last executing test programs: 7.218233451s ago: executing program 2 (id=217): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000240)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0943b28e00e9c2f919d54fe990911e4c265c3d23eb66229", 0x83) syz_clone3(&(0x7f0000000100)={0x22a20000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x8000000000000001, 0x2020009, 0x3, 0x1fb, 0xfffffffffffffffa, 0xc000000000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) write$auto(r1, 0x0, 0x402) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/err_count\x00', 0x800, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) socket(0x2, 0x1, 0x106) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/92, 0x5c) socket(0x10, 0x3, 0x9) 5.995879279s ago: executing program 2 (id=223): mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) r0 = socket(0x1d, 0xa, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x8d, 0x14, 0x10001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x5, 0x3, 0x6) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=r1, 0x4, @old_map_fd=r0}, 0xa3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) io_uring_setup$auto(0x20, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/dev_snmp6/sit0\x00', 0x80c00, 0x0) socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x4, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.667931681s ago: executing program 2 (id=227): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x200, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) mmap$auto(0x0, 0x10, 0xdf, 0x1a, 0x2, 0x8000) set_mempolicy$auto(0xfbf, 0x0, 0x800001b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2841}, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r2 = prctl$auto_PR_SET_MM_ENV_START(0x0, 0xa, 0xffffffffffffffff, 0x3, 0x800) setsockopt$auto_SO_RCVMARK(r2, 0x3, 0x4b, &(0x7f0000000200)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)={0x84281, 0x0, 0x8}, 0x18) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)="27a1ff2f4ad54c46fe242c7b534b0b782fc1bd761efa546c63f57567d1778aa827cfa9674f2959c03d4bb9c1ed21ebdf8215e5a0fc44c6c44245c516d2381f96e9ab682814a87ca26f01c6cefa7ac92a5c955ad87f9fb1e5870f") ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xffffefff}}) write$auto(r3, 0x0, 0x6) 5.498593548s ago: executing program 3 (id=229): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r0, 0xc1086201, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x642, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0xffffffffffffffff, 0x455, r1) rseq$auto(0x0, 0x9, 0xdf2, 0x7) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_destroy$auto(0x8000000000000000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0xa, 0x2, 0x3a) bind$auto(r3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x66) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7fffffff, 0x0) ioctl$auto_RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0xb, 0xfffff69a, 0x8, 0x3, 0x6d8efb41, 0xffffffff, 0x0, 0x0, 0x80}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x5, &(0x7f00000001c0)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 4.427980624s ago: executing program 2 (id=231): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xce, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x05\x00\x00\x00\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x2000000000000000, 0x80000001, 0x19) write$auto(0x3, 0x0, 0xfdef) 4.154892517s ago: executing program 3 (id=233): timer_getoverrun$auto(0x40) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x4000007c) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) unshare$auto(0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/32, 0x20) sendfile$auto(r0, r0, 0x0, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x6, 0x4, 0x6d41, 0x8, 0xa, 0xfffffffffffffdfa]}, 0x0) write$auto(r1, &(0x7f0000000400), 0x100000a3d9) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004001e"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) socketpair$auto(0x1, 0x2, 0x10000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) 3.858191132s ago: executing program 1 (id=235): socket(0xa, 0x1, 0x84) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) socket(0x2, 0x2, 0x88) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) write$auto(0xffffffffffffffff, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0xa16) write$auto(0x3, 0x0, 0xfdef) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x7ff, &(0x7f0000000000)='\xc6-\x00', &(0x7f00000000c0)="53540a586619b03a1bd76965c8e177a4d7272ea6b5473c5f264553ecd2218537b39fc83a507e0da260221d3f06c832f3d1d01e5b36de96a289e0edf55545bdf891557b0aa52d0e799f6a75b05c", 0x4) sendmmsg$auto(0x3, 0x0, 0x9a3, 0xe000) 3.796348709s ago: executing program 0 (id=236): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = epoll_create$auto(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x44) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, "e726f5f44f6e0c0f6bdf18d9216099daa1556f798e87db"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_EPCS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000080)={0x0, 0x100fff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000400), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80200002}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x584, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xda5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e22}, @NL80211_ATTR_MLO_LINKS={0x4b8, 0x138, 0x0, 0x1, [{0x420, 0x0, 0x0, 0x1, [@NL80211_ATTR_BEACON_HEAD={0x419, 0xe, "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"}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0xc0}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xd858}, @NL80211_ATTR_QOS_MAP={0x58, 0xc7, "0688f8164b87528df78aaffe0964bf0d8cbc0a4df8f84421cdd3678871400d3b5a5638cdd7ffc41ecf9e744adc1195977e275483729d9dcbe0b7cb83181e774ed9b5b58c554002db88e0bddf55a7f38908261a43"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x90, 0x21, "1415796c1028a37c9955b5378ffec8084f9a73578a04d2a0569a583cbf25f8919b94f91aee2fe4d1c61e986a72c4930d63e13b187a497d0ba623f87787885fbc3b5579dbffd597a859e01146fa37fd611b3d99b50f827c32c1af6d35681982333f9ec4e188afa1f368ca27c1c6af09a45d7ea6f0d5d2ee5887cdd1f295625404dd56b9ca14a20c89a563f5e5"}]}, 0x584}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd42, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0xffffffffffffffff, 0x3, 0x10, 0x2, 0x2, 0x4, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) 3.258723176s ago: executing program 2 (id=237): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x0, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) msync$auto(0x0, 0xe0, 0x6) mmap$auto(0xce80, 0x1, 0x4000000000de, 0x40eb1, r0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x801, 0x106) close_range$auto(r0, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, 0xffffffffffffffff, 0x8000) r4 = pidfd_getfd$auto(r1, r2, 0xf39) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r1, 0xc0844123, &(0x7f0000000180)={0x2, @status={0x0, 0x0, 0xfffffffe, 0x7, 0xffffff40, 0x6, 0x2}, @reserved="98d1a018ed2f7e416dc0179eb072c6e17e1e99818de04a47116d031c14578ca2d1f533ac18a4931632c83f70be6c97d6c282c858b8cb14ced9500527eb48b19e"}) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000040)=0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x3, 0x9) 2.951588792s ago: executing program 3 (id=238): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = eventfd$auto(0x4) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x8904, 0x400000000000004) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, r2) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyt4\x00', 0x100, 0x0) ioctl$auto(r2, 0x4008af22, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = set_tid_address$auto(0x0) waitid$auto_P_PID(0x1, r3, 0x0, 0x7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006240)=ANY=[@ANYBLOB='!\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503000000200003801c00018015002d800800b500", @ANYRES32=0x0, @ANYBLOB="894f844ea904ebea190000000400038004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4844) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x802, 0x1) setsockopt$auto_SO_BUF_LOCK(r0, 0x5, 0x48, &(0x7f0000000000)=':(\xcb){.c-\x00', 0x8) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r6 = open(0x0, 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r6, 0x0) 2.836911582s ago: executing program 1 (id=239): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/version\x00', 0x84800, 0x0) pread64$auto(r0, &(0x7f0000000240)='}\xf7\x1dG\x9d\x95\xc3%9\x8d\x1c\xba\x95\x03\xd7\xe3\xf5\x03\x9aI3\xc6\xc2\x90Q\x18\xb93\x16\\zW\xe2\xe8&`(\xd80x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) (async, rerun: 64) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) (rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x82, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) epoll_ctl$auto(0x5, 0x1, r3, 0x0) (async) capset$auto(0x0, 0x0) 2.433625422s ago: executing program 1 (id=242): set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x7) fallocate$auto(0x8000000000000003, 0x0, 0xf, 0x200000002) 2.152117818s ago: executing program 1 (id=243): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) read$auto_proc_setgroups_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/188, 0xbc) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x1) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon33\x00', 0x2a400, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.386618152s ago: executing program 3 (id=244): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = socket(0x2c, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) r3 = socket(0x1a, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mremap$auto(0x5, 0x300005, 0x6e2f, 0x3, 0x2) (async) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async, rerun: 32) fsopen$auto(0x0, 0x418e) (rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7ffc) (async, rerun: 32) r6 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x24004850}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40084) (async, rerun: 32) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16=r7, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYBLOB="e2cd0c5a7b14a50187a2ea2ae257c074c0bd97aeb1bc16cae15dbb3be7f015c4dd318ba62dc5ee3e5da53e8059a316d1c935662d8f0bae7164946d72fc5e3e0c719bdd4d8088c2963053ae1b6f7cc945b73672dc1951599c979c69338a362d27b6dc5b167108d4ca30a7c371d8abe50f9a0193898528a9396e9aa4bf2d030ac706a5033d3062fabd01c3e8973ed4a98626ff4b277b47b382", @ANYBLOB, @ANYRES16=r5, @ANYRES16=r2, @ANYRESDEC=r5], 0x1ac}}, 0x400d1) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) (async) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) (rerun: 64) 1.290145293s ago: executing program 1 (id=245): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0xf32}, 0x2, 0x0, 