e41756f7960d7c6bb8a3e39df5d1f423b25e43dbf69f53621bbf4cbff6f2e3b190461251a7040265a5827052c80e51baa171a4e2cfaa2a8a1afee5af95806d7f4ae9cb5fb33c14ca557439cec94841591ba630371877d1a2bcfe4a8b5444c18a093eaf97ecd4dc3f4fa0e3d54a75ec96acdbbd2949b2321e0d9b32d493c32f9216e3da5a3f6c50525b1586ef4f22980aad40cf535285ef50e790ec20924dc1cb40fd8c9b172e1b6e2d51f99629aa944141a53982d0a731210db6ca2545af8a8e955deb050e7f0cd7554f62527baeb30ed4100f86d77795a7a2bd7f33fbc3addfd2610634a17224edbcc3e5ce0ef57800c03fdf323b8accab8ba910a3d4692787fefc323b3a2bd283ad97ac7b43c1a9b9cf91d9f7d2a0aa65871cf128f59009a86a1cfe4e866474eba5c244c17dc77a0c7682629fddb84d0cbed11003e4073a6d69703d8462cf214521e8b80e04931e9a7bcab901f1f1309a94bbf7fc2069135f701a1b45332fa26e7b2a0d543564d4088708a55d5c695e53d29998dd4aaf0351064a9b890cd0fd626e78307721abcc06f6b8774af0af1a76cd99c045a866458d766bc46ffe3993b99597ae43c9e362f84828482660707fbceb0496fa1499fa73182ee7e77dfeefd738bd0351036354ea64494c4bae3dc7eaff55e9336b257973388e5d832a8df1e9e897514d447c23fab1513a96d448bb971b26a10fc430cb34fdeff8840369704b7b084d7e5004fd71628117f42684997fbecb354267b289b1c81a39071b1136620e4c7237e8821fa45f28d43a17b1f726f957ef119f6dcbb410a9ce2069a2a54b58a7b7ce6bfb7c795bb1811fbf29fc29b402ee900c6d6603b1d2c2500f6d5ce93e7858edcd148cc5bdb3f512e48792be2ec8ea04461815644e99594d625fce03d542ec60ec9c69a5c2ab2d6b34375a18615327c5f88e2b17efc2172a8704796feb07678a8eeabf6033a6a3dce7cfdb4fb8df2303888a6d6c36f7bf35fa3cafce5ccfd9e06f0130a64ed6583199af1cfc736b91971532f56ace3fa48bb8ff9023ff86453856042f27b307e1b0091aded87ad4b7e49a054864f83eec52c5f0b7e9e915bdcab959720cda3671c92c358b7e02462d932eda9292ce4d862674335beece201db0f01ac15ec2d8a0107eb1b8d81f8d7f6dfa9561f205655c75ad3c9fb3eadf26fd07186e8cf4efdc0aab364e31f5684a8c3892827b758decbc4a92aca9c0617e3252b62635948bca94f1b9d3e4052fa04e7dd7bdf6e1bc027c7659723880738967cbc1258ce7b0393705af6b8dd4e646d0682609d3150030903a557d7b0019622c591728a6e2a9c3091cb89f0e2be30388f3a1492f7b4febd60c893d577ac53458685c93f474dc551c9e59908268f5ad2490735237f0ea60640197128a75a3e2b242e138ec22458a943ad2755dbcbfccee9e9b91a6937777dfe99dd37370291881c7fdfd918c40654dc345ada3ed7f10d164b4cc8a3bc21defc71c0dc33b069831f682c5f7dc1a9934633b1d5b44b75489d56a8dfaec1f5ccb9d6f9ba17071dbc3ea1d8f134340fc31be69d3bbda8beeeb2ed24d6b7bec74e0741c81ca3943e69a903604e5fc8d811340e4116a74f5a3e5e5db67ef50cd93e5a5271ce130786688d19c7b1c1fb6f61a2e6d806c90708529d597763535b5d1a2daabfbc3348cb5b2cce4a06484971ff0b9367e317eeeaa6e99c01ada78a5fad37779a1de8784d0d19c806707e37061d05e9f486c2064c97a717dc1e18ece29b77b6d5c65c5545599c0fa1814e21e55949c5baf74de9d69db416df928ae3a701199b442606524495ad85dfcc54c37545faec4ed8b53932ca10c356934894b75608972130a73c7607fd2945a1b6193f3b79fe419802fcd9dad63ebec933680a55133f35e1ce289f0aa8e05924102ced066e57b481576285676c8338287522f92c2217552bcd19756a844a0df27a2ecb6a115ff9a841067d6157522c8d23382b3f5469cd3e08b92a69300a63929c7f0dd12965eff3c6fafe6601e338e80817b2ba456cd216a4cb66e8c4243236a2512c07dd828dcf02b7f19ed454f6015f270536a8265e03f92fc21fc24c0f6ae664239eb8c4b5da70d27d34ea8597649c3e6ecd82ad1d8c8e0aacc953c960aa892c7052e67e6fa304c0c25bec0c9cd2e1512ae8fea19d7af8d41c9c3f26a14dcd272448cca39c26d4368ac3dfc228d7715380d60e9ec1c675188ec94fd9f2ade10df6714b919f57cff20ebf1f325cb4b05c1f8f44eb16f8f241280e08e9cd70fd8c015e024a9511bdcae778e461fac26b879aeb903b8efb93e8ea91d73c6c40ec8b77c5507ce19403ce169ba5c112b1be9c0dc7dbd23c3d68ba898cc973a19a5edccb7163163f81798e01c7cfe8ea0264924bb7b82320070ad4a73d17eae46d2c17eacea0d2989fbf63aa19c5f8faf9e5799f234995af21633121aa92349345ca27484944f94cf553436e206d78caf467bf928df12a92c8d2073b0a4ea247595ffba001a46aa3d683865d4a22cb2cc3f5e646adfda62aa2ebd01bef2a3602e51c6350267c6694b569d38b063830c448d81cc45bc056b1749f1143a48bd632970e877096c0031593ccc1a035e12be80b9ac3996e381157fbad155baabeb0c3aae695a559450fd254e2c8eedc14e88c4864a49d2af94660ab63f260850ec43e5f85d0cd85d7ef044434d6b30b553ddfa4e5a3e1806c81ad88c079d613c4eb62c8cafdc777b62d6a3f3a32855fbb884cd5025931eea0a8f80daa1888baa8290cfa2f5198aa1f7cb47769803c03c04003698015340ce6060e65a924ce3e63d3eb7518b0d3a083434df037d09278fccec1c68df556aca3122745be8dbcae2ac11b67736590cbf3e11e59c3d07d4ced779a5f7112b5e56e867148a1fa7f216e5501df1521ee14308b652d5aed6ee0341037521c21a9f85cca7a8de53be34d52379baaad0bbb7d20763132571c462e3a234aced57d54f333dd8f93ae798b03ff41c671381b168fec97b46cbc7f6137b75b83b4fc017ea40ae28acb38ff651df2b626496f88fd69ce856d44d1feb64047279bbfa316b6dc14a9a5896cb39ff2d557ebb0b2dc153d120bd97d8adf38e54611a02314ea7d1c62dd165c8052308e4988f94a6103b7342945baa5d881917d1ca2eb7871ca3d38d59e784860542213402c90eff507ea9479c79a0223bfc0740f76959a011678bf82bf70a6aac15d6bfc9e6910935966c9b2e293a0d3b0457c8714c38009bf2d58ef13e8193e6b1d8527d1e4c6676be156c7f72", &(0x7f0000002200)="c5c14351a694ef748a4552"}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x2, 0x0) msgctl$auto_MSG_STAT(0x4af, 0xb, &(0x7f0000002340)={{0x10, r2, r3, 0xfc, 0x4, 0xff, 0x9}, &(0x7f00000022c0)=0x4, &(0x7f0000002300), 0xc0000000000, 0x348, 0x6, 0x7fff, 0x280000000000, 0xffff, 0xf64d, 0xc, @inferred, @inferred=r4}) socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x8138ae83, 0x0) 0s ago: executing program 0 (id=631): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2503000000040008002000018008000f00ac1e000114000f002001000000000000000000000000000264e0872473b72615dde90424da69e31b08f4f5c2315026d3880e3e1348973d4ab00c4b7f4ab4f367e33e33e407e4797b89c362379291b268fae33fb8ad0a9f4133929b668c677f0f771a31cbd35abb7700ea93018594fc07871fd09a82df12f95e4a2c0b8dd037f96a3311db16140fdb454ed093b27b92425e67fe69e5cd203e85a87554f166c3a0f6114de635378c532325ccc0ef2ed8f35c46"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/13/effective_affinity\x00', 0x100, 0x0) read$auto(r3, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r4) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200140002"], 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x20008000) r6 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r7, 0x2f}, 0x22) sendmsg$auto_OVS_DP_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c004ea59df4c41ca6cbc6c40f5ba7c01ad13f13cfc08f0a1110908982c7403a4619d5efafdc4319d26c1e4532214f4f04679be81ea99d8c9fc375e6a5c70b7673b8d7f05485eadb23341d1e8fa2f68ba2b5696d3e937280ff135da4bf4823f9836220d7fe7a7afcf0e994760cfd779f002e373c82f5bfbf0800000078b75f063c9a1830f4ffbf42b22350871f3cd9a8a256d2dfa513831d780fbd0b38b266ba9c20816dde3f7ee5a89e8109c1f004f7bd49b79be08353af8c948e0b6d", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf250200000008000900", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000100)={0x10000000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r9 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r9, 0x410, 0x6) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') recvmmsg$auto(r2, 0x0, 0x10000, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/oom_score\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 92.743958][ T5619] cgroup: Unknown subsys name 'net' [ 92.861895][ T5619] cgroup: Unknown subsys name 'cpuset' [ 92.871650][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.740274][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.869289][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.881240][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.889562][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.899845][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.920892][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.986032][ T4948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.995614][ T4948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.005787][ T4948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.018707][ T4948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.039603][ T4948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.070572][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.081886][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.096062][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.110778][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.122445][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.145512][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.165562][ T4948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.173720][ T4948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.184259][ T29] cfg80211: failed to load regulatory.db [ 97.198311][ T4948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.209300][ T4948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.989111][ T4948] Bluetooth: hci0: command tx timeout [ 99.055340][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.062929][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.067740][ T4948] Bluetooth: hci1: command tx timeout [ 99.074389][ T5638] bridge_slave_0: entered allmulticast mode [ 99.083911][ T5638] bridge_slave_0: entered promiscuous mode [ 99.112413][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.119700][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.128007][ T5633] bridge_slave_0: entered allmulticast mode [ 99.135500][ T5633] bridge_slave_0: entered promiscuous mode [ 99.144580][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.151775][ T4948] Bluetooth: hci2: command tx timeout [ 99.152189][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.164726][ T5633] bridge_slave_1: entered allmulticast mode [ 99.172426][ T5633] bridge_slave_1: entered promiscuous mode [ 99.179827][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.187062][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.194594][ T5638] bridge_slave_1: entered allmulticast mode [ 99.202505][ T5638] bridge_slave_1: entered promiscuous mode [ 99.211048][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.218263][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.225578][ T5641] bridge_slave_0: entered allmulticast mode [ 99.230750][ T4948] Bluetooth: hci3: command tx timeout [ 99.239286][ T5641] bridge_slave_0: entered promiscuous mode [ 99.285365][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.292743][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.300216][ T5641] bridge_slave_1: entered allmulticast mode [ 99.308274][ T5641] bridge_slave_1: entered promiscuous mode [ 99.358472][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.380517][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.387938][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.395365][ T5642] bridge_slave_0: entered allmulticast mode [ 99.404414][ T5642] bridge_slave_0: entered promiscuous mode [ 99.414946][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.426851][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.459275][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.466569][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.474190][ T5642] bridge_slave_1: entered allmulticast mode [ 99.481900][ T5642] bridge_slave_1: entered promiscuous mode [ 99.491522][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.515638][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.556861][ T5638] team0: Port device team_slave_0 added [ 99.565606][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.601863][ T5638] team0: Port device team_slave_1 added [ 99.621780][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.633480][ T5633] team0: Port device team_slave_0 added [ 99.666363][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.678697][ T5633] team0: Port device team_slave_1 added [ 99.698580][ T5641] team0: Port device team_slave_0 added [ 99.727824][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.734940][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.761046][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.775547][ T5641] team0: Port device team_slave_1 added [ 99.806498][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.813636][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.839779][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.864952][ T5642] team0: Port device team_slave_0 added [ 99.871692][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.880445][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.906923][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.945073][ T5642] team0: Port device team_slave_1 added [ 99.951633][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.959741][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.986170][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.999200][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.006178][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.032620][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.068383][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.075366][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.101564][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.126277][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.133369][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.159411][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.203520][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.210667][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236948][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.268648][ T5638] hsr_slave_0: entered promiscuous mode [ 100.275892][ T5638] hsr_slave_1: entered promiscuous mode [ 100.311801][ T5633] hsr_slave_0: entered promiscuous mode [ 100.318794][ T5633] hsr_slave_1: entered promiscuous mode [ 100.325079][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 100.331164][ T5633] Cannot create hsr debugfs directory [ 100.391418][ T5641] hsr_slave_0: entered promiscuous mode [ 100.398335][ T5641] hsr_slave_1: entered promiscuous mode [ 100.404611][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 100.410557][ T5641] Cannot create hsr debugfs directory [ 100.476671][ T5642] hsr_slave_0: entered promiscuous mode [ 100.483326][ T5642] hsr_slave_1: entered promiscuous mode [ 100.489901][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 100.495659][ T5642] Cannot create hsr debugfs directory [ 100.986477][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.013174][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.022639][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.035322][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.044231][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.054920][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.063650][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.067905][ T4948] Bluetooth: hci0: command tx timeout [ 101.082694][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.147675][ T4948] Bluetooth: hci1: command tx timeout [ 101.177104][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.191135][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.202780][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.214692][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.223308][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.228993][ T4948] Bluetooth: hci2: command tx timeout [ 101.241569][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.249865][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.262083][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.308037][ T4948] Bluetooth: hci3: command tx timeout [ 101.386236][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.399056][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.413720][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.425382][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.434621][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.446216][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.472735][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.483676][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.577083][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.588537][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.607236][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.619571][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.635954][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.646609][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.655590][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.666936][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.703969][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.768673][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.804091][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.811856][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.852843][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.860140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.930839][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.005012][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.033535][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.049496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.056667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.072274][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.093037][ T3244] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.100256][ T3244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.174809][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.204239][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.231273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.238536][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.265490][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.272760][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.285958][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.293248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.335613][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.342877][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.147802][ T4948] Bluetooth: hci0: command tx timeout [ 103.206747][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.232928][ T4948] Bluetooth: hci1: command tx timeout [ 103.309069][ T4948] Bluetooth: hci2: command tx timeout [ 103.389468][ T4948] Bluetooth: hci3: command tx timeout [ 103.406391][ T5638] veth0_vlan: entered promiscuous mode [ 103.492062][ T5638] veth1_vlan: entered promiscuous mode [ 103.607243][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.670570][ T5638] veth0_macvtap: entered promiscuous mode [ 103.699794][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.715446][ T5638] veth1_macvtap: entered promiscuous mode [ 103.785112][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.798634][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.827562][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.854774][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.869852][ T5641] veth0_vlan: entered promiscuous mode [ 103.885372][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.894990][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.919761][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.941730][ T5641] veth1_vlan: entered promiscuous mode [ 104.070198][ T5633] veth0_vlan: entered promiscuous mode [ 104.119742][ T3244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.133235][ T5633] veth1_vlan: entered promiscuous mode [ 104.141307][ T3244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.164881][ T5642] veth0_vlan: entered promiscuous mode [ 104.182848][ T5641] veth0_macvtap: entered promiscuous mode [ 104.231175][ T5641] veth1_macvtap: entered promiscuous mode [ 104.239409][ T5642] veth1_vlan: entered promiscuous mode [ 104.249752][ T3244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.261371][ T3244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.327845][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.345597][ T5633] veth0_macvtap: entered promiscuous mode [ 104.381091][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.384039][ T5638] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.404513][ T5633] veth1_macvtap: entered promiscuous mode [ 104.439166][ T3244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.448196][ T3244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.471212][ T3244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.482050][ T3244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.494659][ T5642] veth0_macvtap: entered promiscuous mode [ 104.535855][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.570173][ T5642] veth1_macvtap: entered promiscuous mode [ 104.607081][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.673648][ T54] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.690156][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.720998][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758561][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.768221][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.783565][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.794419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.805689][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.855871][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.891134][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.901918][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.912321][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.980176][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.020912][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.090519][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.116252][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.190924][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.201558][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.227524][ T4948] Bluetooth: hci0: command tx timeout [ 105.310172][ T4948] Bluetooth: hci1: command tx timeout [ 105.366255][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.388096][ T4948] Bluetooth: hci2: command tx timeout [ 105.401754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.422202][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.453633][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.468229][ T4948] Bluetooth: hci3: command tx timeout [ 105.623304][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.935607][ T4948] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 106.007364][ T30] audit: type=1806 audit(1782450298.333:2): xattr="" res=-22 [ 106.096385][ T5798] Zero length message leads to an empty skb [ 106.633983][ T5807] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 107.224744][ T5825] vivid-007: ================= START STATUS ================= [ 107.240268][ T5825] vivid-007: Generate PTS: true [ 107.256149][ T5825] vivid-007: Generate SCR: true [ 107.271633][ T5825] tpg source WxH: 320x240 (Y'CbCr) [ 107.294953][ T5825] tpg field: 1 [ 107.304484][ T5825] tpg crop: (0,0)/320x240 [ 107.324240][ T5825] tpg compose: (0,0)/320x240 [ 107.336689][ T5812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.348262][ T5825] tpg colorspace: 8 [ 107.352527][ T5825] tpg transfer function: 0/0 [ 107.369812][ T5826] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 107.379450][ T5825] tpg Y'CbCr encoding: 0/0 [ 107.386206][ T5825] tpg quantization: 0/0 [ 107.392914][ T5825] tpg RGB range: 0/2 [ 107.397644][ T5825] vivid-007: ================== END STATUS ================== [ 108.102559][ T30] audit: type=1806 audit(1782450300.433:3): xattr="" res=-22 syzkaller syzkaller login: [ 109.677364][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.276041][ T30] audit: type=1806 audit(1782450304.603:4): xattr="" res=-22 [ 112.923915][ T5900] nbd: socks must be embedded in a SOCK_ITEM attr [ 112.977894][ T5900] block nbd0: shutting down sockets [ 113.238819][ T5897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.344811][ T5899] bond0: invalid ARP target specified [ 113.386538][ T5896] tipc: Started in network mode [ 113.399404][ T5896] tipc: Node identity ee00, cluster identity 4711 [ 113.419931][ T5896] tipc: Node number set to 60928 [ 113.660321][ T5905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.489575][ T5908] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 115.110532][ T5914] sctp: [Deprecated]: syz.3.32 (pid 5914) Use of int in max_burst socket option. [ 115.110532][ T5914] Use struct sctp_assoc_value instead [ 115.222514][ T5927] random: crng reseeded on system resumption [ 116.305162][ T5942] bond0: invalid ARP target specified [ 116.519516][ T5930] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 116.757864][ T5943] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 116.770448][ T4948] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 116.831197][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.44'. [ 116.942959][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.096278][ T5952] bridge_slave_0 (unregistering): left allmulticast mode [ 117.112895][ T5952] bridge_slave_0 (unregistering): left promiscuous mode [ 117.134535][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.176478][ T5960] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.407620][ T5966] FAULT_INJECTION: forcing a failure. [ 118.407620][ T5966] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.463658][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 118.463703][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.463727][ T5966] Call Trace: [ 118.463739][ T5966] [ 118.463752][ T5966] dump_stack_lvl+0x100/0x190 [ 118.463817][ T5966] should_fail_ex.cold+0x5/0xa [ 118.463863][ T5966] get_futex_key+0x1d2/0x14f0 [ 118.463903][ T5966] ? __pfx_get_futex_key+0x10/0x10 [ 118.463952][ T5966] futex_wait_setup+0x91/0x540 [ 118.464014][ T5966] __futex_wait+0x19f/0x300 [ 118.464064][ T5966] ? __pfx___futex_wait+0x10/0x10 [ 118.464109][ T5966] ? futex_hash+0x311/0x400 [ 118.464146][ T5966] ? __pfx_futex_wake_mark+0x10/0x10 [ 118.464198][ T5966] ? __pfx_futex_hash+0x10/0x10 [ 118.464231][ T5966] ? ex_handler_uaccess.isra.0+0xfa/0x200 [ 118.464287][ T5966] ? fixup_exception+0x119/0xff0 [ 118.464346][ T5966] futex_wait+0xe6/0x370 [ 118.464392][ T5966] ? __pfx_futex_wait+0x10/0x10 [ 118.464461][ T5966] ? irqentry_exit+0x24d/0xa00 [ 118.464514][ T5966] do_futex+0x265/0x440 [ 118.464554][ T5966] ? __pfx_do_futex+0x10/0x10 [ 118.464593][ T5966] ? cap_task_prctl+0x104/0xa50 [ 118.464650][ T5966] __x64_sys_futex+0x34f/0x4d0 [ 118.464695][ T5966] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.464740][ T5966] ? __pfx___do_sys_prctl+0x10/0x10 [ 118.464804][ T5966] do_syscall_64+0x115/0x840 [ 118.464854][ T5966] ? clear_bhb_loop+0x40/0x90 [ 118.464896][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.464932][ T5966] RIP: 0033:0x7f1a1959ce59 [ 118.464976][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.465015][ T5966] RSP: 002b:00007f1a1a45d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.465052][ T5966] RAX: ffffffffffffffda RBX: 00007f1a19815fa8 RCX: 00007f1a1959ce59 [ 118.465073][ T5966] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a19815fa8 [ 118.465093][ T5966] RBP: 00007f1a19815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 118.465119][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.465133][ T5966] R13: 00007f1a19816038 R14: 00007fffcc0064b0 R15: 00007fffcc006598 [ 118.465162][ T5966] [ 120.337672][ T5991] bond0: invalid ARP target specified [ 120.441198][ T5991] nbd: socks must be embedded in a SOCK_ITEM attr [ 120.501647][ T5991] block nbd0: shutting down sockets [ 121.245657][ T6002] zram0: detected capacity change from 0 to 16 [ 122.561683][ T6012] bond0: invalid ARP target specified [ 122.647562][ T6012] nbd: socks must be embedded in a SOCK_ITEM attr [ 122.663407][ T6012] block nbd0: shutting down sockets [ 123.885575][ T6033] tipc: Started in network mode [ 123.934639][ T6033] tipc: Node identity ee00, cluster identity 4711 [ 123.966429][ T6033] tipc: Node number set to 60928 [ 125.161961][ T6043] FAULT_INJECTION: forcing a failure. [ 125.161961][ T6043] name failslab, interval 1, probability 0, space 0, times 1 [ 125.179576][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) [ 125.179618][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.179638][ T6043] Call Trace: [ 125.179649][ T6043] [ 125.179661][ T6043] dump_stack_lvl+0x100/0x190 [ 125.179706][ T6043] should_fail_ex.cold+0x5/0xa [ 125.179747][ T6043] should_failslab+0xc2/0x120 [ 125.179797][ T6043] __kmalloc_cache_noprof+0x91/0x6c0 [ 125.179827][ T6043] ? __pfx___mutex_lock+0x10/0x10 [ 125.179869][ T6043] ? ring_buffer_read_start+0x149/0x440 [ 125.179917][ T6043] ring_buffer_read_start+0x149/0x440 [ 125.179958][ T6043] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 125.179997][ T6043] ? lockdep_init_map_type+0x5c/0x250 [ 125.180029][ T6043] ? ring_buffer_overruns+0x14e/0x1a0 [ 125.180067][ T6043] __tracing_open+0x82e/0xa80 [ 125.180111][ T6043] tracing_open+0x26b/0x4d0 [ 125.180152][ T6043] do_dentry_open+0x6ab/0x14d0 [ 125.180186][ T6043] ? __pfx_tracing_open+0x10/0x10 [ 125.180232][ T6043] vfs_open+0x82/0x3f0 [ 125.180289][ T6043] path_openat+0x2873/0x4280 [ 125.180343][ T6043] ? __pfx_path_openat+0x10/0x10 [ 125.180391][ T6043] do_file_open+0x20e/0x430 [ 125.180431][ T6043] ? __pfx_do_file_open+0x10/0x10 [ 125.180498][ T6043] ? alloc_fd+0x471/0x7a0 [ 125.180535][ T6043] ? do_getname+0x191/0x390 [ 125.180583][ T6043] do_sys_openat2+0x10f/0x1e0 [ 125.180630][ T6043] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.180679][ T6043] ? cleanup_mnt+0x263/0x450 [ 125.180739][ T6043] __x64_sys_openat+0x12d/0x210 [ 125.180787][ T6043] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.180847][ T6043] do_syscall_64+0x115/0x840 [ 125.180894][ T6043] ? clear_bhb_loop+0x40/0x90 [ 125.180937][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.180973][ T6043] RIP: 0033:0x7f27f8b9ce59 [ 125.181001][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.181032][ T6043] RSP: 002b:00007f27f99a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.181064][ T6043] RAX: ffffffffffffffda RBX: 00007f27f8e16090 RCX: 00007f27f8b9ce59 [ 125.181087][ T6043] RDX: 1a6b75d638828712 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 125.181109][ T6043] RBP: 00007f27f8c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 125.181129][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.181147][ T6043] R13: 00007f27f8e16128 R14: 00007f27f8e16090 R15: 00007fff799117d8 [ 125.181185][ T6043] [ 125.900458][ T6051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.927079][ T6055] random: crng reseeded on system resumption [ 127.810186][ T30] audit: type=1806 audit(1782450320.143:5): xattr="" res=-22 [ 129.346972][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 129.403714][ T6096] ipvlan1: entered promiscuous mode [ 129.504421][ T6096] ipvlan1: entered allmulticast mode [ 129.512789][ T6096] veth0_vlan: entered allmulticast mode [ 129.681171][ T6098] futex_wake_op: syz.0.70 tries to shift op by -2048; fix this program [ 130.988382][ T6137] netlink: 318 bytes leftover after parsing attributes in process `syz.0.77'. [ 132.243739][ T6147] openvswitch: netlink: Flow key attr not present in new flow. [ 132.710147][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 133.005430][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014515][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.040742][ T6165] netlink: 318 bytes leftover after parsing attributes in process `syz.2.84'. [ 134.869794][ T30] audit: type=1806 audit(1782450327.203:6): xattr="" res=-22 [ 134.902422][ T6193] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 135.372804][ T6200] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 139.306675][ T6244] vhci_hcd: not connected 4 [ 139.727141][ T6255] netlink: 'syz.2.102': attribute type 23 has an invalid length. [ 142.583920][ T6274] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 142.973659][ T6270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.999686][ T6270] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.092034][ T6270] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.185539][ T6270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.191869][ T6270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.255104][ T6270] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.360711][ T6270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.384520][ T6270] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.531357][ T6270] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.597650][ T6270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.611432][ T6270] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.638873][ T6270] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.181570][ T6290] Setting dangerous option i915.mitigations - tainting kernel [ 144.285707][ T6296] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 144.747740][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.227920][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.387431][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.627925][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.832709][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.874077][ T6309] netlink: 342 bytes leftover after parsing attributes in process `syz.3.112'. [ 146.957893][ T6321] tipc: Started in network mode [ 147.002789][ T6321] tipc: Node identity ee00, cluster identity 4711 [ 147.017825][ T6321] tipc: Node number set to 60928 [ 147.308704][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.469013][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.707380][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.907450][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.054249][ T6344] capability: warning: `syz.0.119' uses deprecated v2 capabilities in a way that may be insecure [ 149.387560][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.550308][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.653516][ T6349] bond0: invalid ARP target specified [ 149.730951][ T6349] nbd: socks must be embedded in a SOCK_ITEM attr [ 149.748943][ T6349] block nbd0: shutting down sockets [ 149.787341][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.672286][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 150.877180][ T6367] netlink: 342 bytes leftover after parsing attributes in process `syz.2.125'. [ 150.914249][ T6367] FAULT_INJECTION: forcing a failure. [ 150.914249][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 150.973949][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.125 Tainted: G U syzkaller #0 PREEMPT(full) [ 150.974000][ T6367] Tainted: [U]=USER [ 150.974010][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.974036][ T6367] Call Trace: [ 150.974047][ T6367] [ 150.974059][ T6367] dump_stack_lvl+0x100/0x190 [ 150.974105][ T6367] should_fail_ex.cold+0x5/0xa [ 150.974148][ T6367] should_failslab+0xc2/0x120 [ 150.974193][ T6367] __kmalloc_noprof+0xfc/0x820 [ 150.974236][ T6367] ? tnode_new+0x2f7/0x350 [ 150.974276][ T6367] tnode_new+0x2f7/0x350 [ 150.974311][ T6367] resize+0xe5b/0x22f0 [ 150.974355][ T6367] fib_insert_alias+0x9b3/0xe30 [ 150.974393][ T6367] fib_trie_unmerge+0x289/0xbd0 [ 150.974431][ T6367] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 150.974465][ T6367] ? __pfx___mutex_lock+0x10/0x10 [ 150.974514][ T6367] fib_unmerge+0xee/0x510 [ 150.974552][ T6367] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 150.974593][ T6367] fib4_rule_configure+0x383/0x10c0 [ 150.974641][ T6367] fib_newrule+0x356/0x1ed0 [ 150.974683][ T6367] ? rcu_is_watching+0x12/0xc0 [ 150.974727][ T6367] ? __pfx_fib_newrule+0x10/0x10 [ 150.974764][ T6367] ? kfree_skbmem+0xe0/0x210 [ 150.974799][ T6367] ? kmem_cache_free+0x127/0x6b0 [ 150.974828][ T6367] ? skb_release_data+0x6ca/0x8e0 [ 150.974883][ T6367] ? find_held_lock+0x2b/0x80 [ 150.974921][ T6367] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 150.974951][ T6367] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 150.974984][ T6367] ? __pfx_fib_nl_newrule+0x10/0x10 [ 150.975030][ T6367] rtnetlink_rcv_msg+0x95e/0xe90 [ 150.975068][ T6367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.975115][ T6367] ? ref_tracker_free+0x37e/0x6c0 [ 150.975164][ T6367] netlink_rcv_skb+0x159/0x420 [ 150.975203][ T6367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.975236][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.975293][ T6367] ? netlink_deliver_tap+0x1ae/0xcc0 [ 150.975338][ T6367] netlink_unicast+0x585/0x850 [ 150.975392][ T6367] ? __pfx_netlink_unicast+0x10/0x10 [ 150.975444][ T6367] netlink_sendmsg+0x8b0/0xda0 [ 150.975491][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.975543][ T6367] ? apparmor_socket_sendmsg+0x15b/0x270 [ 150.975599][ T6367] ____sys_sendmsg+0xa4d/0xbe0 [ 150.975639][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.975686][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.975734][ T6367] ? rcu_is_watching+0x12/0xc0 [ 150.975777][ T6367] ? ___sys_sendmsg+0x19d/0x1e0 [ 150.975820][ T6367] ? kfree+0x1e5/0x6c0 [ 150.975861][ T6367] ___sys_sendmsg+0x190/0x1e0 [ 150.975910][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.975957][ T6367] ? futex_hash+0x311/0x400 [ 150.976034][ T6367] ? __pfx___might_resched+0x10/0x10 [ 150.976099][ T6367] __sys_sendmmsg+0x20c/0x440 [ 150.976138][ T6367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.976183][ T6367] ? __pfx_do_futex+0x10/0x10 [ 150.976242][ T6367] ? xfd_validate_state+0x129/0x190 [ 150.976294][ T6367] __x64_sys_sendmmsg+0x9c/0x100 [ 150.976327][ T6367] ? lockdep_hardirqs_on+0x78/0x100 [ 150.976374][ T6367] do_syscall_64+0x115/0x840 [ 150.976418][ T6367] ? clear_bhb_loop+0x40/0x90 [ 150.976460][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.976495][ T6367] RIP: 0033:0x7f27f8b9ce59 [ 150.976523][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.976556][ T6367] RSP: 002b:00007f27f99c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.976590][ T6367] RAX: ffffffffffffffda RBX: 00007f27f8e15fa0 RCX: 00007f27f8b9ce59 [ 150.976611][ T6367] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 150.976632][ T6367] RBP: 00007f27f8c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 150.976653][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.976673][ T6367] R13: 00007f27f8e16038 R14: 00007f27f8e15fa0 R15: 00007fff799117d8 [ 150.976718][ T6367] [ 152.816035][ T6380] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 152.825617][ T30] audit: type=1800 audit(1843104521.640:7): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.127" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 152.877013][ T6380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 152.918448][ T6380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 153.214273][ T6380] syz.3.127 (6380) used greatest stack depth: 19104 bytes left [ 153.872852][ T6402] bond0: invalid ARP target specified [ 154.045065][ T6405] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 155.963080][ T4948] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 156.246158][ T6452] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 157.855004][ T6485] netlink: 93 bytes leftover after parsing attributes in process `syz.3.154'. [ 160.112265][ T6520] netlink: 330 bytes leftover after parsing attributes in process `syz.2.162'. [ 160.143431][ T6498] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 160.160295][ T6522] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.341605][ T6525] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.789528][ T6535] mmap: syz.3.167 (6535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.990201][ T6576] netlink: 330 bytes leftover after parsing attributes in process `syz.0.175'. [ 162.991691][ T6577] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.827166][ T6569] zswap: compressor 000 not available [ 164.772640][ T6604] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 164.797461][ T6604] netlink: 33 bytes leftover after parsing attributes in process `syz.3.183'. [ 164.937197][ T6609] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.142374][ T30] audit: type=1806 audit(4294967338.110:8): xattr="" res=-22 [ 165.305562][ T30] audit: type=1804 audit(4294967338.270:9): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.187" name="/newroot/49/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 165.384841][ T30] audit: type=1804 audit(4294967338.270:10): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.187" name="/newroot/49/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 165.432172][ T4948] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 166.009829][ T6633] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 167.028935][ T30] audit: type=1806 audit(4294967340.000:11): xattr="" res=-22 [ 167.194496][ T6662] netlink: 330 bytes leftover after parsing attributes in process `syz.1.200'. [ 168.332458][ T6686] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.786349][ T6696] FAULT_INJECTION: forcing a failure. [ 168.786349][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 168.801257][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.0.209 Tainted: G U syzkaller #0 PREEMPT(full) [ 168.801308][ T6696] Tainted: [U]=USER [ 168.801318][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.801336][ T6696] Call Trace: [ 168.801346][ T6696] [ 168.801358][ T6696] dump_stack_lvl+0x100/0x190 [ 168.801404][ T6696] should_fail_ex.cold+0x5/0xa [ 168.801443][ T6696] should_failslab+0xc2/0x120 [ 168.801485][ T6696] kmem_cache_alloc_noprof+0x91/0x6a0 [ 168.801524][ T6696] ? mas_preallocate+0x1105/0x14a0 [ 168.801559][ T6696] mas_preallocate+0x1105/0x14a0 [ 168.801591][ T6696] ? __lock_acquire+0x49f/0x1a40 [ 168.801639][ T6696] ? __pfx_mas_preallocate+0x10/0x10 [ 168.801678][ T6696] ? __asan_memset+0x23/0x50 [ 168.801708][ T6696] ? init_multi_vma_prep+0x33c/0x650 [ 168.801759][ T6696] commit_merge+0x3e3/0xbd0 [ 168.801792][ T6696] ? __pfx_commit_merge+0x10/0x10 [ 168.801818][ T6696] ? debug_check_no_obj_freed+0x31f/0x630 [ 168.801885][ T6696] vma_expand+0xac5/0xea0 [ 168.801919][ T6696] ? __pfx_vma_expand+0x10/0x10 [ 168.801949][ T6696] ? can_vma_merge_right+0x101/0x720 [ 168.801982][ T6696] ? __pfx_can_vma_merge_right+0x10/0x10 [ 168.802026][ T6696] vma_merge_new_range+0x516/0xc00 [ 168.802066][ T6696] ? __pfx_vma_merge_new_range+0x10/0x10 [ 168.802102][ T6696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 168.802153][ T6696] __mmap_region+0xa86/0x2db0 [ 168.802190][ T6696] ? __pfx___mmap_region+0x10/0x10 [ 168.802228][ T6696] ? __lock_acquire+0x49f/0x1a40 [ 168.802288][ T6696] ? do_raw_spin_lock+0x128/0x260 [ 168.802326][ T6696] ? __lock_acquire+0x49f/0x1a40 [ 168.802414][ T6696] ? mark_held_locks+0x40/0x70 [ 168.802465][ T6696] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 168.802566][ T6696] mmap_region+0x35d/0x620 [ 168.802605][ T6696] ? rcu_is_watching+0x12/0xc0 [ 168.802647][ T6696] ? __pfx_mmap_region+0x10/0x10 [ 168.802691][ T6696] ? cap_mmap_addr+0x4b/0x120 [ 168.802739][ T6696] ? bpf_lsm_mmap_addr+0x9/0x30 [ 168.802771][ T6696] ? security_mmap_addr+0x71/0x1e0 [ 168.802809][ T6696] ? __get_unmapped_area+0x255/0x3e0 [ 168.802873][ T6696] do_mmap+0xc63/0x12f0 [ 168.802930][ T6696] ? __pfx_do_mmap+0x10/0x10 [ 168.802980][ T6696] ? __pfx_down_write_killable+0x10/0x10 [ 168.803031][ T6696] ? __pfx_futex_wait+0x10/0x10 [ 168.803083][ T6696] vm_mmap_pgoff+0x29e/0x470 [ 168.803136][ T6696] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 168.803191][ T6696] ? __pfx_do_futex+0x10/0x10 [ 168.803234][ T6696] ksys_mmap_pgoff+0xe4/0x610 [ 168.803281][ T6696] ? __x64_sys_futex+0x358/0x4d0 [ 168.803321][ T6696] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 168.803370][ T6696] ? xfd_validate_state+0x129/0x190 [ 168.803426][ T6696] __x64_sys_mmap+0x125/0x190 [ 168.803476][ T6696] do_syscall_64+0x115/0x840 [ 168.803522][ T6696] ? clear_bhb_loop+0x40/0x90 [ 168.803565][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.803601][ T6696] RIP: 0033:0x7f9f7559ce59 [ 168.803630][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.803662][ T6696] RSP: 002b:00007f9f763ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 168.803695][ T6696] RAX: ffffffffffffffda RBX: 00007f9f75816090 RCX: 00007f9f7559ce59 [ 168.803716][ T6696] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 168.803736][ T6696] RBP: 00007f9f75632e6f R08: 0000000000000007 R09: 0000000000028000 [ 168.803757][ T6696] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 168.803776][ T6696] R13: 00007f9f75816128 R14: 00007f9f75816090 R15: 00007fffda2b4918 [ 168.803819][ T6696] [ 169.317510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 170.724618][ T6716] Invalid ELF header magic: != ELF [ 174.015066][ T6748] FAULT_INJECTION: forcing a failure. [ 174.015066][ T6748] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 174.052325][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.0.222 Tainted: G U syzkaller #0 PREEMPT(full) [ 174.052363][ T6748] Tainted: [U]=USER [ 174.052370][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.052384][ T6748] Call Trace: [ 174.052392][ T6748] [ 174.052400][ T6748] dump_stack_lvl+0x100/0x190 [ 174.052435][ T6748] should_fail_ex.cold+0x5/0xa [ 174.052461][ T6748] ? prepare_alloc_pages+0x16d/0x5f0 [ 174.052499][ T6748] should_fail_alloc_page+0xeb/0x140 [ 174.052538][ T6748] prepare_alloc_pages+0x1f0/0x5f0 [ 174.052578][ T6748] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 174.052608][ T6748] ? mark_held_locks+0x40/0x70 [ 174.052655][ T6748] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 174.052684][ T6748] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 174.052714][ T6748] ? __lock_acquire+0x49f/0x1a40 [ 174.052755][ T6748] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.052783][ T6748] ? __css_rstat_updated+0x1ce/0x5a0 [ 174.052827][ T6748] ? do_raw_spin_lock+0x128/0x260 [ 174.052856][ T6748] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.052883][ T6748] ? find_held_lock+0x2b/0x80 [ 174.052922][ T6748] ? __lock_acquire+0x49f/0x1a40 [ 174.052959][ T6748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.052997][ T6748] ? policy_nodemask+0xed/0x4f0 [ 174.053034][ T6748] alloc_pages_mpol+0x1fb/0x540 [ 174.053070][ T6748] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 174.053106][ T6748] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 174.053135][ T6748] folio_alloc_mpol_noprof+0x36/0x260 [ 174.053176][ T6748] shmem_alloc_folio+0x135/0x160 [ 174.053216][ T6748] shmem_alloc_and_add_folio+0x371/0xd40 [ 174.053249][ T6748] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 174.053277][ T6748] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 174.053310][ T6748] shmem_get_folio_gfp+0x6ad/0x1910 [ 174.053343][ T6748] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 174.053371][ T6748] ? inode_maybe_inc_iversion+0x169/0x220 [ 174.053413][ T6748] shmem_fault+0x1f9/0xa20 [ 174.053437][ T6748] ? __lock_acquire+0x49f/0x1a40 [ 174.053475][ T6748] ? __pfx_shmem_fault+0x10/0x10 [ 174.053499][ T6748] ? rcu_is_watching+0x12/0xc0 [ 174.053529][ T6748] ? __mark_inode_dirty+0x55c/0x16e0 [ 174.053575][ T6748] ? __pfx_filemap_map_pages+0x10/0x10 [ 174.053596][ T6748] __do_fault+0x10b/0x440 [ 174.053623][ T6748] ? find_held_lock+0x2b/0x80 [ 174.053662][ T6748] do_fault+0x2db/0x1750 [ 174.053700][ T6748] __handle_mm_fault+0x187d/0x2a00 [ 174.053727][ T6748] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.053758][ T6748] ? __pfx___handle_mm_fault+0x10/0x10 [ 174.053783][ T6748] ? pte_offset_map_lock+0x174/0x320 [ 174.053816][ T6748] ? find_held_lock+0x2b/0x80 [ 174.053854][ T6748] ? follow_page_pte+0x4d0/0x13f0 [ 174.053892][ T6748] handle_mm_fault+0x37b/0xa30 [ 174.053921][ T6748] __get_user_pages+0x1178/0x32a0 [ 174.053962][ T6748] ? down_read_killable+0x35e/0x520 [ 174.054001][ T6748] ? __pfx___get_user_pages+0x10/0x10 [ 174.054034][ T6748] ? gup_signal_pending+0x6e/0x1a0 [ 174.054065][ T6748] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 174.054105][ T6748] faultin_page_range+0x1f1/0x9e0 [ 174.054147][ T6748] madvise_do_behavior+0x354/0x510 [ 174.054187][ T6748] ? __pfx_madvise_do_behavior+0x10/0x10 [ 174.054226][ T6748] ? __pfx_futex_wait+0x10/0x10 [ 174.054271][ T6748] do_madvise+0x238/0x290 [ 174.054307][ T6748] ? __pfx_do_madvise+0x10/0x10 [ 174.054343][ T6748] ? do_futex+0x190/0x440 [ 174.054396][ T6748] __x64_sys_madvise+0xa9/0x110 [ 174.054432][ T6748] ? lockdep_hardirqs_on+0x78/0x100 [ 174.054464][ T6748] do_syscall_64+0x115/0x840 [ 174.054495][ T6748] ? clear_bhb_loop+0x40/0x90 [ 174.054524][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.054548][ T6748] RIP: 0033:0x7f9f7559ce59 [ 174.054567][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.054608][ T6748] RSP: 002b:00007f9f763cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 174.054635][ T6748] RAX: ffffffffffffffda RBX: 00007f9f75815fa0 RCX: 00007f9f7559ce59 [ 174.054650][ T6748] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 174.054664][ T6748] RBP: 00007f9f75632e6f R08: 0000000000000000 R09: 0000000000000000 [ 174.054678][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.054691][ T6748] R13: 00007f9f75816038 R14: 00007f9f75815fa0 R15: 00007fffda2b4918 [ 174.054721][ T6748] [ 174.590398][ T30] audit: type=1800 audit(4294967347.560:12): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.220" name="version" dev="configfs" ino=13058 res=0 errno=0 [ 176.984023][ T30] audit: type=1806 audit(4294967349.950:13): xattr="" res=-22 [ 177.503949][ T6794] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 179.041264][ T6817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.075540][ T6817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.122907][ T6817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.138931][ T6817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.327337][ T30] audit: type=1806 audit(4294967353.290:14): xattr="" res=-22 [ 180.442413][ T6854] bond0: invalid ARP target specified [ 180.507417][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.796654][ T6858] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 180.994376][ T6857] HfR: entered promiscuous mode [ 181.150560][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.158216][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.165372][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.429960][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 181.533544][ T6875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 181.544266][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 181.755983][ T6864] HfR: left promiscuous mode [ 183.398082][ T6900] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 183.480840][ T30] audit: type=1806 audit(4294967356.450:15): xattr="" res=-22 [ 183.751302][ T6907] vhci_hcd vhci_hcd.0: invalid port number 222 [ 183.781111][ T6907] vhci_hcd vhci_hcd.0: default hub control req: a009 v2e1c i00de l0 [ 184.136140][ T6914] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 184.554560][ T6919] netlink: 330 bytes leftover after parsing attributes in process `syz.0.261'. [ 184.666957][ T6916] smpboot: CPU 1 is now offline [ 185.546469][ T6932] bond0: invalid ARP target specified [ 185.918206][ T6934] bond0: invalid ARP target specified [ 186.165087][ T30] audit: type=1806 audit(4294967359.130:16): xattr="" res=-22 [ 186.299199][ T6938] bond0: invalid ARP target specified [ 186.472462][ T4948] Bluetooth: hci3: unexpected subevent 0x12 length: 123 > 5 [ 186.770941][ T6953] netlink: 330 bytes leftover after parsing attributes in process `syz.1.270'. [ 188.181110][ T6968] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 190.041737][ T6994] ubi0: attaching mtd0 [ 190.159624][ T6994] ubi0: scanning is finished [ 190.189588][ T6994] ubi0: empty MTD device detected [ 191.601193][ T6994] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.815489][ T6994] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.838665][ T7030] ======================================================= [ 191.838665][ T7030] WARNING: The mand mount option has been deprecated and [ 191.838665][ T7030] and is ignored by this kernel. Remove the mand [ 191.838665][ T7030] option from the mount to silence this warning. [ 191.838665][ T7030] ======================================================= [ 191.997256][ T6994] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 192.133269][ T6994] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 192.304422][ T6994] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 192.494092][ T6994] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 192.683291][ T6994] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1756438828 [ 192.888627][ T6994] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 193.101692][ T7027] ubi0: background thread "ubi_bgt0d" started, PID 7027 [ 193.154122][ T6999] ubi0: detaching mtd0 [ 193.611414][ T6999] ubi0: mtd0 is detached [ 194.434521][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.445901][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.789924][ T7080] FAULT_INJECTION: forcing a failure. [ 195.789924][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 195.862481][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.0.294 Tainted: G U syzkaller #0 PREEMPT(full) [ 195.862520][ T7080] Tainted: [U]=USER [ 195.862528][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.862542][ T7080] Call Trace: [ 195.862550][ T7080] [ 195.862559][ T7080] dump_stack_lvl+0x100/0x190 [ 195.862594][ T7080] should_fail_ex.cold+0x5/0xa [ 195.862621][ T7080] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 195.862657][ T7080] should_failslab+0xc2/0x120 [ 195.862695][ T7080] kmem_cache_alloc_noprof+0x91/0x6a0 [ 195.862736][ T7080] ? skb_clone+0x190/0x400 [ 195.862764][ T7080] skb_clone+0x190/0x400 [ 195.862798][ T7080] netlink_deliver_tap+0xaed/0xcc0 [ 195.862835][ T7080] netlink_unicast+0x62b/0x850 [ 195.862873][ T7080] ? __pfx_netlink_unicast+0x10/0x10 [ 195.862922][ T7080] netlink_sendmsg+0x8b0/0xda0 [ 195.862969][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.863005][ T7080] ? apparmor_socket_sendmsg+0x15b/0x270 [ 195.863044][ T7080] ____sys_sendmsg+0xa4d/0xbe0 [ 195.863073][ T7080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.863107][ T7080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.863150][ T7080] ___sys_sendmsg+0x190/0x1e0 [ 195.863184][ T7080] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.863214][ T7080] ? __lock_acquire+0x49f/0x1a40 [ 195.863301][ T7080] __sys_sendmsg+0x160/0x210 [ 195.863325][ T7080] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.863373][ T7080] do_syscall_64+0x115/0x840 [ 195.863414][ T7080] ? clear_bhb_loop+0x40/0x90 [ 195.863450][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.863476][ T7080] RIP: 0033:0x7f9f7559ce59 [ 195.863505][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.863527][ T7080] RSP: 002b:00007f9f763cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.863559][ T7080] RAX: ffffffffffffffda RBX: 00007f9f75815fa0 RCX: 00007f9f7559ce59 [ 195.863574][ T7080] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000002 [ 195.863589][ T7080] RBP: 00007f9f75632e6f R08: 0000000000000000 R09: 0000000000000000 [ 195.863603][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.863617][ T7080] R13: 00007f9f75816038 R14: 00007f9f75815fa0 R15: 00007fffda2b4918 [ 195.863648][ T7080] [ 196.461073][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.503060][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.589798][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.680323][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.773813][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.809896][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.856987][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.902315][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 196.977876][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 197.026545][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 197.079183][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 197.121684][ T7086] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 198.074462][ T7107] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.176262][ T7128] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 200.815058][ T7115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.876701][ T7115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.907498][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.927014][ T7115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.989118][ T7115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.310959][ T7137] netlink: 330 bytes leftover after parsing attributes in process `syz.1.306'. [ 202.859532][ T7157] netlink: 354 bytes leftover after parsing attributes in process `syz.0.313'. [ 202.907310][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.988402][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.068095][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.794897][ T7171] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 204.261242][ T7175] bond0: invalid ARP target specified [ 204.691754][ T7177] NFSD: Failed to start, no listeners configured. [ 204.801109][ T7182] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 204.874533][ T7182] netlink: 330 bytes leftover after parsing attributes in process `syz.1.321'. [ 206.346746][ T7209] bond0: invalid ARP target specified [ 206.671305][ T7210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.735021][ T7210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.770413][ T7210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.858254][ T7210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.218716][ T7215] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 207.605258][ T7222] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 207.685877][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 208.567714][ T7235] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 208.667492][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.747846][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.827643][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.863967][ T7235] File: /dev/nullb0 PID: 7235 Comm: syz.2.333 [ 208.908919][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.103066][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 209.717182][ T7254] FAULT_INJECTION: forcing a failure. [ 209.717182][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 209.821514][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.3.340 Tainted: G U syzkaller #0 PREEMPT(full) [ 209.821551][ T7254] Tainted: [U]=USER [ 209.821558][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.821571][ T7254] Call Trace: [ 209.821579][ T7254] [ 209.821588][ T7254] dump_stack_lvl+0x100/0x190 [ 209.821621][ T7254] should_fail_ex.cold+0x5/0xa [ 209.821652][ T7254] should_failslab+0xc2/0x120 [ 209.821685][ T7254] __kmalloc_noprof+0xfc/0x820 [ 209.821712][ T7254] ? rcu_is_watching+0x12/0xc0 [ 209.821741][ T7254] ? tomoyo_realpath_from_path+0xb6/0x690 [ 209.821775][ T7254] tomoyo_realpath_from_path+0xb6/0x690 [ 209.821810][ T7254] tomoyo_path_number_perm+0x23c/0x580 [ 209.821848][ T7254] ? tomoyo_path_number_perm+0x22e/0x580 [ 209.821888][ T7254] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.821960][ T7254] ? find_held_lock+0x2b/0x80 [ 209.821990][ T7254] ? __fget_files+0x215/0x3d0 [ 209.822010][ T7254] ? hook_file_ioctl_common+0x140/0x440 [ 209.822032][ T7254] ? __fget_files+0x215/0x3d0 [ 209.822057][ T7254] ? __fget_files+0x21f/0x3d0 [ 209.822083][ T7254] security_file_ioctl+0xd3/0x230 [ 209.822122][ T7254] __x64_sys_ioctl+0xb7/0x210 [ 209.822158][ T7254] do_syscall_64+0x115/0x840 [ 209.822188][ T7254] ? clear_bhb_loop+0x40/0x90 [ 209.822216][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.822240][ T7254] RIP: 0033:0x7f1a1959ce59 [ 209.822258][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.822280][ T7254] RSP: 002b:00007f1a1a45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.822301][ T7254] RAX: ffffffffffffffda RBX: 00007f1a19815fa0 RCX: 00007f1a1959ce59 [ 209.822316][ T7254] RDX: 0000200000000500 RSI: 0000000080045113 RDI: 0000000000000003 [ 209.822330][ T7254] RBP: 00007f1a1a45d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.822344][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.822358][ T7254] R13: 00007f1a19816038 R14: 00007f1a19815fa0 R15: 00007fffcc006598 [ 209.822387][ T7254] [ 209.822396][ T7254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.522379][ T7275] netlink: 330 bytes leftover after parsing attributes in process `syz.2.347'. [ 212.997947][ T30] audit: type=1806 audit(4294967385.960:17): xattr="" res=-22 [ 214.120253][ T7314] netlink: 330 bytes leftover after parsing attributes in process `syz.3.357'. [ 215.053985][ T7321] bond0: invalid ARP target specified [ 215.339014][ T7324] bond0: invalid ARP target specified [ 217.993354][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 218.051502][ T7392] ubi0: attaching mtd0 [ 218.090535][ T7392] ubi0: scanning is finished [ 218.410467][ T7392] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 218.455158][ T7392] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 218.502660][ T7392] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 218.546847][ T7392] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 218.601200][ T7392] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 218.666885][ T7392] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 218.769329][ T7392] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1756438828 [ 218.890461][ T7392] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 218.944833][ T7395] ubi0: detaching mtd0 [ 218.949245][ T7404] ubi0: background thread "ubi_bgt0d" started, PID 7404 [ 219.010972][ T7395] ubi0: mtd0 is detached [ 220.419306][ T30] audit: type=1806 audit(4294967393.390:18): xattr="" res=-22 [ 223.193363][ T30] audit: type=1806 audit(4294967396.160:19): xattr="" res=-22 [ 223.468308][ T7456] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 223.563793][ T4948] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 223.571589][ T4948] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 223.719697][ T7468] zero sized request [ 223.961776][ T30] audit: type=1800 audit(4294967396.930:20): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.390" name="lu_gp_id" dev="configfs" ino=17252 res=0 errno=0 [ 225.083370][ T7468] kexec: Could not allocate control_code_buffer [ 227.131235][ T7497] FAULT_INJECTION: forcing a failure. [ 227.131235][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 227.191469][ T7497] CPU: 0 UID: 0 PID: 7497 Comm: syz.3.397 Tainted: G U syzkaller #0 PREEMPT(full) [ 227.191507][ T7497] Tainted: [U]=USER [ 227.191514][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.191529][ T7497] Call Trace: [ 227.191537][ T7497] [ 227.191545][ T7497] dump_stack_lvl+0x100/0x190 [ 227.191581][ T7497] should_fail_ex.cold+0x5/0xa [ 227.191612][ T7497] should_failslab+0xc2/0x120 [ 227.191646][ T7497] kmem_cache_alloc_noprof+0x91/0x6a0 [ 227.191676][ T7497] ? trace_kmem_cache_alloc+0xdd/0x100 [ 227.191710][ T7497] ? security_file_alloc+0x34/0x2c0 [ 227.191741][ T7497] security_file_alloc+0x34/0x2c0 [ 227.191767][ T7497] init_file+0x95/0x480 [ 227.191797][ T7497] alloc_empty_file+0x79/0x1c0 [ 227.191828][ T7497] alloc_file_pseudo+0x183/0x290 [ 227.191860][ T7497] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 227.191894][ T7497] ? _raw_spin_unlock+0x28/0x50 [ 227.191920][ T7497] ? alloc_fd+0x471/0x7a0 [ 227.191945][ T7497] __anon_inode_getfile+0xe8/0x280 [ 227.191980][ T7497] __anon_inode_getfd+0x5c/0xe0 [ 227.192015][ T7497] __do_sys_landlock_create_ruleset+0x362/0x580 [ 227.192054][ T7497] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 227.192109][ T7497] do_syscall_64+0x115/0x840 [ 227.192141][ T7497] ? clear_bhb_loop+0x40/0x90 [ 227.192170][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.192194][ T7497] RIP: 0033:0x7f1a1959ce59 [ 227.192214][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.192237][ T7497] RSP: 002b:00007f1a1a45d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 227.192259][ T7497] RAX: ffffffffffffffda RBX: 00007f1a19815fa0 RCX: 00007f1a1959ce59 [ 227.192275][ T7497] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000200000000000 [ 227.192289][ T7497] RBP: 00007f1a19632e6f R08: 0000000000000000 R09: 0000000000000000 [ 227.192302][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.192316][ T7497] R13: 00007f1a19816038 R14: 00007f1a19815fa0 R15: 00007fffcc006598 [ 227.192345][ T7497] [ 228.244464][ T7507] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 228.285332][ T7507] FAULT_INJECTION: forcing a failure. [ 228.285332][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 228.312266][ T7506] tipc: Started in network mode [ 228.319540][ T7506] tipc: Node identity ee00, cluster identity 4711 [ 228.337008][ T7506] tipc: Node number set to 60928 [ 228.353181][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.2.401 Tainted: G U syzkaller #0 PREEMPT(full) [ 228.353225][ T7507] Tainted: [U]=USER [ 228.353232][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.353246][ T7507] Call Trace: [ 228.353254][ T7507] [ 228.353263][ T7507] dump_stack_lvl+0x100/0x190 [ 228.353297][ T7507] should_fail_ex.cold+0x5/0xa [ 228.353329][ T7507] should_failslab+0xc2/0x120 [ 228.353364][ T7507] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 228.353399][ T7507] ? key_alloc+0xc6d/0x1310 [ 228.353428][ T7507] kmemdup_noprof+0x29/0x60 [ 228.353457][ T7507] key_alloc+0xc6d/0x1310 [ 228.353492][ T7507] ? __pfx_key_alloc+0x10/0x10 [ 228.353515][ T7507] ? __asan_memcpy+0x3c/0x60 [ 228.353549][ T7507] keyring_alloc+0x44/0xc0 [ 228.353579][ T7507] keyctl_get_persistent+0x779/0x8b0 [ 228.353612][ T7507] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 228.353645][ T7507] ? __x64_sys_futex+0x34f/0x4d0 [ 228.353671][ T7507] ? __x64_sys_futex+0x358/0x4d0 [ 228.353701][ T7507] ? xfd_validate_state+0x129/0x190 [ 228.353738][ T7507] __do_sys_keyctl+0x3b2/0x5a0 [ 228.353776][ T7507] do_syscall_64+0x115/0x840 [ 228.353808][ T7507] ? clear_bhb_loop+0x40/0x90 [ 228.353837][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.353862][ T7507] RIP: 0033:0x7f27f8b9ce59 [ 228.353882][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.353905][ T7507] RSP: 002b:00007f27f99c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 