last executing test programs: 4m50.047295201s ago: executing program 2 (id=356): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socketpair$auto(0x1e, 0x800, 0x1, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r2) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$auto(r1, 0xc0585611, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 4m49.832207942s ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0xfffd, 0x0, 0x240000c1}, 0x2400c0d0) 4m49.339055388s ago: executing program 2 (id=360): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_MEMREADOOB(r4, 0xc0104d04, &(0x7f00000015c0)={0x5, 0x5, &(0x7f0000001580)='%\x00'}) r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) write$auto(r5, 0x0, 0x100000a3d9) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) read$auto(r7, &(0x7f0000000040)='\x14\xff\x13\xbd\xffX)\xca\x03', 0x1fe) ioctl$auto(0x4000000000000c8, 0x400454d8, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r6], 0x1ac}}, 0x40000) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r5, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x5}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4) ioctl$auto_BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001300)={0x5, "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", 0x100000000, 0x1000, 0x100000001, 0x101, "e613ea7af7e094d73f1c6bf4c70f3d76", "09abe859d420af6f71a54eb248766643", "f6025b4a851434d8b6be9c8db19f8446", 0x2c8, 0x6, 0xffff, 0x101, {0x7}, {0xb02, 0x4}, {0xfffffffffffffff9}, {0x4, 0xd989}, [0x7, 0x1, 0x9, 0x79f, 0x8000, 0xf9d, 0x8, 0xce89]}) ioctl$auto(r2, 0x560d, 0x7) r8 = clone3$auto(&(0x7f0000001500)={0xc, 0xd5, 0x74, 0x5, 0x749d, 0x8, 0x0, 0x3, 0x9, 0x40, 0x3}, 0x3) shmctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000001180)={{0x6, 0xee00, 0xee00, 0x1000, 0x0, 0x7fffffff, 0x1}, 0x1, 0x7, 0x2e9a, 0x101, @inferred=r8, @raw=0x5, 0x1ff, 0x0, &(0x7f0000000080)="f2454f254b1c3ebf395f6a89a71505fef829a8dd667bfbe4c9315c73c9c943abe0d9fcf7c6594a1b66f3fc4f92d496da6d03208dea1a7a0414eb5dd43e883b01235b9afd65e50582324045dd027e27c3ef528b864bf78db30fbe74014f22d7c822517f2f34f1459ab4df56f3cce2016cc119bafb76fcd1892447d400756a3b8ae1b5b00c6b75d89d3980a5199b9c0ab38025a8f8da3eed38a16d95c79510fe8c9228856a2fdcaf876cd88baea93027cebe790f5cb47da513a4a0f8c20aef143557b5c2ae7b31142bdbcd6494fc8f9ac9ddbec514fed9cd5760046319d1d8", &(0x7f0000000180)="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"}) keyctl$auto(0x3, 0xfffffffffffffffd, r9, r10, 0x100000000) r11 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) read$auto(r11, &(0x7f0000000040)='\x00', 0x7) 4m47.998304021s ago: executing program 2 (id=366): r0 = socket(0xa, 0x2, 0x88) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r4 = socket(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r6, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="cc002d8004004d800400df8008", @ANYRES32=r5, @ANYBLOB="b300e4"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x9}, 0x2, 0x20000000) r8 = getpgrp(0xffffffffffffffff) fcntl$auto_F_SETOWN(r4, 0x8, r8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r3, 0x200, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) r10 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r11 = memfd_create$auto(&(0x7f0000000180)='\\([(*\x00', 0x8) sendmmsg$auto(r11, &(0x7f0000000440)={{&(0x7f00000001c0)="3a9b246c1c65d0e75508d7b3a22281a6915346467482d7300b565213b153a4891ac25cfce488f792c5ab49a5d7731bdc7e408108ad595de064ce1648a836ee3393694e912f8185b531079fffdcc275de7ec211258a23a8881c1e8e7eb5ca148d1c0bb93e87286f949e78867302e965e7191ac34c3fa164812c336614303c0c32a1c4471c9c23064d7578247571a7c09155e84ec21b6151251f", 0x1, &(0x7f00000003c0)={&(0x7f0000000300)="96c7fdc536aa09340aff672c5d03fc3febbf146a9eb18446e35f91b82b08b58fbf22291fd0def6ff24657576f0681ba27de7d66acf5a8aaefe3970878b4fb8216bf45bdd8adb0fbed22b7e39f8e63c4a69b6c4458523d4c5449fde249984b0ecfe43135163e0f590b55ffabc44be67a0fa990155801d3634c2a6ce7746178c21fbf2cf746cf02574728ce8ba4fdb5520d9cd55", 0x788}, 0x100000000, &(0x7f0000000400)="c72c1e98f0928b5f8830329c4eb32f7f7c048d3a038feb5a5e8d46123493d7", 0x493c8000000, 0x7}}, 0x3, 0x9b) write$auto_console_fops_tty_io(r10, &(0x7f0000000840)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba7aa1995d92e1d0ae2ef23f241bb2bfd9800e9b3b6d", 0x2b) 4m47.782206657s ago: executing program 2 (id=369): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy8/short_retry_limit\x00', 0x40000, 0x0) close_range$auto(0x2, r0, 0x17) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x8000, 0x1, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0xc0585611, r2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 4m47.290116599s ago: executing program 2 (id=372): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r1, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) mlock$auto(0xfff, 0xde7f) mlockall$auto(0x800000000000005) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0xe, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) ptrace$auto(0x10, r0, 0x4, 0x7ff) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) 4m47.200375631s ago: executing program 32 (id=372): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r1, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) mlock$auto(0xfff, 0xde7f) mlockall$auto(0x800000000000005) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0xe, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0xd) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) ptrace$auto(0x10, r0, 0x4, 0x7ff) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) 1m18.872654867s ago: executing program 0 (id=1273): mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x9, &(0x7f0000000000)={0x50, 0xf4, 0xb0}}) write$auto(0x3, 0x0, 0xfdef) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) 1m17.75440928s ago: executing program 0 (id=1281): mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0xd, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) (async) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x8, 0x6, 0xd4, 0xffffffffffffffff, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) (async) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) (async) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r3, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigpoll={0x200, r0}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x224, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) (async) r4 = waitid$auto_P_PGID(0x2, r3, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigpoll={0x200, r0}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x224, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r5, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r6 = socket(0x15, 0x5, 0x0) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000001b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf2504000000050009000400000013090780f30144800c003e00000000000000000014003d00fc02000000000000000000000000000004003a800800c000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="d4011080007ecb471ab7d608ace3cad2edea20e082048604bc3f7d518df0968ca51c0ace0a1ad25106fc04000980357176ce69965e9ddd9f1127cb0b80c4e20a8bb76172f530fdd390f5fe8f08c35261a9151a21dc924b48869f22f6395bcb6fa21ee841e535602aadbc9bb7bc5c0f24e675680e45bcbed5767f7380fafbfb400fb629895346cd6729f002d5b18908a07d7d2937d87f3ef9fee5e2487cc29b0eedda0b1a9ebc375cb9457fc566b1e20bd387012e6a01afd7081f086261fd1c3e3eb9412133e34b7dd00ec267b815926a394999cfbe212a50a44e3c5e03fd64099d3ff88708097d433fa2db4baf065e7a5dfe583ee76ddc66a3becfffb5e740775bccb67b059e28abfb0fe082ba5d76b22b1d4f89011c7f80f8a2bedbaff7a326040022800b7901636f6b01518e4156736fda018cef0af4c654691d1e95bc238ca4091e0579a6a64f0edc25ecedb61ccc4f161c8d145aaa39d13b2f83ac7844871ad00f028d8d98c1073f6624a06acea7c67703285dcb9215f0e1fc2567789a5668a34c4cdc604b993fc66bdb3c81bb94bcc925c8f17be18f2656c165caca607a142bc8462efd38a85778ad425af16ae5d421140f5adc148abed9e261437d076d6ae1f3dd4fb75e60cf59bf9d8c4caaadf5e9a2a1050075000000000004000e80480010800800d900", @ANYRES32=0x0, @ANYBLOB="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"], 0x950}, 0x1, 0x0, 0x0, 0x8884}, 0x40880) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000001b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf2504000000050009000400000013090780f30144800c003e00000000000000000014003d00fc02000000000000000000000000000004003a800800c000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x950}, 0x1, 0x0, 0x0, 0x8884}, 0x40880) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r8, 0x0, 0x4000) read$auto(r7, 0x0, 0xb4d3) (async) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) fspick$auto(0xffffffffffffffff, 0x0, 0x6) 1m17.661506785s ago: executing program 1 (id=1282): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sigaltstack$auto(&(0x7f0000000140)={0x0, 0x80000000, 0x800000000dd}, 0x0) (async) sigaltstack$auto(&(0x7f0000000140)={0x0, 0x80000000, 0x800000000dd}, 0x0) r0 = getpid() r1 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0xc2040, 0x0) (async) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0xc2040, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) (async) ioctl$auto(r2, 0x4b72, r3) rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) 1m17.430073782s ago: executing program 1 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0x6af3, 0x800) r1 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r1, @new_map_fd=r0, 0x3}, 0x1) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x15, 0x5, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0x0, 0x9, 0x1, 0x3, 0x3da1, 0x0, 0xb4, 0x7, 0x140000000000, 0xdb, 0x7fffffff, 0x10, 0x1}, 0x171) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) ioctl$auto_TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000380)=0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket(0x2, 0x80000, 0x106) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0xffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000) recvfrom$auto(0x3, 0x0, 0x6, 0x1000fb, 0x0, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x1, 0x948b, 0x10000, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000003340)={0x0, 0x40}, 0x9, 0x5, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0xaf2, 0x95f4da0a, 0x7f, 0x5, 0x64, 0x5, 0x10000000000004, 0x200, 0xa, 0x2, 0xfffffffffffffffe]}, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9}, 0xb) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) 1m16.26040173s ago: executing program 0 (id=1289): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000440)=""/198, 0xc6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1d, 0x80000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0xffd, 0x0, 0x7) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) write$auto(r4, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96I-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffff9e}, 0x1, 0x0, 0x0, 0x8000}, 0x20001840) socket(0xa, 0x801, 0x81) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) readahead$auto(r0, 0x7fffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000010c0)=""/22, 0x16) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) mq_timedsend$auto(r2, 0x0, 0x2000, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1m1.889459976s ago: executing program 0 (id=1312): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty51\x00', 0x600, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = socket(0x2c, 0x800, 0x8) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, r2, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0x9e3, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000200)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x9}, 0x3e, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x581402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) clone$auto(0x1, 0x27, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) write$auto(r0, 0x0, 0xfdf0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x8) 44.248887917s ago: executing program 33 (id=1308): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty53\x00', 0x402840, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x2, 0x4, 0x7ffffffffa, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d05, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) write$auto(0x3, 0x0, 0x100082) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r2) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000051967091970d5550fb6c6fd7895f7d768a9562fc2d69a737d4a90189e49906731e4abfca58750d797edb55fd603665166473c7dd1c9628e046b7e646dc722abf0e4a18cdad3211b52020f94867a9b5a27d2881a401dd33ce8d3800dfbfdc72d3d6858e7e45da5f0fc5ca1db593cc6ca167f570780bc1bcfae7acb9cf778e65ceb6e6feb66082dacbb0c506faeb5e0f787181eb8069e7cc1db825347f31486eb53417e17dec6276c7e7992e130e1a625a45cd76608cac9e592544e67f84003b513ec155e5e6d9fc18b1", @ANYRES16=r3, @ANYBLOB="000228bd7000fcdbdf25070000000400060004000600040006000800040006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000051}, 0x4011) r4 = socket(0x1e, 0x1, 0x0) setreuid$auto(0x3, 0x7) epoll_ctl$auto(r4, 0x1cb6, 0x3, &(0x7f0000000500)={0xffffff92}) 43.322373178s ago: executing program 34 (id=1312): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty51\x00', 0x600, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = socket(0x2c, 0x800, 0x8) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, r2, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0x9e3, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000200)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x9}, 0x3e, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2a19c3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x581402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x6, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) clone$auto(0x1, 0x27, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) write$auto(r0, 0x0, 0xfdf0) bpf$auto_BPF_MAP_FREEZE(0x16, 0x0, 0x8) 43.016345427s ago: executing program 35 (id=1311): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffff9e}, 0x1, 0x0, 0x0, 0x8000}, 0x20001840) socket(0xa, 0x801, 0x81) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) readahead$auto(r0, 0x7fffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000010c0)=""/22, 0x16) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) mq_timedsend$auto(r2, 0x0, 0x2000, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 11.288222695s ago: executing program 4 (id=1330): setsockopt$auto(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x6) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xe0800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x29, 0x5, 0x0) socket(0x29, 0x5, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto(r2, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000444b4df203b44ba88acee348b76604eda58e2fd25e1be09b04053a41ce"], 0x44}}, 