0xfffffffffffffffd, 0x4}, 0x8}, 0x100, 0x5, 0x0) clone$auto(0x8ffe, 0xbc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x3, 0x1, 0xdd, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x500, 0x0) shutdown$auto(0x200000003, 0x2) 1.025444158s ago: executing program 2 (id=246): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x6, 0x0, 0x0, 0xeb1, r1, 0x8000) r2 = io_uring_setup$auto(0x2, 0x0) io_uring_register$auto(r2, 0x12, 0x0, 0x80000020) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) r4 = clone$auto(0x4bd027b0, 0x0, &(0x7f0000000100)=0x1000, &(0x7f0000000140)=0xd, 0x2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x88, 0x19, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r2}, @nested={0x7a, 0x59, 0x0, 0x1, [@nested={0x4, 0xae}, @typed={0x8, 0x147, 0x0, 0x0, @pid=r4}, @generic="6815989bcb8803dd973520195d75740cda1a08d8fd34480ffee45ab345f94ee5322e78c63c5c4d69a6e3046c82216265af00042af99a952e9f66a390628aecc94c17336999fca9281e0f0b26a13ff56fbe2c98c124d2408309c256e9e063df461ed5b41801ac455556ee"]}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r6, &(0x7f0000000240)=""/80, 0x50) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) lseek$auto(r7, 0x0, 0x4) mmap$auto(0x1000, 0x6, 0xffffffff, 0xdc, 0xffffffffffffffff, 0x28000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r9 = socket(0xa, 0x5, 0x0) ioctl$auto(r9, 0x8941, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 868.489925ms ago: executing program 0 (id=247): mkdir$auto(&(0x7f00000021c0)='./file0\x00', 0x4) utimes$auto(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x7fffffffffffffff, 0x7}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty38\x00', 0x301, 0x0) close_range$auto(r0, r0, 0x3) write$auto_tty_fops_tty_io(r0, &(0x7f0000000080)="976f09bd689a850edbe36136c8515f5b3331280bb0b4ba0edd7932ab185cca0dd500a70a2c064833fd9b4b", 0x2b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0xf0, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x8}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x7}, @OVS_FLOW_ATTR_ACTIONS={0xcc, 0x2, 0x0, 0x1, [@nested={0xad, 0xfa, 0x0, 0x1, [@generic="16b7b5dde7221beaa52f013ca32787e6ddc4fe409bc64e8fbd822023fd4eae6eff72245b2da6bbff98ad8685d7be290f8b6404c40b120acd3ad979baaf9cc687378c575ac380930ec6c1dce9f90dcb8db3dbcfac6aedef717e5aadb8c88e830e6369d858d44d05b168edc058a99fcbc239893851425a9bcc182f015f40b771a5a488f79878c3812ce88c374d0848bd74daa694c86a", @typed={0x14, 0x149, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, @nested={0x18, 0x35, 0x0, 0x1, [@nested={0x4, 0x114}, @typed={0x8, 0x144, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x68}, @nested={0x4, 0xe}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x4008000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) getrandom$auto(0x0, 0x5d, 0x7) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x2404c0c4}, 0x4) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r2, 0x4b66, 0x1) 554.017858ms ago: executing program 0 (id=248): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0603d06, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x32) mmap$auto(0x0, 0x4020009, 0xdc, 0x16, 0x401, 0x8000) madvise$auto(0x0, 0x6, 0x10) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x8002, 0x0) ioctl$auto(0x3, 0x4610, 0x10000000000402) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x31, 0x9, &(0x7f00000001c0)='\x15!\xa8\xef\')9Z\x1a^J/\xddCx4\xa1\x00\xd3\xaa\xca2\xff\xa3\xb8x\x01\x82\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbc\xfe\xb5O\x93\xe6\x19\b\x9f\x92\xe9\x04\xaf\x02\x0flp\xe8\xafe\xe64\xa7R\x02\xf0\xce\x9d\xad\xc9^\x10\xbc\x15\xbc\aX\xf1=l\xd3Q7\xf6\rE\x94\xe6z}\x1d1o\xff\xc6\xd6\xbb\x18wV\xc5\xf26\xcfaPK\xb7\xd9VUZ\xbf\xfb\xcc\xf7\xa7\xd1\xc6\x12rC\x05uwi\n\xd4\xffy\'\x9c\xee\x13&\x8c\x00\xdb\t\x05\x06\x9a\x01L\xca\xec\x8b\x9d\x94F\xa5\xdfH\x1eP\x0e\xb6\f\xa4\xdb\xb5@\\\v\xc9x\"\xf0\xef<|\x8f\xc2\xe4BM\xe8\xadQ\t*\xc61/', 0x10000110) madvise$auto(0x2ca0000, 0x7fffffffffffffff, 0x200e) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(r1, 0x0, 0x10807d) timerfd_create$auto(0x7, 0xa466) mmap$auto(0xfffffffffffffffe, 0x20009, 0x10000008000dd, 0x15, r1, 0x100000007ffe) io_uring_setup$auto(0xa, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x28, 0x1, 0x0) setsockopt$auto(r4, 0x28, 0x2, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) unshare$auto(0x564) mmap$auto(0x0, 0x9, 0x3, 0xebc, 0xffffffffffffffff, 0xffff) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x6c0e40, 0x0) ioctl$auto_EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x2) 371.59452ms ago: executing program 0 (id=249): keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) time$auto(0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1) writev$auto(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000480)="3472517ba6", 0x5}, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) ioctl$auto_BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000300)={&(0x7f0000000280)={&(0x7f0000000200)="9f0e4d2812c08f87a3d4c000b5321032904968842e430d16f65102ec1e84585be332e920416998e66fe43cbd8bc53fb803f4d5d3aa7146d94399e51ff8929c7ca7b6fc0f6ddbe14fc91640c5dd1c616a38717b689dccf3939d189ebfff121cf9d08be02409351c4c32aca5b4bfe9046da57276ee68c10097a6a4deb979", 0x5}, 0x6, 0x7ff, 0x2, 0x8001, 0x0, 0x8, 0xd7, 0x1, "c29b450bdfb0da88058ece622a7654dadfd1fe10afcf7a56ff2044a8777f3e3fa216e8e0514cf37a17337127c73d4ae8099233426cd373e1525b65731859d2bd"}) quotactl$auto(0x9, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0xee01, &(0x7f00000004c0)="5f865082dea48a5120697f1dfdfa25db5140bcc1c80a4f634aef6ed739ad5affcd6f11ed4a2e1dee4629f12a309107c8b5e85c181b27ff528bafd3812dd61942749b4248a7036e5274710b58c36fe105369e60270fd2f140dbfe94955295d1e21c7769b2b0b95f2f1be3a3b7ea4b3be9d5956d567fb43d3d00d42dd5000000000000000095e04dc443356fda27596f3f4d6f8341ed7db017854aca8dcc9de3ccdaed1427c6d2ed8649ed3aed4e43fb9575491eb59771f1a66bb0cdfa0807abed52bedaffdd80bac5181c0a38ec6bc3ecab62f67e2b045c7fa5a68dcee5") execveat$auto(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) setresgid$auto(0x81, 0x800000a0, 0x8) ioctl$auto(0xffffffffffffffff, 0xab03, 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x101102, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) pipe2$auto(0x0, 0x80) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) 285.814419ms ago: executing program 1 (id=250): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) (async) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc040564b, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x3ff, 0x5, 0x81, 0x75, r3, 0x9) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='1', 0x1) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x64000, 0x0) ioctl$auto_BTRFS_IOC_SEND_32(r4, 0x40449426, &(0x7f0000000140)={@raw=0x1, 0x4, 0x8, 0x0, 0x8, 0x5, "39fb0b4aa9765adeb6ac19883e4bedfe95f0d5ca2e598fb4dbf27923"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x4000000) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r7, @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x4000000) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) (async) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x1c, r6, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0xfffffe9a, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040010) (async) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x1c, r6, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0xfffffe9a, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040010) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub0/xrun_injection\x00', 0x129541, 0x0) setfsuid$auto(0xee01) 220.912327ms ago: executing program 0 (id=251): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 0s ago: executing program 3 (id=252): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) socket(0x2, 0x800, 0x73) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x4, 0x0, 0x3, 0xf4}, 0x6d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101102, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r2, 0x0, 0x0) mmap$auto(0x10, 0x0, 0xa3ae, 0x16d2, 0x2, 0x7fffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r3, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r3, 0x0, @_sigev_thread={0x0, 0x0}}) r4 = mq_open$auto(&(0x7f0000000280)='C*\xf5-', 0x7e, 0x9, 0x0) mq_timedsend$auto(r4, 0x0, 0x2, 0x46, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x5, 0x2020009, 0x1fffffffffffffff, 0x10ebe, 0xfffffffffffffffa, 0x80000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 72.885408][ T5813] cgroup: Unknown subsys name 'net' [ 72.990514][ T5813] cgroup: Unknown subsys name 'cpuset' [ 72.999047][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.435391][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.145268][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.155584][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.182365][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.189999][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.198966][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.200942][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.208183][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.215921][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.228471][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.230036][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.235781][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.244836][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.252181][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.256913][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.263567][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.279475][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.287459][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.295275][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.296596][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.303146][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.846828][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 76.949346][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 76.990615][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 77.016979][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 77.058412][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.065614][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.073834][ T5824] bridge_slave_0: entered allmulticast mode [ 77.081189][ T5824] bridge_slave_0: entered promiscuous mode [ 77.122890][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.130408][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.137701][ T5824] bridge_slave_1: entered allmulticast mode [ 77.144675][ T5824] bridge_slave_1: entered promiscuous mode [ 77.232600][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.266571][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.284945][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.292167][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.299540][ T5823] bridge_slave_0: entered allmulticast mode [ 77.306530][ T5823] bridge_slave_0: entered promiscuous mode [ 77.336616][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.343811][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.351038][ T5826] bridge_slave_0: entered allmulticast mode [ 77.359025][ T5826] bridge_slave_0: entered promiscuous mode [ 77.376189][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.383405][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.390675][ T5823] bridge_slave_1: entered allmulticast mode [ 77.397810][ T5823] bridge_slave_1: entered promiscuous mode [ 77.414247][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.421451][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.429689][ T5826] bridge_slave_1: entered allmulticast mode [ 77.436689][ T5826] bridge_slave_1: entered promiscuous mode [ 77.443576][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.450803][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.458070][ T5825] bridge_slave_0: entered allmulticast mode [ 77.465039][ T5825] bridge_slave_0: entered promiscuous mode [ 77.484449][ T5824] team0: Port device team_slave_0 added [ 77.500497][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.507772][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.514872][ T5825] bridge_slave_1: entered allmulticast mode [ 77.522086][ T5825] bridge_slave_1: entered promiscuous mode [ 77.551772][ T5824] team0: Port device team_slave_1 added [ 77.580494][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.603277][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.615316][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.626898][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.647654][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.658977][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.678923][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.685869][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.712172][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.758034][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.765004][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.791105][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.826020][ T5823] team0: Port device team_slave_0 added [ 77.842317][ T5826] team0: Port device team_slave_0 added [ 77.850002][ T5825] team0: Port device team_slave_0 added [ 77.857519][ T5826] team0: Port device team_slave_1 added [ 77.865101][ T5823] team0: Port device team_slave_1 added [ 77.895972][ T5825] team0: Port device team_slave_1 added [ 77.936105][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.943115][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.969536][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.994197][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.001361][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.028458][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.050292][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.057564][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.083861][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.104364][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.111363][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.137383][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.148998][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.155929][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.181853][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.206586][ T5824] hsr_slave_0: entered promiscuous mode [ 78.213244][ T5824] hsr_slave_1: entered promiscuous mode [ 78.229929][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.236898][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.263465][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.297506][ T5839] Bluetooth: hci3: command tx timeout [ 78.335189][ T5823] hsr_slave_0: entered promiscuous mode [ 78.341839][ T5823] hsr_slave_1: entered promiscuous mode [ 78.348109][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 78.353892][ T5823] Cannot create hsr debugfs directory [ 78.374944][ T5826] hsr_slave_0: entered promiscuous mode [ 78.381245][ T5826] hsr_slave_1: entered promiscuous mode [ 78.387561][ T51] Bluetooth: hci0: command tx timeout [ 78.387616][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 78.393183][ T51] Bluetooth: hci2: command tx timeout [ 78.398822][ T5826] Cannot create hsr debugfs directory [ 78.404679][ T5839] Bluetooth: hci1: command tx timeout [ 78.465219][ T5825] hsr_slave_0: entered promiscuous mode [ 78.471477][ T5825] hsr_slave_1: entered promiscuous mode [ 78.477714][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 78.483442][ T5825] Cannot create hsr debugfs directory [ 78.918589][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.935091][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.946838][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.963848][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.021678][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.036229][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.050878][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.074642][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.158451][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.181061][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.192253][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.216644][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.313344][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.320552][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.332893][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.343126][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.353002][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.411183][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.440544][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.466332][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.473586][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.497960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.505057][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.570082][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.604514][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.611676][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.632934][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.640102][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.668124][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.688632][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.735669][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.763080][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.784089][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.791287][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.831624][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.838835][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.850008][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.857119][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.884430][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.891619][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.145250][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.280917][ T5826] veth0_vlan: entered promiscuous mode [ 80.325575][ T5826] veth1_vlan: entered promiscuous mode [ 80.354140][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.382571][ T5839] Bluetooth: hci3: command tx timeout [ 80.442797][ T5826] veth0_macvtap: entered promiscuous mode [ 80.467524][ T5839] Bluetooth: hci1: command tx timeout [ 80.472962][ T5839] Bluetooth: hci2: command tx timeout [ 80.478216][ T51] Bluetooth: hci0: command tx timeout [ 80.507234][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.517361][ T5826] veth1_macvtap: entered promiscuous mode [ 80.565305][ T5824] veth0_vlan: entered promiscuous mode [ 80.590477][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.604364][ T5824] veth1_vlan: entered promiscuous mode [ 80.615995][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.636111][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.670532][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.681041][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702668][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.711695][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734787][ T5823] veth0_vlan: entered promiscuous mode [ 80.770795][ T5824] veth0_macvtap: entered promiscuous mode [ 80.781583][ T5823] veth1_vlan: entered promiscuous mode [ 80.805493][ T5824] veth1_macvtap: entered promiscuous mode [ 80.834268][ T5825] veth0_vlan: entered promiscuous mode [ 80.880569][ T5825] veth1_vlan: entered promiscuous mode [ 80.898044][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.913951][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.928017][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.934301][ T5823] veth0_macvtap: entered promiscuous mode [ 80.953822][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.013779][ T5823] veth1_macvtap: entered promiscuous mode [ 81.022308][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.032150][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.044056][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.050954][ T5825] veth0_macvtap: entered promiscuous mode [ 81.057993][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.068878][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.077730][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099920][ T5825] veth1_macvtap: entered promiscuous mode [ 81.144520][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.152300][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.185048][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.209491][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.264698][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.283424][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.310844][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.326851][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.329223][ T5913] Zero length message leads to an empty skb [ 81.336660][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.364995][ T1127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.376837][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.386354][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.415786][ T1127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.468652][ T1127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.482504][ T1127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.519854][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.528809][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.636121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.671053][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.789312][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.806036][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.938673][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.939026][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.946530][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.084514][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.096494][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.463116][ T51] Bluetooth: hci3: command tx timeout [ 82.537374][ T51] Bluetooth: hci2: command tx timeout [ 82.542816][ T51] Bluetooth: hci1: command tx timeout [ 82.548271][ T51] Bluetooth: hci0: command tx timeout [ 83.094328][ T5942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.489941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.722235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.540342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.549055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.560250][ T5839] Bluetooth: hci3: command tx timeout [ 84.617695][ T5839] Bluetooth: hci0: command tx timeout [ 84.623137][ T5839] Bluetooth: hci1: command tx timeout [ 84.628620][ T51] Bluetooth: hci2: command tx timeout [ 86.719610][ T9] cfg80211: failed to load regulatory.db [ 86.997030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 87.069645][ T5987] mmap: syz.3.16 (5987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.177633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.304189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.345853][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 88.077210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.123763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.290217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.103440][ T6018] Invalid ELF header magic: != ELF [ 90.008427][ T6021] aoe: can't write to that file. [ 90.632333][ T6034] netlink: 9 bytes leftover after parsing attributes in process `syz.2.25'. [ 90.647406][ T30] audit: type=1804 audit(1773550246.756:2): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.25" name=2F6E6577726F6F742F352F22050820 dev="tmpfs" ino=45 res=1 errno=0 [ 90.780538][ T30] audit: type=1800 audit(1773550246.756:3): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name=22050820 dev="tmpfs" ino=45 res=0 errno=0 [ 91.199804][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 92.958569][ T6071] FAULT_INJECTION: forcing a failure. [ 92.958569][ T6071] name failslab, interval 1, probability 0, space 0, times 1 [ 92.979124][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) [ 92.979164][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.979184][ T6071] Call Trace: [ 92.979194][ T6071] [ 92.979205][ T6071] dump_stack_lvl+0x100/0x190 [ 92.979257][ T6071] should_fail_ex.cold+0x5/0xa [ 92.979290][ T6071] should_failslab+0xc2/0x120 [ 92.979319][ T6071] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 92.979359][ T6071] ? security_inode_alloc+0x3b/0x2c0 [ 92.979387][ T6071] ? lockdep_init_map_type+0x5c/0x250 [ 92.979428][ T6071] security_inode_alloc+0x3b/0x2c0 [ 92.979457][ T6071] inode_init_always_gfp+0xced/0x1040 [ 92.979492][ T6071] alloc_inode+0x8e/0x250 [ 92.979527][ T6071] sock_alloc+0x44/0x280 [ 92.979566][ T6071] ? security_socket_create+0x7f/0x250 [ 92.979610][ T6071] __sock_create+0xc2/0x860 [ 92.979646][ T6071] __sys_socket+0x14d/0x260 [ 92.979680][ T6071] ? exc_page_fault+0x6f/0xd0 [ 92.979718][ T6071] ? __pfx___sys_socket+0x10/0x10 [ 92.979752][ T6071] ? do_user_addr_fault+0x8d6/0x12f0 [ 92.979801][ T6071] __x64_sys_socket+0x72/0xb0 [ 92.979831][ T6071] ? lockdep_hardirqs_on+0x78/0x100 [ 92.979870][ T6071] do_syscall_64+0x106/0xf80 [ 92.979907][ T6071] ? clear_bhb_loop+0x40/0x90 [ 92.979941][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.979969][ T6071] RIP: 0033:0x7f873a79e007 [ 92.979993][ T6071] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.980025][ T6071] RSP: 002b:00007f873b6b4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 92.980052][ T6071] RAX: ffffffffffffffda RBX: 00007f873aa15fa0 RCX: 00007f873a79e007 [ 92.980071][ T6071] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 92.980088][ T6071] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 92.980105][ T6071] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 92.980123][ T6071] R13: 00007f873aa16038 R14: 00007f873aa15fa0 R15: 00007ffc4dd200d8 [ 92.980161][ T6071] [ 92.980392][ T6071] socket: no more sockets [ 93.695812][ T6080] hub 1-0:1.0: USB hub found [ 93.701107][ T6080] hub 1-0:1.0: 1 port detected [ 94.438716][ T6087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 95.484675][ T6097] syz.3.39 (6097) used greatest stack depth: 19672 bytes left [ 95.554407][ T6115] smpboot: CPU 1 is now offline [ 96.988088][ T6133] FAULT_INJECTION: forcing a failure. [ 96.988088][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 97.217310][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(full) [ 97.217333][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.217343][ T6133] Call Trace: [ 97.217348][ T6133] [ 97.217354][ T6133] dump_stack_lvl+0x100/0x190 [ 97.217404][ T6133] should_fail_ex.cold+0x5/0xa [ 97.217422][ T6133] should_failslab+0xc2/0x120 [ 97.217438][ T6133] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 97.217461][ T6133] ? kstrdup_const+0x63/0x80 [ 97.217487][ T6133] kstrdup+0x51/0xe0 [ 97.217510][ T6133] kstrdup_const+0x63/0x80 [ 97.217531][ T6133] alloc_vfsmnt+0xe5/0x6a0 [ 97.217547][ T6133] ? __pfx___might_resched+0x10/0x10 [ 97.217569][ T6133] clone_mnt+0x4b/0x930 [ 97.217591][ T6133] copy_tree+0xfc/0xbf0 [ 97.217604][ T6133] ? __pfx_down_write+0x10/0x10 [ 97.217630][ T6133] copy_mnt_ns+0x2bd/0xc30 [ 97.217647][ T6133] ? create_new_namespaces+0x30/0xac0 [ 97.217662][ T6133] ? rcu_is_watching+0x12/0xc0 [ 97.217686][ T6133] create_new_namespaces+0xd3/0xac0 [ 97.217700][ T6133] ? bpf_lsm_capable+0x9/0x10 [ 97.217715][ T6133] ? security_capable+0x80/0x260 [ 97.217747][ T6133] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 97.217765][ T6133] ksys_unshare+0x473/0xad0 [ 97.217786][ T6133] ? __pfx_ksys_unshare+0x10/0x10 [ 97.217811][ T6133] __x64_sys_unshare+0x31/0x40 [ 97.217829][ T6133] do_syscall_64+0x106/0xf80 [ 97.217847][ T6133] ? clear_bhb_loop+0x40/0x90 [ 97.217865][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.217880][ T6133] RIP: 0033:0x7fc6b739c799 [ 97.217893][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.217906][ T6133] RSP: 002b:00007fc6b81c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.217920][ T6133] RAX: ffffffffffffffda RBX: 00007fc6b7616270 RCX: 00007fc6b739c799 [ 97.217930][ T6133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 97.217938][ T6133] RBP: 00007fc6b7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 97.217947][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.217955][ T6133] R13: 00007fc6b7616308 R14: 00007fc6b7616270 R15: 00007ffeb2254778 [ 97.217975][ T6133] [ 100.297867][ T6170] random: crng reseeded on system resumption [ 100.366954][ T6167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.656258][ T6180] ima: policy update failed [ 100.713461][ T30] audit: type=1802 audit(1773550256.826:4): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.53" res=0 errno=0 [ 101.045092][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 101.112544][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 101.442275][ T6194] __vm_enough_memory: pid: 6194, comm: syz.1.57, bytes: 4398046511104 not enough memory for the allocation [ 103.082254][ T6207] zswap: compressor not available [ 103.230985][ T6214] Invalid ELF header magic: != ELF [ 105.371782][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 105.559778][ T6269] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 105.648140][ T6271] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.979470][ T6279] netlink: 9 bytes leftover after parsing attributes in process `syz.1.76'. [ 106.370397][ T6280] netlink: 'syz.0.75': attribute type 4 has an invalid length. [ 106.497097][ T6288] Invalid ELF header magic: != ELF [ 107.414058][ T6302] batman_adv: Routing algorithm '7' is not supported [ 108.224909][ T6314] writes to the poll attribute are ignored. [ 108.234809][ T6307] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 108.257210][ T6314] please use driver specific parameters instead. [ 108.283538][ T6311] FAULT_INJECTION: forcing a failure. [ 108.283538][ T6311] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 108.370728][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.82 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.370757][ T6311] Tainted: [L]=SOFTLOCKUP [ 108.370762][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.370771][ T6311] Call Trace: [ 108.370777][ T6311] [ 108.370783][ T6311] dump_stack_lvl+0x100/0x190 [ 108.370809][ T6311] should_fail_ex.cold+0x5/0xa [ 108.370824][ T6311] ? prepare_alloc_pages+0x16d/0x5f0 [ 108.370842][ T6311] should_fail_alloc_page+0xeb/0x140 [ 108.370859][ T6311] prepare_alloc_pages+0x1f0/0x5f0 [ 108.370878][ T6311] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 108.370908][ T6311] ? __up_read+0x2c5/0x700 [ 108.370928][ T6311] ? __pfx___up_read+0x10/0x10 [ 108.370946][ T6311] ? __rmap_walk_file+0x5c5/0x680 [ 108.370962][ T6311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 108.370987][ T6311] ? __rmap_walk_file+0x50f/0x680 [ 108.371007][ T6311] ? rmap_walk_file+0x1dd/0x2a0 [ 108.371030][ T6311] __folio_alloc_noprof+0x13/0x2f0 [ 108.371050][ T6311] alloc_migration_target+0x1d7/0x6d0 [ 108.371068][ T6311] migrate_pages_batch+0x4f2/0x4530 [ 108.371087][ T6311] ? __pfx_alloc_migration_target+0x10/0x10 [ 108.371109][ T6311] ? walk_pgd_range+0x1115/0x1eb0 [ 108.371130][ T6311] ? __pfx_migrate_pages_batch+0x10/0x10 [ 108.371160][ T6311] migrate_pages_sync+0x12c/0x880 [ 108.371177][ T6311] ? __pfx_alloc_migration_target+0x10/0x10 [ 108.371198][ T6311] ? __pfx_migrate_pages_sync+0x10/0x10 [ 108.371213][ T6311] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 108.371234][ T6311] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 108.371259][ T6311] migrate_pages+0x1aae/0x28a0 [ 108.371278][ T6311] ? __pfx_alloc_migration_target+0x10/0x10 [ 108.371299][ T6311] ? __pfx_migrate_pages+0x10/0x10 [ 108.371316][ T6311] ? queue_pages_range+0x11e/0x180 [ 108.371339][ T6311] ? __up_read+0x2c5/0x700 [ 108.371358][ T6311] ? __pfx___up_read+0x10/0x10 [ 108.371376][ T6311] ? do_migrate_pages+0x451/0x740 [ 108.371391][ T6311] ? do_migrate_pages+0x451/0x740 [ 108.371409][ T6311] do_migrate_pages+0x488/0x740 [ 108.371429][ T6311] ? __pfx_do_migrate_pages+0x10/0x10 [ 108.371447][ T6311] ? rcu_is_watching+0x12/0xc0 [ 108.371467][ T6311] ? cap_capable+0x107/0x460 [ 108.371488][ T6311] ? get_task_mm+0xc2/0xf0 [ 108.371502][ T6311] ? security_capable+0xbd/0x260 [ 108.371526][ T6311] kernel_migrate_pages+0x560/0x700 [ 108.371542][ T6311] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 108.371557][ T6311] ? xfd_validate_state+0x129/0x190 [ 108.371581][ T6311] __x64_sys_migrate_pages+0x96/0x100 [ 108.371597][ T6311] ? lockdep_hardirqs_on+0x78/0x100 [ 108.371617][ T6311] do_syscall_64+0x106/0xf80 [ 108.371644][ T6311] ? clear_bhb_loop+0x40/0x90 [ 108.371663][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.371678][ T6311] RIP: 0033:0x7fc6b739c799 [ 108.371692][ T6311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.371706][ T6311] RSP: 002b:00007fc6b8225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 108.371721][ T6311] RAX: ffffffffffffffda RBX: 00007fc6b7615fa0 RCX: 00007fc6b739c799 [ 108.371730][ T6311] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 108.371739][ T6311] RBP: 00007fc6b7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 108.371748][ T6311] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 108.371759][ T6311] R13: 00007fc6b7616038 R14: 00007fc6b7615fa0 R15: 00007ffeb2254778 [ 108.371778][ T6311] [ 110.001811][ T6331] FAULT_INJECTION: forcing a failure. [ 110.001811][ T6331] name fail_futex, interval 1, probability 0, space 0, times 1 [ 110.047190][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.1.88 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.047217][ T6331] Tainted: [L]=SOFTLOCKUP [ 110.047222][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.047231][ T6331] Call Trace: [ 110.047236][ T6331] [ 110.047242][ T6331] dump_stack_lvl+0x100/0x190 [ 110.047267][ T6331] should_fail_ex.cold+0x5/0xa [ 110.047286][ T6331] get_futex_key+0x1d2/0x1620 [ 110.047306][ T6331] ? __pfx_get_futex_key+0x10/0x10 [ 110.047330][ T6331] futex_wait_setup+0x83/0x510 [ 110.047357][ T6331] __futex_wait+0x19f/0x300 [ 110.047380][ T6331] ? __pfx___futex_wait+0x10/0x10 [ 110.047405][ T6331] ? __pfx_futex_wake_mark+0x10/0x10 [ 110.047429][ T6331] ? find_held_lock+0x2b/0x80 [ 110.047442][ T6331] ? futex_wake+0x456/0x530 [ 110.047466][ T6331] futex_wait+0xed/0x380 [ 110.047487][ T6331] ? __pfx_futex_wait+0x10/0x10 [ 110.047511][ T6331] ? mISDN_ioctl+0xde/0x9a0 [ 110.047532][ T6331] ? mISDN_ioctl+0xde/0x9a0 [ 110.047556][ T6331] do_futex+0x1ef/0x350 [ 110.047574][ T6331] ? __pfx_do_futex+0x10/0x10 [ 110.047593][ T6331] ? find_held_lock+0x2b/0x80 [ 110.047606][ T6331] ? __might_fault+0xc5/0x140 [ 110.047627][ T6331] __x64_sys_futex+0x34f/0x4d0 [ 110.047647][ T6331] ? __pfx___x64_sys_futex+0x10/0x10 [ 110.047673][ T6331] do_syscall_64+0x106/0xf80 [ 110.047692][ T6331] ? clear_bhb_loop+0x40/0x90 [ 110.047709][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.047724][ T6331] RIP: 0033:0x7f873a79c799 [ 110.047736][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.047750][ T6331] RSP: 002b:00007f873b6950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 110.047764][ T6331] RAX: ffffffffffffffda RBX: 00007f873aa16098 RCX: 00007f873a79c799 [ 110.047773][ T6331] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f873aa16098 [ 110.047782][ T6331] RBP: 00007f873aa16090 R08: 0000000000000000 R09: 0000000000000000 [ 110.047790][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.047798][ T6331] R13: 00007f873aa16128 R14: 00007ffc4dd1fff0 R15: 00007ffc4dd200d8 [ 110.047818][ T6331] [ 110.968981][ T6334] netlink: 9 bytes leftover after parsing attributes in process `syz.1.90'. [ 111.837312][ T6348] FAULT_INJECTION: forcing a failure. [ 111.837312][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 111.874230][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.1.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.874257][ T6348] Tainted: [L]=SOFTLOCKUP [ 111.874263][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.874272][ T6348] Call Trace: [ 111.874277][ T6348] [ 111.874283][ T6348] dump_stack_lvl+0x100/0x190 [ 111.874309][ T6348] should_fail_ex.cold+0x5/0xa [ 111.874327][ T6348] should_failslab+0xc2/0x120 [ 111.874343][ T6348] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 111.874366][ T6348] ? register_pidns_sysctls+0x48/0x1c0 [ 111.874386][ T6348] ? rcu_is_watching+0x12/0xc0 [ 111.874411][ T6348] kmemdup_noprof+0x29/0x60 [ 111.874433][ T6348] register_pidns_sysctls+0x48/0x1c0 [ 111.874453][ T6348] ? __ns_common_init+0x299/0x4b0 [ 111.874470][ T6348] copy_pid_ns+0x680/0x10a0 [ 111.874488][ T6348] ? __pfx_copy_pid_ns+0x10/0x10 [ 111.874504][ T6348] ? rcu_is_watching+0x12/0xc0 [ 111.874526][ T6348] ? copy_mnt_ns+0x106/0xc30 [ 111.874542][ T6348] ? create_new_namespaces+0x30/0xac0 [ 111.874560][ T6348] create_new_namespaces+0x2aa/0xac0 [ 111.874579][ T6348] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 111.874596][ T6348] ksys_unshare+0x473/0xad0 [ 111.874615][ T6348] ? __pfx_ksys_unshare+0x10/0x10 [ 111.874639][ T6348] __x64_sys_unshare+0x31/0x40 [ 111.874656][ T6348] do_syscall_64+0x106/0xf80 [ 111.874675][ T6348] ? clear_bhb_loop+0x40/0x90 [ 111.874692][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.874707][ T6348] RIP: 0033:0x7f873a79c799 [ 111.874721][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.874734][ T6348] RSP: 002b:00007f873b6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.874748][ T6348] RAX: ffffffffffffffda RBX: 00007f873aa15fa0 RCX: 00007f873a79c799 [ 111.874757][ T6348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 111.874766][ T6348] RBP: 00007f873a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 111.874774][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.874782][ T6348] R13: 00007f873aa16038 R14: 00007f873aa15fa0 R15: 00007ffc4dd200d8 [ 111.874801][ T6348] [ 112.443532][ T6352] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 112.534907][ T6355] netlink: 342 bytes leftover after parsing attributes in process `syz.3.96'. [ 112.579855][ T6355] netlink: 342 bytes leftover after parsing attributes in process `syz.3.96'. [ 116.866379][ T6435] zswap: compressor  not available [ 117.151058][ T6450] FAULT_INJECTION: forcing a failure. [ 117.151058][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 117.273041][ T6446] zswap: compressor  not available [ 117.303209][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.3.111 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.303235][ T6450] Tainted: [L]=SOFTLOCKUP [ 117.303240][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.303248][ T6450] Call Trace: [ 117.303252][ T6450] [ 117.303258][ T6450] dump_stack_lvl+0x100/0x190 [ 117.303282][ T6450] should_fail_ex.cold+0x5/0xa [ 117.303299][ T6450] ? iter_file_splice_write+0x1d8/0x10a0 [ 117.303313][ T6450] should_failslab+0xc2/0x120 [ 117.303327][ T6450] __kmalloc_noprof+0xe0/0x850 [ 117.303347][ T6450] ? __pfx___might_resched+0x10/0x10 [ 117.303369][ T6450] iter_file_splice_write+0x1d8/0x10a0 [ 117.303392][ T6450] ? __pfx_iter_file_splice_write+0x10/0x10 [ 117.303406][ T6450] ? __lock_acquire+0x4a5/0x2630 [ 117.303424][ T6450] ? shmem_file_splice_read+0x724/0xdd0 [ 117.303456][ T6450] ? __pfx_iter_file_splice_write+0x10/0x10 [ 117.303471][ T6450] direct_splice_actor+0x192/0x6c0 [ 117.303494][ T6450] splice_direct_to_actor+0x345/0xa30 [ 117.303509][ T6450] ? __pfx_direct_splice_actor+0x10/0x10 [ 117.303533][ T6450] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 117.303553][ T6450] do_splice_direct+0x174/0x240 [ 117.303567][ T6450] ? __pfx_do_splice_direct+0x10/0x10 [ 117.303581][ T6450] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 117.303605][ T6450] ? rw_verify_area+0xce/0x6d0 [ 117.303631][ T6450] do_sendfile+0xadc/0xe20 [ 117.303655][ T6450] ? __pfx_do_sendfile+0x10/0x10 [ 117.303681][ T6450] __x64_sys_sendfile64+0x154/0x220 [ 117.303697][ T6450] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 117.303718][ T6450] do_syscall_64+0x106/0xf80 [ 117.303736][ T6450] ? clear_bhb_loop+0x40/0x90 [ 117.303753][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.303767][ T6450] RIP: 0033:0x7fc6b739c799 [ 117.303779][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.303792][ T6450] RSP: 002b:00007fc6b81e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 117.303806][ T6450] RAX: ffffffffffffffda RBX: 00007fc6b7616180 RCX: 00007fc6b739c799 [ 117.303815][ T6450] RDX: 0000200000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 117.303823][ T6450] RBP: 00007fc6b7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 117.303831][ T6450] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 117.303839][ T6450] R13: 00007fc6b7616218 R14: 00007fc6b7616180 R15: 00007ffeb2254778 [ 117.303862][ T6450] [ 117.908946][ T6454] zswap: compressor  not available [ 117.998870][ T6444] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.260640][ T6470] random: crng reseeded on system resumption [ 118.545587][ T6474] Console: switching to colour VGA+ 80x25 [ 119.184504][ T6488] FAULT_INJECTION: forcing a failure. [ 119.184504][ T6488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.667413][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.0.118 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.667440][ T6488] Tainted: [L]=SOFTLOCKUP [ 119.667446][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.667454][ T6488] Call Trace: [ 119.667459][ T6488] [ 119.667465][ T6488] dump_stack_lvl+0x100/0x190 [ 119.667492][ T6488] should_fail_ex.cold+0x5/0xa [ 119.667507][ T6488] ? prepare_alloc_pages+0x16d/0x5f0 [ 119.667526][ T6488] should_fail_alloc_page+0xeb/0x140 [ 119.667543][ T6488] prepare_alloc_pages+0x1f0/0x5f0 [ 119.667563][ T6488] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 119.667586][ T6488] ? __pfx_css_rstat_updated+0x10/0x10 [ 119.667608][ T6488] ? find_held_lock+0x2b/0x80 [ 119.667622][ T6488] ? rcu_read_unlock+0x17/0x60 [ 119.667638][ T6488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.667658][ T6488] ? page_counter_charge+0x1d2/0x240 [ 119.667677][ T6488] ? rcu_is_watching+0x12/0xc0 [ 119.667698][ T6488] ? trace_mm_page_alloc+0x17a/0x1d0 [ 119.667718][ T6488] ? mark_held_locks+0x40/0x70 [ 119.667735][ T6488] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.667754][ T6488] ? lockdep_hardirqs_on+0x78/0x100 [ 119.667773][ T6488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.667796][ T6488] ? policy_nodemask+0xed/0x4f0 [ 119.667814][ T6488] alloc_pages_mpol+0x1fb/0x550 [ 119.667831][ T6488] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.667844][ T6488] ? __x64_sys_modify_ldt+0xb1/0x170 [ 119.667859][ T6488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.667878][ T6488] alloc_pages_noprof+0x131/0x390 [ 119.667895][ T6488] __pud_alloc+0x3b/0x6e0 [ 119.667913][ T6488] walk_to_pmd+0x357/0x4c0 [ 119.667940][ T6488] get_locked_pte+0x25/0xc0 [ 119.667958][ T6488] map_ldt_struct+0x3c1/0xa70 [ 119.667977][ T6488] ? __pfx_map_ldt_struct+0x10/0x10 [ 119.667992][ T6488] ? alloc_pages_noprof+0x233/0x390 [ 119.668011][ T6488] write_ldt+0x6d3/0xd40 [ 119.668028][ T6488] ? __pfx_write_ldt+0x10/0x10 [ 119.668044][ T6488] ? xfd_validate_state+0x129/0x190 [ 119.668069][ T6488] __x64_sys_modify_ldt+0xb1/0x170 [ 119.668084][ T6488] do_syscall_64+0x106/0xf80 [ 119.668103][ T6488] ? clear_bhb_loop+0x40/0x90 [ 119.668120][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.668134][ T6488] RIP: 0033:0x7f09c6f9c799 [ 119.668147][ T6488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.668161][ T6488] RSP: 002b:00007f09c7f10028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 119.668175][ T6488] RAX: ffffffffffffffda RBX: 00007f09c7215fa0 RCX: 00007f09c6f9c799 [ 119.668184][ T6488] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 119.668193][ T6488] RBP: 00007f09c7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.668201][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.668209][ T6488] R13: 00007f09c7216038 R14: 00007f09c7215fa0 R15: 00007ffcf64c7a38 [ 119.668229][ T6488] [ 120.698010][ T6500] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.738111][ T6105] syz.2.38 (6105) used greatest stack depth: 18032 bytes left [ 121.488037][ T6515] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 121.714186][ T6510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.717195][ T6510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.755415][ T6510] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.761696][ T6510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.761764][ T6510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.806267][ T6510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.854769][ T6510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.854851][ T6510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.905352][ T6510] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.931018][ T6510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.931540][ T6510] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.993093][ T6510] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.280476][ T6535] nvme_fcloop: unknown parameter or missing value '7' [ 122.711140][ T6543] syz.3.128 uses obsolete (PF_INET,SOCK_PACKET) [ 122.849485][ T30] audit: type=1804 audit(1773550278.966:5): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.128" name="/newroot/30/file0" dev="tmpfs" ino=171 res=1 errno=0 [ 123.099526][ T6406] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.243719][ T6553] vivid-007: ================= START STATUS ================= [ 123.279508][ T6553] vivid-007: Generate PTS: true [ 123.305409][ T6553] vivid-007: Generate SCR: true [ 123.336234][ T6553] tpg source WxH: 320x240 (Y'CbCr) [ 123.343829][ T6556] block2mtd: illegal erase size [ 123.360851][ T6553] tpg field: 1 [ 123.364238][ T6553] tpg crop: (0,0)/320x240 [ 123.394369][ T6553] tpg compose: (0,0)/320x240 [ 123.399563][ T6556] binder: 6551:6556 unknown command 9 [ 123.410920][ T6553] tpg colorspace: 8 [ 123.414733][ T6553] tpg transfer function: 0/0 [ 123.464461][ T6556] binder: 6551:6556 ioctl c0306201 0 returned -22 [ 123.502641][ T6553] tpg Y'CbCr encoding: 0/0 [ 123.523753][ T6553] tpg quantization: 0/0 [ 123.540525][ T6553] tpg RGB range: 0/2 [ 123.568136][ T6553] vivid-007: ================== END STATUS ================== [ 123.819476][ T6406] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.898831][ T6406] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.977688][ T6406] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.179185][ T6406] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.572291][ T6594] netlink: 326 bytes leftover after parsing attributes in process `syz.3.139'. [ 125.644155][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.652411][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.899284][ T6406] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.977573][ T6406] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.062108][ T6406] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.227336][ T6604] zswap: compressor ‰ xð5¡–ë–úš1@â not available [ 126.299663][ T6616] FAULT_INJECTION: forcing a failure. [ 126.299663][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 126.366233][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.1.144 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.366259][ T6616] Tainted: [L]=SOFTLOCKUP [ 126.366264][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.366273][ T6616] Call Trace: [ 126.366279][ T6616] [ 126.366285][ T6616] dump_stack_lvl+0x100/0x190 [ 126.366319][ T6616] should_fail_ex.cold+0x5/0xa [ 126.366337][ T6616] should_failslab+0xc2/0x120 [ 126.366353][ T6616] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 126.366375][ T6616] ? shmem_alloc_inode+0x25/0x50 [ 126.366393][ T6616] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 126.366410][ T6616] shmem_alloc_inode+0x25/0x50 [ 126.366426][ T6616] alloc_inode+0x68/0x250 [ 126.366445][ T6616] new_inode+0x22/0x1c0 [ 126.366464][ T6616] shmem_get_inode+0x212/0x1040 [ 126.366485][ T6616] ? __pfx_shmem_get_inode+0x10/0x10 [ 126.366504][ T6616] ? d_add+0x443/0x850 [ 126.366523][ T6616] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.366547][ T6616] shmem_mknod+0x20c/0x470 [ 126.366567][ T6616] ? __pfx_shmem_mknod+0x10/0x10 [ 126.366584][ T6616] ? bpf_lsm_inode_create+0x9/0x10 [ 126.366607][ T6616] ? __pfx_shmem_create+0x10/0x10 [ 126.366625][ T6616] lookup_open.isra.0+0xc47/0x11b0 [ 126.366650][ T6616] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 126.366674][ T6616] ? __pfx___might_resched+0x10/0x10 [ 126.366693][ T6616] ? mnt_get_write_access+0x52/0x2f0 [ 126.366722][ T6616] ? __pfx_down_write+0x10/0x10 [ 126.366744][ T6616] ? mnt_get_write_access+0x1e9/0x2f0 [ 126.366766][ T6616] path_openat+0x2291/0x31a0 [ 126.366788][ T6616] ? __pfx_path_openat+0x10/0x10 [ 126.366810][ T6616] do_file_open+0x20e/0x430 [ 126.366825][ T6616] ? __pfx_do_file_open+0x10/0x10 [ 126.366855][ T6616] ? alloc_fd+0x476/0x790 [ 126.366871][ T6616] ? do_getname+0x191/0x390 [ 126.366891][ T6616] do_sys_openat2+0x10d/0x1e0 [ 126.366911][ T6616] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.366931][ T6616] ? __fget_files+0x21f/0x3d0 [ 126.366948][ T6616] __x64_sys_openat+0x12d/0x210 [ 126.366967][ T6616] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.366993][ T6616] do_syscall_64+0x106/0xf80 [ 126.367012][ T6616] ? clear_bhb_loop+0x40/0x90 [ 126.367030][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.367044][ T6616] RIP: 0033:0x7f873a79c799 [ 126.367061][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.367075][ T6616] RSP: 002b:00007f873b6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.367090][ T6616] RAX: ffffffffffffffda RBX: 00007f873aa15fa0 RCX: 00007f873a79c799 [ 126.367100][ T6616] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 126.367108][ T6616] RBP: 00007f873a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 126.367117][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.367125][ T6616] R13: 00007f873aa16038 R14: 00007f873aa15fa0 R15: 00007ffc4dd200d8 [ 126.367146][ T6616] [ 127.296719][ T6406] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.627399][ T6616] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.977109][ T6406] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.063264][ T6406] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.139614][ T6406] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.300088][ T6702] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 131.732393][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.739067][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.462245][ T6749] sd 0:0:1:0: PR command failed: 1026 [ 133.467914][ T6748] sd 0:0:1:0: PR command failed: 1026 [ 133.473300][ T6748] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 133.480146][ T6749] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 133.497424][ T6748] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 133.511057][ T6749] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 133.613456][ T6748] vivid-007: ================= START STATUS ================= [ 133.621227][ T6748] vivid-007: Generate PTS: true [ 133.626166][ T6748] vivid-007: Generate SCR: true [ 133.631183][ T6748] tpg source WxH: 320x240 (Y'CbCr) [ 133.637457][ T6748] tpg field: 1 [ 133.640828][ T6748] tpg crop: (0,0)/320x240 [ 133.645133][ T6748] tpg compose: (0,0)/320x240 [ 133.687442][ T6748] tpg colorspace: 8 [ 133.717098][ T6748] tpg transfer function: 0/0 [ 133.725381][ T6748] tpg Y'CbCr encoding: 0/0 [ 133.733257][ T6748] tpg quantization: 0/0 [ 133.738801][ T6748] tpg RGB range: 0/2 [ 133.744341][ T6748] vivid-007: ================== END STATUS ================== [ 133.754005][ T6749] vivid-007: ================= START STATUS ================= [ 133.767067][ T6749] vivid-007: Generate PTS: true [ 133.783449][ T6749] vivid-007: Generate SCR: true [ 133.803720][ T6749] tpg source WxH: 320x240 (Y'CbCr) [ 133.813852][ T6749] tpg field: 1 [ 133.820177][ T6749] tpg crop: (0,0)/320x240 [ 133.868931][ T6749] tpg compose: (0,0)/320x240 [ 133.979375][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 133.996998][ T6749] tpg colorspace: 8 [ 134.008380][ T6749] tpg transfer function: 0/0 [ 134.018105][ T6749] tpg Y'CbCr encoding: 0/0 [ 134.023961][ T6749] tpg quantization: 0/0 [ 134.028435][ T6749] tpg RGB range: 0/2 [ 134.032896][ T6749] vivid-007: ================== END STATUS ================== [ 135.700066][ T6780] FAULT_INJECTION: forcing a failure. [ 135.700066][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 135.726352][ T6780] CPU: 1 UID: 0 PID: 6780 Comm: syz.0.