last executing test programs: 12.581975458s ago: executing program 2 (id=223): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000001c0), r1) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x800) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r4, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r5 = epoll_create$auto(0x1) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r6, 0x0, 0x7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r8, 0x0, 0x10001, 0x830) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x12) 12.470270808s ago: executing program 1 (id=224): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x70db03, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xa4, 0xd, 0xb0, @raw=0x7fff}}) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x4, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000081) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000340), r4) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdf252400000005001500084400001f001600e121614a13aad0c2e4ffde1f6086e6a42fde6ba40164249cff60a700050023005400000005001a000b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000885}, 0x5) 11.534363955s ago: executing program 2 (id=228): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x218202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x8, 0x28, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x7fffffffffffffff, 0x2, 0x8003) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x100, 0x5, 0x10, 0xff, r0, 0x696c81cd) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9}, 0x2000000001) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0) add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) 10.353657571s ago: executing program 2 (id=229): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00", "10000000000000000800fff0"]}) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r4, &(0x7f0000000040)='#[-#\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) close_range$auto(r5, r0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a004d760007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a0001c17dbf8bc10839e6677bd45551033383dcdb94672b7a5a3784cc8f75a29fd082b4363eee9f9c45fe2deb3e0fb0f74736b69a1cc74dc0f67b9d06ed19e7e575a9c5d07b89e3b5bf305b06a8c1f050ed2f88f3f1a5af4e9d3448fc5e05"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x44050) r6 = socket(0x2, 0x3, 0x100) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f0000000340)="0b5af3d07c890a2c62e346ab216d96696577ddb44afc3915c4eb1910312124f1c758c8e0e7594b5a3706fe4cc1dfd0671fbcaf87c8ace2658441358300e8ce9cda5eed946c564c5e4cf8cc16a7f5346325e6540f108d2ecf6b8d1e2f68803ae7176836497d5615523349f693489ce7c6e921c00cf620e5fd854d9eaa6f656aeb62100300cd948fe9d6593ef4fef1d90968fb5e1912", 0x81e) socket(0x29, 0x5, 0x1006) socketpair$auto(0x1, 0x6f9788c6, 0xd, &(0x7f0000000280)=0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008010}, 0x8040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) syz_clone(0x11, 0x0, 0x4, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 9.813669414s ago: executing program 3 (id=231): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d30", 0x2c9) mmap$auto(0x0, 0x8, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c0a, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1854c2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) r2 = waitid$auto_P_ALL(0x0, 0x8000, &(0x7f0000000340)={@_si_pad}, 0x6, &(0x7f00000003c0)={{0x8001, 0x80000000}, {0x3, 0x20000001}, 0x0, 0xd, 0x8, 0xae0, 0x1, 0x2, 0xfffffffffffffff8, 0xf62, 0x5dcac2d0, 0x100000000, 0x5, 0x0, 0x2, 0x3}) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) prlimit64$auto(0x0, 0x7, &(0x7f0000000cc0)={0xfff, 0xf1c6}, 0x0) poll$auto(&(0x7f0000000f80)={0xffffffffffffffff, 0xa06}, 0x3fa, 0x20) 9.567717058s ago: executing program 1 (id=233): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x5, 0x0) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) r4 = memfd_create$auto(0x0, 0x4) statx$auto(r4, 0x0, 0x1000, 0xbdfc, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2202000d, 0x4000003, 0xebd, 0xffffffffffffffff, 0x100000007ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) memfd_create$auto(0x0, 0x4) clone$auto(0xfffffffffffffbd9, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x400000000000021, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) close_range$auto(r0, r0, 0x5) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0) 8.0482177s ago: executing program 3 (id=235): unshare$auto(0x40000080) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) read$auto_rng_chrdev_ops_core(r0, 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = fanotify_init$auto(0x5, 0x2000000000002) r3 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'pim6reg1\x00'}) r8 = socket(0x1e, 0x5, 0x7f) fanotify_init$auto(0x8, 0x2000000000002) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001180)={'team_slave_0\x00'}) 7.995313642s ago: executing program 0 (id=236): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = io_uring_setup$auto(0x8, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a3) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(r0, 0x1002) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x22, 0xfffffffb}, 0x800009}, 0x5, 0x20000000) r3 = accept$auto(r1, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4010}, 0x4000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, r5, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) 7.049803588s ago: executing program 1 (id=237): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) setpriority$auto(0x7, 0x8, 0x8) mremap$auto(0x401, 0x0, 0x7fda, 0x6, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6e") r3 = pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r3, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0xffff93e3, @_sigsys={0x0, 0x732, 0x9}}}, 0x2) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(r0, 0x0, 0x100000002, 0x4) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r0, 0x3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x8, 0x400, 0x810, r0, 0x18000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) socket(0x15, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000380)={0x1000003, 0xbd, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x5, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x1ffffffffffe, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x401, 0x22402, 0xc, 0xfffffffd, 0x84, 0x0, 0x0, 0x0, 0x0, 0x100, [0x70e5, 0x0, 0x3, 0xb7, 0x0, 0xfffffffffffffffd, 0x8, 0x4, 0x2, 0x100000, 0x10004, 0x55ff, 0x7, 0x1fc, 0x0, 0x10000000000002, 0x0, 0x0, 0x46, 0x0, 0x3a, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x0, 0x0, 0xa53, 0xbd9, 0xfffffffffffffffd, 0x0, 0x100000000000]}, 0x7, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000200), 0xe6100, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd04, &(0x7f00000001c0)) 7.000367771s ago: executing program 3 (id=238): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr11/dev_port\x00', 0x8eb02, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1f, 0x3, 0x7}, 0xffff, 0x10010000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x161342, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) clone$auto(0x92f, 0x2, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/oom_score_adj\x00', 0x102, 0x0) read$auto(r1, 0x0, 0x2) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) 6.627936357s ago: executing program 2 (id=239): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) connect$auto(0x3, 0x0, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0x200001, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000080)="f10c939b278c1378fd98e62376b161888d0de7c3babdf412193246ac72800d8356f5394bf395c2cadb236949d933a0490e6eb597cc379446daf431ecadaeecd2b4b79f13502bcd959213476f17a06e1ec4fbc0912a0e00000050cfdb7598a3fd9b833a8163f7cafc156953a64932191f3ce0932a5a4f1556baca375799099f2954a8f60800000000000000289b01c51d1e857d55350f8d64330988e1e3c988fad76eb85d490ef63c67990ab582", 0x7fc, 0x0, 0x8, 0x0, 0x4, 0x4}, 0xb4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xfffffffffffffffa, 0x8000) socket(0x26, 0x5, 0x0) 6.103325308s ago: executing program 0 (id=240): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x95, 0x64cd278e, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26) socket(0x2c, 0x80003, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x20000000000000b2, 0xfb, 0x9489, 0x2, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x8000000009, 0x2, 0xffffffff]}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x110c230000, 0x1fffffe, 0x9) close_range$auto(0x2, 0x8, 0x0) 4.577925427s ago: executing program 3 (id=241): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf252b0000000c00050000000000000000000500340003000000080024000600000006000b0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd0/queue/iostats_passthrough\x00', 0x88b02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, 0x0, 0x81) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251f0000004f012d80d21fb0847bc0659ddefe29b691d6a7e824cb1e7abb03e4b7465c6df74109e2d1e5567ed6961fba434110614c854b955b97b7601b72c2f27e2e40901a00018008006300", @ANYRES32=r2, @ANYBLOB="04007d8046cf6927efff08c1d8c50000dd0067802baeefc49f8a8e2f3d8329d6e01291e87ae05224094e42dec072cc082a96b7b88ca1f34fbe5d0fb0647bb00c10d4bc9bff58839d6a5c13002fa24bc73dfa02a4e195a14d4833a0e2829c725908006800", @ANYRES32=0x0, @ANYBLOB="2400800400b7800800e40000", @ANYRES32, @ANYBLOB="2826cc2b651bdd1171377fcfbc0c1916f6e5212d79a6de28254ac3b3766f48470a1fe92d23496643db84b9e563be0494717834ece6667c758d1a6e63ba4e98fde942b1be7c56fc808dbd42210f9ccd29a9c72093611fa8dc2fc12221c2c1308f63150e3f562479f05df32edb2caf727c29c50890870000001400ba800400dd8008001100", @ANYRES32, @ANYBLOB="040038800004008700080009000800000005002a016a0000000800cb00010000001f000700"], 0x1a8}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000000) madvise$auto(0x0, 0x2003f2, 0x15) 3.93335398s ago: executing program 3 (id=242): openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000003300)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) socket(0xa, 0x1, 0x84) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r2, 0x7a9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) r7 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x20, 0x1}, 0x4) ioctl$auto_XFS_IOC_FREESP64(r7, 0x541b, 0x0) 3.634162101s ago: executing program 0 (id=243): r0 = socket(0x21, 0x2, 0xa) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/222, 0xde) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x10, 0xe983, 0x6, 0xeb1, r1, 0xfffffffb) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x7, 0x34, &(0x7f0000000000)='}\x00', 0xbe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x2, 0x0) write$auto_force_wakeup_fops_hci_vhci(r4, &(0x7f0000000080)="d9ac3480543dd9", 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) sendfile$auto(r3, r3, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2.773704212s ago: executing program 1 (id=244): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_stats\x00', 0x40000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000400)=""/232, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x4}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x20008, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x8, 0x420009, 0x40000000000000e6, 0xeb3, 0x401, 0x8002) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f00000002c0), 0x180}, 