last executing test programs: 6.750546784s ago: executing program 3 (id=667): r0 = socket(0xa, 0x2, 0x73) mmap$auto(0xfffffffffffffc, 0xd8f0, 0x7, 0xeb1, r0, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb3, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) 5.269409166s ago: executing program 3 (id=669): recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180)="2512683702c78aa366adde5483233ba62b5f1b0aa86d8137bc9e30cb56cbc69805ea2abbfb20dbed8e619f86d21290031ad3ff89dccea2abedcc8754725987450ef20d0111117f0b641631eecdaa6e7b0de194b5487fa6496ac851c8ba202961d0048e96c98298407192a22aab433167b74e190835b5c5f049a17f4e1b0e2c0bdb7c72dd3279a7eb42e48f26ecf8f7daee9d38c811405c0fe91bfeca6449723bebfc04628d49189a73f80d8a642a2306139006be", 0x100, 0xc0a, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x805aa, 0x0, 0x2e, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="0000c74f1bb724785a9500"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0x2, 0x3, 0x9) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) seccomp$auto(0x1, 0x2e, 0x0) r2 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3) 4.904482283s ago: executing program 3 (id=671): mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0x1e, 0x4, 0x0) (async, rerun: 32) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0x2, 0x6) (async, rerun: 64) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async, rerun: 64) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x28044004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r2 = socket(0x2, 0x3, 0x100) (async) socket(0x8, 0x2, 0x3ff) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = io_uring_setup$auto(0x6, 0x0) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) (rerun: 64) r4 = socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) setsockopt$auto_SO_TIMESTAMPNS_OLD(r4, 0x2, 0x23, &(0x7f0000000000)='\x00', 0x8) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_IPVS_CMD_SET_DEST(r3, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x1394, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1210, 0x1, 0x0, 0x1, [@nested={0x12f, 0x11b, 0x0, 0x1, [@generic="baaacfddfa7d00ea8d66405bb811da78e4c32d9cb37060208295ad972290df39770fa04a15746441b15579a660a5814279d6c2a500f87712346522b5dda19e0d823b57820555ac372fa188aeac0f2ac83c9d87758ce9a3f280458b3e0f351b4f02999115670ff1e2a89ee40705bdfb966215bfd6139b29b1acf60c2f035cb0aba9420295c4fc046544aad94e7504968cbf15b5507d5c8a5198a4cdd91434980f792ef2d7c00242225277f8b1ac240f977a8d2b7daf02ca724ef2", @typed={0x8, 0x63, 0x0, 0x0, @uid}, @nested={0x4, 0xfd}, @generic="84d77e3dc771c8e7a4", @typed={0x53, 0x9e, 0x0, 0x0, @binary="7e16a2260dd59775059ce69338c381bed6463beafd12247edc1b1b138bda522b2cb65309aa964f4c59ef396291366ac04a07b3fac9a401ba94f5dd225e350e500cff85381f97ad7bb5673bd26d5d16"}, @typed={0x8, 0x13e, 0x0, 0x0, @fd=r2}]}, @nested={0x10db, 0x26, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @u32=0x3}, @generic="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", @generic="a9fab855f6d0b5d0b5be5591007c4ca0e1c0c6e0f0ca183f4f36fb276d59bdfdc098d3f2f1a2f3358a419c20be45f1b601bdf6c30224461f8cf60f8e98f3bee506e9c4a47b5b1910292b82d62d72fbb336d2b443d12bf131e4421b8865db9b0e3adc8390f4c608b53a4f1e50e1ac0747f120227c0cd73b2d4c8531f6efeb66eb783398c30a7bbdcd9c81f29820cecfe61b27ccba5cefede47abdcf4a009cfc0178859e7bc87a19215164f4b52d0a5316edcefc723d93546446c9c3b062027358a72f42ec556566a8286c54d2c8cb6d"]}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2a, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DEST={0x15a, 0x2, 0x0, 0x1, [@generic="1cd45130cc609bc4ab9fc4fdb5a8c9e23627b8b0d47cda5cab248a6d04168195fab2", @nested={0x131, 0x79, 0x0, 0x1, [@typed={0x7, 0x4f, 0x0, 0x0, @binary="ee501e"}, @generic="8c53222ea81e876e08bfe15fdcedefe3ef55c58a0da093475a623629473197285e44911decb77732a10b62d957be2a0d20bd20a4cc927d92c5cd2a51f3109da3900fc72852726b6998a9c42131d85d19993ba2721400726d9633e5b2b8a28a5a3058bbb2a6087d7db5f1134da3dfdcb7d689f53e9a832ec2a0919b6417a2ec90c4e94fd6495c41ce2f0518086c21489f53c1bbbdfef3ad20107ea6f41d40842a47f32fe8dc271e6579e1191f15b47878cff8426f0fa93cbe0d41988c42feb0ea7c910e4db7b8c26a4d1e4b00185e8d9a0954f5497cbe72b69510a3a2255fd6a0c38d80a5b0d7ea06d2bdd7", @nested={0x4, 0x39}, @generic="36b4d3715c3acbe08684e530ae15b3ae6821771d3fbe0c60024b27af59a206c9db7201f1e32574487b14", @typed={0x4, 0xc}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x1}]}]}]}, 0x1394}, 0x1, 0x0, 0x0, 0x40000}, 0x20000054) (async) socket(0x23, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 4.620535994s ago: executing program 2 (id=672): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba941b53", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = memfd_create$auto(0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x10002}, 0x3) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/033/001\x00', 0x280202, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x8, 0xa, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0xc44, 0x1000000000003, 0xfffffffffffffffc, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, &(0x7f0000000040)=0x6) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000080)={"2d524f66f36a99b9fb9531e81d335ae562954b8f28ec13a609d2a7a474a245c4", 0x7, 0xffff, 0x8, 0x8e0, 0xffffffffffffffff, r3}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 4.333256592s ago: executing program 0 (id=673): mmap$auto(0x8000000000000001, 0x3, 0x8000df, 0x1000eb4, 0x401, 0x2) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) 4.196118034s ago: executing program 2 (id=674): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x6024c0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x4020565a, r0) sysfs$auto(0x2, 0x100000000000030, 0x0) (async) sysfs$auto(0x2, 0x100000000000030, 0x0) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/boot_params/version\x00', 0x4000, 0x0) (async) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/boot_params/version\x00', 0x4000, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) (async) r2 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r2, 0x0, 0x4) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x101302, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) 3.972585929s ago: executing program 0 (id=675): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat$auto(&(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00') (async) symlinkat$auto(&(0x7f0000000200)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00') r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, 0x0, 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) mmap$auto(0x40000000000, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) (async) socket(0x11, 0x2, 0x300) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x9f, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) socket(0x11, 0x3, 0x9) (async) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae60100000000000000ea8a549f1ce466a26be8b0b50eff40c66d6bf0c981a0db5edba528b493edda4a033655e89e1afc06676facc65afab54cda45f2ad3924d156aefe5c4440066fd4ff81c0775ed28c48a9c3320b51e47130f5ee7876acc93e3cbc4466a3c59d17c14b673b133ed7f9d375d958b67da4f8a518498bcf707df76d56b5ccdaa094c3928143aece640a3da7a02e370ba93d245db9", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) (async) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae60100000000000000ea8a549f1ce466a26be8b0b50eff40c66d6bf0c981a0db5edba528b493edda4a033655e89e1afc06676facc65afab54cda45f2ad3924d156aefe5c4440066fd4ff81c0775ed28c48a9c3320b51e47130f5ee7876acc93e3cbc4466a3c59d17c14b673b133ed7f9d375d958b67da4f8a518498bcf707df76d56b5ccdaa094c3928143aece640a3da7a02e370ba93d245db9", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) ioctl$auto_SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000240)) (async) ioctl$auto_SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)="522e68880b66e736e04b92f674ada7760ea80e37bb469357500e017f29e7eb2c5ebfee7548efd523ae6199e3f6caa510b91366e1748c71e2d79dbbb4e58f96d122c3685ce6b3fda30b6a3d7de0adf1b3094034bd55236900b4729261d5600a6434b9ba8948be7ac19251ce944fc54c9f7ac11b4e82d8291daf1f9f58cd41df5c0530fbcfcb3b56df2bf719c93f18577a1173804afe51a9d1dcac", 0xff}, 0x5, 0x0, 0x4) r4 = socket(0x2, 0x1, 0x106) setsockopt$auto(r4, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) getsockopt$auto(r4, 0x6, 0x6, &(0x7f0000000000)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', &(0x7f00000000c0)=0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 3.747479397s ago: executing program 3 (id=677): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7ff) read$auto(r0, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6051) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x4994, 0xfffffffffffffffa, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d0e, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x404000, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x779300, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xfe, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100008004faf9dbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500300000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x140000e4) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="38030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7f6e76209b41a2cdbdd2942174d9fc5835a09c537b0a3f2d11ff03b8d02738bbc6d93d9b68cb7fe0911f380c7f2338f6918b2d31dada0f28e41cd7d59fd0cd5cd0d00fc7e3f930cfece3ee131afd3c54c6a5b8c8ad1d08001177dee68ea112d33d7de621ba7d4d8f1eac82"], 0x338}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c008090) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x9a28) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x2100, 0x0) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x9) unshare$auto(0x6c000000) 3.638004035s ago: executing program 1 (id=678): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port7/power/control\x00', 0x7d5bc2, 0x0) write$auto(r0, &(0x7f0000000080)='+\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) r1 = socket(0x2, 0x1, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x101002, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4004884) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) unshare$auto(0x4000007c) mmap$auto(0x1, 0x400007, 0xdf, 0x9b70, 0xffffffffffffffff, 0x6800000000000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) io_uring_setup$auto(0x55, &(0x7f0000000080)={0x6, 0x7, 0xfffffffe, 0x8, 0x7fff, 0x3d4f, r2, [0x58a2, 0x3], {0x5, 0x10004, 0xb, 0x2de, 0x508, 0x4001, 0x101, 0x6, 0x8}, {0xfff7ffff, 0xfd1, 0x19ffffff, 0x805, 0x9, 0xffff0000, 0x76c5, 0x10008}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) madvise$auto(0x3ff, 0x6, 0xc) r5 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0) pwrite64$auto(r5, 0x0, 0x2, 0xfffd) set_mempolicy$auto(0xc005, 0x0, 0x3) r6 = open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) sendfile$auto(r6, r6, 0x0, 0x7ffff000) sendfile$auto(r6, r5, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x110004, 0x0) r7 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r7, 0x7ff, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.628739995s ago: executing program 2 (id=679): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) (async) io_uring_setup$auto(0x6, 0x0) (async) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) (async) openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x410000, 0x0) (async) r1 = socket(0x11, 0x3, 0x6) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000180), 0x5ea}, 0x7, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) r2 = socket(0x2, 0x1, 0x106) (async) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xc02}, 0x1}, 0x10a, 0x6, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(0x0, r2) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 2.167327172s ago: executing program 2 (id=680): socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x3ff) socket(0x28, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/ifb1/queues/tx-0/byte_queue_limits/stall_max\x00', 0x1a1802, 0x0) socket(0x10, 0x2, 0x0) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x4) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) epoll_create$auto(0x4) r0 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x109000, 0x0) io_uring_setup$auto(0x59, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_MODES={0x4}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c65ec00) bind$auto(r0, &(0x7f0000000080)=@xdp={0x2c, 0x1, r3, 0x14}, 0x3) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r6, 0xc038563c, r1) 2.142616325s ago: executing program 0 (id=681): setitimer$auto(0x1, &(0x7f0000000000)={{0x802, 0x1000007f}, {0x800100004, 0x3}}, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) (async) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0)="42fec9aa31b66eeefac2fa60d1fb88f54548003b7ea1b730954eea5613ea2c991197cef4c972974fea195fa735dbb4db8ec7a87ccbadb565a60147deda00070bda661a4609c0f74ac8a88ece34d6d2bcf939e269344cb881230882297ea4c46c226ba9ea15a2606931f3ccd936c6a05812020b164d3aeeb7e41766971de14b88f5f56336d15125a9f0978f7fc4d549287e298b9a8bfc85342989420cc78565af54dee0e32c67345f26d2e064c3bd11d3ca12be459dedb7991764b77f153773c429f4841305070206a95e84f6a4dbd0426d314120d800132ff91749e5bbfce96473b60945982a3a5fc60885eaf0c24404343b18d1af8d7c451d3ce3d22f60ac9ed10cbd63feb07c74f4fbb3e467c761e25e626056d02a4e5105d457db53022bc771bbcbbbcf522788bbc76c33802a3475225fca29b3075ccbeb1b123cd5e1eea6bd226cb24c1adcd0833571a40bd0f15c5b3960255061069275ba3760bb07322c8ceb62c4c40d326bc493a1dafc33bc56b7432b63cb25384aed509799dc119932afe0c435a4ceebc1c4833aaa201e1d82bd632a6f64bba84464c316467abd94c4e792f3b9acc5af052854d45a9036db563e9d1bd17d22f53e0ec810f5540fc5de835739ed5d3c8c6842457b0ea9681648baa98a8ee61eedfb01be401e8071bff115baf5a47e0d883e5c11a2b5688d0fd0deb2a5b26edbbd55952163d67b5998253c341b4543cf4a477f4e7f97c77c326c4cb7870e9d497e08a1e5733d1e912ab4a91622d7d52764448aef0a562a9ab1f0d44a6623b0e15a9ef23f784fb28987f8e263ea53ea472748fd7b8afeec97427906c72154e6cf7c6270a105e1059b50345a24e491dcbe500154701b085c43fc78748c27e0667b3ec7baaeeab5c429ccceee8637f5d5627522644df7cd7590ed28fa585c8fe2593391c30b6215ab2829f7e8d8a9332f5c0570ecf3924b1c4c798dfecafc27056547d30daa7d52ff55a3fdc1e7873174de8b2731dba147bbf568d8e08e6d87274bf3707fa9dd99f0f5f00b3e1ee05ce00cc8de92913d05f3c9993e1aa05581a00442b2c89f1d693acd3d64afbe95d119a23be327768627938d2d6237fb7ab932fa6862ab37cd94cf3a405c61d1ca8d15a04f286626dc1818eed497e5ea37fad7e8575d5bd4d4c65213fe24a6dd90ff4deb4121a6782a6912f68ebb34fa3599e0678c4484e04db95f98361485c42a20046244705d23866da8667eae96bb7ab4bc2a0f55d6ab4b6e0b880a6d333f48f6328d03f98e26e26adff99eef2db9afebfc312e613e7689cdaf6337aa4a670aa9aabf2ab6c634b06ee59c84843148fdfa9536ee7a2a24544d524f790678608fc03537d00b66af857986bbab5a40ed4b5357ac297977c9747d58552817b8a5c41255130cb8f4ba53fdb70d77ae6f688d451788502da2a9d7b8c3888e81d10d5a024650096b069cfaaea016247b01ca9012f40fe049ab386bdb37596bb0ba71e8d7f5bf62aba7274577fde683fa06ec60b1ac029b51e6a7455c8ad8dfe952db8fb5086027b36ffe893d5361e4dcd74c8ffedb0a40d6420a4ea6c2aa1bcbf04f4078