last executing test programs: 3.939907691s ago: executing program 2 (id=148): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3.489819641s ago: executing program 2 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4c100) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.804085951s ago: executing program 1 (id=153): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="18"], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x80000006, 0x1}, 0x5}, 0x3, 0x20008) fcntl$auto_F_SETSIG(r2, 0xa, 0x5) 2.718596058s ago: executing program 3 (id=154): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) socket(0x11, 0x80003, 0x300) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 2.629013419s ago: executing program 1 (id=155): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="01000200000000006bbc9d65365cbf8013"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba441b", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r1, 0x80085502, &(0x7f00000001c0)={0x10, 0x1000}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x20100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000140)={0x20, r4, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008801}, 0x14) r5 = socket(0x29, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D1\x00', 0x117000, 0x0) write$auto(r7, &(0x7f00000002c0)='.))#@\x00', 0x9) ioctl$auto(r5, 0x89f2, 0x24) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r8, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710e}, 0xc) write$auto(r2, 0x0, 0x80001) 2.584326171s ago: executing program 2 (id=157): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/2/smp_affinity_list\x00', 0x80, 0x0) pread64$auto(r0, 0x0, 0x201, 0xc000) 2.407488903s ago: executing program 2 (id=158): mmap$auto(0x1, 0x1000000400009, 0x6, 0x15, 0x2, 0x8) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x2, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000200)="624d1bfe595046ab5c98199adfff0600de16b8ef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be18ecfdf9b0a051779efa1a756fdbf986a298215baf3e6bd7a97b26aebb478bfaac553da2f50d0e1531162fd9c6c6ca7d2316eb660cab29b8e5c0ce1574ef9370005da1efe6c293cb02d95ffe803df1c59b6ccc0b02ec896766cfe3c729ffce659ca157173397d4c5c5e74218ddf46aed92103afc30c34f52e4b66c17e3b73f49c4fbc39059155d9691eadc1adc22f81a69d274ad4dc776861a5895315f65b1efa359ee24666a78774bd00121a1d9b2ac54d3", 0x6a) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.374122865s ago: executing program 3 (id=159): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) connect$auto(r3, &(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x57) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000080)={0x3, 0x83ba, 0x1c2, @inferred, 0x0, "9d4f8ef3f785aae5a5ff69c61ed549546c1eb9f7fe26fe876d9c9dd52e80eb5a7b5bdce62f726f94ddea3b8d240000007e00"}) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r2, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 1.881922565s ago: executing program 3 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r1, 0x9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) (async) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r1, 0x9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={&(0x7f0000000040)='f', 0x69}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'batadv_slave_1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEST_PAN_ID={0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}]}, 0x60}}, 0x40000040) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r4, 0x4030580a, &(0x7f0000000040)={0x3ff, 0x2d2a, 0x4, 0x2, 0x7}) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x934}, 0x1, 0x0, 0x0, 0x8104}, 0x20040041) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000340)="ad38b1172bc659f23991acfe6de6e8279c5167851db0373e57505089bb771a44a3411205be6cf1ae2ccc1817e65b550cdcb4cff5584edfeba73dc9430a136d668dc9fd16f3a4b7ad7af948535014ab0cb5783ed998b8d905fb9c980150519697eaf637cfbe2b24ec1e3f2426890e53f92cd288a1e640cd3853306a1e31d483f74b1dd7bf54ef3ef7d7fc8fc978d2b0ae744f3fdd8ccca0b419f3bb78067767289d3d71800a6cf4577c82111e0b178797ef1d7c634bad8585c7865849c0b2cdc80a59ffca998be9a555ab4639ef329cee8689058e2586863f94cad7411bfa69e88304bd538a1672266984ce2bc0720c4755e293600e9339f9", 0xf8) 1.719127141s ago: executing program 0 (id=162): ioctl$auto_TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4ab00, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x6, 0x3, 0x2cf3) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000280), 0x448901, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x40) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) 1.568400561s ago: executing program 1 (id=163): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, r0, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/mem\x00', 0x40, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xb, 0x5, 0x5f1) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x84100, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4d0, 0x10, 0x1}]}) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) r5 = gettid() rt_sigsuspend$auto(&(0x7f0000000040)={0x8}, 0x8) tkill$auto(r5, 0x3) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) socket(0x1c, 0xa, 0xa) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/pcm0p/sub4/info\x00', 0x20100, 0x0) 1.463781471s ago: executing program 3 (id=164): kill$auto_SIGCONT(0x0, 0x12) (async) socket(0x26, 0x80000, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) (async) r1 = socket(0xa, 0x2, 0x3a) setresuid$auto(0x0, 0x8, 0x0) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) (async) setsockopt$auto(r1, 0x29, 0x1d, 0x0, 0x1ff) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) (async) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x200000, 0x0) (async, rerun: 64) sysfs$auto(0x3, 0x0, 0x0) (rerun: 64) fsopen$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2c81, 0x0) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) (async, rerun: 64) fsmount$auto(0x4, 0x0, 0xa7) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) mmap$auto(0x4, 0x2000c, 0xdc, 0x22eb1, r0, 0x8000) (async, rerun: 64) io_uring_setup$auto(0x1, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0xfffffffe, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x20000055) 1.445460023s ago: executing program 2 (id=165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4c100) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.311979761s ago: executing program 0 (id=166): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) symlink$auto(0x0, &(0x7f0000000440)='./file0\x00') close_range$auto(0x2, 0x8, 0x0) getpid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x1000e6e) personality$auto(0x5) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/softnet_stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a00b7f00180c200000e00000a0001000180c200000e00000a00010000000000000000000800020081581611938c5801da1e1e37448a80204fe21c4aa9dcdbeb27ec3d258863bfcf08a7d5b9ed2399d84a73737390aa4947aafebc57d4c240d02bf26c7b936ea7869135505abd62443aba5aa23a4712b7d4973e3d0be0a8f5432d38de2c351207492b5231b40e9fdc4e4983410ad81a6fa4e76dd5836891df6a61eb2f390100b3735fd2c0dcc0ca4737da69b33d8bcad3fbdeec3830bb62d49d5cc18ed44e86c2867ba4dfe94632eae16c3f4fd5d7d1a62c6d9a22e5c83b9f98e4868f8f9246520f946d89dc70", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x200400c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xffffffffffffff54}, 0x1, 0x0, 0x0, 0x4}, 0x4000081) preadv$auto(0xffffffffffffffff, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x800000000080, 0x5) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000300)=""/241, 0xf1) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x4}, 0x7, 0x0) capset$auto(0x0, 0x0) userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@raw_tracepoint={0x6af, r6, 0x0, 0xc9d2}, 0xc) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf250300000004000800200003801c000c8016000680005170b106019c01f6000000000000009cc6000012000100898771f1c19f17790485908286dd000004000280"], 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) 1.092551745s ago: executing program 3 (id=167): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) socket(0x11, 0x80003, 0x300) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 940.23837ms ago: executing program 0 (id=168): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) clone$auto(0x3ffc, 0xad3, 0x0, 0x0, 0x800000000006) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 885.1709ms ago: executing program 3 (id=169): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) setresuid$auto(0x2, 0x7, 0x8080) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) 584.567104ms ago: executing program 1 (id=170): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 445.679777ms ago: executing program 2 (id=171): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x40000090) io_uring_setup$auto(0x5c, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x8], {0x6, 0xa, 0x8c48, 0x29b, 0x3, 0x7, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x7, 0x1a7b870a, 0x76c5, 0x28, 0x2}}) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0xd, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x2}, 0x2) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r0, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/apparmor/prev\x00', 0x541000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r1 = socket(0xa, 0x3, 0x2f) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4000013) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, &(0x7f0000000040)={0xc4}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000340)=ANY=[@ANYBLOB="72090000c49e6b6148197b46c5bf", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) pidfd_open$auto(0x1, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x800) select$auto(0x10000, &(0x7f0000000100)={[0x4, 