0x6, &(0x7f00000002c0)="86b79d3880df4071db4a0114a3edcd545cc40c425d0621752e", 0x7, 0xa505}, 0x800}, 0x7, 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:02.0/drm/card2/card2-Virtual-2/connector_id\x00', 0x1c9002, 0x0) madvise$auto(0x10, 0xfff, 0x10001) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r6) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000080), 0x6000, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/available_tracers\x00', 0x8000, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0xa5d2, 0x41, &(0x7f0000000000)='/sys/kernel/debug/x86/pat_memtype_list\x00', &(0x7f0000000140)=0x9) write$auto(r8, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2504000050121064af9325556f12a4d7585f881899477ee277a6b177effb1aa419500dafac167e189cd3ebd362c813263e94f0954586494142dfabccf058131d7076e2c4c48780a3721025eecc0a28eee3ab5ea3bc438fffb8"], 0x4b}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)={0x14, r3, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x40d0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.150622346s ago: executing program 0 (id=245): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) mmap$auto(0x0, 0x20009, 0x4000002000df, 0x40000000000eb1, r0, 0x8000) r1 = socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/manager\x00', 0x610880, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x6, 0x304) socket(0x23, 0x3, 0x80000104) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x7f, 0x9, &(0x7f00000002c0)={{}, {0x20410, 0x80000000}}, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000280)={0xee, &(0x7f0000000180)="de8a77fc58ff49652e771128a290b08f9c56564da70cc6fda8b018cb5e321ef37ad21c804a4b27ccbe4afb253824fe52599e4933388e6bc0e74b7b528fc385022651d7630fd82bd418d44c0b806a3748f11a9e87cc97a05f0315dc3d06d3c3c19200e7bf52b523846f015f5ed4cbb4922275", 0xb0eb}) accept4$auto(r1, &(0x7f0000000080)=@phonet={0x23, 0x5, 0x1, 0x3}, &(0x7f00000000c0)=0xa44, 0x7) timer_gettime$auto(0x0, 0x0) r2 = io_uring_setup$auto(0x86, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0205649, r2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x10, 0x80000, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, &(0x7f0000000080)="7a0a82b4a658635d206745778de6a48c53844f8b8e3dcbba610e2af6c72589cc5a431ab3a6fa381497bd7d0a4b5ea0612087e1d75aa1a77850579b5ce86b9e10679d9396e155a90f", 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 1.825657277s ago: executing program 2 (id=246): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/macvlan0\x00', 0x489400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) fchmod$auto(0xffffffffffffffff, 0x2) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000000020) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r3 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r3, &(0x7f0000000040)=""/139, 0xca) ioctl$auto(0x3, 0x80000541b, 0x38) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)="f320f820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e) close_range$auto(r0, r1, 0x3) mmap$auto(0x4000000000000, 0x8, 0x6, 0x16, r0, 0x1) timerfd_gettime$auto(0xffffffffffffffff, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x186b02, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0xa, 0x5, 0x0) r7 = getsockopt$auto(r6, 0x84, 0x3, 0x0, &(0x7f0000000080)=0x9b) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy13/hwsim/ps\x00', 0x442, 0x0) fanotify_mark$auto(r2, 0x7fff, 0x100000000, r7, &(0x7f0000000000)='./file0\x00') ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) 1.756208071s ago: executing program 0 (id=247): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x161342, 0x130) r1 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x5, 0x0) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) r5 = memfd_create$auto(0x0, 0x4) statx$auto(r5, 0x0, 0x1000, 0xbdfc, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2202000d, 0x4000003, 0xebd, 0xffffffffffffffff, 0x100000007ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) memfd_create$auto(0x0, 0x4) clone$auto(0xfffffffffffffbd9, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x400000000000021, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r2, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) close_range$auto(r0, r0, 0x5) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0) 1.665595235s ago: executing program 1 (id=248): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0x5, 0x0) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_NAME={0xe, 0x1, '/dev/cec4\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x20000008) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) r4 = memfd_create$auto(0x0, 0x4) statx$auto(r4, 0x0, 0x1000, 0xbdfc, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2202000d, 0x4000003, 0xebd, 0xffffffffffffffff, 0x100000007ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) memfd_create$auto(0x0, 0x4) clone$auto(0xfffffffffffffbd9, 0x0, 0x0, &(0x7f00000001c0)=0x5, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x400000000000021, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) close_range$auto(r0, r0, 0x5) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0) 697.111598ms ago: executing program 2 (id=249): socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x401, 0x408, 0xf4b, 0x20000400004, 0x200000000040000d, 0x0}) r6 = wait4$auto(r5, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x8, 0x80ac, 0x2, 0xa, 0xfffffffffffffffe, 0x400}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c73cbaacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c4580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r6}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r6, 0xc, 0x6) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x560a, r8) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 323.157707ms ago: executing program 0 (id=250): r0 = socket(0x2a, 0x1, 0x800084) setsockopt$auto(r0, 0x84, 0x77, 0x0, 0x0) statfs$auto(0x0, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)=0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x1a) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x403) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r2, 0x6, 0x1e, 0x0, 0x7) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 8.671501ms ago: executing program 3 (id=251): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x48040, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r1, 0xae44, r0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) ioctl$auto_PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x401, 0x1}) 0s ago: executing program 1 (id=259): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0x7fff, 0x800000000801e, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1, 0x3, 0x0) getsockopt$auto(r1, 0x26, 0x7, 0x0, 0x0) epoll_create$auto(0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008aeb0, 0x0) mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000) mmap$auto(0x4, 0x4, 0xdf, 0x400000009b72, 0x7, 0x7) sysfs$auto(0x2, 0x400000000008, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 86.377851][ T5616] cgroup: Unknown subsys name 'net' [ 86.507968][ T5616] cgroup: Unknown subsys name 'cpuset' [ 86.517340][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.219873][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.247484][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.259058][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.269759][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.278896][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.296316][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.370004][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.381563][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.393577][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.408234][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.418943][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.468123][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.476498][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.488553][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.509499][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.518635][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.558202][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.567233][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.579369][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.588467][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.597361][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.110579][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.119896][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.129908][ T5630] bridge_slave_0: entered allmulticast mode [ 92.140999][ T5630] bridge_slave_0: entered promiscuous mode [ 92.188624][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.196943][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.204993][ T5630] bridge_slave_1: entered allmulticast mode [ 92.213361][ T5630] bridge_slave_1: entered promiscuous mode [ 92.277628][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.287813][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.296993][ T5636] bridge_slave_0: entered allmulticast mode [ 92.305897][ T5636] bridge_slave_0: entered promiscuous mode [ 92.322761][ T10] cfg80211: failed to load regulatory.db [ 92.351195][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.361492][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.370283][ T5636] bridge_slave_1: entered allmulticast mode [ 92.379894][ T5636] bridge_slave_1: entered promiscuous mode [ 92.386059][ T4944] Bluetooth: hci0: command tx timeout [ 92.415640][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.464698][ T4944] Bluetooth: hci1: command tx timeout [ 92.478919][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.513319][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.523512][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.531042][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.539037][ T5639] bridge_slave_0: entered allmulticast mode [ 92.550175][ T4944] Bluetooth: hci2: command tx timeout [ 92.552179][ T5639] bridge_slave_0: entered promiscuous mode [ 92.572227][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.582507][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.589938][ T5645] bridge_slave_0: entered allmulticast mode [ 92.597162][ T5645] bridge_slave_0: entered promiscuous mode [ 92.607141][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.624644][ T4944] Bluetooth: hci3: command tx timeout [ 92.628717][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.643249][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.651752][ T5639] bridge_slave_1: entered allmulticast mode [ 92.660139][ T5639] bridge_slave_1: entered promiscuous mode [ 92.671159][ T5630] team0: Port device team_slave_0 added [ 92.677218][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684883][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.693267][ T5645] bridge_slave_1: entered allmulticast mode [ 92.701994][ T5645] bridge_slave_1: entered promiscuous mode [ 92.729603][ T5630] team0: Port device team_slave_1 added [ 92.749783][ T5636] team0: Port device team_slave_0 added [ 92.796342][ T5636] team0: Port device team_slave_1 added [ 