last executing test programs: 9.022183477s ago: executing program 2 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r1, 0x1, 0x70bd28, 0x25dfdc03, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xffffffff, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r2, &(0x7f0000000300)="a0", 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) read$auto_proc_environ_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), r4) sendmsg$auto_IPVS_CMD_ZERO(r4, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd30, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004}, 0x20040094) sendmsg$auto_IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b4, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x19d, 0x2, 0x0, 0x1, [@typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x9e7}, @generic="c43214a184b4fccb570d67acde0e69ae2c99936a168e6df47148515f2eb8c1edbc3bcd08435804ff99fdb50cda171a0bdca40855a03d31c497c2a987c4431a26ed761592380746d319d55778ec23cdfa428ae4bff2d7dd4394157b776eec236af56f0e4f0cc5a7d4c1718b8a9748d3c39d87200c66728916dd4d8180baeb8279845be9ebe5ae1238af18c23f5e6993aa8b57ea06396e599c9df0abde66b6f5e53e6da5bfc42224b88f13f6311783923ce8ba437a7e6fe844931d74a0b5e9e40b75a0411c64f712784bfcb221a89ec51011", @typed={0x8, 0x2a, 0x0, 0x0, @fd}, @generic="2addadcf4294d3556125461bfbfeb7ed173fa4bb5e34a43ab53b0869b756affbbba1c5b03798bdd9adf946b65ee583057c9b1dc6ea878a7c41a0aaa750240c0fef5812723be4a10d19e77fcf53647acb85312204f9ef1669999c9b5858a6a0a8c0df2383", @nested={0x47, 0x42, 0x0, 0x1, [@generic="1aa2eded72dc6e4ec1d7b2516d80d38a60709edad4fe7c6e28c27c07200905150546bdd6fa117836c242a6", @typed={0x17, 0x8e, 0x0, 0x0, @binary="ea367028ccecf8b86c9489d422fbbc8b4f5d4d"}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x51}, 0x24000800) setsockopt$auto_SO_CNX_ADVICE(0xffffffffffffffff, 0x570, 0x35, &(0x7f0000000000)='/dev/vcs\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) syz_clone3(0x0, 0x0) 7.273205135s ago: executing program 2 (id=749): openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000038400f96c54f2249787bb9d2dc04a29cc3144762aef4761c9d9bbf71c08c640452e0b79290dac161d9a694ce2ef94b05cc3e625bfb3eb66aed2afab3ea9b6684d792b8748e2a748ec792d612a78eaf46b125a7efa5d157bb92b725e1890120f951250f33df657ba0d4fb4914c7f9caa9800fb50e4cfe836d11a4319f8353c120e15c95a90d9deecde64ccbf3678c44bd64f573ebacfb82fec5ba929f29eeb2ddfe20dd05f6dc5", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) 7.104254403s ago: executing program 2 (id=751): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio1/input/input3/phys\x00', 0x1c5700, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x746a, 0x9, 0x8e, 0x426, 0x0, 0xffffffffffffffff}) get_robust_list$auto(r1, &(0x7f0000000140)=&(0x7f0000000100)={{&(0x7f0000000080)}, 0x4, &(0x7f00000000c0)}, &(0x7f0000000180)=0x401) ioctl$auto_FICLONE(r0, 0x40049409, r0) 6.944916007s ago: executing program 2 (id=753): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) (async) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) open(&(0x7f0000000180)='./file0\x00', 0x4e0001, 0x54) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) prctl$auto_PR_SET_VMA(0x53564d41, 0x5, 0x6, 0x6, 0x5) lsm_list_modules$auto(0x0, 0x0, 0x0) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x54c) rename$auto(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x5, 0xc99d, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2641, 0x0) write$auto(r2, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/print_all\x00', 0x80302, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0xc2b, 0x7131, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0x26, 0xc, 0x40005, 0x9, 0x0, 0x2, 0x5}) (async) lstat$auto(0x0, &(0x7f0000000180)={0xa, 0xc2b, 0x7131, 0xfbc, 0x0, 0x0, 0x0, 0x4, 0x26, 0xc, 0x40005, 0x9, 0x0, 0x2, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendfile$auto(r3, r3, 0x0, 0x3) (async) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x4, 0x400007, 0xe3, 0x9b7a, r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_error_time\x00', 0x2000, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) 6.717574792s ago: executing program 0 (id=754): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x1, 0x7, "50cfeeca8e00"}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x8, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x9, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x10000000800007ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, 0x0) openat$auto_supply_map_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYRESHEX=0x0], 0x1ac}}, 0x2141) socket(0x11, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f82) flock$auto(r1, 0x6) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r2, 0x1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r3, 0x2) 5.786862178s ago: executing program 1 (id=757): socket(0x2b, 0x1, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/tracing/trace_options\x00', 0x8102, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) socket(0x2d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x280800, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000007, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xf8, 0x4, 0x6d3d, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.529992273s ago: executing program 3 (id=758): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c) close_range$auto(0x2, 0xa, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x5, 0x84) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xf}, 0x800000005, &(0x7f0000000280)={&(0x7f0000000040)="d00a3c60f83b9bcc846a2ee454dce1683d28eb01ebe189ff00ff69c591db93426e1a55b05c7645ac085f", 0x1ffffffff}, 0x6, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) prctl$auto(0x10, 0x2, 0x0, 0x20000004, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x17, 0x0, 0x7) 5.511897015s ago: executing program 0 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) sendfile$auto(r4, r4, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) 5.333463991s ago: executing program 3 (id=760): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)=@query={@target_ifindex=r1, 0x5, 0x3, 0x4, 0x4, @prog_cnt=0x5, 0x0, 0x1, 0x9b0, 0xfffffffffffffff7, 0x8000}, 0x3) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) (async) mmap$auto(0x8e, 0x7, 0x20000100000007, 0x19, 0xfffffffffffffffa, 0x0) setuid$auto(0x0) (async) mmap$auto(0x0, 0x40006, 0xdf, 0x200089b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) write$auto(0x3, 0x0, 0x81) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) (async) connect$auto(0x3, 0x0, 0x58) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) r2 = io_uring_setup$auto(0x4, 0x0) sync_file_range$auto(r2, 0x9, 0x0, 0x3) r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f00000004c0)={@siginfo_0_0={0xff, 0x3, 0x2, @_rt={0xffffffffffffffff, 0xee01, @sival_ptr=&(0x7f00000003c0)="35a44632cda295f53957a9010cb0408f0b4c3bb2cfd1a6dcf38c307f2f73876e3645f11ce2a0d89141f432a0d157a500270612e40bd823d38f638b8dafb68630ece5d2f40404b91826118de869e1f4a646bb8b232406cd3029bf04b2e57031a03ee30f86568385a24101771b085676498aa3e3e252263ae29ccf9d703924e2684f687daa3210a699da7ed05bc3dc9f12bc21413f8d215a7de665a6a47f31b5b8f5e3d4a321279d4b0337c744b4346873221c8c0603434673b0116e853ca74caede2bfd13"}}}, 0x5, &(0x7f0000000540)={{0xd, 0x7}, {0x381d, 0x3ff}, 0x8, 0x2, 0x3, 0x1e56, 0x4, 0x2, 0x37d10cd6, 0x0, 0x1, 0x8000000000000000, 0x1, 0x9, 0x1, 0xffffffff}) prctl$auto(0x1, 0x1, r3, 0x201, 0x0) (async) syz_clone(0x24000000, &(0x7f0000000340)="fc18f53e5c626e63e59416f637791284e28b6bab8dec7e05b709c3a588a2d609d5681f7a983629f965e9b2251791ce4da2552966931b799751fc59e39ee2e0bb9fdc864987c6faeb183c432a6d59a9c002c1a19e", 0x54, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000600)="13897403e028d900003e5264e2285ca5ba57958a8e36bdaef1df9b374e5a01c460302a469686f917f1ff2184f7f60c05f81c42d9008b4d812b23b3f1a190f51079de3c12521e78b3ee686504f268576381093990085b9c4bdb1b9c7d8acce200") 5.053347902s ago: executing program 0 (id=761): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x1, 0x5) get_robust_list$auto(0x0, 0x0, 0x0) setgroups$auto(0xe32, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = socketcall$auto_SYS_SOCKET(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, 0x0, 0x0) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000002600)={{0x0, 0x0, 0xee00, 0x7fffffff, 0x4, 0x8b7, 0xdf}, 0x0, 0x0, 0x8b00000000000000, 0x2, 0x5, 0x86, 0x3, 0x6, 0x401, 0x6}) ioctl$auto_BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)=0xf442) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 5.053113042s ago: executing program 2 (id=762): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x82164011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x12) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sysfs$auto(0x2, 0x49, 0x0) (async) sysfs$auto(0x2, 0x49, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) lseek$auto(0x3, 0x8, 0x0) (async) lseek$auto(0x3, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xa0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) (async) prctl$auto(0x23, 0x2, 0x7fffffffefff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r1}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(r2, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) (async) readv$auto(r2, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, 0x0, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x10) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x6, &(0x7f0000000300)={@_si_pad}, 0x293d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x9, 0x0) (async) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/udp6\x00', 0x101400, 0x0) 4.779666829s ago: executing program 0 (id=763): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0)="ccee5b7e8752852bf3", 0x9) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)="158f4a2b") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 3.774252044s ago: executing program 1 (id=764): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x704, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f0000000180)={{0x8001, 0xffffffffffffffff, 0xee00, 0xff, 0x400, 0xd, 0x5}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x1, 0x0, 0x100000000, 0x4, 0x80000001, 0x0, 0x4, 0x2, 0x0, @raw=0x4, @raw}) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @str=').-\x00'}, @generic, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xa, 0x0, 0x0, @uid=r4}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x2d, 0x9d, "66f8c8d2a63774072f020cdf5759d03be93092b73e303dbf1c24215a5956a512c12625410ea6b80728"}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x80000000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) getsockopt$auto(r0, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) (async) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x704, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f0000000180)={{0x8001, 0xffffffffffffffff, 0xee00, 0xff, 0x400, 0xd, 0x5}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x1, 0x0, 0x100000000, 0x4, 0x80000001, 0x0, 0x4, 0x2, 0x0, @raw=0x4, @raw}) (async) sendmsg$auto_NL80211_CMD_START_NAN(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @str=').-\x00'}, @generic, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0xa, 0x0, 0x0, @uid=r4}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x2d, 0x9d, "66f8c8d2a63774072f020cdf5759d03be93092b73e303dbf1c24215a5956a512c12625410ea6b80728"}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x80000000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) (async) getsockopt$auto(r0, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) (async) 3.61290224s ago: executing program 3 (id=765): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd9\x00', 0x0, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) ioctl$auto_IOC_PR_REGISTER(r0, 0x401870c8, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x90802, 0x6) fcntl$auto_F_OFD_SETLK(r3, 0x25, 0x101) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 3.597199243s ago: executing program 0 (id=766): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5) socket(0x11, 0x3, 0xb) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r2, 0xffff, 0x29}, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x7ffbfffc) munmap$auto(0x1775387, 