692bae0c9203771535920482cb0dd2c869836ae556d160a5fed31b27c5b89250dc206f9a45e0017509bd79dfb89a63f8d88c2bf639077694f466f28152180c9a32237a2bdcc8757564f1dd3e726cbbf07826219a58cc15b50935d0dfa915dadab8e53743eb462db0914fc8ed939f40f53c73ff8bb951644aa2538a99e078e220b5cccf8dc66f96ea0e467e236f1534a66b89a4d0c457cffe26e1046086199cbca11df83c2134f4f4053c158c4bce3460678e23171683eff9034314e66389fc04f17f3612244c7f26d09f314c3e28f81022e930e25484c0356ceef2c218e64840bd74e02ee224ac39262416fa8aa75d30ba4b13ef528d67c40b91c6939b6c1ea9a116ee684cc931e233ef0d53c66a087373d18d5a436098474f76ee6654969ae768b8abd10c32ea7993d26b0112fcb36a39337eca6f1aa6548908e120bc4999b1e419aed26e6370888a8322267b88b2ec02bf68fe0b2981d40d9a0663029d8cc053bc977fbdde39be1c87e4669a24c99604c83b0dee36b438389cbcfc2ddb967383406c8db19cbc43434142b8529064de52e42d0d03503c454d46f1c88a7abedf66953f6b0474c5b59baa6536a9841331f290972361758147447e438decdb8e699838998ac79cfd75b5af9d55d3aedc53b01af8addb99cad87cf9b7e9f1023a4e232fa1259ca7827742e49c612aa62b60c80ea282d8badc6fc1b4a5e707e5aaa481c4b6198b4c3b08db2f0dc75e2b7f12b8815f9aa0b7a4683b9f9fc7c4af41fd32d57d348189d8952dd370f552b44746ea04099278518f745173bcbddda2b2bbcb60e7eec8f958fab66ee5b96c4c4774bc24f0f0dcbd093333a64e1275bc011b17b1ccfb02833eb766121dd170d565f543bda2ee511d83379138afaa1f2d74a6b7746380edf0acbdf6b17b759691d46e00af36a6942730b1aa36c295d05e2b9702cd0f0ad678c5a0372a846435456b3606883098371a29cfea6b8a0f4b845ecc172ad383698e2513970c6cd62d2dd0cadd97c453dc2ce6a0c93f497eceb6cf921f80a7bf1c7283d91ffa1c27ff26a9a6d7c8ff657c6ca6a8584744227ac762cc7dc04ac3b6cdafe2acd640f1b53c451232a5dbcd9d7a453f4bef1671515a2f7091ee9484e720de74086debdef0bdc064e763b7d1b942be44841f9589db9af405bbca33ecb6258ab699686d47653ad26d07de4f3a7b30bd638c7c0180258af6e88aaa8c3dba0d9f3d2340f9157c7e2f74eca50b0f5b9bcb8e2d557871680abcceaeef8faf213b96170afc39c2a7d297adda363fd29b944436c6d7d238be3042b888ae81a50a05b0bb34cd5c3e1d824b2d566acb1b33574dd33a3d8d8701c105bef39e07ed7670d94657cfd22433151a63945337c1b91ec75eaf53099ab1c3a0530a4a2575ef996f2ae10bf79c0f329522764d8dab0f58b8d11f10c2a7a1bd050f3c173404d942214153be7deea68df8555d15e4ac393814f360ef632dcc44a6dd4bcb30a2699af0fbeee944ea1f2dade08b8a9c701db2f95a6ebf57dce12a0be493888854793bba01282080c02f06fbbc135d4d0ba793954b6a3e50752c0fde5331bef7db86b739989399435faba49dae6aea452df45e76dbdcc308bec5be7b624a69da8d993331f8629e4acb25b050a7d3b8810700b0b0e88bc6ba16655a8e620dc12408ccf38efaa4ab913e8406a5fedc789f5e621338e36183e0d2fa1f9d63de2266ce9f720fb3e6580ffe5c67b6497c968c590bfaa86b7e0779f152a7bbd2d7f8d425b266dcbd102ac9a02c8631a10241f0ba9d204a1a60a4a0c7fb3ac998ef86576423d5f9effca474f8ec0df40c986caf6b1e03120cadddcdc9720559108030984d3a5e4bab00cdc6915a9d0f83750f1f0cce4f3ab93a376712a0eebfcd60324ab9e2a08b18548ae656028ad1e2ad92ee05c01fe413496d43fb8792d3787d5e2103d856754221ab3006b1722110f90c8b9555ccf68488a90a94b9db152e9dff6e2c4dd2d27e48c7a1f97b862263c5023b93cf5778b518f827266619b50b7107a4382d8b664950f90e1f5137c795415dfba03889561b76a62bb6c97aef30a969b5596c02515b245a995c502a938a08e932c1696a013c095ec97808193664390b45ad94a212b368b8ca21c3e954960916cb6fbaf69ca295e26387d06e3fb94f84e7fabf4ddb7fe7bce3be4a46672002baa28bbb71a9342d8a2b76b9f2cce7aa9f5a26dcf8496adb7f0200de8d68ee64b7f1526c02bdfaff09687754fbf01acd9a840fa63e791cc431d476453610361beede59129a72aa2917318813089a0ef9e197c847e26138d1c75cea8980e8308d610a5a3ced4ad63185d8fd4b57506cdc29aff42f46c7e56dcc932ac267bba1b93a6f8bde472d413da0a38224866ab5ec4e57b4cf8959a1d699b8572c61d6c969bf124ccbc2d7d188a16e3a2e2f8bf853393882577122eab4ba05d75b6629591aef96aab7e2de2d1e2c185e1bcb8cdef4e276cbf59b6364db542aef2859c00a1cba13465e448a9e7a22cf2f7b514c62572e1e976248f1414d2621e88d766d1c32efe24a0ef7303d03c78ededde8aa4543688941fecb248f8c3d8887dd703c497e37f965208563c871557054a89a5f3fe638dda4b848bfce25c8aa94fe859cf35cbe54212ff059dac165f9cfb10fceffbc7252022f0b8a6e4f9d0f1e950815327aa84cb5cc5aee0e159f90ceefe391686025af45b987994ba3f716339a5adac57bfc367e446aff021cd5df341982341cd403f3522c6a5f81cb24f6a60df5681748da5317d4b39ca30f19943fea00d953278bc3eba24004f97cb8a720ac50408404dece8e4f4df6aa94bf4fbfb27195c758891ce47d8a6127f4c02693e43d2f52e0307645236e507b5c037a9009dd653211c1f240d2c58ddb978842206742e78ebf53ce5720b96468e779dcea627ca61785e8494f4c5f5354989c24de087173b32f752af3ac00082eee56b590a014d57555c3e48d073338cb803c76343efc306956b2a8979b55eb55b088507b033d3fec7843b8146e0b704196a42444161830d1ba5ffe0e73d83fb8f87a13c81162f0bfd2d5ce29ae15c4c98d18a06f5b57d1f52052771b47768298540c6f6b2e8b75a860ff0bdcbdbe87c433f04c256a29b84f0bb25d05ed9f148898fdac0aaea70362f8dfa39afa36eb6e6a6b041dc0d33167b532e6ffd8ed17367f55b6f277fcbc1dadb4d3fed41732647728ea11276d124f01c815fb2baacb9fc798424a1a4ff31ba037e546cf7c0f2614145ba7f1dfa6cff1240dbe03a996167d06c37150f33a3ac7f8d626c943a41923ec5038518cd6c1071c9300312b8d7281b0fb40aa954f6895a641208e0f64e3821845ddea611ef230680a42d292d1b3ee4f6bf1858b5f889774490be08c96387bd270def1705972dc5b8ec60c9f4873092583012cc05e733a44a0fdda9867cbf68102f1394eab6ef6cb3aefae11de351efe6d4809bb97b82efef630640744a761ffa06ef1cb7fd266b5213acc169849292dc0fd35382975c25db48c10770d6326a81c4213c3d97e0a45956ff4e844010dfb39f4", 0x6c8, &(0x7f00000012c0)={0x0, 0x3}, 0x9, &(0x7f0000001300)="482a874b65633079386472e0b428b04510966e62503eaec1779ed700559aa2368c170439f5b461a3b2fbfeb16f5835041dd6edeb8909f1a0151f8e14a4e723ac4616b7454b", 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) 1.936712288s ago: executing program 1 (id=682): close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x5, 0x84) (async) socket(0xb, 0x5, 0x84) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) socket(0x26, 0x6, 0x3) (async) socket(0x26, 0x6, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000400) (async) unshare$auto(0x8000400) socket(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210) (async) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, r0}, 0x210) socket(0x2, 0x3, 0xa) (async) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0xffffffffffffffff, 0x407, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xb, 0x0, 0x5) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x64a000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) ioctl$auto(r3, 0x40026f33, r3) (async) ioctl$auto(r3, 0x40026f33, r3) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r2) (async) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r2) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="d5e306000000fbdbdf2510080000"], 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) socket(0xa, 0x1, 0x84) 1.887628224s ago: executing program 0 (id=683): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi25\x00', 0x10b142, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vbi25\x00', 0x10b142, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x44ac00, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x44ac00, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/jbd2/sda1-8/info\x00', 0x240, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_create$auto(0x8800001) (async) r1 = epoll_create$auto(0x8800001) mmap$auto(0x0, 0x2020008, 0x100000001, 0x8011, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020008, 0x100000001, 0x8011, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40005) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003200), r2) (async) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003200), r2) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000000040)=ANY=[@ANYBLOB="24741d8f", @ANYRES16=r3, @ANYBLOB="010e28bd7000fedbdf25030000000c000400ffffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r5, &(0x7f0000001540)=""/209, 0xd1) write$auto(r4, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETFL(0xffffffffffffffff, 0x4, 0xe) epoll_ctl$auto(r1, 0x1, r0, 0x0) (async) epoll_ctl$auto(r1, 0x1, r0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x501000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) 1.692301013s ago: executing program 1 (id=684): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x400100000001, 0x1ff) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) readv$auto(r1, &(0x7f0000000100)={0x0, 0x2}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.518244519s ago: executing program 2 (id=685): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = set_tid_address$auto(&(0x7f0000000000)=0x7f) lstat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x4002, 0x1, 0x1, 0x80, 0xee01, 0x0, 0x0, 0xfffffffffffffff9, 0xb1, 0x7d76a882, 0x2, 0x1, 0x9, 0x0, 0x81, 0xcb, 0x9}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x0, &(0x7f0000000400)={@siginfo_0_0={0x19, 0x1, 0x0, @_kill={r1, r2}}}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x3, 0x6, 0x0, 0x200000b) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000011ab0ef8309f78fe2de4ac84df981ab4a8927f8b864cbf98f6458abf92000b9dddf4e032b24d319c8b57305902fdf195acc5b454e1ab83e82c2d797109e7e210a14f07bf127bbf342aabdcb0ba389cf1df1b135320a556ada9cf45fd198736c7af1ae26e8e0884cb29726290e0fb77", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44415}, 0x20000000) close_range$auto(r4, 0xffffffffffffffff, 0x40000) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x201009, 0x8) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r8 = socket(0x2, 0x3, 0xa) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r7], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 1.444845557s ago: executing program 1 (id=686): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000040)="c80d1b5d39a6e95f59a60ca3e04456a758", 0x11) 1.34365206s ago: executing program 0 (id=687): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek$auto(r0, 0x0, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x138, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x124, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x2c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xdd2}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x7ff}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x5}]}]}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x81}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x2c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x5}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0xa8, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x5}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xce3}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xfff}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5}, @NL80211_PMSR_FTM_CAPA_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x59}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xffffffc1}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xd}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xe}]}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae8a, &(0x7f00000000c0)={0xfc}) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r5 = socket(0x28, 0x1, 0x0) setsockopt$auto(r5, 0x28, 0x1, 0x0, 0x8) read$auto(r4, 0x0, 0x39b8) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x16, r1, 0xf23, r1}, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) 1.273519204s ago: executing program 1 (id=688): socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x3ff) socket(0x28, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/ifb1/queues/tx-0/byte_queue_limits/stall_max\x00', 0x1a1802, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x8000, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x4) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) epoll_create$auto(0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1.258445099s ago: executing program 3 (id=689): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x9, 0x7fff, 0x4, 0xfffffffffffffff1) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae41, r4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x101500, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x5f) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x10001, 0xdf, 0x9b71, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x100) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d9) 793.832713ms ago: executing program 3 (id=690): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (rerun: 32) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba2") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8) (rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 32) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="251729bd7000fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="71a7e3c71f2c895028407cf4039215e3c5f978c072cc6acff64078090055f90f484610e0e6ec1ad6d92d0783837f00000000000000009a727d808d9d5dfb14bff96b9aae196ea2c329c44e471dded78d954fb54c35cfb011c1559a8aed8335d6abb41276a3ed2c4d6d3f71a046e6952fcfad0eb73e7ab7c3b94bb74ca517f4ccfa01218e62"], 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000040)) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) io_uring_setup$auto(0x7, 0x0) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x3}, 0x3, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x2) (async) sendmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fallocate$auto(0x8000000000000003, 0x40, 0x9, 0x4cbd5d) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x509a40, 0x0) (async) select$auto(0x8059, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x5, 0x6, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xa, 0x2495dae0, 0x52]}, 0x0) (async) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 593.980442ms ago: executing program 0 (id=691): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x7, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x4003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0x19, 0x1272, 0x2) pipe2$auto(0x0, 0x80) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x60c541, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xfff) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x1e, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) (async, rerun: 64) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ftruncate$auto(r3, 0x1) (async, rerun: 64) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) (rerun: 64) ioctl$auto_FS_IOC_SETFLAGS(r3, 0x40086602, 0xe20) (async) getcwd$auto(&(0x7f0000000540)='\x0fsys/kernel/doder/stat\x856\xba\xab\x1e\xbaY\x94\xf0Y*\\e\x00]\xb3\tA\xf6\x0eo\xd2\xb9\b\a3\xfb(\xe2\xc1\x8d\xe9\xc3\x05z\x1a\xf2\xf23\x04\x94\xcf\x04\x83\x9cH\x84\x94Y\xf0\xe6\xbc\x14o\xd7\x19Dv\xfb\x17\xd7c\xd8\x97\r\x98>\x8c\xf7\xd8\x8b9\xff\x84\x897\xf3\x17cM\xf8\"\x97\xd3wZw\xba\xcb\xd4\xcd\xaaHr\vg\x98\xd1\xba#\xad#\xf8&\xe0+\x1c`x\v\x03!\xee\xa6\xeeB\x0f\xa4\x84*#7\b\xc4\xf0p\xe7C\xe1~k\xa7\x8e|C\xfe\xec\xb8\xc1\xdb!