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.726397][ T6780] Tainted: [L]=SOFTLOCKUP [ 135.726407][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.726423][ T6780] Call Trace: [ 135.726431][ T6780] [ 135.726442][ T6780] dump_stack_lvl+0x100/0x190 [ 135.726487][ T6780] should_fail_ex.cold+0x5/0xa [ 135.726521][ T6780] should_failslab+0xc2/0x120 [ 135.726549][ T6780] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 135.726589][ T6780] ? __d_alloc+0x34/0xa80 [ 135.726619][ T6780] ? lockdep_init_map_type+0x5c/0x250 [ 135.726661][ T6780] __d_alloc+0x34/0xa80 [ 135.726695][ T6780] d_alloc_pseudo+0x1c/0xc0 [ 135.726731][ T6780] alloc_file_pseudo+0xcf/0x230 [ 135.726767][ T6780] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 135.726801][ T6780] ? alloc_fd+0x476/0x790 [ 135.726834][ T6780] sock_alloc_file+0x50/0x210 [ 135.726876][ T6780] __sys_socket+0x1c0/0x260 [ 135.726906][ T6780] ? __pfx___sys_socket+0x10/0x10 [ 135.726945][ T6780] __x64_sys_socket+0x72/0xb0 [ 135.726971][ T6780] ? lockdep_hardirqs_on+0x78/0x100 [ 135.727008][ T6780] do_syscall_64+0x106/0xf80 [ 135.727043][ T6780] ? clear_bhb_loop+0x40/0x90 [ 135.727077][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.727105][ T6780] RIP: 0033:0x7f09c6f9c799 [ 135.727128][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.727154][ T6780] RSP: 002b:00007f09c7f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 135.727179][ T6780] RAX: ffffffffffffffda RBX: 00007f09c7215fa0 RCX: 00007f09c6f9c799 [ 135.727197][ T6780] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 135.727213][ T6780] RBP: 00007f09c7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 135.727230][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.727246][ T6780] R13: 00007f09c7216038 R14: 00007f09c7215fa0 R15: 00007ffcf64c7a38 [ 135.727290][ T6780] [ 136.237879][ T6803] binder: BINDER_SET_CONTEXT_MGR already set [ 136.258985][ T6803] binder: 6786:6803 ioctl 4018620d 9 returned -16 [ 136.380219][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 136.740441][ T6816] i2c i2c-0: new_device: Invalid device name [ 137.410620][ T6840] FAULT_INJECTION: forcing a failure. [ 137.410620][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 137.477013][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.0.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.477054][ T6840] Tainted: [L]=SOFTLOCKUP [ 137.477062][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.477084][ T6840] Call Trace: [ 137.477091][ T6840] [ 137.477100][ T6840] dump_stack_lvl+0x100/0x190 [ 137.477143][ T6840] should_fail_ex.cold+0x5/0xa [ 137.477173][ T6840] ? tomoyo_encode2+0xfb/0x3c0 [ 137.477203][ T6840] should_failslab+0xc2/0x120 [ 137.477229][ T6840] __kmalloc_noprof+0xe0/0x850 [ 137.477261][ T6840] ? d_absolute_path+0x136/0x1b0 [ 137.477301][ T6840] tomoyo_encode2+0xfb/0x3c0 [ 137.477337][ T6840] tomoyo_encode+0x29/0x50 [ 137.477367][ T6840] tomoyo_realpath_from_path+0x18c/0x690 [ 137.477407][ T6840] tomoyo_path_number_perm+0x23c/0x580 [ 137.477434][ T6840] ? tomoyo_path_number_perm+0x22e/0x580 [ 137.477464][ T6840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.477528][ T6840] ? find_held_lock+0x2b/0x80 [ 137.477551][ T6840] ? __fget_files+0x215/0x3d0 [ 137.477572][ T6840] ? hook_file_ioctl_common+0x146/0x410 [ 137.477608][ T6840] ? __fget_files+0x21f/0x3d0 [ 137.477641][ T6840] security_file_ioctl+0xd3/0x230 [ 137.477671][ T6840] __x64_sys_ioctl+0xb7/0x210 [ 137.477709][ T6840] do_syscall_64+0x106/0xf80 [ 137.477742][ T6840] ? clear_bhb_loop+0x40/0x90 [ 137.477774][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.477800][ T6840] RIP: 0033:0x7f09c6f9c799 [ 137.477820][ T6840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.477844][ T6840] RSP: 002b:00007f09c7f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.477868][ T6840] RAX: ffffffffffffffda RBX: 00007f09c7215fa0 RCX: 00007f09c6f9c799 [ 137.477885][ T6840] RDX: 0000000000000000 RSI: 00000000000007b3 RDI: 0000000000000003 [ 137.477900][ T6840] RBP: 00007f09c7f10090 R08: 0000000000000000 R09: 0000000000000000 [ 137.477915][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.477929][ T6840] R13: 00007f09c7216038 R14: 00007f09c7215fa0 R15: 00007ffcf64c7a38 [ 137.477965][ T6840] [ 137.478011][ T6840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.962271][ T6847] sd 0:0:1:0: PR command failed: 1026 [ 138.034978][ T6847] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 138.150359][ T6847] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 139.451185][ T6872] Invalid ELF header magic: != ELF [ 140.061951][ T6883] netlink: 326 bytes leftover after parsing attributes in process `syz.1.198'. [ 140.097906][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.105367][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.625720][ T6897] process 'syz.1.199' launched './file0' with NULL argv: empty string added [ 143.360911][ T6934] zswap: compressor not available [ 143.579454][ T6947] FAULT_INJECTION: forcing a failure. [ 143.579454][ T6947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.619662][ T6947] CPU: 1 UID: 0 PID: 6947 Comm: syz.2.204 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.619708][ T6947] Tainted: [L]=SOFTLOCKUP [ 143.619718][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.619734][ T6947] Call Trace: [ 143.619743][ T6947] [ 143.619754][ T6947] dump_stack_lvl+0x100/0x190 [ 143.619800][ T6947] should_fail_ex.cold+0x5/0xa [ 143.619834][ T6947] get_futex_key+0x1d2/0x1620 [ 143.619871][ T6947] ? __pfx_get_futex_key+0x10/0x10 [ 143.619918][ T6947] futex_wake+0xea/0x530 [ 143.619961][ T6947] ? __pfx_futex_wake+0x10/0x10 [ 143.620001][ T6947] ? find_held_lock+0x2b/0x80 [ 143.620028][ T6947] ? __do_sys_brk+0x43b/0xa80 [ 143.620057][ T6947] ? mas_prev+0x9b/0xf0 [ 143.620111][ T6947] do_futex+0x32b/0x350 [ 143.620147][ T6947] ? __pfx_do_futex+0x10/0x10 [ 143.620192][ T6947] __x64_sys_futex+0x34f/0x4d0 [ 143.620233][ T6947] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.620283][ T6947] do_syscall_64+0x106/0xf80 [ 143.620320][ T6947] ? clear_bhb_loop+0x40/0x90 [ 143.620358][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.620387][ T6947] RIP: 0033:0x7fc105b9c799 [ 143.620410][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.620437][ T6947] RSP: 002b:00007fc106a4a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.620464][ T6947] RAX: ffffffffffffffda RBX: 00007fc105e15fa8 RCX: 00007fc105b9c799 [ 143.620482][ T6947] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc105e15fac [ 143.620499][ T6947] RBP: 00007fc105e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 143.620516][ T6947] R10: 000055557acfe000 R11: 0000000000000246 R12: 0000000000000000 [ 143.620533][ T6947] R13: 00007fc105e16038 R14: 00007ffd4e3d6a80 R15: 00007ffd4e3d6b68 [ 143.620570][ T6947] [ 144.128911][ T6956] FAULT_INJECTION: forcing a failure. [ 144.128911][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 144.164870][ T6957] bond0: Unable to set down delay as MII monitoring is disabled [ 144.181792][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.1.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.181832][ T6956] Tainted: [L]=SOFTLOCKUP [ 144.181840][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.181854][ T6956] Call Trace: [ 144.181862][ T6956] [ 144.181871][ T6956] dump_stack_lvl+0x100/0x190 [ 144.181913][ T6956] should_fail_ex.cold+0x5/0xa [ 144.181944][ T6956] should_failslab+0xc2/0x120 [ 144.181971][ T6956] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 144.182005][ T6956] ? __pmd_alloc+0xbf/0x950 [ 144.182041][ T6956] __pmd_alloc+0xbf/0x950 [ 144.182072][ T6956] __handle_mm_fault+0xa99/0x2b60 [ 144.182117][ T6956] ? mt_find+0x45e/0x8e0 [ 144.182153][ T6956] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.182183][ T6956] ? __pfx_mt_find+0x10/0x10 [ 144.182238][ T6956] ? find_vma+0xbf/0x140 [ 144.182262][ T6956] ? __pfx_find_vma+0x10/0x10 [ 144.182290][ T6956] handle_mm_fault+0x36d/0xa20 [ 144.182330][ T6956] do_user_addr_fault+0x74c/0x12f0 [ 144.182378][ T6956] exc_page_fault+0x6f/0xd0 [ 144.182411][ T6956] asm_exc_page_fault+0x26/0x30 [ 144.182436][ T6956] RIP: 0010:__put_user_4+0xd/0x20 [ 144.182467][ T6956] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 144.182490][ T6956] RSP: 0018:ffffc90003997c98 EFLAGS: 00050246 [ 144.182511][ T6956] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 144.182525][ T6956] RDX: ffff8880324d9e80 RSI: ffffffff82560071 RDI: ffffffff8c1b0520 [ 144.182542][ T6956] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c5 [ 144.182556][ T6956] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff92000732f97 [ 144.182572][ T6956] R13: ffff88807a02ea80 R14: ffff888033b6f500 R15: 0000000000000003 [ 144.182594][ T6956] ? __might_fault+0x111/0x140 [ 144.182632][ T6956] vmci_host_unlocked_ioctl+0x173b/0x2070 [ 144.182674][ T6956] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 144.182713][ T6956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.182760][ T6956] ? do_vfs_ioctl+0x226/0x13e0 [ 144.182794][ T6956] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.182839][ T6956] ? find_held_lock+0x2b/0x80 [ 144.182861][ T6956] ? __fget_files+0x215/0x3d0 [ 144.182883][ T6956] ? hook_file_ioctl_common+0x146/0x410 [ 144.182919][ T6956] ? __fget_files+0x21f/0x3d0 [ 144.182948][ T6956] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 144.182988][ T6956] __x64_sys_ioctl+0x18e/0x210 [ 144.183024][ T6956] do_syscall_64+0x106/0xf80 [ 144.183055][ T6956] ? clear_bhb_loop+0x40/0x90 [ 144.183098][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.183123][ T6956] RIP: 0033:0x7f873a79c799 [ 144.183143][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.183166][ T6956] RSP: 002b:00007f873b6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.183188][ T6956] RAX: ffffffffffffffda RBX: 00007f873aa15fa0 RCX: 00007f873a79c799 [ 144.183205][ T6956] RDX: 0000000000000000 RSI: 00000000000007b3 RDI: 0000000000000003 [ 144.183219][ T6956] RBP: 00007f873b6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.183234][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.183248][ T6956] R13: 00007f873aa16038 R14: 00007f873aa15fa0 R15: 00007ffc4dd200d8 [ 144.183284][ T6956] [ 144.782376][ T6968] netlink: 9 bytes leftover after parsing attributes in process `syz.2.216'. [ 144.798683][ T30] audit: type=1804 audit(1773550300.896:6): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.216" name=2F6E6577726F6F742F33342F22050820 dev="tmpfs" ino=203 res=1 errno=0 [ 144.798745][ T30] audit: type=1800 audit(1773550300.896:7): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.216" name=22050820 dev="tmpfs" ino=203 res=0 errno=0 [ 145.019338][ T6963] zswap: compressor not available [ 145.038186][ T6981] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 145.157330][ T6984] Setting dangerous option i915.mitigations - tainting kernel [ 145.175682][ T6984] Bad "i915.mitigations=!h‹®E", 'h‹®E' is unknown [ 146.218634][ T6993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.226398][ T6993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.232880][ T6993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.239018][ T6993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.426359][ T7009] syz.3.226 (7009): /proc/7008/oom_adj is deprecated, please use /proc/7008/oom_score_adj instead. [ 146.451357][ T7007] netlink: 9 bytes leftover after parsing attributes in process `syz.0.225'. [ 146.500319][ T30] audit: type=1804 audit(1773550302.616:8): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.225" name=2F6E6577726F6F742F36342F22050820 dev="tmpfs" ino=349 res=1 errno=0 [ 146.565011][ T30] audit: type=1800 audit(1773550302.616:9): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name=22050820 dev="tmpfs" ino=349 res=0 errno=0 [ 146.637075][ T30] audit: type=1800 