last executing test programs: 19.561392342s ago: executing program 3 (id=213): r0 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x30002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x254, &(0x7f00000001c0)="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", 0x0}) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000005f6bba441810", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r1) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) sendmsg$auto_NLBL_MGMT_C_ADD(r2, &(0x7f0000000800)={0xfffffffffffffffe, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004090}, 0x4880) mmap$auto(0xfffffffffffffffe, 0x440009, 0xe, 0x9b72, r0, 0x8) io_uring_setup$auto(0x1fe, 0x0) socket(0xa, 0x1, 0x84) socket(0x10, 0x6, 0x2) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xffff59e7, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x8, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x2, 0x10001, 0x40, 0x8, 0xf, 0x6, 0x10, [0x6, 0x2, 0xffff, 0x3, 0x7, 0x200000003, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0x4, 0x4, 0x1, 0x100, 0x8, 0x9, 0x8000, 0xd1c5, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x6, 0x7, 0x55ac, 0xbbb, 0xa, 0xfffffffffffffffd, 0x7, 0xa00, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6], "d2ef"}, 0x4, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x6, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10) poll$auto(&(0x7f0000000480)={0xffffffffffffffff, 0xffff, 0x29}, 0x3, 0x8) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x7ff, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x403c6f2b, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x40146f2c, 0x0) 18.30850066s ago: executing program 3 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'dvmrp1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x16c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcd3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x850) (async) ioctl$auto_FS_IOC_UNRESVSP(r0, 0x40305829, 0x1) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya9\x00', 0x14000, 0x0) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000440)="1aeffca3e951d0805c326b917bba8234bbed4342ec1ce617ae75") r9 = fsmount$auto(r8, 0x7, 0x0) ioctl$auto_VHOST_SET_OWNER(r9, 0xaf01, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$auto_ila(&(0x7f00000004c0), r9) sendmsg$auto_ILA_CMD_FLUSH(r10, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x22b10011}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r11, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x3ff}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x6}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_IFINDEX={0x8, 0x4, r5}, @ILA_ATTR_IFINDEX={0x8, 0x4, r7}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4801) getsockopt$auto_SO_COOKIE(r0, 0x4, 0x39, &(0x7f0000000600)='lo\x00', &(0x7f0000000640)) (async) r12 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x2, 0x0, 0xffffffffffffffff, 0x1, 0x2) sendmsg$auto_OVS_VPORT_CMD_NEW(r12, &(0x7f0000000c00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x4c4, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0xf, 0x3, '/dev/ptya9\x00'}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x2, 0x0, 0x400, 0x8000000000000001, 0x4, 0x9, 0x9, 0x50}}, @OVS_VPORT_ATTR_UPCALL_PID={0xb1, 0x5, "173812380507d19e355dbd57ecbb58f76b1c54e3d0ef440684ae65d0e8e64cc0860a9a76b294f8e38b025d8daeb600990af2c531e35648fc687f3e6a86f5a1863742367ef43ae5b37eaad877305ed7865dceee32c684eae902fe630b5aa55fc3193dbe75fb980bd8a9dba17f7f4e9f68bb26db305999e6cf28cc2929fb91fcbd3087a6b81862ad4d9ab9ee1811c4deb6cb08f291a79f5ace5627297d018469f0ee7d8c22671d4a151b5c903577"}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r7}, @OVS_VPORT_ATTR_OPTIONS={0x39d, 0x4, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}, @nested={0x26b, 0x100, 0x0, 0x1, [@typed={0x56, 0x22, 0x0, 0x0, @binary="cdfed61f6909db3161182e3963fac20ac0063b2e306061b6deea17e1e41558246bb00dc22f5edefcb4ead8d2e0a755b43ac7c3f00355f94fb37d389ada2795af0a8ed14dd72675301a77efb4975ed0bf3911"}, @generic="b6bedac726c593d29c6964aac869b4209c806ec0d57dc27ce1966a5536facab548635f15a4ffaeea66cbbf15b1bcdab65a2be9e60e95ea0fe6862b51cba48cb8b6af0e53997008cfe5b74b8071986ee882e831e042c8651544f0915b8903ef24c000dc27138bed3d1d697cda82e55b6dbbfb148fbc78f5e396b578f08eb067908bc8be6e8d36718296c51dd70f5e7c727c7589a4252590067970c1b0fb5cb02e01137d08f9d6b812f36b7cb8bc6fd5c77d2b53647c5e6647598ba255c5d44966c94a8700b27ac1981050198bcac061a81e2faab095499fe70600a05b8942", @generic="cd746e7b6962e02b26ff86611c2158077b80c4507c767e8436c917b501b585a80358156422c71086a3499311b295b4", @generic="de502f1653e3bcaf71b845c06c8edee55c9255fc9dfc8faea3686f00d286e799bcd2fbec6a425d36dc69948dcafb61b0984cdf7ed05ca60c35eb425621b0993a10b0271fbfd07fc23e45a37cc4307f51b01fad4f5ab6cb27d39107f82a09737f87008bbc4b15a4c64ac9b4abe057a5fd12f2c7d29b4259cfb5ae03ab009b64719a0f0cb6c022fe8044b33fb815584c9e56ce4e21210236a04856b37413db4eae37f612e77cf0a93684ab4d1674214c817b8dfa5f", @generic="7920e1e73b67b0df66e391e7f11d52192c59839af8d1c763e6d54d2411a60d2923d56830549056c3b6ac9e47347cd803aa8ddc76ee562f7e5a797949ce447c5a5632209133169dd63dbb", @nested={0x4, 0x20}]}, @generic="f4a9548204f07eded09641745766b0c604e8093665c080b1f861bfb44fbf8174e367abf7f913ab0e02dec5a741ea1648f61c9fb7e2a315f9db7e210ce08b6160d543f9bc2834298aa7fac319459f40262ee12930f121205dce5cbd408e68882387af752216d4b97807a36b060c418b0ca8ddd7b8216daa9b593bbb61b0a9b70b0b18dc9b786d7ef2dc21273bfe8a2de11f336366119491294c", @nested={0x78, 0x73, 0x0, 0x1, [@generic="84b86907bbd27035db3df383ddf59f293a07d14978c62f6f4df31a026a87e270f13cb8ff0c754651070bfbde2b8a16cfd91e31185e55a4d4ccb083565927e855bc66fcb23d6c8183e3d6d7df9028cf1faf1b066af7fd6124d7ef35d1bf3dd9314e9c3a561b87a349b876e294", @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x14, 0x124, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f00000020c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002080)={&(0x7f0000000c80)={0x13c4, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_SE_APDU={0xb1, 0x19, "345f2ea396ddb05c6cfbeaba67322ad7ac1b3aabc49559e658bb503a4c8e6e8e1a31396823314470e1a8933f774d7f2f65aaabb74d6d15e712776e48ce05c51e204f6edee80b7c4a132aa1095d00d0c38c8663b4a47c701465c1e5a7d5591c002ec1b71830d2a52b39a4520cc3c36bd24ad11eda68b413275eb803ff70d137ca41724940910242d1a7dcc80868d727ee1256068ad1363227e3ea891f059bf43a9e83a679b33876831335f87873"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_LLC_SDP={0x12e9, 0x13, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x4}, @generic="0fa2974643e82ca52b9a16e4d219ee2f5e5be46f9bcdf6b6767811ddbeb8a7f100bb8662e4e74152bcea8c837d04a99c08c2ca6b12cc2c5cb202d23caf507d04cff38bde90d774287e14febd3df75c4b90ab2be6ff", @nested={0x1285, 0x30, 0x0, 0x1, [@typed={0x1004, 0x70, 0x0, 0x0, @binary="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"}, @typed={0x4, 0xba}, @nested={0x4, 0x8a}, @generic="df6314d8a4475148f74bec36a68c402415cc158cbeefc8b0abe3399ffff5dc0dfefe74578717a4ff614c07a044fdef1758b2a6b98be4e6a23f242da3684ccab5329408b9d4bbe252c3f804382008b1ea5e19db7c45d342b5adc33f7bcf4340bc8bcfa850ba6485097da13fc6c56fb6fe2b9f6f08780627d14fd6c09116", @typed={0xe1, 0x5b, 0x0, 0x0, @binary="652ae7a623221482686208bc59d9f605ba90709271d9180aaaf4c968f3ca640677221604dfd4de977124e0b045d31d0a58eb990c4ca6817daf8ad2114ad75ee1fcaf017f273a87fdb946a9d697babe29a84946d6039475a364996682224aa3b3a23aa6e6f668f94b0641bad376a24edc949c47b963c6de75d6616da95730c3a7ad2d9780dfc76505f283ff7b96ec5e7ebbdff0f3c69b7430c6a6a09da5c967ff07e36de0d1b7393471925f8bfe0e868bc553e7b80a2cac5a556ef135fbdcc65fbbd03851c5a0ac01ea7de99cf41189955383e4d06629e49933428c5952"}, @generic="0ba9fe556c7d9829aea383103e1e9f4cf49d958fb99b1fb34536c377a1a4bc6d997557a63bc5a062fe47e5503acf08c74b557c7b1c340db9ae2a42b0f1704b75a06a996f861a61e8044bdfd1e4323f12c276c14329fb114e7bd85a473f0c1c2ae125f9d78e0555b7f08eee5a5c13428fbce42b9b02a2432867ea3526c559083b5c1a61390d52d5a218dbc2ff6ef70ce2672e922bcf327ac1159e8390545c6d8200e43d91a6a3a4dab1", @nested={0x4, 0x106}, @generic="66d342dfe8720b7728bd145e9dfe9925c7999f672b3929db391be84c959f590a2763980fb983fbeea212bdcfb32cae90121b6afce3e394cb79cfa504c0", @typed={0x4, 0x5d}, @generic="f2315509fe166918bc168519a7fcc9c405afcdae05cf17df639d3b0bf648357326039ae775e8"]}]}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async, rerun: 32) r13 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002140), r9) shmctl$auto_IPC_STAT(0x8, 0x2, &(0x7f0000002340)={{0x7fff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x2, 0x8, 0x2}, 0x5, 0x1, 0x1747, 0x701, @raw=0x2, @raw=0x1, 0x100, 0x0, &(0x7f0000002180)="f4666c9129e3336898c7b7db2c9239ccbe29d2cd10c50a3a8621987232dfa4da8b5147523bb352b3bc8786f2884428ad8e2a1b4c2f47db4226d6705f37d3873d59280a844c8d6bd77af89f5788924246c78ba772004b3bc94b0014d3e4ff91397fe49fa5238c0ea6969c5661700a8f5e960648a2dea1e23f10710e9f67c990031658fa61cc04ddbfd6f4e715a7bc8e45e045abd31f98dd7f16a31cbb577a1da3324dee37641dd4015d704e3f5fa5caa62919bd3e209f54b43b4ca19a4e2f614aef1c0fdab7bc1fd94a7c0ea86700", &(0x7f0000002280)="ad1ef59aaf944429337dd4f64f99c6e18a429c4f09ea82787d92d642ee7ca489f34d516a95408e49d52f264751548df35636f2367a5c976f91e0744a4d589675c5e1b3cbe185de054e5217f0a0f567fe097cc29269bc8835e249f22dcf5b7b6e29d28f77ac519664d216b34be35bef5479f82f62f2e8cd202d485ee6135bcf3de02aaf8c0482b21a1809fb0088842c47b09e2b6ef1f40bd1b1b14528b6368ff9"}) (async) shmctl$auto(0xfffffff9, 0xffff, &(0x7f00000024c0)={{0xfffffff7, 0xee01, 0xee00, 0x2, 0x200, 0x6, 0x5}, 0x3, 0x701, 0x7fff, 0x100000000, @inferred, @raw=0x6, 0x3, 0x0, &(0x7f00000023c0)="2a13b079292b8677b0dcd82ac4a44dbbd97037eb4be1d0e52792c150eb70826b3c33fb2f92f24a2478085b111b4b1545615946255a1d313bcca5d0755d4ae8f9316b7462d25189ed9fec37506dce55e3e3ec9a87e6a3f89d477eb1f4552bc51fe0860980ba288334759db8c4c18a07ca4a9710d5ff4fd9ffc0f8d5ea18f4bcb0a24840675b1a8869dde2b0ee7e016e11a1e541600fdb27ab1811229bf62ca5eb6cf2b09a283279664cb88785834c11b8d52d01c8cb59b9d50db7bee511ea2e", &(0x7f0000002480)="e4575def96b6ea5a89ed9aae292acd538e08d0cd00de0779e46024ebb7b893898bb59087"}) (async) r16 = getpid() sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002100), 0xc, &(0x7f00000028c0)={&(0x7f0000002540)={0x34c, r13, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x9}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x40}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x31d, 0x2, 0x0, 0x1, [@generic="76910e11c13c0d299df3132a07e8bc8de83ff57acea666bb403175b62588f57c2504b75ddab24b6e43db4abdd520926b8731b9e27abd33b7c337651b47113d530965df10d1a1143453d75a2c80c9b275a356cbb55269f133a5149957e743df11a9117a15ab4035aaf744d90a5c27436a1755bcedd5c069acbca0c690d61e71fd1d4c869de73d53dc6e5c2490addb3491946bc71ba768b7509da3645bfe76aed4a4767c5fced9fca9d62cdd364f55daa031d757c177a2194dc99926d3342d9451c211174b37b4b262e6", @nested={0x10c, 0x5f, 0x0, 0x1, [@generic="4d5e505bfbd2e5b94f39c4c9d5c53dbd99c09cabc32ba8c3d1955d289bc94e463e2f5916e2111e592bc4f1d2aa2ccb690547a6b98645ea218875b324fbb6a3d08782803624ae418f036130fb9a0569d79fc77ef4c096e8664413e3529068947341064e4e118704b2a80a4757c4906d16fcdbf7400a98da7df70a10ab4a1648473e64cde366cd986fcb045907d111d8cb998ffa97d64aef4aee826c34c787c4f2d81dcaca4bde8140de9e072cdd23cde4abea1f07ab55c68e2976869d374728bfb8d089e87cc7664bf446eaee1590596a2e65376a7d4b347777697392b73842f62f73ddbd8366f2181b3bb250", @typed={0x8, 0x63, 0x0, 0x0, @uid=r14}, @typed={0x8, 0x147, 0x0, 0x0, @u32=0xe5c}, @typed={0xc, 0xde, 0x0, 0x0, @u64=0x3}]}, @nested={0x11f, 0xa0, 0x0, 0x1, [@generic="ceb76e286e61919e278b42a56724260b022e69b3829d4fed468c82ed740ec4a75d284aa97ac9751820eb67a973afd5e063a038e740967155935616", @typed={0x8, 0x25, 0x0, 0x0, @uid=r15}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @typed={0xcf, 0x14, 0x0, 0x0, @binary="a6d6217e34250ba3b9f11101313a86aa200a0aa0d0c408734df0a557189d5e4e3c399df8c0851dfac05a673314d5f8bb3111dce577f4d383c93aedda8cf1b3efaaf870d07d1f279525ee567a4aeb1a39958f1ab06f00fbbb7531987ee2e7659fb49fef9ff926cbaaf9a4f3573310d592db326b6eabebac2db292b4b0adbebc35a67f48933aa787c7f4b6c5f6e149c2f4bb80e883a119f0f75739dc98cd415151ecb9549b141ac69fc2baa30ce0b92361d80989c4178dd7fb2ceca7731cba0496b54b68a9a71c9939ac591f"}]}, @generic="cf0b45f0970e5dfe0b31f3c7", @nested={0x18, 0x5f, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @pid=r16}, @typed={0x4, 0x37}, @nested={0x4, 0x39}, @nested={0x4, 0x6c}]}]}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x34c}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r17, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, 0x0, 0x515, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8811}, 0x80) (async) r18 