92.806048][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.829741][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.851608][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.862470][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.872698][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.903050][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.919748][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.953570][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.963635][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.991056][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.013821][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.021703][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.052855][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.098236][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.106802][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.141337][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.159443][ T5639] team0: Port device team_slave_0 added [ 93.171626][ T5639] team0: Port device team_slave_1 added [ 93.182533][ T5645] team0: Port device team_slave_0 added [ 93.210531][ T5645] team0: Port device team_slave_1 added [ 93.278616][ T5630] hsr_slave_0: entered promiscuous mode [ 93.286391][ T5630] hsr_slave_1: entered promiscuous mode [ 93.296504][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.303798][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.331093][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.365269][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.372819][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.402590][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.417421][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.425324][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.453571][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.482660][ T5636] hsr_slave_0: entered promiscuous mode [ 93.490103][ T5636] hsr_slave_1: entered promiscuous mode [ 93.497569][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 93.504785][ T5636] Cannot create hsr debugfs directory [ 93.520101][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.529113][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.561034][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.723958][ T5639] hsr_slave_0: entered promiscuous mode [ 93.730797][ T5639] hsr_slave_1: entered promiscuous mode [ 93.737629][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 93.743408][ T5639] Cannot create hsr debugfs directory [ 93.760870][ T5645] hsr_slave_0: entered promiscuous mode [ 93.767919][ T5645] hsr_slave_1: entered promiscuous mode [ 93.775478][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 93.782204][ T5645] Cannot create hsr debugfs directory [ 94.149897][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.165633][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.175539][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.190890][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.226180][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.238621][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.250215][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.263192][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.348492][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.362614][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.372230][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.385518][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.394134][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.407663][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.419370][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.429765][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.467829][ T4944] Bluetooth: hci0: command tx timeout [ 94.545279][ T4944] Bluetooth: hci1: command tx timeout [ 94.554244][ T5639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.568748][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.577549][ T5639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.587582][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.598690][ T5639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.610636][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.618944][ T5639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.627074][ T4944] Bluetooth: hci2: command tx timeout [ 94.637203][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.704944][ T4944] Bluetooth: hci3: command tx timeout [ 94.741292][ T5645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.751728][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.761194][ T5645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.772059][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.790425][ T5645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.800988][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.809717][ T5645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.819723][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.855386][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.947625][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.978220][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.986855][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.023464][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.037781][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.046534][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.113327][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.148463][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.163164][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.171111][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.214967][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.222905][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.242879][ T5630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.271437][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.295971][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.350612][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.365498][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.423354][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.440643][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.449243][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.480057][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.487465][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.497387][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.504697][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.113517][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.321479][ T5630] veth0_vlan: entered promiscuous mode [ 96.359245][ T5630] veth1_vlan: entered promiscuous mode [ 96.487832][ T5630] veth0_macvtap: entered promiscuous mode [ 96.529748][ T5630] veth1_macvtap: entered promiscuous mode [ 96.546673][ T4944] Bluetooth: hci0: command tx timeout [ 96.568538][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.625597][ T4944] Bluetooth: hci1: command tx timeout [ 96.645687][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.683823][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.707151][ T4944] Bluetooth: hci2: command tx timeout [ 96.737222][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.785706][ T4944] Bluetooth: hci3: command tx timeout [ 96.803465][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827057][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.875425][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.882814][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.904229][ T5636] veth0_vlan: entered promiscuous mode [ 96.933942][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.959222][ T5636] veth1_vlan: entered promiscuous mode [ 97.056685][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.069972][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.140200][ T5636] veth0_macvtap: entered promiscuous mode [ 97.154412][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.159959][ T5645] veth0_vlan: entered promiscuous mode [ 97.168267][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.179695][ T5636] veth1_macvtap: entered promiscuous mode [ 97.207934][ T5639] veth0_vlan: entered promiscuous mode [ 97.245524][ T5639] veth1_vlan: entered promiscuous mode [ 97.277516][ T5645] veth1_vlan: entered promiscuous mode [ 97.314251][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.352669][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.358778][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.400292][ T3326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.411878][ T3326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.429156][ T3326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.455739][ T3326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511143][ T5639] veth0_macvtap: entered promiscuous mode [ 97.535489][ T5645] veth0_macvtap: entered promiscuous mode [ 97.573705][ T5645] veth1_macvtap: entered promiscuous mode [ 97.585446][ T5639] veth1_macvtap: entered promiscuous mode [ 97.651416][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.708449][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.723031][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.756999][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.778672][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.803084][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.811568][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.822922][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.833269][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.871603][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908064][ T1125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.928492][ T1125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.950897][ T1125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973351][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.974223][ T3326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985914][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.374190][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.399826][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.510337][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.528990][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.597923][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.611718][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.624628][ T4944] Bluetooth: hci0: command tx timeout [ 98.704815][ T4944] Bluetooth: hci1: command tx timeout [ 98.722811][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.744213][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.787626][ T4944] Bluetooth: hci2: command tx timeout [ 98.864863][ T4944] Bluetooth: hci3: command tx timeout [ 99.460201][ T5803] ======================================================= [ 99.460201][ T5803] WARNING: The mand mount option has been deprecated and [ 99.460201][ T5803] and is ignored by this kernel. Remove the mand [ 99.460201][ T5803] option from the mount to silence this warning. [ 99.460201][ T5803] ======================================================= [ 99.593043][ T5803] FAULT_INJECTION: forcing a failure. [ 99.593043][ T5803] name failslab, interval 1, probability 0, space 0, times 1 [ 99.627314][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 99.627352][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.627374][ T5803] Call Trace: [ 99.627384][ T5803] [ 99.627394][ T5803] dump_stack_lvl+0x100/0x190 [ 99.627432][ T5803] should_fail_ex.cold+0x5/0xa [ 99.627463][ T5803] should_failslab+0xc2/0x120 [ 99.627500][ T5803] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.627534][ T5803] ? __anon_vma_prepare+0xae/0x5e0 [ 99.627585][ T5803] __anon_vma_prepare+0xae/0x5e0 [ 99.627640][ T5803] __vmf_anon_prepare+0x11f/0x250 [ 99.627680][ T5803] do_anonymous_page+0x51b/0x2080 [ 99.627724][ T5803] ? rcu_read_unlock+0x2d/0xb0 [ 99.627760][ T5803] __handle_mm_fault+0x1d2c/0x2a00 [ 99.627813][ T5803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.627848][ T5803] ? __pfx___handle_mm_fault+0x10/0x10 [ 99.627896][ T5803] ? pte_offset_map_lock+0x174/0x320 [ 99.627929][ T5803] ? find_held_lock+0x2b/0x80 [ 99.627973][ T5803] ? follow_page_pte+0x4d0/0x13f0 [ 99.628027][ T5803] handle_mm_fault+0x37b/0xa30 [ 99.628076][ T5803] __get_user_pages+0x1178/0x32a0 [ 99.628125][ T5803] ? __pfx___get_user_pages+0x10/0x10 [ 99.628172][ T5803] populate_vma_page_range+0x267/0x3f0 [ 99.628213][ T5803] ? __pfx_populate_vma_page_range+0x10/0x10 [ 99.628265][ T5803] ? __pfx_find_vma_intersection+0x10/0x10 [ 99.628302][ T5803] ? do_mmap+0x93f/0x12f0 [ 99.628338][ T5803] __mm_populate+0x107/0x3a0 [ 99.628379][ T5803] ? __pfx___mm_populate+0x10/0x10 [ 99.628417][ T5803] ? up_write+0x2e5/0x5c0 [ 99.628445][ T5803] vm_mmap_pgoff+0x37f/0x470 [ 99.628481][ T5803] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 99.628521][ T5803] ? __pfx_do_futex+0x10/0x10 [ 99.628556][ T5803] ksys_mmap_pgoff+0xe4/0x610 [ 99.628589][ T5803] ? __x64_sys_futex+0x358/0x4d0 [ 99.628656][ T5803] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 99.628698][ T5803] ? xfd_validate_state+0x129/0x190 [ 99.628736][ T5803] __x64_sys_mmap+0x125/0x190 [ 99.628779][ T5803] do_syscall_64+0x115/0x840 [ 99.628816][ T5803] ? clear_bhb_loop+0x40/0x90 [ 99.628852][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.628885][ T5803] RIP: 0033:0x7f143639de99 [ 99.628928][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.628983][ T5803] RSP: 002b:00007f14371a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 99.629032][ T5803] RAX: ffffffffffffffda RBX: 00007f1436625fa0 RCX: 00007f143639de99 [ 99.629079][ T5803] RDX: 00000000000000df RSI: 0000000000000009 RDI: 0000000000000000 [ 99.629109][ T5803] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000008000 [ 99.629136][ T5803] R10: 0000008000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 99.629160][ T5803] R13: 00007f1436626038 R14: 00007f1436625fa0 R15: 00007ffeb6b462e8 [ 99.629208][ T5803] [ 101.114643][ T5815] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.367284][ T5820] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 102.810470][ T5838] Zero length message leads to an empty skb [ 103.091666][ T5845] FAULT_INJECTION: forcing a failure. [ 103.091666][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 103.153010][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 103.153048][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.153064][ T5845] Call Trace: [ 103.153073][ T5845] [ 103.153084][ T5845] dump_stack_lvl+0x100/0x190 [ 103.153119][ T5845] should_fail_ex.cold+0x5/0xa [ 103.153151][ T5845] should_failslab+0xc2/0x120 [ 103.153187][ T5845] __kmalloc_flags_noprof+0x115/0x890 [ 103.153232][ T5845] ? alloc_slab_obj_exts+0xb2/0x250 [ 103.153263][ T5845] alloc_slab_obj_exts+0xb2/0x250 [ 103.153294][ T5845] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 103.153357][ T5845] ? kasan_save_track+0x14/0x30 [ 103.153395][ T5845] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 103.153431][ T5845] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 103.153465][ T5845] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 103.153495][ T5845] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 103.153522][ T5845] alloc_inode+0x68/0x250 [ 103.153555][ T5845] new_inode+0x22/0x1c0 [ 103.153589][ T5845] hugetlbfs_get_inode+0x39a/0x700 [ 103.153624][ T5845] hugetlb_file_setup+0x15b/0x5b0 [ 103.153660][ T5845] ksys_mmap_pgoff+0x242/0x610 [ 103.153699][ T5845] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 103.153732][ T5845] ? xfd_validate_state+0x129/0x190 [ 103.153769][ T5845] __x64_sys_mmap+0x125/0x190 [ 103.153803][ T5845] do_syscall_64+0x115/0x840 [ 103.153831][ T5845] ? clear_bhb_loop+0x40/0x90 [ 103.153865][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.153894][ T5845] RIP: 0033:0x7fc2b899de99 [ 103.153918][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.153942][ T5845] RSP: 002b:00007fc2b989f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.153967][ T5845] RAX: ffffffffffffffda RBX: 00007fc2b8c25fa0 RCX: 00007fc2b899de99 [ 103.153983][ T5845] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000 [ 103.154000][ T5845] RBP: 00007fc2b8a33eaf R08: 0000000000000401 R09: 0000300000000000 [ 103.154015][ T5845] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 103.154031][ T5845] R13: 00007fc2b8c26038 R14: 00007fc2b8c25fa0 R15: 00007ffed63f45c8 [ 103.154067][ T5845] [ 103.652182][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.735469][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.129728][ T5857] netlink: 25 bytes leftover after parsing attributes in process `syz.2.20'. [ 106.010550][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'. [ 108.597909][ T5930] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 108.630922][ T5930] netlink: 1 bytes leftover after parsing attributes in process `syz.2.37'. [ 108.763097][ T5924] FAULT_INJECTION: forcing a failure. [ 108.763097][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 108.799093][ T5935] random: crng reseeded on system resumption [ 108.801441][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(full) [ 108.801481][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.801497][ T5924] Call Trace: [ 108.801506][ T5924] [ 108.801516][ T5924] dump_stack_lvl+0x100/0x190 [ 108.801553][ T5924] should_fail_ex.cold+0x5/0xa [ 108.801586][ T5924] should_failslab+0xc2/0x120 [ 108.801623][ T5924] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 108.801659][ T5924] ? proc_alloc_inode+0x25/0x200 [ 108.801701][ T5924] ? __pfx_proc_alloc_inode+0x10/0x10 [ 108.801743][ T5924] proc_alloc_inode+0x25/0x200 [ 108.801779][ T5924] alloc_inode+0x68/0x250 [ 108.801812][ T5924] new_inode+0x22/0x1c0 [ 108.801848][ T5924] proc_get_inode+0x1d/0x780 [ 108.801891][ T5924] proc_lookup_de+0x236/0x360 [ 108.801922][ T5924] proc_lookup+0xd8/0x110 [ 108.801949][ T5924] proc_root_lookup+0x3b/0x70 [ 108.801994][ T5924] __lookup_slow+0x155/0x320 [ 108.802030][ T5924] lookup_slow+0x50/0x70 [ 108.802063][ T5924] link_path_walk+0x1377/0x1cc0 [ 108.802115][ T5924] path_openat+0x1c9/0x4280 [ 108.802139][ T5924] ? __kasan_slab_alloc+0x89/0x90 [ 108.802171][ T5924] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 108.802201][ T5924] ? do_getname+0x35/0x390 [ 108.802230][ T5924] ? __x64_sys_openat+0x12d/0x210 [ 108.802277][ T5924] ? __pfx_path_openat+0x10/0x10 [ 108.802312][ T5924] do_file_open+0x20e/0x430 [ 108.802612][ T5924] ? __pfx_do_file_open+0x10/0x10 [ 108.802713][ T5924] ? alloc_fd+0x471/0x7a0 [ 108.802764][ T5924] ? do_getname+0x191/0x390 [ 108.802804][ T5924] do_sys_openat2+0x10f/0x1e0 [ 108.802840][ T5924] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.802876][ T5924] ? find_held_lock+0x2b/0x80 [ 108.802918][ T5924] __x64_sys_openat+0x12d/0x210 [ 108.802953][ T5924] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.803002][ T5924] do_syscall_64+0x115/0x840 [ 108.803032][ T5924] ? clear_bhb_loop+0x40/0x90 [ 108.803067][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.803096][ T5924] RIP: 0033:0x7f0cc879de99 [ 108.803122][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.803260][ T5924] RSP: 002b:00007f0cc96da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.803289][ T5924] RAX: ffffffffffffffda RBX: 00007f0cc8a25fa0 RCX: 00007f0cc879de99 [ 108.803308][ T5924] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 108.803327][ T5924] RBP: 00007f0cc8833eaf R08: 0000000000000000 R09: 0000000000000000 [ 108.803341][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.803354][ T5924] R13: 00007f0cc8a26038 R14: 00007f0cc8a25fa0 R15: 00007ffd2e920f68 [ 108.803394][ T5924] [ 111.004057][ T5964] FAULT_INJECTION: forcing a failure. [ 111.004057][ T5964] name failslab, interval 1, probability 0, space 0, times 0 [ 111.023284][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(full) [ 111.023307][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.023317][ T5964] Call Trace: [ 111.023325][ T5964] [ 111.023332][ T5964] dump_stack_lvl+0x100/0x190 [ 111.023358][ T5964] should_fail_ex.cold+0x5/0xa [ 111.023377][ T5964] ? __lock_acquire+0x49f/0x1a40 [ 111.023408][ T5964] should_failslab+0xc2/0x120 [ 111.023428][ T5964] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 111.023447][ T5964] ? __alloc_skb+0x140/0x710 [ 111.023470][ T5964] __alloc_skb+0x140/0x710 [ 111.023486][ T5964] ? is_bpf_text_address+0x8a/0x1a0 [ 111.023522][ T5964] ? __pfx___alloc_skb+0x10/0x10 [ 111.023556][ T5964] ? lock_acquire+0x1b9/0x370 [ 111.023595][ T5964] tipc_buf_acquire+0x26/0xe0 [ 111.023634][ T5964] tipc_msg_create+0x39/0x1d0 [ 111.023673][ T5964] tipc_group_proto_xmit+0x150/0x7c0 [ 111.023702][ T5964] ? check_irq_usage+0xe5/0x810 [ 111.023742][ T5964] tipc_group_filter_msg+0xc70/0x17e0 [ 111.023769][ T5964] tipc_sk_filter_rcv+0x170c/0x3250 [ 111.023799][ T5964] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 111.023839][ T5964] tipc_sk_rcv+0xe90/0x1c80 [ 111.023866][ T5964] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 111.023890][ T5964] ? __lock_acquire+0x49f/0x1a40 [ 111.023913][ T5964] ? kasan_quarantine_put+0x104/0x240 [ 111.023984][ T5964] tipc_sk_mcast_rcv+0x783/0xf10 [ 111.024008][ T5964] ? __alloc_skb+0x5b7/0x710 [ 111.024031][ T5964] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 111.024054][ T5964] ? __lock_acquire+0x49f/0x1a40 [ 111.024085][ T5964] ? find_held_lock+0x2b/0x80 [ 111.024102][ T5964] ? tipc_mcast_xmit+0x6d7/0xfc0 [ 111.024128][ T5964] ? tipc_mcast_xmit+0x6d7/0xfc0 [ 111.024152][ T5964] tipc_mcast_xmit+0x713/0xfc0 [ 111.024178][ T5964] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 111.024201][ T5964] ? skb_put+0x138/0x180 [ 111.024243][ T5964] ? tipc_send_group_bcast+0x76b/0xa20 [ 111.024260][ T5964] tipc_send_group_bcast+0x76b/0xa20 [ 111.024286][ T5964] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 111.024304][ T5964] ? lock_acquire+0x1b9/0x370 [ 111.024324][ T5964] ? find_held_lock+0x2b/0x80 [ 111.024341][ T5964] ? __pfx_woken_wake_function+0x10/0x10 [ 111.024356][ T5964] ? do_raw_spin_lock+0x128/0x260 [ 111.024376][ T5964] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.024391][ T5964] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 111.024418][ T5964] __tipc_sendmsg+0x4a3/0x1ab0 [ 111.024445][ T5964] ? __pfx___tipc_sendmsg+0x10/0x10 [ 111.024467][ T5964] ? __lock_acquire+0x49f/0x1a40 [ 111.024490][ T5964] ? aa_sk_perm+0x309/0xaa0 [ 111.024519][ T5964] ? __local_bh_enable_ip+0x9e/0x120 [ 111.024537][ T5964] tipc_sendmsg+0x4f/0x70 [ 111.024558][ T5964] ____sys_sendmsg+0xa4d/0xbe0 [ 111.024581][ T5964] ? __pfx_tipc_sendmsg+0x10/0x10 [ 111.024604][ T5964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.024628][ T5964] ? preempt_schedule_common+0x42/0xc0 [ 111.024651][ T5964] ? preempt_schedule_thunk+0x16/0x40 [ 111.024676][ T5964] ___sys_sendmsg+0x190/0x1e0 [ 111.024700][ T5964] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.024802][ T5964] ? __pfx_try_to_wake_up+0x10/0x10 [ 111.024819][ T5964] ? futex_hash+0x311/0x400 [ 111.024850][ T5964] ? find_held_lock+0x2b/0x80 [ 111.024881][ T5964] __sys_sendmmsg+0x20c/0x440 [ 111.024905][ T5964] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.024929][ T5964] ? __pfx_do_futex+0x10/0x10 [ 111.024953][ T5964] ? xfd_validate_state+0x129/0x190 [ 111.024975][ T5964] __x64_sys_sendmmsg+0x9c/0x100 [ 111.024995][ T5964] ? lockdep_hardirqs_on+0x78/0x100 [ 111.025011][ T5964] do_syscall_64+0x115/0x840 [ 111.025287][ T5964] ? clear_bhb_loop+0x40/0x90 [ 111.025382][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.025413][ T5964] RIP: 0033:0x7f5a9c19de99 [ 111.025627][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.025642][ T5964] RSP: 002b:00007f5a9d07d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.025657][ T5964] RAX: ffffffffffffffda RBX: 00007f5a9c425fa0 RCX: 00007f5a9c19de99 [ 111.025667][ T5964] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 111.025676][ T5964] RBP: 00007f5a9c233eaf R08: 0000000000000000 R09: 0000000000000000 [ 111.025685][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.025694][ T5964] R13: 00007f5a9c426038 R14: 00007f5a9c425fa0 R15: 00007ffcc94ee568 [ 111.025714][ T5964] [ 112.255216][ T5969] FAULT_INJECTION: forcing a failure. [ 112.255216][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.396083][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT(full) [ 112.396124][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.396141][ T5969] Call Trace: [ 112.396151][ T5969] [ 112.396161][ T5969] dump_stack_lvl+0x100/0x190 [ 112.396213][ T5969] should_fail_ex.cold+0x5/0xa [ 112.396246][ T5969] _copy_to_iter+0x5a4/0x1720 [ 112.396295][ T5969] ? __pfx__copy_to_iter+0x10/0x10 [ 112.396344][ T5969] ? ktime_get+0x1a4/0x320 [ 112.396399][ T5969] ? folio_mark_accessed+0xf3/0x1040 [ 112.396429][ T5969] ? __pfx_folio_mark_accessed+0x10/0x10 [ 112.396464][ T5969] copy_page_to_iter+0x285/0x370 [ 112.396506][ T5969] filemap_read+0x7a9/0x10a0 [ 112.396568][ T5969] ? __pfx_filemap_read+0x10/0x10 [ 112.396651][ T5969] ? __pfx_down_read+0x10/0x10 [ 112.396684][ T5969] ? find_held_lock+0x2b/0x80 [ 112.396722][ T5969] ? futex_unqueue+0x133/0x2c0 [ 112.396762][ T5969] ? __pfx_aa_file_perm+0x10/0x10 [ 112.396801][ T5969] blkdev_read_iter+0x2c4/0x4f0 [ 112.396842][ T5969] do_iter_readv_writev+0x616/0x930 [ 112.396893][ T5969] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 112.396943][ T5969] ? bpf_lsm_file_permission+0x9/0x10 [ 112.396982][ T5969] ? security_file_permission+0x76/0x210 [ 112.397016][ T5969] ? rw_verify_area+0xce/0x6d0 [ 112.397064][ T5969] vfs_readv+0x4d3/0x8d0 [ 112.397113][ T5969] ? __pfx_vfs_readv+0x10/0x10 [ 112.397154][ T5969] ? __pfx_futex_wait+0x10/0x10 [ 112.397207][ T5969] ? __fget_files+0x21f/0x3d0 [ 112.397261][ T5969] ? do_preadv+0x1ac/0x270 [ 112.397295][ T5969] do_preadv+0x1ac/0x270 [ 112.397331][ T5969] ? __pfx_do_preadv+0x10/0x10 [ 112.397366][ T5969] ? xfd_validate_state+0x129/0x190 [ 112.397418][ T5969] __x64_sys_preadv2+0xef/0x160 [ 112.397449][ T5969] do_syscall_64+0x115/0x840 [ 112.397478][ T5969] ? clear_bhb_loop+0x40/0x90 [ 112.397512][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.397539][ T5969] RIP: 0033:0x7f5a9c19de99 [ 112.397577][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.397601][ T5969] RSP: 002b:00007f5a9d05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 112.397627][ T5969] RAX: ffffffffffffffda RBX: 00007f5a9c426090 RCX: 00007f5a9c19de99 [ 112.397660][ T5969] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000003 [ 112.397678][ T5969] RBP: 00007f5a9c233eaf R08: 0000000000000004 R09: 000000000000002a [ 112.397696][ T5969] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 112.397713][ T5969] R13: 00007f5a9c426128 R14: 00007f5a9c426090 R15: 00007ffcc94ee568 [ 112.397746][ T5969] [ 115.777623][ T6002] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 115.777623][ T6002] program syz.2.52 not setting count and/or reply_len properly [ 115.827838][ T30] audit: type=1800 audit(4294967310.270:2): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="lu_gp_id" dev="configfs" ino=9383 res=0 errno=0 [ 115.868341][ T6016] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.493045][ T6030] vivid-007: ================= START STATUS ================= [ 116.542938][ T6030] vivid-007: Generate PTS: true [ 116.586684][ T6030] vivid-007: Generate SCR: true [ 116.646039][ T6030] tpg source WxH: 320x240 (Y'CbCr) [ 116.712674][ T6030] tpg field: 1 [ 116.759768][ T6030] tpg crop: (0,0)/320x240 [ 116.770954][ T6030] tpg compose: (0,0)/320x240 [ 116.871423][ T6030] tpg colorspace: 8 [ 116.967722][ T6030] tpg transfer function: 0/0 [ 117.001472][ T6030] tpg Y'CbCr encoding: 0/0 [ 117.030862][ T6030] tpg quantization: 0/0 [ 117.055119][ T6030] tpg RGB range: 0/2 [ 117.077797][ T6030] vivid-007: ================== END STATUS ================== [ 118.219009][ T6061] random: crng reseeded on system resumption [ 118.296908][ T6061] Restarting kernel threads ... [ 118.327900][ T6061] Done restarting kernel threads. [ 118.524858][ T6065] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.739533][ T6115] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.751267][ T6100] FAULT_INJECTION: forcing a failure. [ 121.751267][ T6100] name failslab, interval 1, probability 0, space 0, times 0 [ 121.798607][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 121.798648][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.798665][ T6100] Call Trace: [ 121.798674][ T6100] [ 121.798685][ T6100] dump_stack_lvl+0x100/0x190 [ 121.798725][ T6100] should_fail_ex.cold+0x5/0xa [ 121.798759][ T6100] should_failslab+0xc2/0x120 [ 121.798798][ T6100] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 121.798836][ T6100] ? proc_alloc_inode+0x25/0x200 [ 121.798880][ T6100] ? __pfx_proc_alloc_inode+0x10/0x10 [ 121.798925][ T6100] proc_alloc_inode+0x25/0x200 [ 121.798965][ T6100] alloc_inode+0x68/0x250 [ 121.799001][ T6100] new_inode+0x22/0x1c0 [ 121.799039][ T6100] proc_get_inode+0x1d/0x780 [ 121.799085][ T6100] proc_lookup_de+0x236/0x360 [ 121.799118][ T6100] proc_lookup+0xd8/0x110 [ 121.799154][ T6100] proc_root_lookup+0x3b/0x70 [ 121.799205][ T6100] __lookup_slow+0x155/0x320 [ 121.799245][ T6100] lookup_slow+0x50/0x70 [ 121.799282][ T6100] link_path_walk+0x1377/0x1cc0 [ 121.799338][ T6100] path_openat+0x1c9/0x4280 [ 121.799363][ T6100] ? __kasan_slab_alloc+0x89/0x90 [ 121.799397][ T6100] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 121.799427][ T6100] ? do_getname+0x35/0x390 [ 121.799459][ T6100] ? __x64_sys_openat+0x12d/0x210 [ 121.799507][ T6100] ? __pfx_path_openat+0x10/0x10 [ 121.799545][ T6100] do_file_open+0x20e/0x430 [ 121.799575][ T6100] ? __pfx_do_file_open+0x10/0x10 [ 121.799630][ T6100] ? alloc_fd+0x471/0x7a0 [ 121.799681][ T6100] ? do_getname+0x191/0x390 [ 121.799717][ T6100] do_sys_openat2+0x10f/0x1e0 [ 121.799753][ T6100] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.799791][ T6100] ? find_held_lock+0x2b/0x80 [ 121.799834][ T6100] __x64_sys_openat+0x12d/0x210 [ 121.799871][ T6100] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.799922][ T6100] do_syscall_64+0x115/0x840 [ 121.799951][ T6100] ? clear_bhb_loop+0x40/0x90 [ 121.799987][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.800017][ T6100] RIP: 0033:0x7fc2b899de99 [ 121.800048][ T6100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.800075][ T6100] RSP: 002b:00007fc2b989f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.800103][ T6100] RAX: ffffffffffffffda RBX: 00007fc2b8c25fa0 RCX: 00007fc2b899de99 [ 121.800122][ T6100] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 121.800147][ T6100] RBP: 00007fc2b8a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 121.800165][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.800182][ T6100] R13: 00007fc2b8c26038 R14: 00007fc2b8c25fa0 R15: 00007ffed63f45c8 [ 121.800221][ T6100] [ 121.920659][ T6103] process 'syz.1.74' launched '/dev/fd/6' with NULL argv: empty string added [ 122.745570][ T4944] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 124.810376][ T6135] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 125.727076][ T6174] random: crng reseeded on system resumption [ 125.788673][ T30] audit: type=1800 audit(4294967320.245:3): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="members" dev="configfs" ino=10539 res=0 errno=0 [ 126.382382][ T6174] hub 1-0:1.0: USB hub found [ 126.445807][ T6174] hub 1-0:1.0: 1 port detected [ 131.126166][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066596800: rx timeout, send abort [ 131.174348][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888066596800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.148341][ T6230] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.250345][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263857][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.433100][ T6291] random: crng reseeded on system resumption [ 135.457712][ T30] audit: type=1800 audit(4294967329.930:4): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.105" name="members" dev="configfs" ino=10865 res=0 errno=0 [ 136.432401][ T6306] ubi0: attaching mtd0 [ 136.487859][ T6306] ubi0: scanning is finished [ 136.518597][ T6306] ubi0: empty MTD device detected [ 137.246249][ T6306] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 137.270972][ T6306] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 137.299135][ T6306] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 137.313758][ T6306] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 137.423628][ T6306] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 137.432405][ T6306] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 137.444753][ T6306] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 260121504 [ 137.469426][ T6306] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 137.527965][ T6315] ubi0: background thread "ubi_bgt0d" started, PID 6315 [ 140.947633][ T6338] vivid-007: ================= START STATUS ================= [ 141.000605][ T6338] vivid-007: Generate PTS: true [ 141.023522][ T6338] vivid-007: Generate SCR: true [ 141.057820][ T6338] tpg source WxH: 320x240 (Y'CbCr) [ 141.098562][ T6338] tpg field: 1 [ 141.134558][ T6338] tpg crop: (0,0)/320x240 [ 141.163044][ T6338] tpg compose: (0,0)/320x240 [ 141.195128][ T6338] tpg colorspace: 8 [ 141.233360][ T6338] tpg transfer function: 0/0 [ 141.290980][ T6338] tpg Y'CbCr encoding: 0/0 [ 141.344875][ T6338] tpg quantization: 0/0 [ 141.351025][ T6338] tpg RGB range: 0/2 [ 141.373866][ T6338] vivid-007: ================== END STATUS ================== [ 142.206884][ T6350] netlink: 330 bytes leftover after parsing attributes in process `syz.1.119'. [ 142.217342][ T6350] mac80211_hwsim hwsim7 ›: renamed from wlan0 (while UP) [ 143.342190][ T6375] FAULT_INJECTION: forcing a failure. [ 143.342190][ T6375] name fail_futex, interval 1, probability 0, space 0, times 1 [ 143.417161][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.2.