\xf3\xec\xb6\"0B\x93\xcc\xdc\xf0\xa3j\xa2i\x9d\t:\x83\x81\x01hZ\xc5\b\xad\x7f\xbf \xa0\x8e\v\a\xe6|\xe9\xc1\xaa^\xd3\x1f\x97\xcf\xba\xc0Y\x82<\b\xc5\'\xa4u\xab\xeaO\xcb\xa1\x89\xe8\x80D]\xa9\b-d\xb7\x00)\xd7h\v\xbfu+\x96\x90/\xbd\xd9\xca\xb8d\x11\x81\x91y\xe0\xfb3\xd9{\x96', 0x4000007) (async, rerun: 64) read$auto_state_fops_(r4, &(0x7f0000000180)=""/61, 0xfffffeeb) (async, rerun: 64) mmap$auto(0xffff, 0x4, 0x6, 0x1b, 0xffffffffffffffff, 0x2) (async, rerun: 64) r5 = socket(0x2, 0x6, 0x400000) (rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) (async) ioctl$auto(r5, 0x1260, 0x7fffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000002340)=ANY=[@ANYBLOB="541700004f96997763e0e5030b7c30754f40050d5c6007473ab53ebc98342f4d3acce90ee5f391915267f52d1d4c25c5a323124c3358f87b3b2207aa921e528d1b05ecf009e2441f538591d71e6a520143dd4502", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2601e380bd00c0800c00e400ff0300000000000004005680040068800800bf00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1754}, 0x1, 0x0, 0x0, 0x20048001}, 0x8d0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf240500000006000e0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0xc0) 363.596692ms ago: executing program 2 (id=692): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/statistics/rx_packets\x00', 0x244100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r4, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x1cc, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0xd3, 0x3, "e44651bc42eeb5884ea04168af61056b18b45c1f4fc1719122d10d23f0cb83c8b038b4381804096126d4e32419c3b4e1556f967834ad4360377e04d0f74315a9593ac08a2b33e68e259243a625388066dbfbc3cf2f10c5d354582d8798c1f8f100d511517e251e985c0e61941d74fd783a574202e2f7387f849361896141957f264a026e2b72c0d81ffb2f5249ad00eded80a88f7ff5f3ecc14a293cc94e947e35ff6eb1d4296667ebdb4534f6a650376319cd08dbe94aa9e9a19053a1c51fdef77d257e19093c28e3f96c8220814c"}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'macvlan0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x3}, @WGDEVICE_A_PUBLIC_KEY={0x98, 0x4, "219475c1a7b00b732f2d8a21fdcd9452e2ebeda22984ef655c7e88d61af2057bfaff4545d678f06563ccaa8cfc39d51864929a5d044b0bc30455bd360b6b03f20304198795ebc45b98d2df58074259226906cb2037ab0681c8baacecf85e979d1d8f56ab5e750a1b7bbf14741384ce3276f2988f21c1e968c83ff4aac8dcebf7df097e75167838fd7e635d31a7f3bab92d9e704e"}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) sendmsg$auto_NL80211_CMD_ADD_LINK(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon11\x00', 0x203c0, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 0s ago: executing program 1 (id=693): setgroups$auto(0x1000a1, &(0x7f00000000c0)=0x3cd9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) mmap$auto(0x400000, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) setgroups$auto(0x0, &(0x7f0000000000)=0x6f6b) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio2\x00', 0x40282, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_FILS_KEK={0x18, 0xf2, "9c4b6936c1d2724e51254cf614102bd28d52578d"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "d11cf2ed6a3ed00cca43e9412a0cbd5b4aaa08ff69bebf34a6d6"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x28}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48801}, 0x100) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="00003fe23f7059d26d9bf6092bdb5eb9c40000", @ANYRES16=r4, @ANYBLOB="01002ebd7000fcdbdf250200000008000100fcffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x1) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/force\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 76.337398][ T5615] cgroup: Unknown subsys name 'net' [ 76.491918][ T5615] cgroup: Unknown subsys name 'cpuset' [ 76.500540][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.949740][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.546635][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.555919][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.565221][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.575591][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.585402][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.657513][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.666981][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.677959][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.686115][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.695359][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.741990][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.750641][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.761326][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.770934][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.781074][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.791577][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.798899][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.807786][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.817326][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.826700][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.125359][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.133564][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.140958][ T5626] bridge_slave_0: entered allmulticast mode [ 81.148009][ T5626] bridge_slave_0: entered promiscuous mode [ 81.193319][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.200645][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.209020][ T5626] bridge_slave_1: entered allmulticast mode [ 81.216989][ T5626] bridge_slave_1: entered promiscuous mode [ 81.329953][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.356039][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.423475][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.431263][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.438571][ T5631] bridge_slave_0: entered allmulticast mode [ 81.445936][ T5631] bridge_slave_0: entered promiscuous mode [ 81.461973][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.469219][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.476527][ T5633] bridge_slave_0: entered allmulticast mode [ 81.483876][ T5633] bridge_slave_0: entered promiscuous mode [ 81.501972][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.509625][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.516784][ T5631] bridge_slave_1: entered allmulticast mode [ 81.524233][ T5631] bridge_slave_1: entered promiscuous mode [ 81.533692][ T5626] team0: Port device team_slave_0 added [ 81.539722][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.546921][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.554555][ T5633] bridge_slave_1: entered allmulticast mode [ 81.561684][ T5633] bridge_slave_1: entered promiscuous mode [ 81.593458][ T5626] team0: Port device team_slave_1 added [ 81.646651][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.659345][ T5638] Bluetooth: hci0: command tx timeout [ 81.670990][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.693519][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.725288][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.735381][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.738235][ T5638] Bluetooth: hci1: command tx timeout [ 81.742663][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.742906][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.745915][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.792323][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.818729][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.840044][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.847280][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.854935][ T5634] bridge_slave_0: entered allmulticast mode [ 81.862211][ T5634] bridge_slave_0: entered promiscuous mode [ 81.901608][ T5633] team0: Port device team_slave_0 added [ 81.907536][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.914726][ T5638] Bluetooth: hci2: command tx timeout [ 81.915068][ T5638] Bluetooth: hci3: command tx timeout [ 81.920457][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.933046][ T5634] bridge_slave_1: entered allmulticast mode [ 81.940197][ T5634] bridge_slave_1: entered promiscuous mode [ 81.972693][ T5631] team0: Port device team_slave_0 added [ 81.981411][ T5633] team0: Port device team_slave_1 added [ 82.000332][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.012332][ T5631] team0: Port device team_slave_1 added [ 82.038873][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.068595][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.075750][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.102009][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.141549][ T5626] hsr_slave_0: entered promiscuous mode [ 82.148063][ T5626] hsr_slave_1: entered promiscuous mode [ 82.155248][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.162493][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.188522][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.210614][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.217677][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.243972][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.264290][ T5634] team0: Port device team_slave_0 added [ 82.271829][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.279085][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.305231][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.326859][ T5634] team0: Port device team_slave_1 added [ 82.429012][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.436035][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.462053][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.480581][ T5633] hsr_slave_0: entered promiscuous mode [ 82.486873][ T5633] hsr_slave_1: entered promiscuous mode [ 82.493218][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 82.499108][ T5633] Cannot create hsr debugfs directory [ 82.522419][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.529712][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.556506][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.581670][ T5631] hsr_slave_0: entered promiscuous mode [ 82.588050][ T5631] hsr_slave_1: entered promiscuous mode [ 82.594318][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 82.600115][ T5631] Cannot create hsr debugfs directory [ 82.767928][ T5634] hsr_slave_0: entered promiscuous mode [ 82.774549][ T5634] hsr_slave_1: entered promiscuous mode [ 82.780814][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 82.787034][ T5634] Cannot create hsr debugfs directory [ 83.054288][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.067450][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.095651][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.106585][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.133387][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.143722][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.152322][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.163022][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.220569][ T5633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.231834][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.240591][ T5633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.251766][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.274320][ T5633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.285358][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.293455][ T5633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.303826][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.377630][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.388027][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.409420][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.421237][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.429749][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.440592][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.449980][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.460339][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.553175][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.563956][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.572420][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.583303][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.598026][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.609568][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.623394][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.632584][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.723684][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.738678][ T5638] Bluetooth: hci0: command tx timeout [ 83.786815][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.803734][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.818815][ T5638] Bluetooth: hci1: command tx timeout [ 83.837736][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.845569][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.872130][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.879351][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.894243][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.904580][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.942098][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.949475][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.977006][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.978413][ T5638] Bluetooth: hci3: command tx timeout [ 83.987480][ T50] Bluetooth: hci2: command tx timeout [ 84.010170][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.017347][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.044325][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.051469][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.067219][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.085339][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.092481][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.156937][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.191223][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.198444][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.245913][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.253183][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.028946][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.174170][ T5626] veth0_vlan: entered promiscuous mode [ 85.196273][ T5626] veth1_vlan: entered promiscuous mode [ 85.334411][ T5626] veth0_macvtap: entered promiscuous mode [ 85.364738][ T5626] veth1_macvtap: entered promiscuous mode [ 85.381178][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.427120][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.442481][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.475184][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.514065][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.522761][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.544005][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.552957][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562121][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.641795][ T5631] veth0_vlan: entered promiscuous mode [ 85.703992][ T5631] veth1_vlan: entered promiscuous mode [ 85.740889][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.765699][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.785174][ T5633] veth0_vlan: entered promiscuous mode [ 85.818762][ T50] Bluetooth: hci0: command tx timeout [ 85.831432][ T5633] veth1_vlan: entered promiscuous mode [ 85.840369][ T5634] veth0_vlan: entered promiscuous mode [ 85.852165][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.860730][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.890671][ T5634] veth1_vlan: entered promiscuous mode [ 85.901491][ T50] Bluetooth: hci1: command tx timeout [ 85.915217][ T5631] veth0_macvtap: entered promiscuous mode [ 85.942206][ T5631] veth1_macvtap: entered promiscuous mode [ 85.971103][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.993045][ T5633] veth0_macvtap: entered promiscuous mode [ 86.027479][ T5633] veth1_macvtap: entered promiscuous mode [ 86.046951][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.058892][ T50] Bluetooth: hci3: command tx timeout [ 86.061397][ T5638] Bluetooth: hci2: command tx timeout [ 86.136849][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.164281][ T5634] veth0_macvtap: entered promiscuous mode [ 86.191495][ T5634] veth1_macvtap: entered promiscuous mode [ 86.213401][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.225886][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.246513][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.274175][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.301488][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.327545][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.421710][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.431114][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444742][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.464255][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.473215][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.496214][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.557032][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.565986][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.576353][ T1121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609378][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.677337][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.692237][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.931530][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.960502][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.050362][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.063132][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.172327][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.194215][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.457988][ T5786] netlink: 342 bytes leftover after parsing attributes in process `syz.0.5'. [ 87.498624][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.523560][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.724948][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.755396][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.908191][ T5638] Bluetooth: hci0: command tx timeout [ 87.978396][ T5638] Bluetooth: hci1: command tx timeout [ 88.138603][ T5638] Bluetooth: hci2: command tx timeout [ 88.149084][ T5638] Bluetooth: hci3: command tx timeout [ 88.650389][ T5805] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 88.679523][ T5805] netlink: 'syz.0.6': attribute type 6 has an invalid length. [ 88.708918][ T5805] Zero length message leads to an empty skb [ 89.328827][ T5812] nfs: Unknown parameter 'nl802154' [ 89.782778][ T133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.037942][ T133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.063129][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.294255][ T133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.433070][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.443252][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.451834][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.463934][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.475294][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.681558][ T133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.248540][ T133] bridge_slave_1: left allmulticast mode [ 91.258260][ T133] bridge_slave_1: left promiscuous mode [ 91.300126][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.361864][ T133] bridge_slave_0: left allmulticast mode [ 91.375630][ T133] bridge_slave_0: left promiscuous mode [ 91.396545][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.007730][ T992] cfg80211: failed to load regulatory.db [ 92.306578][ T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.327800][ T5853] netlink: 342 bytes leftover after parsing attributes in process `syz.3.15'. [ 92.429327][ T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.455234][ T133] bond0 (unregistering): Released all slaves [ 92.538454][ T5638] Bluetooth: hci0: command tx timeout [ 92.591536][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 92.855824][ T5855] process 'syz.2.14' launched ':,' with NULL argv: empty string added [ 93.546670][ T133] hsr_slave_0: left promiscuous mode [ 93.574557][ T133] hsr_slave_1: left promiscuous mode [ 93.602262][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.639910][ T133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.672167][ T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.700107][ T133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.811555][ T133] veth1_macvtap: left promiscuous mode [ 93.830101][ T133] veth0_macvtap: left promiscuous mode [ 93.845236][ T133] veth1_vlan: left promiscuous mode [ 93.862061][ T133] veth0_vlan: left promiscuous mode [ 94.622057][ T5638] Bluetooth: hci0: command tx timeout [ 94.760766][ T133] team0 (unregistering): Port device team_slave_1 removed [ 94.821536][ T133] team0 (unregistering): Port device team_slave_0 removed [ 95.193651][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.272655][ T5924] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 96.370763][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.380089][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.388762][ T5827] bridge_slave_0: entered allmulticast mode [ 96.401776][ T5827] bridge_slave_0: entered promiscuous mode [ 96.417265][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.437664][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.481896][ T5827] bridge_slave_1: entered allmulticast mode [ 96.510253][ T5827] bridge_slave_1: entered promiscuous mode [ 96.619787][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.660376][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.700498][ T5638] Bluetooth: hci0: command tx timeout [ 96.825830][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.961421][ T5827] team0: Port device team_slave_0 added [ 96.991054][ T5827] team0: Port device team_slave_1 added [ 97.048524][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.068140][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.127630][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.162666][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.174385][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.256303][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.568562][ T5827] hsr_slave_0: entered promiscuous mode [ 97.582107][ T5827] hsr_slave_1: entered promiscuous mode [ 98.509575][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.778321][ T5638] Bluetooth: hci0: command tx timeout [ 99.217450][ T5963] bond0: option arp_validate: invalid value ( ) [ 99.726225][ T5941] FAULT_INJECTION: forcing a failure. [ 99.726225][ T5941] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.769534][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full) [ 99.769574][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.769600][ T5941] Call Trace: [ 99.769613][ T5941] [ 99.769622][ T5941] dump_stack_lvl+0x100/0x190 [ 99.769660][ T5941] should_fail_ex.cold+0x5/0xa [ 99.769694][ T5941] get_futex_key+0x1d2/0x1510 [ 99.769732][ T5941] ? __pfx_get_futex_key+0x10/0x10 [ 99.769757][ T5941] ? __pick_eevdf+0x4a9/0x7d0 [ 99.769808][ T5941] futex_wait_setup+0x83/0x510 [ 99.769853][ T5941] __futex_wait+0x19f/0x300 [ 99.769894][ T5941] ? __pfx___futex_wait+0x10/0x10 [ 99.769930][ T5941] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.769969][ T5941] ? __pfx_futex_wake_mark+0x10/0x10 [ 99.770013][ T5941] ? find_held_lock+0x2b/0x80 [ 99.770050][ T5941] ? futex_wake+0x456/0x530 [ 99.770093][ T5941] futex_wait+0xe6/0x370 [ 99.770133][ T5941] ? __pfx_futex_wait+0x10/0x10 [ 99.770184][ T5941] ? do_vfs_ioctl+0x226/0x13e0 [ 99.770216][ T5941] do_futex+0x1ef/0x350 [ 99.770250][ T5941] ? __pfx_do_futex+0x10/0x10 [ 99.770283][ T5941] ? find_held_lock+0x2b/0x80 [ 99.770326][ T5941] __x64_sys_futex+0x34f/0x4d0 [ 99.770360][ T5941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.770403][ T5941] ? __pfx___x64_sys_futex+0x10/0x10 [ 99.770434][ T5941] ? pipe_ioctl+0x226/0x2c0 [ 99.770482][ T5941] ? rcu_is_watching+0x12/0xc0 [ 99.770522][ T5941] do_syscall_64+0x10b/0xf80 [ 99.770556][ T5941] ? clear_bhb_loop+0x40/0x90 [ 99.770592][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.770624][ T5941] RIP: 0033:0x7f9498d9cdd9 [ 99.770648][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.770675][ T5941] RSP: 002b:00007f9499bcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.770713][ T5941] RAX: ffffffffffffffda RBX: 00007f9499015fa8 RCX: 00007f9498d9cdd9 [ 99.770732][ T5941] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9499015fa8 [ 99.770754][ T5941] RBP: 00007f9499015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 99.770771][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.770787][ T5941] R13: 00007f9499016038 R14: 00007fffd0b9efb0 R15: 00007fffd0b9f098 [ 99.770830][ T5941] [ 100.062141][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.314858][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.323526][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.398038][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.416860][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.520786][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.586707][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.670766][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.706859][ T5985] mmap: syz.3.29 (5985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.294620][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.381265][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.437750][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.445084][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.507280][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.514458][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.412673][ T5638] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 102.984647][ T6022] syz.3.33 (6022) used greatest stack depth: 19712 bytes left [ 103.276386][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.568226][ T5827] veth0_vlan: entered promiscuous mode [ 103.613799][ T5827] veth1_vlan: entered promiscuous mode [ 103.759261][ T5827] veth0_macvtap: entered promiscuous mode [ 103.823019][ T5827] veth1_macvtap: entered promiscuous mode [ 103.904226][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.958356][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.001249][ T1059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.022581][ T1059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.055284][ T1059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.071372][ T1059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.382727][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.416334][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.478985][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.499844][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.998415][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.239808][ T6069] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7697184.0.0), cmd(12) [ 108.041557][ T6116] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 108.130228][ T6119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.900238][ T6134] futex_wake_op: syz.1.44 tries to shift op by -2048; fix this program [ 110.384633][ T6130] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.406250][ T6182] random: crng reseeded on system resumption [ 113.964455][ T6199] netlink: 'syz.0.53': attribute type 11 has an invalid length. [ 116.771681][ T6229] warning: `syz.3.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.150108][ T6255] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 121.019795][ T5638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 125.025947][ T6304] random: crng reseeded on system resumption [ 131.634412][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 131.760536][ T6411] ipvlan0: entered promiscuous mode [ 131.774059][ T6411] ipvlan0: entered allmulticast mode [ 131.794711][ T6411] veth0_vlan: entered allmulticast mode [ 132.832748][ T6430] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 132.948511][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.959356][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097808][ T5638] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 133.376589][ T6403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.704597][ T29] audit: type=1800 audit(1777656199.505:2): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="dbroot" dev="configfs" ino=11439 res=0 errno=0 [ 134.781289][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 135.374886][ T5638] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 135.752215][ T5638] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 135.759471][ T5638] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 135.774644][ T5638] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 135.774706][ T5638] Bluetooth: hci3: Malformed LE Event: 0x0d [ 141.690198][ T6549] FAULT_INJECTION: forcing a failure. [ 141.690198][ T6549] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 141.715859][ T6544] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.769950][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.0.118 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.769983][ T6549] Tainted: [L]=SOFTLOCKUP [ 141.769989][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.769998][ T6549] Call Trace: [ 141.770004][ T6549] [ 141.770010][ T6549] dump_stack_lvl+0x100/0x190 [ 141.770031][ T6549] should_fail_ex.cold+0x5/0xa [ 141.770049][ T6549] ? prepare_alloc_pages+0x16d/0x5f0 [ 141.770069][ T6549] should_fail_alloc_page+0xeb/0x140 [ 141.770088][ T6549] prepare_alloc_pages+0x1f0/0x5f0 [ 141.770109][ T6549] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 141.770136][ T6549] ? mark_held_locks+0x40/0x70 [ 141.770149][ T6549] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.770166][ T6549] ? lockdep_hardirqs_on+0x78/0x100 [ 141.770187][ T6549] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 141.770204][ T6549] ? stack_depot_save_flags+0x479/0x9d0 [ 141.770222][ T6549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.770246][ T6549] ? kasan_save_stack+0x3f/0x50 [ 141.770260][ T6549] ? kasan_save_track+0x14/0x30 [ 141.770273][ T6549] ? snd_pcm_attach_substream+0x436/0xd20 [ 141.770290][ T6549] ? __lock_acquire+0x4a5/0x2630 [ 141.770310][ T6549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.770332][ T6549] ? policy_nodemask+0xed/0x4f0 [ 141.770350][ T6549] alloc_pages_mpol+0x1fb/0x540 [ 141.770369][ T6549] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.770384][ T6549] ? __split_page_owner+0x1fe/0x350 [ 141.770402][ T6549] ? split_page_memcg+0x1e/0x1a0 [ 141.770422][ T6549] alloc_pages_noprof+0x1a/0x160 [ 141.770450][ T6549] alloc_pages_exact_noprof+0x32/0xf0 [ 141.770471][ T6549] snd_pcm_attach_substream+0x4b0/0xd20 [ 141.770491][ T6549] snd_pcm_open_substream+0x90/0x1850 [ 141.770536][ T6549] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 141.770581][ T6549] ? rcu_is_watching+0x12/0xc0 [ 141.770618][ T6549] snd_pcm_open+0x2a3/0x710 [ 141.770644][ T6549] ? __pfx_snd_pcm_open+0x10/0x10 [ 141.770668][ T6549] ? __pfx_default_wake_function+0x10/0x10 [ 141.770693][ T6549] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 141.770715][ T6549] snd_pcm_playback_open+0x86/0xe0 [ 141.770738][ T6549] snd_open+0x201/0x450 [ 141.770756][ T6549] ? __pfx_snd_open+0x10/0x10 [ 141.770773][ T6549] chrdev_open+0x234/0x6a0 [ 141.770793][ T6549] ? __pfx_chrdev_open+0x10/0x10 [ 141.770811][ T6549] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 141.770834][ T6549] do_dentry_open+0x6d8/0x1660 [ 141.770851][ T6549] ? __pfx_chrdev_open+0x10/0x10 [ 141.770872][ T6549] vfs_open+0x82/0x3f0 [ 141.770895][ T6549] path_openat+0x208c/0x31a0 [ 141.770919][ T6549] ? __pfx_path_openat+0x10/0x10 [ 141.770943][ T6549] do_file_open+0x20e/0x430 [ 141.770962][ T6549] ? __pfx_do_file_open+0x10/0x10 [ 141.770993][ T6549] ? alloc_fd+0x476/0x790 [ 141.771012][ T6549] ? do_getname+0x191/0x390 [ 141.771034][ T6549] do_sys_openat2+0x10d/0x1e0 [ 141.771055][ T6549] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.771083][ T6549] __x64_sys_openat+0x12d/0x210 [ 141.771105][ T6549] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.771130][ T6549] ? rcu_is_watching+0x12/0xc0 [ 141.771149][ T6549] do_syscall_64+0x10b/0xf80 [ 141.771167][ T6549] ? clear_bhb_loop+0x40/0x90 [ 141.771189][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.771204][ T6549] RIP: 0033:0x7fac0259cdd9 [ 141.771230][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.771243][ T6549] RSP: 002b:00007fac03388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.771263][ T6549] RAX: ffffffffffffffda RBX: 00007fac02815fa0 RCX: 00007fac0259cdd9 [ 141.771272][ T6549] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 141.771281][ T6549] RBP: 00007fac02632d69 R08: 0000000000000000 R09: 0000000000000000 [ 141.771289][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.771298][ T6549] R13: 00007fac02816038 R14: 00007fac02815fa0 R15: 00007fff57bdd0d8 [ 141.771316][ T6549] [ 144.364736][ T6578] zswap: compressor Zu~^8acu0|,aRrqP')ޱ`*]T]X؃(ۂTN>_r$z&[+x[DPxe?m3Qz not available [ 145.277747][ T6579] kexec: Could not allocate control_code_buffer [ 145.632945][ T6605] netlink: 252 bytes leftover after parsing attributes in process `syz.0.127'. [ 145.702627][ T6599] netlink: 252 bytes leftover after parsing attributes in process `syz.0.127'. [ 146.942773][ T6610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.973232][ T6610] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.038164][ T6610] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.117465][ T6610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.135244][ T6610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.173984][ T6610] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.238790][ T6610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.260966][ T6610] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.346775][ T6610] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.414799][ T6610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.439821][ T6610] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.549393][ T6610] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.988252][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.178352][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.258631][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.418262][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.753137][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 150.058263][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.114620][ T6702] udc dummy_udc.0: soft-connect without a gadget driver [ 151.258523][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.338635][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.499325][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.149016][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.904635][ T5638] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 152.904660][ T5638] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 152.927844][ T6727] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 153.341072][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.430029][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.588192][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.530638][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 154.578161][ T6747] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 155.620266][ T6768] capability: warning: `syz.2.156' uses 32-bit capabilities (legacy support in use) [ 156.041647][ T6787] FAULT_INJECTION: forcing a failure. [ 156.041647][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 156.111395][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.0.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.111440][ T6787] Tainted: [L]=SOFTLOCKUP [ 156.111458][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.111473][ T6787] Call Trace: [ 156.111482][ T6787] [ 156.111493][ T6787] dump_stack_lvl+0x100/0x190 [ 156.111527][ T6787] should_fail_ex.cold+0x5/0xa [ 156.111559][ T6787] should_failslab+0xc2/0x120 [ 156.111589][ T6787] __kmalloc_cache_noprof+0x7a/0x6f0 [ 156.111626][ T6787] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 156.111672][ T6787] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 156.111713][ T6787] ? lockdep_hardirqs_on+0x78/0x100 [ 156.111748][ T6787] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 156.111786][ T6787] ? snd_pcm_oss_change_params_locked+0xa40/0x39f0 [ 156.111825][ T6787] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 156.111862][ T6787] ? kfree+0x223/0x6c0 [ 156.111902][ T6787] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 156.111957][ T6787] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 156.111994][ T6787] ? task_work_add+0x201/0x3b0 [ 156.112021][ T6787] ? __pfx___mutex_lock+0x10/0x10 [ 156.112076][ T6787] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 156.112116][ T6787] snd_pcm_oss_sync+0x265/0x840 [ 156.112159][ T6787] snd_pcm_oss_release+0x238/0x300 [ 156.112195][ T6787] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 156.112229][ T6787] __fput+0x3ff/0xb50 [ 156.112274][ T6787] task_work_run+0x150/0x240 [ 156.112300][ T6787] ? __pfx_task_work_run+0x10/0x10 [ 156.112330][ T6787] ? rcu_is_watching+0x12/0xc0 [ 156.112368][ T6787] exit_to_user_mode_loop+0x100/0x4a0 [ 156.112394][ T6787] ? do_syscall_64+0x519/0xf80 [ 156.112429][ T6787] do_syscall_64+0x6f2/0xf80 [ 156.112468][ T6787] ? clear_bhb_loop+0x40/0x90 [ 156.112502][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.112528][ T6787] RIP: 0033:0x7fac0259cdd9 [ 156.112550][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.112576][ T6787] RSP: 002b:00007fac007d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 156.112601][ T6787] RAX: 0000000000000000 RBX: 00007fac02816180 RCX: 00007fac0259cdd9 [ 156.112616][ T6787] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 156.112631][ T6787] RBP: 00007fac02632d69 R08: 0000000000000000 R09: 0000000000000000 [ 156.112645][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.112660][ T6787] R13: 00007fac02816218 R14: 00007fac02816180 R15: 00007fff57bdd0d8 [ 156.112697][ T6787] [ 157.718691][ T5638] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 157.718730][ T5638] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 157.735646][ T5638] Bluetooth: hci2: Dropping invalid advertising data [ 157.744078][ T5638] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 157.764218][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 157.913505][ T6808] FAULT_INJECTION: forcing a failure. [ 157.913505][ T6808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.070315][ T6808] CPU: 1 UID: 0 PID: 6808 Comm: syz.2.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.070362][ T6808] Tainted: [L]=SOFTLOCKUP [ 158.070373][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.070390][ T6808] Call Trace: [ 158.070402][ T6808] [ 158.070412][ T6808] dump_stack_lvl+0x100/0x190 [ 158.070452][ T6808] should_fail_ex.cold+0x5/0xa [ 158.070489][ T6808] ? prepare_alloc_pages+0x16d/0x5f0 [ 158.070529][ T6808] should_fail_alloc_page+0xeb/0x140 [ 158.070568][ T6808] prepare_alloc_pages+0x1f0/0x5f0 [ 158.070611][ T6808] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 158.070667][ T6808] ? stack_trace_save+0x8e/0xc0 [ 158.070709][ T6808] ? __pfx_stack_trace_save+0x10/0x10 [ 158.070746][ T6808] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 158.070795][ T6808] ? stack_depot_save_flags+0x27/0x9d0 [ 158.070829][ T6808] ? __lock_acquire+0x4a5/0x2630 [ 158.070863][ T6808] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.070908][ T6808] ? kasan_save_track+0x14/0x30 [ 158.070939][ T6808] ? __kasan_slab_alloc+0x89/0x90 [ 158.070966][ T6808] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 158.071009][ T6808] ? copy_page_range+0x418b/0x5b00 [ 158.071050][ T6808] ? copy_process+0x7b37/0x7fa0 [ 158.071098][ T6808] ? kernel_clone+0x12e/0x9c0 [ 158.071136][ T6808] ? __do_sys_clone3+0x214/0x290 [ 158.071178][ T6808] ? do_syscall_64+0x10b/0xf80 [ 158.071214][ T6808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.071261][ T6808] ? __lock_acquire+0x4a5/0x2630 [ 158.071288][ T6808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.071331][ T6808] ? policy_nodemask+0xed/0x4f0 [ 158.071367][ T6808] alloc_pages_mpol+0x1fb/0x540 [ 158.071401][ T6808] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 158.071447][ T6808] alloc_pages_noprof+0x1a/0x160 [ 158.071487][ T6808] pte_alloc_one+0x1c/0x3d0 [ 158.071526][ T6808] __pte_alloc+0x6d/0x3e0 [ 158.071560][ T6808] ? __pfx___pte_alloc+0x10/0x10 [ 158.071590][ T6808] ? _raw_spin_unlock+0x28/0x50 [ 158.071616][ T6808] ? __pmd_alloc+0x3fb/0x950 [ 158.071651][ T6808] copy_page_range+0x3dbb/0x5b00 [ 158.071713][ T6808] ? find_held_lock+0x2b/0x80 [ 158.071773][ T6808] ? mas_wr_store_entry+0xa1/0x1e80 [ 158.071817][ T6808] ? __pfx_copy_page_range+0x10/0x10 [ 158.071865][ T6808] ? mas_store+0x666/0xac0 [ 158.071910][ T6808] ? __pfx_mas_store+0x10/0x10 [ 158.071959][ T6808] ? __pfx___vma_start_write+0x10/0x10 [ 158.072010][ T6808] dup_mmap+0xd25/0x2180 [ 158.072065][ T6808] ? __pfx_dup_mmap+0x10/0x10 [ 158.072111][ T6808] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 158.072155][ T6808] ? __lock_acquire+0x4a5/0x2630 [ 158.072184][ T6808] ? find_held_lock+0x2b/0x80 [ 158.072214][ T6808] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 158.072267][ T6808] copy_process+0x7b37/0x7fa0 [ 158.072329][ T6808] ? __pfx_copy_process+0x10/0x10 [ 158.072379][ T6808] ? _copy_from_user+0x59/0xd0 [ 158.072428][ T6808] kernel_clone+0x12e/0x9c0 [ 158.072471][ T6808] ? __pfx_kernel_clone+0x10/0x10 [ 158.072533][ T6808] __do_sys_clone3+0x214/0x290 [ 158.072573][ T6808] ? __pfx___do_sys_clone3+0x10/0x10 [ 158.072655][ T6808] ? rcu_is_watching+0x12/0xc0 [ 158.072695][ T6808] do_syscall_64+0x10b/0xf80 [ 158.072728][ T6808] ? clear_bhb_loop+0x40/0x90 [ 158.072763][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.072792][ T6808] RIP: 0033:0x7fbc8fd9cdd9 [ 158.072817][ T6808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.072843][ T6808] RSP: 002b:00007fbc90bedef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 158.072870][ T6808] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbc8fd9cdd9 [ 158.072889][ T6808] RDX: 00007fbc90bedf10 RSI: 0000000000000058 RDI: 00007fbc90bedf10 [ 158.072906][ T6808] RBP: 00007fbc8fe32d69 R08: 0000000000000000 R09: 0000000000000058 [ 158.072923][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.072939][ T6808] R13: 00007fbc90016218 R14: 00007fbc90016180 R15: 00007ffe2907cb98 [ 158.072978][ T6808] [ 159.615011][ T6822] ima: policy update failed [ 159.637896][ T29] audit: type=1802 audit(1777656225.435:3): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.165" res=0 errno=0 [ 165.144111][ T6918] netlink: 342 bytes leftover after parsing attributes in process `syz.2.179'. [ 167.297357][ T6962] netlink: 342 bytes leftover after parsing attributes in process `syz.2.186'. [ 167.655372][ T6981] vivid-007: ================= START STATUS ================= [ 167.665310][ T6981] vivid-007: Generate PTS: true [ 167.671647][ T6981] vivid-007: Generate SCR: true [ 167.677962][ T6981] tpg source WxH: 320x240 (Y'CbCr) [ 167.683889][ T6981] tpg field: 1 [ 167.693496][ T6981] tpg crop: (0,0)/320x240 [ 167.701891][ T6981] tpg compose: (0,0)/320x240 [ 167.708202][ T6981] tpg colorspace: 8 [ 167.712454][ T6981] tpg transfer function: 0/0 [ 167.717231][ T6981] tpg Y'CbCr encoding: 0/0 [ 167.722376][ T6981] tpg quantization: 0/0 [ 167.727936][ T6981] tpg RGB range: 0/2 [ 167.733820][ T6981] vivid-007: ================== END STATUS ================== [ 168.564447][ T7008] hub 27-0:1.0: USB hub found [ 168.607142][ T7008] hub 27-0:1.0: 1 port detected [ 170.136956][ T7032] random: crng reseeded on system resumption [ 170.179099][ T7032] Restarting kernel threads ... [ 170.187698][ T7032] Done restarting kernel threads. [ 172.404339][ T7086] random: crng reseeded on system resumption [ 172.760593][ T7088] ======================================================= [ 172.760593][ T7088] WARNING: The mand mount option has been deprecated and [ 172.760593][ T7088] and is ignored by this kernel. Remove the mand [ 172.760593][ T7088] option from the mount to silence this warning. [ 172.760593][ T7088] ======================================================= [ 173.625490][ T7113] FAULT_INJECTION: forcing a failure. [ 173.625490][ T7113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 173.659082][ T7113] CPU: 0 UID: 0 PID: 7113 Comm: syz.1.