0x5) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x122) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x101400, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000001200)={0x1018, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "886c9645da0a3322cc445d09fed39b127c3f5ea53aa48f75324c30140028690459004306a1bdde4b04a4a845284eb926872b9f31a30f301ccf201633112ac0d8b836638cb8b302da01d4417306b2b3dde9f0ded02faaae703c12f6499df95552291571c0d5bc2550de96b9f433ea272cc504601475b9f805e7b9085c5079b2c99d23eb81fe99616cef4e5502769b411b96302225185c6bdd79ace881c8ff66bba53d16f18a11a9ee9d785fd74261a638d19a88d2d2c94ea880d9ca38dc99bda138185b4bbfe59023892ca85779c51f41782bb5f61419dc338d820fefaef7baab05d08b0992fdc2ca5d8696b3b6cd9006093f3e33c199b568fb70552ca212344e09edab864a8652c589913aafbba3106e586d30b622ea4be2e839a0f6a18acc3c6471ee84cabe9edc333fda9ebde5a941f77748640a36d143b5bbc54b20d35c551da3f5143cd5a21cb8ec42e2b6ef543ff3ba4904651b85c2e8f2aa4197f54703b7832b5f43441de7d0eaa062407e1dc0f7056688fb46a30a76b9b29390778a8619c2555fa667450bb83f0de44f720a91c1d45d39a18fc5f36ab59d648e914c67a8d19ae7812ef27b564e10e9b85584acf8052234214fabe441011236aa0f73e409fefc66b4de7eae85afaac70ff9261c22ec9908a7404c82867b348502119b1e086bd2cfc048924452eb94ec041c554fb428d193731650b38e1af607d91f90e48e6d6349fbe85d9099ba64438f9d067681258827544ce23623fd1485ae8f2d799ca84cf1f8105cf8fa8219315d4c804d57493b3d2a22543b13ccc5b602f9b37969a26cbc56c00ee05fc92d87c675e7a49559425a386c2387dc59bed6eb1ddcddab8900230f983e520745fba8143208c44216296603d2ba503400fea08ba98276c03b0b0745da91a8ae1efedae24a9e11b1b9f3f96ed683142bcf731f0f0f4ac2c8256016eca369c7c8ac29a316426f365786a2ca912f9f2e8e4d98ade30da7aec16ac5f7f046a08a7bfbf64620d13c38e96912711face466688d0bfa40c2c2c43f0d6e98a208ad3cd1dc7eab21442d314e2b90ea2c2c260cf13b6d5deb6ad7fb8dcb195ca41d05ed2bedf238697f57627f164035134990dd6964f341dc4d3e3e8edd71480de5706c62cc558d4bced0a5a4529e610ad444ea7b0972c82817f8851de352ce3aedecb1c2a97f7c8393ffbcb8a7d62d560c290a51b4f6d099fac4f19241df8ce18a32ad1816087a7afc8c354adb3f230e5a7a268ca73c9d32e16e6c35309af324a2aeee8f0e9fbc8635ea7aed09a0153d171d4763746a1fae3f9fbbb5a7cd30ce10f33b016db12a0f634e3d7d112ac532716651b972edc0995e4527b983e6e50eae176f182eb0d82c00ce9fb327f2c13d945016442d8f86beab5756fa3ec9b8d964b79da675725b6d4a5384989d460f2767fc17f16f400c3d6dacd503e91211191fa87d5b012525b36f16cf00af003bab500147ee3e239c48dc6460607c7cf41492f7168c142b023b0269602b28e518895a67f6e79751579fe6ecd91176225ea99d1996d50ff576e57e67acaeef76c6e48aa07accb9b1599b14778e2a1bf1d115b39cc2c4b6f8856da07045171a6834d9c3c055aa2d9cb709a77629dd97cc37346a5274a8a5d899eab32fc6b5716ec51578dec1ba55c5a1b53aae541d59c5f7d64cf87d1191fb309596e33415f702069df198cf95bf449d48ec40fac77d35395e70c46d97b51b02f3a123883de2eaeab8c8ff4b7017cf3c82ae768edbbe2f389bcf3cff35430872d15cbc080fee38378f5c78e36c1a95826bb80d1baaf9b333b3912fc5c41b12574faca3035ca5b3a341b84d36caf4af08335b1dd739c6a7f0824cdb7c42e484446d85144dca72ee9ca0f9f85fa4980f6cc4fec7a86d9ac08721369639d36542729ccc173b04a1614e8bd0aa0ad2426de0e0bc79f578c84b1ae4ea78cc68bef21ad8f276f7a46a51041aa6910627b7f8d5d3abdfff2388637519492f2322ffbbe786da4d1a7b7bf8d70c7854cd7e1b6e01b1e2384ca9083fa9b2022aa06b3ad14834b5f667fcf3871c03ff5749320762952b59887575f584e391cf9eb1e69e39be99d4218bd507a04393d9965015d3524ee4620e59b9d8d50e8c66b68f5a0fd456716c2964977bd46c4fb917a0739f62b7b1701871afdd1e0748839879501d44a4e5b9f68a2dd4bfe5a519e3e837b2dcacb695d45d87438bc252592766657bccdb0901fad0ff2c88e485d3621faad16b42efc4db0f8c932bc70058969fd517f47db618825f45b4a9e7ef1e4e88a8147280e048a21b2416b37a6e334d050cf7682050f78c7aa47803f76be632660a8b5b3bf73c53d773215f659612bd1e1b53ba33d83c0c0b2708a1eccf814017ba73575ace72b35e919ddaa274250f2add74915380198fe73c20cf2434537df75a1c936c5dac432182edc49ccfa0c21bff2a8dcf369c9f9f90de2a5da6522549df835543660ffdfe22a23ed4ade64e3ff6ee6d3c011328c3ca279eeb876a2871e51fb18a9020c146be5d72aab9473628316fd0f84d95a52d69b1e3bbf8e0532d3995ba8c9126b3bd07620e1d5669867a9d52b4cf4ed91d123f712d438b51a5987e35b74e8a8090d68f2e6524b4c1d29762b3443d9eaccceafec4cbbb24793b02b96a995f35c4332d58f9e85d791fe312a3bb6cc22c844cfec1d8b9f533bb6a18f9bb009b7b6ecec6404c6985434663754b8fd0c8c00c8a1e4a61bd005e8f7161b62bbf7f319fe47aa5e790c32366bb137dfce6f326e5aeb800f3ec65721e2fe16d4a557210fa0e08af883ab30fac1fe5b64c376b5fd4a3e88cd4f1de4360a7e9d3f7ff607b159bc228f45443a7d67547499a6bdc1db42a79791a794b4c02b4cc5b64ef1e1e3a60d2cc0ad051edb20b93abb668e63f8787bd39457976aa109168309305fb51d60a1a22ed94748a97923acb73545461b2b189c4a8a5a2f6edb99c4ef0a099315c32d6ea1580baaa42e1ffa8538b28bbb3e42851639bb4ddcb614537c56af5adb61e7cc71dcb143fbcf38c20fd0f7f192c4f600117de8d765c071bc58068225701e1d3424c9a0c4e5b22cf94c696099c763ecdf2c831ee58a6660d47b7d1c08d9b1c16b27528be58f52e4779aba87697b4fe2a2e4fcf80e272ee6428f07dc73bc801d2cfb46e5a99c0243bd8d56ba5699c74b380b27fa6994112297111872fa8b3ab1609eb3987f0007ec33d8d2ad79c8720c2cbcae024c5e8ed2fbba0f5394ed113bc1654bcee705b2c9240edb87037ae219df29b2f04a46aa966b03e23c59283a80aaafde249176c2c9093bd633b97f1759bf84c4b3bc7b0e071bd21b6bb635fb1d42b037c5388442daf8abc2ca1ad5a20fdfe89000725d2b3c61f59dd1c487cf9a286c40e55fc14f493b507bdb88a52e4872dabd8c4f492ea2c21da89a1a6cce956c30f3435f6fdd7a56d7950b6fc751321456f90255df3f3a1054b1521892d4ccefc58ece5b02b3ec8c18bf4706c5a851adb7e314c3793f7e7b1130ade3acbe1562316ac489fc585921f94b2aa4c88c7c2aa89aaa11603d91df7d871e7133863b4ffea38c3ecfcb65eb941da483b32d1f577c7eb9816626235eefc0d5b768101c5aa5c8e048a81fc6b2ca2941c1ffd8914af03b92f0ca03c9add955fc96a46b6d0252d4e3eb0c44f5fb3e8a98299366b35de9bdc25aabe56ff88931ede5033b39e8f4c90f3113cf7290b29fdd46f8ed82beea54ec9563d11881479da4bdc0d2cec08cedbedb931665e7c87401da3d03932e8ff3bb8658e7d2427ba030e8e956d0675c220635c86ccb69f762fea545856aeff68b12b22b09925960e1382122f4cfe36c52a3a673ff39bf49074d0d46d559e32970ccab11271758d2c80a2278ad64d37a79271092a1f17e4c192230a892ce26e02a422a5a7e04a1288b70aab2d5b0a0e4495f8fc39d36de48ee20e5d5205567d30d9916a520afe158b0167e35848846ba085438e44a9dbe09672a50f75ac301479dc707678e5245ba969cfe420cf58c91e5d52f030dc156f483bc965def93783a5d3e87fc3edc0713b175135454d75201823cc262881938db26bbb6671f57e69707056dcfe6bb2ca01624ca5834aee7fab93bf2482cf5175cdea12f9fdaa1f8837d37f576397179da04dd3a04cdae42fca495225921e10e28af59bff04306653c0fde7133cf78ad756319249052c82b27bbc3a6f4f6023e1c2b0c0dc332d4a8736cd4f0d1b0513f5d2acbd4dce10db6340ec09dea5a6267d4be40af40b1104f9106c8603f35741f26e6338f0f4e0eff2a3379b207c4d4ec4623eb47fbe4ea17a9f6af3ecf0dad8b9f9af6b3baa2102ae6a168abda81bcb890afb6ec1697224029decbdd7852c5befeb75ad70f0cccf47c0c27c36fb0b05b80e53b558ace27ae173bf7356c94ed4eee12f4f01c993f921bc68c0e53621a7024b835384073ac43c0cb13a2f895e70909a0ee23d6836a0dbf774fbd7d86998545e1d82492e97faf239db9f60611cace7d5965458afcdcf4cd7758443a7c34aff4722e7090c81b8800cf0f3107b91a6a4006946ceb3a2c0b2e4b40e240b6603b3d52aa12122311b270144127780d8749dbc0e8ccd091f3519622386817479829b36f0508d8700f8db9ef952975bc9cde1815a73a0621286c71a74c80dd0a9f6b72259b79146a2df58a3ce5a4bbaa2e35cd7e451e3ccbc8567a4dad232e08cce692dca84d991495399bb34c79c2e1ea9f709ac23f898b7aacb940ef5e7f69d101d810e7f379dd33ad2ece3672316451d8d7018fee3b4b6f1bf766bbcad29373262d0ef8da2071f1029fb4ed313ef34373204b266abcc8ba565c2503f7fd8643e07023f1e57e9994b19b767eb73bcfdc542be2e02a3198760194f8ccbd03d778cf4239efc3252e6517420bff548316734861799582c5681a2d1a3d8161c920e1f590fbbd0b7c4320b31233a900d90bd31041622cf246b11b0c7bac1699546d24d4188cf07897828a86dede27bea188b1622e809919c676b30c324f01ee4b66cab58d71c5977d1c86647c4028805055b814de8b5a3bcbdc9545b14de3daaacde83a50c98c184111643bb34f4e8ed37f382a115eb1852e96cac9486c4136c43559cf4dc14a12f099db0ba371b12e83e38907f80baff73178dc5dd098704e370650a80cb2498bd32553090296958ad8702f02c113b2b38c309cd7a40850b7b2ebbbd422d7274d01ef08e43517f27c4ab3353297cb0b00f24b8e10cdc349de67fc1b6d3957486ae869368d3d9c3e2951e11656e24729fc5c64b080ddde0a42c6ad96a7f096b1d60671bbdae82de079f7a029eba67f1f838ee640d03a51e11687728128f21996cfebb6603eaa25a21cbb2f3ba22d7dc28b75748757fe2712622ad638b5e45cf129d1e20ec3cb318009a765d10abc11deb0d1a917b4afbd326936b090e567789d6c5edd9f056a02656be82207c40b49966caa3472fa6dfbb755c67ba8eb89166789f52e2474a8dd85c6f3610361d4e4fb403419064cb2fff28e29235efb2d8374b4515f7e569ac64d3bf8653c1e1651c086479b7bcd56bfb9c383a566b1ef69515bc8116a388af0722399ad8b2c7ee516a0c87c8bc225147671e62bc50d538fbe74ee25e8acdf04358b42c9c4e26eb94573a657752df3f96700ccc5173365eb214a6e4d675035bb0f39461a10b6f327017e9ec0d8080fec15de004b90aa1f98549e2d23a7ec56b9192ce663c6ad1bd233c85851c7f52766e2a5e423fe8ddc1d30f7a9ea9bd953ed8b9588ae1eaa3f79dfc691ec0f1"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 3.37966585s ago: executing program 1 (id=767): openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80082, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r1 = epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(r1, 0x1, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3.252282957s ago: executing program 3 (id=768): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(r0, 0x0, 0x6) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/virt_wifi0/base_reachable_time_ms\x00', 0x104000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r2, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendto$auto(0x3, 0x0, 0xffee, 0xe, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x19) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2) mbind$auto(0xf000, 0x8000000000000022, 0x100000000, 0x0, 0x80000001, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) 2.779807679s ago: executing program 1 (id=769): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x3) r0 = socket(0xa, 0x2, 0x3a) io_submit$auto(0xfffffffd, 0x12d, &(0x7f0000000340)=&(0x7f0000000180)={0x1, 0xe5, 0x8a, 0x1000, 0x9, r0, 0x1000000005, 0x81, 0x1, 0x0, 0x0, 0xffffffffffffffff}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x200000, 0x0) r3 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=@bpf_attr_4={0x49c, r1, 0x3fd}, 0x5) r5 = open_tree_attr$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xfffffffa, &(0x7f0000000140)={0x4, 0xa, 0x4}, 0xfff) mmap$auto(0x10000, 0x200004, 0x4000000000e2, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x5ba0, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x2, 0x9) ioctl$auto(r4, 0x6, r1) socket(0x29, 0x2, 0x0) ioctl$auto(r2, 0x89a0, r3) unshare$auto(0x20000080) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) setsockopt$auto(r5, 0x29, 0x44, 0x0, 0x200568) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0x2, 0x5, 0x19, r5, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x5, 0xffffffff, 0x480005, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xffffffde}, 0x5c8a, 0x3, 0x4, @inferred, @integer={0x5, 0x800, 0x4}, "7a9fc199a16a2311eacf2fc7ae1dc378dc3e8090d70925450ece0bb32777702b07550d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0x200, 0x5, 0x5, @_sigsys={0x0, 0x9, 0x2}}}) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0xf}, 0x7, 0x0, 0x7, 0xe}, 0x5}, 0x1, 0x101) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) 2.175880774s ago: executing program 3 (id=770): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) (async, rerun: 32) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x202000a, 0x7, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x8001) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0x1, 0x1) r2 = getsockopt$auto(r1, 0x429, 0x6, 0xfffffffffffffffe, 0x0) (async) mlockall$auto(0x7) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) (async) mmap$auto(0x8000000000, 0x800004020009, 0xdf, 0x1a, r2, 0x3) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7) (async, rerun: 64) io_uring_setup$auto(0x9, 0x0) (rerun: 64) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) (async) write$auto(r0, 0x0, 0xfffbfdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r5) sendmsg$auto_IPVS_CMD_GET_DEST(r5, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) (async) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) acct$auto(&(0x7f0000000040)='/dev/dri/card0\x00') 1.243612937s ago: executing program 2 (id=771): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x143382, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0xfffffffa, 0x45, &(0x7f0000000180), 0x9) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, r0, 0x8000) (async) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x3, 0x100000, 0xfffffffffffffffc, 0x100000000000002, 0x0, 0x1, 0x50b301a, 0x87, 0x2c, 0x4, 0x3}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(r2, 0x5646, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) statmount$auto(&(0x7f0000000040)={0x1f, @inferred=r3, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x200, 0x0) (async) statmount$auto(&(0x7f0000000040)={0x1f, @inferred=r3, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x200, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x200000000, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(r2, 0x14, 0x1, 0x0, 0x8) (async) setsockopt$auto(r2, 0x14, 0x1, 0x0, 0x8) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) sendmsg$auto_OVS_DP_CMD_NEW(r3, 0x0, 0x4c0d0) (async) sendmsg$auto_OVS_DP_CMD_NEW(r3, 0x0, 0x4c0d0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x2401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=@batch={0x9, 0x2, 0xb2, 0x9b7, 0x100, 0xffffffffffffffff, 0x400000365}, 0x6) 1.239126915s ago: executing program 0 (id=772): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200880, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r0, 0x4, r0}, 0x10) bpf$auto(0x3, &(0x7f0000000140)=@raw_tracepoint={0x7, r1, 0x0, 0xf}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000140)) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r3 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000080)=0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x100000a, 0x0) 1.229467579s ago: executing program 1 (id=773): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b71, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x1, 0x5) get_robust_list$auto(0x0, 0x0, 0x0) setgroups$auto(0xe32, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = socketcall$auto_SYS_SOCKET(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_ADD_LINK(r1, 0x0, 0x0) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000002600)={{0x0, 0x0, 0xee00, 0x7fffffff, 0x4, 0x8b7, 0xdf}, 0x0, 0x0, 0x8b00000000000000, 0x2, 0x5, 0x86, 0x3, 0x6, 0x401, 0x6}) ioctl$auto_BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)=0xf442) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r3, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1.026781547s ago: executing program 1 (id=774): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x101080, 0x0) unshare$auto(0x40000080) r0 = clone$auto(0x7, 0x7, 0x0, 0x0, 0xfffffffc) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x131602, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x694, 0x200000000009b72, r3, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r6, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0x1d3d, 0x100000000000020, 0x5, 0x100000000000003, 0x3c2a19d5, 0x6, 0x6, 0x20000010062, 0xbc7e, 0x1, 0x600, 0x8, 0xa, 0x81]}, 0x0) prctl$auto(0xce, 0xfffffffffffffffc, r2, 0x3, 0x2) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f,\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 0s ago: executing program 3 (id=775): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0)="ccee5b7e8752852bf3", 0x9) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)="158f4a2b") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 71.410682][ T5621] cgroup: Unknown subsys name 'net' [ 71.552475][ T5621] cgroup: Unknown subsys name 'cpuset' [ 