0x480) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0040001", @ANYRES16=r3, @ANYBLOB="000225bd7000fcdbdf251300000005001900ff000000050031000200000005002100490000001f00160041257fbd06fe8d9e1b53db4978a05fb198fa34ef11ff48b64add810084001e00f85ee71f959a30e226bb614d465893a1435593333f77e38723f28f1204b4ae1c19758c5c25bb58ad8689e4e12783e94906ac1ec1e3c10400000000000000db3e0f9adebdd26c318ebe557360648ed598e033c398603d709bea39bbe8d8425de6e0b87d1452e8bb151d93069acb3629e7bca9004e9770a971b508116370d78437050018000700000005003400cd000000e2b5bec4b31af4caef30047aaf9b95bb5fcd5a8b64b6746d7b0e98ea3c7692a45576c00ee435f88f6cf6f55e7f180ae0e90ce592bcacb5510c2d71b890fb409dde44b9cf51f507fd29faf675af66ee48a2b2dbcd407e048dfd12790242b2cdc60ff7782db8b7b076960829bb2cca16bdfe47530562b298fd0392127745676d5cb492d9728aefcb7337"], 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40040) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x24) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5.773342323s ago: executing program 4 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x801, 0x0) r2 = socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000001ec0)=@bpf_attr_7={@start_id=0xd2f, 0x9, 0x6}, 0xff) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x2, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0xc0000022, 0x4, 0x6d3e, 0x7fff, 0x8, 0x6215298d]}, 0x0) listen$auto(r1, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) settimeofday$auto(&(0x7f0000000380)={0x7fffffff, 0x3}, &(0x7f00000003c0)={0x1, 0xb}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r2) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001f80)=ANY=[@ANYRESOCT=r4, @ANYRES64=0x0, @ANYBLOB="00022abd7000fedbdf2501000000060001000600000006001b004e2400000c001000020000000000000005000700030000005b101e8008000100", @ANYRES32=r0, @ANYBLOB="4447a3802300df00", @ANYRESHEX=r2, @ANYBLOB="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"], 0x10b4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0x7, 0x4) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.303694059s ago: executing program 4 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0xff80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r3, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xdf}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xe4, 0x0, 0x0, @binary}, @nested={0x4, 0x101}]}]}, 0x38}}, 0x4000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setdomainname$auto(0xfffffffffffffffc, 0x0) 3.308747907s ago: executing program 4 (id=1333): socket$nl_generic(0x10, 0x3, 0x10) r0 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)={0x14, 0x0, 0xf1b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r1, 0x4b66, 0x1) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000003840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010326bd7000fedbdf25080000000800048004000480497da9f6741abd0edbba9f2df336b6cf2b6aaa73e5ff7f003ad3ac4135000000000000ff"], 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) shmctl$auto_SHM_INFO(0xd5ff, 0xe, &(0x7f00000001c0)={{0x3ff, 0xee01, 0xffffffffffffffff, 0x8, 0x1, 0xffffffff, 0x1}, 0x1, 0xb70, 0x7f, 0x6, @inferred, @raw=0x2228badc, 0xf, 0x0, &(0x7f00000000c0)="0f1a65a92b180552b1bf01a8b8146f7c625479febd9643b3a2f057e5b10a9b96ee0a4ac10472e32718508c155489936623279fa99bbf0ccb6d9497934f5c35f273d0565983f8a4adafdcf09f195735ebc5b30b645855dfec0dd890bd10e14af5eaf70464df1fe21840", &(0x7f0000000180)="cc63b2af014f743c22a60e40798b1d1b6bf7c14a14b4ddeb662b0d2ab0e9d3167a"}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) 2.941295221s ago: executing program 5 (id=1314): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8004) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) memfd_create$auto(0x0, 0x4) socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x10001) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x11, 0x80003, 0x300) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0x81) 2.765484591s ago: executing program 6 (id=1315): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0xb520500b13b9c06d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x800) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x7) 2.56094756s ago: executing program 7 (id=1317): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r1, 0x400, 0x70bd29, 0x25dddc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2b, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r5, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r5, 0x0, 0x401, 0x5, 0x3}}}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) write$auto(r6, 0x0, 0x8) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) 2.390606923s ago: executing program 4 (id=1334): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r#\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x05\x00\x00\x00\xab\"4\x8a\xbb-Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xac\xc6\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8\x8f\xa19-\n\xcdWw\xe2\t\x00\x00\x00\x00\x00\x00\x00\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xd0\xc5D\x00\x00\x00\x00\x00\x00\x00', 0x29d3e6c4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000240)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000300)='/ ys -ernel/tracing/set_event_notrace_p}d\xde\xc7\xbd8\xbe\xd7\xdeN\x86\xcf\x1d\rD!U\xb4\xe4+\v\xc3\x06$\xe1\x0eA\xf3ua\x8fT\xd9J\xfd\x02\x00\x00\x00\x00\x00\x00\x00\xbf\x9f\xb0e\xfex,c-\xdf\a\x9e\x9bX\x13n\xdf\xc8\x94%\x7fp\xe0\xa0x\x1f\x17\xea\xc3\xbf\xb2(}\x7f\xd3\xf6\xc5\x9bj\xcf~\x7f)\xd2\x7f\tN\xa9m\xe8\xdc\xb1\xe3\xf3L\xad\xdd%(0c\x9d\x13\xc7\x0elZ\x87K\x14_\xbau\x88\x9f\xe2\x04\x16\xec\xfa\xad\xe0\x87G[N\xf1\xb5\xc0\xab\x00\x00\x00\x00\x00\x00\x00\x04+\xc1\xd3m\xb8\xe5\a\x92\xc2\xd4\xcc\x91\x90\x05$G\x9a\x9b\xe1I\xa9/(\xd3\xa1\\8\x1afmY\xd6m\x931\xe6\xbd\xfb\xd6\x91\xbb\xef\xa1\x03\xd8j\x06ngka\xd1\xf1\xfd\xaeX)w\x1e4\x91\xc9\xce4\x97\x00', 0x40) r2 = open(0x0, 0x7ffd, 0x12) setitimer$auto(0x2, &(0x7f0000000080)={{0x1, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000000)={{0x3, 0x3}, {0x8, 0x5}}, 0x0) unshare$auto(0x40000080) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x34c, 0x9}, {0xfffffffffffffffd}}, 0x0) r3 = socket(0x10, 0x2, 0xc) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f00000000c0)={r3, 0xf}) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r5, 0x80184132, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x420341, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x432000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d7) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000440)=""/117, 0x75) open(0x0, 0xeee00, 0x31) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r1, 0x4141, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) 1.721891202s ago: executing program 6 (id=1335): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_expire_centisecs\x00', 0x242, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd22, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) madvise$auto(0xc, 0x9, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x183003, 0x0) ioctl$auto_EVIOCREVOKE(r5, 0x40044591, 0x0) read$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 1.682975098s ago: executing program 5 (id=1336): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4a, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x7, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x2080000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0xf2ff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x23c802, 0x0) epoll_create$auto(0x7) write$auto(r0, 0x0, 0x100000a3da) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, r0, 0x8000) ioctl$auto_BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000100)={0x9, 0x26, [0x7fffffff, 0x5, 0x8, 0x81], 0x1}) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x1b9380, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x9) 1.320297194s ago: executing program 6 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0xa, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) pread64$auto(r2, &(0x7f0000000140)=')\x00', 0xb8, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r4, r3, 0x0, 0x1000202) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') unshare$auto(0x0) 296.686532ms ago: executing program 4 (id=1338): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, 0x0, 0x7fffff7f, 0xffffffffffffffff, 0x4, 0x2e) socket(0x1e, 0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdc03}, 0x2f}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0xfdef) 0s ago: executing program 5 (id=1339): socket$nl_generic(0x10, 0x3, 0x10) r0 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)={0x14, 0x0, 0xf1b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r1, 0x4b66, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000003840)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010326bd7000fedbdf25080000000800048004000480497da9f6741abd0edbba9f2df336b6cf2b6aaa73e5ff7f003ad3ac4135000000000000ffffffec"], 0x1c}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) shmctl$auto_SHM_INFO(0xd5ff, 0xe, &(0x7f00000001c0)={{0x3ff, 0xee01, 0xffffffffffffffff, 0x8, 0x1, 0xffffffff, 0x1}, 0x1, 0xb70, 0x7f, 0x6, @inferred, @raw=0x2228badc, 0xf, 0x0, &(0x7f00000000c0)="0f1a65a92b180552b1bf01a8b8146f7c625479febd9643b3a2f057e5b10a9b96ee0a4ac10472e32718508c155489936623279fa99bbf0ccb6d9497934f5c35f273d0565983f8a4adafdcf09f195735ebc5b30b645855dfec0dd890bd10e14af5eaf70464df1fe21840", &(0x7f0000000180)="cc63b2af014f743c22a60e40798b1d1b6bf7c14a14b4ddeb662b0d2ab0e9d3167a"}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                [ 231.017772][ T30] audit: type=1800 audit(2147483648.810:37): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.668" name="discovery_nqn" dev="configfs" ino=24232 res=0 errno=0 [ 231.153669][ T8857] zswap: compressor not available [ 231.228140][ T8863] Setting dangerous option i915.mitigations - tainting kernel [ 232.285499][ T30] audit: type=1804 audit(2147483650.070:38): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.667" name="/newroot/132/file0" dev="tmpfs" ino=717 res=1 errno=0 [ 232.568804][ T8869] serio: Serial port pty6 [ 232.732286][ T8881] Invalid ELF header magic: != ELF [ 232.742361][ T8881] FAULT_INJECTION: forcing a failure. [ 232.742361][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 232.767277][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.3.673 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 232.767333][ T8881] Tainted: [U]=USER [ 232.767345][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.767364][ T8881] Call Trace: [ 232.767374][ T8881] [ 232.767385][ T8881] dump_stack_lvl+0x16c/0x1f0 [ 232.767429][ T8881] should_fail_ex+0x512/0x640 [ 232.767479][ T8881] should_failslab+0xc2/0x120 [ 232.767521][ T8881] __kmalloc_cache_noprof+0x6a/0x3e0 [ 232.767553][ T8881] ? proc_thread_self_get_link+0x1c6/0x240 [ 232.767610][ T8881] proc_thread_self_get_link+0x1c6/0x240 [ 232.767652][ T8881] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 232.767696][ T8881] step_into+0x195e/0x2270 [ 232.767726][ T8881] ? rcu_is_watching+0x12/0xc0 [ 232.767763][ T8881] ? __pfx_step_into+0x10/0x10 [ 232.767797][ T8881] ? lookup_fast+0x156/0x610 [ 232.767831][ T8881] walk_component+0xfc/0x5b0 [ 232.767864][ T8881] link_path_walk+0x627/0xe20 [ 232.767902][ T8881] path_openat+0x1b0/0x2cb0 [ 232.767936][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.767986][ T8881] ? __pfx_path_openat+0x10/0x10 [ 232.768028][ T8881] do_filp_open+0x20b/0x470 [ 232.768064][ T8881] ? __pfx_do_filp_open+0x10/0x10 [ 232.768115][ T8881] ? alloc_fd+0x471/0x7d0 [ 232.768151][ T8881] do_sys_openat2+0x11b/0x1d0 [ 232.768201][ T8881] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.768256][ T8881] __x64_sys_openat+0x174/0x210 [ 232.768309][ T8881] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.768366][ T8881] do_syscall_64+0xcd/0x490 [ 232.768411][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.768444][ T8881] RIP: 0033:0x7facd178ebe9 [ 232.768468][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.768501][ T8881] RSP: 002b:00007facd25de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.768533][ T8881] RAX: ffffffffffffffda RBX: 00007facd19b5fa0 RCX: 00007facd178ebe9 [ 232.768555][ T8881] RDX: 0000000000040080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 232.768582][ T8881] RBP: 00007facd1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 232.768602][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.768621][ T8881] R13: 00007facd19b6038 R14: 00007facd19b5fa0 R15: 00007ffe6a4dcf68 [ 232.768651][ T8881] [ 234.148317][ T8912] FAULT_INJECTION: forcing a failure. [ 234.148317][ T8912] name failslab, interval 1, probability 0, space 0, times 0 [ 234.161038][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.4.676 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 234.161077][ T8912] Tainted: [U]=USER [ 234.161085][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.161099][ T8912] Call Trace: [ 234.161106][ T8912] [ 234.161114][ T8912] dump_stack_lvl+0x16c/0x1f0 [ 234.161157][ T8912] should_fail_ex+0x512/0x640 [ 234.161207][ T8912] ? tomoyo_encode2+0x100/0x3e0 [ 234.161243][ T8912] should_failslab+0xc2/0x120 [ 234.161273][ T8912] __kmalloc_noprof+0xd2/0x510 [ 234.161302][ T8912] tomoyo_encode2+0x100/0x3e0 [ 234.161335][ T8912] tomoyo_encode+0x29/0x50 [ 234.161365][ T8912] tomoyo_realpath_from_path+0x18f/0x6e0 [ 234.161403][ T8912] tomoyo_check_open_permission+0x2ab/0x3c0 [ 234.161434][ T8912] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 234.161469][ T8912] ? lock_release+0x201/0x2f0 [ 234.161506][ T8912] ? do_raw_spin_lock+0x12c/0x2b0 [ 234.161542][ T8912] ? path_get+0x61/0x80 [ 234.161573][ T8912] ? rcu_is_watching+0x12/0xc0 [ 234.161598][ T8912] tomoyo_file_open+0x6b/0x90 [ 234.161620][ T8912] security_file_open+0x84/0x1e0 [ 234.161653][ T8912] do_dentry_open+0x596/0x1530 [ 234.161691][ T8912] vfs_open+0x82/0x3f0 [ 234.161727][ T8912] path_openat+0x1de4/0x2cb0 [ 234.161758][ T8912] ? __pfx_path_openat+0x10/0x10 [ 234.161789][ T8912] do_filp_open+0x20b/0x470 [ 234.161815][ T8912] ? __pfx_do_filp_open+0x10/0x10 [ 234.161852][ T8912] ? alloc_fd+0x471/0x7d0 [ 234.161879][ T8912] do_sys_openat2+0x11b/0x1d0 [ 234.161914][ T8912] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.161954][ T8912] __x64_sys_openat+0x174/0x210 [ 234.161990][ T8912] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.162032][ T8912] do_syscall_64+0xcd/0x490 [ 234.162064][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.162087][ T8912] RIP: 0033:0x7f0bc538ebe9 [ 234.162105][ T8912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.162128][ T8912] RSP: 002b:00007f0bc61e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.162150][ T8912] RAX: ffffffffffffffda RBX: 00007f0bc55b6090 RCX: 00007f0bc538ebe9 [ 234.162165][ T8912] RDX: 0000000000103040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 234.162180][ T8912] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.162195][ T8912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.162209][ T8912] R13: 00007f0bc55b6128 R14: 00007f0bc55b6090 R15: 00007ffc936fcaf8 [ 234.162230][ T8912] [ 234.162265][ T8912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 234.507647][ T8922] random: crng reseeded on system