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.659128][ T7113] Tainted: [L]=SOFTLOCKUP [ 173.659134][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.659148][ T7113] Call Trace: [ 173.659154][ T7113] [ 173.659160][ T7113] dump_stack_lvl+0x100/0x190 [ 173.659182][ T7113] should_fail_ex.cold+0x5/0xa [ 173.659202][ T7113] get_futex_key+0x1d2/0x1510 [ 173.659220][ T7113] ? __pfx_get_futex_key+0x10/0x10 [ 173.659241][ T7113] futex_wake+0xea/0x530 [ 173.659258][ T7113] ? lockdep_hardirqs_on+0x78/0x100 [ 173.659278][ T7113] ? __pfx_futex_wake+0x10/0x10 [ 173.659300][ T7113] ? sctp_setsockopt+0x168/0xb370 [ 173.659320][ T7113] do_futex+0x32b/0x350 [ 173.659336][ T7113] ? __pfx_do_futex+0x10/0x10 [ 173.659356][ T7113] ? rcu_is_watching+0x12/0xc0 [ 173.659373][ T7113] ? do_sock_setsockopt+0x101/0x1d0 [ 173.659389][ T7113] ? kfree+0x1dd/0x6c0 [ 173.659411][ T7113] __x64_sys_futex+0x34f/0x4d0 [ 173.659430][ T7113] ? __pfx___x64_sys_futex+0x10/0x10 [ 173.659447][ T7113] ? __sys_setsockopt+0x139/0x190 [ 173.659473][ T7113] ? rcu_is_watching+0x12/0xc0 [ 173.659493][ T7113] do_syscall_64+0x10b/0xf80 [ 173.659510][ T7113] ? clear_bhb_loop+0x40/0x90 [ 173.659531][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.659546][ T7113] RIP: 0033:0x7f9498d9cdd9 [ 173.659560][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.659574][ T7113] RSP: 002b:00007f9499bcf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 173.659588][ T7113] RAX: ffffffffffffffda RBX: 00007f9499015fa8 RCX: 00007f9498d9cdd9 [ 173.659601][ T7113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9499015fac [ 173.659611][ T7113] RBP: 00007f9499015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 173.659620][ T7113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 173.659629][ T7113] R13: 00007f9499016038 R14: 00007fffd0b9efb0 R15: 00007fffd0b9f098 [ 173.659647][ T7113] [ 175.098362][ T7133] vivid-007: ================= START STATUS ================= [ 175.143760][ T7133] vivid-007: Generate PTS: true [ 175.226434][ T7133] vivid-007: Generate SCR: true [ 175.285651][ T7133] tpg source WxH: 320x240 (Y'CbCr) [ 175.301440][ T7133] tpg field: 1 [ 175.346661][ T7133] tpg crop: (0,0)/320x240 [ 175.392499][ T7133] tpg compose: (0,0)/320x240 [ 175.416068][ T7133] tpg colorspace: 8 [ 175.451471][ T7133] tpg transfer function: 0/0 [ 175.482581][ T7133] tpg Y'CbCr encoding: 0/0 [ 175.521476][ T7133] tpg quantization: 0/0 [ 175.572499][ T7133] tpg RGB range: 0/2 [ 175.593998][ T7133] vivid-007: ================== END STATUS ================== [ 176.891758][ T7154] FAULT_INJECTION: forcing a failure. [ 176.891758][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 176.981800][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.0.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.981889][ T7154] Tainted: [L]=SOFTLOCKUP [ 176.981908][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.981943][ T7154] Call Trace: [ 176.981961][ T7154] [ 176.981983][ T7154] dump_stack_lvl+0x100/0x190 [ 176.982033][ T7154] should_fail_ex.cold+0x5/0xa [ 176.982070][ T7154] should_failslab+0xc2/0x120 [ 176.982103][ T7154] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 176.982147][ T7154] ? alloc_empty_file+0x5b/0x1c0 [ 176.982187][ T7154] ? __pfx_stack_trace_save+0x10/0x10 [ 176.982233][ T7154] alloc_empty_file+0x5b/0x1c0 [ 176.982274][ T7154] path_openat+0xe8/0x31a0 [ 176.982307][ T7154] ? kasan_save_stack+0x3f/0x50 [ 176.982332][ T7154] ? kasan_save_stack+0x30/0x50 [ 176.982358][ T7154] ? kasan_save_track+0x14/0x30 [ 176.982383][ T7154] ? __kasan_slab_alloc+0x89/0x90 [ 176.982411][ T7154] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 176.982453][ T7154] ? do_getname+0x35/0x390 [ 176.982490][ T7154] ? do_sys_openat2+0xc5/0x1e0 [ 176.982532][ T7154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.982566][ T7154] ? __pfx_path_openat+0x10/0x10 [ 176.982613][ T7154] do_file_open+0x20e/0x430 [ 176.982651][ T7154] ? __pfx_do_file_open+0x10/0x10 [ 176.982712][ T7154] ? alloc_fd+0x476/0x790 [ 176.982743][ T7154] ? do_getname+0x191/0x390 [ 176.982766][ T7154] do_sys_openat2+0x10d/0x1e0 [ 176.982788][ T7154] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.982815][ T7154] __x64_sys_openat+0x12d/0x210 [ 176.982837][ T7154] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.982857][ T7154] ? ksys_write+0x1ac/0x250 [ 176.982876][ T7154] ? rcu_is_watching+0x12/0xc0 [ 176.982895][ T7154] do_syscall_64+0x10b/0xf80 [ 176.982912][ T7154] ? clear_bhb_loop+0x40/0x90 [ 176.982929][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.982944][ T7154] RIP: 0033:0x7fac0259cdd9 [ 176.982958][ T7154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.982971][ T7154] RSP: 002b:00007fac03388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.982986][ T7154] RAX: ffffffffffffffda RBX: 00007fac02815fa0 RCX: 00007fac0259cdd9 [ 176.982996][ T7154] RDX: 0000000000038000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 176.983011][ T7154] RBP: 00007fac02632d69 R08: 0000000000000000 R09: 0000000000000000 [ 176.983020][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.983030][ T7154] R13: 00007fac02816038 R14: 00007fac02815fa0 R15: 00007fff57bdd0d8 [ 176.983061][ T7154] [ 178.355662][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.229'. [ 178.557903][ T7167] bond0: (slave bond_slave_0): Releasing backup interface [ 179.093501][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'. [ 179.152274][ T7172] ipvlan1: entered promiscuous mode [ 179.172734][ T7172] ipvlan1: entered allmulticast mode [ 179.179335][ T7172] veth0_vlan: entered allmulticast mode [ 179.449638][ T7178] FAULT_INJECTION: forcing a failure. [ 179.449638][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 179.485305][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.0.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.485333][ T7178] Tainted: [L]=SOFTLOCKUP [ 179.485339][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.485348][ T7178] Call Trace: [ 179.485353][ T7178] [ 179.485358][ T7178] dump_stack_lvl+0x100/0x190 [ 179.485383][ T7178] should_fail_ex.cold+0x5/0xa [ 179.485403][ T7178] should_failslab+0xc2/0x120 [ 179.485421][ T7178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 179.485443][ T7178] ? mas_preallocate+0x1105/0x14a0 [ 179.485468][ T7178] mas_preallocate+0x1105/0x14a0 [ 179.485491][ T7178] ? __pfx_mas_preallocate+0x10/0x10 [ 179.485518][ T7178] ? anon_vma_name+0x5a/0x250 [ 179.485542][ T7178] __split_vma+0x33d/0xd90 [ 179.485565][ T7178] ? __pfx___split_vma+0x10/0x10 [ 179.485590][ T7178] ? __pfx_mas_prev+0x10/0x10 [ 179.485608][ T7178] ? kernel_text_address+0x8d/0x100 [ 179.485627][ T7178] vms_gather_munmap_vmas+0x3a5/0x1720 [ 179.485653][ T7178] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 179.485681][ T7178] ? mas_walk+0x6ef/0x9b0 [ 179.485703][ T7178] __mmap_region+0x4aa/0x2da0 [ 179.485728][ T7178] ? __pfx___mmap_region+0x10/0x10 [ 179.485750][ T7178] ? __lock_acquire+0x4a5/0x2630 [ 179.485765][ T7178] ? __lock_acquire+0x4a5/0x2630 [ 179.485788][ T7178] ? __lock_acquire+0x4a5/0x2630 [ 179.485802][ T7178] ? do_raw_spin_unlock+0x145/0x1e0 [ 179.485826][ T7178] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 179.485877][ T7178] ? trace_pelt_se_tp+0x13b/0x190 [ 179.485905][ T7178] ? rcu_is_watching+0x12/0xc0 [ 179.485940][ T7178] ? trace_hrtimer_start+0x79/0x230 [ 179.485975][ T7178] ? hrtimer_start_range_ns+0x860/0x1a50 [ 179.486012][ T7178] ? find_held_lock+0x2b/0x80 [ 179.486048][ T7178] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 179.486085][ T7178] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 179.486124][ T7178] ? rcu_is_watching+0x12/0xc0 [ 179.486159][ T7178] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 179.486194][ T7178] ? lockdep_hardirqs_on+0x78/0x100 [ 179.486288][ T7178] mmap_region+0x35d/0x620 [ 179.486316][ T7178] ? rcu_is_watching+0x12/0xc0 [ 179.486349][ T7178] ? __pfx_mmap_region+0x10/0x10 [ 179.486380][ T7178] ? cap_mmap_addr+0x4b/0x120 [ 179.486418][ T7178] ? bpf_lsm_mmap_addr+0x9/0x30 [ 179.486445][ T7178] ? security_mmap_addr+0x71/0x1e0 [ 179.486476][ T7178] ? __get_unmapped_area+0x255/0x3e0 [ 179.486514][ T7178] do_mmap+0xc63/0x12f0 [ 179.486555][ T7178] ? __pfx_do_mmap+0x10/0x10 [ 179.486596][ T7178] ? __pfx_down_write_killable+0x10/0x10 [ 179.486646][ T7178] vm_mmap_pgoff+0x29e/0x470 [ 179.486692][ T7178] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 179.486730][ T7178] ? do_futex+0x192/0x350 [ 179.486762][ T7178] ? __pfx_do_futex+0x10/0x10 [ 179.486793][ T7178] ? rcu_is_watching+0x12/0xc0 [ 179.486831][ T7178] ksys_mmap_pgoff+0xe4/0x610 [ 179.486873][ T7178] ? __x64_sys_futex+0x358/0x4d0 [ 179.486906][ T7178] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 179.486940][ T7178] ? xfd_validate_state+0x129/0x190 [ 179.486979][ T7178] __x64_sys_mmap+0x125/0x190 [ 179.487016][ T7178] do_syscall_64+0x10b/0xf80 [ 179.487049][ T7178] ? clear_bhb_loop+0x40/0x90 [ 179.487084][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.487113][ T7178] RIP: 0033:0x7fac0259cdd9 [ 179.487137][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.487163][ T7178] RSP: 002b:00007fac03388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.487190][ T7178] RAX: ffffffffffffffda RBX: 00007fac02815fa0 RCX: 00007fac0259cdd9 [ 179.487209][ T7178] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 179.487226][ T7178] RBP: 00007fac02632d69 R08: 0000000000000401 R09: 0000000000008000 [ 179.487243][ T7178] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 179.487259][ T7178] R13: 00007fac02816038 R14: 00007fac02815fa0 R15: 00007fff57bdd0d8 [ 179.487296][ T7178] [ 180.851577][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 182.558001][ T7220] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 182.977329][ T7228] hub 27-0:1.0: USB hub found [ 183.001839][ T7228] hub 27-0:1.0: 1 port detected [ 183.072963][ T7234] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 183.104910][ T7234] vhci_hcd vhci_hcd.2: invalid port number 111 [ 183.133987][ T7234] vhci_hcd vhci_hcd.2: invalid port number 111 [ 185.428755][ T7269] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 185.832388][ T7278] random: crng reseeded on system resumption [ 186.454737][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 186.543235][ T7280] ipvlan1: entered promiscuous mode [ 186.550385][ T7280] ipvlan1: entered allmulticast mode [ 186.646231][ T7295] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. Ijn9_UVQ8j@:Un M%Ux[ 188.666194][ T7325] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.739876][ T7325] CIFS mount error: No usable UNC path provided in device string! [ 188.739876][ T7325] [ 188.779195][ T7325] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.174375][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 190.937732][ T7349] netlink: 146 bytes leftover after parsing attributes in process `syz.0.262'. [ 191.058354][ T5638] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 191.080498][ T7356] vivid-008: ================= START STATUS ================= [ 191.137438][ T7356] vivid-008: ================== END STATUS ================== [ 192.162130][ T7357] random: crng reseeded on system resumption [ 193.110241][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.015592][ T7393] vivid-008: ================= START STATUS ================= [ 194.018301][ T5638] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 194.033804][ T7393] vivid-008: ================== END STATUS ================== [ 194.380971][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392797][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.067564][ T7393] random: crng reseeded on system resumption [ 195.181025][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.547755][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 195.657202][ T7416] bond0: (slave bond_slave_0): Releasing backup interface [ 196.059603][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.138297][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.427969][ T7493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.487147][ T7493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.574210][ T7493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.675829][ T7493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.458210][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.538360][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.618237][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.698264][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.858299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 208.318199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 209.397029][ T29] audit: type=1800 audit(1777656275.195:4): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.320" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 211.093723][ T5628] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 211.120374][ T7647] vivid-008: ================= START STATUS ================= [ 211.218241][ T7647] vivid-008: ================== END STATUS ================== [ 211.845635][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 211.957013][ T7660] netlink: 27053 bytes leftover after parsing attributes in process `syz.1.325'. [ 212.837243][ T7646] random: crng reseeded on system resumption [ 213.178618][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.528148][ T29] audit: type=1800 audit(1777656280.315:5): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.330" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 214.760023][ T7687] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 214.786916][ T7687] netlink: 'syz.3.332': attribute type 6 has an invalid length. [ 215.173909][ T7691] netlink: 342 bytes leftover after parsing attributes in process `syz.1.326'. [ 215.258485][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.678773][ T5628] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 217.694119][ T7730] vivid-008: ================= START STATUS ================= [ 217.703572][ T7730] vivid-008: ================== END STATUS ================== [ 219.738199][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.956412][ T7735] random: crng reseeded on system resumption [ 221.818264][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.316181][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 236.582034][ T7924] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 236.620630][ T7924] File: /dev/nullb0 PID: 7924 Comm: syz.2.376 [ 236.622132][ T7916] FAULT_INJECTION: forcing a failure. [ 236.622132][ T7916] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.982913][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.1.377 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.982944][ T7916] Tainted: [L]=SOFTLOCKUP [ 236.982949][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.982961][ T7916] Call Trace: [ 236.982968][ T7916] [ 236.982973][ T7916] dump_stack_lvl+0x100/0x190 [ 236.982995][ T7916] should_fail_ex.cold+0x5/0xa [ 236.983015][ T7916] get_futex_key+0x1d2/0x1510 [ 236.983034][ T7916] ? __pfx_get_futex_key+0x10/0x10 [ 236.983048][ T7916] ? find_held_lock+0x2b/0x80 [ 236.983066][ T7916] ? futex_wake+0x456/0x530 [ 236.983089][ T7916] futex_wake+0xea/0x530 [ 236.983109][ T7916] ? __pfx_futex_wake+0x10/0x10 [ 236.983129][ T7916] ? find_held_lock+0x2b/0x80 [ 236.983147][ T7916] ? do_sys_openat2+0x1b4/0x1e0 [ 236.983167][ T7916] ? do_sys_openat2+0x1b4/0x1e0 [ 236.983196][ T7916] do_futex+0x32b/0x350 [ 236.983213][ T7916] ? __pfx_do_futex+0x10/0x10 [ 236.983228][ T7916] ? __fget_files+0x215/0x3d0 [ 236.983250][ T7916] __x64_sys_futex+0x34f/0x4d0 [ 236.983269][ T7916] ? __pfx___x64_sys_futex+0x10/0x10 [ 236.983286][ T7916] ? __sys_setsockopt+0x139/0x190 [ 236.983310][ T7916] ? rcu_is_watching+0x12/0xc0 [ 236.983330][ T7916] do_syscall_64+0x10b/0xf80 [ 236.983347][ T7916] ? clear_bhb_loop+0x40/0x90 [ 236.983366][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.983381][ T7916] RIP: 0033:0x7f9498d9cdd9 [ 236.983394][ T7916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.983408][ T7916] RSP: 002b:00007f9499bae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.983425][ T7916] RAX: ffffffffffffffda RBX: 00007f9499016098 RCX: 00007f9498d9cdd9 [ 236.983436][ T7916] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f949901609c [ 236.983447][ T7916] RBP: 00007f9499016090 R08: 0000000000000001 R09: 0000000000000000 [ 236.983455][ T7916] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 236.983464][ T7916] R13: 00007f9499016128 R14: 00007fffd0b9efb0 R15: 00007fffd0b9f098 [ 236.983482][ T7916] [ 242.044989][ T8020] WARNING! power/level is deprecated; use power/control instead [ 244.924486][ T8044] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 245.001555][ T8044] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 246.234439][ T8070] FAULT_INJECTION: forcing a failure. [ 246.234439][ T8070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.248824][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: syz.3.