0x8, 0x7, 0x2, 0xd5, 0x7, 0x800, 0x81, 0x1, 0x7, 0x8f47, 0xffffffffffffff00, 0x9, 0xff, 0x4, 0x5]}, &(0x7f0000000180)={[0xfff, 0xa6, 0xfffffffffffff800, 0x3, 0xc7, 0x8000000000000000, 0x29, 0x3, 0x9, 0x5f3, 0x20000000000009, 0x1, 0x9, 0x2, 0x100000000]}, &(0x7f0000000200)={[0x141a, 0x4, 0x8, 0x357, 0x4, 0x1, 0x748ed733, 0xfffffffffffffff9, 0xc, 0xd, 0xf, 0x100, 0xfffffffffffffffe, 0x7, 0x6, 0x4]}, &(0x7f0000000280)={0x1, 0x10}) 395.468107ms ago: executing program 0 (id=172): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001600), 0xffffffffffffffff) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40020}, 0x20044080) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptys9\x00', 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendmsg$auto_TIPC_NL_NODE_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="08140000", @ANYRES16=r5, @ANYBLOB="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"], 0x1408}}, 0x20000080) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r6 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) sysfs$auto(0x2, 0x4, 0x0) r7 = socket(0xa, 0x5, 0x0) getsockopt$auto(r7, 0x84, 0x12, 0x0, 0x0) getsockopt$auto(r6, 0x6, 0x22, 0x0, 0x0) r8 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/tracing/set_event\x00', 0xe000, 0x0) ioctl$auto(r8, 0x5608, 0x0) 291.913806ms ago: executing program 1 (id=173): poll$auto(0x0, 0x40, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x8880) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="18000000", @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r3, &(0x7f0000000000)='-\x00', 0x30) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = timerfd_create$auto(0x0, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x4b72, r6) 175.910617ms ago: executing program 0 (id=174): ioctl$auto_TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4ab00, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x6, 0x3, 0x2cf3) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000280), 0x448901, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x40) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) 24.695161ms ago: executing program 1 (id=175): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x10000000084, 0x11, 0x0, 0x10) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x40000010) r1 = io_uring_setup$auto(0xf78e, &(0x7f0000000080)={0x7fffffff, 0x2, 0x3000, 0x6, 0x20007, 0x40, r0, [], {0x6, 0x8, 0x8848, 0x29b, 0x3, 0x7f, 0xb, 0x6, 0x3}, {0x100, 0x1, 0x7fff, 0x85, 0xfffffffe, 0x1a7b870a, 0x8, 0x8, 0x100000000}}) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) process_madvise$auto_MADV_POPULATE_READ(r1, &(0x7f00000001c0)={&(0x7f0000000100)="4678b95c217c86c03b2f2b07890b69f922dd636cfecb8e565c773afecf2260a9af54cd6609aacc2aed8f1db05d3d38dcdb49bf638624e5c7427208094e57276d10a8e338969356928b7421e66d17db50b355f3817e5ff920ad35e33058cf41f20421287a805db0624bfde70cd9643b2e69210744f9a78fdf9b63cb34037d0fb49e2f", 0x1}, 0x8c29, 0x16, 0x5) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) pidfd_open$auto(0x1, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x800) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8953, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x8100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) 0s ago: executing program 0 (id=176): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x4) r0 = socket(0x15, 0xa, 0x100c) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101e41, 0x0) ioperm$auto(0x8, 0x5, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f0000000180)={0x1000800007, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x69d242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x8e100, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffffff, &(0x7f00000002c0)=""/150, 0x96) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r3, 0x6, 0x0) futex_wake$auto(&(0x7f0000000380)="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", 0x6, 0x40000006, 0x87) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) unshare$auto(0x40000080) setsockopt$auto(r2, 0xfffffffc, 0x800000e1, 0x0, 0x5) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x20580, 0x0) mmap$auto(0xffffbffffffffffb, 0x80000000008, 0x1, 0xfff, r5, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 79.851799][ T5811] cgroup: Unknown subsys name 'net' [ 80.003627][ T5811] cgroup: Unknown subsys name 'cpuset' [ 80.012516][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.500620][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.384164][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.393383][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.401572][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.410250][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.418545][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.449047][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.459074][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.467951][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.481526][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.500149][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.520124][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.530312][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.538343][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.553785][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.574438][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.581935][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.593011][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.614150][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.622974][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.631011][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.070923][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.163151][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.278938][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.346679][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.360864][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.368282][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376070][ T5824] bridge_slave_0: entered allmulticast mode [ 84.383605][ T5824] bridge_slave_0: entered promiscuous mode [ 84.416453][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.423925][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.431658][ T5824] bridge_slave_1: entered allmulticast mode [ 84.438858][ T5824] bridge_slave_1: entered promiscuous mode [ 84.567620][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.577073][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.584798][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.592456][ T5828] bridge_slave_0: entered allmulticast mode [ 84.599492][ T5828] bridge_slave_0: entered promiscuous mode [ 84.616473][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.623681][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.631119][ T5832] bridge_slave_0: entered allmulticast mode [ 84.638176][ T5832] bridge_slave_0: entered promiscuous mode [ 84.648317][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.667436][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.674782][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.682226][ T5828] bridge_slave_1: entered allmulticast mode [ 84.689341][ T5828] bridge_slave_1: entered promiscuous mode [ 84.706173][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.713433][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.720660][ T5832] bridge_slave_1: entered allmulticast mode [ 84.727767][ T5832] bridge_slave_1: entered promiscuous mode [ 84.761111][ T5824] team0: Port device team_slave_0 added [ 84.767038][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.774459][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.782196][ T5831] bridge_slave_0: entered allmulticast mode [ 84.789253][ T5831] bridge_slave_0: entered promiscuous mode [ 84.819188][ T5824] team0: Port device team_slave_1 added [ 84.825112][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.832332][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.839507][ T5831] bridge_slave_1: entered allmulticast mode [ 84.847280][ T5831] bridge_slave_1: entered promiscuous mode [ 84.868643][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.899723][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.912210][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.945596][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.969001][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.976120][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.002846][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.017745][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.030318][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.057570][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.064651][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.095256][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.141243][ T5828] team0: Port device team_slave_0 added [ 85.148641][ T5832] team0: Port device team_slave_0 added [ 85.180917][ T5828] team0: Port device team_slave_1 added [ 85.188161][ T5832] team0: Port device team_slave_1 added [ 85.206024][ T5831] team0: Port device team_slave_0 added [ 85.248042][ T5831] team0: Port device team_slave_1 added [ 85.275513][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.282635][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.308986][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.330990][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.337960][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.364160][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.382252][ T5824] hsr_slave_0: entered promiscuous mode [ 85.388725][ T5824] hsr_slave_1: entered promiscuous mode [ 85.396323][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.403578][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.429961][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.451948][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.459009][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.486259][ T5829] Bluetooth: hci0: command tx timeout [ 85.486473][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.545313][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.552587][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.560551][ T5829] Bluetooth: hci1: command tx timeout [ 85.578987][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.612641][ T5828] hsr_slave_0: entered promiscuous mode [ 85.619654][ T5828] hsr_slave_1: entered promiscuous mode [ 85.626385][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 85.632311][ T5828] Cannot create hsr debugfs directory [ 85.639978][ T5829] Bluetooth: hci2: command tx timeout [ 85.641256][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.653076][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.679561][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.720316][ T5829] Bluetooth: hci3: command tx timeout [ 85.832767][ T5832] hsr_slave_0: entered promiscuous mode [ 85.839333][ T5832] hsr_slave_1: entered promiscuous mode [ 85.846121][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 85.852013][ T5832] Cannot create hsr debugfs directory [ 85.901826][ T5831] hsr_slave_0: entered promiscuous mode [ 85.908169][ T5831] hsr_slave_1: entered promiscuous mode [ 85.914554][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 85.920314][ T5831] Cannot create hsr debugfs directory [ 86.266175][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.286533][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.313244][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.332458][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.403958][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.425144][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.442304][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.453650][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.508465][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.526647][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.538908][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.574186][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.659300][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.669729][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.691404][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.703873][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.784161][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.837336][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.870655][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.891980][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.899359][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.916704][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.923961][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.941877][ T796] cfg80211: failed to load regulatory.db [ 86.991339][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.008343][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.034700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.041861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.064464][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.072003][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.095763][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.114815][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.145835][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.153162][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.205365][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.212600][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.263044][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.334616][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.342226][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.384218][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.391463][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.531677][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.560123][ T5829] Bluetooth: hci0: command tx timeout [ 87.574851][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.644004][ T5829] Bluetooth: hci1: command tx timeout [ 87.656523][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.713813][ T5824] veth0_vlan: entered promiscuous mode [ 87.720129][ T5829] Bluetooth: hci2: command tx timeout [ 87.754339][ T5824] veth1_vlan: entered promiscuous mode [ 87.800206][ T5829] Bluetooth: hci3: command tx timeout [ 87.822043][ T5828] veth0_vlan: entered promiscuous mode [ 87.869726][ T5828] veth1_vlan: entered promiscuous mode [ 87.895479][ T5824] veth0_macvtap: entered promiscuous mode [ 87.917068][ T5824] veth1_macvtap: entered promiscuous mode [ 87.987075][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.011417][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.021856][ T5828] veth0_macvtap: entered promiscuous mode [ 88.037182][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.053639][ T5828] veth1_macvtap: entered promiscuous mode [ 88.070645][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.078489][ T3510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.095578][ T3510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.105033][ T3510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.125143][ T3510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165826][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.206574][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.262811][ T1143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271749][ T1143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.301014][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.310614][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.320529][ T1143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.354296][ T1143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380695][ T5831] veth0_vlan: entered promiscuous mode [ 88.397713][ T5832] veth0_vlan: entered promiscuous mode [ 88.408648][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.416786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.453087][ T5832] veth1_vlan: entered promiscuous mode [ 88.463223][ T5831] veth1_vlan: entered promiscuous mode [ 88.514726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.539679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.571823][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.602914][ T5832] veth0_macvtap: entered promiscuous mode [ 88.620985][ T5831] veth0_macvtap: entered promiscuous mode [ 88.663317][ T5832] veth1_macvtap: entered promiscuous mode [ 88.693110][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.693313][ T5831] veth1_macvtap: entered promiscuous mode [ 88.707120][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.756102][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.783427][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.803287][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.823966][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.860455][ T3510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.942291][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.988224][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.010057][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.019043][ T3510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.053902][ T3510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.063502][ T3510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.082118][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.116373][ T3510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.143268][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.179558][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.281193][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.289065][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.348217][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.374022][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.514849][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.560129][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.641365][ T5829] Bluetooth: hci0: command tx timeout [ 89.720290][ T5829] Bluetooth: hci1: command tx timeout [ 89.786211][ T5929] GUP no longer grows the stack in syz.2.6 (5929): 14000-401000 (4000) [ 89.800392][ T5829] Bluetooth: hci2: command tx timeout [ 89.820118][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 89.820152][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.820171][ T5929] Call Trace: [ 89.820179][ T5929] [ 89.820188][ T5929] dump_stack_lvl+0x100/0x190 [ 89.820236][ T5929] gup_vma_lookup.cold+0x83/0x96 [ 89.820268][ T5929] __get_user_pages+0x241/0x34d0 [ 89.820300][ T5929] ? down_read_killable+0x30e/0x4c0 [ 89.820320][ T5929] ? __lock_acquire+0x4a5/0x2630 [ 89.820347][ T5929] ? __pfx___get_user_pages+0x10/0x10 [ 89.820377][ T5929] __gup_longterm_locked+0x87d/0x16f0 [ 89.820412][ T5929] ? __pfx___gup_longterm_locked+0x10/0x10 [ 89.820437][ T5929] ? try_get_folio+0x262/0x750 [ 89.820455][ T5929] ? find_held_lock+0x2b/0x80 [ 89.820473][ T5929] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 89.820497][ T5929] gup_fast_fallback+0x18c6/0x2460 [ 89.820537][ T5929] ? __pfx_gup_fast_fallback+0x10/0x10 [ 89.820571][ T5929] pin_user_pages_fast+0xa7/0xf0 [ 89.820593][ T5929] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 89.820613][ T5929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.820640][ T5929] ? find_held_lock+0x2b/0x80 [ 89.820656][ T5929] ? __schedule+0x2fd3/0x6120 [ 89.820685][ T5929] iov_iter_extract_pages+0xa0d/0x1ef0 [ 89.820717][ T5929] ? __schedule+0x1000/0x6120 [ 89.820747][ T5929] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 89.820772][ T5929] ? __lock_acquire+0x4a5/0x2630 [ 89.820797][ T5929] ? __lock_acquire+0x4a5/0x2630 [ 89.820828][ T5929] iov_iter_extract_bvecs+0x10e/0xf40 [ 89.820859][ T5929] ? find_held_lock+0x2b/0x80 [ 89.820880][ T5929] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 89.820913][ T5929] ? rcu_is_watching+0x12/0xc0 [ 89.820946][ T5929] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 89.820973][ T5929] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.821006][ T5929] ? bio_associate_blkg_from_css+0x4f1/0x13f0 [ 89.821036][ T5929] ? __rcu_read_unlock+0x26a/0x5e0 [ 89.821068][ T5929] bio_iov_iter_get_pages+0x26a/0x970 [ 89.821107][ T5929] __blkdev_direct_IO_simple+0x3a7/0x890 [ 89.821148][ T5929] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 89.821221][ T5929] ? __lock_acquire+0xd73/0x2630 [ 89.821261][ T5929] blkdev_direct_IO+0xc76/0x1fb0 [ 89.821311][ T5929] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 89.821343][ T5929] ? rcu_is_watching+0x12/0xc0 [ 89.821376][ T5929] ? __mark_inode_dirty+0x55c/0x1790 [ 89.821414][ T5929] ? filemap_check_errors+0xa9/0x150 [ 89.821450][ T5929] blkdev_write_iter+0x703/0xd70 [ 89.821492][ T5929] vfs_write+0x6ac/0x1070 [ 89.821516][ T5929] ? __pfx_blkdev_write_iter+0x10/0x10 [ 89.821554][ T5929] ? __pfx_vfs_write+0x10/0x10 [ 89.821575][ T5929] ? find_held_lock+0x2b/0x80 [ 89.821621][ T5929] ksys_write+0x12a/0x250 [ 89.821644][ T5929] ? __pfx_ksys_write+0x10/0x10 [ 89.821681][ T5929] do_syscall_64+0x106/0xf80 [ 89.821713][ T5929] ? clear_bhb_loop+0x40/0x90 [ 89.821744][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.821770][ T5929] RIP: 0033:0x7f83cf59c799 [ 89.821798][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.821825][ T5929] RSP: 002b:00007f83d0403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.821854][ T5929] RAX: ffffffffffffffda RBX: 00007f83cf815fa0 RCX: 00007f83cf59c799 [ 89.821870][ T5929] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000005 [ 89.821885][ T5929] RBP: 00007f83cf632c99 R08: 0000000000000000 R09: 0000000000000000 [ 89.821900][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.821912][ T5929] R13: 00007f83cf816038 R14: 00007f83cf815fa0 R15: 00007ffeb7a03218 [ 89.821946][ T5929] [ 89.862379][ T5935] FAULT_INJECTION: forcing a failure. [ 89.862379][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.880965][ T5829] Bluetooth: hci3: command tx timeout [ 89.930301][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT(full) [ 89.930336][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.930350][ T5935] Call Trace: [ 89.930358][ T5935] [ 89.930367][ T5935] dump_stack_lvl+0x100/0x190 [ 89.930408][ T5935] should_fail_ex.cold+0x5/0xa [ 89.930439][ T5935] _copy_to_user+0x32/0xd0 [ 89.930470][ T5935] simple_read_from_buffer+0xcb/0x170 [ 89.930512][ T5935] proc_fail_nth_read+0x1af/0x230 [ 89.930543][ T5935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.930576][ T5935] ? rw_verify_area+0xce/0x6d0 [ 89.930610][ T5935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.930637][ T5935] vfs_read+0x1e4/0xb30 [ 89.930674][ T5935] ? __pfx_vfs_read+0x10/0x10 [ 89.930707][ T5935] ? __fget_files+0x215/0x3d0 [ 89.930736][ T5935] ? __fget_files+0x21f/0x3d0 [ 89.930769][ T5935] ksys_read+0x12a/0x250 [ 89.930791][ T5935] ? __pfx_ksys_read+0x10/0x10 [ 89.930847][ T5935] do_syscall_64+0x106/0xf80 [ 89.930879][ T5935] ? clear_bhb_loop+0x40/0x90 [ 89.930909][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.930934][ T5935] RIP: 0033:0x7f789355cfce [ 89.930954][ T5935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.930978][ T5935] RSP: 002b:00007f7894397fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.931001][ T5935] RAX: ffffffffffffffda RBX: 00007f78943986c0 RCX: 00007f789355cfce [ 89.931017][ T5935] RDX: 000000000000000f RSI: 00007f78943980a0 RDI: 0000000000000005 [ 89.931032][ T5935] RBP: 00007f7894398090 R08: 0000000000000000 R09: 0000000000000000 [ 89.931047][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.931070][ T5935] R13: 00007f7893816038 R14: 00007f7893815fa0 R15: 00007ffc9bc51258 [ 89.931105][ T5935] [ 90.480905][ T5953] FAULT_INJECTION: forcing a failure. [ 90.480905][ T5953] name failslab, interval 1, probability 0, space 0, times 1 [ 90.557520][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 90.557542][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.557550][ T5953] Call Trace: [ 90.557555][ T5953] [ 90.557561][ T5953] dump_stack_lvl+0x100/0x190 [ 90.557586][ T5953] should_fail_ex.cold+0x5/0xa [ 90.557603][ T5953] should_failslab+0xc2/0x120 [ 90.557619][ T5953] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 90.557640][ T5953] ? skb_clone+0x190/0x400 [ 90.557664][ T5953] skb_clone+0x190/0x400 [ 90.557684][ T5953] netlink_deliver_tap+0xaed/0xcc0 [ 90.557708][ T5953] netlink_unicast+0x70c/0x870 [ 90.557731][ T5953] ? __pfx_netlink_unicast+0x10/0x10 [ 90.557751][ T5953] ? __alloc_skb+0x5b7/0x710 [ 90.557775][ T5953] netlink_ack+0x655/0xb80 [ 90.557800][ T5953] netlink_rcv_skb+0x333/0x420 [ 90.557821][ T5953] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 90.557843][ T5953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.557876][ T5953] xfrm_netlink_rcv+0x71/0x90 [ 90.557902][ T5953] netlink_unicast+0x5aa/0x870 [ 90.557925][ T5953] ? __pfx_netlink_unicast+0x10/0x10 [ 90.557945][ T5953] ? __pfx___might_resched+0x10/0x10 [ 90.557966][ T5953] ? __lock_acquire+0x4a5/0x2630 [ 90.557989][ T5953] netlink_sendmsg+0x8b0/0xda0 [ 90.558013][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.558032][ T5953] ? __import_iovec+0x1d2/0x640 [ 90.558051][ T5953] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 90.558075][ T5953] ____sys_sendmsg+0x9e1/0xb70 [ 90.558089][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.558111][ T5953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.558127][ T5953] ? rcu_is_watching+0x12/0xc0 [ 90.558150][ T5953] ? ___sys_sendmsg+0x19d/0x1e0 [ 90.558163][ T5953] ? kfree+0x2ec/0x6b0 [ 90.558183][ T5953] ___sys_sendmsg+0x190/0x1e0 [ 90.558200][ T5953] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.558233][ T5953] ? __pfx___might_resched+0x10/0x10 [ 90.558256][ T5953] __sys_sendmmsg+0x205/0x430 [ 90.558278][ T5953] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.558303][ T5953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 90.558331][ T5953] ? fput+0x79/0x100 [ 90.558347][ T5953] ? ksys_write+0x1ac/0x250 [ 90.558359][ T5953] ? __pfx_ksys_write+0x10/0x10 [ 90.558375][ T5953] __x64_sys_sendmmsg+0x9c/0x100 [ 90.558398][ T5953] ? lockdep_hardirqs_on+0x78/0x100 [ 90.558418][ T5953] do_syscall_64+0x106/0xf80 [ 90.558437][ T5953] ? clear_bhb_loop+0x40/0x90 [ 90.558463][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.558486][ T5953] RIP: 0033:0x7f789359c799 [ 90.558507][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.558527][ T5953] RSP: 002b:00007f7894398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.558553][ T5953] RAX: ffffffffffffffda RBX: 00007f7893815fa0 RCX: 00007f789359c799 [ 90.558563][ T5953] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 90.558571][ T5953] RBP: 00007f7894398090 R08: 0000000000000000 R09: 0000000000000000 [ 90.558579][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.558587][ T5953] R13: 00007f7893816038 R14: 00007f7893815fa0 R15: 00007ffc9bc51258 [ 90.558606][ T5953] [ 90.905318][ T5953] Zero length message leads to an empty skb [ 91.337643][ T5959] netlink: 'syz.0.11': attribute type 21 has an invalid length. [ 91.345902][ T5959] netlink: 334 bytes leftover after parsing attributes in process `syz.0.11'. [ 91.721990][ T5829] Bluetooth: hci0: command tx timeout [ 91.803305][ T5829] Bluetooth: hci1: command tx timeout [ 91.826492][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.880063][ T5829] Bluetooth: hci2: command tx timeout [ 91.994061][ T5967] bond0: (slave bond_slave_1): Releasing backup interface [ 92.116360][ T5970] bridge0: port 3(dummy0) entered blocking state [ 92.141706][ T5970] bridge0: port 3(dummy0) entered disabled state [ 92.148555][ T5970] dummy0: entered allmulticast mode [ 92.156999][ T5970] dummy0: entered promiscuous mode [ 92.164074][ T5970] bridge0: port 3(dummy0) entered blocking state [ 92.170849][ T5970] bridge0: port 3(dummy0) entered forwarding state [ 92.243519][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 92.324957][ T5974] netlink: 354 bytes leftover after parsing attributes in process `syz.0.16'. [ 92.440479][ T5829] Bluetooth: hci3: command tx timeout [ 92.793090][ T5983] netlink: 342 bytes leftover after parsing attributes in process `syz.2.19'. [ 94.193267][ T6027] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 94.563278][ T6034] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.602303][ T6032] netlink: 342 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.781979][ T6084] FAULT_INJECTION: forcing a failure. [ 96.781979][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 96.795625][ T6084] CPU: 0 UID: 0 PID: 6084 Comm: syz.3.43 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.795671][ T6084] Tainted: [L]=SOFTLOCKUP [ 96.795681][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.795698][ T6084] Call Trace: [ 96.795708][ T6084] [ 96.795719][ T6084] dump_stack_lvl+0x100/0x190 [ 96.795769][ T6084] should_fail_ex.cold+0x5/0xa [ 96.795802][ T6084] ? usb_hcd_submit_urb+0x601/0x2150 [ 96.795834][ T6084] should_failslab+0xc2/0x120 [ 96.795867][ T6084] __kmalloc_noprof+0xe0/0x850 [ 96.795908][ T6084] ? mark_held_locks+0x40/0x70 [ 96.795951][ T6084] usb_hcd_submit_urb+0x601/0x2150 [ 96.795995][ T6084] usb_submit_urb+0x8aa/0x1910 [ 96.796036][ T6084] ? __init_swait_queue_head+0xca/0x150 [ 96.796083][ T6084] usb_start_wait_urb+0x10e/0x580 [ 96.796123][ T6084] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 96.796171][ T6084] ? __asan_memset+0x23/0x50 [ 96.796216][ T6084] usb_control_msg+0x328/0x4b0 [ 96.796253][ T6084] ? __pfx_usb_control_msg+0x10/0x10 [ 96.796300][ T6084] hub_ext_port_status+0x152/0x600 [ 96.796347][ T6084] hub_activate+0x6d8/0x1d50 [ 96.796394][ T6084] ? __pfx_hub_activate+0x10/0x10 [ 96.796428][ T6084] ? find_held_lock+0x2b/0x80 [ 96.796454][ T6084] ? usb_generic_driver_resume+0x70/0xa0 [ 96.796499][ T6084] ? usb_generic_driver_resume+0x70/0xa0 [ 96.796547][ T6084] hub_resume+0xb0/0x400 [ 96.796586][ T6084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.796632][ T6084] ? __pfx_hub_resume+0x10/0x10 [ 96.796667][ T6084] ? __pfx_hcd_bus_resume+0x10/0x10 [ 96.796717][ T6084] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 96.796766][ T6084] usb_resume_both+0x237/0x9a0 [ 96.796813][ T6084] ? __pfx_usb_resume_both+0x10/0x10 [ 96.796853][ T6084] ? __rpm_callback+0x272/0x620 [ 96.796881][ T6084] ? __pfx_usb_runtime_resume+0x10/0x10 [ 96.796908][ T6084] ? rcu_is_watching+0x12/0xc0 [ 96.796951][ T6084] ? __pfx_usb_runtime_resume+0x10/0x10 [ 96.796977][ T6084] __rpm_callback+0xc8/0x620 [ 96.797000][ T6084] ? read_tsc+0x9/0x20 [ 96.797025][ T6084] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 96.797054][ T6084] ? __pfx_usb_runtime_resume+0x10/0x10 [ 96.797083][ T6084] rpm_callback+0x16a/0x1b0 [ 96.797107][ T6084] ? __pfx_usb_runtime_resume+0x10/0x10 [ 96.797138][ T6084] rpm_resume+0xd3e/0x1350 [ 96.797174][ T6084] ? __pfx_rpm_resume+0x10/0x10 [ 96.797198][ T6084] ? do_raw_spin_lock+0x128/0x260 [ 96.797237][ T6084] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.797280][ T6084] ? _raw_spin_lock_irqsave+0x52/0x60 [ 96.797324][ T6084] __pm_runtime_resume+0xb6/0x170 [ 96.797355][ T6084] usb_autoresume_device+0x23/0xe0 [ 96.797388][ T6084] usbdev_open+0x228/0x870 [ 96.797419][ T6084] ? do_raw_spin_lock+0x128/0x260 [ 96.797458][ T6084] ? __pfx_usbdev_open+0x10/0x10 [ 96.797493][ T6084] ? chrdev_open+0x589/0x6a0 [ 96.797522][ T6084] ? chrdev_open+0x589/0x6a0 [ 96.797557][ T6084] ? __pfx_usbdev_open+0x10/0x10 [ 96.797587][ T6084] chrdev_open+0x234/0x6a0 [ 96.797617][ T6084] ? __pfx_chrdev_open+0x10/0x10 [ 96.797649][ T6084] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.797687][ T6084] do_dentry_open+0x6d8/0x1660 [ 96.797715][ T6084] ? __pfx_chrdev_open+0x10/0x10 [ 96.797752][ T6084] vfs_open+0x82/0x3f0 [ 96.797789][ T6084] path_openat+0x208c/0x31a0 [ 96.797832][ T6084] ? __pfx_path_openat+0x10/0x10 [ 96.797875][ T6084] do_file_open+0x20e/0x430 [ 96.797908][ T6084] ? __pfx_do_file_open+0x10/0x10 [ 96.797964][ T6084] ? alloc_fd+0x476/0x790 [ 96.797996][ T6084] ? do_getname+0x191/0x390 [ 96.798034][ T6084] do_sys_openat2+0x10d/0x1e0 [ 96.798070][ T6084] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.798120][ T6084] __x64_sys_openat+0x12d/0x210 [ 96.798157][ T6084] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.798209][ T6084] do_syscall_64+0x106/0xf80 [ 96.798246][ T6084] ? clear_bhb_loop+0x40/0x90 [ 96.798281][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.798309][ T6084] RIP: 0033:0x7f987859c799 [ 96.798334][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.798361][ T6084] RSP: 002b:00007f9879541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.798398][ T6084] RAX: ffffffffffffffda RBX: 00007f9878815fa0 RCX: 00007f987859c799 [ 96.798417][ T6084] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 96.798435][ T6084] RBP: 00007f9878632c99 R08: 0000000000000000 R09: 0000000000000000 [ 96.798452][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.798468][ T6084] R13: 00007f9878816038 R14: 00007f9878815fa0 R15: 00007ffc5611a458 [ 96.798523][ T6084] [ 96.798828][ T6084] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 97.838017][ T6089] netlink: 342 bytes leftover after parsing attributes in process `syz.3.44'. [ 98.531700][ T6100] block2mtd: illegal erase size [ 99.925765][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 99.926286][ T6120] netlink: 342 bytes leftover after parsing attributes in process `syz.1.53'. [ 99.936516][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 100.243119][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 100.253148][ T6143] netlink: 354 bytes leftover after parsing attributes in process `syz.1.60'. [ 100.918732][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 100.978332][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.194558][ T6164] netlink: 342 bytes leftover after parsing attributes in process `syz.3.66'. [ 101.382304][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 101.952057][ T6189] syz.3.75 uses obsolete (PF_INET,SOCK_PACKET) [ 101.979900][ T29] audit: type=1107 audit(1774136017.983:2): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 102.010371][ T29] audit: type=1107 audit(1774136017.983:3): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 102.216855][ T6198] FAULT_INJECTION: forcing a failure. [ 102.216855][ T6198] name fail_futex, interval 1, probability 0, space 0, times 1 [ 102.276079][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.3.77 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.276125][ T6198] Tainted: [L]=SOFTLOCKUP [ 102.276135][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.276151][ T6198] Call Trace: [ 102.276160][ T6198] [ 102.276171][ T6198] dump_stack_lvl+0x100/0x190 [ 102.276216][ T6198] should_fail_ex.cold+0x5/0xa [ 102.276249][ T6198] get_futex_key+0x1d2/0x1620 [ 102.276286][ T6198] ? __pfx_get_futex_key+0x10/0x10 [ 102.276328][ T6198] futex_wait_setup+0x83/0x510 [ 102.276379][ T6198] __futex_wait+0x19f/0x300 [ 102.276423][ T6198] ? __pfx___futex_wait+0x10/0x10 [ 102.276469][ T6198] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.276515][ T6198] ? find_held_lock+0x2b/0x80 [ 102.276539][ T6198] ? futex_wake+0x456/0x530 [ 102.276586][ T6198] futex_wait+0xed/0x380 [ 102.276627][ T6198] ? __pfx_futex_wait+0x10/0x10 [ 102.276672][ T6198] ? putname+0xb1/0x110 [ 102.276699][ T6198] ? kmem_cache_free+0x124/0x6a0 [ 102.276744][ T6198] do_futex+0x1ef/0x350 [ 102.276777][ T6198] ? __pfx_do_futex+0x10/0x10 [ 102.276808][ T6198] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.276848][ T6198] __x64_sys_futex+0x34f/0x4d0 [ 102.276890][ T6198] ? __x64_sys_openat+0x12d/0x210 [ 102.276927][ T6198] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.276977][ T6198] do_syscall_64+0x106/0xf80 [ 102.277012][ T6198] ? clear_bhb_loop+0x40/0x90 [ 102.277044][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.277070][ T6198] RIP: 0033:0x7f987859c799 [ 102.277093][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.277116][ T6198] RSP: 002b:00007f98795410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.277142][ T6198] RAX: ffffffffffffffda RBX: 00007f9878815fa8 RCX: 00007f987859c799 [ 102.277161][ T6198] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9878815fa8 [ 102.277177][ T6198] RBP: 00007f9878815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.277194][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.277209][ T6198] R13: 00007f9878816038 R14: 00007ffc5611a370 R15: 00007ffc5611a458 [ 102.277245][ T6198] [ 103.095705][ T6203] __nla_validate_parse: 3 callbacks suppressed [ 103.095720][ T6203] netlink: 342 bytes leftover after parsing attributes in process `syz.2.78'. [ 103.120953][ T6206] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.473589][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 103.483278][ T6216] netlink: 354 bytes leftover after parsing attributes in process `syz.2.81'. [ 104.065071][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 104.096896][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 104.262916][ T6229] FAULT_INJECTION: forcing a failure. [ 104.262916][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 104.292413][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.2.