last executing test programs: 13.28388578s ago: executing program 3 (id=95): ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0xb) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x8}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r3, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) mmap$auto(0x200, 0xffffffffffffffff, 0x1000000000000, 0x19, r4, 0x80000000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={r4, 0x0, 0x15600000000, 0x800, 0x0, 0x7b0, [0x10001, 0x1800000000, 0x0, 0x3, 0x6]}) socket(0x2, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) 8.035516188s ago: executing program 3 (id=108): write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x8, 0x5, 0x7, 0xcb9, 0xffffffffffffffff, 0xd1) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x142f02, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x709240, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x4, 0x862, 0xffffffff, 0xfffffffb}, "0dd7fd004940347ca5e9ffffffff874999e700"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r1, 0x5420, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) r2 = dup$auto(r1) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000280)=""/121, 0x79) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) prctl$auto(0x988e, 0x9, 0x0, 0x2, 0x9) unshare$auto(0x1) mremap$auto(0x200001000000, 0x4, 0x4, 0x0, 0xa) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x5, 0x1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x20008000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000000340)="0521b70c95ef65ddcfc215ffff0000002ecf390000001eb5177116e857e7c9bfd23ca810cc501b3b40b0345de104b96c19179607a7826549844ca76ccd3778702d99385feb6bbbc9ea36ac6d97309700f065574870e17f7b31b92199be1c23ef25b0cfb6dca6dd651d28b6db63213f1987b75a3890d8e7644595c9f6e5c99633de787d090000009455e1764379ce8ac3b35a2847257afc44c4bc1f9d533d6547e38b16181dcf3c73f82ef1e8221420bdb459b6ee09debcada98ce897d91526d4a33a9d20a941cb9b60aa1c59c232add0d8bfeb49f8b222fe00"/227, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) 5.680389103s ago: executing program 3 (id=115): r0 = socket(0x9, 0x80000, 0xfffffff8) setsockopt$auto(r0, 0x29, 0xffff, &(0x7f0000000040)='\x00\x00', 0x96) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x224800, 0x1b4) open_tree_attr$auto(r1, &(0x7f0000000180)='./file0\x00', 0x9, &(0x7f0000000200)={0x5, 0x100000001, 0x10000, @raw=0xff}, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x48e1, 0xa, 0x7, 0xd4d7, r2, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f0000000480)={[0x2000000000000ff, 0x10001, 0x9, 0x8, 0xe4, 0x6, 0x30e5, 0x0, 0x8, 0x350660ac, 0x7ff, 0x0, 0x6, 0xb9, 0xf4, 0x4]}, &(0x7f0000000080)={0x6, 0x474b}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) r4 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffff1}, 0x5, 0x3, 0x9) read$auto(r4, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) 4.978522564s ago: executing program 2 (id=118): socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000040)=0x80000000) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x8000000000000000, 0x40eb1, 0x602, 0x300000000000) syz_clone3(&(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000000), {0x3f}, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x1}, 0x58) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x5, 0x80) getsockopt$auto(r0, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000080), 0x2}, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xdd01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 4.648958998s ago: executing program 2 (id=120): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(r0, 0x88, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) 4.318016581s ago: executing program 2 (id=121): mbind$auto(0xfffffffffffff000, 0x100000001, 0x100000000, 0x0, 0x6, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x381100, 0x0) futex$auto(0x0, 0x10d, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x11, 0xb, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = open(0x0, 0x7ffd, 0x12) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0) write$auto(r2, &(0x7f0000000240)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\x03\x00\x00\x00\x00\x00\x00\x00\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x801) write$auto(0x3, 0x0, 0x100082) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) r4 = semctl$auto_GETPID(0x2, 0x7, 0xb, 0x7) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0xd1, 0x125, "2fb6916dee3c95b4f3f28f4f9b3fc18236a9689534f2431d3932809d7809f26d1e9235723e5044f205e93f3212e111389bfb73743182abadc0a3097076646352e463c5402519f3d8ebb677548ec7962d178e16ee1a6a3858e0686188506e0af5b632afd2fb787d56e1810324c1e1ad20a58ea75843b5ed3015144b880cb95495b492fd0f7c1032837d9e0dda94e8f1f075c4e4bfbdffebec1dacdd307e864aae4e45ff258280c52d5081e2d946990d0a2307302f85f24f7a36b47cc60b530d5da30ea3301dac3baec5835d84a3"}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000081}, 0xc084) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 3.886845493s ago: executing program 1 (id=123): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) mmap$auto(0x80000, 0x3, 0xdf, 0x9b71, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f0000000180), 0x1) 3.618548414s ago: executing program 1 (id=125): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000340)='3\x00', 0x6) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) (async) io_submit$auto(0x6, 0x7f, &(0x7f0000000100)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x8, 0x3, 0x2, 0xffffffffffffffff, 0xffffff7ffffffc00, 0x2, 0x10000, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) (async) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x10000) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x1069c1, 0x4b) write$auto(r1, 0x0, 0x100082) (async) rseq$auto(0x0, 0x5, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) socket(0x1b, 0x801, 0x84) (async) r2 = socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) mmap$auto(0x0, 0xa, 0xdb, 0x410, 0x5, 0x8000) (async) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) open(0x0, 0xa22c0, 0x155) r3 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000180)="e1aff062bf071be97bb7f37ece394e6c0eba1bf53f3206a490a40290b30e3aef33f2c219e6efb9ce97629d831b0689a4244e38aed52c3e772744f2814361354f9d5ee2e315cb154bb450aad8a928810c1e29a7e36bb36e740bc6c14d06c878b0801ca247d8a06bf8ce27fe7d19268a5807acef2c7663a451a0adb67475bea10d3c94c5a7201579ebf4a92f390abc2c464f907f649d77ae3d1038141fd1ecf8883dd60502af68a8fa0f7190435fa8987445d5c07a72f4150368cc24d5f85fa9635ad8d87b723da97a9c830657", 0x2, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006b", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x1002, 0xde, 0x17, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.772309315s ago: executing program 1 (id=126): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000080)=@phonet={0x23, 0x6, 0x2, 0x3}, 0x3) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x143fff, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x9, 0x3, 0xfffffffffffffff9, 0xffffffffffffff91, r2, 0x1) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x2) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0x0, 0x3, 0x0}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r5 = socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_MPATH(r5, 0x0, 0x11) 2.66227896s ago: executing program 3 (id=127): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x147603, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0903, 0x0) fstat$auto(r1, 0x0) r3 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/state\x00', 0x2, 0x0) getsockopt$auto(r3, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) socket(0xa, 0x5, 0x0) 2.552714117s ago: executing program 2 (id=128): close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x4, &(0x7f0000000440)=@query={@target_fd=0xffffffffffffffff, 0x8, 0x80000000, 0x15, 0x5, @prog_cnt=0x2, 0x0, 0x8ba0, 0x277, 0xa}, 