resumption [ 234.756227][ T30] audit: type=1804 audit(2147483652.550:39): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.681" name="/newroot/50/file0" dev="tmpfs" ino=279 res=1 errno=0 [ 236.338071][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 239.121583][ T8986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.696'. [ 239.145682][ T8986] bridge_slave_1: left allmulticast mode [ 239.151799][ T8986] bridge_slave_1: left promiscuous mode [ 239.158048][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.174805][ T8986] bridge_slave_0: left allmulticast mode [ 239.183239][ T8986] bridge_slave_0: left promiscuous mode [ 239.206492][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.431916][ T8991] kafs: addr_prefs: Too many elements in string [ 239.736958][ T30] audit: type=1804 audit(2147483650.170:40): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.695" name="/newroot/153/file0" dev="tmpfs" ino=817 res=1 errno=0 [ 241.360971][ T30] audit: type=1804 audit(2147483647.500:41): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.705" name="/newroot/258/file0" dev="tmpfs" ino=1385 res=1 errno=0 [ 241.897443][ T9042] FAULT_INJECTION: forcing a failure. [ 241.897443][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 241.925899][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.3.708 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 241.925956][ T9042] Tainted: [U]=USER [ 241.925969][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.925990][ T9042] Call Trace: [ 241.926000][ T9042] [ 241.926013][ T9042] dump_stack_lvl+0x16c/0x1f0 [ 241.926059][ T9042] should_fail_ex+0x512/0x640 [ 241.926108][ T9042] should_failslab+0xc2/0x120 [ 241.926163][ T9042] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 241.926204][ T9042] ? sk_prot_alloc+0x60/0x2a0 [ 241.926257][ T9042] sk_prot_alloc+0x60/0x2a0 [ 241.926307][ T9042] sk_alloc+0x36/0xc20 [ 241.926344][ T9042] tipc_sk_create+0xcf/0x21a0 [ 241.926394][ T9042] ? evm_inode_alloc_security+0x49/0xc0 [ 241.926429][ T9042] ? security_inode_alloc+0xcf/0x2b0 [ 241.926466][ T9042] ? rcu_is_watching+0x12/0xc0 [ 241.926500][ T9042] ? rcu_is_watching+0x12/0xc0 [ 241.926531][ T9042] ? lock_release+0x201/0x2f0 [ 241.926575][ T9042] __sock_create+0x338/0x8d0 [ 241.926609][ T9042] __sys_socket+0x14d/0x260 [ 241.926639][ T9042] ? __pfx___sys_socket+0x10/0x10 [ 241.926671][ T9042] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 241.926725][ T9042] __x64_sys_socket+0x72/0xb0 [ 241.926757][ T9042] do_syscall_64+0xcd/0x490 [ 241.926801][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.926834][ T9042] RIP: 0033:0x7facd178ebe9 [ 241.926858][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.926892][ T9042] RSP: 002b:00007facd25bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 241.926924][ T9042] RAX: ffffffffffffffda RBX: 00007facd19b6090 RCX: 00007facd178ebe9 [ 241.926946][ T9042] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 241.926966][ T9042] RBP: 00007facd1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 241.926985][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.927004][ T9042] R13: 00007facd19b6128 R14: 00007facd19b6090 R15: 00007ffe6a4dcf68 [ 241.927035][ T9042] [ 243.616345][ T9076] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 243.664899][ T9076] FAULT_INJECTION: forcing a failure. [ 243.664899][ T9076] name failslab, interval 1, probability 0, space 0, times 0 [ 243.705099][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.4.717 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 243.705154][ T9076] Tainted: [U]=USER [ 243.705166][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.705185][ T9076] Call Trace: [ 243.705196][ T9076] [ 243.705208][ T9076] dump_stack_lvl+0x16c/0x1f0 [ 243.705254][ T9076] should_fail_ex+0x512/0x640 [ 243.705301][ T9076] should_failslab+0xc2/0x120 [ 243.705344][ T9076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 243.705382][ T9076] ? __kernfs_new_node+0xd2/0x8e0 [ 243.705424][ T9076] __kernfs_new_node+0xd2/0x8e0 [ 243.705470][ T9076] ? __pfx___kernfs_new_node+0x10/0x10 [ 243.705511][ T9076] ? __kernfs_new_node+0x2fd/0x8e0 [ 243.705549][ T9076] ? rcu_is_watching+0x12/0xc0 [ 243.705583][ T9076] ? kernfs_root+0xee/0x2a0 [ 243.705621][ T9076] ? rcu_is_watching+0x12/0xc0 [ 243.705652][ T9076] ? lock_release+0x201/0x2f0 [ 243.705697][ T9076] kernfs_new_node+0x13c/0x1e0 [ 243.705743][ T9076] kernfs_create_dir_ns+0x4c/0x1a0 [ 243.705793][ T9076] internal_create_group+0x34d/0xf30 [ 243.705837][ T9076] ? kernfs_add_one+0x14e/0x840 [ 243.705884][ T9076] ? __pfx_internal_create_group+0x10/0x10 [ 243.705930][ T9076] ? __pfx_dev_add_physical_location+0x10/0x10 [ 243.705981][ T9076] ? bus_to_subsys+0x131/0x160 [ 243.706023][ T9076] dpm_sysfs_add+0x80/0x280 [ 243.706073][ T9076] device_add+0x9a6/0x1aa0 [ 243.706103][ T9076] ? __pfx_device_add+0x10/0x10 [ 243.706137][ T9076] nfc_register_device+0x41/0x3c0 [ 243.706181][ T9076] nci_register_device+0x7f1/0xb80 [ 243.706215][ T9076] ? __pfx_nci_register_device+0x10/0x10 [ 243.706251][ T9076] ? lockdep_init_map_type+0x5c/0x280 [ 243.706297][ T9076] virtual_ncidev_open+0x141/0x220 [ 243.706333][ T9076] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 243.706367][ T9076] misc_open+0x35a/0x420 [ 243.706399][ T9076] ? __pfx_misc_open+0x10/0x10 [ 243.706431][ T9076] chrdev_open+0x234/0x6a0 [ 243.706472][ T9076] ? __pfx_apparmor_file_open+0x10/0x10 [ 243.706503][ T9076] ? __pfx_chrdev_open+0x10/0x10 [ 243.706540][ T9076] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 243.706576][ T9076] do_dentry_open+0x982/0x1530 [ 243.706611][ T9076] ? __pfx_chrdev_open+0x10/0x10 [ 243.706651][ T9076] vfs_open+0x82/0x3f0 [ 243.706694][ T9076] path_openat+0x1de4/0x2cb0 [ 243.706732][ T9076] ? __pfx_path_openat+0x10/0x10 [ 243.706770][ T9076] do_filp_open+0x20b/0x470 [ 243.706802][ T9076] ? __pfx_do_filp_open+0x10/0x10 [ 243.706847][ T9076] ? alloc_fd+0x471/0x7d0 [ 243.706880][ T9076] do_sys_openat2+0x11b/0x1d0 [ 243.706921][ T9076] ? __pfx_do_sys_openat2+0x10/0x10 [ 243.706971][ T9076] __x64_sys_openat+0x174/0x210 [ 243.707021][ T9076] ? __pfx___x64_sys_openat+0x10/0x10 [ 243.707073][ T9076] do_syscall_64+0xcd/0x490 [ 243.707112][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.707141][ T9076] RIP: 0033:0x7f0bc538ebe9 [ 243.707162][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.707192][ T9076] RSP: 002b:00007f0bc6206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 243.707220][ T9076] RAX: ffffffffffffffda RBX: 00007f0bc55b5fa0 RCX: 00007f0bc538ebe9 [ 243.707239][ T9076] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 243.707257][ T9076] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 243.707274][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.707291][ T9076] R13: 00007f0bc55b6038 R14: 00007f0bc55b5fa0 R15: 00007ffc936fcaf8 [ 243.707317][ T9076] [ 244.382997][ T30] audit: type=1804 audit(2147483650.510:42): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.718" name="/newroot/59/file0" dev="tmpfs" ino=328 res=1 errno=0 [ 244.665045][ T30] audit: type=1804 audit(2147483650.800:43): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.720" name="/newroot/264/file0" dev="tmpfs" ino=1418 res=1 errno=0 [ 246.679451][ T9141] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 253.665035][ T30] audit: type=1804 audit(2147483649.860:44): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.769" name="/newroot/283/file0" dev="tmpfs" ino=1517 res=1 errno=0 [ 254.014845][ T9361] netlink: 342 bytes leftover after parsing attributes in process `syz.1.770'. [ 254.098275][ T9361] FAULT_INJECTION: forcing a failure. [ 254.098275][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 254.146368][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.1.770 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 254.146423][ T9361] Tainted: [U]=USER [ 254.146434][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.146453][ T9361] Call Trace: [ 254.146463][ T9361] [ 254.146474][ T9361] dump_stack_lvl+0x16c/0x1f0 [ 254.146522][ T9361] should_fail_ex+0x512/0x640 [ 254.146569][ T9361] should_failslab+0xc2/0x120 [ 254.146614][ T9361] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 254.146653][ T9361] ? lockdep_init_map_type+0x5c/0x280 [ 254.146696][ T9361] ? __d_alloc+0x32/0xae0 [ 254.146737][ T9361] __d_alloc+0x32/0xae0 [ 254.146777][ T9361] d_alloc_pseudo+0x1c/0xc0 [ 254.146825][ T9361] alloc_file_pseudo+0xcf/0x230 [ 254.146873][ T9361] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 254.146922][ T9361] ? alloc_fd+0x471/0x7d0 [ 254.146957][ T9361] sock_alloc_file+0x50/0x210 [ 254.147000][ T9361] __sys_socket+0x1c0/0x260 [ 254.147029][ T9361] ? lock_release+0x201/0x2f0 [ 254.147069][ T9361] ? __pfx___sys_socket+0x10/0x10 [ 254.147101][ T9361] ? do_user_addr_fault+0x843/0x1370 [ 254.147155][ T9361] __x64_sys_socket+0x72/0xb0 [ 254.147194][ T9361] do_syscall_64+0xcd/0x490 [ 254.147243][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.147276][ T9361] RIP: 0033:0x7f3213f90b07 [ 254.147305][ T9361] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.147339][ T9361] RSP: 002b:00007f3214e4efa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 254.147371][ T9361] RAX: ffffffffffffffda RBX: 00007f32141b5fa0 RCX: 00007f3213f90b07 [ 254.147392][ T9361] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 254.147412][ T9361] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 254.147432][ T9361] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 254.147453][ T9361] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 254.147484][ T9361] [ 254.166329][ T9361] FAULT_INJECTION: forcing a failure. [ 254.166329][ T9361] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.395124][ T9361] CPU: 0 UID: 0 PID: 9361 Comm: syz.1.770 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 254.395181][ T9361] Tainted: [U]=USER [ 254.395193][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.395212][ T9361] Call Trace: [ 254.395230][ T9361] [ 254.395242][ T9361] dump_stack_lvl+0x16c/0x1f0 [ 254.395289][ T9361] should_fail_ex+0x512/0x640 [ 254.395338][ T9361] get_futex_key+0x1d0/0x1560 [ 254.395377][ T9361] ? __pfx_get_futex_key+0x10/0x10 [ 254.395414][ T9361] ? lock_release+0x201/0x2f0 [ 254.395461][ T9361] futex_wake+0xea/0x530 [ 254.395504][ T9361] ? trace_cap_capable+0x18d/0x200 [ 254.395539][ T9361] ? __pfx_futex_wake+0x10/0x10 [ 254.395588][ T9361] ? capable+0x83/0x110 [ 254.395620][ T9361] ? kernel_move_pages+0xcda/0x1380 [ 254.395671][ T9361] do_futex+0x1e3/0x350 [ 254.395710][ T9361] ? __pfx_do_futex+0x10/0x10 [ 254.395749][ T9361] ? __pfx_kernel_move_pages+0x10/0x10 [ 254.395800][ T9361] __x64_sys_futex+0x1e0/0x4c0 [ 254.395843][ T9361] ? __pfx___x64_sys_futex+0x10/0x10 [ 254.395883][ T9361] ? xfd_validate_state+0x61/0x180 [ 254.395930][ T9361] ? __pfx_do_writev+0x10/0x10 [ 254.395971][ T9361] do_syscall_64+0xcd/0x490 [ 254.396015][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.396047][ T9361] RIP: 0033:0x7f3213f8ebe9 [ 254.396070][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.396103][ T9361] RSP: 002b:00007f3214e500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.396134][ T9361] RAX: ffffffffffffffda RBX: 00007f32141b5fa8 RCX: 00007f3213f8ebe9 [ 254.396155][ T9361] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f32141b5fac [ 254.396175][ T9361] RBP: 00007f32141b5fa0 R08: 00007f3214e51000 R09: 0000000000000000 [ 254.396195][ T9361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 254.396214][ T9361] R13: 00007f32141b6038 R14: 00007ffea9f03f50 R15: 00007ffea9f04038 [ 254.396254][ T9361] [ 254.855687][ T5186] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 255.812986][ T9397] random: crng reseeded on system resumption [ 255.874818][ T9389] ksmbd: Unknown IPC event: 14, ignore. [ 259.196755][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 259.331600][ T9464] team0: Port device team_slave_1 removed [ 259.379881][ T9471] ptp ptp0: only physical clock in use now [ 260.489933][ T9502] netlink: 146 bytes leftover after parsing attributes in process `syz.3.808'. [ 260.510950][ T9495] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[9495] [ 260.609988][ T9500] program syz.1.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.977225][ T9512] FAULT_INJECTION: forcing a failure. [ 260.977225][ T9512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 260.990512][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.3.810 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 260.990566][ T9512] Tainted: [U]=USER [ 260.990577][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.990596][ T9512] Call Trace: [ 260.990607][ T9512] [ 260.990618][ T9512] dump_stack_lvl+0x16c/0x1f0 [ 260.990664][ T9512] should_fail_ex+0x512/0x640 [ 260.990713][ T9512] get_futex_key+0x1d0/0x1560 [ 260.990762][ T9512] ? __pfx_get_futex_key+0x10/0x10 [ 260.990800][ T9512] ? rcu_is_watching+0x12/0xc0 [ 260.990832][ T9512] ? lock_release+0x201/0x2f0 [ 260.990881][ T9512] futex_wait_setup+0x9d/0x550 [ 260.990934][ T9512] __futex_wait+0x194/0x2f0 [ 260.990985][ T9512] ? __pfx___futex_wait+0x10/0x10 [ 260.991037][ T9512] ? __pfx_futex_wake_mark+0x10/0x10 [ 260.991087][ T9512] ? lock_release+0x201/0x2f0 [ 260.991131][ T9512] ? futex_private_hash_put+0x11c/0x300 [ 260.991172][ T9512] futex_wait+0xe8/0x380 [ 260.991219][ T9512] ? __pfx_futex_wait+0x10/0x10 [ 260.991271][ T9512] ? _copy_from_user+0x59/0xd0 [ 260.991328][ T9512] ? io_uring_setup+0x1789/0x2080 [ 260.991374][ T9512] do_futex+0x229/0x350 [ 260.991414][ T9512] ? __pfx_do_futex+0x10/0x10 [ 260.991459][ T9512] __x64_sys_futex+0x1e0/0x4c0 [ 260.991503][ T9512] ? __pfx___x64_sys_futex+0x10/0x10 [ 260.991545][ T9512] ? xfd_validate_state+0x61/0x180 [ 260.991599][ T9512] do_syscall_64+0xcd/0x490 [ 260.991645][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.991678][ T9512] RIP: 0033:0x7facd178ebe9 [ 260.991702][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.991743][ T9512] RSP: 002b:00007facd25de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.991776][ T9512] RAX: ffffffffffffffda RBX: 00007facd19b5fa8 RCX: 00007facd178ebe9 [ 260.991798][ T9512] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007facd19b5fa8 [ 260.991818][ T9512] RBP: 00007facd19b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 260.991837][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.991856][ T9512] R13: 00007facd19b6038 R14: 00007ffe6a4dce80 R15: 00007ffe6a4dcf68 [ 260.991888][ T9512] [ 261.932416][ T9533] ptp ptp0: only physical clock in use now [ 263.397184][ T9549] ICMPv6: process `syz.4.819' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 263.816140][ T9560] ======================================================= [ 263.816140][ T9560] WARNING: The mand mount option has been deprecated and [ 263.816140][ T9560] and is ignored by this kernel. Remove the mand [ 263.816140][ T9560] option from the mount to silence this warning. [ 263.816140][ T9560] ======================================================= [ 