last executing test programs: 2m17.016697081s ago: executing program 1 (id=340): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x301081, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) setitimer$auto(0x1, &(0x7f0000000000)={{0x14cd, 0x2000000000000081}, {0x3, 0xb}}, 0x0) r4 = socket(0x18, 0x800, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4}, 0x3a) ioctl$auto_BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000100)={0x9, "6145feca9d65009d39b2e29c8e25a000", 0xb, 0x2, "782959aa86b6721815fcdd0de23fa453", '\x00', "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"}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lseek$auto(r1, 0x5, 0xff43) io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PEEK_OFF(r0, 0x3ff, 0x2a, &(0x7f0000000000)='-&^,\\/\x00', &(0x7f0000000080)=0x2) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) write$auto(0x4, 0x0, 0x100082) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2m16.759577666s ago: executing program 1 (id=341): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 2m14.965446551s ago: executing program 1 (id=345): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r3 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r3, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 2m12.983527163s ago: executing program 1 (id=348): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000010c0), 0x208041, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) fsopen$auto(0x0, 0x1) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r2, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) 2m11.810766713s ago: executing program 1 (id=350): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r0 = socket(0x22, 0x2, 0x1) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = getsockopt$auto(r1, 0x29, 0x36, 0x0, 0x0) fstat$auto(r0, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r3, 0x3b87, 0x38) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x42142, 0x0) lseek$auto(r5, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x4e, 0x5, "98864b3d058ea6b97eb3b87e005ae8f3afa893c75f1fee24b9984eecd175bebe594ec0955935a837447f67bff73bd5c35462cbc882fba57c47481e3205a638522e121b60717ad3c7be9f"}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x1}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x7f}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x6}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0x11, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r8, 0x0, 0x100000002, 0x100000001) 2m10.309115113s ago: executing program 1 (id=354): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) readv$auto(r0, &(0x7f00000002c0)={&(0x7f0000001200)="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", 0x3}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0xc, 0xb7, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, @nested={0x4, 0x26}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x48084) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffd79, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d1) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) 1m55.161830978s ago: executing program 32 (id=354): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) readv$auto(r0, &(0x7f00000002c0)={&(0x7f0000001200)="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", 0x3}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x9, 0x0, [{0x48, 0x400, 0x1f}]}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0xc, 0xb7, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, @nested={0x4, 0x26}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x44}}, 0x48084) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffd79, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d1) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) 1m42.07711254s ago: executing program 4 (id=381): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x301081, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) setitimer$auto(0x1, 0x0, 0x0) r4 = socket(0x18, 0x800, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4}, 0x3a) ioctl$auto_BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000100)={0x9, "6145feca9d65009d39b2e29c8e25a000", 0xb, 0x2, "782959aa86b6721815fcdd0de23fa453", '\x00', "cbc5b7835c79c12445021898b7ef3060acc57729f7938056a568f8e5e0d4382526338712c37446f37abc449689797c778344ce1c202639ce889a9f004102ccbb25693e116386a6da36d4f649788c509df9108b36bf45c5f184102f08be14440ebcdd46f112e490a495e409c6aac98776bec92d8956946cc38cd8ac755a73bea6207b04b331b9d473552818c28b2588c2d47c6db0e53c9fccc6bd5112e42a433cc35445cee5972bd0afa17d90e510a05fb4a35301df985bd62857cd204beedfd94e9b6e31703e388b9a319937f78d51608009d9313ef288f2648e55e3b9dafb2566b679f107153aa85448aa70859952b1b88741c44568c603c14396274863699773e05495eb6d2f69d557a882cca588b772ce4402ed885f700a91e325c203b812eaaa69d97b763bb4cc7eab37d93012490487ef8c7c5925b05136f47c9bc350c5d9eeeda0a272719880aa4a0079eba3988a96d2e8c2a758facd78ae6763689f30776674850f30fedec4865ff7d9c44c63d1c03bc668a002824efc93058c9b3e8517b9f4396abddf87ddefe878b8eee2e478dcb6abe917ed4c7f4ee344aa4872700b8ea609901fa77092eddb8782b9447945acf1b213690bc2bfc1c4fe2e15034a97f96c92f771c1e7ee069074c62b395414c058ca23e547c3c64badf49c074b2fe59a42fafaa19721a30ad039918355e4067116fa575d4124c5081caf41d7aea0d77142e90754b81fe0025df709a8a56fb51145