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.292467][ T6229] Tainted: [L]=SOFTLOCKUP [ 104.292477][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.292493][ T6229] Call Trace: [ 104.292501][ T6229] [ 104.292511][ T6229] dump_stack_lvl+0x100/0x190 [ 104.292558][ T6229] should_fail_ex.cold+0x5/0xa [ 104.292589][ T6229] ? usb_alloc_urb+0x66/0xa0 [ 104.292617][ T6229] should_failslab+0xc2/0x120 [ 104.292646][ T6229] __kmalloc_noprof+0xe0/0x850 [ 104.292692][ T6229] usb_alloc_urb+0x66/0xa0 [ 104.292723][ T6229] usb_control_msg+0x1d3/0x4b0 [ 104.292759][ T6229] ? __pfx_usb_control_msg+0x10/0x10 [ 104.292805][ T6229] hub_ext_port_status+0x152/0x600 [ 104.292852][ T6229] hub_activate+0x6d8/0x1d50 [ 104.292897][ T6229] ? __pfx_hub_activate+0x10/0x10 [ 104.292930][ T6229] ? find_held_lock+0x2b/0x80 [ 104.292956][ T6229] ? usb_generic_driver_resume+0x70/0xa0 [ 104.292991][ T6229] ? usb_generic_driver_resume+0x70/0xa0 [ 104.293036][ T6229] hub_resume+0xb0/0x400 [ 104.293072][ T6229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.293116][ T6229] ? __pfx_hub_resume+0x10/0x10 [ 104.293151][ T6229] ? __pfx_hcd_bus_resume+0x10/0x10 [ 104.293194][ T6229] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 104.293244][ T6229] usb_resume_both+0x237/0x9a0 [ 104.293284][ T6229] ? __pfx_usb_resume_both+0x10/0x10 [ 104.293320][ T6229] ? __rpm_callback+0x272/0x620 [ 104.293345][ T6229] ? __pfx_usb_runtime_resume+0x10/0x10 [ 104.293372][ T6229] ? rcu_is_watching+0x12/0xc0 [ 104.293412][ T6229] ? __pfx_usb_runtime_resume+0x10/0x10 [ 104.293450][ T6229] __rpm_callback+0xc8/0x620 [ 104.293474][ T6229] ? read_tsc+0x9/0x20 [ 104.293501][ T6229] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 104.293535][ T6229] ? __pfx_usb_runtime_resume+0x10/0x10 [ 104.293566][ T6229] rpm_callback+0x16a/0x1b0 [ 104.293592][ T6229] ? __pfx_usb_runtime_resume+0x10/0x10 [ 104.293627][ T6229] rpm_resume+0xd3e/0x1350 [ 104.293661][ T6229] ? __pfx_rpm_resume+0x10/0x10 [ 104.293685][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 104.293724][ T6229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.293767][ T6229] ? _raw_spin_lock_irqsave+0x52/0x60 [ 104.293811][ T6229] __pm_runtime_resume+0xb6/0x170 [ 104.293839][ T6229] usb_autoresume_device+0x23/0xe0 [ 104.293869][ T6229] usbdev_open+0x228/0x870 [ 104.293900][ T6229] ? kobject_get_unless_zero+0x156/0x200 [ 104.293943][ T6229] ? __pfx_usbdev_open+0x10/0x10 [ 104.293970][ T6229] ? chrdev_open+0x10b/0x6a0 [ 104.293997][ T6229] ? chrdev_open+0x10b/0x6a0 [ 104.294029][ T6229] ? __pfx_usbdev_open+0x10/0x10 [ 104.294057][ T6229] chrdev_open+0x234/0x6a0 [ 104.294084][ T6229] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.294113][ T6229] ? __pfx_chrdev_open+0x10/0x10 [ 104.294143][ T6229] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 104.294183][ T6229] do_dentry_open+0x6d8/0x1660 [ 104.294211][ T6229] ? __pfx_chrdev_open+0x10/0x10 [ 104.294248][ T6229] vfs_open+0x82/0x3f0 [ 104.294287][ T6229] path_openat+0x208c/0x31a0 [ 104.294328][ T6229] ? __pfx_path_openat+0x10/0x10 [ 104.294369][ T6229] do_file_open+0x20e/0x430 [ 104.294398][ T6229] ? __pfx_do_file_open+0x10/0x10 [ 104.294461][ T6229] ? alloc_fd+0x476/0x790 [ 104.294492][ T6229] ? do_getname+0x191/0x390 [ 104.294529][ T6229] do_sys_openat2+0x10d/0x1e0 [ 104.294565][ T6229] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.294614][ T6229] __x64_sys_openat+0x12d/0x210 [ 104.294651][ T6229] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.294702][ T6229] do_syscall_64+0x106/0xf80 [ 104.294737][ T6229] ? clear_bhb_loop+0x40/0x90 [ 104.294770][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.294799][ T6229] RIP: 0033:0x7f83cf59c799 [ 104.294822][ T6229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.294849][ T6229] RSP: 002b:00007f83d0403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.294876][ T6229] RAX: ffffffffffffffda RBX: 00007f83cf815fa0 RCX: 00007f83cf59c799 [ 104.294895][ T6229] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 104.294913][ T6229] RBP: 00007f83cf632c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.294929][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.294945][ T6229] R13: 00007f83cf816038 R14: 00007f83cf815fa0 R15: 00007ffeb7a03218 [ 104.294983][ T6229] [ 104.295103][ T6229] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 105.186449][ T6236] netlink: 342 bytes leftover after parsing attributes in process `syz.1.89'. [ 105.467884][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 105.518909][ T6252] netlink: 354 bytes leftover after parsing attributes in process `syz.1.91'. [ 106.829535][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.839534][ T6281] netlink: 354 bytes leftover after parsing attributes in process `syz.1.101'. [ 107.039350][ T6286] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 107.805548][ T6307] FAULT_INJECTION: forcing a failure. [ 107.805548][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 107.819228][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.1.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.819274][ T6307] Tainted: [L]=SOFTLOCKUP [ 107.819284][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.819300][ T6307] Call Trace: [ 107.819309][ T6307] [ 107.819319][ T6307] dump_stack_lvl+0x100/0x190 [ 107.819367][ T6307] should_fail_ex.cold+0x5/0xa [ 107.819401][ T6307] should_failslab+0xc2/0x120 [ 107.819432][ T6307] __kmalloc_cache_noprof+0x7a/0x6f0 [ 107.819469][ T6307] ? usb_control_msg+0xbc/0x4b0 [ 107.819504][ T6307] ? __pfx___mutex_lock+0x10/0x10 [ 107.819551][ T6307] usb_control_msg+0xbc/0x4b0 [ 107.819587][ T6307] ? __pfx_usb_control_msg+0x10/0x10 [ 107.819633][ T6307] hub_ext_port_status+0x152/0x600 [ 107.819680][ T6307] hub_activate+0x6d8/0x1d50 [ 107.819726][ T6307] ? __pfx_hub_activate+0x10/0x10 [ 107.819758][ T6307] ? find_held_lock+0x2b/0x80 [ 107.819786][ T6307] ? usb_generic_driver_resume+0x70/0xa0 [ 107.819818][ T6307] ? usb_generic_driver_resume+0x70/0xa0 [ 107.819858][ T6307] hub_resume+0xb0/0x400 [ 107.819891][ T6307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.819927][ T6307] ? __pfx_hub_resume+0x10/0x10 [ 107.819965][ T6307] ? __pfx_hcd_bus_resume+0x10/0x10 [ 107.820002][ T6307] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 107.820049][ T6307] usb_resume_both+0x237/0x9a0 [ 107.820090][ T6307] ? __pfx_usb_resume_both+0x10/0x10 [ 107.820135][ T6307] ? __rpm_callback+0x272/0x620 [ 107.820163][ T6307] ? __pfx_usb_runtime_resume+0x10/0x10 [ 107.820190][ T6307] ? rcu_is_watching+0x12/0xc0 [ 107.820231][ T6307] ? __pfx_usb_runtime_resume+0x10/0x10 [ 107.820260][ T6307] __rpm_callback+0xc8/0x620 [ 107.820286][ T6307] ? read_tsc+0x9/0x20 [ 107.820314][ T6307] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 107.820342][ T6307] ? __pfx_usb_runtime_resume+0x10/0x10 [ 107.820372][ T6307] rpm_callback+0x16a/0x1b0 [ 107.820397][ T6307] ? __pfx_usb_runtime_resume+0x10/0x10 [ 107.820429][ T6307] rpm_resume+0xd3e/0x1350 [ 107.820465][ T6307] ? __pfx_rpm_resume+0x10/0x10 [ 107.820489][ T6307] ? do_raw_spin_lock+0x128/0x260 [ 107.820529][ T6307] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.820572][ T6307] ? _raw_spin_lock_irqsave+0x52/0x60 [ 107.820617][ T6307] __pm_runtime_resume+0xb6/0x170 [ 107.820656][ T6307] usb_autoresume_device+0x23/0xe0 [ 107.820688][ T6307] usbdev_open+0x228/0x870 [ 107.820720][ T6307] ? kobject_get_unless_zero+0x156/0x200 [ 107.820766][ T6307] ? __pfx_usbdev_open+0x10/0x10 [ 107.820801][ T6307] ? chrdev_open+0x10b/0x6a0 [ 107.820829][ T6307] ? chrdev_open+0x10b/0x6a0 [ 107.820863][ T6307] ? __pfx_usbdev_open+0x10/0x10 [ 107.820894][ T6307] chrdev_open+0x234/0x6a0 [ 107.820922][ T6307] ? __pfx_apparmor_file_open+0x10/0x10 [ 107.820950][ T6307] ? __pfx_chrdev_open+0x10/0x10 [ 107.820981][ T6307] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 107.821019][ T6307] do_dentry_open+0x6d8/0x1660 [ 107.821046][ T6307] ? __pfx_chrdev_open+0x10/0x10 [ 107.821085][ T6307] vfs_open+0x82/0x3f0 [ 107.821130][ T6307] path_openat+0x208c/0x31a0 [ 107.821173][ T6307] ? __pfx_path_openat+0x10/0x10 [ 107.821218][ T6307] do_file_open+0x20e/0x430 [ 107.821251][ T6307] ? __pfx_do_file_open+0x10/0x10 [ 107.821311][ T6307] ? alloc_fd+0x476/0x790 [ 107.821344][ T6307] ? do_getname+0x191/0x390 [ 107.821381][ T6307] do_sys_openat2+0x10d/0x1e0 [ 107.821415][ T6307] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.821461][ T6307] __x64_sys_openat+0x12d/0x210 [ 107.821499][ T6307] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.821551][ T6307] do_syscall_64+0x106/0xf80 [ 107.821589][ T6307] ? clear_bhb_loop+0x40/0x90 [ 107.821623][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.821651][ T6307] RIP: 0033:0x7f645f79c799 [ 107.821676][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.821703][ T6307] RSP: 002b:00007f64605b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.821730][ T6307] RAX: ffffffffffffffda RBX: 00007f645fa15fa0 RCX: 00007f645f79c799 [ 107.821749][ T6307] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 107.821768][ T6307] RBP: 00007f645f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 107.821786][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.821803][ T6307] R13: 00007f645fa16038 R14: 00007f645fa15fa0 R15: 00007ffdbbbc0d68 [ 107.821842][ T6307] [ 108.320148][ T6307] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 108.886201][ T6309] __nla_validate_parse: 1 callbacks suppressed [ 108.886224][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 108.905312][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 108.958544][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 108.972718][ T6316] netlink: 354 bytes leftover after parsing attributes in process `syz.2.112'. [ 109.924958][ T6346] FAULT_INJECTION: forcing a failure. [ 109.924958][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 109.938535][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.2.