263.879886][ T9561] ptrace attach of "./syz-executor exec"[7515] was attempted by "./syz-executor exec"[9561] [ 263.894609][ T9555] ptrace attach of "./syz-executor exec"[7515] was attempted by "./syz-executor exec"[9555] [ 264.134347][ T9572] vmstat_refresh: nr_hugetlb -2048 [ 264.429371][ T9567] FAULT_INJECTION: forcing a failure. [ 264.429371][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 264.449619][ T9567] CPU: 1 UID: 0 PID: 9567 Comm: syz.1.823 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 264.449659][ T9567] Tainted: [U]=USER [ 264.449666][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.449680][ T9567] Call Trace: [ 264.449687][ T9567] [ 264.449696][ T9567] dump_stack_lvl+0x16c/0x1f0 [ 264.449729][ T9567] should_fail_ex+0x512/0x640 [ 264.449765][ T9567] should_failslab+0xc2/0x120 [ 264.449797][ T9567] __kvmalloc_node_noprof+0x137/0x620 [ 264.449835][ T9567] ? io_alloc_cache_init+0x33/0x170 [ 264.449886][ T9567] ? io_alloc_cache_init+0x33/0x170 [ 264.449927][ T9567] io_alloc_cache_init+0x33/0x170 [ 264.449962][ T9567] io_uring_setup+0x63b/0x2080 [ 264.449993][ T9567] ? __pfx_io_uring_setup+0x10/0x10 [ 264.450021][ T9567] ? do_futex+0x122/0x350 [ 264.450050][ T9567] ? __pfx_do_futex+0x10/0x10 [ 264.450079][ T9567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.450119][ T9567] ? __pfx_do_writev+0x10/0x10 [ 264.450146][ T9567] __x64_sys_io_uring_setup+0xc2/0x170 [ 264.450177][ T9567] do_syscall_64+0xcd/0x490 [ 264.450208][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.450232][ T9567] RIP: 0033:0x7f3213f8ebe9 [ 264.450249][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.450275][ T9567] RSP: 002b:00007f3214e50038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 264.450297][ T9567] RAX: ffffffffffffffda RBX: 00007f32141b5fa0 RCX: 00007f3213f8ebe9 [ 264.450312][ T9567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000086 [ 264.450326][ T9567] RBP: 00007f3214011e19 R08: 0000000000000000 R09: 0000000000000000 [ 264.450341][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.450354][ T9567] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 264.450376][ T9567] [ 265.657762][ T9601] ptp ptp0: only physical clock in use now [ 266.288429][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.295230][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.152309][ T9637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 267.657200][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 269.891302][ T9694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 269.923411][ T9695] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 270.021619][ T9691] ptp ptp0: only physical clock in use now [ 270.303451][ T9706] random: crng reseeded on system resumption [ 270.477543][ T9708] Restarting kernel threads ... [ 270.487023][ T9708] Done restarting kernel threads. [ 272.332248][ T9729] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 273.041347][ T9752] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 274.717720][ T9786] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 276.346628][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 276.507132][ T9804] program syz.3.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.623168][ T5879] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 276.623198][ T5879] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 276.638508][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 276.638537][ T5879] Bluetooth: hci0: adv larger than maximum supported [ 276.646143][ T5879] Bluetooth: hci0: adv larger than maximum supported [ 276.652880][ T5879] Bluetooth: hci0: adv larger than maximum supported [ 276.659653][ T5879] Bluetooth: hci0: adv larger than maximum supported [ 276.666425][ T5879] Bluetooth: hci0: Malformed LE Event: 0x0d [ 277.488138][ T9814] [U] [ 277.490994][ T9814] [U] [ 277.493728][ T9814] [U] [ 277.496470][ T9814] [U] [ 277.556822][ T9814] [U] [ 277.559720][ T9814] [U] [ 277.562440][ T9814] [U] [ 277.565204][ T9814] [U] [ 277.621569][ T9814] [U] [ 277.624340][ T9814] [U] [ 277.627075][ T9814] [U] [ 277.629785][ T9814] [U] [ 277.790684][ T9814] [U] [ 277.793473][ T9814] [U] [ 277.796222][ T9814] [U] [ 277.798936][ T9814] [U] [ 277.844369][ T9814] [U] [ 277.847163][ T9814] [U] [ 277.849914][ T9814] [U] [ 277.852666][ T9814] [U] [ 277.863890][ T9814] [U] [ 277.866677][ T9814] [U] [ 277.869429][ T9814] [U] [ 277.872176][ T9814] [U] [ 278.033167][ T9814] [U] [ 278.804192][ T9849] nbd: must specify at least one socket [ 281.068255][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.901'. [ 281.360004][ T9893] ptp ptp0: only physical clock in use now [ 282.385310][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.906'. [ 282.790656][ T9913] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 282.884727][ T9916] vivid-007: ================= START STATUS ================= [ 282.907141][ T9916] vivid-007: Generate PTS: true [ 282.912052][ T9916] vivid-007: Generate SCR: true [ 282.927349][ T9916] tpg source WxH: 320x240 (Y'CbCr) [ 282.932502][ T9916] tpg field: 1 [ 282.936123][ T9916] tpg crop: (0,0)/320x240 [ 282.940724][ T9916] tpg compose: (0,0)/320x240 [ 282.969718][ T9916] tpg colorspace: 8 [ 282.981382][ T9916] tpg transfer function: 0/0 [ 282.987399][ T9916] tpg Y'CbCr encoding: 0/0 [ 283.011788][ T9916] tpg quantization: 0/0 [ 283.017499][ T9916] tpg RGB range: 0/2 [ 283.021414][ T9916] vivid-007: ================== END STATUS ================== [ 283.431820][ T9920] can: request_module (can-proto-3) failed. [ 284.892709][ T9951] netlink: 342 bytes leftover after parsing attributes in process `syz.4.917'. [ 287.156617][ T9993] ptp ptp0: only physical clock in use now [ 288.046296][T10014] FAULT_INJECTION: forcing a failure. [ 288.046296][T10014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.060967][T10014] CPU: 0 UID: 0 PID: 10014 Comm: syz.0.927 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 288.061019][T10014] Tainted: [U]=USER [ 288.061030][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.061048][T10014] Call Trace: [ 288.061058][T10014] [ 288.061068][T10014] dump_stack_lvl+0x16c/0x1f0 [ 288.061117][T10014] should_fail_ex+0x512/0x640 [ 288.061162][T10014] get_futex_key+0x1d0/0x1560 [ 288.061200][T10014] ? __pfx_get_futex_key+0x10/0x10 [ 288.061235][T10014] ? rcu_is_watching+0x12/0xc0 [ 288.061266][T10014] ? __cgroup_account_cputime+0xcc/0x120 [ 288.061300][T10014] futex_wait_setup+0x9d/0x550 [ 288.061347][T10014] __futex_wait+0x194/0x2f0 [ 288.061393][T10014] ? __pfx___futex_wait+0x10/0x10 [ 288.061440][T10014] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 288.061491][T10014] ? __pfx_futex_wake_mark+0x10/0x10 [ 288.061539][T10014] ? lock_release+0x201/0x2f0 [ 288.061571][T10014] ? futex_private_hash_put+0x11c/0x300 [ 288.061599][T10014] futex_wait+0xe8/0x380 [ 288.061633][T10014] ? __pfx_futex_wait+0x10/0x10 [ 288.061671][T10014] ? up_write+0x1b2/0x520 [ 288.061706][T10014] do_futex+0x229/0x350 [ 288.061734][T10014] ? __pfx_do_futex+0x10/0x10 [ 288.061763][T10014] ? fput+0x9b/0xd0 [ 288.061805][T10014] __x64_sys_futex+0x1e0/0x4c0 [ 288.061838][T10014] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.061868][T10014] ? bpf_lsm_capable+0x9/0x10 [ 288.061890][T10014] ? security_capable+0x7e/0x260 [ 288.061916][T10014] do_syscall_64+0xcd/0x490 [ 288.061948][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.061972][T10014] RIP: 0033:0x7f06cdf8ebe9 [ 288.061989][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.062013][T10014] RSP: 002b:00007f06cc1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.062035][T10014] RAX: ffffffffffffffda RBX: 00007f06ce1b5fa8 RCX: 00007f06cdf8ebe9 [ 288.062051][T10014] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06ce1b5fa8 [ 288.062065][T10014] RBP: 00007f06ce1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 288.062079][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.062092][T10014] R13: 00007f06ce1b6038 R14: 00007ffe335144b0 R15: 00007ffe33514598 [ 288.062114][T10014] [ 289.914892][T10040] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input22 [ 292.601200][T10090] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 292.646607][T10090] FAULT_INJECTION: forcing a failure. [ 292.646607][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 292.685700][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.0.939 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 292.685752][T10090] Tainted: [U]=USER [ 292.685763][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.685781][T10090] Call Trace: [ 292.685792][T10090] [ 292.685805][T10090] dump_stack_lvl+0x16c/0x1f0 [ 292.685853][T10090] should_fail_ex+0x512/0x640 [ 292.685901][T10090] should_failslab+0xc2/0x120 [ 292.685944][T10090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 292.685982][T10090] ? security_inode_alloc+0x3b/0x2b0 [ 292.686021][T10090] security_inode_alloc+0x3b/0x2b0 [ 292.686058][T10090] inode_init_always_gfp+0xce4/0x1030 [ 292.686098][T10090] alloc_inode+0x86/0x240 [ 292.686143][T10090] new_inode+0x22/0x1c0 [ 292.686189][T10090] __debugfs_create_file+0x11c/0x6b0 [ 292.686229][T10090] debugfs_create_file_full+0x41/0x60 [ 292.686268][T10090] ref_tracker_dir_debugfs+0x19d/0x290 [ 292.686316][T10090] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 292.686383][T10090] ? lockdep_init_map_type+0x5c/0x280 [ 292.686446][T10090] preinit_net+0x296/0x8f0 [ 292.686491][T10090] copy_net_ns+0x1da/0x5f0 [ 292.686538][T10090] create_new_namespaces+0x3ea/0xa90 [ 292.686579][T10090] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 292.686618][T10090] ksys_unshare+0x45b/0xa40 [ 292.686662][T10090] ? __pfx_ksys_unshare+0x10/0x10 [ 292.686706][T10090] ? xfd_validate_state+0x61/0x180 [ 292.686761][T10090] __x64_sys_unshare+0x31/0x40 [ 292.686805][T10090] do_syscall_64+0xcd/0x490 [ 292.686850][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.686882][T10090] RIP: 0033:0x7f06cdf8ebe9 [ 292.686907][T10090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.686940][T10090] RSP: 002b:00007f06cc1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 292.686971][T10090] RAX: ffffffffffffffda RBX: 00007f06ce1b5fa0 RCX: 00007f06cdf8ebe9 [ 292.686992][T10090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 292.687010][T10090] RBP: 00007f06ce011e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.687029][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.687047][T10090] R13: 00007f06ce1b6038 R14: 00007f06ce1b5fa0 R15: 00007ffe33514598 [ 292.687078][T10090] [ 292.687109][T10090] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880503b8170' [ 292.929537][T10100] FAULT_INJECTION: forcing a failure. [ 292.929537][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 292.955183][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.4.943 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 292.955239][T10100] Tainted: [U]=USER [ 292.955249][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.955268][T10100] Call Trace: [ 292.955278][T10100] [ 292.955289][T10100] dump_stack_lvl+0x16c/0x1f0 [ 292.955335][T10100] should_fail_ex+0x512/0x640 [ 292.955384][T10100] should_failslab+0xc2/0x120 [ 292.955427][T10100] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 292.955473][T10100] ? kstrdup_const+0x63/0x80 [ 292.955513][T10100] kstrdup+0x53/0x100 [ 292.955552][T10100] kstrdup_const+0x63/0x80 [ 292.955588][T10100] __kernfs_new_node+0x9b/0x8e0 [ 292.955627][T10100] ? __kernel_text_address+0xd/0x40 [ 292.955659][T10100] ? __pfx___kernfs_new_node+0x10/0x10 [ 292.955703][T10100] ? rcu_is_watching+0x12/0xc0 [ 292.955736][T10100] ? kernfs_root+0xee/0x2a0 [ 292.955773][T10100] ? rcu_is_watching+0x12/0xc0 [ 292.955804][T10100] ? lock_release+0x201/0x2f0 [ 292.955847][T10100] kernfs_new_node+0x13c/0x1e0 [ 292.955896][T10100] kernfs_create_dir_ns+0x4c/0x1a0 [ 292.955945][T10100] sysfs_create_dir_ns+0x13a/0x2b0 [ 292.955983][T10100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 292.956022][T10100] ? kobject_add_internal+0x25b/0x9b0 [ 292.956067][T10100] ? lock_release+0x201/0x2f0 [ 292.956108][T10100] ? class_dir_child_ns_type+0xd/0x60 [ 292.956167][T10100] kobject_add_internal+0x2c4/0x9b0 [ 292.956216][T10100] kobject_add+0x16e/0x240 [ 292.956261][T10100] ? __pfx_kobject_add+0x10/0x10 [ 292.956306][T10100] ? lock_release+0x201/0x2f0 [ 292.956346][T10100] ? kobject_put+0xab/0x5a0 [ 292.956392][T10100] device_add+0x288/0x1aa0 [ 292.956421][T10100] ? __pfx_dev_set_name+0x10/0x10 [ 292.956455][T10100] ? __pfx_device_add+0x10/0x10 [ 292.956480][T10100] ? __pfx___might_resched+0x10/0x10 [ 292.956520][T10100] __add_disk+0x457/0xf00 [ 292.956566][T10100] add_disk_fwnode+0x13f/0x5d0 [ 292.956610][T10100] loop_add+0x903/0xb70 [ 292.956642][T10100] ? __pfx_loop_add+0x10/0x10 [ 292.956686][T10100] ? rcu_is_watching+0x12/0xc0 [ 292.956719][T10100] ? __fget_files+0x204/0x3c0 [ 292.956755][T10100] loop_control_ioctl+0x13e/0x630 [ 292.956788][T10100] ? __pfx_loop_control_ioctl+0x10/0x10 [ 292.956825][T10100] ? __pfx_loop_control_ioctl+0x10/0x10 [ 292.956861][T10100] __x64_sys_ioctl+0x18b/0x210 [ 292.956911][T10100] do_syscall_64+0xcd/0x490 [ 292.956955][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.956987][T10100] RIP: 0033:0x7f0bc538ebe9 [ 292.957013][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.957045][T10100] RSP: 002b:00007f0bc6206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.957077][T10100] RAX: ffffffffffffffda RBX: 00007f0bc55b5fa0 RCX: 00007f0bc538ebe9 [ 292.957098][T10100] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 292.957119][T10100] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.957139][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.957167][T10100] R13: 00007f0bc55b6038 R14: 00007f0bc55b5fa0 R15: 00007ffc936fcaf8 [ 292.957199][T10100] [ 292.957214][T10100] kobject: kobject_add_internal failed for loop45 (error: -12 parent: block) [ 293.955344][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 295.617934][T10156] Invalid ELF header magic: != ELF [ 296.272475][T10173] ubi0: attaching mtd0 [ 296.279291][T10173] ubi0: scanning is finished [ 296.284122][T10173] ubi0: empty MTD device detected [ 296.426956][T10173] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 296.434607][T10173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 296.442396][T10173] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 296.455099][T10173] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 296.499983][T10173] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 296.512870][T10173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 296.540604][T10173] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3722474494 [ 296.565298][T10173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 296.583694][T10175] ubi0: background thread "ubi_bgt0d" started, PID 10175 [ 298.327870][T10203] ubi: mtd0 is already attached to ubi0 [ 298.593343][T10205] ptp ptp0: only physical clock in use now [ 301.682337][T10247] ubi: mtd0 