228.353927][ T7507] RAX: ffffffffffffffda RBX: 00007f27f8e15fa0 RCX: 00007f27f8b9ce59 [ 228.353943][ T7507] RDX: 00000000fffffffe RSI: ffffffffffffffff RDI: 2000000000000016 [ 228.353958][ T7507] RBP: 00007f27f8c32e6f R08: 0000000000001000 R09: 0000000000000000 [ 228.353972][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.353986][ T7507] R13: 00007f27f8e16038 R14: 00007f27f8e15fa0 R15: 00007fff799117d8 [ 228.354016][ T7507] [ 228.739522][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 228.794731][ T7518] Format for deleting device is "id" (uint). [ 228.935775][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.404'. [ 229.457715][ T7524] bond0: invalid ARP target specified [ 230.241045][ T30] audit: type=1806 audit(4294967403.210:21): xattr="" res=-22 [ 230.359298][ T7541] netlink: 'syz.3.408': attribute type 11 has an invalid length. [ 230.483491][ T7541] netlink: 'syz.3.408': attribute type 11 has an invalid length. [ 230.547915][ T7541] netlink: 'syz.3.408': attribute type 11 has an invalid length. [ 232.707350][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 233.170785][ T7598] bond0: invalid ARP target specified [ 234.478390][ T7611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 234.506914][ T7611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.531019][ T7611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.558123][ T7611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.173665][ T7624] netlink: 318 bytes leftover after parsing attributes in process `syz.3.428'. [ 235.369641][ T7632] bridge0: port 3(veth1) entered blocking state [ 235.418556][ T7632] bridge0: port 3(veth1) entered disabled state [ 235.454236][ T7632] veth1: entered allmulticast mode [ 235.506059][ T7632] veth1: entered promiscuous mode [ 235.554169][ T7632] bridge0: port 3(veth1) entered blocking state [ 235.560841][ T7632] bridge0: port 3(veth1) entered forwarding state [ 236.507751][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.514004][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.587559][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.594412][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.489709][ T30] audit: type=1806 audit(4294967410.460:22): xattr="" res=-22 [ 237.530147][ T7665] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 237.541355][ T30] audit: type=1800 audit(4294967410.490:23): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="dbroot" dev="configfs" ino=18445 res=0 errno=0 [ 237.623407][ T7657] FAULT_INJECTION: forcing a failure. [ 237.623407][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 237.766742][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.1.432 Tainted: G U syzkaller #0 PREEMPT(full) [ 237.766780][ T7657] Tainted: [U]=USER [ 237.766788][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.766814][ T7657] Call Trace: [ 237.766829][ T7657] [ 237.766838][ T7657] dump_stack_lvl+0x100/0x190 [ 237.766873][ T7657] should_fail_ex.cold+0x5/0xa [ 237.766904][ T7657] should_failslab+0xc2/0x120 [ 237.766939][ T7657] __kmalloc_cache_noprof+0x91/0x6c0 [ 237.766963][ T7657] ? lockdep_init_map_type+0x5c/0x250 [ 237.766987][ T7657] ? fib6_net_init+0x3f9/0xb20 [ 237.767022][ T7657] fib6_net_init+0x3f9/0xb20 [ 237.767053][ T7657] ? __pfx_fib6_net_init+0x10/0x10 [ 237.767081][ T7657] ops_init+0x1e2/0x5f0 [ 237.767108][ T7657] setup_net+0x118/0x3a0 [ 237.767133][ T7657] ? __pfx_setup_net+0x10/0x10 [ 237.767158][ T7657] ? mutex_init_lockdep+0xf1/0x120 [ 237.767196][ T7657] copy_net_ns+0x46f/0x7c0 [ 237.767226][ T7657] create_new_namespaces+0x3ea/0xac0 [ 237.767260][ T7657] unshare_nsproxy_namespaces+0xf2/0x220 [ 237.767289][ T7657] ksys_unshare+0x438/0xab0 [ 237.767323][ T7657] ? __pfx_ksys_unshare+0x10/0x10 [ 237.767365][ T7657] __x64_sys_unshare+0x31/0x40 [ 237.767397][ T7657] do_syscall_64+0x115/0x840 [ 237.767429][ T7657] ? clear_bhb_loop+0x40/0x90 [ 237.767458][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.767483][ T7657] RIP: 0033:0x7fde2d39ce59 [ 237.767502][ T7657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.767525][ T7657] RSP: 002b:00007fde2e1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 237.767547][ T7657] RAX: ffffffffffffffda RBX: 00007fde2d616180 RCX: 00007fde2d39ce59 [ 237.767562][ T7657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 237.767576][ T7657] RBP: 00007fde2d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 237.767590][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.767604][ T7657] R13: 00007fde2d616218 R14: 00007fde2d616180 R15: 00007fff22e3f058 [ 237.767634][ T7657] [ 238.298339][ T7686] netlink: zone id is out of range [ 238.322271][ T7684] bond0: invalid ARP target specified [ 240.375928][ T7723] netlink: 330 bytes leftover after parsing attributes in process `syz.2.451'. [ 240.419108][ T7725] netlink: zone id is out of range [ 241.275870][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 242.766285][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 244.199071][ T7784] random: crng reseeded on system resumption [ 244.777482][ T7787] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 244.844322][ T7787] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 247.522597][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 248.518413][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 249.518414][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 249.624945][ T7845] netlink: 330 bytes leftover after parsing attributes in process `syz.2.479'. [ 249.812742][ T7847] netlink: zone id is out of range [ 250.519760][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 251.518407][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 252.518958][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 253.090151][ T7898] netlink: 330 bytes leftover after parsing attributes in process `syz.1.492'. [ 253.383184][ T7904] netlink: zone id is out of range [ 253.518394][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 254.001581][ T7915] bond0: invalid ARP target specified [ 254.518431][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 255.519785][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 255.871541][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882955][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.934941][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.953787][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.962088][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.976507][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.987059][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.519184][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 257.420244][ T7952] netlink: zone id is out of range [ 257.519207][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 257.747701][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 258.030084][ T50] Bluetooth: hci4: command tx timeout [ 258.518945][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 259.521374][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 260.107530][ T50] Bluetooth: hci4: command tx timeout [ 260.518391][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 261.518408][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 261.723999][ T7999] netlink: 330 bytes leftover after parsing attributes in process `syz.1.513'. [ 261.857142][ T8002] netlink: 'syz.0.514': attribute type 11 has an invalid length. [ 262.188496][ T50] Bluetooth: hci4: command tx timeout [ 262.518627][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 262.674970][ T8022] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 262.949997][ T8019] smpboot: CPU 1 is now offline [ 262.994230][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.049132][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.096075][ T7926] bridge_slave_0: entered allmulticast mode [ 263.148221][ T7926] bridge_slave_0: entered promiscuous mode [ 263.308136][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.354671][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.402491][ T7926] bridge_slave_1: entered allmulticast mode [ 263.446517][ T7926] bridge_slave_1: entered promiscuous mode [ 263.518386][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 263.635677][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.691829][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.970511][ T7926] team0: Port device team_slave_0 added [ 264.036911][ T7926] team0: Port device team_slave_1 added [ 264.257145][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.268503][ T50] Bluetooth: hci4: command tx timeout [ 264.317623][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.347856][ T8043] netlink: 342 bytes leftover after parsing attributes in process `syz.1.521'. [ 264.503763][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.519302][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 264.605167][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.660787][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.858683][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.191663][ T7926] hsr_slave_0: entered promiscuous mode [ 265.230587][ T7926] hsr_slave_1: entered promiscuous mode [ 265.276134][ T7926] debugfs: 'hsr0' already exists in 'hsr' [ 265.308390][ T7926] Cannot create hsr debugfs directory [ 265.432130][ T8067] vhci_hcd vhci_hcd.2: default hub control req: 0400 v0000 i0008 l0 [ 265.518414][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 266.518545][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 267.918087][ T7926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.986550][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.110337][ T7926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.192559][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.238329][ T7926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.303802][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.462835][ T7926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.519618][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 268.529707][ T7926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.519983][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.527384][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 269.638962][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.714425][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.721651][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.885917][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.894295][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.048913][ T30] audit: type=1800 audit(4294967443.022:24): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.539" name="dbroot" dev="configfs" ino=21317 res=0 errno=0 [ 270.077615][ T8122] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 270.151289][ T8122] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 270.518586][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 271.556417][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 272.538224][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 272.626978][ T8146] netlink: zone id is out of range [ 272.845140][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.519120][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 274.436033][ T8183] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 274.518665][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 275.520109][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 275.899596][ T7926] veth0_vlan: entered promiscuous mode [ 276.008874][ T7926] veth1_vlan: entered promiscuous mode [ 276.518540][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 277.136536][ T8232] netlink: zone id is out of range [ 277.359565][ T7926] veth0_macvtap: entered promiscuous mode [ 277.519670][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 277.618655][ T8237] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 277.677056][ T7926] veth1_macvtap: entered promiscuous mode [ 278.518394][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 279.128433][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.381906][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.520030][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 279.593370][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.678071][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.742445][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.955270][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.054719][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 280.513261][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.533252][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 280.589003][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.769757][ T7388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.823776][ T7388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.521073][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 282.519882][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 283.524581][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 283.721127][ T8331] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 283.895037][ T8334] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 284.518996][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 