c9a49975eab784785b7792a14ce7ab68b769870352bfa9f9a27d2a3804732fa83410410911a2185b054877e97805e4f35dfdda038ddf43a86da5f56dd77b4b07039d7f8054d824fdbf034b036f5d411a2e6283cc9dfde610655794c94cf5ef906b199086a446bd6b3fcc11ea739659d2fe3baf947c3e93921c7f0913c2c9e6d61560a38c68227def297a85a9084eb6ed19318ff2242176985cd0fbe66c8197c4664e56102b80c2f59a9cc6c801568b9d0396a30ea1a6c8886fc7b58cc213c482c32663354ebf9b7bebe884d15ad019738a83f8599cebdf0d391a24c920ab524b28369a6d5ddef51cb463d4c018394c40fc91832ef1c6429801bfe23763442b732181632ae077ae23a8e6e981f40a2343b507dc250f1c50bc6fe8c8f22155c0dda7aaf27a67e1158cb37d79509fbaec20b0494be95e594d89e19f9b28a2ff47a938c6c3dec5d0756af1d00f8ce0b7cfe1f371cde855ab81a7ca648c03753da24308b6c1f4d72ee10cd3690fa6b3f65fc90be254445322f2f54570de5beefb86e54e58615fe6b3330f2ee0d0ceedb0b7877888d13c0c126c7d68151e1d349e209fb0c18a8ac09ccfdefbc4702c5dd2f51cd4974c34d5b2dfb9ce5ee82a9ac2925206a499265c9d39cd140a063aa37b08fded8006ea123da71434daca694a3687c45ca27144d8ebcf23b8818d95d4"}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lseek$auto(r1, 0x5, 0xff43) io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PEEK_OFF(r0, 0x3ff, 0x2a, &(0x7f0000000000)='-&^,\\/\x00', &(0x7f0000000080)=0x2) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) write$auto(0x4, 0x0, 0x100082) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 1m41.738263903s ago: executing program 4 (id=410): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 1m39.739804604s ago: executing program 4 (id=416): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c7, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0xa, 0x1) ioctl$auto_FS_IOC_SETFSLABEL3(r1, 0x41009432, &(0x7f0000000200)="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") r4 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r3, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r4, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0x8000016, 0x401, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) getrandom$auto(0x0, 0x3, 0x80000001) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd0c, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) userfaultfd$auto(0x1) msync$auto(0x110c230000, 0x200001, 0x6) 1m37.792703958s ago: executing program 4 (id=419): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 1m35.672980932s ago: executing program 4 (id=423): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6000000000000000, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf560800", @ANYBLOB="1e050045"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000440)={{0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000480)="76a71309130f393d292d090d6afcb81fa3e32c66da84088283795b98aafc98e37e34d0eaf68317a7110eb9b3e237a353c7fe6b988c53365346386d080a887d29e0e600000000000000000000553f2267b93e2d7719e800d183c9", 0xcb}, 0x3, 0x0, 0x5, 0x6}, 0x5}, 0x264000, 0xffff7fff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) r2 = socket(0x26, 0x6, 0x8) setgroups$auto(0xe32, 0x0) eventfd2$auto(0xfffffffb, 0x20000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40602, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = epoll_create$auto(0x200004) socket(0x37, 0x4, 0x84) socket(0x21, 0x2, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000003c0)={[0x1ff, 0xb, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) epoll_ctl$auto(r4, 0x1, r3, 0x0) readv$auto(r2, &(0x7f0000000600)={&(0x7f0000000500)="b7315dcb87106a23fb412a1df3c00ba5228a13304469ae0bbd565f4815b84a693259ea69f47b187c013edff03336b1fa084a9ea40e27d93f4f5d16f9ba105110dcf7df3f993ac19000"/85, 0xffffffff}, 0x1da) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0xfdef) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, &(0x7f0000000080)='/sys/kernel/con\x87ig/target/dbro\x7ft\x00', &(0x7f00000000c0)="a513b8212f90589c5660be05df4354f480e42434e18b", 0xf9c0, 0xfffffffffffffffc) 1m20.543572277s ago: executing program 33 (id=423): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6000000000000000, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf560800", @ANYBLOB="1e050045"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000440)={{0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000480)="76a71309130f393d292d090d6afcb81fa3e32c66da84088283795b98aafc98e37e34d0eaf68317a7110eb9b3e237a353c7fe6b988c53365346386d080a887d29e0e600000000000000000000553f2267b93e2d7719e800d183c9", 0xcb}, 0x3, 0x0, 0x5, 0x6}, 0x5}, 0x264000, 0xffff7fff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) r2 = socket(0x26, 0x6, 0x8) setgroups$auto(0xe32, 0x0) eventfd2$auto(0xfffffffb, 0x20000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40602, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = epoll_create$auto(0x200004) socket(0x37, 0x4, 0x84) socket(0x21, 0x2, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000003c0)={[0x1ff, 0xb, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) epoll_ctl$auto(r4, 0x1, r3, 0x0) readv$auto(r2, &(0x7f0000000600)={&(0x7f0000000500)="b7315dcb87106a23fb412a1df3c00ba5228a13304469ae0bbd565f4815b84a693259ea69f47b187c013edff03336b1fa084a9ea40e27d93f4f5d16f9ba105110dcf7df3f993ac19000"/85, 0xffffffff}, 0x1da) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b41", 