is already attached to ubi0 [ 302.170096][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 303.623237][T10275] netlink: zone id is out of range [ 303.665083][T10275] netlink: zone id is out of range [ 303.675326][T10275] netlink: zone id is out of range [ 303.680519][T10275] netlink: zone id is out of range [ 303.723678][T10275] netlink: zone id is out of range [ 303.736666][T10275] netlink: zone id is out of range [ 303.754745][T10275] netlink: zone id is out of range [ 303.793036][T10275] netlink: zone id is out of range [ 303.895337][T10275] netlink: zone id is out of range [ 303.900882][T10275] netlink: zone id is out of range [ 304.438383][T10285] random: crng reseeded on system resumption [ 305.130183][T10301] ptp ptp0: only physical clock in use now [ 309.481382][T10345] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 314.071897][T10426] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[10426] [ 314.782826][T10432] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1027'. [ 315.505602][T10452] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 316.049064][T10468] ptp ptp0: only physical clock in use now [ 316.089657][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 316.130326][ T30] audit: type=1800 audit(2147483654.450:45): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1034" name="members" dev="configfs" ino=33958 res=0 errno=0 [ 323.418532][T10573] FAULT_INJECTION: forcing a failure. [ 323.418532][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 323.517166][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.0.1055 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 323.517212][T10573] Tainted: [U]=USER [ 323.517220][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.517233][T10573] Call Trace: [ 323.517241][T10573] [ 323.517249][T10573] dump_stack_lvl+0x16c/0x1f0 [ 323.517282][T10573] should_fail_ex+0x512/0x640 [ 323.517318][T10573] ? tomoyo_encode2+0x100/0x3e0 [ 323.517352][T10573] should_failslab+0xc2/0x120 [ 323.517382][T10573] __kmalloc_noprof+0xd2/0x510 [ 323.517408][T10573] ? d_absolute_path+0x136/0x1a0 [ 323.517443][T10573] tomoyo_encode2+0x100/0x3e0 [ 323.517478][T10573] tomoyo_encode+0x29/0x50 [ 323.517509][T10573] tomoyo_realpath_from_path+0x18f/0x6e0 [ 323.517547][T10573] tomoyo_check_open_permission+0x2ab/0x3c0 [ 323.517575][T10573] ? __d_add+0x403/0xa50 [ 323.517605][T10573] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 323.517633][T10573] ? lock_release+0x201/0x2f0 [ 323.517675][T10573] ? do_raw_spin_lock+0x12c/0x2b0 [ 323.517710][T10573] ? path_get+0x61/0x80 [ 323.517756][T10573] ? rcu_is_watching+0x12/0xc0 [ 323.517781][T10573] tomoyo_file_open+0x6b/0x90 [ 323.517803][T10573] security_file_open+0x84/0x1e0 [ 323.517836][T10573] do_dentry_open+0x596/0x1530 [ 323.517869][T10573] vfs_open+0x82/0x3f0 [ 323.517903][T10573] path_openat+0x1de4/0x2cb0 [ 323.517934][T10573] ? __pfx_path_openat+0x10/0x10 [ 323.517964][T10573] do_filp_open+0x20b/0x470 [ 323.517991][T10573] ? __pfx_do_filp_open+0x10/0x10 [ 323.518028][T10573] ? alloc_fd+0x471/0x7d0 [ 323.518055][T10573] do_sys_openat2+0x11b/0x1d0 [ 323.518089][T10573] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.518130][T10573] __x64_sys_openat+0x174/0x210 [ 323.518166][T10573] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.518218][T10573] do_syscall_64+0xcd/0x490 [ 323.518250][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.518273][T10573] RIP: 0033:0x7f06cdf8ebe9 [ 323.518291][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.518315][T10573] RSP: 002b:00007f06cc1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 323.518337][T10573] RAX: ffffffffffffffda RBX: 00007f06ce1b6090 RCX: 00007f06cdf8ebe9 [ 323.518353][T10573] RDX: 000000000000a800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 323.518368][T10573] RBP: 00007f06ce011e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.518382][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.518396][T10573] R13: 00007f06ce1b6128 R14: 00007f06ce1b6090 R15: 00007ffe33514598 [ 323.518419][T10573] [ 323.909326][T10573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.948840][T10619] FAULT_INJECTION: forcing a failure. [ 324.948840][T10619] name fail_futex, interval 1, probability 0, space 0, times 0 [ 324.948880][T10619] CPU: 0 UID: 0 PID: 10619 Comm: syz.4.1062 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 324.948913][T10619] Tainted: [U]=USER [ 324.948921][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.948934][T10619] Call Trace: [ 324.948941][T10619] [ 324.948950][T10619] dump_stack_lvl+0x16c/0x1f0 [ 324.948982][T10619] should_fail_ex+0x512/0x640 [ 324.949017][T10619] get_futex_key+0x293/0x1560 [ 324.949046][T10619] ? __pfx_get_futex_key+0x10/0x10 [ 324.949072][T10619] ? __mutex_trylock_common+0xe9/0x250 [ 324.949104][T10619] ? __pfx___mutex_trylock_common+0x10/0x10 [ 324.949139][T10619] futex_wake+0xea/0x530 [ 324.949173][T10619] ? __pfx_futex_wake+0x10/0x10 [ 324.949206][T10619] ? rcu_is_watching+0x12/0xc0 [ 324.949229][T10619] ? rcu_is_watching+0x12/0xc0 [ 324.949253][T10619] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 324.949286][T10619] do_futex+0x1e3/0x350 [ 324.949318][T10619] ? __pfx_do_futex+0x10/0x10 [ 324.949345][T10619] ? lock_release+0x201/0x2f0 [ 324.949377][T10619] mm_release+0x24e/0x300 [ 324.949402][T10619] do_exit+0x68e/0x2bf0 [ 324.949436][T10619] ? __pfx_do_exit+0x10/0x10 [ 324.949467][T10619] ? do_raw_spin_lock+0x12c/0x2b0 [ 324.949510][T10619] ? get_signal+0x8f5/0x26d0 [ 324.949535][T10619] ? rcu_is_watching+0x12/0xc0 [ 324.949559][T10619] do_group_exit+0xd3/0x2a0 [ 324.949591][T10619] get_signal+0x2673/0x26d0 [ 324.949618][T10619] ? kmem_cache_free+0x2d1/0x4d0 [ 324.949646][T10619] ? __pfx_get_signal+0x10/0x10 [ 324.949672][T10619] ? do_futex+0x122/0x350 [ 324.949699][T10619] ? __pfx_do_futex+0x10/0x10 [ 324.949728][T10619] arch_do_signal_or_restart+0x8f/0x790 [ 324.949759][T10619] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 324.949793][T10619] ? xfd_validate_state+0x61/0x180 [ 324.949839][T10619] exit_to_user_mode_loop+0x84/0x110 [ 324.949874][T10619] do_syscall_64+0x3f6/0x490 [ 324.949905][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.949928][T10619] RIP: 0033:0x7f0bc538ebe9 [ 324.949944][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.949967][T10619] RSP: 002b:00007f0bc62060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.949988][T10619] RAX: fffffffffffffe00 RBX: 00007f0bc55b5fa8 RCX: 00007f0bc538ebe9 [ 324.950003][T10619] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0bc55b5fa8 [ 324.950017][T10619] RBP: 00007f0bc55b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 324.950031][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.950044][T10619] R13: 00007f0bc55b6038 R14: 00007ffc936fca10 R15: 00007ffc936fcaf8 [ 324.950065][T10619] [ 325.299814][T10634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 325.650069][T10636] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 326.051906][T10641] tty tty12: ldisc open failed (-12), clearing slot 11 [ 326.701425][T10657] ptp ptp0: only physical clock in use now [ 327.626021][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 327.640261][T10668] nbd: must specify at least one socket [ 327.727619][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.734074][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.977354][T10678] svc: failed to register nfsdv3 RPC service (errno 111). [ 329.000861][T10678] svc: failed to register nfsaclv3 RPC service (errno 111). [ 330.310042][ T5879] Bluetooth: hci0: unexpected subevent 0x12 length: 123 > 5 [ 331.310492][T10726] FAULT_INJECTION: forcing a failure. [ 331.310492][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 331.375438][T10726] CPU: 0 UID: 0 PID: 10726 Comm: syz.1.1086 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 331.375492][T10726] Tainted: [U]=USER [ 331.375503][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.375524][T10726] Call Trace: [ 331.375533][T10726] [ 331.375545][T10726] dump_stack_lvl+0x16c/0x1f0 [ 331.375598][T10726] should_fail_ex+0x512/0x640 [ 331.375647][T10726] should_failslab+0xc2/0x120 [ 331.375689][T10726] __kmalloc_cache_noprof+0x6a/0x3e0 [ 331.375721][T10726] ? drm_atomic_state_alloc+0xb8/0x120 [ 331.375757][T10726] drm_atomic_state_alloc+0xb8/0x120 [ 331.375791][T10726] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 331.375827][T10726] ? __pfx___might_resched+0x10/0x10 [ 331.375864][T10726] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 331.375900][T10726] ? __mutex_lock+0x1c5/0x1060 [ 331.375938][T10726] ? rcu_is_watching+0x12/0xc0 [ 331.375985][T10726] drm_client_modeset_commit_locked+0x14d/0x580 [ 331.376022][T10726] drm_client_modeset_commit+0x4f/0x80 [ 331.376057][T10726] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 331.376093][T10726] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 331.376139][T10726] drm_fbdev_client_restore+0x2c/0x40 [ 331.376182][T10726] drm_client_dev_restore+0x1f3/0x2a0 [ 331.376218][T10726] drm_release+0x2c4/0x360 [ 331.376248][T10726] ? __pfx_drm_release+0x10/0x10 [ 331.376277][T10726] __fput+0x402/0xb70 [ 331.376324][T10726] task_work_run+0x150/0x240 [ 331.376377][T10726] ? __pfx_task_work_run+0x10/0x10 [ 331.376426][T10726] ? __pfx___do_sys_close_range+0x10/0x10 [ 331.376469][T10726] exit_to_user_mode_loop+0xeb/0x110 [ 331.376520][T10726] do_syscall_64+0x3f6/0x490 [ 331.376563][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.376605][T10726] RIP: 0033:0x7f3213f8ebe9 [ 331.376631][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.376664][T10726] RSP: 002b:00007f3214e50038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 331.376696][T10726] RAX: 0000000000000000 RBX: 00007f32141b5fa0 RCX: 00007f3213f8ebe9 [ 331.376717][T10726] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 331.376737][T10726] RBP: 00007f3214011e19 R08: 0000000000000000 R09: 0000000000000000 [ 331.376757][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.376776][T10726] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 331.376808][T10726] [ 332.053790][T10733] FAULT_INJECTION: forcing a failure. [ 332.053790][T10733] name failslab, interval 1, probability 0, space 0, times 0 [ 332.089108][T10733] CPU: 0 UID: 0 PID: 10733 Comm: syz.1.1088 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 332.089148][T10733] Tainted: [U]=USER [ 332.089155][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.089169][T10733] Call Trace: [ 332.089176][T10733] [ 332.089184][T10733] dump_stack_lvl+0x16c/0x1f0 [ 332.089217][T10733] should_fail_ex+0x512/0x640 [ 332.089258][T10733] should_failslab+0xc2/0x120 [ 332.089289][T10733] __kmalloc_node_noprof+0xd8/0x500 [ 332.089318][T10733] ? blk_mq_alloc_tag_set+0x534/0x1260 [ 332.089350][T10733] blk_mq_alloc_tag_set+0x534/0x1260 [ 332.089383][T10733] loop_add+0x3b2/0xb70 [ 332.089407][T10733] ? __pfx_loop_add+0x10/0x10 [ 332.089438][T10733] ? rcu_is_watching+0x12/0xc0 [ 332.089461][T10733] ? __fget_files+0x204/0x3c0 [ 332.089487][T10733] loop_control_ioctl+0x13e/0x630 [ 332.089513][T10733] ? __pfx_loop_control_ioctl+0x10/0x10 [ 332.089540][T10733] ? __pfx_loop_control_ioctl+0x10/0x10 [ 332.089570][T10733] __x64_sys_ioctl+0x18b/0x210 [ 332.089622][T10733] do_syscall_64+0xcd/0x490 [ 332.089659][T10733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.089683][T10733] RIP: 0033:0x7f3213f8ebe9 [ 332.089700][T10733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.089722][T10733] RSP: 002b:00007f3214e50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.089743][T10733] RAX: ffffffffffffffda RBX: 00007f32141b5fa0 RCX: 00007f3213f8ebe9 [ 332.089758][T10733] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 332.089772][T10733] RBP: 00007f3214e50090 R08: 0000000000000000 R09: 0000000000000000 [ 332.089786][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.089799][T10733] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 332.089821][T10733] [ 333.331549][T10748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 335.117036][T10784] FAULT_INJECTION: forcing a failure. [ 335.117036][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 335.129916][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.1.1101 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 335.129959][T10784] Tainted: [U]=USER [ 335.129966][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.129981][T10784] Call Trace: [ 335.129989][T10784] [ 335.129999][T10784] dump_stack_lvl+0x16c/0x1f0 [ 335.130032][T10784] should_fail_ex+0x512/0x640 [ 335.130068][T10784] should_failslab+0xc2/0x120 [ 335.130101][T10784] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 335.130129][T10784] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 335.130162][T10784] ? ep_ptable_queue_proc+0x5b/0x280 [ 335.130186][T10784] ep_ptable_queue_proc+0x5b/0x280 [ 335.130208][T10784] pipe_poll+0x239/0x660 [ 335.130234][T10784] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 335.130257][T10784] ? __pfx_pipe_poll+0x10/0x10 [ 335.130284][T10784] ep_item_poll+0x141/0x1f0 [ 335.130307][T10784] do_epoll_ctl+0x1fae/0x3790 [ 335.130355][T10784] ? __pfx_do_epoll_ctl+0x10/0x10 [ 335.130380][T10784] ? __might_fault+0xe3/0x190 [ 335.130406][T10784] ? __might_fault+0x13b/0x190 [ 335.130431][T10784] ? rcu_is_watching+0x12/0xc0 [ 335.130454][T10784] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 335.130482][T10784] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 335.130506][T10784] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 335.130532][T10784] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 335.130563][T10784] do_syscall_64+0xcd/0x490 [ 335.130594][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.130618][T10784] RIP: 0033:0x7f3213f8ebe9 [ 335.130636][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.130659][T10784] RSP: 002b:00007f3214e50038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 335.130681][T10784] RAX: ffffffffffffffda RBX: 00007f32141b5fa0 RCX: 00007f3213f8ebe9 [ 335.130697][T10784] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 335.130711][T10784] RBP: 00007f3214011e19 R08: 0000000000000000 R09: 0000000000000000 [ 335.130725][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.130739][T10784] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 335.130761][T10784] [ 336.495839][T10802] ptp ptp0: only physical clock in use now [ 337.985961][T10835] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1796941489.867267728.3177022012), cmd(5) [ 342.507831][T10923] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 343.727678][T10921] kexec: Could not allocate control_code_buffer [ 345.869536][T10984] netlink: 'syz.1.1147': attribute type 5 has an invalid length. [ 345.895318][T10974] FAULT_INJECTION: forcing a failure. [ 345.895318][T10974] name failslab, interval 1, probability 0, space 0, times 0 [ 345.906641][T10984] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1147'. [ 346.029852][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.4.1145 