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002a80), r12) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r9, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x20, r18, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x9, 0xe8, "163ec47867"}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 17.840445022s ago: executing program 3 (id=220): r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/o2cb/logmask/HB_BIO\x00', 0x102, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) 16.966145541s ago: executing program 3 (id=224): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) (async) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x1e1401, 0xe5) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) (async) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x5, 0x2, 0x73) (async) r0 = socket(0x5, 0x2, 0x73) getsockname$auto(r0, 0x0, &(0x7f0000000280)=0xaea) (async) getsockname$auto(r0, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) rseq$auto(0x0, 0x4, 0x0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) (async) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x800}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xc}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x85b}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x800}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xc}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x85b}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}, @IOAM6_ATTR_SC_NONE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0xa, 0x2, 0x0, 0x1, [@generic="00b487080d9c"]}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) 16.352176343s ago: executing program 3 (id=227): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) write$auto(r0, &(0x7f0000000000)='\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) (async) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x389803, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x5f) (async) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) r2 = socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioperm$auto(0x4000000000080, 0xfffffffffffffffb, 0x5) (async) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) (async) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xa00c0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) (async) eventfd$auto(0x5d5d) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) (async) ioperm$auto(0x4, 0xbc6, 0x81) (async) quotactl$auto(0x2, 0x0, 0x62a0, 0x0) (async) madvise$auto(0x120000000000000, 0x200007, 0x19) (async) mq_getsetattr$auto(r3, 0x0, 0x0) (async) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 16.199345007s ago: executing program 3 (id=229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r1, 0x409, 0x40003f) (async) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0x80000001, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) (async) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x23, 0x80805, 0x0) (async) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) 5.33143499s ago: executing program 2 (id=274): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0x543, r1, 0x2f}, 0x22) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x88cb, 0x2ee1, &(0x7f0000000040)={{0x9, 0x4c}, {0x6, 0x10000}, 0x4, 0x1, 0x134f, 0xffffffffffffffc0, 0x5, 0x3b7e5935, 0x7fffffff, 0xfffffffffffffff3, 0xfffffffffffffc00, 0x40, 0x2, 0x70228f15, 0xffffffffffffff25, 0x6}) prctl$auto(0x82, 0x1, r2, 0x400, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x54d9c2, 0x0) r4 = getegid() setregid$auto(r4, r4) quotactl_fd$auto(r3, 0x2, r4, &(0x7f00000010c0)="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") msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000180)={{0x9, 0x0, r4, 0x6, 0x6, 0x4, 0xfffc}, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x9, 0x200, 0x1, 0x9, 0x9, 0x6428, 0x838, 0x2, 0xb, @inferred=r2, @raw=0xa1}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r5 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r5, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) 3.691393722s ago: executing program 2 (id=279): r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/o2cb/logmask/HB_BIO\x00', 0x102, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) 3.652511089s ago: executing program 0 (id=280): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r0, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) futex$auto(0x0, 0x84, 0x2, 0x0, 0x0, 0x3) 3.555702936s ago: executing program 1 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x230, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x20c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13e, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x38}, {0x30}]}, @NL80211_PMSR_ATTR_PEERS={0x104, 0x5, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x0, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x47}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0x6000, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) 3.447085277s ago: executing program 0 (id=282): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 3.339847555s ago: executing program 0 (id=283): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x7, 0x800000000000000d, 0x8fd6, 0x19488, 0x3, 0x8, 0x7f, 0x2, 0xffffffffffffffff, 0xdfe, 0x8, 0x1a0, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000e00)="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", 0xcb6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001000)="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", 0x6be) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx8/power/runtime_status\x00', 0x3e52c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x14, 0x102000000010001, 0x7f, 0x200, 0xf) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) 2.976413813s ago: executing program 1 (id=284): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop15\x00', 0x35f402, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop15\x00', 0x35f402, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000001) (async) read$auto(0xffffffffffffffff, 0x0, 0x80000001) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = socket(0x10, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, 0x0, 0x11, 0x6, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x39b8) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) setsockopt$auto_SO_PASSPIDFD(r0, 0xfa, 0x4c, &(0x7f0000000040)='$/\x00', 0x5) madvise$auto(0x0, 0x200204, 0x15) (async) madvise$auto(0x0, 0x200204, 0x15) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (async) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) uname$auto(0x0) (async) uname$auto(0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 2.903004425s ago: executing program 2 (id=285): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x2, 0x2) prctl$auto_PR_SET_SECCOMP(0x16, 0x8, 0x2, 0x0, 0x6) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy0/aql_pending\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x4f, 0x5) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x20}}, 0x800) r3 = geteuid() msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000440)={{0x7, r3, 0xee01, 0x10001, 0x10000, 0x7, 0x2}, &(0x7f0000000340)=0xd1, &(0x7f0000000380)=0x6, 0x3ff, 0xfffffffffffffffc, 0x10000000000002b, 0x200, 0x3, 0x47, 0x8, 0x7, @raw=0x6, @raw=0x8001}) statx$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x25, 0x5, &(0x7f0000000080)={0x7, 0x8, 0xc, 0x61, r3, r5, 0x7, 0x80, 0x4, 0x3, 0xacf, 0x0, {0xc98, 0x1000}, {0xf7d, 0x10001}, {0x5, 0x80000001}, {0x9, 0xc59}, 0x4, 0x8c, 0x4, 0x3, 0x9, 0xb518, 0x200, 0x274ae2b7, 0xfffffff8, 0x2, 0x5, 0x4, [0x7af, 0x3, 0x80, 0x915e, 0x101, 0x5, 0x7, 0x3000000]}) setreuid$auto(r4, r4) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 2.408431032s ago: executing program 2 (id=286): openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r2, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'vdpa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x1) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) (async) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) read$auto(0x3, 0x0, 0x1f40) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r6 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000080)={@siginfo_0_0={0x7, 0x615, 0x3, @_sigchld={0x0, 0xffffffffffffffff, 0x1, 0x401, 0xfffffffffffffff8}}}, 0x3, &(0x7f0000000100)={{0x5, 0xd}, {0xe4, 0xffff}, 0x17c9, 0x1, 0x7fffffff, 0x9, 0x20000000000006, 0x0, 0x7, 0x1, 0x5, 0x4, 0x9d, 0xee, 0x5, 0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@inferred=r6, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6bfc1f64010043eeb0b0530300efffffff0d00", @raw=0xff}, 0x4, 0x966, 0x6, @raw=0x30, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) 1.88432866s ago: executing program 1 (id=287): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0x8a002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x302002, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x42000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0xfffffffd, 0x7, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x9, 0x7, 0x2e}, 0x6f4) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 1.808834143s ago: executing program 0 (id=288): close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x20ca, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40e00, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/thread-self/net/sctp/remaddr\x00', 0x8200, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) timer_create$auto(0xb, &(0x7f00000001c0)={@sival_ptr=0x0, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0) 1.807623918s ago: executing program 2 (id=289): mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd2\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x80000000000000, 0x0, 0x1, 0x55) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x2000e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x2000000000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0xa, 0x2, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/afs/rootcell\x00', 0x8400, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xc1}, 0x8, 0x4) symlink$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0xffffff70, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x1000000df, 0x12, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x80000, 0x1f) getsockname$auto(0x3, 0x0, &(0x7f0000000d40)=0x4) munmap$auto(0x20001000, 0x7fb3) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) 1.449081412s ago: executing program 1 (id=290): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r2, 0x0, @_sigev_thread={0x0, 0x0}}) futex$auto(0x0, 0x84, 0x2, 0x0, 0x0, 0x3) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto_RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000200)=0x9) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.308404405s ago: executing program 0 (id=291): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x2, 0x80, 0x1) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r2 = signalfd$auto(r1, &(0x7f0000000040)={0x6}, 0xfffffffffffffff8) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000180)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x7, 0x28000) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0) sysfs$auto(0x2, 0x11, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x9, 0x1, 0xa, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) 930.40611ms ago: executing program 1 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x230, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x20c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13e, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x38}, {0x30}]}, @NL80211_PMSR_ATTR_PEERS={0x104, 0x5, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x0, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x47}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xff07, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) 897.488679ms ago: executing program 32 (id=229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r1, 0x409, 0x40003f) (async) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0x80000001, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) (async) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x23, 0x80805, 0x0) (async) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) 457.842126ms ago: executing program 0 (id=294): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0)) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) mmap$auto(0x5, 0x4, 0x4000000000df, 0x17, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x101000, 0x0) r2 