0xfdef) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, &(0x7f0000000080)='/sys/kernel/con\x87ig/target/dbro\x7ft\x00', &(0x7f00000000c0)="a513b8212f90589c5660be05df4354f480e42434e18b", 0xf9c0, 0xfffffffffffffffc) 45.347311426s ago: executing program 5 (id=514): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0xfffffffffffffffe) 44.928220349s ago: executing program 5 (id=515): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 42.072662071s ago: executing program 5 (id=523): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c8001b5d399b50", 0x7) 41.790724277s ago: executing program 5 (id=525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x11) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x900, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r5 = syz_genetlink_get_family_id$auto_ipvs(0x0, r3) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r5, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 37.975473071s ago: executing program 5 (id=530): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x37, &(0x7f0000001740)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x1) 37.693447391s ago: executing program 2 (id=531): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="c80d1b5d399b303660", 0x9) 37.500420149s ago: executing program 5 (id=532): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) connect$auto(r0, 0x0, 0x58) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) listen$auto(0x3, 0x83) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0xffff3347, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) 37.237818268s ago: executing program 2 (id=534): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 36.802919614s ago: executing program 2 (id=535): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 34.347334705s ago: executing program 2 (id=540): socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) 34.001820597s ago: executing program 2 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 33.589920043s ago: executing program 2 (id=542): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x2, 0xffffffffffff0005, 0x3) sendmmsg$auto(0x3, 0x0, 0xd, 0x7400000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x40000000, 0xef, 0x4000000000df, 0x200000000000eb3, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4096, 0x1000) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cf5728bd70a6fc4f6da09b42"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7f) r5 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/long_retry_limit\x00', 0x24400, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r5, 0x8000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r6, 0xc0205648, r6) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) 22.200124612s ago: executing program 34 (id=532): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) connect$auto(r0, 0x0, 0x58) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) listen$auto(0x3, 0x83) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0xffff3347, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) 18.456195858s ago: executing program 35 (id=542): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x2, 0xffffffffffff0005, 0x3) sendmmsg$auto(0x3, 0x0, 0xd, 0x7400000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x40000000, 0xef, 0x4000000000df, 0x200000000000eb3, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4096, 0x1000) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cf5728bd70a6fc4f6da09b42"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7f) r5 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/long_retry_limit\x00', 0x24400, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r5, 0x8000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r6, 0xc0205648, r6) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) 7.290243148s ago: executing program 0 (id=590): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 6.231736163s ago: executing program 0 (id=593): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0xc8002, 0x0) writev$auto(r0, &(0x7f0000000080)={0x0, 0x9}, 0x4) 5.375871329s ago: executing program 0 (id=596): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2008, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3) 4.768200449s ago: executing program 3 (id=598): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008019}, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) close_range$auto(0x2, 0x8000, 0x0) 4.477491976s ago: executing program 0 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 4.26260159s ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0c002d800400fdd1e5"], 0x28}}, 0x4000000) 4.253680043s ago: executing program 6 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r1, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd=r0}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 3.742455765s ago: executing program 3 (id=601): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)) 3.734813082s ago: executing program 6 (id=602): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x301081, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) setitimer$auto(0x1, &(0x7f0000000000)={{0x14cd, 0x2000000000000081}, {0x3, 0xb}}, 0x0) r3 = socket(0x18, 0x800, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4}, 0x3a) ioctl$auto_BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000100)={0x9, "6145feca9d65009d39b2e29c8e25a000", 