0xf) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x18080) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="79a327bd7000fbdbdf252000000006000f00500d0000e340f050d13db37e9d428677926fa17e8c8f2d8492deddaaeb4a27791a4a1d04b53761f8ae0cdb34835effe90aad7b2e1812a20c7b46d71b39585829756eeab29aef68ad8339b940e75a865a6f39a0f61e7e743c5e48d0d9c64518f098b148380b0e88a5799adafb18bb985e5ff99a4178ebaf5438e7cae377aec050db9856167db21c82bafe77569243329ec963f1d111f9d5501d15f69df9788b43e6da2d3d8fe3f43d8ca1745f1dcda84d10dd19adb1c534765caf3f3400849c9e1a51eb2f67969ba6ae8e9cbb92125a643c1b222da2bcbfa39e13147291fba124308e0efa663a6ecf5ccee3870d51b9e7cf90773424c0404f923f82d71940c95a35db198c4f"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002abd7000fbdbdf257b000000080040000400000008004a00640000000500d60007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000080) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000540)="7fe62d3af7592c2cbb167ca6d1777ff47ddcdd66621bdd07aded5b76933fda2c4bedb713a6205daef33a5dbd06c59c790bcf86f35758058db54456e33ab2ce6ee62e822f6d36a0d65051075dd4fe1a529f7673470f7c99") r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(r1, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd05, &(0x7f00000001c0)) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r8 = socket(0x1a, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) 2.045072893s ago: executing program 1 (id=131): r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000040)={0xffffffffffffffff, 0x426b}) mmap$auto(0xfffffffffffffffd, 0x4120009, 0x40000000000df, 0x16, r2, 0x8010) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) read$auto(0x3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) chmod$auto(&(0x7f0000000080)='./file0\x00', 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r2) sendmsg$auto_CGROUPSTATS_CMD_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x400000d) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r1, 0x40104d04, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async, rerun: 32) mmap$auto(0x5, 0x9644, 0xdf, 0x9b72, r0, 0x2d4a29c0) (async) madvise$auto(0x0, 0x2000040080000000, 0xe) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip6_flowlabel\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x2) 1.444476538s ago: executing program 0 (id=135): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x1000400005, 0xcf, 0xf053, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x81) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) read$auto_tk_debug_sleep_time_fops_(r2, &(0x7f00000000c0)=""/124, 0x7c) getsockopt$auto(r2, 0x1, 0x7fffffff, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x80000001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) readv$auto(0x3, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) 1.343587347s ago: executing program 3 (id=136): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x14) connect$auto(0xffffffffffffffff, 0x0, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x2, 0x19, 0x20000000009, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x402000c, 0x6, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r3, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) dup$auto(r4) 1.304933196s ago: executing program 2 (id=137): rseq$auto(&(0x7f0000000300)={0xe, 0x9, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) r2 = socket(0x22, 0x2, 0x24) getsockopt$auto(r2, 0x3, 0x1, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002ac0)='/$\x00', &(0x7f0000002b00), 0x4, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, 0x0) init_module$auto(&(0x7f0000000000), 0xee3, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r2, 0x0, 0x40) r4 = io_uring_setup$auto(0x401, 0x0) ioctl$auto_MEMLOCK(r4, 0x40084d05, &(0x7f00000000c0)={0xfffffffe, 0x7fffffff}) read$auto_full_fops_mem(r4, &(0x7f0000000000)=""/152, 0x98) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000380)='/dev/usbmon24\x00', 0x40640, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r1) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xff}, @IEEE802154_ATTR_PHY_NAME={0xd, 0x1f, '/dev/kvm\x00'}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4040044) 1.042060288s ago: executing program 1 (id=138): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x2, 0x1, 0x84) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0xffffffffffffffff, 0x0, 0x8000000010, 0x5, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000841}, 0x2000c840) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$auto(0x0, 0x0, 0x4f4) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, 0x0) syz_genetlink_get_family_id$auto_wireguard(0x0, r3) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x4, 0xffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc6fc1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.11/usb31/manufacturer\x00', 0x80, 0x0) 408.225199ms ago: executing program 0 (id=139): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) shmctl$auto(0x0, 0xc, &(0x7f0000000180)={{0x7, 0x0, 0xee01, 0x4, 0xa, 0x100, 0xfff9}, 0x0, 0x80d, 0x3fc, 0x6, @raw=0x9, @inferred, 0x4, 0x0, 0x0, 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x8, 0x20001, 0x7ffffbff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0xff) pipe2$auto(0x0, 0x80) keyctl$auto(0x8001, r1, 0x5, 0x0, 0x8) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) close_range$auto(r0, r3, 0x8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) 359.522562ms ago: executing program 1 (id=140): mlockall$auto(0x6) brk$auto(0x7b5900000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_ADD(r3, 0x0, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0xfdff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x5420, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) setsockopt$auto(r0, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) 237.978773ms ago: executing program 3 (id=141): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/65, 0x41) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x10, r1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)='5', 0x1) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) read$auto_media_devnode_fops_mc_devnode(r0, &(0x7f00000000c0)=""/11, 0xb) 209.862241ms ago: executing program 0 (id=142): io_uring_register$auto(0x2, 0x8, &(0x7f0000000180), 0x1) 0s ago: executing program 0 (id=143): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r1, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x10001) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/58, 0x3a) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x45, 0x0, 0x20000369, 0x0, 0x3, 0x6}, 0x5}, 0x108, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, r0, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 81.815358][ T5825] cgroup: Unknown subsys name 'net' [ 81.947934][ T5825] cgroup: Unknown subsys name 'cpuset' [ 81.956862][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.537255][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.802826][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.811544][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.820039][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.829270][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.838534][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.846394][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.854380][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.856377][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.869121][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.870870][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.877099][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.885308][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.897567][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.898830][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.905023][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.914000][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.928687][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.941244][ T5158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.951515][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.958881][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.321465][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.593269][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.601293][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.609357][ T5834] bridge_slave_0: entered allmulticast mode [ 86.618305][ T5834] bridge_slave_0: entered promiscuous mode [ 86.628590][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.672102][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.679657][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.686948][ T5834] bridge_slave_1: entered allmulticast mode [ 86.694169][ T5834] bridge_slave_1: entered promiscuous mode [ 86.734770][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.803333][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.816882][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.833381][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.897233][ T5834] team0: Port device team_slave_0 added [ 86.931670][ T5834] team0: Port device team_slave_1 added [ 87.022545][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.029959][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.056619][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.115183][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.122624][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.133557][ T5838] bridge_slave_0: entered allmulticast mode [ 87.141874][ T5838] bridge_slave_0: entered promiscuous mode [ 87.154835][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.162027][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.174313][ T5836] bridge_slave_0: entered allmulticast mode [ 87.182274][ T5836] bridge_slave_0: entered promiscuous mode [ 87.195166][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.202370][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.213421][ T5836] bridge_slave_1: entered allmulticast mode [ 87.222926][ T5836] bridge_slave_1: entered promiscuous mode [ 87.235325][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.242397][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.272642][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.310304][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.317924][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.329154][ T5838] bridge_slave_1: entered allmulticast mode [ 87.337379][ T5838] bridge_slave_1: entered promiscuous mode [ 87.434425][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.446465][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.453655][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.461076][ T5835] bridge_slave_0: entered allmulticast mode [ 87.469653][ T5835] bridge_slave_0: entered promiscuous mode [ 87.479498][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.491469][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.530738][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.539293][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.547639][ T5835] bridge_slave_1: entered allmulticast mode [ 87.555206][ T5835] bridge_slave_1: entered promiscuous mode [ 87.565789][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.589417][ T5836] team0: Port device team_slave_0 added [ 87.636038][ T5836] team0: Port device team_slave_1 added [ 87.648469][ T5834] hsr_slave_0: entered promiscuous mode [ 87.655539][ T5834] hsr_slave_1: entered promiscuous mode [ 87.715605][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.728881][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.739847][ T5838] team0: Port device team_slave_0 added [ 87.750012][ T5838] team0: Port device team_slave_1 added [ 87.757716][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.764779][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.791215][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.838921][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.846020][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.872298][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.938829][ T5835] team0: Port device team_slave_0 added [ 87.945931][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.952920][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.979077][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.985060][ T5843] Bluetooth: hci2: command tx timeout [ 87.990120][ T5840] Bluetooth: hci1: command tx timeout [ 88.001286][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.009261][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.035946][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.064186][ T5843] Bluetooth: hci0: command tx timeout [ 88.070014][ T5840] Bluetooth: hci3: command tx timeout [ 88.075176][ T5835] team0: Port device team_slave_1 added [ 88.114911][ T5836] hsr_slave_0: entered promiscuous mode [ 88.121561][ T5836] hsr_slave_1: entered promiscuous mode [ 88.127911][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 88.133727][ T5836] Cannot create hsr debugfs directory [ 88.172240][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.179522][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.205560][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.239169][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.246222][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.272403][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.316320][ T5838] hsr_slave_0: entered promiscuous mode [ 88.322662][ T5838] hsr_slave_1: entered promiscuous mode [ 88.329433][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 88.335307][ T5838] Cannot create hsr debugfs directory [ 88.529382][ T5835] hsr_slave_0: entered promiscuous mode [ 88.535874][ T5835] hsr_slave_1: entered promiscuous mode [ 88.541960][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.551167][ T5835] Cannot create hsr debugfs directory [ 88.719194][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.757605][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.797932][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.811358][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.959122][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.972205][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.997764][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.018114][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.071425][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.094990][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.126201][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.137096][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.225787][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.240623][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.287292][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.298825][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.345440][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.439312][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.465521][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.472739][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.511164][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.518601][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.540643][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.583816][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.652865][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.669803][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.688654][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.695837][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.722383][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.740665][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.747880][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.759876][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.767109][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.793942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.801144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.901627][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.948177][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.955398][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.971242][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.978587][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.067356][ T5840] Bluetooth: hci2: command tx timeout [ 90.072810][ T5840] Bluetooth: hci1: command tx timeout [ 90.149157][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.155914][ T5840] Bluetooth: hci3: command tx timeout [ 90.161440][ T5840] Bluetooth: hci0: command tx timeout [ 90.342027][ T5834] veth0_vlan: entered promiscuous mode [ 90.397050][ T5834] veth1_vlan: entered promiscuous mode [ 90.508406][ T5834] veth0_macvtap: entered promiscuous mode [ 90.535750][ T5834] veth1_macvtap: entered promiscuous mode [ 90.616906][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.646940][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.661957][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.683178][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.698752][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.721340][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731434][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.742240][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.817268][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.890153][ T5836] veth0_vlan: entered promiscuous mode [ 90.931234][ T5838] veth0_vlan: entered promiscuous mode [ 90.948251][ T5836] veth1_vlan: entered promiscuous mode [ 90.978966][ T5838] veth1_vlan: entered promiscuous mode [ 90.996376][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.008524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.061166][ T5835] veth0_vlan: entered promiscuous mode [ 91.100967][ T5836] veth0_macvtap: entered promiscuous mode [ 91.114761][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.120994][ T5835] veth1_vlan: entered promiscuous mode [ 91.128660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.139117][ T5836] veth1_macvtap: entered promiscuous mode [ 91.196660][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.232653][ T5838] veth0_macvtap: entered promiscuous mode [ 91.237825][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.243814][ T5838] veth1_macvtap: entered promiscuous mode [ 91.283470][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.331935][ T5835] veth0_macvtap: entered promiscuous mode [ 91.348289][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.361057][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.389743][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.399934][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.415844][ T5835] veth1_macvtap: entered promiscuous mode [ 91.438689][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.470056][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.499505][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.566895][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.580966][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635734][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.680099][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695605][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.760262][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777849][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.793990][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.818932][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.834946][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.898596][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987793][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.009536][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.144701][ T5840] Bluetooth: hci1: command tx timeout [ 92.144732][ T5843] Bluetooth: hci2: command tx timeout [ 92.175723][ T1209] cfg80211: failed to load regulatory.db [ 92.242578][ T5843] Bluetooth: hci0: command tx timeout [ 92.242596][ T5840] Bluetooth: hci3: command tx timeout [ 92.322671][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.352300][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.384469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.636265][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.644345][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.666602][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.669777][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.746484][ T5940] Zero length message leads to an empty skb [ 92.768237][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.784337][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.185354][ T5948] process 'syz.3.4' launched '/dev/fd/3' with NULL argv: empty string added [ 93.336489][ T5950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.041101][ T5970] syz.2.8(5970): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 94.175778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.225289][ T5843] Bluetooth: hci2: command tx timeout [ 94.234312][ T5843] Bluetooth: hci1: command tx timeout [ 94.304301][ T5843] Bluetooth: hci3: command tx timeout [ 94.305099][ T5840] Bluetooth: hci0: command tx timeout [ 94.804650][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.900242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.184906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.194632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.554336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.562937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.571656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.581028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.590012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.955880][ T5991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.741024][ T5999] mmap: syz.1.14 (5999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.046550][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.648112][ T6021] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 99.567561][ T6022] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 102.320185][ T6091] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1851878519.48.0), cmd(16) [ 102.622344][ T6093] FAULT_INJECTION: forcing a failure. [ 102.622344][ T6093] name failslab, interval 1, probability 0, space 0, times 1 [ 102.647671][ T6093] CPU: 0 UID: 7 PID: 6093 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) [ 102.647705][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.647723][ T6093] Call Trace: [ 102.647732][ T6093] [ 102.647741][ T6093] dump_stack_lvl+0x16c/0x1f0 [ 102.647787][ T6093] should_fail_ex+0x512/0x640 [ 102.647809][ T6093] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 102.647839][ T6093] should_failslab+0xc2/0x120 [ 102.647867][ T6093] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 102.647901][ T6093] ? sock_alloc_inode+0x25/0x1c0 [ 102.647930][ T6093] ? __pfx_sock_alloc_inode+0x10/0x10 [ 102.647952][ T6093] sock_alloc_inode+0x25/0x1c0 [ 102.647978][ T6093] alloc_inode+0x64/0x240 [ 102.648009][ T6093] sock_alloc+0x40/0x280 [ 102.648045][ T6093] __sock_create+0xc1/0x8d0 [ 102.648082][ T6093] __sys_socket+0x14d/0x260 [ 102.648110][ T6093] ? __pfx___sys_socket+0x10/0x10 [ 102.648136][ T6093] ? xfd_validate_state+0x61/0x180 [ 102.648167][ T6093] __x64_sys_socket+0x72/0xb0 [ 102.648192][ T6093] ? lockdep_hardirqs_on+0x7c/0x110 [ 102.648224][ T6093] do_syscall_64+0xcd/0x4b0 [ 102.648260][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.648278][ T6093] RIP: 0033:0x7fdf0a78eec9 [ 102.648300][ T6093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.648316][ T6093] RSP: 002b:00007fdf0b5a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.648329][ T6093] RAX: ffffffffffffffda RBX: 00007fdf0a9e5fa0 RCX: 00007fdf0a78eec9 [ 102.648338][ T6093] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 102.648345][ T6093] RBP: 00007fdf0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.648353][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.648361][ T6093] R13: 00007fdf0a9e6038 R14: 00007fdf0a9e5fa0 R15: 00007ffff602ec88 [ 102.648379][ T6093] [ 103.005357][ T6093] socket: no more sockets [ 104.244081][ T6117] syz.1.31 (6117) used greatest stack depth: 19144 bytes left [ 104.283590][ T6125] device-mapper: ioctl: Unable to rename non-existent device,  to [ 104.404618][ T6119] FAULT_INJECTION: forcing a failure. [ 104.404618][ T6119] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.428974][ T6119] CPU: 1 UID: 0 PID: 6119 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 104.428995][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.429004][ T6119] Call Trace: [ 104.429009][ T6119] [ 104.429015][ T6119] dump_stack_lvl+0x16c/0x1f0 [ 104.429041][ T6119] should_fail_ex+0x512/0x640 [ 104.429057][ T6119] get_futex_key+0x293/0x1560 [ 104.429080][ T6119] ? __pfx_get_futex_key+0x10/0x10 [ 104.429099][ T6119] ? __mutex_trylock_common+0xe9/0x250 [ 104.429126][ T6119] futex_wake+0xea/0x530 [ 104.429142][ T6119] ? __pfx_futex_wake+0x10/0x10 [ 104.429163][ T6119] do_futex+0x1e3/0x350 [ 104.429183][ T6119] ? __pfx_do_futex+0x10/0x10 [ 104.429201][ T6119] ? __might_fault+0xe3/0x190 [ 104.429220][ T6119] mm_release+0x24e/0x300 [ 104.429238][ T6119] do_exit+0x68e/0x2bf0 [ 104.429263][ T6119] ? __pfx_do_exit+0x10/0x10 [ 104.429283][ T6119] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.429297][ T6119] ? find_held_lock+0x2b/0x80 [ 104.429316][ T6119] do_group_exit+0xd3/0x2a0 [ 104.429338][ T6119] get_signal+0x2671/0x26d0 [ 104.429363][ T6119] ? __pfx_get_signal+0x10/0x10 [ 104.429380][ T6119] ? do_futex+0x122/0x350 [ 104.429400][ T6119] ? __pfx_do_futex+0x10/0x10 [ 104.429422][ T6119] arch_do_signal_or_restart+0x8f/0x790 [ 104.429443][ T6119] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 104.429467][ T6119] ? ksys_write+0x1ac/0x250 [ 104.429481][ T6119] ? __pfx_ksys_write+0x10/0x10 [ 104.429498][ T6119] exit_to_user_mode_loop+0x7a/0x100 [ 104.429513][ T6119] do_syscall_64+0x419/0x4b0 [ 104.429536][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.429550][ T6119] RIP: 0033:0x7fe92878eec9 [ 104.429562][ T6119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.429575][ T6119] RSP: 002b:00007fe9296610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.429588][ T6119] RAX: fffffffffffffe00 RBX: 00007fe9289e5fa8 RCX: 00007fe92878eec9 [ 104.429597][ T6119] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe9289e5fa8 [ 104.429605][ T6119] RBP: 00007fe9289e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.429613][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.429621][ T6119] R13: 00007fe9289e6038 R14: 00007ffc8462d2b0 R15: 00007ffc8462d398 [ 104.429639][ T6119] [ 105.671783][ T6156] tipc: Can't bind to reserved service type 1 [ 108.098046][ T6194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.302557][ T6235] can: request_module (can-proto-5) failed. [ 113.044149][ T30] audit: type=1804 audit(1759475655.684:2): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.62" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 113.357011][ T6243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.404926][ T6243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.474367][ T6243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.547271][ T6249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.586995][ T6243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.613515][ T6243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.706409][ T6243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.802619][ T6243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.832426][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.126616][ T6243] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.249409][ T6243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.264340][ T6243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.305727][ T6243] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.710136][ T6285] sp0: Synchronizing with TNC [ 114.921885][ T6288] futex_wake_op: syz.0.66 tries to shift op by -2048; fix this program [ 115.034556][ T6288] ptp ptp0: new virtual clock ptp1 [ 115.042950][ T6288] ptp ptp0: new virtual clock ptp2 [ 115.060867][ T6288] ptp ptp0: new virtual clock ptp3 [ 115.067686][ T6288] ptp ptp0: guarantee physical clock free running [ 115.424579][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.502990][ T6296] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 115.664331][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.824556][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.306815][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.897365][ T6310] zswap: compressor not available [ 117.234179][ T6330] FAULT_INJECTION: forcing a failure. [ 117.234179][ T6330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.260902][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.0.71 Not tainted syzkaller #0 PREEMPT(full) [ 117.260938][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.260954][ T6330] Call Trace: [ 117.260963][ T6330] [ 117.260973][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 117.261018][ T6330] should_fail_ex+0x512/0x640 [ 117.261051][ T6330] should_fail_alloc_page+0xe7/0x130 [ 117.261084][ T6330] prepare_alloc_pages+0x3c2/0x610 [ 117.261124][ T6330] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 117.261157][ T6330] ? finish_task_switch.isra.0+0x21c/0xc10 [ 117.261190][ T6330] ? rcu_is_watching+0x12/0xc0 [ 117.261221][ T6330] ? finish_task_switch.isra.0+0x221/0xc10 [ 117.261251][ T6330] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.261285][ T6330] ? finish_task_switch.isra.0+0x221/0xc10 [ 117.261317][ T6330] ? rcu_is_watching+0x12/0xc0 [ 117.261347][ T6330] ? trace_sched_exit_tp+0xd1/0x120 [ 117.261373][ T6330] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.261416][ T6330] ? __lock_acquire+0x62e/0x1ce0 [ 117.261458][ T6330] ? __pfx___schedule+0x10/0x10 [ 117.261487][ T6330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.261517][ T6330] ? policy_nodemask+0xea/0x4e0 [ 117.261556][ T6330] alloc_pages_mpol+0x1fb/0x550 [ 117.261587][ T6330] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.261622][ T6330] ? __lock_acquire+0x62e/0x1ce0 [ 117.261662][ T6330] folio_alloc_mpol_noprof+0x36/0x2f0 [ 117.261697][ T6330] vma_alloc_folio_noprof+0xed/0x1e0 [ 117.261731][ T6330] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.261776][ T6330] do_pte_missing+0x2230/0x3ba0 [ 117.261815][ T6330] ? find_held_lock+0x2b/0x80 [ 117.261854][ T6330] __handle_mm_fault+0x152a/0x2a50 [ 117.261902][ T6330] ? __pfx___handle_mm_fault+0x10/0x10 [ 117.261946][ T6330] ? lock_vma_under_rcu+0x1eb/0x530 [ 117.261995][ T6330] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 117.262032][ T6330] ? cap_task_prctl+0x2af/0xa80 [ 117.262064][ T6330] handle_mm_fault+0x589/0xd10 [ 117.262104][ T6330] ? __pkru_allows_pkey+0x31/0xb0 [ 117.262133][ T6330] do_user_addr_fault+0x60c/0x1370 [ 117.262166][ T6330] ? rcu_is_watching+0x12/0xc0 [ 117.262201][ T6330] exc_page_fault+0x5c/0xb0 [ 117.262236][ T6330] asm_exc_page_fault+0x26/0x30 [ 117.262260][ T6330] RIP: 0033:0x7fe92865a75b [ 117.262282][ T6330] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 fb 3a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 117.262308][ T6330] RSP: 002b:00007fe92965ffb0 EFLAGS: 00010202 [ 117.262330][ T6330] RAX: 0000000000000000 RBX: 00007fe9289e5fa0 RCX: 0000000000000000 [ 117.262346][ T6330] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000240 [ 117.262362][ T6330] RBP: 00007fe928811f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.262378][ T6330] R10: 0000200000000240 R11: 0000000000000000 R12: 0000000000000000 [ 117.262393][ T6330] R13: 00007fe9289e6038 R14: 00007fe9289e5fa0 R15: 00007ffc8462d398 [ 117.262429][ T6330] [ 117.262629][ T6330] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 117.522912][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.700345][ T6310] HfR: entered promiscuous mode [ 117.760330][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.911544][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.395524][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.640932][ T6357] random: crng reseeded on system resumption [ 119.594812][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.824514][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.010778][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.464125][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.500416][ T6398] FAULT_INJECTION: forcing a failure. [ 120.500416][ T6398] name failslab, interval 1, probability 0, space 0, times 0 [ 120.546180][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 120.546216][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.546232][ T6398] Call Trace: [ 120.546241][ T6398] [ 120.546251][ T6398] dump_stack_lvl+0x16c/0x1f0 [ 120.546305][ T6398] should_fail_ex+0x512/0x640 [ 120.546329][ T6398] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 120.546359][ T6398] should_failslab+0xc2/0x120 [ 120.546390][ T6398] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 120.546417][ T6398] ? __d_alloc+0x32/0xae0 [ 120.546448][ T6398] __d_alloc+0x32/0xae0 [ 120.546472][ T6398] ? __lock_acquire+0xb97/0x1ce0 [ 120.546513][ T6398] d_alloc_parallel+0x111/0x1480 [ 120.546549][ T6398] ? kasan_save_free_info+0x3b/0x60 [ 120.546584][ T6398] ? __kasan_slab_free+0x60/0x70 [ 120.546608][ T6398] ? walk_component+0x1a5/0x5b0 [ 120.546640][ T6398] ? link_path_walk+0x511/0xe20 [ 120.546674][ T6398] ? path_openat+0x1b0/0x2cb0 [ 120.546695][ T6398] ? do_sys_openat2+0x11b/0x1d0 [ 120.546731][ T6398] ? __lock_acquire+0xb97/0x1ce0 [ 120.546764][ T6398] ? __pfx_d_alloc_parallel+0x10/0x10 [ 120.546798][ T6398] ? lockdep_init_map_type+0x5c/0x280 [ 120.546835][ T6398] ? lockdep_init_map_type+0x5c/0x280 [ 120.546878][ T6398] __lookup_slow+0x193/0x460 [ 120.546912][ T6398] ? __pfx___lookup_slow+0x10/0x10 [ 120.546976][ T6398] ? lookup_fast+0x156/0x610 [ 120.547018][ T6398] walk_component+0x353/0x5b0 [ 120.547060][ T6398] link_path_walk+0x627/0xe20 [ 120.547110][ T6398] path_openat+0x1b0/0x2cb0 [ 120.547133][ T6398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.547169][ T6398] ? __pfx_path_openat+0x10/0x10 [ 120.547202][ T6398] do_filp_open+0x20b/0x470 [ 120.547235][ T6398] ? __pfx_do_filp_open+0x10/0x10 [ 120.547275][ T6398] ? __pfx_kfree_link+0x10/0x10 [ 120.547320][ T6398] ? alloc_fd+0x471/0x7d0 [ 120.547369][ T6398] do_sys_openat2+0x11b/0x1d0 [ 120.547402][ T6398] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.547449][ T6398] __x64_sys_openat+0x174/0x210 [ 120.547484][ T6398] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.547535][ T6398] do_syscall_64+0xcd/0x4b0 [ 120.547574][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.547600][ T6398] RIP: 0033:0x7f4942f8eec9 [ 120.547633][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.547658][ T6398] RSP: 002b:00007f4943e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.547683][ T6398] RAX: ffffffffffffffda RBX: 00007f49431e5fa0 RCX: 00007f4942f8eec9 [ 120.547701][ T6398] RDX: 00000000000c8241 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 120.547717][ T6398] RBP: 00007f4943011f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.547732][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.547747][ T6398] R13: 00007f49431e6038 R14: 00007f49431e5fa0 R15: 00007ffd067443d8 [ 120.547783][ T6398] [ 121.325757][ T6406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 122.756968][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 122.899764][ T6433] sp0: Synchronizing with TNC [ 126.239458][ T6488] FAULT_INJECTION: forcing a failure. [ 126.239458][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 126.290446][ T6486] random: crng reseeded on system resumption [ 126.315219][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.0.98 Not tainted syzkaller #0 PREEMPT(full) [ 126.315253][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.315266][ T6488] Call Trace: [ 126.315274][ T6488] [ 126.315283][ T6488] dump_stack_lvl+0x16c/0x1f0 [ 126.315322][ T6488] should_fail_ex+0x512/0x640 [ 126.315345][ T6488] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.315384][ T6488] should_failslab+0xc2/0x120 [ 126.315412][ T6488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.315452][ T6488] ? debug_mutex_init+0x37/0x70 [ 126.315479][ T6488] ? single_open+0x4d/0x1f0 [ 126.315514][ T6488] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 126.315546][ T6488] single_open+0x4d/0x1f0 [ 126.315577][ T6488] blk_mq_debugfs_open+0xde/0x1b0 [ 126.315608][ T6488] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 126.315634][ T6488] full_proxy_open_regular+0x1b6/0x360 [ 126.315663][ T6488] do_dentry_open+0x97f/0x1530 [ 126.315689][ T6488] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 126.315721][ T6488] vfs_open+0x82/0x3f0 [ 126.315757][ T6488] path_openat+0x1de4/0x2cb0 [ 126.315794][ T6488] ? __pfx_path_openat+0x10/0x10 [ 126.315829][ T6488] do_filp_open+0x20b/0x470 [ 126.315854][ T6488] ? __pfx_do_filp_open+0x10/0x10 [ 126.315905][ T6488] ? alloc_fd+0x471/0x7d0 [ 126.315950][ T6488] do_sys_openat2+0x11b/0x1d0 [ 126.316006][ T6488] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.316052][ T6488] __x64_sys_openat+0x174/0x210 [ 126.316084][ T6488] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.316131][ T6488] do_syscall_64+0xcd/0x4b0 [ 126.316168][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.316192][ T6488] RIP: 0033:0x7fe92878eec9 [ 126.316209][ T6488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.316229][ T6488] RSP: 002b:00007fe929661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.316251][ T6488] RAX: ffffffffffffffda RBX: 00007fe9289e5fa0 RCX: 00007fe92878eec9 [ 126.316268][ T6488] RDX: 0000000000040000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 126.316282][ T6488] RBP: 00007fe928811f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.316296][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.316310][ T6488] R13: 00007fe9289e6038 R14: 00007fe9289e5fa0 R15: 00007ffc8462d398 [ 126.316344][ T6488] [ 126.736598][ T6500] FAULT_INJECTION: forcing a failure. [ 126.736598][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 126.816313][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(full) [ 126.816333][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.816343][ T6500] Call Trace: [ 126.816347][ T6500] [ 126.816354][ T6500] dump_stack_lvl+0x16c/0x1f0 [ 126.816381][ T6500] should_fail_ex+0x512/0x640 [ 126.816395][ T6500] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 126.816412][ T6500] should_failslab+0xc2/0x120 [ 126.816429][ T6500] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 126.816443][ T6500] ? do_epoll_ctl+0x24d7/0x3790 [ 126.816461][ T6500] do_epoll_ctl+0x24d7/0x3790 [ 126.816483][ T6500] ? __pfx_do_epoll_ctl+0x10/0x10 [ 126.816496][ T6500] ? find_held_lock+0x2b/0x80 [ 126.816512][ T6500] ? __might_fault+0xe3/0x190 [ 126.816525][ T6500] ? __might_fault+0xe3/0x190 [ 126.816545][ T6500] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 126.816558][ T6500] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 126.816573][ T6500] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 126.816592][ T6500] do_syscall_64+0xcd/0x4b0 [ 126.816615][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.816629][ T6500] RIP: 0033:0x7fe92878eec9 [ 126.816641][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.816654][ T6500] RSP: 002b:00007fe929661038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 126.816667][ T6500] RAX: ffffffffffffffda RBX: 00007fe9289e5fa0 RCX: 00007fe92878eec9 [ 126.816677][ T6500] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 126.816685][ T6500] RBP: 00007fe928811f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.816693][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.816701][ T6500] R13: 00007fe9289e6038 R14: 00007fe9289e5fa0 R15: 00007ffc8462d398 [ 126.816719][ T6500] [ 129.405501][ T6526] FAULT_INJECTION: forcing a failure. [ 129.405501][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.434224][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 129.434256][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.434270][ T6526] Call Trace: [ 129.434278][ T6526] [ 129.434286][ T6526] dump_stack_lvl+0x16c/0x1f0 [ 129.434325][ T6526] should_fail_ex+0x512/0x640 [ 129.434357][ T6526] _copy_from_user+0x2e/0xd0 [ 129.434387][ T6526] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 