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.938579][ T6346] Tainted: [L]=SOFTLOCKUP [ 109.938589][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.938606][ T6346] Call Trace: [ 109.938615][ T6346] [ 109.938626][ T6346] dump_stack_lvl+0x100/0x190 [ 109.938674][ T6346] should_fail_ex.cold+0x5/0xa [ 109.938709][ T6346] should_failslab+0xc2/0x120 [ 109.938739][ T6346] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 109.938783][ T6346] ? vidtv_psi_desc_clone+0x3aa/0x5d0 [ 109.938840][ T6346] kmemdup_noprof+0x29/0x60 [ 109.938886][ T6346] vidtv_psi_desc_clone+0x3aa/0x5d0 [ 109.938927][ T6346] vidtv_channel_si_init+0x12ef/0x18d0 [ 109.938980][ T6346] vidtv_mux_init+0x526/0xbf0 [ 109.939026][ T6346] vidtv_start_feed+0x33e/0x4c0 [ 109.939057][ T6346] ? __pfx_vidtv_start_feed+0x10/0x10 [ 109.939090][ T6346] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 109.939130][ T6346] ? mark_held_locks+0x40/0x70 [ 109.939172][ T6346] ? __pfx_vidtv_start_feed+0x10/0x10 [ 109.939201][ T6346] dmx_ts_feed_start_filtering+0xf6/0x220 [ 109.939242][ T6346] dvb_dmxdev_start_feed+0x273/0x3f0 [ 109.939275][ T6346] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 109.939310][ T6346] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 109.939345][ T6346] dvb_demux_do_ioctl+0xe64/0x1200 [ 109.939388][ T6346] dvb_usercopy+0x167/0x340 [ 109.939413][ T6346] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 109.939446][ T6346] ? __pfx_dvb_usercopy+0x10/0x10 [ 109.939487][ T6346] ? __fget_files+0x21f/0x3d0 [ 109.939527][ T6346] dvb_demux_ioctl+0x29/0x40 [ 109.939554][ T6346] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 109.939583][ T6346] __x64_sys_ioctl+0x18e/0x210 [ 109.939628][ T6346] do_syscall_64+0x106/0xf80 [ 109.939667][ T6346] ? clear_bhb_loop+0x40/0x90 [ 109.939701][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.939739][ T6346] RIP: 0033:0x7f83cf59c799 [ 109.939765][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.939788][ T6346] RSP: 002b:00007f83d0403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.939820][ T6346] RAX: ffffffffffffffda RBX: 00007f83cf815fa0 RCX: 00007f83cf59c799 [ 109.939836][ T6346] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 109.939851][ T6346] RBP: 00007f83cf632c99 R08: 0000000000000000 R09: 0000000000000000 [ 109.939866][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.939880][ T6346] R13: 00007f83cf816038 R14: 00007f83cf815fa0 R15: 00007ffeb7a03218 [ 109.939923][ T6346] [ 109.969082][ T6337] netlink: 342 bytes leftover after parsing attributes in process `syz.0.113'. [ 110.391155][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 110.447081][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 110.597827][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 110.609750][ T6355] netlink: 354 bytes leftover after parsing attributes in process `syz.0.123'. [ 110.931473][ T6366] FAULT_INJECTION: forcing a failure. [ 110.931473][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 110.957349][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.1.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.957395][ T6366] Tainted: [L]=SOFTLOCKUP [ 110.957403][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.957419][ T6366] Call Trace: [ 110.957428][ T6366] [ 110.957438][ T6366] dump_stack_lvl+0x100/0x190 [ 110.957483][ T6366] should_fail_ex.cold+0x5/0xa [ 110.957515][ T6366] ? usb_alloc_urb+0x66/0xa0 [ 110.957543][ T6366] should_failslab+0xc2/0x120 [ 110.957573][ T6366] __kmalloc_noprof+0xe0/0x850 [ 110.957616][ T6366] usb_alloc_urb+0x66/0xa0 [ 110.957645][ T6366] usb_control_msg+0x1d3/0x4b0 [ 110.957679][ T6366] ? __pfx_usb_control_msg+0x10/0x10 [ 110.957733][ T6366] hub_ext_port_status+0x152/0x600 [ 110.957778][ T6366] hub_activate+0x6d8/0x1d50 [ 110.957819][ T6366] ? __pfx_hub_activate+0x10/0x10 [ 110.957853][ T6366] ? find_held_lock+0x2b/0x80 [ 110.957879][ T6366] ? usb_generic_driver_resume+0x70/0xa0 [ 110.957914][ T6366] ? usb_generic_driver_resume+0x70/0xa0 [ 110.957958][ T6366] hub_resume+0xb0/0x400 [ 110.957994][ T6366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.958044][ T6366] ? __pfx_hub_resume+0x10/0x10 [ 110.958082][ T6366] ? __pfx_hcd_bus_resume+0x10/0x10 [ 110.958096][ T6370] binder: 6369:6370 ioctl c018620c 0 returned -1 [ 110.958121][ T6366] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 110.958160][ T6366] usb_resume_both+0x237/0x9a0 [ 110.958196][ T6366] ? __pfx_usb_resume_both+0x10/0x10 [ 110.958235][ T6366] ? __rpm_callback+0x272/0x620 [ 110.958262][ T6366] ? __pfx_usb_runtime_resume+0x10/0x10 [ 110.958289][ T6366] ? rcu_is_watching+0x12/0xc0 [ 110.958329][ T6366] ? __pfx_usb_runtime_resume+0x10/0x10 [ 110.958358][ T6366] __rpm_callback+0xc8/0x620 [ 110.958382][ T6366] ? read_tsc+0x9/0x20 [ 110.958409][ T6366] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 110.958438][ T6366] ? __pfx_usb_runtime_resume+0x10/0x10 [ 110.958467][ T6366] rpm_callback+0x16a/0x1b0 [ 110.958491][ T6366] ? __pfx_usb_runtime_resume+0x10/0x10 [ 110.958522][ T6366] rpm_resume+0xd3e/0x1350 [ 110.958556][ T6366] ? __pfx_rpm_resume+0x10/0x10 [ 110.958580][ T6366] ? do_raw_spin_lock+0x128/0x260 [ 110.958619][ T6366] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 110.958660][ T6366] ? _raw_spin_lock_irqsave+0x52/0x60 [ 110.958702][ T6366] __pm_runtime_resume+0xb6/0x170 [ 110.958740][ T6366] usb_autoresume_device+0x23/0xe0 [ 110.958773][ T6366] usbdev_open+0x228/0x870 [ 110.958804][ T6366] ? kobject_get_unless_zero+0x156/0x200 [ 110.958849][ T6366] ? __pfx_usbdev_open+0x10/0x10 [ 110.958875][ T6366] ? chrdev_open+0x10b/0x6a0 [ 110.958901][ T6366] ? chrdev_open+0x10b/0x6a0 [ 110.958934][ T6366] ? __pfx_usbdev_open+0x10/0x10 [ 110.958961][ T6366] chrdev_open+0x234/0x6a0 [ 110.958987][ T6366] ? __pfx_apparmor_file_open+0x10/0x10 [ 110.959014][ T6366] ? __pfx_chrdev_open+0x10/0x10 [ 110.959043][ T6366] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 110.959080][ T6366] do_dentry_open+0x6d8/0x1660 [ 110.959108][ T6366] ? __pfx_chrdev_open+0x10/0x10 [ 110.959144][ T6366] vfs_open+0x82/0x3f0 [ 110.959181][ T6366] path_openat+0x208c/0x31a0 [ 110.959221][ T6366] ? __pfx_path_openat+0x10/0x10 [ 110.959262][ T6366] do_file_open+0x20e/0x430 [ 110.959293][ T6366] ? __pfx_do_file_open+0x10/0x10 [ 110.959347][ T6366] ? alloc_fd+0x476/0x790 [ 110.959377][ T6366] ? do_getname+0x191/0x390 [ 110.959413][ T6366] do_sys_openat2+0x10d/0x1e0 [ 110.959447][ T6366] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.959495][ T6366] __x64_sys_openat+0x12d/0x210 [ 110.959530][ T6366] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.959579][ T6366] do_syscall_64+0x106/0xf80 [ 110.959615][ T6366] ? clear_bhb_loop+0x40/0x90 [ 110.959648][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.959675][ T6366] RIP: 0033:0x7f645f79c799 [ 110.959699][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.959731][ T6366] RSP: 002b:00007f64605b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.959758][ T6366] RAX: ffffffffffffffda RBX: 00007f645fa15fa0 RCX: 00007f645f79c799 [ 110.959776][ T6366] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 110.959793][ T6366] RBP: 00007f645f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 110.959810][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.959825][ T6366] R13: 00007f645fa16038 R14: 00007f645fa15fa0 R15: 00007ffdbbbc0d68 [ 110.959862][ T6366] [ 110.976694][ T6366] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 111.016191][ T10] Process accounting resumed [ 111.123680][ T6371] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.603984][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 113.448071][ T6431] kAFS: Invalid Command on /proc/fs/afs/cells file [ 113.504005][ T6435] FAULT_INJECTION: forcing a failure. [ 113.504005][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 113.529933][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.1.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.529984][ T6435] Tainted: [L]=SOFTLOCKUP [ 113.529994][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.530010][ T6435] Call Trace: [ 113.530020][ T6435] [ 113.530031][ T6435] dump_stack_lvl+0x100/0x190 [ 113.530078][ T6435] should_fail_ex.cold+0x5/0xa [ 113.530113][ T6435] ? usb_hcd_submit_urb+0x601/0x2150 [ 113.530140][ T6435] should_failslab+0xc2/0x120 [ 113.530168][ T6435] __kmalloc_noprof+0xe0/0x850 [ 113.530206][ T6435] ? mark_held_locks+0x40/0x70 [ 113.530244][ T6435] usb_hcd_submit_urb+0x601/0x2150 [ 113.530286][ T6435] usb_submit_urb+0x8aa/0x1910 [ 113.530328][ T6435] ? __init_swait_queue_head+0xca/0x150 [ 113.530373][ T6435] usb_start_wait_urb+0x10e/0x580 [ 113.530412][ T6435] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 113.530473][ T6435] ? __asan_memset+0x23/0x50 [ 113.530519][ T6435] usb_control_msg+0x328/0x4b0 [ 113.530557][ T6435] ? __pfx_usb_control_msg+0x10/0x10 [ 113.530605][ T6435] hub_ext_port_status+0x152/0x600 [ 113.530653][ T6435] hub_activate+0x6d8/0x1d50 [ 113.530703][ T6435] ? __pfx_hub_activate+0x10/0x10 [ 113.530736][ T6435] ? find_held_lock+0x2b/0x80 [ 113.530762][ T6435] ? usb_generic_driver_resume+0x70/0xa0 [ 113.530798][ T6435] ? usb_generic_driver_resume+0x70/0xa0 [ 113.530845][ T6435] hub_resume+0xb0/0x400 [ 113.530882][ T6435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.530927][ T6435] ? __pfx_hub_resume+0x10/0x10 [ 113.530963][ T6435] ? __pfx_hcd_bus_resume+0x10/0x10 [ 113.531002][ T6435] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 113.531050][ T6435] usb_resume_both+0x237/0x9a0 [ 113.531095][ T6435] ? __pfx_usb_resume_both+0x10/0x10 [ 113.531135][ T6435] ? __rpm_callback+0x272/0x620 [ 113.531163][ T6435] ? __pfx_usb_runtime_resume+0x10/0x10 [ 113.531191][ T6435] ? rcu_is_watching+0x12/0xc0 [ 113.531229][ T6435] ? __pfx_usb_runtime_resume+0x10/0x10 [ 113.531260][ T6435] __rpm_callback+0xc8/0x620 [ 113.531285][ T6435] ? read_tsc+0x9/0x20 [ 113.531315][ T6435] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 113.531346][ T6435] ? __pfx_usb_runtime_resume+0x10/0x10 [ 113.531377][ T6435] rpm_callback+0x16a/0x1b0 [ 113.531403][ T6435] ? __pfx_usb_runtime_resume+0x10/0x10 [ 113.531443][ T6435] rpm_resume+0xd3e/0x1350 [ 113.531478][ T6435] ? __pfx_rpm_resume+0x10/0x10 [ 113.531501][ T6435] ? do_raw_spin_lock+0x128/0x260 [ 113.531538][ T6435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 113.531578][ T6435] ? _raw_spin_lock_irqsave+0x52/0x60 [ 113.531623][ T6435] __pm_runtime_resume+0xb6/0x170 [ 113.531655][ T6435] usb_autoresume_device+0x23/0xe0 [ 113.531686][ T6435] usbdev_open+0x228/0x870 [ 113.531717][ T6435] ? kobject_get_unless_zero+0x156/0x200 [ 113.531763][ T6435] ? __pfx_usbdev_open+0x10/0x10 [ 113.531790][ T6435] ? chrdev_open+0x10b/0x6a0 [ 113.531817][ T6435] ? chrdev_open+0x10b/0x6a0 [ 113.531852][ T6435] ? __pfx_usbdev_open+0x10/0x10 [ 113.531881][ T6435] chrdev_open+0x234/0x6a0 [ 113.531909][ T6435] ? __pfx_apparmor_file_open+0x10/0x10 [ 113.531938][ T6435] ? __pfx_chrdev_open+0x10/0x10 [ 113.531969][ T6435] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 113.532008][ T6435] do_dentry_open+0x6d8/0x1660 [ 113.532035][ T6435] ? __pfx_chrdev_open+0x10/0x10 [ 113.532075][ T6435] vfs_open+0x82/0x3f0 [ 113.532115][ T6435] path_openat+0x208c/0x31a0 [ 113.532158][ T6435] ? __pfx_path_openat+0x10/0x10 [ 113.532203][ T6435] do_file_open+0x20e/0x430 [ 113.532235][ T6435] ? __pfx_do_file_open+0x10/0x10 [ 113.532294][ T6435] ? alloc_fd+0x476/0x790 [ 113.532324][ T6435] ? do_getname+0x191/0x390 [ 113.532363][ T6435] do_sys_openat2+0x10d/0x1e0 [ 113.532399][ T6435] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.532459][ T6435] __x64_sys_openat+0x12d/0x210 [ 113.532497][ T6435] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.532551][ T6435] do_syscall_64+0x106/0xf80 [ 113.532591][ T6435] ? clear_bhb_loop+0x40/0x90 [ 113.532626][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.532655][ T6435] RIP: 0033:0x7f645f79c799 [ 113.532679][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.532706][ T6435] RSP: 002b:00007f64605b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.532735][ T6435] RAX: ffffffffffffffda RBX: 00007f645fa15fa0 RCX: 00007f645f79c799 [ 113.532754][ T6435] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 113.532827][ T6435] RBP: 00007f645f832c99 R08: 0000000000000000 R09: 0000000000000000 [ 113.532844][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.532859][ T6435] R13: 00007f645fa16038 R14: 00007f645fa15fa0 R15: 00007ffdbbbc0d68 [ 113.532898][ T6435] [ 113.533190][ T6435] hub 36-0:1.0: hub_ext_port_status failed (err = -12) [ 114.338202][ T6440] __nla_validate_parse: 9 callbacks suppressed [ 114.338225][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.383545][ T6440] netlink: 354 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.612370][ T6453] ptp ptp0: new virtual clock ptp1 [ 114.639991][ T6453] ptp ptp0: guarantee physical clock free running [ 115.028915][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 115.083889][ T6463] netlink: 354 bytes leftover after parsing attributes in process `syz.0.160'. [ 115.829740][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 115.846884][ T6494] netlink: 354 bytes leftover after parsing attributes in process `syz.3.167'. [ 115.863137][ T6488] netlink: NAT attribute has 18 unknown bytes [ 116.393383][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 116.432552][ T6507] netlink: 354 bytes leftover after parsing attributes in process `syz.1.170'. [ 117.123641][ T6526] FAULT_INJECTION: forcing a failure. [ 117.123641][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 117.137048][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.137094][ T6526] Tainted: [L]=SOFTLOCKUP [ 117.137104][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.137121][ T6526] Call Trace: [ 117.137131][ T6526] [ 117.137142][ T6526] dump_stack_lvl+0x100/0x190 [ 117.137205][ T6526] should_fail_ex.cold+0x5/0xa [ 117.137240][ T6526] should_failslab+0xc2/0x120 [ 117.137270][ T6526] __kmalloc_cache_noprof+0x7a/0x6f0 [ 117.137306][ T6526] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 117.137353][ T6526] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 117.137397][ T6526] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 117.137438][ T6526] vidtv_channel_si_init+0x1289/0x18d0 [ 117.137494][ T6526] vidtv_mux_init+0x526/0xbf0 [ 117.137540][ T6526] vidtv_start_feed+0x33e/0x4c0 [ 117.137576][ T6526] ? __pfx_vidtv_start_feed+0x10/0x10 [ 117.137610][ T6526] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 117.137650][ T6526] ? mark_held_locks+0x40/0x70 [ 117.137691][ T6526] ? __pfx_vidtv_start_feed+0x10/0x10 [ 117.137722][ T6526] dmx_ts_feed_start_filtering+0xf6/0x220 [ 117.137762][ T6526] dvb_dmxdev_start_feed+0x273/0x3f0 [ 117.137797][ T6526] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 117.137832][ T6526] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 117.137867][ T6526] dvb_demux_do_ioctl+0xe64/0x1200 [ 117.137910][ T6526] dvb_usercopy+0x167/0x340 [ 117.137936][ T6526] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 117.137969][ T6526] ? __pfx_dvb_usercopy+0x10/0x10 [ 117.138011][ T6526] ? __fget_files+0x21f/0x3d0 [ 117.138046][ T6526] dvb_demux_ioctl+0x29/0x40 [ 117.138071][ T6526] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 117.138098][ T6526] __x64_sys_ioctl+0x18e/0x210 [ 117.138141][ T6526] do_syscall_64+0x106/0xf80 [ 117.138180][ T6526] ? clear_bhb_loop+0x40/0x90 [ 117.138214][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.138249][ T6526] RIP: 0033:0x7f789359c799 [ 117.138280][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.138307][ T6526] RSP: 002b:00007f7894398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.138345][ T6526] RAX: ffffffffffffffda RBX: 00007f7893815fa0 RCX: 00007f789359c799 [ 117.138364][ T6526] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 117.138381][ T6526] RBP: 00007f7893632c99 R08: 0000000000000000 R09: 0000000000000000 [ 117.138398][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.138415][ T6526] R13: 00007f7893816038 R14: 00007f7893815fa0 R15: 00007ffc9bc51258 [ 117.138455][ T6526] [ 117.139265][ T6526] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 117.410096][ T6526] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 117.418610][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.0.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.429416][ T6526] Tainted: [L]=SOFTLOCKUP [ 117.433735][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.443789][ T6526] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 117.449702][ T6526] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ad 8c db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 89 8c db f9 4d 85 e4 [ 117.469405][ T6526] RSP: 0018:ffffc900071c7a10 EFLAGS: 00010247 [ 117.475485][ T6526] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90003fc9000 [ 117.483546][ T6526] RDX: 0000000000000000 RSI: ffffffff882c8f33 RDI: 0000000000000005 [ 117.491528][ T6526] RBP: ffff888036a00180 R08: 0000000000000000 R09: 4453534204050000 [ 117.499683][ T6526] R10: 0000000000000005 R11: 1ffffffff1cfe579 R12: 0000000000000000 [ 117.507741][ T6526] R13: ffff888064276940 R14: ffff888022288b40 R15: ffff888064276cc0 [ 117.515716][ T6526] FS: 00007f78943986c0(0000) GS:ffff888124449000(0000) knlGS:0000000000000000 [ 117.524660][ T6526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.531428][ T6526] CR2: 000000110c374906 CR3: 000000007a1e8000 CR4: 00000000003526f0 [ 117.539498][ T6526] Call Trace: [ 117.542773][ T6526] [ 117.545699][ T6526] vidtv_channel_si_init+0x12fc/0x18d0 [ 117.551269][ T6526] vidtv_mux_init+0x526/0xbf0 [ 117.555981][ T6526] vidtv_start_feed+0x33e/0x4c0 [ 117.560957][ T6526] ? __pfx_vidtv_start_feed+0x10/0x10 [ 117.566342][ T6526] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 117.573026][ T6526] ? mark_held_locks+0x40/0x70 [ 117.577804][ T6526] ? __pfx_vidtv_start_feed+0x10/0x10 [ 117.583184][ T6526] dmx_ts_feed_start_filtering+0xf6/0x220 [ 117.589190][ T6526] dvb_dmxdev_start_feed+0x273/0x3f0 [ 117.594613][ T6526] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 117.600096][ T6526] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 117.605302][ T6526] dvb_demux_do_ioctl+0xe64/0x1200 [ 117.610422][ T6526] dvb_usercopy+0x167/0x340 [ 117.615009][ T6526] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 117.620645][ T6526] ? __pfx_dvb_usercopy+0x10/0x10 [ 117.625758][ T6526] ? __fget_files+0x21f/0x3d0 [ 117.630434][ T6526] dvb_demux_ioctl+0x29/0x40 [ 117.635019][ T6526] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 117.640303][ T6526] __x64_sys_ioctl+0x18e/0x210 [ 117.645185][ T6526] do_syscall_64+0x106/0xf80 [ 117.649794][ T6526] ? clear_bhb_loop+0x40/0x90 [ 117.654488][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.660473][ T6526] RIP: 0033:0x7f789359c799 [ 117.664897][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.684607][ T6526] RSP: 002b:00007f7894398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.693127][ T6526] RAX: ffffffffffffffda RBX: 00007f7893815fa0 RCX: 00007f789359c799 [ 117.701114][ T6526] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 117.709084][ T6526] RBP: 00007f7893632c99 R08: 0000000000000000 R09: 0000000000000000 [ 117.717051][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.725020][ T6526] R13: 00007f7893816038 R14: 00007f7893815fa0 R15: 00007ffc9bc51258 [ 117.733179][ T6526] [ 117.736197][ T6526] Modules linked in: [ 117.743758][ T6526] ---[ end trace 0000000000000000 ]--- [ 117.791500][ T6526] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 117.857297][ T6526] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ad 8c db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 89 8c db f9 4d 85 e4 [ 117.909927][ T6526] RSP: 0018:ffffc900071c7a10 EFLAGS: 00010247 [ 117.916201][ T6526] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90003fc9000 [ 117.925173][ T6526] RDX: 0000000000000000 RSI: ffffffff882c8f33 RDI: 0000000000000005 [ 117.933524][ T6526] RBP: ffff888036a00180 R08: 0000000000000000 R09: 4453534204050000 [ 117.950712][ T6526] R10: 0000000000000005 R11: 1ffffffff1cfe579 R12: 0000000000000000 [ 117.962786][ T6526] R13: ffff888064276940 R14: ffff888022288b40 R15: ffff888064276cc0 [ 117.972569][ T6526] FS: 00007f78943986c0(0000) GS:ffff888124449000(0000) knlGS:0000000000000000 [ 117.982551][ T6526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.989314][ T6526] CR2: 00007f83cf7e92f8 CR3: 000000007a1e8000 CR4: 00000000003526f0 [ 117.997726][ T6526] Kernel panic - not syncing: Fatal exception [ 118.004349][ T6526] Kernel Offset: disabled [ 118.008668][ T6526] Rebooting in 86400 seconds..