71.561719][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.015714][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.272198][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.312058][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.320278][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.330991][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.331419][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.342293][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.347712][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.353661][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.361599][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.368622][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.374787][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.383070][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.390804][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.397278][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.402446][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.412903][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.419195][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.426802][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.438594][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.449983][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.943889][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.951150][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.958475][ T5633] bridge_slave_0: entered allmulticast mode [ 76.966847][ T5633] bridge_slave_0: entered promiscuous mode [ 76.985452][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.992687][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.000555][ T5634] bridge_slave_0: entered allmulticast mode [ 77.008117][ T5634] bridge_slave_0: entered promiscuous mode [ 77.024472][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.031717][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.038872][ T5633] bridge_slave_1: entered allmulticast mode [ 77.046126][ T5633] bridge_slave_1: entered promiscuous mode [ 77.061950][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.069127][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.076252][ T5634] bridge_slave_1: entered allmulticast mode [ 77.083647][ T5634] bridge_slave_1: entered promiscuous mode [ 77.168797][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.190794][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.210063][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.230342][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.258070][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.265470][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.273074][ T5635] bridge_slave_0: entered allmulticast mode [ 77.280169][ T5635] bridge_slave_0: entered promiscuous mode [ 77.315632][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.322993][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.330608][ T5635] bridge_slave_1: entered allmulticast mode [ 77.337726][ T5635] bridge_slave_1: entered promiscuous mode [ 77.352900][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.360189][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.367344][ T5632] bridge_slave_0: entered allmulticast mode [ 77.374687][ T5632] bridge_slave_0: entered promiscuous mode [ 77.383891][ T5634] team0: Port device team_slave_0 added [ 77.400759][ T5633] team0: Port device team_slave_0 added [ 77.406540][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.413825][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.421353][ T5632] bridge_slave_1: entered allmulticast mode [ 77.428351][ T5632] bridge_slave_1: entered promiscuous mode [ 77.437553][ T5634] team0: Port device team_slave_1 added [ 77.464200][ T5633] team0: Port device team_slave_1 added [ 77.489587][ T5641] Bluetooth: hci3: command tx timeout [ 77.489587][ T5644] Bluetooth: hci1: command tx timeout [ 77.489838][ T5644] Bluetooth: hci0: command tx timeout [ 77.496361][ T5641] Bluetooth: hci2: command tx timeout [ 77.509517][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.542920][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.550120][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.576585][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.591489][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.613894][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.628807][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.635872][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.662079][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.682147][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.689593][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.715681][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.730528][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.759679][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.766758][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.792725][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.820345][ T5635] team0: Port device team_slave_0 added [ 77.846630][ T5635] team0: Port device team_slave_1 added [ 77.865349][ T5632] team0: Port device team_slave_0 added [ 77.906240][ T5632] team0: Port device team_slave_1 added [ 77.922660][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.929762][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.955799][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.973278][ T5634] hsr_slave_0: entered promiscuous mode [ 77.979917][ T5634] hsr_slave_1: entered promiscuous mode [ 78.006500][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.013598][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.039547][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.075884][ T5633] hsr_slave_0: entered promiscuous mode [ 78.082337][ T5633] hsr_slave_1: entered promiscuous mode [ 78.088373][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 78.094260][ T5633] Cannot create hsr debugfs directory [ 78.113991][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.121166][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.147140][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.181777][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.188759][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.214827][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.301180][ T5635] hsr_slave_0: entered promiscuous mode [ 78.307469][ T5635] hsr_slave_1: entered promiscuous mode [ 78.313777][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 78.319830][ T5635] Cannot create hsr debugfs directory [ 78.419989][ T5632] hsr_slave_0: entered promiscuous mode [ 78.426325][ T5632] hsr_slave_1: entered promiscuous mode [ 78.432910][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 78.438665][ T5632] Cannot create hsr debugfs directory [ 78.776366][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.790225][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.798793][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.809953][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.817973][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.827524][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.836864][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.846867][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.925862][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.939980][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.947863][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.960614][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.973386][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.983180][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.991455][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.001035][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.102415][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.112743][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.126405][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.137681][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.145801][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.156068][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.164454][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.175029][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.277092][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.304008][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.314239][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.322624][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.334978][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.351477][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.361439][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.371768][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.383552][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.394078][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.415913][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.423627][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.465001][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.472154][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.569589][ T5641] Bluetooth: hci2: command tx timeout [ 79.569976][ T50] Bluetooth: hci3: command tx timeout [ 79.575052][ T5641] Bluetooth: hci1: command tx timeout [ 79.580840][ T5644] Bluetooth: hci0: command tx timeout [ 79.598623][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.664177][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.681627][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.688752][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.700383][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.713841][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.721594][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.789539][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.813147][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.845378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.852655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.873385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.880625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.930312][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.951948][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.995754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.002973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.032148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.039377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.722486][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.867566][ T5634] veth0_vlan: entered promiscuous mode [ 80.915025][ T5634] veth1_vlan: entered promiscuous mode [ 80.962178][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.014278][ T5634] veth0_macvtap: entered promiscuous mode [ 81.043533][ T5634] veth1_macvtap: entered promiscuous mode [ 81.123814][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.156593][ T5633] veth0_vlan: entered promiscuous mode [ 81.168839][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.210714][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.226046][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.243360][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.253861][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.264300][ T5633] veth1_vlan: entered promiscuous mode [ 81.273292][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.296002][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.446412][ T5633] veth0_macvtap: entered promiscuous mode [ 81.464146][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.479809][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.482258][ T5632] veth0_vlan: entered promiscuous mode [ 81.500969][ T5633] veth1_macvtap: entered promiscuous mode [ 81.534846][ T5635] veth0_vlan: entered promiscuous mode [ 81.556129][ T5632] veth1_vlan: entered promiscuous mode [ 81.573896][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.581327][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.583569][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.590709][ T5635] veth1_vlan: entered promiscuous mode [ 81.624273][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.649786][ T5644] Bluetooth: hci0: command tx timeout [ 81.655794][ T5644] Bluetooth: hci1: command tx timeout [ 81.659064][ T5641] Bluetooth: hci3: command tx timeout [ 81.661763][ T50] Bluetooth: hci2: command tx timeout [ 81.680211][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.709607][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.710146][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.737226][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.762200][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.813388][ T5632] veth0_macvtap: entered promiscuous mode [ 81.901661][ T5632] veth1_macvtap: entered promiscuous mode [ 81.951604][ T5635] veth0_macvtap: entered promiscuous mode [ 81.995272][ T5635] veth1_macvtap: entered promiscuous mode [ 82.043807][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.118863][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.141546][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.155327][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.161180][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.202375][ T1028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221716][ T1028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.244435][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.294166][ T1028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.306760][ T1028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.351579][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.368798][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.399643][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.443732][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.471188][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.508192][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.659725][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.686336][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.804011][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.819207][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.867630][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.897323][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.972034][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.972073][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.714393][ T5806] netlink: 326 bytes leftover after parsing attributes in process `syz.0.5'. [ 83.729384][ T50] Bluetooth: hci2: command tx timeout [ 83.733534][ T5644] Bluetooth: hci1: command tx timeout [ 83.736026][ T5641] Bluetooth: hci0: command tx timeout [ 83.740311][ T5637] Bluetooth: hci3: command tx timeout [ 83.776239][ T5806] Zero length message leads to an empty skb [ 83.873684][ T1760] cfg80211: failed to load regulatory.db [ 84.273200][ T5809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 84.422156][ T5816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 84.473743][ T5813] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 84.484894][ T5817] ICMPv6: process `syz.1.7' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 84.493467][ T5813] pci 0000:00:01.3: PCI INT A: no GSI [ 85.158905][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.181778][ T5808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.223754][ T5808] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.242231][ T5808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.262957][ T5808] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.308688][ T5808] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.337699][ T5808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.345265][ T5808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.368744][ T5808] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.390679][ T5808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.418002][ T5808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.444459][ T5808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.369980][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.228962][ T5862] ======================================================= [ 87.228962][ T5862] WARNING: The mand mount option has been deprecated and [ 87.228962][ T5862] and is ignored by this kernel. Remove the mand [ 87.228962][ T5862] option from the mount to silence this warning. [ 87.228962][ T5862] ======================================================= [ 87.250737][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.411335][ T5641] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.411344][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.985652][ T5872] FAULT_INJECTION: forcing a failure. [ 87.985652][ T5872] name failslab, interval 1, probability 0, space 0, times 1 [ 88.014167][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 88.014207][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.014233][ T5872] Call Trace: [ 88.014243][ T5872] [ 88.014254][ T5872] dump_stack_lvl+0x100/0x190 [ 88.014315][ T5872] should_fail_ex.cold+0x5/0xa [ 88.014351][ T5872] should_failslab+0xc2/0x120 [ 88.014386][ T5872] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 88.014429][ T5872] ? __kernfs_new_node+0xd2/0x9f0 [ 88.014477][ T5872] __kernfs_new_node+0xd2/0x9f0 [ 88.014514][ T5872] ? __pfx___kernfs_new_node+0x10/0x10 [ 88.014554][ T5872] ? find_held_lock+0x2b/0x80 [ 88.014588][ T5872] ? kernfs_root+0xee/0x2a0 [ 88.014616][ T5872] ? kernfs_root+0xee/0x2a0 [ 88.014653][ T5872] kernfs_new_node+0x11b/0x1a0 [ 88.014694][ T5872] __kernfs_create_file+0x53/0x350 [ 88.014735][ T5872] sysfs_add_file_mode_ns+0x207/0x3c0 [ 88.014771][ T5872] sysfs_create_file_ns+0x145/0x1e0 [ 88.014799][ T5872] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 88.014826][ T5872] ? __pfx___up_read+0x10/0x10 [ 88.014852][ T5872] ? acpi_device_notify+0x464/0x500 [ 88.014890][ T5872] ? kobject_put+0xb9/0x640 [ 88.014919][ T5872] device_create_file+0xf2/0x1d0 [ 88.014958][ T5872] device_add+0x2cb/0x1950 [ 88.014988][ T5872] ? __pfx_dev_set_name+0x10/0x10 [ 88.015020][ T5872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.015060][ T5872] ? __pfx_device_add+0x10/0x10 [ 88.015091][ T5872] ? lockdep_init_map_type+0x5c/0x250 [ 88.015134][ T5872] ? __init_waitqueue_head+0xca/0x150 [ 88.015175][ T5872] netdev_register_kobject+0x1a9/0x3d0 [ 88.015219][ T5872] register_netdevice+0x151c/0x24b0 [ 88.015261][ T5872] ? __pfx_register_netdevice+0x10/0x10 [ 88.015284][ T5872] ? net_generic+0xea/0x2a0 [ 88.015319][ T5872] ppp_dev_configure+0x986/0xcb0 [ 88.015352][ T5872] ppp_ioctl+0x9d7/0x27c0 [ 88.015382][ T5872] ? find_held_lock+0x2b/0x80 [ 88.015417][ T5872] ? __pfx_ppp_ioctl+0x10/0x10 [ 88.015452][ T5872] ? __fget_files+0x21f/0x3d0 [ 88.015497][ T5872] ? __pfx_ppp_ioctl+0x10/0x10 [ 88.015527][ T5872] __x64_sys_ioctl+0x18e/0x210 [ 88.015557][ T5872] do_syscall_64+0x115/0x840 [ 88.015595][ T5872] ? clear_bhb_loop+0x40/0x90 [ 88.015630][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.015659][ T5872] RIP: 0033:0x7f1709f9ce59 [ 88.015683][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.015709][ T5872] RSP: 002b:00007f170ad74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.015744][ T5872] RAX: ffffffffffffffda RBX: 00007f170a216180 RCX: 00007f1709f9ce59 [ 88.015764][ T5872] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000004 [ 88.015780][ T5872] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 88.015797][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.015814][ T5872] R13: 00007f170a216218 R14: 00007f170a216180 R15: 00007ffefaef0958 [ 88.015853][ T5872] [ 88.317737][ T5884] random: crng reseeded on system resumption [ 88.451293][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.517030][ T5873] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.607281][ T5883] hub 1-0:1.0: USB hub found [ 88.617030][ T5883] hub 1-0:1.0: 1 port detected [ 88.634345][ T5873] netlink: 'syz.1.19': attribute type 2 has an invalid length. [ 89.330256][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.489038][ T5641] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.492656][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.715545][ T5894] ubi31: attaching mtd0 [ 89.752058][ T5894] ubi31: scanning is finished [ 89.752091][ T5894] ubi31: empty MTD device detected [ 90.529123][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.714091][ T5894] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 90.714130][ T5894] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 90.714155][ T5894] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 90.714178][ T5894] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 90.714202][ T5894] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 90.714223][ T5894] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 90.714245][ T5894] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1296752810 [ 90.714272][ T5894] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 90.722555][ T5912] ubi31: background thread "ubi_bgt31d" started, PID 5912 [ 90.785541][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 91.409118][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.569035][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.569351][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.628499][ T5901] Process accounting resumed [ 92.054401][ T5925] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 95.607675][ T5940] syz.3.33 (5940) used greatest stack depth: 18344 bytes left [ 95.647488][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.167980][ T5977] process 'syz.1.41' launched '/dev/fd/5' with NULL argv: empty string added [ 96.475828][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 96.758212][ T5990] hub 1-0:1.0: USB hub found [ 96.764408][ T5990] hub 1-0:1.0: 1 port detected [ 97.975588][ T6012] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.044587][ T6020] mmap: syz.3.51 (6020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.401048][ T6026] FAULT_INJECTION: forcing a failure. [ 98.401048][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 98.414524][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 98.414563][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.414580][ T6026] Call Trace: [ 98.414590][ T6026] [ 98.414601][ T6026] dump_stack_lvl+0x100/0x190 [ 98.414656][ T6026] should_fail_ex.cold+0x5/0xa [ 98.414704][ T6026] should_failslab+0xc2/0x120 [ 98.414740][ T6026] __kmalloc_cache_noprof+0x7a/0x6f0 [ 98.414775][ T6026] ? drm_atomic_state_alloc+0xb8/0x120 [ 98.414813][ T6026] drm_atomic_state_alloc+0xb8/0x120 [ 98.414846][ T6026] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 98.414884][ T6026] ? rcu_is_watching+0x12/0xc0 [ 98.414914][ T6026] ? trace_contention_end+0x122/0x170 [ 98.414941][ T6026] ? __mutex_lock+0x26d/0x1b10 [ 98.414981][ T6026] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 98.415040][ T6026] ? drm_master_internal_acquire+0x21/0x80 [ 98.415112][ T6026] drm_client_modeset_commit_locked+0x14d/0x580 [ 98.415153][ T6026] drm_client_modeset_commit+0x4f/0x80 [ 98.415194][ T6026] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 98.415237][ T6026] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 98.415275][ T6026] drm_fbdev_client_restore+0x1b/0x30 [ 98.415306][ T6026] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 98.415335][ T6026] drm_client_dev_restore+0x205/0x2a0 [ 98.415373][ T6026] drm_release+0x2c6/0x360 [ 98.415404][ T6026] ? __pfx_drm_release+0x10/0x10 [ 98.415432][ T6026] __fput+0x3ff/0xb50 [ 98.415475][ T6026] task_work_run+0x150/0x240 [ 98.415504][ T6026] ? __pfx_task_work_run+0x10/0x10 [ 98.415532][ T6026] ? rcu_is_watching+0x12/0xc0 [ 98.415568][ T6026] exit_to_user_mode_loop+0x157/0x670 [ 98.415615][ T6026] ? rcu_is_watching+0x12/0xc0 [ 98.415652][ T6026] do_syscall_64+0x652/0x840 [ 98.415705][ T6026] ? clear_bhb_loop+0x40/0x90 [ 98.415740][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.415770][ T6026] RIP: 0033:0x7f1709f9ce59 [ 98.415793][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.415819][ T6026] RSP: 002b:00007f170adb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 98.415845][ T6026] RAX: 0000000000000000 RBX: 00007f170a215fa0 RCX: 00007f1709f9ce59 [ 98.415862][ T6026] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 98.415876][ T6026] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 98.415890][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.415904][ T6026] R13: 00007f170a216038 R14: 00007f170a215fa0 R15: 00007ffefaef0958 [ 98.415939][ T6026] [ 98.821918][ T6023] netlink: 330 bytes leftover after parsing attributes in process `syz.1.52'. [ 99.089336][ T6031] netlink: 330 bytes leftover after parsing attributes in process `syz.3.55'. [ 100.116880][ T6061] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.558230][ T6092] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 101.994392][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 102.035666][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.047728][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.068893][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.177560][ T6106] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 102.177560][ T6106] The task syz.2.71 (6106) triggered the difference, watch for misbehavior. [ 102.644889][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 102.701775][ T6120] bridge0: entered promiscuous mode [ 102.724224][ T6120] bridge0: entered allmulticast mode [ 106.106566][ T6173] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.185030][ T6177] tipc: Started in network mode [ 106.216607][ T6177] tipc: Node identity ee00, cluster identity 4711 [ 106.254000][ T6177] tipc: Node number set to 60928 [ 106.406212][ T6177] futex_wake_op: syz.3.84 tries to shift op by -2048; fix this program [ 106.425743][ T6177] futex_wake_op: syz.3.84 tries to shift op by -2048; fix this program [ 106.731831][ T6173] 0x000000000001-0x000000020000 : "" [ 106.838021][ T6173] ftl_cs: FTL header corrupt! [ 107.600551][ T6199] netlink: 342 bytes leftover after parsing attributes in process `syz.1.89'. [ 107.740903][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 107.785109][ T6201] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 111.102968][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 111.103013][ T6255] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 111.304756][ T6262] tipc: Started in network mode [ 111.346764][ T6262] tipc: Node identity ee00, cluster identity 4711 [ 111.394278][ T6262] tipc: Node number set to 60928 [ 111.547961][ T6262] futex_wake_op: syz.1.104 tries to shift op by -2048; fix this program [ 111.580745][ T6262] futex_wake_op: syz.1.104 tries to shift op by -2048; fix this program [ 112.899316][ T6268] Process accounting resumed [ 117.440651][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.130'. [ 119.407597][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 119.772551][ T6444] zswap: compressor 000 not available [ 120.844004][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 120.924827][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 121.705105][ T6484] Process accounting paused [ 122.546125][ T6511] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 122.600546][ T6511] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 123.661095][ T30] audit: type=1800 audit(1781249825.661:2): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="lu_gp_id" dev="configfs" ino=11835 res=0 errno=0 [ 123.717905][ T6527] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 124.235353][ T6539] NFSD: Failed to start, no listeners configured. [ 125.185912][ T6554] netlink: 280 bytes leftover after parsing attributes in process `syz.2.164'. [ 125.252173][ T6556] netlink: 280 bytes leftover after parsing attributes in process `syz.2.164'. [ 126.203637][ T6567] FAULT_INJECTION: forcing a failure. [ 126.203637][ T6567] name fail_futex, interval 1, probability 0, space 0, times 1 [ 126.262776][ T6567] CPU: 1 UID: 0 PID: 6567 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(full) [ 126.262796][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.262805][ T6567] Call Trace: [ 126.262810][ T6567] [ 126.262816][ T6567] dump_stack_lvl+0x100/0x190 [ 126.262851][ T6567] should_fail_ex.cold+0x5/0xa [ 126.262869][ T6567] get_futex_key+0xf78/0x1510 [ 126.262894][ T6567] ? __pfx_get_futex_key+0x10/0x10 [ 126.262914][ T6567] ? lock_acquire+0x1b1/0x370 [ 126.262940][ T6567] futex_wake+0xea/0x530 [ 126.262958][ T6567] ? __pfx_futex_wake+0x10/0x10 [ 126.262975][ T6567] ? exit_mm_release+0x19/0x30 [ 126.262999][ T6567] do_futex+0x32b/0x350 [ 126.263013][ T6567] ? __pfx_do_futex+0x10/0x10 [ 126.263026][ T6567] ? __might_fault+0xc5/0x140 [ 126.263051][ T6567] mm_release+0x24a/0x2f0 [ 126.263076][ T6567] do_exit+0x707/0x2af0 [ 126.263099][ T6567] ? __pfx_do_exit+0x10/0x10 [ 126.263118][ T6567] ? do_raw_spin_lock+0x128/0x260 [ 126.263132][ T6567] ? find_held_lock+0x2b/0x80 [ 126.263148][ T6567] ? get_signal+0x7e5/0x2210 [ 126.263167][ T6567] do_group_exit+0xd5/0x2a0 [ 126.263187][ T6567] get_signal+0x20ff/0x2210 [ 126.263210][ T6567] ? __pfx_get_signal+0x10/0x10 [ 126.263228][ T6567] ? do_futex+0x192/0x350 [ 126.263243][ T6567] arch_do_signal_or_restart+0x91/0x7a0 [ 126.263264][ T6567] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 126.263290][ T6567] ? rcu_is_watching+0x12/0xc0 [ 126.263307][ T6567] exit_to_user_mode_loop+0x98/0x670 [ 126.263330][ T6567] ? rcu_is_watching+0x12/0xc0 [ 126.263348][ T6567] do_syscall_64+0x652/0x840 [ 126.263367][ T6567] ? clear_bhb_loop+0x40/0x90 [ 126.263383][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.263397][ T6567] RIP: 0033:0x7f429dd9ce59 [ 126.263413][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.263430][ T6567] RSP: 002b:00007f429ecbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.263447][ T6567] RAX: fffffffffffffe00 RBX: 00007f429e016098 RCX: 00007f429dd9ce59 [ 126.263456][ T6567] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f429e016098 [ 126.263464][ T6567] RBP: 00007f429e016090 R08: 0000000000000000 R09: 0000000000000000 [ 126.263472][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.263480][ T6567] R13: 00007f429e016128 R14: 00007ffe08587310 R15: 00007ffe085873f8 [ 126.263498][ T6567] [ 127.311326][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 129.124079][ T6652] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 129.507258][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 129.862421][ T6659] HfR: entered promiscuous mode [ 129.901484][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 130.974994][ T6691] Console: switching to colour VGA+ 80x25 [ 131.200365][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 131.220102][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 131.299299][ T6701] veth1_macvtap: left promiscuous mode [ 131.315259][ T6701] macsec0: entered promiscuous mode [ 131.323584][ T6701] macsec0: entered allmulticast mode [ 131.911386][ T6710] capability: warning: `syz.0.198' uses 32-bit capabilities (legacy support in use) [ 132.656335][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 132.864127][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.876639][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.959493][ T6790] FAULT_INJECTION: forcing a failure. [ 135.959493][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 136.006358][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.2.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.006400][ T6790] Tainted: [L]=SOFTLOCKUP [ 136.006409][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.006423][ T6790] Call Trace: [ 136.006432][ T6790] [ 136.006442][ T6790] dump_stack_lvl+0x100/0x190 [ 136.006490][ T6790] should_fail_ex.cold+0x5/0xa [ 136.006523][ T6790] should_failslab+0xc2/0x120 [ 136.006554][ T6790] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 136.006594][ T6790] ? security_file_alloc+0x34/0x2c0 [ 136.006627][ T6790] ? trace_kmem_cache_alloc+0xd5/0x100 [ 136.006663][ T6790] security_file_alloc+0x34/0x2c0 [ 136.006697][ T6790] init_file+0x95/0x480 [ 136.006733][ T6790] alloc_empty_file+0x79/0x1c0 [ 136.006771][ T6790] alloc_file_pseudo+0x13a/0x230 [ 136.006811][ T6790] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 136.006848][ T6790] ? alloc_fd+0x476/0x790 [ 136.006885][ T6790] sock_alloc_file+0x50/0x210 [ 136.006916][ T6790] __sys_socket+0x1c0/0x260 [ 136.006951][ T6790] ? __pfx___sys_socket+0x10/0x10 [ 136.006992][ T6790] ? ksys_write+0x1ac/0x250 [ 136.007030][ T6790] __x64_sys_socket+0x72/0xb0 [ 136.007064][ T6790] ? lockdep_hardirqs_on+0x78/0x100 [ 136.007100][ T6790] do_syscall_64+0x115/0x840 [ 136.007134][ T6790] ? clear_bhb_loop+0x40/0x90 [ 136.007166][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.007192][ T6790] RIP: 0033:0x7f1709f9ce59 [ 136.007213][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.007237][ T6790] RSP: 002b:00007f170ad95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 136.007261][ T6790] RAX: ffffffffffffffda RBX: 00007f170a216090 RCX: 00007f1709f9ce59 [ 136.007278][ T6790] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 136.007292][ T6790] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.007307][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.007322][ T6790] R13: 00007f170a216128 R14: 00007f170a216090 R15: 00007ffefaef0958 [ 136.007357][ T6790] [ 137.882720][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.223'. [ 138.511749][ T6834] netlink: 350 bytes leftover after parsing attributes in process `syz.2.227'. [ 140.640191][ T6865] FAULT_INJECTION: forcing a failure. [ 140.640191][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 140.674099][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.674137][ T6865] Tainted: [L]=SOFTLOCKUP [ 140.674145][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.674158][ T6865] Call Trace: [ 140.674166][ T6865] [ 140.674174][ T6865] dump_stack_lvl+0x100/0x190 [ 140.674218][ T6865] should_fail_ex.cold+0x5/0xa [ 140.674246][ T6865] should_failslab+0xc2/0x120 [ 140.674270][ T6865] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 140.674305][ T6865] ? __d_alloc+0x34/0xa40 [ 140.674340][ T6865] __d_alloc+0x34/0xa40 [ 140.674375][ T6865] d_alloc+0x4a/0x1e0 [ 140.674407][ T6865] lookup_one_qstr_excl+0x171/0x250 [ 140.674444][ T6865] start_dirop+0x59/0xb0 [ 140.674472][ T6865] simple_start_creating+0xf9/0x110 [ 140.674499][ T6865] ? __pfx_simple_start_creating+0x10/0x10 [ 140.674525][ T6865] ? dput.part.0+0xdd/0x570 [ 140.674556][ T6865] rpc_new_dir+0x27/0x420 [ 140.674583][ T6865] rpc_populate.constprop.0+0x125/0x1c0 [ 140.674610][ T6865] ? d_instantiate+0x8f/0xb0 [ 140.674640][ T6865] ? __pfx_rpc_fill_super+0x10/0x10 [ 140.674681][ T6865] rpc_fill_super+0x2b9/0x4f0 [ 140.674711][ T6865] ? __pfx_rpc_fill_super+0x10/0x10 [ 140.674738][ T6865] get_tree_keyed+0x10e/0x1d0 [ 140.674768][ T6865] vfs_get_tree+0x92/0x320 [ 140.674790][ T6865] vfs_cmd_create+0xd7/0x2a0 [ 140.674823][ T6865] __do_sys_fsconfig+0x55a/0xcb0 [ 140.674859][ T6865] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 140.674893][ T6865] ? xfd_validate_state+0x129/0x190 [ 140.674923][ T6865] ? rcu_is_watching+0x12/0xc0 [ 140.674953][ T6865] do_syscall_64+0x115/0x840 [ 140.674985][ T6865] ? clear_bhb_loop+0x40/0x90 [ 140.675015][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.675039][ T6865] RIP: 0033:0x7f429dd9ce59 [ 140.675060][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.675082][ T6865] RSP: 002b:00007f429ece0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 140.675105][ T6865] RAX: ffffffffffffffda RBX: 00007f429e015fa0 RCX: 00007f429dd9ce59 [ 140.675123][ T6865] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 140.675136][ T6865] RBP: 00007f429de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 140.675149][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.675162][ T6865] R13: 00007f429e016038 R14: 00007f429e015fa0 R15: 00007ffe085873f8 [ 140.675197][ T6865] [ 140.677078][ T6865] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 143.428317][ T6872] Process accounting paused [ 143.507953][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 143.809021][ T30] audit: type=1800 audit(1781249845.811:3): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.253" name=22050820 dev="tmpfs" ino=354 res=0 errno=0 [ 144.169555][ T6962] random: crng reseeded on system resumption [ 144.207717][ T6962] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 144.207717][ T6962] M' is too long [ 144.218618][ T6962] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 144.218618][ T6962] W ' is too long [ 144.411105][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 145.790281][ T6992] zswap: compressor not available [ 145.850394][ T30] audit: type=1800 audit(1781249847.861:4): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.264" name="dbroot" dev="configfs" ino=14135 res=0 errno=0 [ 147.820193][ T7044] netlink: 350 bytes leftover after parsing attributes in process `syz.3.273'. [ 148.158622][ T7051] FAULT_INJECTION: forcing a failure. [ 148.158622][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 148.182556][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.2.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.182604][ T7051] Tainted: [L]=SOFTLOCKUP [ 148.182614][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.182631][ T7051] Call Trace: [ 148.182640][ T7051] [ 148.182651][ T7051] dump_stack_lvl+0x100/0x190 [ 148.182710][ T7051] should_fail_ex.cold+0x5/0xa [ 148.182747][ T7051] should_failslab+0xc2/0x120 [ 148.182782][ T7051] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 148.182829][ T7051] ? __d_alloc+0x34/0xa40 [ 148.182871][ T7051] __d_alloc+0x34/0xa40 [ 148.182914][ T7051] d_alloc+0x4a/0x1e0 [ 148.182954][ T7051] lookup_one_qstr_excl+0x171/0x250 [ 148.183002][ T7051] start_dirop+0x59/0xb0 [ 148.183036][ T7051] simple_start_creating+0xf9/0x110 [ 148.183071][ T7051] ? __pfx_simple_start_creating+0x10/0x10 [ 148.183106][ T7051] ? mntput+0x70/0xa0 [ 148.183136][ T7051] ? simple_pin_fs+0xa3/0x190 [ 148.183168][ T7051] debugfs_start_creating.part.0+0x82/0x170 [ 148.183201][ T7051] __debugfs_create_file+0xb3/0x4f0 [ 148.183236][ T7051] debugfs_create_file_full+0x41/0x60 [ 148.183271][ T7051] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 148.183300][ T7051] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 148.183327][ T7051] ? ida_alloc_range+0x70d/0x830 [ 148.183412][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 148.183466][ T7051] preinit_net.part.0+0x252/0x920 [ 148.183502][ T7051] copy_net_ns+0x339/0x7c0 [ 148.183540][ T7051] create_new_namespaces+0x3ea/0xac0 [ 148.183587][ T7051] unshare_nsproxy_namespaces+0xf2/0x220 [ 148.183628][ T7051] ksys_unshare+0x438/0xab0 [ 148.183672][ T7051] ? __pfx_ksys_unshare+0x10/0x10 [ 148.183709][ T7051] ? xfd_validate_state+0x129/0x190 [ 148.183733][ T7051] ? ksys_write+0x1ac/0x250 [ 148.183774][ T7051] __x64_sys_unshare+0x31/0x40 [ 148.183808][ T7051] do_syscall_64+0x115/0x840 [ 148.183845][ T7051] ? clear_bhb_loop+0x40/0x90 [ 148.183878][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.183908][ T7051] RIP: 0033:0x7f1709f9ce59 [ 148.183933][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.183960][ T7051] RSP: 002b:00007f170adb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.183988][ T7051] RAX: ffffffffffffffda RBX: 00007f170a215fa0 RCX: 00007f1709f9ce59 [ 148.184007][ T7051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 148.184024][ T7051] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 148.184040][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.184056][ T7051] R13: 00007f170a216038 R14: 00007f170a215fa0 R15: 00007ffefaef0958 [ 148.184095][ T7051] [ 150.115521][ T7091] tipc: Started in network mode [ 150.120564][ T7091] tipc: Node identity ee00, cluster identity 4711 [ 150.128432][ T7091] tipc: Node number set to 60928 [ 150.373064][ T50] Bluetooth: hci3: Malformed Event: 0x13 [ 151.419185][ T7125] random: crng reseeded on system resumption [ 152.581343][ T30] audit: type=1400 audit(1781249854.581:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7161 comm="syz.0.296" [ 152.686988][ T7151] Process accounting resumed [ 152.726624][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.296'. [ 152.781103][ T7163] FAULT_INJECTION: forcing a failure. [ 152.781103][ T7163] name fail_futex, interval 1, probability 0, space 0, times 0 [ 152.803528][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.0.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.803574][ T7163] Tainted: [L]=SOFTLOCKUP [ 152.803584][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.803600][ T7163] Call Trace: [ 152.803609][ T7163] [ 152.803620][ T7163] dump_stack_lvl+0x100/0x190 [ 152.803672][ T7163] should_fail_ex.cold+0x5/0xa [ 152.803701][ T7163] ? rcu_is_watching+0x12/0xc0 [ 152.803735][ T7163] get_futex_key+0x1d2/0x1510 [ 152.803783][ T7163] ? __pfx_get_futex_key+0x10/0x10 [ 152.803839][ T7163] futex_wait_setup+0x83/0x510 [ 152.803884][ T7163] __futex_wait+0x19f/0x300 [ 152.803922][ T7163] ? __pfx___futex_wait+0x10/0x10 [ 152.803963][ T7163] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.804004][ T7163] ? find_held_lock+0x2b/0x80 [ 152.804037][ T7163] ? futex_wake+0x456/0x530 [ 152.804079][ T7163] futex_wait+0xe6/0x370 [ 152.804111][ T7163] ? __pfx_futex_wait+0x10/0x10 [ 152.804163][ T7163] ? proc_id_connector+0x2ed/0x650 [ 152.804200][ T7163] do_futex+0x1ef/0x350 [ 152.804227][ T7163] ? __pfx_do_futex+0x10/0x10 [ 152.804254][ T7163] ? find_held_lock+0x2b/0x80 [ 152.804286][ T7163] ? setid_policy_lookup+0x10c/0x350 [ 152.804331][ T7163] __x64_sys_futex+0x34f/0x4d0 [ 152.804364][ T7163] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.804400][ T7163] ? rcu_is_watching+0x12/0xc0 [ 152.804436][ T7163] do_syscall_64+0x115/0x840 [ 152.804473][ T7163] ? clear_bhb_loop+0x40/0x90 [ 152.804506][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.804533][ T7163] RIP: 0033:0x7f429dd9ce59 [ 152.804559][ T7163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.804585][ T7163] RSP: 002b:00007f429ecbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.804612][ T7163] RAX: ffffffffffffffda RBX: 00007f429e016098 RCX: 00007f429dd9ce59 [ 152.804631][ T7163] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f429e016098 [ 152.804647][ T7163] RBP: 00007f429e016090 R08: 0000000000000000 R09: 0000000000000000 [ 152.804663][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.804679][ T7163] R13: 00007f429e016128 R14: 00007ffe08587310 R15: 00007ffe085873f8 [ 152.804714][ T7163] [ 153.073714][ T7165] bridge0: entered promiscuous mode [ 153.082453][ T7165] bridge0: entered allmulticast mode [ 153.533445][ T7172] futex_wake_op: syz.2.298 tries to shift op by -2048; fix this program [ 153.546076][ T7172] futex_wake_op: syz.2.298 tries to shift op by -2048; fix this program [ 153.569538][ T7172] 0x000000000001-0x000000020000 : "" [ 153.731355][ T7172] ftl_cs: FTL header corrupt! [ 154.977987][ T7196] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 156.811824][ T7232] netlink: 'syz.2.309': attribute type 4 has an invalid length. [ 156.896161][ T7226] zswap: compressor 000 not available [ 160.600746][ T7303] ubi: mtd0 is already attached to ubi31 [ 164.877923][ T7432] program syz.3.