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}}) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) r4 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=0x1) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x23c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x225, 0x145, 0x0, 0x1, [@nested={0xee, 0x10b, 0x0, 0x1, [@generic="2f61b0254feeeab5354f0519cff31b29e72b8efe2f69b7bad741bf8e85586c0e938bd7331a187ae784f067bf3eb6149be9faa740d49c66be1a977c94de647989b91566804cbf27d6d4c093b08dfd1a3c5a803190008b6cb1a4bdbe617fc7291f4c020a72d595a3fdf65726a6f316252af99cc7ae56e26ca91a27edc682f6b7e9eb29c468c1f45b350dbb4a3dc6c15e066c43051cd708edea9a413c524ed6b108ae6dfc326dcdf2df35e6ea82dae94bc5ea4f329734e4b4f012723a9096aaa5b837c8d3ebc31dc7873adeb2ca2dfa91aca3c5a9a63b98aadc59ead5a8c343719dcfd7f19ce5d4cad90cde"]}, @typed={0x8, 0x8a, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0xd9, 0x0, 0x0, @str='$!:*]J@\x00'}, @typed={0x8, 0x61, 0x0, 0x0, @fd=r4}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x140, 0x0, 0x0, @u32=0x8ccd}, @generic="1d6049a6e2f2f9e03bfabf7f65481baefb41e848e2eebdbb5f28d3dc1b471e7084010e6aa369272cf37f641f8a571ecaf458260a9d98659147a7da0da075582f01f2a510501d72a3b4794f040776a74fb07c33ed2160bea79cd12b3cf84fcd77d88a23e1d7b002e0666a399b49e4024d2171968ce68132d850fcfd8832940bfe8132ec212b185f3afaad3db03055d865cae7c21d3e0a50f4c94cab67ea5dd67e9f4edc8ef6c0bf7f37d28d52863d35fb9c387f3b791c614947ae4e69309c14b635504a7782e4053954e7c5a918c3a212a8e72d0d26", @nested={0xc, 0x114, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @pid=r3}]}, @nested={0x18, 0x28, 0x0, 0x1, [@typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4}, 0x40) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r5 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r5, 0x0, 0x20000000001, 0x7fff) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x4, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 59.447539ms ago: executing program 2 (id=295): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) (rerun: 32) move_pages$auto(0x0, 0xd0, &(0x7f0000001100)=0x0, 0x0, 0x0, 0x2) (async) r0 = getpid() ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r0, 0x80) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8000) (async) pivot_root$auto(0x0, 0x0) (async) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x9, 0x7ffffffffffffffe, 0xa) (async) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/veth1_to_team/promote_secondaries\x00', 0x46e000, 0x0) pwrite64$auto(r2, 0x0, 0x1, 0x27) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) socket(0x0, 0xc, 0x5) (rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) io_uring_setup$auto(0x6, 0x0) 0s ago: executing program 1 (id=296): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x10900, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48340, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000240)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000340), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x3000000, 0x0, 0x40009}, 0x400098d1) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mbind$auto(0x0, 0x2, 0x4, 0x0, 0x6, 0x2) getcwd$auto(0x0, 0xff) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/arch_status\x00', 0x100, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/58, 0x20) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8044) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x14, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x3, 0x1, 0xf2, 0x401, 0x7ffffff3, 0x5, 0x1000, 0x7, 0x61, 0x105}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 88.992287][ T5837] cgroup: Unknown subsys name 'net' [ 89.111510][ T5837] cgroup: Unknown subsys name 'cpuset' [ 89.121029][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.152064][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.381983][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.390385][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.398616][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.407467][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.415554][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.434040][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.442190][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.450309][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.458706][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.467768][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.482683][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.488752][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.516454][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.517235][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.555396][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.565346][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.573063][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.581151][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.590980][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.600087][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.056335][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 94.153073][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 94.319278][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.327328][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.334653][ T5847] bridge_slave_0: entered allmulticast mode [ 94.343790][ T5847] bridge_slave_0: entered promiscuous mode [ 94.393685][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.401237][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.408736][ T5847] bridge_slave_1: entered allmulticast mode [ 94.416424][ T5847] bridge_slave_1: entered promiscuous mode [ 94.423958][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 94.517688][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.572067][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.588383][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.596028][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.603382][ T5855] bridge_slave_0: entered allmulticast mode [ 94.612192][ T5855] bridge_slave_0: entered promiscuous mode [ 94.620752][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.628012][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.635893][ T5855] bridge_slave_1: entered allmulticast mode [ 94.643027][ T5855] bridge_slave_1: entered promiscuous mode [ 94.679528][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 94.695770][ T5847] team0: Port device team_slave_0 added [ 94.707352][ T5847] team0: Port device team_slave_1 added [ 94.804085][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.811667][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.838904][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.854366][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.887035][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.894189][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.920652][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.935637][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.951064][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.958897][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.966683][ T5848] bridge_slave_0: entered allmulticast mode [ 94.974197][ T5848] bridge_slave_0: entered promiscuous mode [ 95.013252][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.021120][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.028576][ T5848] bridge_slave_1: entered allmulticast mode [ 95.036460][ T5848] bridge_slave_1: entered promiscuous mode [ 95.107221][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.121462][ T5855] team0: Port device team_slave_0 added [ 95.158674][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.183949][ T5855] team0: Port device team_slave_1 added [ 95.213697][ T5847] hsr_slave_0: entered promiscuous mode [ 95.221443][ T5847] hsr_slave_1: entered promiscuous mode [ 95.254711][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.261935][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.269613][ T5846] bridge_slave_0: entered allmulticast mode [ 95.277255][ T5846] bridge_slave_0: entered promiscuous mode [ 95.285700][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.292996][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.300230][ T5846] bridge_slave_1: entered allmulticast mode [ 95.308426][ T5846] bridge_slave_1: entered promiscuous mode [ 95.317572][ T5848] team0: Port device team_slave_0 added [ 95.354128][ T5848] team0: Port device team_slave_1 added [ 95.390129][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.397273][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.426783][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.489878][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.497849][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.525930][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.526121][ T5863] Bluetooth: hci0: command tx timeout [ 95.553316][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.560763][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.587157][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.601455][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.610866][ T5863] Bluetooth: hci3: command tx timeout [ 95.615361][ T5863] Bluetooth: hci2: command tx timeout [ 95.622771][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.657311][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.664310][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.685918][ T5863] Bluetooth: hci1: command tx timeout [ 95.691221][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.767832][ T5846] team0: Port device team_slave_0 added [ 95.781308][ T5855] hsr_slave_0: entered promiscuous mode [ 95.788168][ T5855] hsr_slave_1: entered promiscuous mode [ 95.794295][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.802795][ T5855] Cannot create hsr debugfs directory [ 95.820959][ T5846] team0: Port device team_slave_1 added [ 95.940692][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.947826][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.975446][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.999333][ T5848] hsr_slave_0: entered promiscuous mode [ 96.006457][ T5848] hsr_slave_1: entered promiscuous mode [ 96.012608][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.020682][ T5848] Cannot create hsr debugfs directory [ 96.034736][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.042170][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.068709][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.287813][ T5846] hsr_slave_0: entered promiscuous mode [ 96.294492][ T5846] hsr_slave_1: entered promiscuous mode [ 96.301328][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.309107][ T5846] Cannot create hsr debugfs directory [ 96.419250][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.460547][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.506742][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.542196][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.620220][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.663485][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.683405][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.710773][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.777793][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.792062][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.818996][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.853456][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.928396][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.968132][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.994171][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.028931][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.135671][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.162554][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.227371][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.251241][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.280324][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.288034][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.303680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.305595][ T24] cfg80211: failed to load regulatory.db [ 