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 346.029911][T10974] Tainted: [U]=USER [ 346.029922][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.029942][T10974] Call Trace: [ 346.029952][T10974] [ 346.029964][T10974] dump_stack_lvl+0x16c/0x1f0 [ 346.030011][T10974] should_fail_ex+0x512/0x640 [ 346.030060][T10974] should_failslab+0xc2/0x120 [ 346.030103][T10974] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 346.030141][T10974] ? __kernfs_new_node+0xd2/0x8e0 [ 346.030183][T10974] __kernfs_new_node+0xd2/0x8e0 [ 346.030224][T10974] ? rcu_is_watching+0x12/0xc0 [ 346.030264][T10974] ? __pfx___kernfs_new_node+0x10/0x10 [ 346.030304][T10974] ? __pfx___might_resched+0x10/0x10 [ 346.030339][T10974] ? rcu_is_watching+0x12/0xc0 [ 346.030371][T10974] ? kernfs_root+0xee/0x2a0 [ 346.030408][T10974] ? rcu_is_watching+0x12/0xc0 [ 346.030439][T10974] ? lock_release+0x201/0x2f0 [ 346.030482][T10974] kernfs_new_node+0x13c/0x1e0 [ 346.030531][T10974] __kernfs_create_file+0x53/0x350 [ 346.030564][T10974] sysfs_add_file_mode_ns+0x207/0x3c0 [ 346.030607][T10974] internal_create_group+0x578/0xf30 [ 346.030654][T10974] ? __pfx_internal_create_group+0x10/0x10 [ 346.030699][T10974] ? kernfs_create_link+0x1bd/0x240 [ 346.030733][T10974] internal_create_groups+0x9d/0x150 [ 346.030777][T10974] device_add+0x731/0x1aa0 [ 346.030808][T10974] ? __pfx_device_add+0x10/0x10 [ 346.030834][T10974] ? __pfx___might_resched+0x10/0x10 [ 346.030873][T10974] __add_disk+0x457/0xf00 [ 346.030920][T10974] add_disk_fwnode+0x13f/0x5d0 [ 346.030963][T10974] loop_add+0x903/0xb70 [ 346.030996][T10974] ? __pfx_loop_add+0x10/0x10 [ 346.031040][T10974] ? rcu_is_watching+0x12/0xc0 [ 346.031072][T10974] ? __fget_files+0x204/0x3c0 [ 346.031107][T10974] loop_control_ioctl+0x13e/0x630 [ 346.031141][T10974] ? __pfx_loop_control_ioctl+0x10/0x10 [ 346.031177][T10974] ? __pfx_loop_control_ioctl+0x10/0x10 [ 346.031212][T10974] __x64_sys_ioctl+0x18b/0x210 [ 346.031272][T10974] do_syscall_64+0xcd/0x490 [ 346.031315][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.031347][T10974] RIP: 0033:0x7f0bc538ebe9 [ 346.031372][T10974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.031405][T10974] RSP: 002b:00007f0bc6206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.031437][T10974] RAX: ffffffffffffffda RBX: 00007f0bc55b5fa0 RCX: 00007f0bc538ebe9 [ 346.031458][T10974] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000d [ 346.031478][T10974] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.031498][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.031517][T10974] R13: 00007f0bc55b6038 R14: 00007f0bc55b5fa0 R15: 00007ffc936fcaf8 [ 346.031549][T10974] [ 350.257412][ T30] audit: type=1800 audit(2147483647.830:46): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1155" name="dbroot" dev="configfs" ino=35629 res=0 errno=0 [ 352.373229][T11054] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 353.572626][T11085] bridge0: port 3(veth0_to_bridge) entered blocking state [ 353.915173][T11085] bridge0: port 3(veth0_to_bridge) entered disabled state [ 354.102894][T11085] veth0_to_bridge: entered allmulticast mode [ 354.145859][T11085] veth0_to_bridge: entered promiscuous mode [ 354.151937][T11085] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.238606][T11085] bridge0: port 3(veth0_to_bridge) entered blocking state [ 354.246067][T11085] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 355.715222][ T5879] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 357.410971][T11156] Invalid ELF header magic: != ELF [ 357.467855][T11156] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1183'. [ 358.071694][T11169] FAULT_INJECTION: forcing a failure. [ 358.071694][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 358.085233][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.1.1185 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 358.085286][T11169] Tainted: [U]=USER [ 358.085297][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.085316][T11169] Call Trace: [ 358.085325][T11169] [ 358.085336][T11169] dump_stack_lvl+0x16c/0x1f0 [ 358.085382][T11169] should_fail_ex+0x512/0x640 [ 358.085429][T11169] ? __seq_open_private+0x22/0xd0 [ 358.085474][T11169] should_failslab+0xc2/0x120 [ 358.085512][T11169] __kmalloc_noprof+0xd2/0x510 [ 358.085550][T11169] ? __pfx_stats_fop_open+0x10/0x10 [ 358.085596][T11169] __seq_open_private+0x22/0xd0 [ 358.085659][T11169] sc_common_open+0x6b/0x200 [ 358.085695][T11169] full_proxy_open_regular+0x1b9/0x360 [ 358.085719][T11169] do_dentry_open+0x982/0x1530 [ 358.085747][T11169] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 358.085773][T11169] vfs_open+0x82/0x3f0 [ 358.085807][T11169] path_openat+0x1de4/0x2cb0 [ 358.085839][T11169] ? __pfx_path_openat+0x10/0x10 [ 358.085869][T11169] do_filp_open+0x20b/0x470 [ 358.085896][T11169] ? __pfx_do_filp_open+0x10/0x10 [ 358.085933][T11169] ? alloc_fd+0x471/0x7d0 [ 358.085960][T11169] do_sys_openat2+0x11b/0x1d0 [ 358.085995][T11169] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.086036][T11169] __x64_sys_openat+0x174/0x210 [ 358.086072][T11169] ? __pfx___x64_sys_openat+0x10/0x10 [ 358.086114][T11169] do_syscall_64+0xcd/0x490 [ 358.086146][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.086169][T11169] RIP: 0033:0x7f3213f8ebe9 [ 358.086187][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.086210][T11169] RSP: 002b:00007f3214e50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.086233][T11169] RAX: ffffffffffffffda RBX: 00007f32141b5fa0 RCX: 00007f3213f8ebe9 [ 358.086249][T11169] RDX: 0000000000145440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 358.086264][T11169] RBP: 00007f3214011e19 R08: 0000000000000000 R09: 0000000000000000 [ 358.086279][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.086293][T11169] R13: 00007f32141b6038 R14: 00007f32141b5fa0 R15: 00007ffea9f04038 [ 358.086314][T11169] [ 358.697318][T11175] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 358.909198][T11181] ptp ptp0: only physical clock in use now [ 359.096324][T11146] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 359.263626][T11189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 359.290820][T11189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.318415][T11189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.330961][T11189] bond0 (unregistering): Released all slaves [ 359.864525][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 361.739887][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 361.984271][T11260] ptp ptp0: only physical clock in use now [ 365.106203][T11286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.118276][T11286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.144671][T11286] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 365.397888][T11291] size and base must be multiples of 4 kiB [ 365.403796][T11291] CPU: 1 UID: 0 PID: 11291 Comm: syz.3.1214 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 365.403858][T11291] Tainted: [U]=USER [ 365.403870][T11291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.403890][T11291] Call Trace: [ 365.403899][T11291] [ 365.403911][T11291] dump_stack_lvl+0x16c/0x1f0 [ 365.403957][T11291] mtrr_del+0xd1/0x110 [ 365.404001][T11291] mtrr_ioctl+0x922/0xcf0 [ 365.404046][T11291] ? __pfx_mtrr_ioctl+0x10/0x10 [ 365.404093][T11291] ? rcu_is_watching+0x12/0xc0 [ 365.404134][T11291] ? __fget_files+0x20e/0x3c0 [ 365.404168][T11291] ? __pfx_mtrr_ioctl+0x10/0x10 [ 365.404213][T11291] proc_reg_unlocked_ioctl+0x226/0x320 [ 365.404257][T11291] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 365.404304][T11291] __x64_sys_ioctl+0x18b/0x210 [ 365.404355][T11291] do_syscall_64+0xcd/0x490 [ 365.404398][T11291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.404431][T11291] RIP: 0033:0x7facd178ebe9 [ 365.404454][T11291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.404486][T11291] RSP: 002b:00007facd25de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.404517][T11291] RAX: ffffffffffffffda RBX: 00007facd19b5fa0 RCX: 00007facd178ebe9 [ 365.404538][T11291] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 365.404556][T11291] RBP: 00007facd1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 365.404576][T11291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.404595][T11291] R13: 00007facd19b6038 R14: 00007facd19b5fa0 R15: 00007ffe6a4dcf68 [ 365.404628][T11291] [ 365.425280][T11286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.646960][T11286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.653324][T11286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.661633][T11286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 365.676982][T11286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 367.157678][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.481866][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.598218][T11316] ptp ptp0: only physical clock in use now [ 367.715072][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 367.715076][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.442995][T11345] ptp ptp0: only physical clock in use now [ 368.664565][T11359] binder: 11358:11359 ioctl c00c620f 200000000080 returned -22 [ 369.236731][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.460227][T11379] sd 0:0:1:0: PR command failed: 1026 [ 369.472921][T11379] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 369.488535][T11379] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 369.795122][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 371.329100][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.875173][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 372.361832][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1257'. [ 372.790683][T11464] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1256'. [ 373.986040][T11505] FAULT_INJECTION: forcing a failure. [ 373.986040][T11505] name failslab, interval 1, probability 0, space 0, times 0 [ 374.143133][T11505] CPU: 1 UID: 0 PID: 11505 Comm: syz.4.1261 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 374.143173][T11505] Tainted: [U]=USER [ 374.143180][T11505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.143195][T11505] Call Trace: [ 374.143202][T11505] [ 374.143210][T11505] dump_stack_lvl+0x16c/0x1f0 [ 374.143243][T11505] should_fail_ex+0x512/0x640 [ 374.143281][T11505] should_failslab+0xc2/0x120 [ 374.143313][T11505] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.143340][T11505] ? ptlock_alloc+0x1f/0x70 [ 374.143364][T11505] ptlock_alloc+0x1f/0x70 [ 374.143385][T11505] pte_alloc_one+0x82/0x3a0 [ 374.143409][T11505] do_pte_missing+0x1afc/0x3ba0 [ 374.143432][T11505] ? do_raw_spin_unlock+0x172/0x230 [ 374.143470][T11505] ? __pmd_alloc+0x3fb/0x930 [ 374.143505][T11505] __handle_mm_fault+0x152a/0x2a50 [ 374.143542][T11505] ? mt_find+0x3ef/0xa30 [ 374.143574][T11505] ? __pfx___handle_mm_fault+0x10/0x10 [ 374.143596][T11505] ? __pfx_mt_find+0x10/0x10 [ 374.143639][T11505] ? find_vma+0xbf/0x140 [ 374.143669][T11505] ? __pfx_find_vma+0x10/0x10 [ 374.143700][T11505] handle_mm_fault+0x589/0xd10 [ 374.143724][T11505] ? __bpf_trace_exceptions+0x1/0x40 [ 374.143759][T11505] do_user_addr_fault+0x7a6/0x1370 [ 374.143797][T11505] ? rcu_is_watching+0x12/0xc0 [ 374.143821][T11505] exc_page_fault+0x5c/0xb0 [ 374.143849][T11505] asm_exc_page_fault+0x26/0x30 [ 374.143871][T11505] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 374.143895][T11505] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 374.143917][T11505] RSP: 0018:ffffc9000ab2fe68 EFLAGS: 00050212 [ 374.143936][T11505] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 374.143950][T11505] RDX: fffff52001565fda RSI: 0000000000000000 RDI: ffffc9000ab2fec0 [ 374.143965][T11505] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52001565fd9 [ 374.143979][T11505] R10: ffffc9000ab2fecf R11: 0000000000000000 R12: 0000000000000000 [ 374.143993][T11505] R13: ffffc9000ab2fec0 R14: 0000000000000000 R15: 0000000000000000 [ 374.144015][T11505] _copy_from_user+0x98/0xd0 [ 374.144052][T11505] __x64_sys_setrlimit+0xc6/0x160 [ 374.144087][T11505] ? xfd_validate_state+0x61/0x180 [ 374.144122][T11505] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 374.144159][T11505] ? rcu_is_watching+0x12/0xc0 [ 374.144183][T11505] do_syscall_64+0xcd/0x490 [ 374.144213][T11505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.144236][T11505] RIP: 0033:0x7f0bc538ebe9 [ 374.144253][T11505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.144276][T11505] RSP: 002b:00007f0bc6206038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 374.144296][T11505] RAX: ffffffffffffffda RBX: 00007f0bc55b5fa0 RCX: 00007f0bc538ebe9 [ 374.144312][T11505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 374.144325][T11505] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.144339][T11505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.144353][T11505] R13: 00007f0bc55b6038 R14: 00007f0bc55b5fa0 R15: 00007ffc936fcaf8 [ 374.144375][T11505] [ 374.464506][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.734171][T11545] FAULT_INJECTION: forcing a failure. [ 375.734171][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 375.755062][T11545] CPU: 0 UID: 0 PID: 11545 Comm: syz.0.1267 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 375.755114][T11545] Tainted: [U]=USER [ 375.755124][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.755143][T11545] Call Trace: [ 375.755153][T11545] [ 375.755165][T11545] dump_stack_lvl+0x16c/0x1f0 [ 375.755210][T11545] should_fail_ex+0x512/0x640 [ 375.755260][T11545] should_failslab+0xc2/0x120 [ 375.755310][T11545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 375.755349][T11545] ? security_inode_alloc+0x3b/0x2b0 [ 375.755387][T11545] security_inode_alloc+0x3b/0x2b0 [ 375.755423][T11545] inode_init_always_gfp+0xce4/0x1030 [ 375.755462][T11545] alloc_inode+0x86/0x240 [ 375.755506][T11545] new_inode+0x22/0x1c0 [ 375.755552][T11545] shmem_get_inode+0x19a/0xfb0 [ 375.755607][T11545] shmem_mknod+0x1a8/0x450 [ 375.755656][T11545] ? __pfx_shmem_create+0x10/0x10 [ 375.755702][T11545] lookup_open.isra.0+0x11d0/0x1580 [ 375.755739][T11545] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 375.755774][T11545] ? mnt_get_write_access+0x54/0x300 [ 375.755816][T11545] ? rcu_is_watching+0x12/0xc0 [ 375.755852][T11545] ? __pfx_down_write+0x10/0x10 [ 375.755895][T11545] ? mnt_get_write_access+0x20c/0x300 [ 375.755943][T11545] path_openat+0x893/0x2cb0 [ 375.755985][T11545] ? __pfx_path_openat+0x10/0x10 [ 375.756025][T11545] do_filp_open+0x20b/0x470 [ 375.756061][T11545] ? __pfx_do_filp_open+0x10/0x10 [ 375.756110][T11545] ? alloc_fd+0x471/0x7d0 [ 375.756149][T11545] do_sys_openat2+0x11b/0x1d0 [ 375.756198][T11545] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.756246][T11545] ? rcu_is_watching+0x12/0xc0 [ 375.756283][T11545] __x64_sys_openat+0x174/0x210 [ 375.756340][T11545] ? __pfx___x64_sys_openat+0x10/0x10 [ 375.756399][T11545] do_syscall_64+0xcd/0x490 [ 375.756440][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.756471][T11545] RIP: 0033:0x7f06cdf8ebe9 [ 375.756496][T11545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.756529][T11545] RSP: 002b:00007f06cc1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.756560][T11545] RAX: ffffffffffffffda RBX: 00007f06ce1b6090 RCX: 00007f06cdf8ebe9 [ 375.756581][T11545] RDX: 0000000000000041 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 375.756601][T11545] RBP: 00007f06ce011e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.756622][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.756641][T11545] R13: 00007f06ce1b6128 R14: 00007f06ce1b6090 R15: 00007ffe33514598 [ 375.756672][T11545] [ 376.530865][T11573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1274'. [ 376.541438][T11573] bond_slave_1: entered allmulticast mode [ 376.589529][T11576] netlink: 'syz.3.1276': attribute type 2 has an invalid length. [ 376.683924][T11580] netlink: 'syz.3.1276': attribute type 2 has an invalid length. [ 379.398204][T11658] can: request_module (can-proto-0) failed. [ 379.884273][T11689] netlink: 'syz.3.1294': attribute type 19 has an invalid length. [ 379.892433][T11689] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1294'. [ 383.025970][ C1] net_ratelimit: 163 callbacks suppressed [ 383.025990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.044026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.056283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.068564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.080975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.093274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.105697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.117912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.130160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.142557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.010203][T11734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.064185][T11734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.352526][T11734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.858917][T11734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.035197][ C1] net_ratelimit: 15763 callbacks suppressed [ 388.035221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.053983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.066480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 388.079932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.092369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.105152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 388.117599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.130092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.142461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.155389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 388.755096][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.075049][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.245561][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.252101][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.395074][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 389.875179][ T5186] Bluetooth: hci2: command 0x0406 tx timeout [ 391.691873][ C0] sched: DL replenish lagged too much [ 393.045533][ C1] net_ratelimit: 15537 callbacks suppressed [ 393.045552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.063919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.076608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 393.088986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.101377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.113753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.126232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.138510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 393.151373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.163651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.055108][ C1] net_ratelimit: 15910 callbacks suppressed [ 398.055134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.073512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.085925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 398.098343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.110846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.123201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.135714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.148030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 398.161060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.173546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.065039][ C1] net_ratelimit: 16095 callbacks suppressed [ 403.065061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.083316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 403.095607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.108077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.120363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.132899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.145218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 403.158334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 403.170525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.182831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 408.075118][ C1] net_ratelimit: 15969 callbacks suppressed [ 408.075139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.093406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.106145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.118425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 408.131466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.143713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.155969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 408.168362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.180666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.192922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.084953][ C1] net_ratelimit: 16152 callbacks suppressed [ 413.084981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.103212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 413.116123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.128465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.140736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 413.153107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.165364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.177674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.190155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.202415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 417.164682][T11799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.185213][T11799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.192552][T11799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.201274][T11799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.208893][T11799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.286990][ T5186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.296626][ T5186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.305531][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.313398][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.321631][ T5186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.818923][T11799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.829523][T11799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.837867][T11799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.045138][T11799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.053138][T11799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.095264][ C1] net_ratelimit: 13232 callbacks suppressed [ 418.095289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.113656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.125986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 418.138415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.150854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.163252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.175940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.188431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 418.201633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.213961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.107770][ T8369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.236377][T11799] Bluetooth: hci4: command tx timeout [ 419.395109][T11799] Bluetooth: hci5: command tx timeout [ 419.431083][ T8369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.115259][T11799] Bluetooth: hci1: command tx timeout [ 420.424700][ T8369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.105012][ C1] net_ratelimit: 15726 callbacks suppressed [ 423.105032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.123195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.135397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 423.147692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.160216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.172459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.184996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.197357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 423.210426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 423.222765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.305132][T11799] Bluetooth: hci4: command tx timeout [ 423.310666][T11799] Bluetooth: hci5: command tx timeout [ 423.584992][ T5186] Bluetooth: hci1: command tx timeout [ 423.982392][T11802] chnl_net:caif_netlink_parms(): no params data found [ 424.301157][ T8369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.720628][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.737691][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.760083][T11802] bridge_slave_0: entered allmulticast mode [ 424.778063][T11802] bridge_slave_0: entered promiscuous mode [ 424.832275][T11798] chnl_net:caif_netlink_parms(): no params data found [ 424.923882][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.973528][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.025924][T11802] bridge_slave_1: entered allmulticast mode [ 425.061397][T11802] bridge_slave_1: entered promiscuous mode [ 425.318653][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.415356][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.479725][ T8369] bridge_slave_1: left allmulticast mode [ 425.487667][ T8369] bridge_slave_1: left promiscuous mode [ 425.493481][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.527346][ T8369] bridge_slave_0: left allmulticast mode [ 425.533060][ T8369] bridge_slave_0: left promiscuous mode [ 425.560355][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.635620][T11799] Bluetooth: hci5: command tx timeout [ 425.641097][T11799] Bluetooth: hci1: command tx timeout [ 425.647300][ T5879] Bluetooth: hci4: command tx timeout [ 426.166725][ T8369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.201349][ T8369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.258820][ T8369] bond0 (unregistering): Released all slaves [ 426.371615][T11805] chnl_net:caif_netlink_parms(): no params data found [ 426.443259][T11802] team0: Port device team_slave_0 added [ 426.533536][T11802] team0: Port device team_slave_1 added [ 426.553031][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.577090][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.599163][T11798] bridge_slave_0: entered allmulticast mode [ 426.613300][T11798] bridge_slave_0: entered promiscuous mode [ 426.966429][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.978222][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.000973][T11798] bridge_slave_1: entered allmulticast mode [ 427.025447][T11798] bridge_slave_1: entered promiscuous mode [ 427.169787][T11802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.177018][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.203532][T11802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.324220][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.349729][T11802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.392694][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.450741][T11802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.537763][T11848] ubi: mtd0 is already attached to ubi0 [ 427.559593][T11848] ubi0: detaching mtd0 [ 427.607006][T11848] ubi0: mtd0 is detached [ 427.634858][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.719393][T11799] Bluetooth: hci1: command tx timeout [ 427.724976][ T5186] Bluetooth: hci4: command tx timeout [ 427.730670][ T5186] Bluetooth: hci5: command tx timeout [ 428.115093][ C1] net_ratelimit: 12059 callbacks suppressed [ 428.115118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.133777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.146027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 428.159425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.171819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.184215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 428.196682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.209075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.221543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.234059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 429.244672][T11798] team0: Port device team_slave_0 added [ 429.269374][T11805] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.298837][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.325256][T11805] bridge_slave_0: entered allmulticast mode [ 429.353180][T11805] bridge_slave_0: entered promiscuous mode [ 429.367395][T11805] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.374548][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.400448][T11805] bridge_slave_1: entered allmulticast mode [ 429.416654][T11805] bridge_slave_1: entered promiscuous mode [ 430.420661][T11798] team0: Port device team_slave_1 added [ 430.521371][T11805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.588891][T11802] hsr_slave_0: entered promiscuous mode [ 430.601911][T11802] hsr_slave_1: entered promiscuous mode [ 430.618241][T11802] debugfs: 'hsr0' already exists in 'hsr' [ 430.624264][T11802] Cannot create hsr debugfs directory [ 430.690412][T11805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.808782][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.830761][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.235067][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.296946][T11805] team0: Port device team_slave_0 added [ 431.378582][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.405185][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.431254][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.481490][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.565843][T11805] team0: Port device team_slave_1 added [ 