129.434420][ T6526] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 129.434463][ T6526] do_ipv6_setsockopt+0x86e/0x4350 [ 129.434493][ T6526] ? aa_label_sk_perm+0x195/0x600 [ 129.434526][ T6526] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 129.434556][ T6526] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 129.434592][ T6526] ? find_held_lock+0x2b/0x80 [ 129.434621][ T6526] ? get_pid_task+0xfc/0x250 [ 129.434670][ T6526] ? __pfx___might_resched+0x10/0x10 [ 129.434698][ T6526] ? __lock_acquire+0x62e/0x1ce0 [ 129.434736][ T6526] ? aa_sk_perm+0x2f4/0xb10 [ 129.434760][ T6526] ? ksys_write+0x190/0x250 [ 129.434786][ T6526] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.434819][ T6526] ? ipv6_setsockopt+0xcb/0x170 [ 129.434846][ T6526] ipv6_setsockopt+0xcb/0x170 [ 129.434879][ T6526] udpv6_setsockopt+0x7d/0xd0 [ 129.434917][ T6526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 129.434946][ T6526] do_sock_setsockopt+0xf3/0x1d0 [ 129.434973][ T6526] __sys_setsockopt+0x120/0x1a0 [ 129.435012][ T6526] __x64_sys_setsockopt+0xbd/0x160 [ 129.435042][ T6526] ? do_syscall_64+0x91/0x4b0 [ 129.435074][ T6526] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.435105][ T6526] do_syscall_64+0xcd/0x4b0 [ 129.435142][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.435166][ T6526] RIP: 0033:0x7fe92878eec9 [ 129.435185][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.435213][ T6526] RSP: 002b:00007fe929661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.435237][ T6526] RAX: ffffffffffffffda RBX: 00007fe9289e5fa0 RCX: 00007fe92878eec9 [ 129.435253][ T6526] RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000003 [ 129.435267][ T6526] RBP: 00007fe929661090 R08: 0000000000000110 R09: 0000000000000000 [ 129.435282][ T6526] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 129.435297][ T6526] R13: 00007fe9289e6038 R14: 00007fe9289e5fa0 R15: 00007ffc8462d398 [ 129.435331][ T6526] [ 130.699059][ T6549] FAULT_INJECTION: forcing a failure. [ 130.699059][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 130.984938][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 130.984972][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.984986][ T6549] Call Trace: [ 130.984993][ T6549] [ 130.985002][ T6549] dump_stack_lvl+0x16c/0x1f0 [ 130.985045][ T6549] should_fail_ex+0x512/0x640 [ 130.985066][ T6549] ? __kmalloc_noprof+0xbf/0x510 [ 130.985089][ T6549] ? sk_prot_alloc+0x1a8/0x2a0 [ 130.985110][ T6549] should_failslab+0xc2/0x120 [ 130.985135][ T6549] __kmalloc_noprof+0xd2/0x510 [ 130.985163][ T6549] sk_prot_alloc+0x1a8/0x2a0 [ 130.985189][ T6549] sk_alloc+0x36/0xc20 [ 130.985221][ T6549] __netlink_create+0x5e/0x2c0 [ 130.985249][ T6549] ? __wake_up+0x3f/0x60 [ 130.985281][ T6549] netlink_create+0x39e/0x620 [ 130.985311][ T6549] ? __pfx_genl_bind+0x10/0x10 [ 130.985331][ T6549] ? __pfx_genl_unbind+0x10/0x10 [ 130.985351][ T6549] ? __pfx_genl_release+0x10/0x10 [ 130.985376][ T6549] __sock_create+0x335/0x8d0 [ 130.985408][ T6549] __sys_socket+0x14d/0x260 [ 130.985433][ T6549] ? __fget_files+0x20e/0x3c0 [ 130.985455][ T6549] ? __pfx___sys_socket+0x10/0x10 [ 130.985481][ T6549] ? xfd_validate_state+0x61/0x180 [ 130.985513][ T6549] __x64_sys_socket+0x72/0xb0 [ 130.985538][ T6549] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.985568][ T6549] do_syscall_64+0xcd/0x4b0 [ 130.985603][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.985626][ T6549] RIP: 0033:0x7fdf0a78eec9 [ 130.985645][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.985667][ T6549] RSP: 002b:00007fdf0b546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 130.985688][ T6549] RAX: ffffffffffffffda RBX: 00007fdf0a9e6270 RCX: 00007fdf0a78eec9 [ 130.985701][ T6549] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 130.985715][ T6549] RBP: 00007fdf0a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.985728][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.985741][ T6549] R13: 00007fdf0a9e6308 R14: 00007fdf0a9e6270 R15: 00007ffff602ec88 [ 130.985777][ T6549] [ 131.536731][ T6554] FAULT_INJECTION: forcing a failure. [ 131.536731][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 131.624045][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT(full) [ 131.624080][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.624096][ T6554] Call Trace: [ 131.624104][ T6554] [ 131.624114][ T6554] dump_stack_lvl+0x16c/0x1f0 [ 131.624158][ T6554] should_fail_ex+0x512/0x640 [ 131.624183][ T6554] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 131.624225][ T6554] should_failslab+0xc2/0x120 [ 131.624255][ T6554] __kmalloc_cache_noprof+0x6a/0x3e0 [ 131.624290][ T6554] ? find_held_lock+0x2b/0x80 [ 131.624319][ T6554] ? snd_seq_port_connect+0x61/0x580 [ 131.624362][ T6554] snd_seq_port_connect+0x61/0x580 [ 131.624397][ T6554] ? _raw_read_unlock+0x28/0x50 [ 131.624428][ T6554] ? check_subscription_permission.isra.0+0xf5/0x240 [ 131.624468][ T6554] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 131.624511][ T6554] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 131.624566][ T6554] call_seq_client_ctl+0x9f/0x110 [ 131.624601][ T6554] snd_seq_kernel_client_ctl+0x77/0xd0 [ 131.624641][ T6554] snd_seq_oss_midi_open+0x62d/0x720 [ 131.624672][ T6554] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 131.624699][ T6554] ? snd_seq_oss_midi_reset+0x180/0x530 [ 131.624738][ T6554] ? rcu_is_watching+0x12/0xc0 [ 131.624769][ T6554] ? trace_contention_end+0xdd/0x130 [ 131.624814][ T6554] snd_seq_oss_synth_reset+0x437/0x810 [ 131.624847][ T6554] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 131.624884][ T6554] ? __pfx___fsnotify_parent+0x10/0x10 [ 131.624942][ T6554] snd_seq_oss_reset+0x73/0x290 [ 131.624984][ T6554] ? __pfx_odev_release+0x10/0x10 [ 131.625020][ T6554] snd_seq_oss_release+0x7c/0x180 [ 131.625061][ T6554] odev_release+0x56/0xa0 [ 131.625098][ T6554] __fput+0x402/0xb70 [ 131.625139][ T6554] task_work_run+0x150/0x240 [ 131.625167][ T6554] ? __pfx_task_work_run+0x10/0x10 [ 131.625194][ T6554] ? __pfx___do_sys_close_range+0x10/0x10 [ 131.625228][ T6554] exit_to_user_mode_loop+0xdd/0x100 [ 131.625256][ T6554] do_syscall_64+0x419/0x4b0 [ 131.625295][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.625320][ T6554] RIP: 0033:0x7f4942f8eec9 [ 131.625342][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.625367][ T6554] RSP: 002b:00007f4943e1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 131.625393][ T6554] RAX: 0000000000000000 RBX: 00007f49431e5fa0 RCX: 00007f4942f8eec9 [ 131.625409][ T6554] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 131.625425][ T6554] RBP: 00007f4943011f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.625440][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.625455][ T6554] R13: 00007f49431e6038 R14: 00007f49431e5fa0 R15: 00007ffd067443d8 [ 131.625492][ T6554] [ 132.340171][ T6564] netlink: 342 bytes leftover after parsing attributes in process `syz.2.114'. [ 132.484373][ T6568] netlink: 342 bytes leftover after parsing attributes in process `syz.2.114'. [ 132.831790][ T6562] zswap: compressor 000 not available [ 134.479083][ T6596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.628304][ T6619] FAULT_INJECTION: forcing a failure. [ 135.628304][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.704152][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(full) [ 135.704187][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.704202][ T6619] Call Trace: [ 135.704211][ T6619] [ 135.704222][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 135.704266][ T6619] should_fail_ex+0x512/0x640 [ 135.704296][ T6619] _copy_from_user+0x2e/0xd0 [ 135.704323][ T6619] usbdev_ioctl+0x22d2/0x4070 [ 135.704359][ T6619] ? __pfx_usbdev_ioctl+0x10/0x10 [ 135.704392][ T6619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.704421][ T6619] ? do_vfs_ioctl+0x128/0x14f0 [ 135.704471][ T6619] ? find_held_lock+0x2b/0x80 [ 135.704498][ T6619] ? hook_file_ioctl_common+0x145/0x410 [ 135.704534][ T6619] ? __fget_files+0x20e/0x3c0 [ 135.704563][ T6619] ? __pfx_usbdev_ioctl+0x10/0x10 [ 135.704601][ T6619] __x64_sys_ioctl+0x18e/0x210 [ 135.704640][ T6619] do_syscall_64+0xcd/0x4b0 [ 135.704676][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.704702][ T6619] RIP: 0033:0x7fa92118eec9 [ 135.704724][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.704747][ T6619] RSP: 002b:00007fa9220df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.704769][ T6619] RAX: ffffffffffffffda RBX: 00007fa9213e5fa0 RCX: 00007fa92118eec9 [ 135.704784][ T6619] RDX: 00002000000001c0 RSI: 00000000c0185500 RDI: 0000000000000007 [ 135.704800][ T6619] RBP: 00007fa921211f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.704815][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.704829][ T6619] R13: 00007fa9213e6038 R14: 00007fa9213e5fa0 R15: 00007ffc052b8028 [ 135.704864][ T6619] [ 135.839218][ T6624] device-mapper: ioctl: Unable to rename non-existent device, to uuid Y,,|w}fb[v?,K ]:]Ŝy φWXDV:n./m6PQ]RvsG| [ 137.212541][ T6649] random: crng reseeded on system resumption [ 137.424499][ T6657] Invalid ELF header magic: != ELF [ 138.241804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.257895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.302387][ T6675] i2c i2c-0: delete_device: Can't find device in list [ 138.372210][ T6650] delete_channel: no stack [ 138.402494][ T6675] ------------[ cut here ]------------ [ 138.408214][ T6675] WARNING: CPU: 0 PID: 6675 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 138.418826][ T6675] Modules linked in: [ 138.422984][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT(full) [ 138.432749][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.443251][ T6675] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 138.449796][ T6675] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 138.469677][ T6675] RSP: 0018:ffffc9000aa77990 EFLAGS: 00010293 [ 138.475827][ T6675] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 138.483808][ T6675] RDX: ffff888027ee3c80 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 138.491855][ T6675] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 138.499910][ T6675] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807d612048 [ 138.508035][ T6675] R13: dffffc0000000000 R14: ffffc9000aa77a28 R15: 0000000000000000 [ 138.516076][ T6675] FS: 0000000000000000(0000) GS:ffff888124e5d000(0000) knlGS:0000000000000000 [ 138.525885][ T6675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.533258][ T6675] CR2: 0000001b31623ffc CR3: 000000000df82000 CR4: 00000000003526f0 [ 138.541323][ T6675] Call Trace: [ 138.544675][ T6675] [ 138.547609][ T6675] remove_vma+0x88/0x160 [ 138.551856][ T6675] exit_mmap+0x511/0xb90 [ 138.556179][ T6675] ? __pfx_exit_mmap+0x10/0x10 [ 138.560990][ T6675] ? __lock_acquire+0xb97/0x1ce0 [ 138.565979][ T6675] ? arch_uprobe_clear_state+0x16/0x150 [ 138.571529][ T6675] __mmput+0x12a/0x410 [ 138.575671][ T6675] mmput+0x62/0x70 [ 138.579431][ T6675] do_exit+0x7c7/0x2bf0 [ 138.583625][ T6675] ? __pfx_do_exit+0x10/0x10 [ 138.588318][ T6675] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.593373][ T6675] ? find_held_lock+0x2b/0x80 [ 138.599065][ T6675] do_group_exit+0xd3/0x2a0 [ 138.603618][ T6675] get_signal+0x2671/0x26d0 [ 138.608219][ T6675] ? __pfx_get_signal+0x10/0x10 [ 138.613094][ T6675] ? do_futex+0x122/0x350 [ 138.617462][ T6675] ? __pfx_do_futex+0x10/0x10 [ 138.622154][ T6675] arch_do_signal_or_restart+0x8f/0x790 [ 138.628433][ T6675] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 138.635074][ T6675] ? ksys_read+0x1ac/0x250 [ 138.639498][ T6675] ? __pfx_ksys_read+0x10/0x10 [ 138.644296][ T6675] exit_to_user_mode_loop+0x7a/0x100 [ 138.649582][ T6675] do_syscall_64+0x419/0x4b0 [ 138.654231][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.660124][ T6675] RIP: 0033:0x7f4942f8eec9 [ 138.664602][ T6675] Code: Unable to access opcode bytes at 0x7f4942f8ee9f. [ 138.671629][ T6675] RSP: 002b:00007f4943e1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.680249][ T6675] RAX: fffffffffffffe00 RBX: 00007f49431e5fa8 RCX: 00007f4942f8eec9 [ 138.688336][ T6675] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49431e5fa8 [ 138.696453][ T6675] RBP: 00007f49431e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 138.704576][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.712542][ T6675] R13: 00007f49431e6038 R14: 00007ffd067442f0 R15: 00007ffd067443d8 [ 138.720584][ T6675] [ 138.723605][ T6675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.730879][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT(full) [ 138.740065][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.750114][ T6675] Call Trace: [ 138.753410][ T6675] [ 138.756332][ T6675] dump_stack_lvl+0x3d/0x1f0 [ 138.760926][ T6675] vpanic+0x6e8/0x7a0 [ 138.764916][ T6675] ? __pfx_vpanic+0x10/0x10 [ 138.769422][ T6675] ? tracing_buffers_mmap_close+0xdd/0x130 [ 138.775231][ T6675] panic+0xca/0xd0 [ 138.778973][ T6675] ? __pfx_panic+0x10/0x10 [ 138.783423][ T6675] ? check_panic_on_warn+0x1f/0xb0 [ 138.788573][ T6675] check_panic_on_warn+0xab/0xb0 [ 138.793516][ T6675] __warn+0xf6/0x3c0 [ 138.797409][ T6675] ? tracing_buffers_mmap_close+0xdd/0x130 [ 138.803213][ T6675] report_bug+0x3c3/0x580 [ 138.807566][ T6675] ? tracing_buffers_mmap_close+0xdd/0x130 [ 138.813402][ T6675] handle_bug+0x184/0x210 [ 138.817727][ T6675] exc_invalid_op+0x17/0x50 [ 138.822227][ T6675] asm_exc_invalid_op+0x1a/0x20 [ 138.827071][ T6675] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 138.833488][ T6675] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 138.853089][ T6675] RSP: 0018:ffffc9000aa77990 EFLAGS: 00010293 [ 138.859150][ T6675] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 138.867140][ T6675] RDX: ffff888027ee3c80 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 138.875104][ T6675] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 138.883116][ T6675] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807d612048 [ 138.891082][ T6675] R13: dffffc0000000000 R14: ffffc9000aa77a28 R15: 0000000000000000 [ 138.899072][ T6675] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 138.905317][ T6675] ? tracing_buffers_mmap_close+0xc9/0x130 [ 138.911120][ T6675] ? tracing_buffers_mmap_close+0xdc/0x130 [ 138.916943][ T6675] remove_vma+0x88/0x160 [ 138.921201][ T6675] exit_mmap+0x511/0xb90 [ 138.925441][ T6675] ? __pfx_exit_mmap+0x10/0x10 [ 138.930206][ T6675] ? __lock_acquire+0xb97/0x1ce0 [ 138.935188][ T6675] ? arch_uprobe_clear_state+0x16/0x150 [ 138.940746][ T6675] __mmput+0x12a/0x410 [ 138.944825][ T6675] mmput+0x62/0x70 [ 138.948549][ T6675] do_exit+0x7c7/0x2bf0 [ 138.952708][ T6675] ? __pfx_do_exit+0x10/0x10 [ 138.957295][ T6675] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.962310][ T6675] ? find_held_lock+0x2b/0x80 [ 138.966983][ T6675] do_group_exit+0xd3/0x2a0 [ 138.971500][ T6675] get_signal+0x2671/0x26d0 [ 138.976004][ T6675] ? __pfx_get_signal+0x10/0x10 [ 138.980847][ T6675] ? do_futex+0x122/0x350 [ 138.985172][ T6675] ? __pfx_do_futex+0x10/0x10 [ 138.989848][ T6675] arch_do_signal_or_restart+0x8f/0x790 [ 138.995391][ T6675] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.001540][ T6675] ? ksys_read+0x1ac/0x250 [ 139.005950][ T6675] ? __pfx_ksys_read+0x10/0x10 [ 139.010703][ T6675] exit_to_user_mode_loop+0x7a/0x100 [ 139.015979][ T6675] do_syscall_64+0x419/0x4b0 [ 139.020568][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.026450][ T6675] RIP: 0033:0x7f4942f8eec9 [ 139.030856][ T6675] Code: Unable to access opcode bytes at 0x7f4942f8ee9f. [ 139.037870][ T6675] RSP: 002b:00007f4943e1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.046278][ T6675] RAX: fffffffffffffe00 RBX: 00007f49431e5fa8 RCX: 00007f4942f8eec9 [ 139.054238][ T6675] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49431e5fa8 [ 139.062221][ T6675] RBP: 00007f49431e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 139.070185][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.078143][ T6675] R13: 00007f49431e6038 R14: 00007ffd067442f0 R15: 00007ffd067443d8 [ 139.086125][ T6675] [ 139.089413][ T6675] Kernel Offset: disabled [ 139.093737][ T6675] Rebooting in 86400 seconds..