audit(1773550302.716:10): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.228" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 146.664782][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 146.679915][ T7018] FAULT_INJECTION: forcing a failure. [ 146.679915][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 146.703939][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 146.709554][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.3.229 Tainted: G U L syzkaller #0 PREEMPT(full) [ 146.709599][ T7018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 146.709610][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.709626][ T7018] Call Trace: [ 146.709635][ T7018] [ 146.709645][ T7018] dump_stack_lvl+0x100/0x190 [ 146.709690][ T7018] should_fail_ex.cold+0x5/0xa [ 146.709722][ T7018] should_failslab+0xc2/0x120 [ 146.709750][ T7018] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 146.709790][ T7018] ? alloc_inode+0x183/0x250 [ 146.709823][ T7018] ? stashed_dentry_get+0x10a/0x2c0 [ 146.709851][ T7018] ? stashed_dentry_get+0x10a/0x2c0 [ 146.709884][ T7018] alloc_inode+0x183/0x250 [ 146.709918][ T7018] path_from_stashed+0x25b/0x750 [ 146.709954][ T7018] pidfs_alloc_file+0xf8/0x290 [ 146.709994][ T7018] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 146.710044][ T7018] pidfd_prepare+0x123/0x200 [ 146.710077][ T7018] __x64_sys_pidfd_open+0x105/0x1a0 [ 146.710113][ T7018] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 146.710159][ T7018] do_syscall_64+0x106/0xf80 [ 146.710193][ T7018] ? clear_bhb_loop+0x40/0x90 [ 146.710226][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.710254][ T7018] RIP: 0033:0x7fc6b739c799 [ 146.710275][ T7018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.710301][ T7018] RSP: 002b:00007fc6b8225028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 146.710342][ T7018] RAX: ffffffffffffffda RBX: 00007fc6b7615fa0 RCX: 00007fc6b739c799 [ 146.710361][ T7018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 146.710377][ T7018] RBP: 00007fc6b7432c99 R08: 0000000000000000 R09: 0000000000000000 [ 146.710393][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.710409][ T7018] R13: 00007fc6b7616038 R14: 00007fc6b7615fa0 R15: 00007ffeb2254778 [ 146.710446][ T7018] [ 147.107870][ T7027] ======================================================= [ 147.107870][ T7027] WARNING: The mand mount option has been deprecated and [ 147.107870][ T7027] and is ignored by this kernel. Remove the mand [ 147.107870][ T7027] option from the mount to silence this warning. [ 147.107870][ T7027] ======================================================= [ 147.148819][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'. [ 147.587000][ T6406] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.826813][ T7027] kexec: Could not allocate control_code_buffer [ 148.071031][ T6406] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 148.263881][ T7052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.299594][ T6406] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.305730][ T6406] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.311799][ T6406] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.333820][ T7072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.238'. [ 149.359911][ T30] audit: type=1804 audit(1773550305.476:11): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.238" name=2F6E6577726F6F742F35382F22050820 dev="tmpfs" ino=321 res=1 errno=0 [ 149.385763][ T30] audit: type=1800 audit(1773550305.506:12): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.238" name=22050820 dev="tmpfs" ino=321 res=0 errno=0 [ 149.716501][ T7086] raw_sendmsg: syz.1.242 forgot to set AF_INET. Fix it! [ 151.945344][ T7166] smpboot: CPU 1 is now offline [ 152.093507][ T7166] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 152.135880][ T7166] ------------[ cut here ]------------ [ 152.142448][ T7166] DEAD callback error for CPU1 [ 152.142460][ T7166] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.1.250/7166 [ 152.156111][ T7166] Modules linked in: [ 152.160166][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.1.250 Tainted: G U L syzkaller #0 PREEMPT(full) [ 152.170986][ T7166] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 152.176159][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.186265][ T7166] RIP: 0010:_cpu_down+0x75c/0x1020 [ 152.191422][ T7166] Code: 5c 7a f6 89 ee bf 91 00 00 00 e8 9f 57 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 de 5c 7a f6 48 8d 3d c7 f3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 bd 5c 7a [ 152.211629][ T7166] RSP: 0018:ffffc900068f7b18 EFLAGS: 00010293 [ 152.218615][ T7166] RAX: 0000000000000000 RBX: ffff8880b85242e0 RCX: ffffffff8b8dba31 [ 152.227497][ T7166] RDX: ffff888029090000 RSI: 0000000000000001 RDI: ffffffff90dcae10 [ 152.235470][ T7166] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 152.244137][ T7166] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 152.252186][ T7166] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 152.260385][ T7166] FS: 00007f873b6956c0(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 152.269429][ T7166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.276011][ T7166] CR2: 00007fce51d98020 CR3: 000000006e7ca000 CR4: 00000000003526f0 [ 152.284037][ T7166] Call Trace: [ 152.287325][ T7166] [ 152.290248][ T7166] cpuhp_smt_disable+0x123/0x220 [ 152.295181][ T7166] control_store+0x1a2/0x320 [ 152.300089][ T7166] ? __pfx_control_store+0x10/0x10 [ 152.305219][ T7166] ? find_held_lock+0x2b/0x80 [ 152.309910][ T7166] ? sysfs_file_kobj+0xe4/0x290 [ 152.314746][ T7166] ? sysfs_file_kobj+0xe4/0x290 [ 152.319699][ T7166] ? __pfx_control_store+0x10/0x10 [ 152.324804][ T7166] dev_attr_store+0x58/0x80 [ 152.330171][ T7166] ? __pfx_dev_attr_store+0x10/0x10 [ 152.335356][ T7166] sysfs_kf_write+0xf2/0x150 [ 152.340533][ T7166] kernfs_fop_write_iter+0x3e0/0x5f0 [ 152.345807][ T7166] ? __pfx_sysfs_kf_write+0x10/0x10 [ 152.351060][ T7166] vfs_write+0x6ac/0x1070 [ 152.355382][ T7166] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.361238][ T7166] ? __pfx_vfs_write+0x10/0x10 [ 152.366067][ T7166] ksys_write+0x12a/0x250 [ 152.370399][ T7166] ? __pfx_ksys_write+0x10/0x10 [ 152.375236][ T7166] do_syscall_64+0x106/0xf80 [ 152.379854][ T7166] ? clear_bhb_loop+0x40/0x90 [ 152.384518][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.390417][ T7166] RIP: 0033:0x7f873a79c799 [ 152.394814][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.414463][ T7166] RSP: 002b:00007f873b695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.422894][ T7166] RAX: ffffffffffffffda RBX: 00007f873aa16090 RCX: 00007f873a79c799 [ 152.431796][ T7166] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 152.440352][ T7166] RBP: 00007f873a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 152.448348][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.456300][ T7166] R13: 00007f873aa16128 R14: 00007f873aa16090 R15: 00007ffc4dd200d8 [ 152.464300][ T7166] [ 152.467342][ T7166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.474613][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.1.250 Tainted: G U L syzkaller #0 PREEMPT(full) [ 152.485360][ T7166] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 152.490536][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.500575][ T7166] Call Trace: [ 152.503843][ T7166] [ 152.506856][ T7166] dump_stack_lvl+0x100/0x190 [ 152.511541][ T7166] vpanic+0x552/0x970 [ 152.515520][ T7166] ? __pfx_vpanic+0x10/0x10 [ 152.520035][ T7166] panic+0xd1/0xe0 [ 152.523748][ T7166] ? __pfx_panic+0x10/0x10 [ 152.528155][ T7166] ? check_panic_on_warn+0x1f/0x90 [ 152.533254][ T7166] check_panic_on_warn.cold+0x19/0x34 [ 152.538611][ T7166] ? _cpu_down+0x759/0x1020 [ 152.543097][ T7166] __warn.cold+0x191/0x348 [ 152.547499][ T7166] __report_bug+0x296/0x3d0 [ 152.551985][ T7166] ? _cpu_down+0x759/0x1020 [ 152.556468][ T7166] ? __pfx___report_bug+0x10/0x10 [ 152.561488][ T7166] ? __pfx_try_to_wake_up+0x10/0x10 [ 152.566666][ T7166] ? _cpu_down+0x741/0x1020 [ 152.571159][ T7166] report_bug_entry+0xe1/0x290 [ 152.575907][ T7166] ? _cpu_down+0x75c/0x1020 [ 152.580389][ T7166] handle_bug+0x1cd/0x2a0 [ 152.584713][ T7166] exc_invalid_op+0x17/0x50 [ 152.589202][ T7166] asm_exc_invalid_op+0x1a/0x20 [ 152.594036][ T7166] RIP: 0010:_cpu_down+0x75c/0x1020 [ 152.599128][ T7166] Code: 5c 7a f6 89 ee bf 91 00 00 00 e8 9f 57 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 de 5c 7a f6 48 8d 3d c7 f3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 bd 5c 7a [ 152.618729][ T7166] RSP: 0018:ffffc900068f7b18 EFLAGS: 00010293 [ 152.624794][ T7166] RAX: 0000000000000000 RBX: ffff8880b85242e0 RCX: ffffffff8b8dba31 [ 152.632832][ T7166] RDX: ffff888029090000 RSI: 0000000000000001 RDI: ffffffff90dcae10 [ 152.640804][ T7166] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 152.648765][ T7166] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 152.656713][ T7166] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 152.664667][ T7166] ? _cpu_down+0x741/0x1020 [ 152.669165][ T7166] ? _cpu_down+0x752/0x1020 [ 152.673653][ T7166] cpuhp_smt_disable+0x123/0x220 [ 152.678603][ T7166] control_store+0x1a2/0x320 [ 152.683180][ T7166] ? __pfx_control_store+0x10/0x10 [ 152.688274][ T7166] ? find_held_lock+0x2b/0x80 [ 152.692930][ T7166] ? sysfs_file_kobj+0xe4/0x290 [ 152.697760][ T7166] ? sysfs_file_kobj+0xe4/0x290 [ 152.702592][ T7166] ? __pfx_control_store+0x10/0x10 [ 152.707683][ T7166] dev_attr_store+0x58/0x80 [ 152.712166][ T7166] ? __pfx_dev_attr_store+0x10/0x10 [ 152.717346][ T7166] sysfs_kf_write+0xf2/0x150 [ 152.721919][ T7166] kernfs_fop_write_iter+0x3e0/0x5f0 [ 152.727184][ T7166] ? __pfx_sysfs_kf_write+0x10/0x10 [ 152.732389][ T7166] vfs_write+0x6ac/0x1070 [ 152.736729][ T7166] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 152.742531][ T7166] ? __pfx_vfs_write+0x10/0x10 [ 152.747300][ T7166] ksys_write+0x12a/0x250 [ 152.751618][ T7166] ? __pfx_ksys_write+0x10/0x10 [ 152.756455][ T7166] do_syscall_64+0x106/0xf80 [ 152.761043][ T7166] ? clear_bhb_loop+0x40/0x90 [ 152.765716][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.771593][ T7166] RIP: 0033:0x7f873a79c799 [ 152.775993][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.795684][ T7166] RSP: 002b:00007f873b695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.804090][ T7166] RAX: ffffffffffffffda RBX: 00007f873aa16090 RCX: 00007f873a79c799 [ 152.812041][ T7166] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009 [ 152.819991][ T7166] RBP: 00007f873a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 152.827941][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.835890][ T7166] R13: 00007f873aa16128 R14: 00007f873aa16090 R15: 00007ffc4dd200d8 [ 152.843850][ T7166] [ 152.847021][ T7166] Kernel Offset: disabled [ 152.851349][ T7166] Rebooting in 86400 seconds..