431.901808][T11805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.914814][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.985935][T11805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.045101][T11805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.054950][T11805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.080912][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.145449][T11805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.174038][T11798] hsr_slave_0: entered promiscuous mode [ 432.204446][T11798] hsr_slave_1: entered promiscuous mode [ 432.212619][T11798] debugfs: 'hsr0' already exists in 'hsr' [ 432.224536][T11798] Cannot create hsr debugfs directory [ 433.125134][ C1] net_ratelimit: 12481 callbacks suppressed [ 433.125154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.143309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.155500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 433.167727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.179941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.192154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.204638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.216985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 433.230009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.242367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.399159][T11805] hsr_slave_0: entered promiscuous mode [ 433.725489][T11805] hsr_slave_1: entered promiscuous mode [ 433.754612][T11805] debugfs: 'hsr0' already exists in 'hsr' [ 433.763270][T11805] Cannot create hsr debugfs directory [ 435.750170][T11802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.955080][T11856] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 436.148315][T11802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.696516][T11802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.128614][T11802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.464548][T11805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 437.494370][T11805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 437.654508][T11805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 437.697273][T11805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 438.135006][ C1] net_ratelimit: 13217 callbacks suppressed [ 438.135032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.153475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.165916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.178637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.191008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 438.204479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.216895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.229383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 438.241905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.254389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.633206][ T8369] hsr_slave_0: left promiscuous mode [ 438.650701][ T8369] hsr_slave_1: left promiscuous mode [ 438.656866][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.664321][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.677882][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.697779][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.737705][ T8369] veth1_macvtap: left promiscuous mode [ 438.743315][ T8369] veth0_macvtap: left promiscuous mode [ 438.761590][ T8369] veth1_vlan: left promiscuous mode [ 438.768111][ T8369] veth0_vlan: left promiscuous mode [ 439.222264][ T8369] team0 (unregistering): Port device team_slave_1 removed [ 439.266386][ T8369] team0 (unregistering): Port device team_slave_0 removed [ 439.749829][T11798] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 439.791709][T11798] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 439.860552][T11798] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 439.941296][T11798] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.611806][T11802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.634027][T11805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.693950][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.393925][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.590733][T11802] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.614535][T11805] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.145389][ C1] net_ratelimit: 14067 callbacks suppressed [ 443.145408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.163653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.175896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 443.188320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.200761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.213012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.225522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.237725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 443.255029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.267406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.317777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.324971][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.436687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.443844][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.612891][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.620144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.604372][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.611566][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.961181][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.968411][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.043431][ T8369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.139673][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.146862][ T7201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.463883][ T8369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.514832][T11798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.533885][T11798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.635034][ T8369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.687367][T11802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.761386][ T8369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.832321][ T8369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.155010][ C1] net_ratelimit: 13738 callbacks suppressed [ 448.155029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.173184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.185762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.198026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 448.210926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.223093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.235261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:33:90:c4:6d:f8, vlan:0) [ 448.247537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.259773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.272021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.471318][ T8369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.673777][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.737764][ T8369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.812425][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.879685][ T8369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.921264][T11805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.322276][ T8369] veth0_to_bridge: left allmulticast mode [ 449.412293][ T8369] veth0_to_bridge: left promiscuous mode [ 449.885715][ T8369] bridge0: port 3(veth0_to_bridge) entered disabled state [ 449.900116][ T8369] bridge_slave_1: left allmulticast mode [ 449.907986][ T8369] bridge_slave_1: left promiscuous mode [ 449.913768][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.924762][ T8369] bridge_slave_0: left allmulticast mode [ 449.932719][ T8369] bridge_slave_0: left promiscuous mode [ 449.940970][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.391607][ T8369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.455470][ T8369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.477655][ T8369] bond0 (unregistering): Released all slaves [ 450.598405][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.612392][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.943883][T11802] veth0_vlan: entered promiscuous mode [ 451.013662][T11802] veth1_vlan: entered promiscuous mode [ 451.038217][T11798] veth0_vlan: entered promiscuous mode [ 451.098628][T11798] veth1_vlan: entered promiscuous mode [ 451.131328][T11802] veth0_macvtap: entered promiscuous mode [ 451.141146][T11802] veth1_macvtap: entered promiscuous mode [ 451.196424][T11798] veth0_macvtap: entered promiscuous mode [ 451.226994][T11805] veth0_vlan: entered promiscuous mode [ 451.242642][T11798] veth1_macvtap: entered promiscuous mode [ 451.290829][T11802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.316921][T11805] veth1_vlan: entered promiscuous mode [ 451.324517][T11802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.359074][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.372497][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.404329][ T3010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.417032][ T3010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.447352][ T3010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.458755][ T3010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.512624][ T3010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.539331][T11805] veth0_macvtap: entered promiscuous mode [ 451.570384][ T3010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.583763][ T3010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.611050][T11805] veth1_macvtap: entered promiscuous mode [ 451.630942][ T3010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.838603][T11805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.849281][T11805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.860807][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.872187][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.914605][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.922701][ T1139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.939562][ T1139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.950167][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.986645][ T1139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.996414][ T1139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.074309][ T7201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.088244][ T7201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.143709][ T7201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.158039][ T7201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.245055][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.252965][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.378639][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.410662][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.852097][T12069] ptp ptp0: only physical clock in use now [ 455.294056][T12120] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 455.306030][T12120] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 455.314501][T12120] CPU: 0 UID: 0 PID: 12120 Comm: syz.4.1338 Tainted: G U 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 455.326460][T12120] Tainted: [U]=USER [ 455.330305][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.340399][T12120] RIP: 0010:skb_queue_tail+0xa2/0x150 [ 455.345878][T12120] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 455.365546][T12120] RSP: 0018:ffffc90003a4fbb0 EFLAGS: 00010046 [ 455.371643][T12120] RAX: dffffc0000000000 RBX: ffff888028048270 RCX: ffffffff8197ab1c [ 455.379649][T12120] RDX: 0000000000000000 RSI: 0000000000000283 RDI: ffff88807a64eb48 [ 455.387645][T12120] RBP: ffff88807a64eb40 R08: 0000000000000001 R09: fffff52000749f64 [ 455.395643][T12120] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 455.403722][T12120] R13: ffff888028048288 R14: ffff888028047000 R15: ffffc90003a4fc40 [ 455.411720][T12120] FS: 00007f0bc62066c0(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 455.420780][T12120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.427482][T12120] CR2: 0000000000000000 CR3: 000000005995a000 CR4: 00000000003526f0 [ 455.435480][T12120] Call Trace: [ 455.438787][T12120] [ 455.441764][T12120] hci_devcd_init+0x12d/0x1c0 [ 455.446511][T12120] force_devcd_write+0x1b9/0x340 [ 455.451497][T12120] ? __pfx_force_devcd_write+0x10/0x10 [ 455.456999][T12120] ? rcu_is_watching+0x12/0xc0 [ 455.461795][T12120] full_proxy_write+0x131/0x1a0 [ 455.466710][T12120] ? __pfx_full_proxy_write+0x10/0x10 [ 455.472132][T12120] vfs_write+0x2a0/0x11d0 [ 455.476492][T12120] ? __pfx___mutex_lock+0x10/0x10 [ 455.481553][T12120] ? __pfx_vfs_write+0x10/0x10 [ 455.486368][T12120] ? __fget_files+0x204/0x3c0 [ 455.491071][T12120] ? rcu_is_watching+0x12/0xc0 [ 455.495861][T12120] ? __fget_files+0x20e/0x3c0 [ 455.500569][T12120] ksys_write+0x12a/0x250 [ 455.504927][T12120] ? __pfx_ksys_write+0x10/0x10 [ 455.509810][T12120] do_syscall_64+0xcd/0x490 [ 455.514358][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.520290][T12120] RIP: 0033:0x7f0bc538ebe9 [ 455.524814][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.544452][T12120] RSP: 002b:00007f0bc6206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.552893][T12120] RAX: ffffffffffffffda RBX: 00007f0bc55b5fa0 RCX: 00007f0bc538ebe9 [ 455.561149][T12120] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 455.569227][T12120] RBP: 00007f0bc5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 455.577308][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.585303][T12120] R13: 00007f0bc55b6038 R14: 00007f0bc55b5fa0 R15: 00007ffc936fcaf8 [ 455.593306][T12120] [ 455.596354][T12120] Modules linked in: [ 455.600293][T12120] ---[ end trace 0000000000000000 ]--- [ 455.605857][T12120] RIP: 0010:skb_queue_tail+0xa2/0x150 [ 455.611285][T12120] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 80 00 00 00 4c 89 e2 4c 89 65 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 48 89 6b 08 <80> 3c 02 00 75 4f 48 8d 7b 10 49 89 2c 24 48 b8 00 00 00 00 00 fc [ 455.630919][T12120] RSP: 0018:ffffc90003a4fbb0 EFLAGS: 00010046 [ 455.637016][T12120] RAX: dffffc0000000000 RBX: ffff888028048270 RCX: ffffffff8197ab1c [ 455.645009][T12120] RDX: 0000000000000000 RSI: 0000000000000283 RDI: ffff88807a64eb48 [ 455.653014][T12120] RBP: ffff88807a64eb40 R08: 0000000000000001 R09: fffff52000749f64 [ 455.661028][T12120] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 455.669023][T12120] R13: ffff888028048288 R14: ffff888028047000 R15: ffffc90003a4fc40 [ 455.677102][T12120] FS: 00007f0bc62066c0(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 455.686056][T12120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.692661][T12120] CR2: 0000000000000000 CR3: 000000005995a000 CR4: 00000000003526f0 [ 455.700655][T12120] Kernel panic - not syncing: Fatal exception [ 455.707072][T12120] Kernel Offset: disabled [ 455.711401][T12120] Rebooting in 86400 seconds..