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.178382][ T7442] netlink: 186 bytes leftover after parsing attributes in process `syz.2.355'. [ 165.193717][ T7442] netlink: 186 bytes leftover after parsing attributes in process `syz.2.355'. [ 165.983104][ T7462] tc_dump_action: action bad kind [ 166.173426][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 166.392216][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 167.702135][ T30] audit: type=1800 audit(1781249869.711:6): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.367" name="version" dev="configfs" ino=17406 res=0 errno=0 [ 168.634261][ T7510] kernel read not supported for file /sg0 (pid: 7510 comm: syz.0.369) [ 169.446832][ T7540] random: crng reseeded on system resumption [ 169.669918][ T50] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 170.168957][ T7559] netlink: 'syz.1.380': attribute type 11 has an invalid length. [ 170.284770][ T7560] netlink: 'syz.1.380': attribute type 11 has an invalid length. [ 172.556794][ T7590] FAULT_INJECTION: forcing a failure. [ 172.556794][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 172.637931][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.2.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.637976][ T7590] Tainted: [L]=SOFTLOCKUP [ 172.637985][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.638001][ T7590] Call Trace: [ 172.638010][ T7590] [ 172.638020][ T7590] dump_stack_lvl+0x100/0x190 [ 172.638072][ T7590] should_fail_ex.cold+0x5/0xa [ 172.638108][ T7590] should_failslab+0xc2/0x120 [ 172.638142][ T7590] __kmalloc_cache_noprof+0x7a/0x6f0 [ 172.638178][ T7590] ? single_open+0x4d/0x1d0 [ 172.638202][ T7590] ? __pfx___debugfs_file_get+0x10/0x10 [ 172.638243][ T7590] ? __pfx_edid_show+0x10/0x10 [ 172.638275][ T7590] ? __pfx_edid_open+0x10/0x10 [ 172.638301][ T7590] single_open+0x4d/0x1d0 [ 172.638328][ T7590] full_proxy_open_regular+0x1b6/0x370 [ 172.638373][ T7590] do_dentry_open+0x6ab/0x14d0 [ 172.638405][ T7590] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 172.638455][ T7590] vfs_open+0x82/0x3f0 [ 172.638500][ T7590] path_openat+0x208c/0x31a0 [ 172.638546][ T7590] ? __pfx_path_openat+0x10/0x10 [ 172.638641][ T7590] do_file_open+0x20e/0x430 [ 172.638679][ T7590] ? __pfx_do_file_open+0x10/0x10 [ 172.638743][ T7590] ? alloc_fd+0x476/0x790 [ 172.638782][ T7590] ? do_getname+0x191/0x390 [ 172.638827][ T7590] do_sys_openat2+0x10d/0x1e0 [ 172.638873][ T7590] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.638916][ T7590] ? __fget_files+0x21f/0x3d0 [ 172.638958][ T7590] __x64_sys_openat+0x12d/0x210 [ 172.639003][ T7590] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.639054][ T7590] ? rcu_is_watching+0x12/0xc0 [ 172.639088][ T7590] do_syscall_64+0x115/0x840 [ 172.639126][ T7590] ? clear_bhb_loop+0x40/0x90 [ 172.639160][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.639189][ T7590] RIP: 0033:0x7f1709f9ce59 [ 172.639213][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.639240][ T7590] RSP: 002b:00007f170adb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.639267][ T7590] RAX: ffffffffffffffda RBX: 00007f170a215fa0 RCX: 00007f1709f9ce59 [ 172.639286][ T7590] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 172.639304][ T7590] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 172.639321][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.639338][ T7590] R13: 00007f170a216038 R14: 00007f170a215fa0 R15: 00007ffefaef0958 [ 172.639376][ T7590] [ 172.939274][ T7601] zswap: compressor 000 not available [ 173.690740][ T7610] Process accounting resumed [ 174.401303][ T7648] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 174.447351][ T7648] cec cec26: uevent: failed to send synthetic uevent: -22 [ 174.494962][ T7647] synth uevent: /devices/platform/vivid.0/cec26: unknown uevent action string [ 174.518026][ T7647] cec cec26: uevent: failed to send synthetic uevent: -22 [ 174.522810][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 174.537305][ T50] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 176.755592][ T7696] udc dummy_udc.0: soft-connect without a gadget driver [ 179.029791][ T7730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.058047][ T7730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.081315][ T7730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.100229][ T7730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.009210][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.089041][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.089058][ T5641] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.179055][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.606783][ T7793] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 184.076011][ T7835] ubi: mtd0 is already attached to ubi31 [ 185.411513][ T7818] Process accounting paused [ 185.677561][ T7871] block nbd0: Unsupported socket: should be TCP or UNIX. [ 188.547359][ T7938] ubi: mtd0 is already attached to ubi31 [ 190.855062][ T7984] netlink: 334 bytes leftover after parsing attributes in process `syz.1.474'. [ 191.394211][ T7994] bond0: invalid ARP target specified [ 192.260012][ T30] audit: type=1806 audit(1781249894.261:7): xattr="." res=0 [ 193.281890][ T8025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.310990][ T8025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.331205][ T8025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.358142][ T8025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.843867][ T8066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.993474][ T8070] sctp: [Deprecated]: syz.3.493 (pid 8070) Use of int in maxseg socket option. [ 193.993474][ T8070] Use struct sctp_assoc_value instead [ 194.294033][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300907][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524143][ T8083] zero sized request [ 194.609273][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.330032][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.409762][ T5641] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.415973][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.616450][ T8114] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.139466][ T8114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.620289][ T8114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.899978][ T8114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.032556][ T8114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.572106][ T8177] syz.1.516 (8177): attempted to duplicate a private mapping with mremap. This is not supported. [ 198.398395][ T808] Process accounting resumed [ 199.884151][ T8219] FAULT_INJECTION: forcing a failure. [ 199.884151][ T8219] name failslab, interval 1, probability 0, space 0, times 0 [ 199.978167][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.0.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.978206][ T8219] Tainted: [L]=SOFTLOCKUP [ 199.978215][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.978229][ T8219] Call Trace: [ 199.978238][ T8219] [ 199.978247][ T8219] dump_stack_lvl+0x100/0x190 [ 199.978290][ T8219] should_fail_ex.cold+0x5/0xa [ 199.978318][ T8219] should_failslab+0xc2/0x120 [ 199.978347][ T8219] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 199.978381][ T8219] ? security_file_alloc+0x34/0x2c0 [ 199.978411][ T8219] ? trace_kmem_cache_alloc+0xd5/0x100 [ 199.978444][ T8219] security_file_alloc+0x34/0x2c0 [ 199.978474][ T8219] init_file+0x95/0x480 [ 199.978509][ T8219] alloc_empty_file+0x79/0x1c0 [ 199.978548][ T8219] path_openat+0xe8/0x31a0 [ 199.978580][ T8219] ? kasan_save_stack+0x3f/0x50 [ 199.978604][ T8219] ? kasan_save_stack+0x30/0x50 [ 199.978629][ T8219] ? kasan_save_track+0x14/0x30 [ 199.978654][ T8219] ? __kasan_slab_alloc+0x89/0x90 [ 199.978680][ T8219] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 199.978715][ T8219] ? do_getname+0x35/0x390 [ 199.978742][ T8219] ? do_sys_openat2+0xc5/0x1e0 [ 199.978775][ T8219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.978804][ T8219] ? __pfx_path_openat+0x10/0x10 [ 199.978845][ T8219] do_file_open+0x20e/0x430 [ 199.978882][ T8219] ? __pfx_do_file_open+0x10/0x10 [ 199.978931][ T8219] ? alloc_fd+0x476/0x790 [ 199.978975][ T8219] ? do_getname+0x191/0x390 [ 199.979011][ T8219] do_sys_openat2+0x10d/0x1e0 [ 199.979043][ T8219] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.979085][ T8219] __x64_sys_openat+0x12d/0x210 [ 199.979119][ T8219] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.979154][ T8219] ? ksys_write+0x1ac/0x250 [ 199.979190][ T8219] ? rcu_is_watching+0x12/0xc0 [ 199.979229][ T8219] do_syscall_64+0x115/0x840 [ 199.979264][ T8219] ? clear_bhb_loop+0x40/0x90 [ 199.979295][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.979318][ T8219] RIP: 0033:0x7f429dd9ce59 [ 199.979339][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.979366][ T8219] RSP: 002b:00007f429ecbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.979389][ T8219] RAX: ffffffffffffffda RBX: 00007f429e016090 RCX: 00007f429dd9ce59 [ 199.979405][ T8219] RDX: 0000000000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 199.979420][ T8219] RBP: 00007f429de32d6f R08: 0000000000000000 R09: 0000000000000000 [ 199.979437][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.979454][ T8219] R13: 00007f429e016128 R14: 00007f429e016090 R15: 00007ffe085873f8 [ 199.979487][ T8219] [ 200.332106][ T8199] Process accounting resumed [ 201.987641][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.535'. [ 202.733775][ T8287] can0: slcan on pty238. [ 203.150888][ T8281] can0 (unregistered): slcan off pty238. [ 205.053302][ T8368] overlayfs: missing 'lowerdir' [ 205.182157][ T8327] Process accounting paused [ 205.602189][ T8368] NFSD: Failed to start, no listeners configured. [ 205.889219][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 206.990177][ T8426] [U] ^H [ 207.744783][ T50] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 207.746803][ T50] Bluetooth: hci3: hardware error 0x00 [ 208.242098][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 208.256686][ T8464] netlink: 25 bytes leftover after parsing attributes in process `syz.2.569'. [ 209.135056][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 209.373824][ T8456] Process accounting resumed [ 209.810812][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 209.868027][ T8493] zswap: compressor not available [ 209.886845][ T8493] netlink: 'syz.0.574': attribute type 11 has an invalid length. [ 211.606064][ T8532] netlink: 25 bytes leftover after parsing attributes in process `syz.2.581'. [ 217.516343][ T8631] netlink: 'syz.3.600': attribute type 11 has an invalid length. [ 217.537366][ T8631] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 217.549016][ T8631] netlink: 9 bytes leftover after parsing attributes in process `syz.3.600'. [ 218.255420][ T8653] futex_wake_op: syz.0.606 tries to shift op by -2048; fix this program [ 218.415207][ T8654] netlink: 330 bytes leftover after parsing attributes in process `syz.1.605'. [ 218.872893][ T8665] FAULT_INJECTION: forcing a failure. [ 218.872893][ T8665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 218.912435][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.2.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.912479][ T8665] Tainted: [L]=SOFTLOCKUP [ 218.912490][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.912506][ T8665] Call Trace: [ 218.912524][ T8665] [ 218.912535][ T8665] dump_stack_lvl+0x100/0x190 [ 218.912591][ T8665] should_fail_ex.cold+0x5/0xa [ 218.912621][ T8665] ? prepare_alloc_pages+0x16d/0x5f0 [ 218.912660][ T8665] should_fail_alloc_page+0xeb/0x140 [ 218.912697][ T8665] prepare_alloc_pages+0x1f0/0x5f0 [ 218.912737][ T8665] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 218.912783][ T8665] ? is_bpf_text_address+0x21/0x1a0 [ 218.912821][ T8665] ? is_bpf_text_address+0x8a/0x1a0 [ 218.912858][ T8665] ? bpf_ksym_find+0x124/0x1c0 [ 218.912886][ T8665] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 218.912926][ T8665] ? is_bpf_text_address+0x94/0x1a0 [ 218.912962][ T8665] ? kernel_text_address+0x8d/0x100 [ 218.912991][ T8665] ? __kernel_text_address+0xd/0x30 [ 218.913016][ T8665] ? unwind_get_return_address+0x59/0xa0 [ 218.913052][ T8665] ? arch_stack_walk+0xa6/0xf0 [ 218.913084][ T8665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 218.913142][ T8665] ? stack_depot_save_flags+0x27/0x9d0 [ 218.913184][ T8665] ? stack_trace_save+0x8e/0xc0 [ 218.913209][ T8665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.913231][ T8665] ? policy_nodemask+0xed/0x4f0 [ 218.913250][ T8665] alloc_pages_mpol+0x1fb/0x540 [ 218.913268][ T8665] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 218.913290][ T8665] alloc_pages_noprof+0x1a/0x160 [ 218.913309][ T8665] kimage_alloc_pages+0x72/0x380 [ 218.913331][ T8665] kimage_alloc_control_pages+0x157/0xa20 [ 218.913356][ T8665] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 218.913390][ T8665] do_kexec_load+0x275/0x810 [ 218.913413][ T8665] ? __pfx_do_kexec_load+0x10/0x10 [ 218.913437][ T8665] ? _copy_from_user+0x59/0xd0 [ 218.913458][ T8665] __x64_sys_kexec_load+0x1bf/0x230 [ 218.913482][ T8665] do_syscall_64+0x115/0x840 [ 218.913502][ T8665] ? clear_bhb_loop+0x40/0x90 [ 218.913527][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.913542][ T8665] RIP: 0033:0x7f1709f9ce59 [ 218.913559][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.913573][ T8665] RSP: 002b:00007f170ad95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 218.913589][ T8665] RAX: ffffffffffffffda RBX: 00007f170a216090 RCX: 00007f1709f9ce59 [ 218.913599][ T8665] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 218.913608][ T8665] RBP: 00007f170a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.913617][ T8665] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 218.913626][ T8665] R13: 00007f170a216128 R14: 00007f170a216090 R15: 00007ffefaef0958 [ 218.913646][ T8665] [ 218.915293][ T8665] kexec: Could not allocate control_code_buffer [ 219.527101][ T8670] can: request_module (can-proto-5) failed. [ 219.742878][ T8672] openvswitch: netlink: Key type 346 is out of range max 32 [ 220.653222][ T8694] kafs: addr_prefs: Invalid Command [ 220.893108][ T8706] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 222.126294][ T8750] HSR: entered promiscuous mode [ 223.051452][ T8787] o\'d"h_\ w:6;=lg!