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.248851][ T8070] Tainted: [L]=SOFTLOCKUP [ 246.248856][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.248866][ T8070] Call Trace: [ 246.248871][ T8070] [ 246.248892][ T8070] dump_stack_lvl+0x100/0x190 [ 246.248915][ T8070] should_fail_ex.cold+0x5/0xa [ 246.248933][ T8070] ? prepare_alloc_pages+0x16d/0x5f0 [ 246.248953][ T8070] should_fail_alloc_page+0xeb/0x140 [ 246.248974][ T8070] prepare_alloc_pages+0x1f0/0x5f0 [ 246.248995][ T8070] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 246.249020][ T8070] ? __lock_acquire+0x4a5/0x2630 [ 246.249034][ T8070] ? __lock_acquire+0x4a5/0x2630 [ 246.249054][ T8070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.249076][ T8070] ? find_held_lock+0x2b/0x80 [ 246.249097][ T8070] ? mark_held_locks+0x40/0x70 [ 246.249110][ T8070] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 246.249135][ T8070] ? __lock_acquire+0x4a5/0x2630 [ 246.249149][ T8070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.249172][ T8070] ? policy_nodemask+0xed/0x4f0 [ 246.249190][ T8070] alloc_pages_mpol+0x1fb/0x540 [ 246.249208][ T8070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 246.249226][ T8070] ? mark_held_locks+0x40/0x70 [ 246.249241][ T8070] alloc_pages_noprof+0x1a/0x160 [ 246.249261][ T8070] pte_alloc_one+0x1c/0x3d0 [ 246.249281][ T8070] __pte_alloc+0x6d/0x3e0 [ 246.249297][ T8070] ? __pfx___pte_alloc+0x10/0x10 [ 246.249314][ T8070] ? __rcu_read_unlock+0x27f/0x5e0 [ 246.249330][ T8070] walk_pgd_range+0xb99/0x1dd0 [ 246.249347][ T8070] ? __pfx_guard_install_set_pte+0x10/0x10 [ 246.249364][ T8070] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 246.249384][ T8070] ? __pfx_guard_install_set_pte+0x10/0x10 [ 246.249408][ T8070] ? __pfx_guard_install_set_pte+0x10/0x10 [ 246.249440][ T8070] ? __pfx_guard_install_set_pte+0x10/0x10 [ 246.249461][ T8070] ? __pfx_walk_pgd_range+0x10/0x10 [ 246.249477][ T8070] ? find_held_lock+0x2b/0x80 [ 246.249497][ T8070] __walk_page_range+0x163/0x820 [ 246.249518][ T8070] ? find_vma+0xbf/0x140 [ 246.249533][ T8070] ? __pfx_find_vma+0x10/0x10 [ 246.249551][ T8070] ? walk_page_test+0x78/0x180 [ 246.249567][ T8070] walk_page_range_mm_unsafe+0x563/0xa10 [ 246.249586][ T8070] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 246.249614][ T8070] madvise_guard_install+0x2dd/0x790 [ 246.249645][ T8070] ? __pfx_madvise_guard_install+0x10/0x10 [ 246.249675][ T8070] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 246.249693][ T8070] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 246.249711][ T8070] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 246.249731][ T8070] ? __pfx_guard_install_set_pte+0x10/0x10 [ 246.249750][ T8070] ? mtree_range_walk+0x72b/0xb70 [ 246.249770][ T8070] madvise_vma_behavior+0xc40/0x2200 [ 246.249791][ T8070] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 246.249817][ T8070] ? find_vma_prev+0xd8/0x150 [ 246.249833][ T8070] ? lock_vma_under_rcu+0x1f9/0x590 [ 246.249854][ T8070] ? __pfx_find_vma_prev+0x10/0x10 [ 246.249881][ T8070] ? find_held_lock+0x2b/0x80 [ 246.249900][ T8070] ? madvise_do_behavior+0x1ea/0x510 [ 246.249919][ T8070] ? madvise_do_behavior+0x1ea/0x510 [ 246.249943][ T8070] madvise_walk_vmas+0x2fe/0xa90 [ 246.249966][ T8070] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 246.249987][ T8070] ? find_held_lock+0x2b/0x80 [ 246.250009][ T8070] madvise_do_behavior+0x1ea/0x510 [ 246.250031][ T8070] ? __pfx_madvise_do_behavior+0x10/0x10 [ 246.250050][ T8070] ? futex_wait+0x11e/0x370 [ 246.250075][ T8070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.250098][ T8070] do_madvise+0x195/0x240 [ 246.250117][ T8070] ? __pfx_do_madvise+0x10/0x10 [ 246.250135][ T8070] ? do_futex+0x192/0x350 [ 246.250154][ T8070] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 246.250198][ T8070] __x64_sys_madvise+0xa9/0x110 [ 246.250225][ T8070] ? lockdep_hardirqs_on+0x78/0x100 [ 246.250243][ T8070] do_syscall_64+0x10b/0xf80 [ 246.250260][ T8070] ? clear_bhb_loop+0x40/0x90 [ 246.250279][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.250294][ T8070] RIP: 0033:0x7f7d3ef9cdd9 [ 246.250309][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.250322][ T8070] RSP: 002b:00007f7d3ff3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 246.250337][ T8070] RAX: ffffffffffffffda RBX: 00007f7d3f215fa0 RCX: 00007f7d3ef9cdd9 [ 246.250347][ T8070] RDX: 0000000000000066 RSI: 0000000100010000 RDI: 0000000000000000 [ 246.250356][ T8070] RBP: 00007f7d3f032d69 R08: 0000000000000000 R09: 0000000000000000 [ 246.250365][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.250374][ T8070] R13: 00007f7d3f216038 R14: 00007f7d3f215fa0 R15: 00007ffef305d108 [ 246.250394][ T8070] [ 254.323569][ T8197] sd 0:0:1:0: PR command failed: 1026 [ 254.335357][ T8197] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 254.355573][ T8197] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 255.017663][ T8179] tipc: can't start tipc send workqueue [ 255.827885][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839432][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.358258][ T8227] mtrr: base(0x32000) is not aligned on a size(0x2b3000) boundary [ 257.902503][ T8251] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 265.775549][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 265.809198][ T8374] netlink: 25 bytes leftover after parsing attributes in process `syz.1.472'. [ 266.671965][ T8394] FAULT_INJECTION: forcing a failure. [ 266.671965][ T8394] name failslab, interval 1, probability 0, space 0, times 0 [ 266.827973][ T8394] CPU: 0 UID: 0 PID: 8394 Comm: syz.3.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.828021][ T8394] Tainted: [L]=SOFTLOCKUP [ 266.828031][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.828048][ T8394] Call Trace: [ 266.828057][ T8394] [ 266.828071][ T8394] dump_stack_lvl+0x100/0x190 [ 266.828106][ T8394] should_fail_ex.cold+0x5/0xa [ 266.828138][ T8394] should_failslab+0xc2/0x120 [ 266.828169][ T8394] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 266.828211][ T8394] ? __d_alloc+0x34/0xa40 [ 266.828249][ T8394] __d_alloc+0x34/0xa40 [ 266.828286][ T8394] d_alloc+0x4a/0x1e0 [ 266.828322][ T8394] lookup_one_qstr_excl+0x171/0x250 [ 266.828373][ T8394] start_dirop+0x59/0xb0 [ 266.828403][ T8394] simple_start_creating+0xf9/0x110 [ 266.828435][ T8394] ? __pfx_simple_start_creating+0x10/0x10 [ 266.828470][ T8394] ? mntput+0x70/0xa0 [ 266.828499][ T8394] ? simple_pin_fs+0xa3/0x190 [ 266.828529][ T8394] debugfs_start_creating.part.0+0x82/0x170 [ 266.828572][ T8394] __debugfs_create_file+0xb3/0x4f0 [ 266.828618][ T8394] debugfs_create_file_full+0x41/0x60 [ 266.828664][ T8394] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 266.828698][ T8394] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 266.828731][ T8394] ? ida_alloc_range+0x70d/0x830 [ 266.828797][ T8394] ? lockdep_init_map_type+0x5c/0x250 [ 266.828833][ T8394] preinit_net.part.0+0x252/0x920 [ 266.828866][ T8394] copy_net_ns+0x339/0x7c0 [ 266.828901][ T8394] create_new_namespaces+0x3ea/0xac0 [ 266.828945][ T8394] unshare_nsproxy_namespaces+0xf2/0x220 [ 266.828986][ T8394] ksys_unshare+0x438/0xab0 [ 266.829030][ T8394] ? __pfx_ksys_unshare+0x10/0x10 [ 266.829070][ T8394] ? xfd_validate_state+0x129/0x190 [ 266.829095][ T8394] ? ksys_write+0x1ac/0x250 [ 266.829137][ T8394] __x64_sys_unshare+0x31/0x40 [ 266.829179][ T8394] do_syscall_64+0x10b/0xf80 [ 266.829212][ T8394] ? clear_bhb_loop+0x40/0x90 [ 266.829247][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.829276][ T8394] RIP: 0033:0x7f7d3ef9cdd9 [ 266.829299][ T8394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.829325][ T8394] RSP: 002b:00007f7d3fefc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.829359][ T8394] RAX: ffffffffffffffda RBX: 00007f7d3f216180 RCX: 00007f7d3ef9cdd9 [ 266.829378][ T8394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 266.829396][ T8394] RBP: 00007f7d3f032d69 R08: 0000000000000000 R09: 0000000000000000 [ 266.829413][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.829430][ T8394] R13: 00007f7d3f216218 R14: 00007f7d3f216180 R15: 00007ffef305d108 [ 266.829468][ T8394] [ 269.843811][ T8437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.954781][ T8459] netlink: 342 bytes leftover after parsing attributes in process `syz.3.491'. [ 274.458245][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.492410][ T8467] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 275.043969][ T8467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.139701][ T8467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.216509][ T8467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.232753][ T8507] netlink: 186 bytes leftover after parsing attributes in process `syz.0.500'. [ 275.253823][ T8507] netlink: 186 bytes leftover after parsing attributes in process `syz.0.500'. [ 276.392177][ T5628] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 276.392217][ T5628] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 276.618163][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.178316][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.268662][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.444397][ T8598] FAULT_INJECTION: forcing a failure. [ 281.444397][ T8598] name failslab, interval 1, probability 0, space 0, times 0 [ 281.488493][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz.1.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.488541][ T8598] Tainted: [L]=SOFTLOCKUP [ 281.488551][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.488567][ T8598] Call Trace: [ 281.488577][ T8598] [ 281.488588][ T8598] dump_stack_lvl+0x100/0x190 [ 281.488624][ T8598] should_fail_ex.cold+0x5/0xa [ 281.488660][ T8598] should_failslab+0xc2/0x120 [ 281.488695][ T8598] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 281.488749][ T8598] ? vm_area_alloc+0x1f/0x160 [ 281.488799][ T8598] vm_area_alloc+0x1f/0x160 [ 281.488838][ T8598] __mmap_region+0x104d/0x2da0 [ 281.488885][ T8598] ? do_raw_spin_lock+0x128/0x260 [ 281.488919][ T8598] ? __pfx___mmap_region+0x10/0x10 [ 281.488969][ T8598] ? lock_acquire+0x1b1/0x370 [ 281.488997][ T8598] ? find_held_lock+0x2b/0x80 [ 281.489042][ T8598] ? ktime_get+0x9f/0x320 [ 281.489082][ T8598] ? ktime_get+0x1a4/0x320 [ 281.489122][ T8598] ? lapic_next_event+0x10/0x20 [ 281.489148][ T8598] ? clockevents_program_event+0x1ef/0x820 [ 281.489195][ T8598] ? tick_program_event+0xb0/0x140 [ 281.489233][ T8598] ? hrtimer_reprogram+0x165/0x6c0 [ 281.489274][ T8598] ? mark_held_locks+0x40/0x70 [ 281.489294][ T8598] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 281.489382][ T8598] mmap_region+0x527/0x620 [ 281.489413][ T8598] ? __pfx_mmap_region+0x10/0x10 [ 281.489444][ T8598] ? cap_mmap_addr+0x4b/0x120 [ 281.489478][ T8598] ? bpf_lsm_mmap_addr+0x9/0x30 [ 281.489506][ T8598] ? security_mmap_addr+0x71/0x1e0 [ 281.489538][ T8598] ? __get_unmapped_area+0x255/0x3e0 [ 281.489578][ T8598] do_mmap+0xc63/0x12f0 [ 281.489619][ T8598] ? __pfx_do_mmap+0x10/0x10 [ 281.489653][ T8598] ? __pfx_down_write_killable+0x10/0x10 [ 281.489726][ T8598] vm_mmap_pgoff+0x29e/0x470 [ 281.489771][ T8598] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 281.489804][ T8598] ? __fget_files+0x215/0x3d0 [ 281.489844][ T8598] ? __fget_files+0x21f/0x3d0 [ 281.489884][ T8598] ksys_mmap_pgoff+0x3cb/0x610 [ 281.489918][ T8598] ? __x64_sys_futex+0x358/0x4d0 [ 281.489949][ T8598] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 281.489988][ T8598] ? xfd_validate_state+0x129/0x190 [ 281.490015][ T8598] ? ksys_write+0x1ac/0x250 [ 281.490053][ T8598] __x64_sys_mmap+0x125/0x190 [ 281.490090][ T8598] do_syscall_64+0x10b/0xf80 [ 281.490125][ T8598] ? clear_bhb_loop+0x40/0x90 [ 281.490155][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.490182][ T8598] RIP: 0033:0x7f9498d9cdd9 [ 281.490202][ T8598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.490229][ T8598] RSP: 002b:00007f9499b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 281.490256][ T8598] RAX: ffffffffffffffda RBX: 00007f9499016180 RCX: 00007f9498d9cdd9 [ 281.490271][ T8598] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 281.490279][ T8598] RBP: 00007f9498e32d69 R08: 00000000000000dd R09: 0000000000000000 [ 281.490288][ T8598] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 281.490296][ T8598] R13: 00007f9499016218 R14: 00007f9499016180 R15: 00007fffd0b9f098 [ 281.490315][ T8598] [ 282.850170][ T8615] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 283.180710][ T5628] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 283.180752][ T5628] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 285.676401][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 291.018300][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 291.040879][ T8772] netlink: 354 bytes leftover after parsing attributes in process `syz.0.551'. [ 292.218134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 293.056059][ T8802] netlink: 330 bytes leftover after parsing attributes in process `syz.3.562'. [ 293.289321][ T8808] netlink: 206 bytes leftover after parsing attributes in process `syz.1.564'. [ 295.402214][ T8857] smpboot: CPU 1 is now offline [ 297.548982][ T29] audit: type=1800 audit(1843104559.620:6): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.578" name="features" dev="configfs" ino=21486 res=0 errno=0 [ 298.352422][ T8915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.353667][ T8915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.353821][ T8915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.353955][ T8915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.288346][ T8923] random: crng reseeded on system resumption [ 299.363387][ T8914] kexec: Could not allocate control_code_buffer [ 299.978503][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.084959][ T8958] sd 0:0:1:0: PR command failed: 1026 [ 300.126585][ T8943] random: crng reseeded on system resumption [ 300.137791][ T8958] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 300.207073][ T8958] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 300.378284][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.384396][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.390520][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.370084][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 302.708283][ T8955] program syz.3.