97.311226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.387641][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.401829][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.416972][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.424212][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.451612][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.458796][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.492146][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.499407][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.526975][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.534229][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.550738][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.605662][ T5863] Bluetooth: hci0: command tx timeout [ 97.605906][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.685974][ T5863] Bluetooth: hci2: command tx timeout [ 97.685981][ T51] Bluetooth: hci3: command tx timeout [ 97.691668][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.691790][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.734949][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.742220][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.770593][ T51] Bluetooth: hci1: command tx timeout [ 97.871856][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.990669][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.109925][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.367466][ T5855] veth0_vlan: entered promiscuous mode [ 98.404684][ T5855] veth1_vlan: entered promiscuous mode [ 98.544986][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.572112][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.580362][ T5855] veth0_macvtap: entered promiscuous mode [ 98.599291][ T5855] veth1_macvtap: entered promiscuous mode [ 98.668695][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.712748][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.734050][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.747783][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.757296][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.767459][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.777316][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797957][ T5847] veth0_vlan: entered promiscuous mode [ 98.830945][ T5848] veth0_vlan: entered promiscuous mode [ 98.848042][ T5847] veth1_vlan: entered promiscuous mode [ 98.889132][ T5848] veth1_vlan: entered promiscuous mode [ 98.998836][ T5846] veth0_vlan: entered promiscuous mode [ 99.033092][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.041953][ T5846] veth1_vlan: entered promiscuous mode [ 99.053386][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.101406][ T5847] veth0_macvtap: entered promiscuous mode [ 99.123694][ T5847] veth1_macvtap: entered promiscuous mode [ 99.146840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.154750][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.171355][ T5848] veth0_macvtap: entered promiscuous mode [ 99.211742][ T5848] veth1_macvtap: entered promiscuous mode [ 99.240119][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.248372][ T5846] veth0_macvtap: entered promiscuous mode [ 99.254929][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.293333][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.306741][ T5846] veth1_macvtap: entered promiscuous mode [ 99.358066][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.382552][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.403697][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.422206][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.443682][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.490892][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.529538][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.563038][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.625079][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.635056][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.663927][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.673669][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.687085][ T51] Bluetooth: hci0: command tx timeout [ 99.695612][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.704640][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715378][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.724379][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.765954][ T51] Bluetooth: hci3: command tx timeout [ 99.767483][ T5863] Bluetooth: hci2: command tx timeout [ 99.848162][ T5863] Bluetooth: hci1: command tx timeout [ 100.031342][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.055230][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.105667][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.113572][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.174445][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.183083][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.367967][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.405012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.517232][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.548952][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.599893][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.637717][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.157997][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 101.251675][ T5959] Zero length message leads to an empty skb [ 101.356034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.645456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.737091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 101.765815][ T5863] Bluetooth: hci0: command tx timeout [ 101.846217][ T5863] Bluetooth: hci2: command tx timeout [ 101.855352][ T5863] Bluetooth: hci3: command tx timeout [ 101.925617][ T5863] Bluetooth: hci1: command tx timeout [ 101.943357][ T5977] can: request_module (can-proto-3) failed. [ 102.428797][ T5982] netlink: 504 bytes leftover after parsing attributes in process `syz.0.10'. [ 102.498419][ T5982] netlink: 350 bytes leftover after parsing attributes in process `syz.0.10'. [ 102.588818][ T5966] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2'. [ 103.777349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 103.967988][ T5998] FAULT_INJECTION: forcing a failure. [ 103.967988][ T5998] name failslab, interval 1, probability 0, space 0, times 1 [ 103.985562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.994769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 104.044669][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.0.13 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 104.044714][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.044731][ T5998] Call Trace: [ 104.044742][ T5998] [ 104.044754][ T5998] dump_stack_lvl+0x16c/0x1f0 [ 104.044803][ T5998] should_fail_ex+0x512/0x640 [ 104.044845][ T5998] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 104.044896][ T5998] should_failslab+0xc2/0x120 [ 104.044926][ T5998] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 104.044972][ T5998] ? shmem_alloc_inode+0x25/0x50 [ 104.045009][ T5998] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 104.045036][ T5998] shmem_alloc_inode+0x25/0x50 [ 104.045066][ T5998] alloc_inode+0x61/0x240 [ 104.045098][ T5998] new_inode+0x22/0x1c0 [ 104.045137][ T5998] shmem_get_inode+0x19a/0xfb0 [ 104.045178][ T5998] shmem_mknod+0x1a8/0x450 [ 104.045216][ T5998] vfs_mknod+0x5d7/0x8e0 [ 104.045259][ T5998] do_mknodat+0x30f/0x5d0 [ 104.045319][ T5998] ? __pfx_do_mknodat+0x10/0x10 [ 104.045361][ T5998] ? getname_flags.part.0+0x1c5/0x550 [ 104.045406][ T5998] __x64_sys_mknod+0x87/0xb0 [ 104.045453][ T5998] do_syscall_64+0xcd/0x490 [ 104.045502][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.045532][ T5998] RIP: 0033:0x7fe20bb8e929 [ 104.045556][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.045585][ T5998] RSP: 002b:00007fe2099f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 104.045615][ T5998] RAX: ffffffffffffffda RBX: 00007fe20bdb5fa0 RCX: 00007fe20bb8e929 [ 104.045634][ T5998] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 104.045652][ T5998] RBP: 00007fe20bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 104.045670][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.045687][ T5998] R13: 0000000000000000 R14: 00007fe20bdb5fa0 R15: 00007ffcea90e268 [ 104.045727][ T5998] [ 104.242661][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.305277][ T5996] mmap: syz.3.12 (5996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.640465][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.686360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.989090][ T6012] random: crng reseeded on system resumption [ 107.127228][ T6022] random: crng reseeded on system resumption [ 107.505703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.981101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.365906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.169951][ T6066] FAULT_INJECTION: forcing a failure. [ 111.169951][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 111.184762][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.1.26 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 111.184804][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.184820][ T6066] Call Trace: [ 111.184829][ T6066] [ 111.184839][ T6066] dump_stack_lvl+0x16c/0x1f0 [ 111.184884][ T6066] should_fail_ex+0x512/0x640 [ 111.184921][ T6066] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 111.184965][ T6066] should_failslab+0xc2/0x120 [ 111.184991][ T6066] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 111.185031][ T6066] ? alloc_empty_file+0x55/0x1e0 [ 111.185063][ T6066] alloc_empty_file+0x55/0x1e0 [ 111.185092][ T6066] path_openat+0xda/0x2cb0 [ 111.185142][ T6066] ? rcu_is_watching+0x12/0xc0 [ 111.185183][ T6066] ? trace_kmem_cache_alloc+0x28/0xc0 [ 111.185212][ T6066] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 111.185253][ T6066] ? __pfx_path_openat+0x10/0x10 [ 111.185294][ T6066] ? __asan_memcpy+0x3c/0x60 [ 111.185338][ T6066] do_file_open_root+0x322/0x610 [ 111.185383][ T6066] ? __pfx_do_file_open_root+0x10/0x10 [ 111.185465][ T6066] ? vsnprintf+0x318/0x1160 [ 111.185510][ T6066] file_open_root+0x2a7/0x450 [ 111.185559][ T6066] ? __pfx_file_open_root+0x10/0x10 [ 111.185600][ T6066] ? find_held_lock+0x2b/0x80 [ 111.185635][ T6066] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 111.185679][ T6066] kernel_read_file_from_path_initns+0x189/0x260 [ 111.185717][ T6066] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 111.185765][ T6066] _request_firmware+0x744/0x1470 [ 111.185822][ T6066] ? __pfx__request_firmware+0x10/0x10 [ 111.185862][ T6066] ? __pfx_netdev_run_todo+0x10/0x10 [ 111.185908][ T6066] ? __pfx___mutex_lock+0x10/0x10 [ 111.185958][ T6066] request_firmware+0x35/0x50 [ 111.185994][ T6066] reg_reload_regdb+0x89/0x460 [ 111.186025][ T6066] ? __pfx_reg_reload_regdb+0x10/0x10 [ 111.186075][ T6066] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.186111][ T6066] ? nl80211_pre_doit+0x1b0/0xb10 [ 111.186153][ T6066] genl_family_rcv_msg_doit+0x209/0x2f0 [ 111.186201][ T6066] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.186232][ T6066] ? rcu_is_watching+0x12/0xc0 [ 111.186275][ T6066] ? bpf_lsm_capable+0x9/0x10 [ 111.186309][ T6066] ? security_capable+0x7e/0x260 [ 111.186346][ T6066] genl_rcv_msg+0x55c/0x800 [ 111.186389][ T6066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.186424][ T6066] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.186466][ T6066] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 111.186497][ T6066] ? __pfx_nl80211_post_doit+0x10/0x10 [ 111.186556][ T6066] netlink_rcv_skb+0x158/0x420 [ 111.186587][ T6066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.186625][ T6066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.186674][ T6066] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.186730][ T6066] genl_rcv+0x28/0x40 [ 111.186760][ T6066] netlink_unicast+0x53a/0x7f0 [ 111.186796][ T6066] ? __pfx_netlink_unicast+0x10/0x10 [ 111.186840][ T6066] netlink_sendmsg+0x8d1/0xdd0 [ 111.186878][ T6066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.186926][ T6066] ____sys_sendmsg+0xa98/0xc70 [ 111.186961][ T6066] ? copy_msghdr_from_user+0x10a/0x160 [ 111.187005][ T6066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.187049][ T6066] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.187100][ T6066] ___sys_sendmsg+0x134/0x1d0 [ 111.187146][ T6066] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.187193][ T6066] ? __lock_acquire+0x622/0x1c90 [ 111.187288][ T6066] __sys_sendmsg+0x16d/0x220 [ 111.187333][ T6066] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.187377][ T6066] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.187442][ T6066] do_syscall_64+0xcd/0x490 [ 111.187491][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.187521][ T6066] RIP: 0033:0x7f0e3238e929 [ 111.187546][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.187574][ T6066] RSP: 002b:00007f0e331b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.187603][ T6066] RAX: ffffffffffffffda RBX: 00007f0e325b5fa0 RCX: 00007f0e3238e929 [ 111.187622][ T6066] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 111.187640][ T6066] RBP: 00007f0e32410b39 R08: 0000000000000000 R09: 0000000000000000 [ 111.187657][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.187674][ T6066] R13: 0000000000000000 R14: 00007f0e325b5fa0 R15: 00007ffffe8586d8 [ 111.187715][ T6066] [ 111.675369][ T6066] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 111.692633][ T6066] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 111.716075][ T6066] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.252127][ T6114] FAULT_INJECTION: forcing a failure. [ 113.252127][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 113.269241][ T6116] netlink: 25 bytes leftover after parsing attributes in process `syz.2.33'. [ 113.280433][ T6115] ima: policy update failed [ 113.297013][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.3.34 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 113.297043][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.297054][ T6114] Call Trace: [ 113.297060][ T6114] [ 113.297068][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 113.297100][ T6114] should_fail_ex+0x512/0x640 [ 113.297127][ T6114] ? __kmalloc_noprof+0xbf/0x510 [ 113.297157][ T6114] ? __register_sysctl_table+0xea2/0x1900 [ 113.297194][ T6114] should_failslab+0xc2/0x120 [ 113.297212][ T6114] __kmalloc_noprof+0xd2/0x510 [ 113.297237][ T6114] ? __register_sysctl_table+0xe8e/0x1900 [ 113.297270][ T6114] __register_sysctl_table+0xea2/0x1900 [ 113.297304][ T6114] ? __pfx___register_sysctl_table+0x10/0x10 [ 113.297333][ T6114] ? is_module_address+0x69/0xf0 [ 113.297361][ T6114] ? register_net_sysctl_sz+0x228/0x3e0 [ 113.297388][ T6114] __addrconf_sysctl_register+0x1a2/0x360 [ 113.297420][ T6114] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 113.297451][ T6114] ? trace_kmalloc+0x2b/0xd0 [ 113.297470][ T6114] ? addrconf_init_net+0x1e9/0x8f0 [ 113.297500][ T6114] ? __asan_memcpy+0x3c/0x60 [ 113.297526][ T6114] addrconf_init_net+0x513/0x8f0 [ 113.297556][ T6114] ? __pfx_addrconf_init_net+0x10/0x10 [ 113.297585][ T6114] ops_init+0x1df/0x5f0 [ 113.297616][ T6114] setup_net+0x1ff/0x510 [ 113.297643][ T6114] ? lockdep_init_map_type+0x5c/0x280 [ 113.297670][ T6114] ? __pfx_setup_net+0x10/0x10 [ 113.297700][ T6114] ? debug_mutex_init+0x37/0x70 [ 113.297720][ T6114] copy_net_ns+0x2a6/0x5f0 [ 113.297741][ T6114] create_new_namespaces+0x3ea/0xa90 [ 113.297767][ T6114] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 113.297790][ T6114] ksys_unshare+0x45b/0xa40 [ 113.297822][ T6114] ? __pfx_ksys_unshare+0x10/0x10 [ 113.297848][ T6114] ? xfd_validate_state+0x61/0x180 [ 113.297879][ T6114] __x64_sys_unshare+0x31/0x40 [ 113.297903][ T6114] do_syscall_64+0xcd/0x490 [ 113.297932][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.297955][ T6114] RIP: 0033:0x7f3cded8e929 [ 113.297971][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.297989][ T6114] RSP: 002b:00007f3cdfcab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.298006][ T6114] RAX: ffffffffffffffda RBX: 00007f3cdefb5fa0 RCX: 00007f3cded8e929 [ 113.298018][ T6114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 113.298028][ T6114] RBP: 00007f3cdee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.298038][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.298048][ T6114] R13: 0000000000000000 R14: 00007f3cdefb5fa0 R15: 00007ffc7de95758 [ 113.298070][ T6114] [ 113.298078][ T6114] sysctl could not get directory: /net/ipv6/conf -12 [ 113.625332][ T30] audit: type=1802 audit(1752132246.187:2): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.33" res=0 errno=0 [ 114.132690][ T6121] netlink: 350 bytes leftover after parsing attributes in process `syz.0.36'. [ 114.686871][ T6135] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 114.759223][ T6135] bridge0: port 3(vlan1) entered blocking state [ 114.817925][ T6135] bridge0: port 3(vlan1) entered disabled state [ 114.861091][ T6135] vlan1: entered allmulticast mode [ 114.867725][ T6135] veth0_vlan: entered allmulticast mode [ 114.876169][ T6135] vlan1: entered promiscuous mode [ 114.882525][ T6135] bridge0: port 3(vlan1) entered blocking state [ 114.889464][ T6135] bridge0: port 3(vlan1) entered forwarding state [ 115.344171][ T6144] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 115.407379][ T6135] zswap: compressor not available [ 119.175084][ T6181] FAULT_INJECTION: forcing a failure. [ 119.175084][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 119.545352][ T6181] CPU: 1 UID: 0 PID: 6181 Comm: syz.2.48 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 119.545400][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.545427][ T6181] Call Trace: [ 119.545437][ T6181] [ 119.545449][ T6181] dump_stack_lvl+0x16c/0x1f0 [ 119.545502][ T6181] should_fail_ex+0x512/0x640 [ 119.545546][ T6181] ? __kmalloc_noprof+0xbf/0x510 [ 119.545595][ T6181] ? ops_init+0x77/0x5f0 [ 119.545639][ T6181] should_failslab+0xc2/0x120 [ 119.545669][ T6181] __kmalloc_noprof+0xd2/0x510 [ 119.545725][ T6181] ops_init+0x77/0x5f0 [ 119.545777][ T6181] setup_net+0x1ff/0x510 [ 119.545822][ T6181] ? lockdep_init_map_type+0x5c/0x280 [ 119.545867][ T6181] ? __pfx_setup_net+0x10/0x10 [ 119.545917][ T6181] ? debug_mutex_init+0x37/0x70 [ 119.545955][ T6181] copy_net_ns+0x2a6/0x5f0 [ 119.545991][ T6181] create_new_namespaces+0x3ea/0xa90 [ 119.546062][ T6181] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 119.546102][ T6181] ksys_unshare+0x45b/0xa40 [ 119.546147][ T6181] ? __pfx_ksys_unshare+0x10/0x10 [ 119.546190][ T6181] ? xfd_validate_state+0x61/0x180 [ 119.546268][ T6181] __x64_sys_unshare+0x31/0x40 [ 119.546309][ T6181] do_syscall_64+0xcd/0x490 [ 119.546364][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.546397][ T6181] RIP: 0033:0x7f0a4e18e929 [ 119.546432][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.546461][ T6181] RSP: 002b:00007f0a4f098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.546492][ T6181] RAX: ffffffffffffffda RBX: 00007f0a4e3b5fa0 RCX: 00007f0a4e18e929 [ 119.546512][ T6181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 119.546530][ T6181] RBP: 00007f0a4e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 119.546548][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.546567][ T6181] R13: 0000000000000000 R14: 00007f0a4e3b5fa0 R15: 00007fff439dad38 [ 119.546608][ T6181] [ 123.062448][ T6197] capability: warning: `syz.0.52' uses 32-bit capabilities (legacy support in use) [ 123.111881][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 123.203610][ T6197] HfR: entered promiscuous mode [ 125.890002][ T6240] syz.3.60(6240): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 126.348888][ T6242] netlink: 350 bytes leftover after parsing attributes in process `syz.3.61'. [ 126.426971][ T6244] netlink: 350 bytes leftover after parsing attributes in process `syz.0.62'. [ 128.669038][ T6276] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 128.713064][ T6276] Unable to find swap-space signature [ 130.631922][ T6298] FAULT_INJECTION: forcing a failure. [ 130.631922][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 130.646047][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.2.70 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 130.646092][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.646110][ T6298] Call Trace: [ 130.646132][ T6298] [ 130.646145][ T6298] dump_stack_lvl+0x16c/0x1f0 [ 130.646197][ T6298] should_fail_ex+0x512/0x640 [ 130.646241][ T6298] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 130.646293][ T6298] should_failslab+0xc2/0x120 [ 130.646322][ T6298] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 130.646376][ T6298] ? __d_alloc+0x31/0xaa0 [ 130.646420][ T6298] __d_alloc+0x31/0xaa0 [ 130.646474][ T6298] d_alloc_pseudo+0x1c/0xc0 [ 130.646510][ T6298] alloc_file_pseudo+0xcf/0x230 [ 130.646548][ T6298] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 130.646599][ T6298] __shmem_file_setup+0x1a3/0x330 [ 130.646645][ T6298] shmem_zero_setup+0x93/0x1a0 [ 130.646694][ T6298] __mmap_region+0x1ece/0x25e0 [ 130.646743][ T6298] ? __pfx___mmap_region+0x10/0x10 [ 130.646783][ T6298] ? rcu_is_watching+0x12/0xc0 [ 130.646816][ T6298] ? rcu_is_watching+0x12/0xc0 [ 130.646841][ T6298] ? trace_sched_exit_tp+0xde/0x130 [ 130.646871][ T6298] ? __schedule+0x1181/0x5de0 [ 130.646899][ T6298] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.646932][ T6298] ? __lock_acquire+0xb70/0x1c90 [ 130.646977][ T6298] ? __pfx___schedule+0x10/0x10 [ 130.647046][ T6298] ? trace_cap_capable+0x18d/0x200 [ 130.647082][ T6298] mmap_region+0x1ab/0x3f0 [ 130.647117][ T6298] ? __get_unmapped_area+0x267/0x440 [ 130.647232][ T6298] do_mmap+0xa3e/0x1210 [ 130.647266][ T6298] ? __pfx_do_mmap+0x10/0x10 [ 130.647294][ T6298] ? __pfx_down_write_killable+0x10/0x10 [ 130.647325][ T6298] vm_mmap_pgoff+0x281/0x450 [ 130.647357][ T6298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 130.647391][ T6298] ? __x64_sys_futex+0x1e0/0x4c0 [ 130.647420][ T6298] ? __x64_sys_futex+0x1e9/0x4c0 [ 130.647454][ T6298] ksys_mmap_pgoff+0x7d/0x5c0 [ 130.647479][ T6298] ? xfd_validate_state+0x61/0x180 [ 130.647509][ T6298] ? __pfx_ksys_write+0x10/0x10 [ 130.647546][ T6298] __x64_sys_mmap+0x125/0x190 [ 130.647585][ T6298] do_syscall_64+0xcd/0x490 [ 130.647623][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.647647][ T6298] RIP: 0033:0x7f0a4e18e929 [ 130.647669][ T6298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.647692][ T6298] RSP: 002b:00007f0a4f098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.647717][ T6298] RAX: ffffffffffffffda RBX: 00007f0a4e3b5fa0 RCX: 00007f0a4e18e929 [ 130.647732][ T6298] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 130.647747][ T6298] RBP: 00007f0a4e210b39 R08: 00000000000003ff R09: 0000000000008000 [ 130.647761][ T6298] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 130.647774][ T6298] R13: 0000000000000000 R14: 00007f0a4e3b5fa0 R15: 00007fff439dad38 [ 130.647807][ T6298] [ 131.332328][ T6298] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.797691][ T6304] random: crng reseeded on system resumption [ 132.632443][ T6312] netlink: 350 bytes leftover after parsing attributes in process `syz.1.72'. [ 133.006517][ T6321] netlink: 'syz.1.76': attribute type 11 has an invalid length. [ 133.032359][ T6321] netlink: 'syz.1.76': attribute type 11 has an invalid length. [ 133.044130][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.082572][ T6321] netlink: 67 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.101318][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.120331][ T6321] netlink: 200 bytes leftover after parsing attributes in process `syz.1.76'. [ 133.255283][ T6316] ima: policy update failed [ 133.290511][ T30] audit: type=1802 audit(1752132266.197:3): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.73" res=0 errno=0 [ 133.944416][ T6349] netlink: 'syz.0.79': attribute type 11 has an invalid length. [ 133.987833][ T6349] netlink: 'syz.0.79': attribute type 11 has an invalid length. [ 134.061002][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.128660][ T6349] netlink: 67 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.148676][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.159855][ T6349] netlink: 200 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.703390][ T6365] FAULT_INJECTION: forcing a failure. [ 134.703390][ T6365] name fail_futex, interval 1, probability 0, space 0, times 1 [ 134.740984][ T6365] CPU: 0 UID: 0 PID: 6365 Comm: syz.3.84 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 134.741029][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.741046][ T6365] Call Trace: [ 134.741055][ T6365] [ 134.741066][ T6365] dump_stack_lvl+0x16c/0x1f0 [ 134.741111][ T6365] should_fail_ex+0x512/0x640 [ 134.741157][ T6365] get_futex_key+0x1d0/0x1540 [ 134.741207][ T6365] ? __pfx_get_futex_key+0x10/0x10 [ 134.741241][ T6365] ? __pfx___schedule+0x10/0x10 [ 134.741289][ T6365] futex_wait_setup+0x84/0x510 [ 134.741340][ T6365] __futex_wait+0x194/0x2f0 [ 134.741383][ T6365] ? __pfx___futex_wait+0x10/0x10 [ 134.741430][ T6365] ? __pfx_futex_wake_mark+0x10/0x10 [ 134.741477][ T6365] ? plist_check_head+0xa3/0x150 [ 134.741509][ T6365] ? find_held_lock+0x2b/0x80 [ 134.741554][ T6365] futex_wait+0xe8/0x380 [ 134.741593][ T6365] ? __pfx_futex_wait+0x10/0x10 [ 134.741659][ T6365] do_futex+0x229/0x350 [ 134.741696][ T6365] ? __pfx_do_futex+0x10/0x10 [ 134.741737][ T6365] ? __pfx___might_resched+0x10/0x10 [ 134.741775][ T6365] __x64_sys_futex+0x1e0/0x4c0 [ 134.741815][ T6365] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 134.741855][ T6365] ? __pfx___x64_sys_futex+0x10/0x10 [ 134.741892][ T6365] ? xfd_validate_state+0x61/0x180 [ 134.741931][ T6365] ? __pfx_ksys_write+0x10/0x10 [ 134.741987][ T6365] do_syscall_64+0xcd/0x490 [ 134.742041][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.742072][ T6365] RIP: 0033:0x7f3cded8e929 [ 134.742095][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.742124][ T6365] RSP: 002b:00007f3cdfcab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.742152][ T6365] RAX: ffffffffffffffda RBX: 00007f3cdefb5fa8 RCX: 00007f3cded8e929 [ 134.742172][ T6365] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3cdefb5fa8 [ 134.742197][ T6365] RBP: 00007f3cdefb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 134.742215][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3cdefb5fac [ 134.742233][ T6365] R13: 0000000000000000 R14: 00007ffc7de95670 R15: 00007ffc7de95758 [ 134.742273][ T6365] [ 135.232757][ T6371] netlink: 350 bytes leftover after parsing attributes in process `syz.2.85'. [ 137.665927][ T6403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.251693][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.258863][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.413819][ T6404] kexec: Could not allocate control_code_buffer [ 139.838188][ T6415] zswap: compressor 000 not available [ 141.921351][ T6448] netlink: 350 bytes leftover after parsing attributes in process `syz.3.95'. [ 143.367098][ T6467] [U]  [ 143.370403][ T6467] [U] [ 143.373182][ T6467] [U] [ 143.375952][ T6467] [U] [ 143.471749][ T6469] [U] [ 146.719514][ T6516] random: crng reseeded on system resumption [ 150.804012][ T6549] netlink: 326 bytes leftover after parsing attributes in process `syz.2.120'. [ 151.837755][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 152.206072][ T6562] hub 8-0:1.0: USB hub found [ 152.263759][ T6562] hub 8-0:1.0: 1 port detected [ 153.600200][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 153.681438][ T6588] HfR: entered promiscuous mode [ 156.978201][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.138'. [ 161.391198][ T6698] netlink: 'syz.2.146': attribute type 11 has an invalid length. [ 161.457575][ T6698] netlink: 'syz.2.146': attribute type 11 has an invalid length. [ 161.485288][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.494404][ T6698] netlink: 67 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.514187][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.543557][ T6698] netlink: 200 bytes leftover after parsing attributes in process `syz.2.146'. [ 161.555417][ T6700] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 162.437158][ T6720] FAULT_INJECTION: forcing a failure. [ 162.437158][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 162.594688][ T6720] CPU: 1 UID: 0 PID: 6720 Comm: syz.1.150 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 162.594733][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.594752][ T6720] Call Trace: [ 162.594762][ T6720] [ 162.594774][ T6720] dump_stack_lvl+0x16c/0x1f0 [ 162.594824][ T6720] should_fail_ex+0x512/0x640 [ 162.594867][ T6720] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 162.594913][ T6720] should_failslab+0xc2/0x120 [ 162.594943][ T6720] __kmalloc_cache_noprof+0x6a/0x3e0 [ 162.594984][ T6720] ? snd_card_file_add+0x52/0x330 [ 162.595021][ T6720] snd_card_file_add+0x52/0x330 [ 162.595077][ T6720] snd_rawmidi_open+0x2cc/0xbf0 [ 162.595128][ T6720] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 162.595171][ T6720] ? kobject_get_unless_zero+0x156/0x1e0 [ 162.595217][ T6720] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 162.595253][ T6720] snd_open+0x1fe/0x450 [ 162.595296][ T6720] ? __pfx_snd_open+0x10/0x10 [ 162.595336][ T6720] chrdev_open+0x234/0x6a0 [ 162.595379][ T6720] ? __pfx_apparmor_file_open+0x10/0x10 [ 162.595415][ T6720] ? __pfx_chrdev_open+0x10/0x10 [ 162.595462][ T6720] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 162.595512][ T6720] do_dentry_open+0x741/0x1c10 [ 162.595559][ T6720] ? __pfx_chrdev_open+0x10/0x10 [ 162.595611][ T6720] vfs_open+0x82/0x3f0 [ 162.595646][ T6720] path_openat+0x1de4/0x2cb0 [ 162.595698][ T6720] ? __pfx_path_openat+0x10/0x10 [ 162.595738][ T6720] ? __lock_acquire+0xb8a/0x1c90 [ 162.595778][ T6720] do_filp_open+0x20b/0x470 [ 162.595815][ T6720] ? __pfx_do_filp_open+0x10/0x10 [ 162.595881][ T6720] ? alloc_fd+0x471/0x7d0 [ 162.595926][ T6720] do_sys_openat2+0x11b/0x1d0 [ 162.595955][ T6720] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.595999][ T6720] __x64_sys_openat+0x174/0x210 [ 162.596030][ T6720] ? __pfx___x64_sys_openat+0x10/0x10 [ 162.596074][ T6720] ? syscall_user_dispatch+0x78/0x140 [ 162.596129][ T6720] do_syscall_64+0xcd/0x490 [ 162.596171][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.596198][ T6720] RIP: 0033:0x7f0e3238e929 [ 162.596221][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.596248][ T6720] RSP: 002b:00007f0e331b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.596275][ T6720] RAX: ffffffffffffffda RBX: 00007f0e325b5fa0 RCX: 00007f0e3238e929 [ 162.596292][ T6720] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.596308][ T6720] RBP: 00007f0e32410b39 R08: 0000000000000000 R09: 0000000000000000 [ 162.596323][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.596339][ T6720] R13: 0000000000000000 R14: 00007f0e325b5fa0 R15: 00007ffffe8586d8 [ 162.596377][ T6720] [ 163.064831][ T6731] netlink: 326 bytes leftover after parsing attributes in process `syz.3.153'. [ 163.172160][ T30] audit: type=1800 audit(1752132424.865:4): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.152" name="features" dev="configfs" ino=10007 res=0 errno=0 [ 164.097963][ T6748] netlink: 'syz.3.158': attribute type 11 has an invalid length. [ 164.105875][ T6748] netlink: 'syz.3.158': attribute type 11 has an invalid length. [ 164.113877][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 164.135467][ T6748] netlink: 67 bytes leftover after parsing attributes in process `syz.3.158'. [ 164.144481][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 164.173835][ T6748] netlink: 200 bytes leftover after parsing attributes in process `syz.3.158'. [ 165.749003][ T6755] netlink: 354 bytes leftover after parsing attributes in process `syz.3.160'. [ 165.910448][ T6757] netlink: 504 bytes leftover after parsing attributes in process `syz.1.161'. [ 165.946560][ T6757] netlink: 350 bytes leftover after parsing attributes in process `syz.1.161'. [ 166.359352][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 167.539387][ T6774] zswap: compressor not available [ 167.983712][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 171.293594][ T6826] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13) [ 173.349140][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 173.519118][ T6850] netlink: zone id is out of range [ 173.524640][ T6850] netlink: zone id is out of range [ 173.565535][ T6850] netlink: zone id is out of range [ 173.579194][ T6850] netlink: zone id is out of range [ 173.644754][ T6850] netlink: zone id is out of range [ 173.684489][ T6850] netlink: zone id is out of range [ 173.746208][ T6850] netlink: zone id is out of range [ 173.751669][ T6850] netlink: zone id is out of range [ 174.089863][ T6850] netlink: zone id is out of range [ 174.095058][ T6850] netlink: zone id is out of range [ 174.289747][ T30] audit: type=1800 audit(1752132436.185:5): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.180" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 175.888862][ T6871] random: crng reseeded on system resumption [ 178.236139][ T6882] FAULT_INJECTION: forcing a failure. [ 178.236139][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 178.362169][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.3.184 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 178.362209][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.362225][ T6882] Call Trace: [ 178.362234][ T6882] [ 178.362245][ T6882] dump_stack_lvl+0x16c/0x1f0 [ 178.362294][ T6882] should_fail_ex+0x512/0x640 [ 178.362336][ T6882] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 178.362386][ T6882] should_failslab+0xc2/0x120 [ 178.362416][ T6882] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 178.362459][ T6882] ? d_instantiate+0x77/0x90 [ 178.362486][ T6882] ? alloc_empty_file+0x55/0x1e0 [ 178.362523][ T6882] alloc_empty_file+0x55/0x1e0 [ 178.362556][ T6882] alloc_file_pseudo+0x13a/0x230 [ 178.362591][ T6882] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 178.362626][ T6882] ? security_inode_init_security_anon+0x79/0x240 [ 178.362671][ T6882] __anon_inode_getfile+0xe8/0x280 [ 178.362711][ T6882] ? _copy_to_user+0x48/0xd0 [ 178.362761][ T6882] io_uring_setup+0x154d/0x2080 [ 178.362805][ T6882] ? __pfx_io_uring_setup+0x10/0x10 [ 178.362854][ T6882] ? __pfx___might_resched+0x10/0x10 [ 178.362904][ T6882] ? xfd_validate_state+0x61/0x180 [ 178.362955][ T6882] __x64_sys_io_uring_setup+0xc2/0x170 [ 178.362998][ T6882] do_syscall_64+0xcd/0x490 [ 178.363047][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.363088][ T6882] RIP: 0033:0x7f3cded8e929 [ 178.363112][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.363141][ T6882] RSP: 002b:00007f3cdfc8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 178.363170][ T6882] RAX: ffffffffffffffda RBX: 00007f3cdefb6080 RCX: 00007f3cded8e929 [ 178.363191][ T6882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 178.363209][ T6882] RBP: 00007f3cdee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 178.363227][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.363244][ T6882] R13: 0000000000000000 R14: 00007f3cdefb6080 R15: 00007ffc7de95758 [ 178.363284][ T6882] [ 183.103785][ T6930] netlink: 504 bytes leftover after parsing attributes in process `syz.3.192'. [ 183.124630][ T6930] netlink: 350 bytes leftover after parsing attributes in process `syz.3.192'. [ 183.608043][ T6940] netlink: 326 bytes leftover after parsing attributes in process `syz.2.196'. [ 184.334367][ T6947] netlink: 342 bytes leftover after parsing attributes in process `syz.0.198'. [ 184.485937][ T6947] cifs: Unknown parameter '€' [ 184.517071][ T6947] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 186.237411][ T3463] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 187.165579][ T6965] netlink: 342 bytes leftover after parsing attributes in process `syz.0.200'. [ 187.374543][ T6965] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 187.401012][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.416378][ T6965] CIFS mount error: No usable UNC path provided in device string! [ 187.416378][ T6965] [ 187.460048][ T6965] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 192.552447][ T7032] netlink: 504 bytes leftover after parsing attributes in process `syz.0.215'. [ 192.608400][ T7032] netlink: 350 bytes leftover after parsing attributes in process `syz.0.215'. [ 193.031921][ T7043] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 193.551433][ T7059] random: crng reseeded on system resumption [ 194.431530][ T7079] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 194.455198][ T7079] netlink: 'syz.2.225': attribute type 11 has an invalid length. [ 194.471984][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 194.488936][ T7079] netlink: 67 bytes leftover after parsing attributes in process `syz.2.225'. [ 194.503888][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 194.522593][ T7079] netlink: 200 bytes leftover after parsing attributes in process `syz.2.225'. [ 195.896186][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 196.262709][ T7111] hsr_slave_0 (unregistering): left promiscuous mode [ 197.562160][ T7132] random: crng reseeded on system resumption [ 198.362594][ T7146] netlink: 'syz.2.237': attribute type 11 has an invalid length. [ 198.385547][ T7146] netlink: 'syz.2.237': attribute type 11 has an invalid length. [ 198.392328][ T7148] ubi0: attaching mtd0 [ 198.393438][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 198.402996][ T7148] ubi0: scanning is finished [ 198.408621][ T7146] netlink: 67 bytes leftover after parsing attributes in process `syz.2.237'. [ 198.420713][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 198.425279][ T7148] ubi0: empty MTD device detected [ 198.429684][ T7146] netlink: 200 bytes leftover after parsing attributes in process `syz.2.237'. [ 198.694549][ T7148] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 198.751313][ T7148] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 198.830436][ T7148] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 198.866914][ T7148] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 198.916588][ T7148] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 198.962974][ T7148] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 199.015313][ T7148] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 919805209 [ 199.087994][ T7148] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 199.485368][ T7154] ubi0: background thread "ubi_bgt0d" started, PID 7154 [ 199.553830][ T7149] ubi0: detaching mtd0 [ 199.691898][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.698441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.754326][ T7149] ubi0: mtd0 is detached [ 201.485429][ T7192] random: crng reseeded on system resumption [ 202.162862][ T7213] netlink: 504 bytes leftover after parsing attributes in process `syz.1.255'. [ 202.182597][ T7212] FAULT_INJECTION: forcing a failure. [ 202.182597][ T7212] name failslab, interval 1, probability 0, space 0, times 0 [ 202.198990][ T7213] netlink: 350 bytes leftover after parsing attributes in process `syz.1.255'. [ 202.209575][ T7212] CPU: 1 UID: 0 PID: 7212 Comm: syz.0.254 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 202.209619][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.209637][ T7212] Call Trace: [ 202.209647][ T7212] [ 202.209659][ T7212] dump_stack_lvl+0x16c/0x1f0 [ 202.209710][ T7212] should_fail_ex+0x512/0x640 [ 202.209754][ T7212] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 202.209804][ T7212] should_failslab+0xc2/0x120 [ 202.209833][ T7212] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 202.209880][ T7212] ? do_epoll_ctl+0x10ef/0x2ff0 [ 202.209936][ T7212] do_epoll_ctl+0x10ef/0x2ff0 [ 202.209992][ T7212] ? __pfx_do_epoll_ctl+0x10/0x10 [ 202.210027][ T7212] ? find_held_lock+0x2b/0x80 [ 202.210057][ T7212] ? __might_fault+0xe3/0x190 [ 202.210100][ T7212] ? __might_fault+0xe3/0x190 [ 202.210192][ T7212] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 202.210223][ T7212] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 202.210264][ T7212] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 202.210320][ T7212] do_syscall_64+0xcd/0x490 [ 202.210369][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.210401][ T7212] RIP: 0033:0x7fe20bb8e929 [ 202.210425][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.210455][ T7212] RSP: 002b:00007fe2099f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 202.210485][ T7212] RAX: ffffffffffffffda RBX: 00007fe20bdb5fa0 RCX: 00007fe20bb8e929 [ 202.210505][ T7212] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 202.210522][ T7212] RBP: 00007fe20bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.210540][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.210557][ T7212] R13: 0000000000000000 R14: 00007fe20bdb5fa0 R15: 00007ffcea90e268 [ 202.210599][ T7212] [ 202.591833][ T7219] net_ratelimit: 21 callbacks suppressed [ 202.591859][ T7219] netlink: zone id is out of range [ 202.605575][ T7219] netlink: del zone limit has 4 unknown bytes [ 202.621563][ T7212] netlink: set zone limit has 8 unknown bytes [ 202.766997][ T7224] netlink: 'syz.0.258': attribute type 11 has an invalid length. [ 202.775392][ T7224] netlink: 'syz.0.258': attribute type 11 has an invalid length. [ 202.783273][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 202.844123][ T7224] netlink: 67 bytes leftover after parsing attributes in process `syz.0.258'. [ 202.866417][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 202.878632][ T7224] netlink: 200 bytes leftover after parsing attributes in process `syz.0.258'. [ 203.148276][ T7230] block nbd0: Unsupported socket: shutdown callout must be supported. [ 203.308392][ T7238] syz.0.263: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.329033][ T7238] CPU: 1 UID: 0 PID: 7238 Comm: syz.0.263 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 203.329081][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.329097][ T7238] Call Trace: [ 203.329106][ T7238] [ 203.329116][ T7238] dump_stack_lvl+0x16c/0x1f0 [ 203.329161][ T7238] warn_alloc+0x248/0x3a0 [ 203.329205][ T7238] ? __pfx_warn_alloc+0x10/0x10 [ 203.329259][ T7238] ? __do_sys_listmount+0x1c2/0xec0 [ 203.329293][ T7238] ? __vmalloc_node_noprof+0xad/0xf0 [ 203.329334][ T7238] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 203.329383][ T7238] ? __do_sys_listmount+0x1c2/0xec0 [ 203.329416][ T7238] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 203.329457][ T7238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.329494][ T7238] ? __alloc_pages_noprof+0xb/0x1b0 [ 203.329532][ T7238] ? ___kmalloc_large_node+0x84/0x1e0 [ 203.329561][ T7238] ? find_held_lock+0x2b/0x80 [ 203.329597][ T7238] __kvmalloc_node_noprof+0x30a/0x620 [ 203.329636][ T7238] ? __do_sys_listmount+0x1c2/0xec0 [ 203.329670][ T7238] ? __do_sys_listmount+0x1c2/0xec0 [ 203.329709][ T7238] ? __do_sys_listmount+0x1c2/0xec0 [ 203.329740][ T7238] __do_sys_listmount+0x1c2/0xec0 [ 203.329781][ T7238] ? __x64_sys_futex+0x1e0/0x4c0 [ 203.329813][ T7238] ? __x64_sys_futex+0x1e9/0x4c0 [ 203.329848][ T7238] ? __pfx___do_sys_listmount+0x10/0x10 [ 203.329882][ T7238] ? fdget_pos+0x2b8/0x370 [ 203.329922][ T7238] ? __pfx___x64_sys_futex+0x10/0x10 [ 203.329954][ T7238] ? ksys_read+0x1ac/0x250 [ 203.330009][ T7238] do_syscall_64+0xcd/0x490 [ 203.330063][ T7238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.330091][ T7238] RIP: 0033:0x7fe20bb8e929 [ 203.330115][ T7238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.330142][ T7238] RSP: 002b:00007fe2099f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 203.330168][ T7238] RAX: ffffffffffffffda RBX: 00007fe20bdb5fa0 RCX: 00007fe20bb8e929 [ 203.330187][ T7238] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000240 [ 203.330204][ T7238] RBP: 00007fe20bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 203.330221][ T7238] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 203.330237][ T7238] R13: 0000000000000000 R14: 00007fe20bdb5fa0 R15: 00007ffcea90e268 [ 203.330275][ T7238] [ 203.330285][ T7238] Mem-Info: [ 203.583654][ T7238] active_anon:8557 inactive_anon:0 isolated_anon:0 [ 203.583654][ T7238] active_file:15625 inactive_file:43402 isolated_file:0 [ 203.583654][ T7238] unevictable:1632 dirty:4299 writeback:0 [ 203.583654][ T7238] slab_reclaimable:10745 slab_unreclaimable:95409 [ 203.583654][ T7238] mapped:27193 shmem:1392 pagetables:1115 [ 203.583654][ T7238] sec_pagetables:0 bounce:0 [ 203.583654][ T7238] kernel_misc_reclaimable:0 [ 203.583654][ T7238] free:1309416 free_pcp:15678 free_cma:0 [ 203.633746][ T7238] Node 0 active_anon:34228kB inactive_anon:0kB active_file:62500kB inactive_file:173468kB unevictable:4992kB isolated(anon):0kB isolated(file):0kB mapped:108772kB dirty:17196kB writeback:0kB shmem:4032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11668kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.668013][ T7238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.740861][ T7238] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.773649][ T7238] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 203.779778][ T7238] Node 0 DMA32 free:1328492kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34180kB inactive_anon:0kB active_file:62280kB inactive_file:172168kB unevictable:5192kB writepending:17296kB present:3129332kB managed:2540352kB mlocked:3756kB bounce:0kB free_pcp:36544kB local_pcp:17276kB free_cma:0kB [ 203.813554][ T7238] lowmem_reserve[]: 0 0 1 1 1 [ 203.818565][ T7238] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:20kB inactive_file:1300kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 203.849780][ T7238] lowmem_reserve[]: 0 0 0 0 0 [ 203.854591][ T7238] Node 1 Normal free:3893804kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:27944kB local_pcp:15048kB free_cma:0kB [ 203.891700][ T7238] lowmem_reserve[]: 0 0 0 0 0 [ 203.897114][ T7238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.935163][ T7238] Node 0 DMA32: 1864*4kB (UME) 1328*8kB (UME) 1059*16kB (UM) 858*32kB (UME) 530*64kB (UME) 216*128kB (UME) 95*256kB (UM) 51*512kB (ME) 9*1024kB (M) 2*2048kB (UM) 279*4096kB (M) = 1330576kB [ 203.975439][ T7238] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 204.003176][ T7238] Node 1 Normal: 166*4kB (UME) 61*8kB (UME) 42*16kB (UME) 96*32kB (UME) 35*64kB (UME) 9*128kB (UME) 2*256kB (ME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3893856kB [ 204.065228][ T7238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.075038][ T7238] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 204.089073][ T7238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.100177][ T7238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.119356][ T7238] 61486 total pagecache pages [ 204.124389][ T7238] 0 pages in swap cache [ 204.129692][ T7238] Free swap = 124996kB [ 204.138108][ T7238] Total swap = 124996kB [ 204.184682][ T7238] 2097051 pages RAM [ 204.188915][ T7238] 0 pages HighMem/MovableOnly [ 204.193765][ T7238] 429985 pages reserved [ 204.203343][ T7238] 0 pages cma reserved [ 204.404787][ T7254] netlink: 504 bytes leftover after parsing attributes in process `syz.0.265'. [ 204.422592][ T7254] netlink: 350 bytes leftover after parsing attributes in process `syz.0.265'. [ 205.589084][ T7281] tipc: Started in network mode [ 205.604845][ T7281] tipc: Node identity ee00, cluster identity 4711 [ 205.622374][ T7281] tipc: Node number set to 60928 [ 205.659913][ T7281] FAULT_INJECTION: forcing a failure. [ 205.659913][ T7281] name failslab, interval 1, probability 0, space 0, times 0 [ 205.684747][ T7281] CPU: 0 UID: 0 PID: 7281 Comm: syz.0.273 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 205.684792][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.684809][ T7281] Call Trace: [ 205.684819][ T7281] [ 205.684830][ T7281] dump_stack_lvl+0x16c/0x1f0 [ 205.684878][ T7281] should_fail_ex+0x512/0x640 [ 205.684918][ T7281] ? __kmalloc_noprof+0xbf/0x510 [ 205.684965][ T7281] ? __register_sysctl_table+0xea2/0x1900 [ 205.685008][ T7281] should_failslab+0xc2/0x120 [ 205.685037][ T7281] __kmalloc_noprof+0xd2/0x510 [ 205.685077][ T7281] ? __register_sysctl_table+0xe8e/0x1900 [ 205.685134][ T7281] __register_sysctl_table+0xea2/0x1900 [ 205.685190][ T7281] ? __pfx___register_sysctl_table+0x10/0x10 [ 205.685253][ T7281] ? __asan_memcpy+0x3c/0x60 [ 205.685298][ T7281] register_pidns_sysctls+0x119/0x1b0 [ 205.685352][ T7281] copy_pid_ns+0x564/0xce0 [ 205.685388][ T7281] ? __pfx_copy_pid_ns+0x10/0x10 [ 205.685423][ T7281] ? copy_mnt_ns+0xac/0xac0 [ 205.685466][ T7281] ? trace_kmem_cache_alloc+0x28/0xc0 [ 205.685496][ T7281] ? trace_cap_capable+0x18d/0x200 [ 205.685525][ T7281] ? copy_ipcs+0xb6/0x610 [ 205.685562][ T7281] create_new_namespaces+0x2aa/0xa90 [ 205.685608][ T7281] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 205.685648][ T7281] ksys_unshare+0x45b/0xa40 [ 205.685690][ T7281] ? __pfx_ksys_unshare+0x10/0x10 [ 205.685733][ T7281] ? xfd_validate_state+0x61/0x180 [ 205.685805][ T7281] __x64_sys_unshare+0x31/0x40 [ 205.685847][ T7281] do_syscall_64+0xcd/0x490 [ 205.685896][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.685927][ T7281] RIP: 0033:0x7fe20bb8e929 [ 205.685953][ T7281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.685980][ T7281] RSP: 002b:00007fe2099f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 205.686010][ T7281] RAX: ffffffffffffffda RBX: 00007fe20bdb5fa0 RCX: 00007fe20bb8e929 [ 205.686030][ T7281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 205.686048][ T7281] RBP: 00007fe20bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 205.686065][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.686082][ T7281] R13: 0000000000000000 R14: 00007fe20bdb5fa0 R15: 00007ffcea90e268 [ 205.686122][ T7281] [ 205.965322][ T7281] sysctl could not get directory: /kernel -12 [ 206.102090][ T7287] FAULT_INJECTION: forcing a failure. [ 206.102090][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 206.130634][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.0.275 