285.518939][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 286.530447][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 286.557995][ T8369] sd 0:0:1:0: PR command failed: 1026 [ 286.558057][ T8369] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 286.558100][ T8369] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 287.518416][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 287.533993][ T8383] aoe: can't write to that file. [ 288.518411][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 289.101005][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 289.518746][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 290.518708][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 291.518389][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 292.519616][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 293.518400][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 294.490146][ T8485] FAULT_INJECTION: forcing a failure. [ 294.490146][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 294.490207][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.4.602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 294.490243][ T8485] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 294.490252][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.490266][ T8485] Call Trace: [ 294.490274][ T8485] [ 294.490283][ T8485] dump_stack_lvl+0x100/0x190 [ 294.490317][ T8485] should_fail_ex.cold+0x5/0xa [ 294.490348][ T8485] should_failslab+0xc2/0x120 [ 294.490382][ T8485] __kmalloc_noprof+0xfc/0x820 [ 294.490413][ T8485] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 294.490459][ T8485] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 294.490504][ T8485] genl_family_rcv_msg_doit+0xc7/0x300 [ 294.490544][ T8485] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 294.490581][ T8485] ? genl_get_cmd+0x3e7/0x760 [ 294.490623][ T8485] ? __dev_queue_xmit+0xa11/0x4940 [ 294.490656][ T8485] ? __radix_tree_lookup+0x217/0x2b0 [ 294.490692][ T8485] genl_rcv_msg+0x560/0x800 [ 294.490732][ T8485] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.490769][ T8485] ? __pfx_ctrl_getfamily+0x10/0x10 [ 294.490817][ T8485] netlink_rcv_skb+0x159/0x420 [ 294.490857][ T8485] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.490904][ T8485] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.490948][ T8485] ? netlink_deliver_tap+0x1ae/0xcc0 [ 294.490982][ T8485] genl_rcv+0x28/0x40 [ 294.491014][ T8485] netlink_unicast+0x585/0x850 [ 294.491050][ T8485] ? __pfx_netlink_unicast+0x10/0x10 [ 294.491091][ T8485] netlink_sendmsg+0x8b0/0xda0 [ 294.491128][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.491164][ T8485] ? apparmor_socket_sendmsg+0x15b/0x270 [ 294.491204][ T8485] __sys_sendto+0x48b/0x4e0 [ 294.491238][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.491271][ T8485] ? __pfx___sys_sendto+0x10/0x10 [ 294.491315][ T8485] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 294.491367][ T8485] __x64_sys_sendto+0xe0/0x1c0 [ 294.491402][ T8485] ? do_syscall_64+0x90/0x840 [ 294.491435][ T8485] ? lockdep_hardirqs_on+0x78/0x100 [ 294.491467][ T8485] do_syscall_64+0x115/0x840 [ 294.491500][ T8485] ? clear_bhb_loop+0x40/0x90 [ 294.491530][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.491554][ T8485] RIP: 0033:0x7f5358f5d68e [ 294.491575][ T8485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.491598][ T8485] RSP: 002b:00007f5359f02e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.491621][ T8485] RAX: ffffffffffffffda RBX: 00007f5359f046c0 RCX: 00007f5358f5d68e [ 294.491636][ T8485] RDX: 000000000000001c RSI: 00007f5359f03000 RDI: 0000000000000008 [ 294.491650][ T8485] RBP: 0000000000000000 R08: 00007f5359f02f04 R09: 000000000000000c [ 294.491665][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 294.491679][ T8485] R13: 00007f5359f02f58 R14: 00007f5359f03000 R15: 0000000000000000 [ 294.491709][ T8485] [ 294.518401][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 295.518761][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 296.519530][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 297.180524][ T8510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.183455][ T8510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.183671][ T8510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.183849][ T8510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.185566][ T8510] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.185701][ T8510] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.186449][ T8513] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 297.219299][ T8510] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.518546][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 298.131824][ T8524] FAULT_INJECTION: forcing a failure. [ 298.131824][ T8524] name fail_futex, interval 1, probability 0, space 0, times 0 [ 298.131867][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.4.611 Tainted: G U L syzkaller #0 PREEMPT(full) [ 298.131911][ T8524] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 298.131920][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.131934][ T8524] Call Trace: [ 298.131942][ T8524] [ 298.131950][ T8524] dump_stack_lvl+0x100/0x190 [ 298.131984][ T8524] should_fail_ex.cold+0x5/0xa [ 298.132015][ T8524] get_futex_key+0x1d2/0x14f0 [ 298.132042][ T8524] ? __pfx_get_futex_key+0x10/0x10 [ 298.132068][ T8524] ? get_futex_key+0x4e8/0x14f0 [ 298.132096][ T8524] futex_wait_setup+0x91/0x540 [ 298.132137][ T8524] futex_wait_requeue_pi+0x258/0x8a0 [ 298.132174][ T8524] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 298.132207][ T8524] ? __futex_wait+0x256/0x300 [ 298.132241][ T8524] ? __pfx___futex_wait+0x10/0x10 [ 298.132276][ T8524] ? futex_hash+0x311/0x400 [ 298.132321][ T8524] ? __pfx_futex_wake_mark+0x10/0x10 [ 298.132362][ T8524] ? __fget_files+0x21f/0x3d0 [ 298.132389][ T8524] do_futex+0x414/0x440 [ 298.132417][ T8524] ? __pfx_do_futex+0x10/0x10 [ 298.132445][ T8524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 298.132484][ T8524] __x64_sys_futex+0x34f/0x4d0 [ 298.132515][ T8524] ? __pfx___x64_sys_futex+0x10/0x10 [ 298.132554][ T8524] do_syscall_64+0x115/0x840 [ 298.132585][ T8524] ? clear_bhb_loop+0x40/0x90 [ 298.132626][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.132651][ T8524] RIP: 0033:0x7f5358f9ce59 [ 298.132670][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.132694][ T8524] RSP: 002b:00007f5359f25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 298.132715][ T8524] RAX: ffffffffffffffda RBX: 00007f5359215fa0 RCX: 00007f5358f9ce59 [ 298.132731][ T8524] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 298.132745][ T8524] RBP: 00007f5359032e6f R08: 0000000000000000 R09: 00000000fffffffa [ 298.132759][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.132773][ T8524] R13: 00007f5359216038 R14: 00007f5359215fa0 R15: 00007ffdf1711b28 [ 298.132802][ T8524] [ 298.169965][ T8524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 298.173487][ T8524] netlink: 330 bytes leftover after parsing attributes in process `syz.4.611'. [ 298.518530][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 298.559277][ T8529] FAULT_INJECTION: forcing a failure. [ 298.559277][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 298.577584][ T8529] CPU: 0 UID: 0 PID: 8529 Comm: syz.4.612 Tainted: G U L syzkaller #0 PREEMPT(full) [ 298.577625][ T8529] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 298.577634][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.577649][ T8529] Call Trace: [ 298.577657][ T8529] [ 298.577665][ T8529] dump_stack_lvl+0x100/0x190 [ 298.577700][ T8529] should_fail_ex.cold+0x5/0xa [ 298.577731][ T8529] should_failslab+0xc2/0x120 [ 298.577765][ T8529] kmem_cache_alloc_noprof+0x91/0x6a0 [ 298.577797][ T8529] ? __kernfs_new_node+0xd2/0xa10 [ 298.577844][ T8529] __kernfs_new_node+0xd2/0xa10 [ 298.577888][ T8529] ? __pfx___kernfs_new_node+0x10/0x10 [ 298.577935][ T8529] ? find_held_lock+0x2b/0x80 [ 298.577965][ T8529] ? kernfs_root+0xee/0x2a0 [ 298.577999][ T8529] ? kernfs_root+0xee/0x2a0 [ 298.578042][ T8529] kernfs_new_node+0x117/0x150 [ 298.578070][ T8529] __kernfs_create_file+0x53/0x350 [ 298.578104][ T8529] sysfs_add_file_mode_ns+0x207/0x3c0 [ 298.578146][ T8529] internal_create_group+0x593/0xfb0 [ 298.578191][ T8529] ? __pfx_internal_create_group+0x10/0x10 [ 298.578234][ T8529] ? kernfs_create_link+0x1bd/0x240 [ 298.578268][ T8529] internal_create_groups+0x9d/0x150 [ 298.578309][ T8529] device_add+0x7c8/0x1970 [ 298.578343][ T8529] ? __pfx_device_add+0x10/0x10 [ 298.578374][ T8529] ? lockdep_init_map_type+0x5c/0x250 [ 298.578398][ T8529] ? __init_waitqueue_head+0xca/0x150 [ 298.578430][ T8529] netdev_register_kobject+0x1a9/0x3d0 [ 298.578467][ T8529] register_netdevice+0x15b6/0x25a0 [ 298.578499][ T8529] ? __pfx_register_netdevice+0x10/0x10 [ 298.578523][ T8529] ? net_generic+0xea/0x2a0 [ 298.578571][ T8529] ppp_dev_configure+0x986/0xcb0 [ 298.578613][ T8529] ppp_ioctl+0x9d7/0x27c0 [ 298.578652][ T8529] ? find_held_lock+0x2b/0x80 [ 298.578682][ T8529] ? __pfx_ppp_ioctl+0x10/0x10 [ 298.578724][ T8529] ? __fget_files+0x21f/0x3d0 [ 298.578751][ T8529] ? __pfx_ppp_ioctl+0x10/0x10 [ 298.578788][ T8529] __x64_sys_ioctl+0x18e/0x210 [ 298.578825][ T8529] do_syscall_64+0x115/0x840 [ 298.578858][ T8529] ? clear_bhb_loop+0x40/0x90 [ 298.578888][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.578913][ T8529] RIP: 0033:0x7f5358f9ce59 [ 298.578933][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.578955][ T8529] RSP: 002b:00007f5359f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.578978][ T8529] RAX: ffffffffffffffda RBX: 00007f5359215fa0 RCX: 00007f5358f9ce59 [ 298.578993][ T8529] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 298.579007][ T8529] RBP: 00007f5359032e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.579021][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.579035][ T8529] R13: 00007f5359216038 R14: 00007f5359215fa0 R15: 00007ffdf1711b28 [ 298.579065][ T8529] [ 299.140183][ T50] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 299.227531][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.229594][ T4948] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.229626][ T4948] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.229652][ T4948] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.229678][ T4948] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.356170][ T8538] netlink: 342 bytes leftover after parsing attributes in process `syz.0.614'. [ 299.525385][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 300.518651][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 301.365742][ T8551] FAULT_INJECTION: forcing a failure. [ 301.365742][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 301.365804][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.2.617 Tainted: G U L syzkaller #0 PREEMPT(full) [ 301.365838][ T8551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 301.365846][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.365864][ T8551] Call Trace: [ 301.365871][ T8551] [ 301.365896][ T8551] dump_stack_lvl+0x100/0x190 [ 301.365929][ T8551] should_fail_ex.cold+0x5/0xa [ 301.365959][ T8551] should_failslab+0xc2/0x120 [ 301.365992][ T8551] __kvmalloc_node_noprof+0x116/0x970 [ 301.366024][ T8551] ? traverse.part.0.constprop.0+0x397/0x650 [ 301.366068][ T8551] traverse.part.0.constprop.0+0x397/0x650 [ 301.366114][ T8551] seq_read_iter+0x93f/0x1270 [ 301.366162][ T8551] kernfs_fop_read_iter+0x46c/0x610 [ 301.366191][ T8551] ? rw_verify_area+0xce/0x6d0 [ 301.366225][ T8551] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 301.366254][ T8551] vfs_read+0x82e/0xb40 [ 301.366294][ T8551] ? __pfx_vfs_read+0x10/0x10 [ 301.366335][ T8551] ? find_held_lock+0x2b/0x80 [ 301.366383][ T8551] __x64_sys_pread64+0x1eb/0x250 [ 301.366407][ T8551] ? __pfx___x64_sys_pread64+0x10/0x10 [ 301.366439][ T8551] do_syscall_64+0x115/0x840 [ 301.366470][ T8551] ? clear_bhb_loop+0x40/0x90 [ 301.366498][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.366522][ T8551] RIP: 0033:0x7f27f8b9ce59 [ 301.366540][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.366562][ T8551] RSP: 002b:00007f27f99c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 301.366587][ T8551] RAX: ffffffffffffffda RBX: 00007f27f8e15fa0 RCX: 00007f27f8b9ce59 [ 301.366602][ T8551] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 301.366615][ T8551] RBP: 00007f27f99c4090 R08: 0000000000000000 R09: 0000000000000000 [ 301.366628][ T8551] R10: 0000000000040008 R11: 0000000000000246 R12: 0000000000000001 [ 301.366642][ T8551] R13: 00007f27f8e16038 R14: 00007f27f8e15fa0 R15: 00007fff799117d8 [ 301.366671][ T8551] [ 301.527758][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 302.527389][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 302.682273][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.989770][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.992626][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.993670][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.996280][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.999914][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.131703][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.519227][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 