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.104084][ T8994] block2mtd: illegal erase size [ 304.229098][ T8994] netlink: 354 bytes leftover after parsing attributes in process `syz.0.596'. [ 305.010876][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 306.031418][ T9027] vhci_hcd vhci_hcd.2: invalid port number 111 [ 306.079141][ T9027] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l5094 [ 307.972973][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 308.222124][ T9074] netlink: zone id is out of range [ 308.246752][ T9074] netlink: zone id is out of range [ 308.274027][ T9074] netlink: zone id is out of range [ 308.338349][ T9071] netlink: zone id is out of range [ 308.391706][ T9071] netlink: zone id is out of range [ 308.437843][ T9071] netlink: zone id is out of range [ 308.465930][ T9074] netlink: set zone limit has 8 unknown bytes [ 308.506305][ T9071] netlink: zone id is out of range [ 308.559260][ T9071] netlink: zone id is out of range [ 308.594659][ T9071] netlink: zone id is out of range [ 309.880431][ T9096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.916860][ T9096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.947547][ T9096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.974495][ T9096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.182756][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.978256][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 311.984298][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 311.990359][ T5628] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.079644][ T9143] bonding: no command found in bonding_masters - use +ifname or -ifname [ 312.245967][ T5628] Bluetooth: hci3: unexpected event 0x33 length: 124 > 10 [ 313.843443][ T9190] 0 [ 315.129644][ T9210] FAULT_INJECTION: forcing a failure. [ 315.129644][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 315.533008][ T9210] CPU: 0 UID: 0 PID: 9210 Comm: syz.3.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.533036][ T9210] Tainted: [L]=SOFTLOCKUP [ 315.533042][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.533054][ T9210] Call Trace: [ 315.533059][ T9210] [ 315.533066][ T9210] dump_stack_lvl+0x100/0x190 [ 315.533089][ T9210] should_fail_ex.cold+0x5/0xa [ 315.533110][ T9210] should_failslab+0xc2/0x120 [ 315.533127][ T9210] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 315.533142][ T9210] ? devinet_init_net+0xf1/0x8d0 [ 315.533164][ T9210] kmemdup_noprof+0x29/0x60 [ 315.533180][ T9210] devinet_init_net+0xf1/0x8d0 [ 315.533200][ T9210] ? __pfx_devinet_init_net+0x10/0x10 [ 315.533218][ T9210] ops_init+0x1e2/0x5f0 [ 315.533235][ T9210] setup_net+0x118/0x3a0 [ 315.533251][ T9210] ? __pfx_setup_net+0x10/0x10 [ 315.533266][ T9210] ? mutex_init_lockdep+0xf1/0x120 [ 315.533285][ T9210] copy_net_ns+0x46f/0x7c0 [ 315.533304][ T9210] create_new_namespaces+0x3ea/0xac0 [ 315.533327][ T9210] unshare_nsproxy_namespaces+0xf2/0x220 [ 315.533347][ T9210] ksys_unshare+0x438/0xab0 [ 315.533369][ T9210] ? __pfx_ksys_unshare+0x10/0x10 [ 315.533397][ T9210] ? xfd_validate_state+0x129/0x190 [ 315.533419][ T9210] __x64_sys_unshare+0x31/0x40 [ 315.533441][ T9210] do_syscall_64+0x10b/0xf80 [ 315.533459][ T9210] ? clear_bhb_loop+0x40/0x90 [ 315.533477][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.533492][ T9210] RIP: 0033:0x7f7d3ef9cdd9 [ 315.533505][ T9210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.533518][ T9210] RSP: 002b:00007f7d3ff1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 315.533533][ T9210] RAX: ffffffffffffffda RBX: 00007f7d3f216090 RCX: 00007f7d3ef9cdd9 [ 315.533542][ T9210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 315.533551][ T9210] RBP: 00007f7d3f032d69 R08: 0000000000000000 R09: 0000000000000000 [ 315.533559][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.533567][ T9210] R13: 00007f7d3f216128 R14: 00007f7d3f216090 R15: 00007ffef305d108 [ 315.533586][ T9210] [ 317.262825][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273180][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.727411][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.649'. [ 317.795902][ T9244] bond0: (slave bond_slave_0): Releasing backup interface [ 318.224914][ T9252] futex_wake_op: syz.0.651 tries to shift op by -2048; fix this program [ 318.280442][ T9254] No such timeout policy "" [ 318.351756][ T9252] futex_wake_op: syz.0.651 tries to shift op by -2048; fix this program [ 318.363632][ T9254] net_ratelimit: 366 callbacks suppressed [ 318.363647][ T9254] netlink: Failed to associated timeout policy '' [ 320.195366][ T9289] netlink: 'syz.2.657': attribute type 4 has an invalid length. [ 324.696372][ T9363] futex_wake_op: syz.2.674 tries to shift op by -2048; fix this program [ 324.810846][ T9363] futex_wake_op: syz.2.674 tries to shift op by -2048; fix this program [ 325.307129][ T9388] FAULT_INJECTION: forcing a failure. [ 325.307129][ T9388] name failslab, interval 1, probability 0, space 0, times 0 [ 325.416563][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.3.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.416590][ T9388] Tainted: [L]=SOFTLOCKUP [ 325.416595][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.416604][ T9388] Call Trace: [ 325.416610][ T9388] [ 325.416615][ T9388] dump_stack_lvl+0x100/0x190 [ 325.416637][ T9388] should_fail_ex.cold+0x5/0xa [ 325.416658][ T9388] should_failslab+0xc2/0x120 [ 325.416675][ T9388] __kmalloc_cache_noprof+0x7a/0x6f0 [ 325.416697][ T9388] ? loopback_open+0xa0a/0x13f0 [ 325.416716][ T9388] loopback_open+0xa0a/0x13f0 [ 325.416735][ T9388] snd_pcm_open_substream+0xa76/0x1850 [ 325.416769][ T9388] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 325.416793][ T9388] ? rcu_is_watching+0x12/0xc0 [ 325.416816][ T9388] snd_pcm_open+0x2a3/0x710 [ 325.416841][ T9388] ? __pfx_snd_pcm_open+0x10/0x10 [ 325.416866][ T9388] ? __pfx_default_wake_function+0x10/0x10 [ 325.416891][ T9388] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 325.416913][ T9388] snd_pcm_playback_open+0x86/0xe0 [ 325.416936][ T9388] snd_open+0x201/0x450 [ 325.416955][ T9388] ? __pfx_snd_open+0x10/0x10 [ 325.416972][ T9388] chrdev_open+0x234/0x6a0 [ 325.416989][ T9388] ? __pfx_apparmor_file_open+0x10/0x10 [ 325.417011][ T9388] ? __pfx_chrdev_open+0x10/0x10 [ 325.417033][ T9388] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 325.417056][ T9388] do_dentry_open+0x6d8/0x1660 [ 325.417074][ T9388] ? __pfx_chrdev_open+0x10/0x10 [ 325.417097][ T9388] vfs_open+0x82/0x3f0 [ 325.417120][ T9388] path_openat+0x208c/0x31a0 [ 325.417144][ T9388] ? __pfx_path_openat+0x10/0x10 [ 325.417169][ T9388] do_file_open+0x20e/0x430 [ 325.417187][ T9388] ? __pfx_do_file_open+0x10/0x10 [ 325.417218][ T9388] ? alloc_fd+0x476/0x790 [ 325.417237][ T9388] ? do_getname+0x191/0x390 [ 325.417259][ T9388] do_sys_openat2+0x10d/0x1e0 [ 325.417281][ T9388] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.417303][ T9388] ? __fget_files+0x21f/0x3d0 [ 325.417324][ T9388] __x64_sys_openat+0x12d/0x210 [ 325.417346][ T9388] ? __pfx___x64_sys_openat+0x10/0x10 [ 325.417370][ T9388] ? rcu_is_watching+0x12/0xc0 [ 325.417390][ T9388] do_syscall_64+0x10b/0xf80 [ 325.417407][ T9388] ? clear_bhb_loop+0x40/0x90 [ 325.417425][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.417441][ T9388] RIP: 0033:0x7f7d3ef9cdd9 [ 325.417455][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.417468][ T9388] RSP: 002b:00007f7d3fedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.417483][ T9388] RAX: ffffffffffffffda RBX: 00007f7d3f216270 RCX: 00007f7d3ef9cdd9 [ 325.417494][ T9388] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 325.417504][ T9388] RBP: 00007f7d3f032d69 R08: 0000000000000000 R09: 0000000000000000 [ 325.417513][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.417522][ T9388] R13: 00007f7d3f216308 R14: 00007f7d3f216270 R15: 00007ffef305d108 [ 325.417542][ T9388] [ 327.083717][ T9411] netlink: 186 bytes leftover after parsing attributes in process `syz.1.684'. [ 329.156087][ T9455] [ 329.158452][ T9455] ====================================================== [ 329.165546][ T9455] WARNING: possible circular locking dependency detected [ 329.172552][ T9455] syzkaller #0 Tainted: G L [ 329.178597][ T9455] ------------------------------------------------------ [ 329.185649][ T9455] syz.1.693/9455 is trying to acquire lock: [ 329.191539][ T9455] ffff88806492afe8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 329.203118][ T9455] [ 329.203118][ T9455] but task is already holding lock: [ 329.210497][ T9455] ffff88806492b460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 329.219450][ T9455] [ 329.219450][ T9455] which lock already depends on the new lock. [ 329.219450][ T9455] [ 329.229845][ T9455] [ 329.229845][ T9455] the existing dependency chain (in reverse order) is: [ 329.238846][ T9455] [ 329.238846][ T9455] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 329.246577][ T9455] lock_sock_nested+0x41/0xf0 [ 329.251771][ T9455] smc_listen_out+0x1f5/0x4b0 [ 329.256970][ T9455] smc_listen_work+0x4c2/0x50e0 [ 329.262348][ T9455] process_one_work+0xa0e/0x1980 [ 329.267796][ T9455] worker_thread+0x5ef/0xe50 [ 329.272898][ T9455] kthread+0x370/0x450 [ 329.277469][ T9455] ret_from_fork+0x72b/0xd50 [ 329.282649][ T9455] ret_from_fork_asm+0x1a/0x30 [ 329.287921][ T9455] [ 329.287921][ T9455] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 329.298065][ T9455] __lock_acquire+0x14b8/0x2630 [ 329.303418][ T9455] lock_acquire+0x1b1/0x370 [ 329.308430][ T9455] __flush_work+0x4de/0xcb0 [ 329.313643][ T9455] cancel_work_sync+0xd1/0xf0 [ 329.318840][ T9455] smc_clcsock_release+0x5f/0xe0 [ 329.324292][ T9455] __smc_release+0x5c2/0x880 [ 329.329385][ T9455] smc_close_non_accepted+0xda/0x200 [ 329.335182][ T9455] smc_close_active+0x4ff/0x1070 [ 329.340625][ T9455] __smc_release+0x634/0x880 [ 329.345716][ T9455] smc_release+0x1fc/0x620 [ 329.350731][ T9455] __sock_release+0xb3/0x260 [ 329.355849][ T9455] sock_close+0x1c/0x30 [ 329.360523][ T9455] __fput+0x3ff/0xb50 [ 329.365016][ T9455] task_work_run+0x150/0x240 [ 329.370111][ T9455] exit_to_user_mode_loop+0x100/0x4a0 [ 329.376423][ T9455] do_syscall_64+0x6f2/0xf80 [ 329.381523][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.387919][ T9455] [ 329.387919][ T9455] other info that might help us debug this: [ 329.387919][ T9455] [ 329.398138][ T9455] Possible unsafe locking scenario: [ 329.398138][ T9455] [ 329.405600][ T9455] CPU0 CPU1 [ 329.410944][ T9455] ---- ---- [ 329.416283][ T9455] lock(sk_lock-AF_SMC/1); [ 329.420785][ T9455] lock((work_completion)(&new_smc->smc_listen_work)); [ 329.430314][ T9455] lock(sk_lock-AF_SMC/1); [ 329.437500][ T9455] lock((work_completion)(&new_smc->smc_listen_work)); [ 329.444430][ T9455] [ 329.444430][ T9455] *** DEADLOCK *** [ 329.444430][ T9455] [ 329.452571][ T9455] 3 locks held by syz.1.693/9455: [ 329.457949][ T9455] #0: ffff88807694e840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 329.468489][ T9455] #1: ffff88806492b460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 329.477889][ T9455] #2: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 329.487012][ T9455] [ 329.487012][ T9455] stack backtrace: [ 329.492886][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.1.693 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.492910][ T9455] Tainted: [L]=SOFTLOCKUP [ 329.492916][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.492924][ T9455] Call Trace: [ 329.492931][ T9455] [ 329.492937][ T9455] dump_stack_lvl+0x100/0x190 [ 329.492954][ T9455] print_circular_bug.cold+0x178/0x1c7 [ 329.492977][ T9455] check_noncircular+0x146/0x160 [ 329.493001][ T9455] __lock_acquire+0x14b8/0x2630 [ 329.493017][ T9455] lock_acquire+0x1b1/0x370 [ 329.493029][ T9455] ? __flush_work+0x4ca/0xcb0 [ 329.493044][ T9455] ? mark_held_locks+0x40/0x70 [ 329.493057][ T9455] ? __flush_work+0x4ca/0xcb0 [ 329.493070][ T9455] __flush_work+0x4de/0xcb0 [ 329.493086][ T9455] ? __flush_work+0x4ca/0xcb0 [ 329.493101][ T9455] ? __pfx___flush_work+0x10/0x10 [ 329.493116][ T9455] ? __pfx_wq_barrier_func+0x10/0x10 [ 329.493137][ T9455] ? __pfx___might_resched+0x10/0x10 [ 329.493155][ T9455] cancel_work_sync+0xd1/0xf0 [ 329.493172][ T9455] smc_clcsock_release+0x5f/0xe0 [ 329.493189][ T9455] __smc_release+0x5c2/0x880 [ 329.493203][ T9455] ? __pfx_sock_def_readable+0x10/0x10 [ 329.493226][ T9455] smc_close_non_accepted+0xda/0x200 [ 329.493241][ T9455] smc_close_active+0x4ff/0x1070 [ 329.493258][ T9455] __smc_release+0x634/0x880 [ 329.493272][ T9455] smc_release+0x1fc/0x620 [ 329.493286][ T9455] __sock_release+0xb3/0x260 [ 329.493299][ T9455] ? __pfx_sock_close+0x10/0x10 [ 329.493313][ T9455] sock_close+0x1c/0x30 [ 329.493325][ T9455] __fput+0x3ff/0xb50 [ 329.493346][ T9455] task_work_run+0x150/0x240 [ 329.493360][ T9455] ? __pfx_task_work_run+0x10/0x10 [ 329.493374][ T9455] ? rcu_is_watching+0x12/0xc0 [ 329.493392][ T9455] exit_to_user_mode_loop+0x100/0x4a0 [ 329.493406][ T9455] ? do_syscall_64+0x519/0xf80 [ 329.493423][ T9455] do_syscall_64+0x6f2/0xf80 [ 329.493439][ T9455] ? clear_bhb_loop+0x40/0x90 [ 329.493455][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.493470][ T9455] RIP: 0033:0x7f9498d9cdd9 [ 329.493482][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.493496][ T9455] RSP: 002b:00007fffd0b9f1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.493509][ T9455] RAX: 0000000000000000 RBX: 00007f9499017da0 RCX: 00007f9498d9cdd9 [ 329.493518][ T9455] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.493526][ T9455] RBP: 00007f9499017da0 R08: 00007f9499016038 R09: 0000000000000000 [ 329.493535][ T9455] R10: 00000000005a4514 R11: 0000000000000246 R12: 000000000005074f [ 329.493543][ T9455] R13: 00007f949901609c R14: 000000000005050b R15: 00007f9499016090 [ 329.493556][ T9455]