0xb, 0x2, "782959aa86b6721815fcdd0de23fa453", '\x00', "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"}) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lseek$auto(r1, 0x5, 0xff43) io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PEEK_OFF(r0, 0x3ff, 0x2a, &(0x7f0000000000)='-&^,\\/\x00', &(0x7f0000000080)=0x2) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 3.534907821s ago: executing program 0 (id=603): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x11) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x900, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, r3) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r4, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 3.245501027s ago: executing program 3 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x48, r1, 0xd0d58b333228212f, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [@nested={0x26, 0x46, 0x0, 0x1, [@generic="5f86a073eebc15ce554e16e909e051dd74234fbb5c45dec191920be86773b6035aa0"]}]}]}, 0x48}}, 0x4000000) 2.763455076s ago: executing program 3 (id=605): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x3, 0x66) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f00000002c0)=""/190, 0xfffffe39) 2.23256177s ago: executing program 3 (id=606): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(r0, 0x82, r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1.924058876s ago: executing program 7 (id=579): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x11) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x900, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) r5 = syz_genetlink_get_family_id$auto_ipvs(0x0, r3) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r5, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 1.061980731s ago: executing program 0 (id=607): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x11) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x900, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) r5 = syz_genetlink_get_family_id$auto_ipvs(0x0, r3) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r5, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 372.426382ms ago: executing program 7 (id=608): recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x100) r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0}, 0x8) 0s ago: executing program 7 (id=609): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x11) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x900, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16=r2, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) r5 = syz_genetlink_get_family_id$auto_ipvs(0x0, r3) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc8, r5, 0xb09, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xb2, 0x2, 0x0, 0x1, [@typed={0x6d, 0xdd, 0x0, 0x0, @binary="c7e037f9bdd1d3b7c41af88f2a838cec5ba30911b07c06ed837d13d1c165fbd9b06a51171b57bc357fafa4c373d127ff36780a438e3840e63b0674ac5770aabf3bbe5ac696511cb995415bbb2bddbf1c3df385810c218a3cd1ac0573a14fd8ca299abbc437cff9709f"}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic, @generic="f22ce64a324d7a1a1b7b8d17bd299a6cacf584ddf1b47506f2274b63d8e6ce7bfca88904097269", @generic="72bd3b32b88467843cb1b3ad4504b6"]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 90.646810][ T5814] cgroup: Unknown subsys name 'net' [ 90.766735][ T5814] cgroup: Unknown subsys name 'cpuset' [ 90.777357][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.559810][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.601876][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.610793][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.620329][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.633897][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.639651][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.645722][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.652335][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.661094][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.669935][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.677246][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.678064][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.686866][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.699167][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.706918][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.715312][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.723789][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.724534][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.732090][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.739689][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.756633][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.345847][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 95.430368][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 95.493760][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 95.590284][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 95.710038][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.718160][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.725526][ T5829] bridge_slave_0: entered allmulticast mode [ 95.733817][ T5829] bridge_slave_0: entered promiscuous mode [ 