303.519344][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.798072][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.519423][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 304.960516][ T77] bridge_slave_1: left allmulticast mode [ 304.960611][ T77] bridge_slave_1: left promiscuous mode [ 304.963036][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.000739][ T77] bridge_slave_0: left allmulticast mode [ 305.000766][ T77] bridge_slave_0: left promiscuous mode [ 305.000945][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.067901][ T5647] Bluetooth: hci4: command tx timeout [ 305.518864][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 306.004587][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.050711][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.055238][ T77] bond0 (unregistering): Released all slaves [ 306.519544][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 307.147960][ T5647] Bluetooth: hci4: command tx timeout [ 307.235591][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 307.402255][ T77] hsr_slave_0: left promiscuous mode [ 307.404459][ T77] hsr_slave_1: left promiscuous mode [ 307.405028][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.405060][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.415111][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.415133][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.520533][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 307.531522][ T77] veth1_macvtap: left promiscuous mode [ 307.531606][ T77] veth0_macvtap: left promiscuous mode [ 307.531696][ T77] veth1_vlan: left promiscuous mode [ 307.531776][ T77] veth0_vlan: left promiscuous mode [ 307.631942][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.636343][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.636983][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.644392][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.646848][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.526117][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 308.846475][ T77] team0 (unregistering): Port device team_slave_1 removed [ 308.920011][ T77] team0 (unregistering): Port device team_slave_0 removed [ 309.228503][ T50] Bluetooth: hci4: command tx timeout [ 309.519620][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 309.707436][ T50] Bluetooth: hci5: command tx timeout [ 310.518412][ T5717] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 311.317300][ T50] Bluetooth: hci4: command tx timeout [ 311.519342][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 311.616188][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.616280][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.616426][ T8562] bridge_slave_0: entered allmulticast mode [ 311.629689][ T8562] bridge_slave_0: entered promiscuous mode [ 311.644612][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.644704][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.644862][ T8562] bridge_slave_1: entered allmulticast mode [ 311.655865][ T8562] bridge_slave_1: entered promiscuous mode [ 311.791081][ T50] Bluetooth: hci5: command tx timeout [ 311.884601][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.991348][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 312.092604][ T8562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.168439][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.233915][ T8562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.431687][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.519195][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 312.583083][ T8562] team0: Port device team_slave_0 added [ 312.590874][ T8562] team0: Port device team_slave_1 added [ 312.824497][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.980712][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.980731][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.980761][ T8562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.041443][ T8562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.041463][ T8562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.041493][ T8562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.342037][ T8562] hsr_slave_0: entered promiscuous mode [ 313.360840][ T8562] hsr_slave_1: entered promiscuous mode [ 313.361429][ T8562] debugfs: 'hsr0' already exists in 'hsr' [ 313.361448][ T8562] Cannot create hsr debugfs directory [ 313.519151][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 313.870911][ T50] Bluetooth: hci5: command tx timeout [ 314.330280][ T77] bridge_slave_1: left allmulticast mode [ 314.330309][ T77] bridge_slave_1: left promiscuous mode [ 314.330491][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.363622][ T77] bridge_slave_0: left allmulticast mode [ 314.363652][ T77] bridge_slave_0: left promiscuous mode [ 314.363832][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.518454][ T5740] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 315.145506][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.156259][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.160986][ T77] bond0 (unregistering): Released all slaves [ 315.332335][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 315.458534][ T77] tipc: Left network mode [ 315.518459][ T5718] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 315.748145][ T8672] openvswitch: netlink: Duplicate key (type 15). [ 315.752142][ T8672] netlink: 'syz.0.631': attribute type 2 has an invalid length. [ 315.788111][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.788248][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.788387][ T8607] bridge_slave_0: entered allmulticast mode [ 315.798947][ T8607] bridge_slave_0: entered promiscuous mode [ 315.851571][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.851654][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.851826][ T8607] bridge_slave_1: entered allmulticast mode [ 315.869326][ T8607] bridge_slave_1: entered promiscuous mode [ 315.949422][ T50] Bluetooth: hci5: command tx timeout [ 316.381769][ T8456] ================================================================== [ 316.381797][ T8456] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 316.381828][ T8456] Write of size 8 at addr ffffc900048713a0 by task syz.1.595/8456 [ 316.381847][ T8456] [ 316.381861][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.1.595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 316.381895][ T8456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 316.381904][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.381924][ T8456] Call Trace: [ 316.381932][ T8456] [ 316.381940][ T8456] dump_stack_lvl+0x100/0x190 [ 316.381970][ T8456] print_report+0x13d/0x4b0 [ 316.382004][ T8456] ? _raw_spin_lock_irqsave+0x52/0x60 [ 316.382035][ T8456] ? sys_imageblit+0x19fb/0x1d60 [ 316.382057][ T8456] kasan_report+0xdf/0x1c0 [ 316.382092][ T8456] ? sys_imageblit+0x19fb/0x1d60 [ 316.382118][ T8456] sys_imageblit+0x19fb/0x1d60 [ 316.382145][ T8456] ? __pfx_sys_imageblit+0x10/0x10 [ 316.382174][ T8456] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 316.382210][ T8456] soft_cursor+0x524/0xa10 [ 316.382249][ T8456] bit_cursor+0xca1/0x1490 [ 316.382287][ T8456] ? __pfx_bit_cursor+0x10/0x10 [ 316.382324][ T8456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.382361][ T8456] ? get_color+0x1da/0x450 [ 316.382389][ T8456] ? __pfx_bit_cursor+0x10/0x10 [ 316.382421][ T8456] fbcon_cursor+0x43c/0x5e0 [ 316.382450][ T8456] ? add_softcursor+0x180/0x290 [ 316.382489][ T8456] set_cursor+0x1db/0x250 [ 316.382525][ T8456] con_write+0x89/0xb0 [ 316.382549][ T8456] n_tty_write+0x431/0x1160 [ 316.382586][ T8456] ? __pfx_n_tty_write+0x10/0x10 [ 316.382617][ T8456] ? __pfx_woken_wake_function+0x10/0x10 [ 316.382645][ T8456] ? __pfx___might_resched+0x10/0x10 [ 316.382682][ T8456] ? kfree+0x1e5/0x6c0 [ 316.382703][ T8456] ? __pfx_n_tty_write+0x10/0x10 [ 316.382734][ T8456] file_tty_write.isra.0+0x4d2/0x890 [ 316.382763][ T8456] redirected_tty_write+0xd4/0x120 [ 316.382788][ T8456] vfs_write+0x6ac/0x1050 [ 316.382810][ T8456] ? __pfx_redirected_tty_write+0x10/0x10 [ 316.382836][ T8456] ? __pfx_vfs_write+0x10/0x10 [ 316.382856][ T8456] ? find_held_lock+0x2b/0x80 [ 316.382896][ T8456] ksys_write+0x12a/0x250 [ 316.382922][ T8456] ? __pfx_ksys_write+0x10/0x10 [ 316.382948][ T8456] do_syscall_64+0x115/0x840 [ 316.382979][ T8456] ? clear_bhb_loop+0x40/0x90 [ 316.383006][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.383031][ T8456] RIP: 0033:0x7fde2d39ce59 [ 316.383049][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.383072][ T8456] RSP: 002b:00007fde2e1e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.383094][ T8456] RAX: ffffffffffffffda RBX: 00007fde2d616090 RCX: 00007fde2d39ce59 [ 316.383109][ T8456] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 316.383124][ T8456] RBP: 00007fde2d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 316.383138][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.383152][ T8456] R13: 00007fde2d616128 R14: 00007fde2d616090 R15: 00007fff22e3f058 [ 316.383175][ T8456] [ 316.383183][ T8456] [ 316.383188][ T8456] The buggy address belongs to a vmalloc virtual mapping [ 316.383204][ T8456] Memory state around the buggy address: [ 316.383216][ T8456] ffffc90004871280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 316.383237][ T8456] ffffc90004871300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 316.383254][ T8456] >ffffc90004871380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 316.383266][ T8456] ^ [ 316.383281][ T8456] ffffc90004871400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 316.383298][ T8456] ffffc90004871480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 316.383311][ T8456] ================================================================== [ 316.412245][ T8456] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 316.412270][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.1.595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 316.412307][ T8456] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 316.412316][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.412331][ T8456] Call Trace: [ 316.412338][ T8456] [ 316.412346][ T8456] dump_stack_lvl+0x100/0x190 [ 316.412378][ T8456] vpanic+0x552/0x970 [ 316.412400][ T8456] ? __pfx_vpanic+0x10/0x10 [ 316.412422][ T8456] ? mark_held_locks+0x40/0x70 [ 316.412462][ T8456] ? sys_imageblit+0x19fb/0x1d60 [ 316.412485][ T8456] panic+0xd1/0xe0 [ 316.412506][ T8456] ? __pfx_panic+0x10/0x10 [ 316.412528][ T8456] ? sys_imageblit+0x19fb/0x1d60 [ 316.412551][ T8456] ? preempt_schedule_common+0x42/0xc0 [ 316.412585][ T8456] check_panic_on_warn.cold+0x19/0x34 [ 316.412610][ T8456] end_report.part.0+0x3a/0x90 [ 316.412644][ T8456] kasan_report.cold+0xe/0x18 [ 316.412679][ T8456] ? sys_imageblit+0x19fb/0x1d60 [ 316.412706][ T8456] sys_imageblit+0x19fb/0x1d60 [ 316.412733][ T8456] ? __pfx_sys_imageblit+0x10/0x10 [ 316.412761][ T8456] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 316.412797][ T8456] soft_cursor+0x524/0xa10 [ 316.412836][ T8456] bit_cursor+0xca1/0x1490 [ 316.412873][ T8456] ? __pfx_bit_cursor+0x10/0x10 [ 316.412916][ T8456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.412953][ T8456] ? get_color+0x1da/0x450 [ 316.412981][ T8456] ? __pfx_bit_cursor+0x10/0x10 [ 316.413013][ T8456] fbcon_cursor+0x43c/0x5e0 [ 316.413042][ T8456] ? add_softcursor+0x180/0x290 [ 316.413080][ T8456] set_cursor+0x1db/0x250 [ 316.413116][ T8456] con_write+0x89/0xb0 [ 316.413141][ T8456] n_tty_write+0x431/0x1160 [ 316.413177][ T8456] ? __pfx_n_tty_write+0x10/0x10 [ 316.413209][ T8456] ? __pfx_woken_wake_function+0x10/0x10 [ 316.413237][ T8456] ? __pfx___might_resched+0x10/0x10 [ 316.413274][ T8456] ? kfree+0x1e5/0x6c0 [ 316.413295][ T8456] ? __pfx_n_tty_write+0x10/0x10 [ 316.413326][ T8456] file_tty_write.isra.0+0x4d2/0x890 [ 316.413355][ T8456] redirected_tty_write+0xd4/0x120 [ 316.413380][ T8456] vfs_write+0x6ac/0x1050 [ 316.413402][ T8456] ? __pfx_redirected_tty_write+0x10/0x10 [ 316.413429][ T8456] ? __pfx_vfs_write+0x10/0x10 [ 316.413449][ T8456] ? find_held_lock+0x2b/0x80 [ 316.413488][ T8456] ksys_write+0x12a/0x250 [ 316.413509][ T8456] ? __pfx_ksys_write+0x10/0x10 [ 316.413534][ T8456] do_syscall_64+0x115/0x840 [ 316.413566][ T8456] ? clear_bhb_loop+0x40/0x90 [ 316.413593][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.413617][ T8456] RIP: 0033:0x7fde2d39ce59 [ 316.413636][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.413659][ T8456] RSP: 002b:00007fde2e1e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.413681][ T8456] RAX: ffffffffffffffda RBX: 00007fde2d616090 RCX: 00007fde2d39ce59 [ 316.413697][ T8456] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 316.413712][ T8456] RBP: 00007fde2d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 316.413727][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.413741][ T8456] R13: 00007fde2d616128 R14: 00007fde2d616090 R15: 00007fff22e3f058 [ 316.413769][ T8456] [ 316.413837][ T8456] Kernel Offset: disabled