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.417197][ T6375] Tainted: [L]=SOFTLOCKUP [ 143.417203][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.417212][ T6375] Call Trace: [ 143.417219][ T6375] [ 143.417225][ T6375] dump_stack_lvl+0x100/0x190 [ 143.417249][ T6375] should_fail_ex.cold+0x5/0xa [ 143.417267][ T6375] get_futex_key+0x1d2/0x14f0 [ 143.417335][ T6375] ? __pfx_get_futex_key+0x10/0x10 [ 143.417359][ T6375] ? __pfx_core_sys_select+0x10/0x10 [ 143.417381][ T6375] ? get_pid_task+0xfc/0x250 [ 143.417402][ T6375] futex_wake+0xf4/0x5e0 [ 143.417425][ T6375] ? __pfx_futex_wake+0x10/0x10 [ 143.417445][ T6375] ? poll_select_finish+0x36e/0x670 [ 143.417469][ T6375] do_futex+0x2b2/0x440 [ 143.417485][ T6375] ? __pfx_do_futex+0x10/0x10 [ 143.417504][ T6375] __x64_sys_futex+0x34f/0x4d0 [ 143.417522][ T6375] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.417544][ T6375] do_syscall_64+0x115/0x840 [ 143.417560][ T6375] ? clear_bhb_loop+0x40/0x90 [ 143.417577][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.417593][ T6375] RIP: 0033:0x7f143639de99 [ 143.417607][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.417621][ T6375] RSP: 002b:00007f14371a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.417635][ T6375] RAX: ffffffffffffffda RBX: 00007f1436625fa8 RCX: 00007f143639de99 [ 143.417645][ T6375] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1436625fac [ 143.417653][ T6375] RBP: 00007f1436625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 143.417661][ T6375] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 143.417669][ T6375] R13: 00007f1436626038 R14: 00007ffeb6b46200 R15: 00007ffeb6b462e8 [ 143.417688][ T6375] [ 144.167695][ T6361] Process accounting resumed [ 144.949619][ T30] audit: type=1804 audit(4294967339.415:5): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.129" name="/newroot/33/file0" dev="tmpfs" ino=193 res=1 errno=0 [ 145.010568][ T30] audit: type=1804 audit(4294967339.415:6): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.129" name="/newroot/33/file0" dev="tmpfs" ino=193 res=1 errno=0 [ 145.939011][ T6405] netlink: 330 bytes leftover after parsing attributes in process `syz.2.131'. [ 145.968671][ T6405] mac80211_hwsim hwsim4 ›: renamed from wlan0 (while UP) [ 148.094234][ T6428] netlink: 342 bytes leftover after parsing attributes in process `syz.0.136'. [ 148.486705][ T6442] bond0: option packets_per_slave: invalid value () [ 148.503695][ T6442] bond0: option packets_per_slave: allowed values 0 - 65535 [ 148.665361][ T30] audit: type=1804 audit(4294967343.137:7): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.138" name="/newroot/39/file0" dev="tmpfs" ino=226 res=1 errno=0 [ 148.677298][ T6431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.738055][ T6431] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.772493][ T30] audit: type=1804 audit(4294967343.177:8): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.138" name="/newroot/39/file0" dev="tmpfs" ino=226 res=1 errno=0 [ 148.861886][ T6431] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.944258][ T6431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.999348][ T6431] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.041354][ T6447] hub 1-0:1.0: USB hub found [ 149.103431][ T6431] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.153769][ T6431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.190134][ T6431] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.205133][ T6447] hub 1-0:1.0: 1 port detected [ 149.338679][ T6431] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.419145][ T6431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.444750][ T6431] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.474909][ T6455] FAULT_INJECTION: forcing a failure. [ 149.474909][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 149.498869][ T6431] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.537794][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.2.140 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.537821][ T6455] Tainted: [L]=SOFTLOCKUP [ 149.537826][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.537835][ T6455] Call Trace: [ 149.537841][ T6455] [ 149.537846][ T6455] dump_stack_lvl+0x100/0x190 [ 149.537871][ T6455] should_fail_ex.cold+0x5/0xa [ 149.537889][ T6455] should_failslab+0xc2/0x120 [ 149.537909][ T6455] __kmalloc_cache_noprof+0x91/0x6c0 [ 149.537934][ T6455] ? vkms_plane_duplicate_state+0x87/0x130 [ 149.537957][ T6455] vkms_plane_duplicate_state+0x87/0x130 [ 149.537975][ T6455] drm_atomic_get_plane_state+0x279/0x7d0 [ 149.537998][ T6455] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 149.538024][ T6455] ? __mutex_lock+0x26d/0x1bd0 [ 149.538051][ T6455] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 149.538074][ T6455] ? drm_master_internal_acquire+0x21/0x80 [ 149.538113][ T6455] drm_client_modeset_commit_locked+0x14d/0x580 [ 149.538137][ T6455] drm_client_modeset_commit+0x4f/0x80 [ 149.538160][ T6455] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 149.538183][ T6455] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 149.538206][ T6455] drm_fbdev_client_restore+0x1b/0x30 [ 149.538222][ T6455] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 149.538243][ T6455] drm_client_dev_restore+0x205/0x2a0 [ 149.538268][ T6455] drm_release+0x2c6/0x360 [ 149.538289][ T6455] ? __pfx_drm_release+0x10/0x10 [ 149.538308][ T6455] __fput+0x3ff/0xb50 [ 149.538330][ T6455] task_work_run+0x150/0x240 [ 149.538351][ T6455] ? __pfx_task_work_run+0x10/0x10 [ 149.538377][ T6455] exit_to_user_mode_loop+0x1d8/0x6f0 [ 149.538400][ T6455] ? rcu_is_watching+0x12/0xc0 [ 149.538418][ T6455] do_syscall_64+0x652/0x840 [ 149.538435][ T6455] ? clear_bhb_loop+0x40/0x90 [ 149.538468][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.538496][ T6455] RIP: 0033:0x7f143639de99 [ 149.538516][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.538529][ T6455] RSP: 002b:00007f14371a2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 149.538544][ T6455] RAX: 0000000000000000 RBX: 00007f1436625fa0 RCX: 00007f143639de99 [ 149.538554][ T6455] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 149.538562][ T6455] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000000000 [ 149.538572][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.538581][ T6455] R13: 00007f1436626038 R14: 00007f1436625fa0 R15: 00007ffeb6b462e8 [ 149.538602][ T6455] [ 150.126066][ T4944] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 150.196619][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.208245][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.996713][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.167725][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.275903][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.075583][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.236087][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.059812][ T6506] random: crng reseeded on system resumption [ 154.360997][ T4944] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.154426][ T4944] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.313965][ T4944] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.454145][ T6509] futex_wake_op: syz.2.148 tries to shift op by -2048; fix this program [ 155.492999][ T6509] futex_wake_op: syz.2.148 tries to shift op by -2048; fix this program [ 155.527211][ T6509] 0x000000000001-0x000000020000 : "" [ 155.594265][ T6509] ftl_cs: FTL header corrupt! [ 159.034123][ T30] audit: type=1107 audit(4294967353.512:9): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.081631][ T6566] mmap: syz.3.159 (6566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.698864][ T30] audit: type=1804 audit(4294967355.173:10): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.160" name="/newroot/46/file0" dev="tmpfs" ino=265 res=1 errno=0 [ 160.799632][ T30] audit: type=1804 audit(4294967355.173:11): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.160" name="/newroot/46/file0" dev="tmpfs" ino=265 res=1 errno=0 [ 162.167797][ T6597] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 162.730948][ T6559] Process accounting resumed [ 167.816234][ T6680] ubi: mtd0 is already attached to ubi0 [ 168.256917][ T30] audit: type=1804 audit(4294967362.736:12): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.176" name="/newroot/44/file0" dev="tmpfs" ino=252 res=1 errno=0 [ 168.308502][ T30] audit: type=1804 audit(4294967362.796:13): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.176" name="/newroot/44/file0" dev="tmpfs" ino=252 res=1 errno=0 [ 168.714910][ T6689] smpboot: CPU 1 is now offline [ 169.413911][ T6703] FAULT_INJECTION: forcing a failure. [ 169.413911][ T6703] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 169.534381][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.0.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.534408][ T6703] Tainted: [L]=SOFTLOCKUP [ 169.534414][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.534423][ T6703] Call Trace: [ 169.534430][ T6703] [ 169.534436][ T6703] dump_stack_lvl+0x100/0x190 [ 169.534460][ T6703] should_fail_ex.cold+0x5/0xa [ 169.534475][ T6703] ? fs_reclaim_acquire+0x70/0x100 [ 169.534497][ T6703] should_fail_alloc_page+0xeb/0x140 [ 169.534517][ T6703] prepare_alloc_pages+0x1f0/0x5f0 [ 169.534540][ T6703] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 169.534559][ T6703] ? find_held_lock+0x2b/0x80 [ 169.534575][ T6703] ? clockevents_program_event+0x23e/0x820 [ 169.534591][ T6703] ? clockevents_program_event+0x23e/0x820 [ 169.534611][ T6703] ? ktime_get+0x9f/0x320 [ 169.534630][ T6703] ? ktime_get+0x1a4/0x320 [ 169.534651][ T6703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.534666][ T6703] ? clockevents_program_event+0x1ef/0x820 [ 169.534683][ T6703] ? __lock_acquire+0x49f/0x1a40 [ 169.534706][ T6703] ? __pfx_clockevents_program_event+0x10/0x10 [ 169.534722][ T6703] ? find_held_lock+0x2b/0x80 [ 169.534738][ T6703] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 169.534755][ T6703] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 169.534778][ T6703] ? irqentry_exit+0x24d/0xa00 [ 169.534794][ T6703] ? lockdep_hardirqs_on+0x78/0x100 [ 169.534808][ T6703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.534829][ T6703] ? policy_nodemask+0xed/0x4f0 [ 169.534851][ T6703] alloc_pages_mpol+0x1fb/0x540 [ 169.534871][ T6703] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 169.534892][ T6703] ? alloc_pages_mpol+0x19/0x540 [ 169.534913][ T6703] alloc_pages_noprof+0x1a/0x160 [ 169.534935][ T6703] relay_open_buf.part.0+0x261/0xb70 [ 169.534958][ T6703] relay_open+0x7b9/0xa00 [ 169.534977][ T6703] blk_trace_setup_prepare+0x35c/0x6c0 [ 169.534997][ T6703] blk_trace_setup+0x217/0x440 [ 169.535016][ T6703] ? __pfx_blk_trace_setup+0x10/0x10 [ 169.535031][ T6703] ? lockdep_hardirqs_on+0x16/0x100 [ 169.535051][ T6703] ? __pfx_vsnprintf+0x10/0x10 [ 169.535077][ T6703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.535097][ T6703] ? do_vfs_ioctl+0x226/0x13e0 [ 169.535119][ T6703] blk_trace_ioctl+0x245/0x320 [ 169.535137][ T6703] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 169.535157][ T6703] ? find_held_lock+0x2b/0x80 [ 169.535173][ T6703] ? __fget_files+0x215/0x3d0 [ 169.535193][ T6703] ? hook_file_ioctl_common+0x140/0x440 [ 169.535213][ T6703] blkdev_ioctl+0x17c/0x6f0 [ 169.535236][ T6703] ? __pfx_blkdev_ioctl+0x10/0x10 [ 169.535260][ T6703] ? __pfx_blkdev_ioctl+0x10/0x10 [ 169.535283][ T6703] __x64_sys_ioctl+0x18e/0x210 [ 169.535304][ T6703] do_syscall_64+0x115/0x840 [ 169.535318][ T6703] ? clear_bhb_loop+0x40/0x90 [ 