ܚJ+>Oiu,Y-nђha_P+'"L))9NGzuY;&p'ǩU|enlB *yap>%;}g]?Cdr8oS5]R|h>4u} imgns [ 225.180351][ T36] bridge_slave_1: left allmulticast mode [ 225.260319][ T36] bridge_slave_1: left promiscuous mode [ 225.278962][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.308556][ T36] bridge_slave_0: left allmulticast mode [ 225.315609][ T36] bridge_slave_0: left promiscuous mode [ 225.324544][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.824517][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.838184][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.851174][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.862157][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.876640][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.918319][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.965842][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.991857][ T36] bond0 (unregistering): Released all slaves [ 226.482720][ T8842] netlink: Conntrack attr has 4 unknown bytes [ 227.398839][ T36] hsr_slave_0: left promiscuous mode [ 227.407308][ T36] hsr_slave_1: left promiscuous mode [ 227.413438][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.421193][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.430808][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.438204][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.454240][ T36] veth1_macvtap: left promiscuous mode [ 227.461236][ T36] veth0_macvtap: left promiscuous mode [ 227.466942][ T36] veth1_vlan: left promiscuous mode [ 227.472341][ T36] veth0_vlan: left promiscuous mode [ 227.846077][ T36] team0 (unregistering): Port device team_slave_1 removed [ 227.862269][ T36] team0 (unregistering): Port device team_slave_0 removed [ 227.978995][ T5641] Bluetooth: hci1: command tx timeout [ 228.720832][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.743890][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.761995][ T8832] bridge_slave_0: entered allmulticast mode [ 228.791134][ T8832] bridge_slave_0: entered promiscuous mode [ 228.961263][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.977516][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.000648][ T8832] bridge_slave_1: entered allmulticast mode [ 229.018815][ T8832] bridge_slave_1: entered promiscuous mode [ 229.109780][ T8832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.145576][ T8832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.212406][ T8908] netlink: 146 bytes leftover after parsing attributes in process `syz.1.661'. [ 229.226352][ T8832] team0: Port device team_slave_0 added [ 229.249702][ T8832] team0: Port device team_slave_1 added [ 229.282384][ T8906] netlink: 322 bytes leftover after parsing attributes in process `syz.0.660'. [ 229.343797][ T8906] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 229.363557][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.373451][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.415687][ T8906] netlink: 208 bytes leftover after parsing attributes in process `syz.0.660'. [ 229.427432][ T8832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.472945][ T8832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.485790][ T8832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.524011][ T8832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.790709][ T8832] hsr_slave_0: entered promiscuous mode [ 229.799202][ T8832] hsr_slave_1: entered promiscuous mode [ 229.809498][ T8832] debugfs: 'hsr0' already exists in 'hsr' [ 229.820089][ T8832] Cannot create hsr debugfs directory [ 230.049086][ T5641] Bluetooth: hci1: command tx timeout [ 230.428247][ T8926] Process accounting paused [ 230.543808][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 230.675515][ T8929] sd 0:0:1:0: PR command failed: 1026 [ 230.706804][ T8929] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 230.738801][ T8929] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 230.914241][ T8832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.932968][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.942177][ T8832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.955835][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.981212][ T8832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.006829][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.068784][ T8832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.095335][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.425585][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.682880][ T8832] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.791952][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.799093][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.863502][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.870661][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.017915][ T30] audit: type=1800 audit(1781249934.024:8): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.675" name="dbroot" dev="configfs" ino=25131 res=0 errno=0 [ 232.052579][ T8978] db_root: cannot open: /sy] [ 232.130142][ T5641] Bluetooth: hci1: command tx timeout [ 232.638526][ T30] audit: type=1804 audit(1781249934.644:9): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.676" name="/newroot/160/file0" dev="tmpfs" ino=862 res=1 errno=0 [ 232.884036][ T8987] FAULT_INJECTION: forcing a failure. [ 232.884036][ T8987] name failslab, interval 1, probability 0, space 0, times 0 [ 232.906569][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.0.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.906610][ T8987] Tainted: [L]=SOFTLOCKUP [ 232.906620][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.906636][ T8987] Call Trace: [ 232.906645][ T8987] [ 232.906655][ T8987] dump_stack_lvl+0x100/0x190 [ 232.906710][ T8987] should_fail_ex.cold+0x5/0xa [ 232.906745][ T8987] ? lsm_blob_alloc+0x68/0x90 [ 232.906785][ T8987] should_failslab+0xc2/0x120 [ 232.906820][ T8987] __kmalloc_noprof+0xe0/0x850 [ 232.906864][ T8987] ? trace_kmem_cache_alloc+0xd5/0x100 [ 232.906904][ T8987] lsm_blob_alloc+0x68/0x90 [ 232.906945][ T8987] security_prepare_creds+0x2d/0x290 [ 232.906989][ T8987] prepare_creds+0x5d6/0x950 [ 232.907023][ T8987] join_session_keyring+0x17/0x350 [ 232.907059][ T8987] lookup_user_key+0x32f/0x1300 [ 232.907096][ T8987] ? __pfx_lookup_user_key+0x10/0x10 [ 232.907139][ T8987] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 232.907190][ T8987] __do_sys_add_key+0x2a6/0x460 [ 232.907237][ T8987] ? __pfx___do_sys_add_key+0x10/0x10 [ 232.907278][ T8987] ? ksys_write+0x1ac/0x250 [ 232.907316][ T8987] ? rcu_is_watching+0x12/0xc0 [ 232.907353][ T8987] do_syscall_64+0x115/0x840 [ 232.907392][ T8987] ? clear_bhb_loop+0x40/0x90 [ 232.907426][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.907455][ T8987] RIP: 0033:0x7f429dd9ce59 [ 232.907487][ T8987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.907515][ T8987] RSP: 002b:00007f429ece0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 232.907541][ T8987] RAX: ffffffffffffffda RBX: 00007f429e015fa0 RCX: 00007f429dd9ce59 [ 232.907560][ T8987] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000440 [ 232.907578][ T8987] RBP: 00007f429de32d6f R08: fffffffffffffffd R09: 0000000000000000 [ 232.907596][ T8987] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000000 [ 232.907613][ T8987] R13: 00007f429e016038 R14: 00007f429e015fa0 R15: 00007ffe085873f8 [ 232.907650][ T8987] [ 233.245026][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.273538][ T8832] veth0_vlan: entered promiscuous mode [ 233.290673][ T8832] veth1_vlan: entered promiscuous mode [ 233.311175][ T8832] veth0_macvtap: entered promiscuous mode [ 233.319808][ T8832] veth1_macvtap: entered promiscuous mode [ 233.337748][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.432020][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.484040][ T1113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.497002][ T1113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.514838][ T1113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.538093][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.745551][ T9009] netlink: 342 bytes leftover after parsing attributes in process `syz.1.680'. [ 233.886284][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.911992][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.055429][ T9018] hub 1-0:1.0: USB hub found [ 234.085053][ T9018] hub 1-0:1.0: 1 port detected [ 234.112231][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.138162][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.213055][ T5641] Bluetooth: hci1: command tx timeout [ 235.372648][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 235.417923][ T9058] netlink: 4040 bytes leftover after parsing attributes in process `syz.3.692'. [ 236.046993][ T9068] Process accounting resumed [ 239.302927][ T30] audit: type=1800 audit(1781249941.314:10): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.713" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 240.048794][ T9181] netlink: 334 bytes leftover after parsing attributes in process `syz.1.718'. [ 240.177143][ T9184] mtrr: base(0x10000000000) is not aligned on a size(0x0000) boundary [ 240.397253][ T9172] Process accounting resumed [ 243.974606][ T9268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.515968][ T9268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.825608][ T9268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.045720][ T9268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.753862][ T9395] zswap: compressor 000 not available [ 249.144777][ T9413] : Can't lookup blockdev [ 249.184678][ T9417] : Can't lookup blockdev [ 249.556993][ T9421] smpboot: CPU 1 is now offline [ 253.597381][ T5641] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 253.626735][ T9480] vivid-008: ================= START STATUS ================= [ 253.753686][ T9480] vivid-008: ================== END STATUS ================== [ 254.371821][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.380423][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.668488][ T9488] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 254.716604][ T19] ------------[ cut here ]------------ [ 254.717316][ T19] [ 254.717321][ T19] ====================================================== [ 254.717326][ T19] WARNING: possible circular locking dependency detected [ 254.717334][ T19] syzkaller #0 Tainted: G L [ 254.717341][ T19] ------------------------------------------------------ [ 254.717345][ T19] migration/0/19 is trying to acquire lock: [ 254.717352][ T19] ffffffff8e6f14a0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 254.717394][ T19] [ 254.717394][ T19] but task is already holding lock: [ 254.717398][ T19] ffff8880b843b620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 254.717430][ T19] [ 254.717430][ T19] which lock already depends on the new lock. [ 254.717430][ T19] [ 254.717434][ T19] [ 254.717434][ T19] the existing dependency chain (in reverse order) is: [ 254.717438][ T19] [ 254.717438][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 254.717457][ T19] _raw_spin_lock_nested+0x31/0x40 [ 254.717474][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 254.717489][ T19] _task_rq_lock+0xcf/0x510 [ 254.717504][ T19] cgroup_move_task+0x81/0x320 [ 254.717520][ T19] css_set_move_task+0x285/0x600 [ 254.717539][ T19] cgroup_post_fork+0x202/0x9b0 [ 254.717555][ T19] copy_process+0x5b9a/0x7ed0 [ 254.717571][ T19] kernel_clone+0x176/0x9e0 [ 254.717586][ T19] user_mode_thread+0xcc/0x110 [ 254.717601][ T19] rest_init+0x21/0x260 [ 254.717613][ T19] start_kernel+0x484/0x490 [ 254.717628][ T19] x86_64_start_reservations+0x24/0x30 [ 254.717642][ T19] x86_64_start_kernel+0x12b/0x130 [ 254.717654][ T19] common_startup_64+0x13e/0x148 [ 254.717670][ T19] [ 254.717670][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 254.717686][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 254.717701][ T19] try_to_wake_up+0xb5/0x1900 [ 254.717715][ T19] __wake_up_common+0x135/0x1f0 [ 254.717734][ T19] __wake_up+0x31/0x60 [ 254.717749][ T19] tty_port_default_wakeup+0x52/0x70 [ 254.717768][ T19] serial8250_tx_chars+0x68f/0x860 [ 254.717785][ T19] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 254.717802][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 254.717820][ T19] serial8250_default_handle_irq+0xc2/0x290 [ 254.717837][ T19] serial8250_interrupt+0xf8/0x1c0 [ 254.717857][ T19] __handle_irq_event_percpu+0x235/0x8c0 [ 254.717872][ T19] handle_irq_event+0xab/0x1e0 [ 254.717888][ T19] handle_edge_irq+0x35e/0x960 [ 254.717902][ T19] __common_interrupt+0xd8/0x2f0 [ 254.717920][ T19] common_interrupt+0x60/0xe0 [ 254.717932][ T19] asm_common_interrupt+0x26/0x40 [ 254.717945][ T19] lock_acquire+0x5e/0x370 [ 254.717962][ T19] unwind_next_frame+0xd1/0x2090 [ 254.717977][ T19] arch_stack_walk+0x94/0xf0 [ 254.717990][ T19] stack_trace_save+0x8e/0xc0 [ 254.718006][ T19] kasan_save_stack+0x30/0x50 [ 254.718018][ T19] kasan_save_track+0x14/0x30 [ 254.718029][ T19] kasan_save_free_info+0x3b/0x70 [ 254.718046][ T19] __kasan_slab_free+0x5f/0x80 [ 254.718058][ T19] slab_free_after_rcu_debug+0xdf/0x170 [ 254.718078][ T19] rcu_core+0x5a2/0x10d0 [ 254.718089][ T19] handle_softirqs+0x1ea/0xa00 [ 254.718104][ T19] __irq_exit_rcu+0x162/0x210 [ 254.718117][ T19] irq_exit_rcu+0x9/0x30 [ 254.718131][ T19] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 254.718147][ T19] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.718161][ T19] unwind_next_frame+0xf90/0x2090 [ 254.718175][ T19] arch_stack_walk+0x94/0xf0 [ 254.718189][ T19] stack_trace_save+0x8e/0xc0 [ 254.718204][ T19] kasan_save_stack+0x30/0x50 [ 254.718215][ T19] kasan_save_track+0x14/0x30 [ 254.718227][ T19] __kasan_slab_alloc+0x89/0x90 [ 254.718239][ T19] kmem_cache_alloc_noprof+0x241/0x6e0 [ 254.718258][ T19] vm_area_dup+0x27/0x8e0 [ 254.718274][ T19] __split_vma+0x18c/0xda0 [ 254.718291][ T19] vms_gather_munmap_vmas+0x1d2/0x1720 [ 254.718309][ T19] __mmap_region+0x4aa/0x2dd0 [ 254.718326][ T19] mmap_region+0x35d/0x620 [ 254.718336][ T19] do_mmap+0xc63/0x12f0 [ 254.718350][ T19] vm_mmap_pgoff+0x29e/0x470 [ 254.718364][ T19] ksys_mmap_pgoff+0x3cb/0x610 [ 254.718377][ T19] __x64_sys_mmap+0x125/0x190 [ 254.718394][ T19] do_syscall_64+0x115/0x840 [ 254.718411][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.718423][ T19] [ 254.718423][ T19] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 254.718440][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 254.718454][ T19] __wake_up+0x1c/0x60 [ 254.718470][ T19] tty_port_default_wakeup+0x52/0x70 [ 254.718486][ T19] serial8250_tx_chars+0x68f/0x860 [ 254.718503][ T19] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 254.718520][ T19] serial8250_handle_irq.part.0+0xb4/0x530 [ 254.718537][ T19] serial8250_default_handle_irq+0xc2/0x290 [ 254.718555][ T19] serial8250_interrupt+0xf8/0x1c0 [ 254.718573][ T19] __handle_irq_event_percpu+0x235/0x8c0 [ 254.718588][ T19] handle_irq_event+0xab/0x1e0 [ 254.718601][ T19] handle_edge_irq+0x35e/0x960 [ 254.718614][ T19] __common_interrupt+0xd8/0x2f0 [ 254.718632][ T19] common_interrupt+0xb9/0xe0 [ 254.718643][ T19] asm_common_interrupt+0x26/0x40 [ 254.718655][ T19] _raw_spin_unlock_irqrestore+0x31/0x80 [ 254.718671][ T19] uart_write+0x29d/0xb20 [ 254.718686][ T19] n_tty_write+0x431/0x11c0 [ 254.718703][ T19] file_tty_write.isra.0+0x4d2/0x890 [ 254.718718][ T19] redirected_tty_write+0xd4/0x120 [ 254.718733][ T19] vfs_write+0x6ac/0x1070 [ 254.718746][ T19] ksys_write+0x12a/0x250 [ 254.718759][ T19] do_syscall_64+0x115/0x840 [ 254.718775][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.718787][ T19] [ 254.718787][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 254.718803][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 254.718818][ T19] serial8250_console_write+0x17e/0x1900 [ 254.718837][ T19] console_flush_one_record+0x790/0xe50 [ 254.718851][ T19] console_unlock+0x103/0x260 [ 254.718864][ T19] vprintk_emit+0x407/0x6b0 [ 254.718878][ T19] _printk+0xcf/0x110 [ 254.718892][ T19] register_console.cold+0xc0/0x248 [ 254.718905][ T19] univ8250_console_init+0x6f/0x80 [ 254.718922][ T19] console_init+0x3f7/0x5e0 [ 254.718936][ T19] start_kernel+0x30a/0x490 [ 254.718947][ T19] x86_64_start_reservations+0x24/0x30 [ 254.718959][ T19] x86_64_start_kernel+0x12b/0x130 [ 254.718970][ T19] common_startup_64+0x13e/0x148 [ 254.719000][ T19] [ 254.719000][ T19] -> #0 (console_owner){-...}-{0:0}: [ 254.719016][ T19] __lock_acquire+0x14b8/0x2630 [ 254.719034][ T19] lock_acquire+0x1b1/0x370 [ 254.719051][ T19] console_lock_spinning_enable+0x72/0x80 [ 254.719072][ T19] console_flush_one_record+0x739/0xe50 [ 254.719086][ T19] console_unlock+0x103/0x260 [ 254.719099][ T19] vprintk_emit+0x407/0x6b0 [ 254.719113][ T19] _printk+0xcf/0x110 [ 254.719124][ T19] __report_bug.cold+0x15/0x137 [ 254.719143][ T19] report_bug+0xb2/0x220 [ 254.719158][ T19] handle_bug+0x16a/0x2a0 [ 254.719173][ T19] exc_invalid_op+0x17/0x50 [ 254.719184][ T19] asm_exc_invalid_op+0x1a/0x20 [ 254.719195][ T19] update_rq_clock+0x40a/0xd20 [ 254.719210][ T19] __schedule+0x1e84/0x67a0 [ 254.719225][ T19] schedule+0xdd/0x390 [ 254.719239][ T19] smpboot_thread_fn+0x893/0xaa0 [ 254.719256][ T19] kthread+0x370/0x450 [ 254.719273][ T19] ret_from_fork+0x72b/0xd50 [ 254.719285][ T19] ret_from_fork_asm+0x1a/0x30 [ 254.719301][ T19] [ 254.719301][ T19] other info that might help us debug this: [ 254.719301][ T19] [ 254.719305][ T19] Chain exists of: [ 254.719305][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 254.719305][ T19] [ 254.719323][ T19] Possible unsafe locking scenario: [ 254.719323][ T19] [ 254.719327][ T19] CPU0 CPU1 [ 254.719332][ T19] ---- ---- [ 254.719339][ T19] lock(&rq->__lock); [ 254.719349][ T19] lock(&p->pi_lock); [ 254.719358][ T19] lock(&rq->__lock); [ 254.719366][ T19] lock(console_owner); [ 254.719374][ T19] [ 254.719374][ T19] *** DEADLOCK *** [ 254.719374][ T19] [ 254.719377][ T19] 3 locks held by migration/0/19: [ 254.719390][ T19] #0: ffff8880b843b620 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 254.719423][ T19] #1: ffffffff8e7d18e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 254.719451][ T19] #2: ffffffff8e7d1958 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 254.719483][ T19] [ 254.719483][ T19] stack backtrace: [ 254.719491][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.719510][ T19] Tainted: [L]=SOFTLOCKUP [ 254.719515][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.719523][ T19] Stopper: 0x0 <- 0x0 [ 254.719539][ T19] Call Trace: [ 254.719543][ T19] [ 254.719549][ T19] dump_stack_lvl+0x100/0x190 [ 254.719570][ T19] print_circular_bug.cold+0x178/0x1c7 [ 254.719591][ T19] check_noncircular+0x146/0x160 [ 254.719612][ T19] __lock_acquire+0x14b8/0x2630 [ 254.719634][ T19] lock_acquire+0x1b1/0x370 [ 254.719652][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 254.719668][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 254.719684][ T19] console_lock_spinning_enable+0x72/0x80 [ 254.719699][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 254.719714][ T19] console_flush_one_record+0x739/0xe50 [ 254.719731][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 254.719749][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 254.719767][ T19] console_unlock+0x103/0x260 [ 254.719781][ T19] ? __pfx_console_unlock+0x10/0x10 [ 254.719797][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.719811][ T19] ? _printk+0xcf/0x110 [ 254.719824][ T19] vprintk_emit+0x407/0x6b0 [ 254.719840][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 254.719855][ T19] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 254.719873][ T19] ? __rb_erase_color+0x372/0xe00 [ 254.719893][ T19] ? rcu_is_watching+0x12/0xc0 [ 254.719908][ T19] _printk+0xcf/0x110 [ 254.719920][ T19] ? __pfx__printk+0x10/0x10 [ 254.719933][ T19] ? __lock_acquire+0x4a5/0x2630 [ 254.719953][ T19] ? __report_bug.cold+0x5/0x137 [ 254.719972][ T19] ? __report_bug+0x377/0x3d0 [ 254.719989][ T19] __report_bug.cold+0x15/0x137 [ 254.720008][ T19] ? update_rq_clock+0x40a/0xd20 [ 254.720024][ T19] ? __pfx___report_bug+0x10/0x10 [ 254.720040][ T19] ? find_held_lock+0x2b/0x80 [ 254.720055][ T19] ? clockevents_program_event+0x23e/0x820 [ 254.720070][ T19] ? clockevents_program_event+0x23e/0x820 [ 254.720086][ T19] ? update_rq_clock+0x40a/0xd20 [ 254.720102][ T19] report_bug+0xb2/0x220 [ 254.720118][ T19] ? update_rq_clock+0x40a/0xd20 [ 254.720134][ T19] handle_bug+0x16a/0x2a0 [ 254.720145][ T19] exc_invalid_op+0x17/0x50 [ 254.720157][ T19] asm_exc_invalid_op+0x1a/0x20 [ 254.720170][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 254.720188][ T19] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 254.720201][ T19] RSP: 0018:ffffc90000187c20 EFLAGS: 00010046 [ 254.720211][ T19] RAX: 0000000000000000 RBX: ffff8880b853b5c0 RCX: 0000000000000001 [ 254.720219][ T19] RDX: 0000000000000046 RSI: ffffffff8def57c3 RDI: ffffffff8c1c4680 [ 254.720228][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 254.720236][ T19] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff90d77ac4 [ 254.720244][ T19] R13: ffff8880b853c460 R14: ffff88802b54be00 R15: ffff8880b853b5c0 [ 254.720256][ T19] ? pick_task_fair+0x85/0x350 [ 254.720273][ T19] __schedule+0x1e84/0x67a0 [ 254.720294][ T19] ? __pfx___schedule+0x10/0x10 [ 254.720309][ T19] ? find_held_lock+0x2b/0x80 [ 254.720324][ T19] ? schedule+0x2bf/0x390 [ 254.720341][ T19] schedule+0xdd/0x390 [ 254.720356][ T19] smpboot_thread_fn+0x893/0xaa0 [ 254.720374][ T19] ? kthread+0x13a/0x450 [ 254.720397][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 254.720414][ T19] kthread+0x370/0x450 [ 254.720432][ T19] ? __pfx_kthread+0x10/0x10 [ 254.720450][ T19] ret_from_fork+0x72b/0xd50 [ 254.720463][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 254.720477][ T19] ? __switch_to+0x800/0x1100 [ 254.720493][ T19] ? __switch_to_asm+0x39/0x70 [ 254.720509][ T19] ? __pfx_kthread+0x10/0x10 [ 254.720527][ T19] ret_from_fork_asm+0x1a/0x30 [ 254.720547][ T19] [ 255.967288][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 255.967299][ T19] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 255.985033][ T19] Modules linked in: [ 255.988911][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.999652][ T19] Tainted: [L]=SOFTLOCKUP [ 256.003951][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.013983][ T19] Stopper: 0x0 <- 0x0 [ 256.017946][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 256.023478][ T19] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 256.043065][ T19] RSP: 0018:ffffc90000187c20 EFLAGS: 00010046 [ 256.049113][ T19] RAX: 0000000000000000 RBX: ffff8880b853b5c0 RCX: 0000000000000001 [ 256.057063][ T19] RDX: 0000000000000046 RSI: ffffffff8def57c3 RDI: ffffffff8c1c4680 [ 256.065031][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 256.072997][ T19] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff90d77ac4 [ 256.080948][ T19] R13: ffff8880b853c460 R14: ffff88802b54be00 R15: ffff8880b853b5c0 [ 256.088916][ T19] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 256.097827][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.104396][ T19] CR2: 00007f05c77ea540 CR3: 000000007854c000 CR4: 00000000003526f0 [ 256.112364][ T19] Call Trace: [ 256.115625][ T19] [ 256.118550][ T19] ? pick_task_fair+0x85/0x350 [ 256.123303][ T19] __schedule+0x1e84/0x67a0 [ 256.127796][ T19] ? __pfx___schedule+0x10/0x10 [ 256.132636][ T19] ? find_held_lock+0x2b/0x80 [ 256.137296][ T19] ? schedule+0x2bf/0x390 [ 256.141611][ T19] schedule+0xdd/0x390 [ 256.145659][ T19] smpboot_thread_fn+0x893/0xaa0 [ 256.150582][ T19] ? kthread+0x13a/0x450 [ 256.154813][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 256.160267][ T19] kthread+0x370/0x450 [ 256.164320][ T19] ? __pfx_kthread+0x10/0x10 [ 256.168894][ T19] ret_from_fork+0x72b/0xd50 [ 256.173466][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 256.178556][ T19] ? __switch_to+0x800/0x1100 [ 256.183218][ T19] ? __switch_to_asm+0x39/0x70 [ 256.187964][ T19] ? __pfx_kthread+0x10/0x10 [ 256.192539][ T19] ret_from_fork_asm+0x1a/0x30 [ 256.197290][ T19] [ 256.200294][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 256.207557][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.218302][ T19] Tainted: [L]=SOFTLOCKUP [ 256.222601][ T19] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.232633][ T19] Stopper: 0x0 <- 0x0 [ 256.236594][ T19] Call Trace: [ 256.239853][ T19] [ 256.242765][ T19] dump_stack_lvl+0x100/0x190 [ 256.247432][ T19] vpanic+0x552/0x970 [ 256.251397][ T19] ? __pfx_vpanic+0x10/0x10 [ 256.255881][ T19] ? lock_release+0x245/0x310 [ 256.260567][ T19] panic+0xd1/0xe0 [ 256.264268][ T19] ? __pfx_panic+0x10/0x10 [ 256.268664][ T19] ? check_panic_on_warn+0x1f/0x90 [ 256.273762][ T19] check_panic_on_warn.cold+0x19/0x34 [ 256.279115][ T19] ? update_rq_clock+0x40a/0xd20 [ 256.284041][ T19] __warn.cold+0x191/0x328 [ 256.288439][ T19] __report_bug+0x296/0x3d0 [ 256.292926][ T19] ? update_rq_clock+0x40a/0xd20 [ 256.297848][ T19] ? __pfx___report_bug+0x10/0x10 [ 256.302856][ T19] ? find_held_lock+0x2b/0x80 [ 256.307516][ T19] ? clockevents_program_event+0x23e/0x820 [ 256.313302][ T19] ? clockevents_program_event+0x23e/0x820 [ 256.319109][ T19] ? update_rq_clock+0x40a/0xd20 [ 256.324042][ T19] report_bug+0xb2/0x220 [ 256.328270][ T19] ? update_rq_clock+0x40a/0xd20 [ 256.333192][ T19] handle_bug+0x16a/0x2a0 [ 256.337500][ T19] exc_invalid_op+0x17/0x50 [ 256.341983][ T19] asm_exc_invalid_op+0x1a/0x20 [ 256.346903][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 256.352431][ T19] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 256.372020][ T19] RSP: 0018:ffffc90000187c20 EFLAGS: 00010046 [ 256.378085][ T19] RAX: 0000000000000000 RBX: ffff8880b853b5c0 RCX: 0000000000000001 [ 256.386057][ T19] RDX: 0000000000000046 RSI: ffffffff8def57c3 RDI: ffffffff8c1c4680 [ 256.394017][ T19] RBP: ffffc90000187dd0 R08: 0000000000000001 R09: 0000000000000001 [ 256.401975][ T19] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff90d77ac4 [ 256.409930][ T19] R13: ffff8880b853c460 R14: ffff88802b54be00 R15: ffff8880b853b5c0 [ 256.417896][ T19] ? pick_task_fair+0x85/0x350 [ 256.422713][ T19] __schedule+0x1e84/0x67a0 [ 256.427214][ T19] ? __pfx___schedule+0x10/0x10 [ 256.432049][ T19] ? find_held_lock+0x2b/0x80 [ 256.436719][ T19] ? schedule+0x2bf/0x390 [ 256.441037][ T19] schedule+0xdd/0x390 [ 256.445089][ T19] smpboot_thread_fn+0x893/0xaa0 [ 256.450020][ T19] ? kthread+0x13a/0x450 [ 256.454264][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 256.459726][ T19] kthread+0x370/0x450 [ 256.463783][ T19] ? __pfx_kthread+0x10/0x10 [ 256.468360][ T19] ret_from_fork+0x72b/0xd50 [ 256.472936][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 256.478027][ T19] ? __switch_to+0x800/0x1100 [ 256.482684][ T19] ? __switch_to_asm+0x39/0x70 [ 256.487433][ T19] ? __pfx_kthread+0x10/0x10 [ 256.492014][ T19] ret_from_fork_asm+0x1a/0x30 [ 256.496767][ T19] [ 256.499963][ T19] Kernel Offset: disabled [ 256.504294][ T19] Rebooting in 86400 seconds..