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 206.130677][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.130694][ T7287] Call Trace: [ 206.130703][ T7287] [ 206.130715][ T7287] dump_stack_lvl+0x16c/0x1f0 [ 206.130764][ T7287] should_fail_ex+0x512/0x640 [ 206.130812][ T7287] _copy_to_user+0x32/0xd0 [ 206.130861][ T7287] simple_read_from_buffer+0xcb/0x170 [ 206.130911][ T7287] proc_fail_nth_read+0x197/0x270 [ 206.130948][ T7287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.130987][ T7287] ? rw_verify_area+0xcf/0x680 [ 206.131032][ T7287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.131067][ T7287] vfs_read+0x1e1/0xc60 [ 206.131114][ T7287] ? __pfx___mutex_lock+0x10/0x10 [ 206.131158][ T7287] ? __pfx_vfs_read+0x10/0x10 [ 206.131210][ T7287] ? __fget_files+0x20e/0x3c0 [ 206.131261][ T7287] ksys_read+0x12a/0x250 [ 206.131301][ T7287] ? __pfx_ksys_read+0x10/0x10 [ 206.131353][ T7287] do_syscall_64+0xcd/0x490 [ 206.131400][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.131430][ T7287] RIP: 0033:0x7fe20bb8d33c [ 206.131453][ T7287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.131481][ T7287] RSP: 002b:00007fe2099f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.131509][ T7287] RAX: ffffffffffffffda RBX: 00007fe20bdb5fa0 RCX: 00007fe20bb8d33c [ 206.131528][ T7287] RDX: 000000000000000f RSI: 00007fe2099f60a0 RDI: 0000000000000005 [ 206.131545][ T7287] RBP: 00007fe2099f6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.131563][ T7287] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 206.131579][ T7287] R13: 0000000000000000 R14: 00007fe20bdb5fa0 R15: 00007ffcea90e268 [ 206.131618][ T7287] [ 207.124831][ T7305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.520024][ T7313] netlink: 'syz.1.281': attribute type 11 has an invalid length. [ 207.555324][ T7313] netlink: 'syz.1.281': attribute type 11 has an invalid length. [ 207.563384][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 207.584456][ T7313] netlink: 67 bytes leftover after parsing attributes in process `syz.1.281'. [ 207.595521][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 207.604518][ T7313] netlink: 200 bytes leftover after parsing attributes in process `syz.1.281'. [ 208.289519][ T7325] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 208.997984][ T7322] ima: policy update failed [ 209.002758][ T30] audit: type=1802 audit(1752132470.905:6): pid=7322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.284" res=0 errno=0 [ 209.758094][ T7349] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 210.399832][ T7359] netlink: 'syz.1.292': attribute type 11 has an invalid length. [ 210.465470][ T7359] netlink: 'syz.1.292': attribute type 11 has an invalid length. [ 210.473292][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 210.533322][ T7359] netlink: 67 bytes leftover after parsing attributes in process `syz.1.292'. [ 210.665293][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 210.674261][ T7359] netlink: 200 bytes leftover after parsing attributes in process `syz.1.292'. [ 210.996070][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.006632][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.018309][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.048583][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.065728][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.496615][ T7371] random: crng reseeded on system resumption [ 211.523195][ T7372] bridge0: port 4(batadv0) entered blocking state [ 211.694006][ T5847] ------------[ cut here ]------------ [ 211.699660][ T5847] ODEBUG: free active (active state 0) object: ffff88807bf79318 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 211.718466][ T5847] WARNING: CPU: 0 PID: 5847 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 211.728219][ T5847] Modules linked in: [ 211.732166][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 211.744503][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.755550][ T5847] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 211.761504][ T5847] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 89 15 8c 4c 89 e6 48 c7 c7 40 7e 15 8c e8 1f 68 9c fc 90 <0f> 0b 90 90 58 83 05 d6 84 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 211.781467][ T5847] RSP: 0018:ffffc9000406f768 EFLAGS: 00010286 [ 211.787911][ T5847] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 211.796111][ T5847] RDX: ffff88802cd95a00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 211.804417][ T5847] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 211.805976][ T7372] bridge0: port 4(batadv0) entered disabled state [ 211.812509][ T5847] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1584e0 [ 211.829700][ T5847] R13: ffffffff8baff080 R14: ffffffff8a8fb0c0 R15: ffffc9000406f868 [ 211.838169][ T5847] FS: 0000000000000000(0000) GS:ffff888124721000(0000) knlGS:0000000000000000 [ 211.847321][ T5847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.854148][ T5847] CR2: 00007f0a4eff2f98 CR3: 00000000754cc000 CR4: 00000000003526f0 [ 211.862344][ T5847] Call Trace: [ 211.865822][ T5847] [ 211.868888][ T5847] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 211.874600][ T5847] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 211.880879][ T5847] debug_check_no_obj_freed+0x4b7/0x600 [ 211.886817][ T5847] ? __pfx_debug_check_no_obj_freed+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.892951][ T5847] ? rcu_is_watching+0x12/0xc0 [ 211.897879][ T5847] ? kmem_cache_free+0x2d1/0x4d0 [ 211.902989][ T5847] kfree+0x28f/0x4d0 [ 211.907050][ T5847] ? hci_release_dev+0x4d8/0x600 [ 211.912043][ T5847] hci_release_dev+0x4d8/0x600 [ 211.918380][ T5847] ? __pfx_hci_release_dev+0x10/0x10 [ 211.923740][ T5847] ? rcu_is_watching+0x12/0xc0 [ 211.929730][ T5847] ? kfree+0x24f/0x4d0 [ 211.933965][ T5847] bt_host_release+0x6a/0xb0 [ 211.938767][ T5847] ? __pfx_bt_host_release+0x10/0x10 [ 211.944125][ T5847] device_release+0xa4/0x240 [ 211.948864][ T5847] kobject_put+0x1e7/0x5a0 [ 211.953400][ T5847] ? __pfx_vhci_release+0x10/0x10 [ 211.958688][ T5847] put_device+0x1f/0x30 [ 211.962892][ T5847] vhci_release+0x81/0xf0 [ 211.967348][ T5847] __fput+0x402/0xb70 [ 211.971392][ T5847] task_work_run+0x150/0x240 [ 211.976132][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 211.981335][ T5847] do_exit+0x86c/0x2bd0 [ 211.985705][ T5847] ? find_held_lock+0x2b/0x80 [ 211.990404][ T5847] ? __pfx_do_exit+0x10/0x10 [ 211.995269][ T5847] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.000667][ T5847] ? find_held_lock+0x2b/0x80 [ 212.005492][ T5847] do_group_exit+0xd3/0x2a0 [ 212.010472][ T5847] get_signal+0x2673/0x26d0 [ 212.015217][ T5847] ? __pfx_get_signal+0x10/0x10 [ 212.020888][ T5847] ? __do_sys_wait4+0xd1/0x170 [ 212.026369][ T5847] arch_do_signal_or_restart+0x8f/0x790 [ 212.032038][ T5847] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.038313][ T5847] ? __pfx_fput_close_sync+0x10/0x10 [ 212.043629][ T5847] ? dnotify_flush+0xa9/0x4c0 [ 212.048388][ T5847] exit_to_user_mode_loop+0x84/0x110 [ 212.053709][ T5847] do_syscall_64+0x3f6/0x490 [ 212.058360][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.064391][ T5847] RIP: 0033:0x7f3cded84b97 [ 212.068885][ T5847] Code: Unable to access opcode bytes at 0x7f3cded84b6d. [ 212.076126][ T5847] RSP: 002b:00007ffc7de95ab0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 212.084826][ T5847] RAX: fffffffffffffe00 RBX: 00000000000000ef RCX: 00007f3cded84b97 [ 212.092956][ T5847] RDX: 0000000040000000 RSI: 00007ffc7de95b1c RDI: 00000000ffffffff [ 212.101099][ T5847] RBP: 00007ffc7de95b1c R08: 0000000000000000 R09: 0000000000000000 [ 212.109238][ T5847] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000003b [ 212.117272][ T5847] R13: 000055558912d590 R14: 000000000002fab6 R15: 00007ffc7de95b70 [ 212.125980][ T5847] [ 212.129014][ T5847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.136308][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 212.148557][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.158711][ T5847] Call Trace: [ 212.162170][ T5847] [ 212.165237][ T5847] dump_stack_lvl+0x3d/0x1f0 [ 212.169900][ T5847] panic+0x71c/0x800 [ 212.173821][ T5847] ? __pfx_panic+0x10/0x10 [ 212.178292][ T5847] ? show_trace_log_lvl+0x29b/0x3e0 [ 212.183520][ T5847] ? check_panic_on_warn+0x1f/0xb0 [ 212.188653][ T5847] ? debug_print_object+0x1a2/0x2b0 [ 212.194131][ T5847] check_panic_on_warn+0xab/0xb0 [ 212.199192][ T5847] __warn+0xf6/0x3c0 [ 212.203116][ T5847] ? debug_print_object+0x1a2/0x2b0 [ 212.208324][ T5847] report_bug+0x3c3/0x580 [ 212.212675][ T5847] ? debug_print_object+0x1a2/0x2b0 [ 212.217934][ T5847] handle_bug+0x184/0x210 [ 212.222304][ T5847] exc_invalid_op+0x17/0x50 [ 212.226842][ T5847] asm_exc_invalid_op+0x1a/0x20 [ 212.231793][ T5847] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 212.237630][ T5847] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd c0 89 15 8c 4c 89 e6 48 c7 c7 40 7e 15 8c e8 1f 68 9c fc 90 <0f> 0b 90 90 58 83 05 d6 84 cb 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 212.257524][ T5847] RSP: 0018:ffffc9000406f768 EFLAGS: 00010286 [ 212.263632][ T5847] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ab108 [ 212.271645][ T5847] RDX: ffff88802cd95a00 RSI: ffffffff817ab115 RDI: 0000000000000001 [ 212.279662][ T5847] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 212.287745][ T5847] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1584e0 [ 212.295740][ T5847] R13: ffffffff8baff080 R14: ffffffff8a8fb0c0 R15: ffffc9000406f868 [ 212.303741][ T5847] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 212.309340][ T5847] ? __warn_printk+0x198/0x350 [ 212.314148][ T5847] ? __warn_printk+0x1a5/0x350 [ 212.318957][ T5847] ? debug_print_object+0x1a1/0x2b0 [ 212.324267][ T5847] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 212.329854][ T5847] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 212.335740][ T5847] debug_check_no_obj_freed+0x4b7/0x600 [ 212.341326][ T5847] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 212.347423][ T5847] ? rcu_is_watching+0x12/0xc0 [ 212.352251][ T5847] ? kmem_cache_free+0x2d1/0x4d0 [ 212.357263][ T5847] kfree+0x28f/0x4d0 [ 212.361197][ T5847] ? hci_release_dev+0x4d8/0x600 [ 212.366175][ T5847] hci_release_dev+0x4d8/0x600 [ 212.370977][ T5847] ? __pfx_hci_release_dev+0x10/0x10 [ 212.376314][ T5847] ? rcu_is_watching+0x12/0xc0 [ 212.381119][ T5847] ? kfree+0x24f/0x4d0 [ 212.385229][ T5847] bt_host_release+0x6a/0xb0 [ 212.389875][ T5847] ? __pfx_bt_host_release+0x10/0x10 [ 212.395204][ T5847] device_release+0xa4/0x240 [ 212.399826][ T5847] kobject_put+0x1e7/0x5a0 [ 212.404301][ T5847] ? __pfx_vhci_release+0x10/0x10 [ 212.409389][ T5847] put_device+0x1f/0x30 [ 212.413679][ T5847] vhci_release+0x81/0xf0 [ 212.418061][ T5847] __fput+0x402/0xb70 [ 212.422079][ T5847] task_work_run+0x150/0x240 [ 212.426708][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 212.431962][ T5847] do_exit+0x86c/0x2bd0 [ 212.436156][ T5847] ? find_held_lock+0x2b/0x80 [ 212.440869][ T5847] ? __pfx_do_exit+0x10/0x10 [ 212.445582][ T5847] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.450643][ T5847] ? find_held_lock+0x2b/0x80 [ 212.455350][ T5847] do_group_exit+0xd3/0x2a0 [ 212.459889][ T5847] get_signal+0x2673/0x26d0 [ 212.464433][ T5847] ? __pfx_get_signal+0x10/0x10 [ 212.469405][ T5847] ? __do_sys_wait4+0xd1/0x170 [ 212.474555][ T5847] arch_do_signal_or_restart+0x8f/0x790 [ 212.480225][ T5847] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.486418][ T5847] ? __pfx_fput_close_sync+0x10/0x10 [ 212.491730][ T5847] ? dnotify_flush+0xa9/0x4c0 [ 212.496625][ T5847] exit_to_user_mode_loop+0x84/0x110 [ 212.501962][ T5847] do_syscall_64+0x3f6/0x490 [ 212.506679][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.512720][ T5847] RIP: 0033:0x7f3cded84b97 [ 212.517170][ T5847] Code: Unable to access opcode bytes at 0x7f3cded84b6d. [ 212.524207][ T5847] RSP: 002b:00007ffc7de95ab0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 212.532665][ T5847] RAX: fffffffffffffe00 RBX: 00000000000000ef RCX: 00007f3cded84b97 [ 212.540844][ T5847] RDX: 0000000040000000 RSI: 00007ffc7de95b1c RDI: 00000000ffffffff [ 212.548878][ T5847] RBP: 00007ffc7de95b1c R08: 0000000000000000 R09: 0000000000000000 [ 212.556961][ T5847] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000003b [ 212.565341][ T5847] R13: 000055558912d590 R14: 000000000002fab6 R15: 00007ffc7de95b70 [ 212.573484][ T5847] [ 212.576816][ T5847] Kernel Offset: disabled [ 212.581161][ T5847] Rebooting in 86400 seconds..