169.535344][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.535362][ T6703] RIP: 0033:0x7fc2b899de99 [ 169.535376][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.535390][ T6703] RSP: 002b:00007fc2b985d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.535407][ T6703] RAX: ffffffffffffffda RBX: 00007fc2b8c26180 RCX: 00007fc2b899de99 [ 169.535417][ T6703] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009 [ 169.535426][ T6703] RBP: 00007fc2b8a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 169.535435][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.535443][ T6703] R13: 00007fc2b8c26218 R14: 00007fc2b8c26180 R15: 00007ffed63f45c8 [ 169.535463][ T6703] [ 171.459723][ T6713] netlink: 'syz.2.183': attribute type 22 has an invalid length. [ 171.483641][ T6713] netlink: 330 bytes leftover after parsing attributes in process `syz.2.183'. [ 171.855373][ T4944] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 174.676027][ T6756] can: request_module (can-proto-5) failed. [ 175.202856][ T30] audit: type=1804 audit(4294967369.690:14): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.189" name="/newroot/48/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 175.317325][ T30] audit: type=1804 audit(4294967369.720:15): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.189" name="/newroot/48/file0" dev="tmpfs" ino=275 res=1 errno=0 [ 176.597730][ T6780] bond0: option slaves: interface -Âô]àæ does not exist! [ 178.010095][ T4944] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 179.874741][ T6839] random: crng reseeded on system resumption [ 179.955115][ T6834] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 188.736424][ T30] audit: type=1804 audit(4294967383.227:16): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.220" name="/newroot/44/file0" dev="tmpfs" ino=253 res=1 errno=0 [ 188.868638][ T30] audit: type=1804 audit(4294967383.267:17): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.220" name="/newroot/44/file0" dev="tmpfs" ino=253 res=1 errno=0 [ 190.408701][ T6966] openvswitch: netlink: Missing valid actions attribute. [ 192.503940][ T6983] FAULT_INJECTION: forcing a failure. [ 192.503940][ T6983] name failslab, interval 1, probability 0, space 0, times 0 [ 192.725642][ T6983] CPU: 0 UID: 0 PID: 6983 Comm: syz.2.229 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.725669][ T6983] Tainted: [L]=SOFTLOCKUP [ 192.725674][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.725684][ T6983] Call Trace: [ 192.725689][ T6983] [ 192.725695][ T6983] dump_stack_lvl+0x100/0x190 [ 192.725719][ T6983] should_fail_ex.cold+0x5/0xa [ 192.725738][ T6983] should_failslab+0xc2/0x120 [ 192.725766][ T6983] kmem_cache_alloc_noprof+0x91/0x6a0 [ 192.725786][ T6983] ? __kernfs_new_node+0xd2/0xa10 [ 192.725817][ T6983] __kernfs_new_node+0xd2/0xa10 [ 192.725843][ T6983] ? __pfx___kernfs_new_node+0x10/0x10 [ 192.725871][ T6983] ? find_held_lock+0x2b/0x80 [ 192.725888][ T6983] ? kernfs_root+0xee/0x2a0 [ 192.725907][ T6983] ? kernfs_root+0xee/0x2a0 [ 192.725940][ T6983] kernfs_new_node+0x117/0x150 [ 192.725971][ T6983] __kernfs_create_file+0x53/0x350 [ 192.725990][ T6983] sysfs_add_file_mode_ns+0x207/0x3c0 [ 192.726014][ T6983] sysfs_merge_group+0x194/0x340 [ 192.726036][ T6983] ? __pfx_sysfs_merge_group+0x10/0x10 [ 192.726056][ T6983] ? bus_add_device+0x2e2/0x6c0 [ 192.726073][ T6983] ? __pfx_bus_add_device+0x10/0x10 [ 192.726087][ T6983] ? __pfx_dev_add_physical_location+0x10/0x10 [ 192.726120][ T6983] dpm_sysfs_add+0x237/0x280 [ 192.726144][ T6983] device_add+0x9f4/0x1970 [ 192.726169][ T6983] ? __pfx_device_add+0x10/0x10 [ 192.726189][ T6983] ? lockdep_init_map_type+0x5c/0x250 [ 192.726211][ T6983] ? __init_waitqueue_head+0xca/0x150 [ 192.726231][ T6983] rfkill_register+0x1ad/0xb30 [ 192.726260][ T6983] nfc_register_device+0x11f/0x3e0 [ 192.726281][ T6983] nci_register_device+0x7f1/0xb80 [ 192.726306][ T6983] ? __pfx_nci_register_device+0x10/0x10 [ 192.726332][ T6983] ? lockdep_init_map_type+0x5c/0x250 [ 192.726359][ T6983] virtual_ncidev_open+0x141/0x220 [ 192.726381][ T6983] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 192.726401][ T6983] misc_open+0x26d/0x450 [ 192.726416][ T6983] ? __pfx_misc_open+0x10/0x10 [ 192.726430][ T6983] chrdev_open+0x234/0x6a0 [ 192.726444][ T6983] ? __pfx_apparmor_file_open+0x10/0x10 [ 192.726460][ T6983] ? __pfx_chrdev_open+0x10/0x10 [ 192.726475][ T6983] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 192.726500][ T6983] do_dentry_open+0x6ab/0x14d0 [ 192.726522][ T6983] ? __pfx_chrdev_open+0x10/0x10 [ 192.726541][ T6983] vfs_open+0x82/0x3f0 [ 192.726562][ T6983] path_openat+0x2873/0x4280 [ 192.726586][ T6983] ? __pfx_path_openat+0x10/0x10 [ 192.726607][ T6983] do_file_open+0x20e/0x430 [ 192.726623][ T6983] ? __pfx_do_file_open+0x10/0x10 [ 192.726652][ T6983] ? alloc_fd+0x471/0x7a0 [ 192.726676][ T6983] ? do_getname+0x191/0x390 [ 192.726695][ T6983] do_sys_openat2+0x10f/0x1e0 [ 192.726713][ T6983] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.726733][ T6983] ? __fget_files+0x21f/0x3d0 [ 192.726764][ T6983] __x64_sys_openat+0x12d/0x210 [ 192.726784][ T6983] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.726812][ T6983] do_syscall_64+0x115/0x840 [ 192.726828][ T6983] ? clear_bhb_loop+0x40/0x90 [ 192.726846][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.726861][ T6983] RIP: 0033:0x7f143639de99 [ 192.726876][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.726891][ T6983] RSP: 002b:00007f14371a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.726907][ T6983] RAX: ffffffffffffffda RBX: 00007f1436625fa0 RCX: 00007f143639de99 [ 192.726917][ T6983] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 192.726945][ T6983] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000000000 [ 192.726954][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.726964][ T6983] R13: 00007f1436626038 R14: 00007f1436625fa0 R15: 00007ffeb6b462e8 [ 192.726985][ T6983] [ 193.710506][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.727453][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.851417][ T7010] Process accounting paused [ 194.125496][ T7011] ima: policy update failed [ 194.149155][ T30] audit: type=1804 audit(4294967388.529:18): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.233" name="/newroot/46/file0" dev="tmpfs" ino=266 res=1 errno=0 [ 194.321967][ T30] audit: type=1804 audit(4294967388.529:19): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.233" name="/newroot/46/file0" dev="tmpfs" ino=266 res=1 errno=0 [ 194.417615][ T30] audit: type=1802 audit(4294967388.649:20): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.229" res=0 errno=0 [ 194.461285][ T7020] FAULT_INJECTION: forcing a failure. [ 194.461285][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 194.516459][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.3.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.516487][ T7020] Tainted: [L]=SOFTLOCKUP [ 194.516492][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.516504][ T7020] Call Trace: [ 194.516510][ T7020] [ 194.516516][ T7020] dump_stack_lvl+0x100/0x190 [ 194.516538][ T7020] should_fail_ex.cold+0x5/0xa [ 194.516557][ T7020] should_failslab+0xc2/0x120 [ 194.516585][ T7020] __kmalloc_cache_noprof+0x91/0x6c0 [ 194.516611][ T7020] ? trace_pid_list_alloc+0x232/0x480 [ 194.516636][ T7020] trace_pid_list_alloc+0x232/0x480 [ 194.516659][ T7020] trace_pid_write+0x110/0x460 [ 194.516680][ T7020] ? __pfx_trace_pid_write+0x10/0x10 [ 194.516711][ T7020] event_pid_write.isra.0+0x1e4/0x7d0 [ 194.516739][ T7020] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 194.516766][ T7020] vfs_write+0x2aa/0x1050 [ 194.516788][ T7020] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 194.516811][ T7020] ? __pfx_vfs_write+0x10/0x10 [ 194.516834][ T7020] ? __pfx_do_futex+0x10/0x10 [ 194.516847][ T7020] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.516870][ T7020] ? __x64_sys_futex+0x34f/0x4d0 [ 194.516884][ T7020] ? __x64_sys_futex+0x358/0x4d0 [ 194.516901][ T7020] ksys_write+0x12a/0x250 [ 194.516922][ T7020] ? __pfx_ksys_write+0x10/0x10 [ 194.516949][ T7020] do_syscall_64+0x115/0x840 [ 194.516964][ T7020] ? clear_bhb_loop+0x40/0x90 [ 194.516982][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.516997][ T7020] RIP: 0033:0x7f5a9c19de99 [ 194.517010][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.517024][ T7020] RSP: 002b:00007f5a9d05c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.517038][ T7020] RAX: ffffffffffffffda RBX: 00007f5a9c426090 RCX: 00007f5a9c19de99 [ 194.517048][ T7020] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 194.517056][ T7020] RBP: 00007f5a9c233eaf R08: 0000000000000000 R09: 0000000000000000 [ 194.517064][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.517072][ T7020] R13: 00007f5a9c426128 R14: 00007f5a9c426090 R15: 00007ffcc94ee568 [ 194.517095][ T7020] [ 198.808058][ T7060] FAULT_INJECTION: forcing a failure. [ 198.808058][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 198.917977][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.0.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.918004][ T7060] Tainted: [L]=SOFTLOCKUP [ 198.918009][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.918018][ T7060] Call Trace: [ 198.918023][ T7060] [ 198.918029][ T7060] dump_stack_lvl+0x100/0x190 [ 198.918059][ T7060] should_fail_ex.cold+0x5/0xa [ 198.918077][ T7060] should_failslab+0xc2/0x120 [ 198.918102][ T7060] __kmalloc_noprof+0xfc/0x820 [ 198.918120][ T7060] ? udpv6_init_sock+0x24e/0x450 [ 198.918145][ T7060] udpv6_init_sock+0x24e/0x450 [ 198.918163][ T7060] ? __pfx_udpv6_init_sock+0x10/0x10 [ 198.918336][ T7060] inet6_create+0xb1a/0x12b0 [ 198.918384][ T7060] ? inet6_create+0x7f/0x12b0 [ 198.918552][ T7060] __sock_create+0x339/0x860 [ 198.918648][ T7060] udp_sock_create6+0xc7/0x6a0 [ 198.918741][ T7060] ? __pfx_udp_sock_create6+0x10/0x10 [ 198.918767][ T7060] ? crng_make_state+0x477/0x6c0 [ 198.918791][ T7060] ? lockdep_hardirqs_on+0x78/0x100 [ 198.918808][ T7060] ? crng_make_state+0x2b0/0x6c0 [ 198.918838][ T7060] rxrpc_open_socket+0x206/0x6e0 [ 198.918862][ T7060] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 198.918894][ T7060] ? rcu_is_watching+0x12/0xc0 [ 198.918914][ T7060] rxrpc_lookup_local+0xac7/0x1220 [ 198.918940][ T7060] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 198.918965][ T7060] ? __local_bh_enable_ip+0x9e/0x120 [ 198.918983][ T7060] rxrpc_sendmsg+0x34a/0x680 [ 198.919003][ T7060] sock_write_iter+0x53a/0x5b0 [ 198.919024][ T7060] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 198.919038][ T7060] ? __pfx_sock_write_iter+0x10/0x10 [ 198.919066][ T7060] ? bpf_lsm_file_permission+0x9/0x10 [ 198.919090][ T7060] ? security_file_permission+0x76/0x210 [ 198.919110][ T7060] ? rw_verify_area+0xce/0x6d0 [ 198.919133][ T7060] vfs_write+0x6ac/0x1050 [ 198.919155][ T7060] ? __pfx_sock_write_iter+0x10/0x10 [ 198.919185][ T7060] ? __pfx_vfs_write+0x10/0x10 [ 198.919216][ T7060] ? find_held_lock+0x2b/0x80 [ 198.919246][ T7060] ksys_write+0x1f8/0x250 [ 198.919268][ T7060] ? __pfx_ksys_write+0x10/0x10 [ 198.919352][ T7060] do_syscall_64+0x115/0x840 [ 198.919370][ T7060] ? clear_bhb_loop+0x40/0x90 [ 198.919398][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.919414][ T7060] RIP: 0033:0x7fc2b899de99 [ 198.919428][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.919442][ T7060] RSP: 002b:00007fc2b989f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.919456][ T7060] RAX: ffffffffffffffda RBX: 00007fc2b8c25fa0 RCX: 00007fc2b899de99 [ 198.919466][ T7060] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 198.919475][ T7060] RBP: 00007fc2b8a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 198.919484][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.919493][ T7060] R13: 00007fc2b8c26038 R14: 00007fc2b8c25fa0 R15: 00007ffed63f45c8 [ 198.919513][ T7060] [ 199.617480][ T30] audit: type=1800 audit(4294967394.042:21): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.243" name="features" dev="configfs" ino=15967 res=0 errno=0 [ 199.642803][ T7066] netlink: 342 bytes leftover after parsing attributes in process `syz.1.244'. [ 200.049632][ T4944] block nbd0: Receive control failed (result -32) [ 201.308426][ T30] audit: type=1804 audit(4294967395.803:22): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.248" name="/newroot/49/file0" dev="tmpfs" ino=283 res=1 errno=0 [ 201.382446][ T30] audit: type=1804 audit(4294967395.843:23): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.248" name="/newroot/49/file0" dev="tmpfs" ino=283 res=1 errno=0 [ 202.162208][ T7095] FAULT_INJECTION: forcing a failure. [ 202.162208][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 202.465069][ T4944] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 202.490897][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.2.249 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.490935][ T7095] Tainted: [L]=SOFTLOCKUP [ 202.490941][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.490950][ T7095] Call Trace: [ 202.490956][ T7095] [ 202.490963][ T7095] dump_stack_lvl+0x100/0x190 [ 202.490991][ T7095] should_fail_ex.cold+0x5/0xa [ 202.491183][ T7095] should_failslab+0xc2/0x120 [ 202.491205][ T7095] __kmalloc_noprof+0xfc/0x820 [ 202.491224][ T7095] ? tracepoint_add_func+0x3a8/0x1150 [ 202.491248][ T7095] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 202.491269][ T7095] tracepoint_add_func+0x3a8/0x1150 [ 202.491289][ T7095] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 202.491313][ T7095] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 202.491332][ T7095] tracepoint_probe_register+0xc4/0x110 [ 202.491379][ T7095] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 202.491501][ T7095] ? __pfx_blk_add_trace_bio_complete+0x10/0x10 [ 202.491526][ T7095] ? relay_open+0x793/0xa00 [ 202.491548][ T7095] blk_register_tracepoints+0xfc/0x440 [ 202.491564][ T7095] blk_trace_setup_finalize+0x320/0x3a0 [ 202.491582][ T7095] blk_trace_setup+0x254/0x440 [ 202.491606][ T7095] ? __pfx_blk_trace_setup+0x10/0x10 [ 202.491624][ T7095] ? lockdep_hardirqs_on+0x16/0x100 [ 202.491645][ T7095] ? __pfx_vsnprintf+0x10/0x10 [ 202.491672][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.491693][ T7095] ? do_vfs_ioctl+0x226/0x13e0 [ 202.491716][ T7095] blk_trace_ioctl+0x245/0x320 [ 202.491734][ T7095] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 202.491755][ T7095] ? find_held_lock+0x2b/0x80 [ 202.491783][ T7095] ? __fget_files+0x215/0x3d0 [ 202.491809][ T7095] ? hook_file_ioctl_common+0x140/0x440 [ 202.491835][ T7095] blkdev_ioctl+0x17c/0x6f0 [ 202.491860][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 202.491918][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 202.491943][ T7095] __x64_sys_ioctl+0x18e/0x210 [ 202.491966][ T7095] do_syscall_64+0x115/0x840 [ 202.491981][ T7095] ? clear_bhb_loop+0x40/0x90 [ 202.492330][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.492351][ T7095] RIP: 0033:0x7f143639de99 [ 202.492371][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.492398][ T7095] RSP: 002b:00007f1437181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.492413][ T7095] RAX: ffffffffffffffda RBX: 00007f1436626090 RCX: 00007f143639de99 [ 202.492424][ T7095] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 202.492434][ T7095] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000000000 [ 202.492443][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.492451][ T7095] R13: 00007f1436626128 R14: 00007f1436626090 R15: 00007ffeb6b462e8 [ 202.492473][ T7095] [ 202.865972][ T7095] ------------[ cut here ]------------ [ 202.874017][ T7095] ret [ 202.874030][ T7095] WARNING: kernel/trace/blktrace.c:1342 at blk_register_tracepoints+0x382/0x440, CPU#0: syz.2.249/7095 [ 202.895092][ T7095] Modules linked in: [ 202.901399][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.2.249 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.912856][ T7095] Tainted: [L]=SOFTLOCKUP [ 202.917348][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.928595][ T7095] RIP: 0010:blk_register_tracepoints+0x382/0x440 [ 202.936775][ T7095] Code: 0f 0b 90 e9 28 fd ff ff e8 0b 8f f7 ff 90 0f 0b 90 e9 47 fd ff ff e8 fd 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 ef 8e f7 ff 90 <0f> 0b 90 e9 85 fd ff ff e8 e1 8e f7 ff 90 0f 0b 90 e9 a4 fd ff ff [ 202.960008][ T7095] RSP: 0018:ffffc90005d47af8 EFLAGS: 00010287 [ 202.967626][ T7095] RAX: 0000000000044cee RBX: 00000000fffffff4 RCX: ffffc9000f159000 [ 202.976597][ T7095] RDX: 0000000000080000 RSI: ffffffff821199d1 RDI: ffff88807f4d1f00 [ 202.986225][ T7095] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 202.995181][ T7095] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 203.004325][ T7095] R13: ffff888024312540 R14: ffffc90005d47d98 R15: 0000000000000001 [ 203.015340][ T7095] FS: 00007f14371816c0(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 203.026901][ T7095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.034571][ T7095] CR2: 0000001b34dd8ff8 CR3: 000000007a226000 CR4: 00000000003526f0 [ 203.044955][ T7095] Call Trace: [ 203.048905][ T7095] [ 203.052619][ T7095] blk_trace_setup_finalize+0x320/0x3a0 [ 203.060031][ T7095] blk_trace_setup+0x254/0x440 [ 203.065999][ T7095] ? __pfx_blk_trace_setup+0x10/0x10 [ 203.071404][ T7095] ? lockdep_hardirqs_on+0x16/0x100 [ 203.077580][ T7095] ? __pfx_vsnprintf+0x10/0x10 [ 203.083353][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.092394][ T7095] ? do_vfs_ioctl+0x226/0x13e0 [ 203.098533][ T7095] blk_trace_ioctl+0x245/0x320 [ 203.103895][ T7095] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 203.109593][ T7095] ? find_held_lock+0x2b/0x80 [ 203.114533][ T7095] ? __fget_files+0x215/0x3d0 [ 203.119339][ T7095] ? hook_file_ioctl_common+0x140/0x440 [ 203.125679][ T7095] blkdev_ioctl+0x17c/0x6f0 [ 203.130826][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.136778][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.142983][ T7095] __x64_sys_ioctl+0x18e/0x210 [ 203.149344][ T7095] do_syscall_64+0x115/0x840 [ 203.156616][ T7095] ? clear_bhb_loop+0x40/0x90 [ 203.164096][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.172443][ T7095] RIP: 0033:0x7f143639de99 [ 203.179001][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.203977][ T7095] RSP: 002b:00007f1437181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.213426][ T7095] RAX: ffffffffffffffda RBX: 00007f1436626090 RCX: 00007f143639de99 [ 203.223672][ T7095] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 203.231834][ T7095] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000000000 [ 203.240321][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.249132][ T7095] R13: 00007f1436626128 R14: 00007f1436626090 R15: 00007ffeb6b462e8 [ 203.257442][ T7095] [ 203.260515][ T7095] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.268327][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.2.249 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.280674][ T7095] Tainted: [L]=SOFTLOCKUP [ 203.285645][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.298797][ T7095] Call Trace: [ 203.302873][ T7095] [ 203.305971][ T7095] dump_stack_lvl+0x100/0x190 [ 203.311297][ T7095] vpanic+0x552/0x970 [ 203.316431][ T7095] ? __pfx_vpanic+0x10/0x10 [ 203.322072][ T7095] panic+0xd1/0xe0 [ 203.328167][ T7095] ? __pfx_panic+0x10/0x10 [ 203.333481][ T7095] check_panic_on_warn.cold+0x19/0x34 [ 203.341217][ T7095] ? blk_register_tracepoints+0x382/0x440 [ 203.348344][ T7095] __warn.cold+0x191/0x318 [ 203.353211][ T7095] __report_bug+0x30f/0x440 [ 203.358804][ T7095] ? blk_register_tracepoints+0x382/0x440 [ 203.367975][ T7095] ? __pfx___report_bug+0x10/0x10 [ 203.374758][ T7095] ? tracepoint_probe_register+0xd2/0x110 [ 203.382475][ T7095] ? __kasan_kmalloc+0x8a/0xb0 [ 203.390147][ T7095] ? __mutex_unlock_slowpath+0x35d/0x930 [ 203.398348][ T7095] ? blk_register_tracepoints+0x382/0x440 [ 203.404607][ T7095] report_bug+0xb2/0x220 [ 203.411145][ T7095] ? blk_register_tracepoints+0x382/0x440 [ 203.418378][ T7095] handle_bug+0x16a/0x2a0 [ 203.422924][ T7095] exc_invalid_op+0x17/0x50 [ 203.429116][ T7095] asm_exc_invalid_op+0x1a/0x20 [ 203.435153][ T7095] RIP: 0010:blk_register_tracepoints+0x382/0x440 [ 203.441968][ T7095] Code: 0f 0b 90 e9 28 fd ff ff e8 0b 8f f7 ff 90 0f 0b 90 e9 47 fd ff ff e8 fd 8e f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 ef 8e f7 ff 90 <0f> 0b 90 e9 85 fd ff ff e8 e1 8e f7 ff 90 0f 0b 90 e9 a4 fd ff ff [ 203.465116][ T7095] RSP: 0018:ffffc90005d47af8 EFLAGS: 00010287 [ 203.472763][ T7095] RAX: 0000000000044cee RBX: 00000000fffffff4 RCX: ffffc9000f159000 [ 203.481455][ T7095] RDX: 0000000000080000 RSI: ffffffff821199d1 RDI: ffff88807f4d1f00 [ 203.490491][ T7095] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 203.499935][ T7095] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 203.509338][ T7095] R13: ffff888024312540 R14: ffffc90005d47d98 R15: 0000000000000001 [ 203.518597][ T7095] ? blk_register_tracepoints+0x381/0x440 [ 203.525880][ T7095] ? blk_register_tracepoints+0x381/0x440 [ 203.532251][ T7095] blk_trace_setup_finalize+0x320/0x3a0 [ 203.539768][ T7095] blk_trace_setup+0x254/0x440 [ 203.544636][ T7095] ? __pfx_blk_trace_setup+0x10/0x10 [ 203.550025][ T7095] ? lockdep_hardirqs_on+0x16/0x100 [ 203.555324][ T7095] ? __pfx_vsnprintf+0x10/0x10 [ 203.565060][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.572623][ T7095] ? do_vfs_ioctl+0x226/0x13e0 [ 203.577949][ T7095] blk_trace_ioctl+0x245/0x320 [ 203.583462][ T7095] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 203.591251][ T7095] ? find_held_lock+0x2b/0x80 [ 203.597977][ T7095] ? __fget_files+0x215/0x3d0 [ 203.603393][ T7095] ? hook_file_ioctl_common+0x140/0x440 [ 203.611255][ T7095] blkdev_ioctl+0x17c/0x6f0 [ 203.616878][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.621934][ T7095] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.627133][ T7095] __x64_sys_ioctl+0x18e/0x210 [ 203.632436][ T7095] do_syscall_64+0x115/0x840 [ 203.637351][ T7095] ? clear_bhb_loop+0x40/0x90 [ 203.645919][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.659731][ T7095] RIP: 0033:0x7f143639de99 [ 203.666364][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.695815][ T7095] RSP: 002b:00007f1437181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.708283][ T7095] RAX: ffffffffffffffda RBX: 00007f1436626090 RCX: 00007f143639de99 [ 203.718458][ T7095] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000008 [ 203.731937][ T7095] RBP: 00007f1436433eaf R08: 0000000000000000 R09: 0000000000000000 [ 203.741056][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.752683][ T7095] R13: 00007f1436626128 R14: 00007f1436626090 R15: 00007ffeb6b462e8 [ 203.762620][ T7095] [ 203.766544][ T7095] Kernel Offset: disabled [ 203.772766][ T7095] Rebooting in 86400 seconds..