95.765385][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.774133][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.781514][ T5829] bridge_slave_1: entered allmulticast mode [ 95.788988][ T5829] bridge_slave_1: entered promiscuous mode [ 95.883996][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.891193][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.899204][ T5826] bridge_slave_0: entered allmulticast mode [ 95.906959][ T5826] bridge_slave_0: entered promiscuous mode [ 95.927742][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.935060][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.942607][ T5827] bridge_slave_0: entered allmulticast mode [ 95.950105][ T5827] bridge_slave_0: entered promiscuous mode [ 95.962204][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.972195][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.979379][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.987046][ T5826] bridge_slave_1: entered allmulticast mode [ 95.995370][ T5826] bridge_slave_1: entered promiscuous mode [ 96.015231][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.022453][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.029675][ T5827] bridge_slave_1: entered allmulticast mode [ 96.037342][ T5827] bridge_slave_1: entered promiscuous mode [ 96.060196][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.081021][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.088369][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.096559][ T5828] bridge_slave_0: entered allmulticast mode [ 96.104145][ T5828] bridge_slave_0: entered promiscuous mode [ 96.157280][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.165471][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.172865][ T5828] bridge_slave_1: entered allmulticast mode [ 96.180391][ T5828] bridge_slave_1: entered promiscuous mode [ 96.191115][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.215564][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.241129][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.253377][ T5829] team0: Port device team_slave_0 added [ 96.265284][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.300565][ T5829] team0: Port device team_slave_1 added [ 96.322454][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.370747][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.397578][ T5827] team0: Port device team_slave_0 added [ 96.418990][ T5826] team0: Port device team_slave_0 added [ 96.427496][ T5826] team0: Port device team_slave_1 added [ 96.447881][ T5827] team0: Port device team_slave_1 added [ 96.454847][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.462090][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.488370][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.515557][ T5828] team0: Port device team_slave_0 added [ 96.547461][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.555087][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.582457][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.594616][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.601913][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.628034][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.642477][ T5828] team0: Port device team_slave_1 added [ 96.670480][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.677796][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.703861][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.727425][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.734688][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.761373][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.774801][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.782567][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.785170][ T5843] Bluetooth: hci0: command tx timeout [ 96.808846][ T51] Bluetooth: hci2: command tx timeout [ 96.809154][ T51] Bluetooth: hci1: command tx timeout [ 96.826959][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.861511][ T5839] Bluetooth: hci3: command tx timeout [ 96.878324][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.886882][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.913315][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.926337][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.933761][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.959825][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.046769][ T5829] hsr_slave_0: entered promiscuous mode [ 97.055305][ T5829] hsr_slave_1: entered promiscuous mode [ 97.105409][ T5826] hsr_slave_0: entered promiscuous mode [ 97.112593][ T5826] hsr_slave_1: entered promiscuous mode [ 97.118859][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 97.124906][ T5826] Cannot create hsr debugfs directory [ 97.153007][ T5827] hsr_slave_0: entered promiscuous mode [ 97.159906][ T5827] hsr_slave_1: entered promiscuous mode [ 97.166861][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 97.172764][ T5827] Cannot create hsr debugfs directory [ 97.208607][ T5828] hsr_slave_0: entered promiscuous mode [ 97.216970][ T5828] hsr_slave_1: entered promiscuous mode [ 97.223786][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 97.229550][ T5828] Cannot create hsr debugfs directory [ 97.276685][ T10] cfg80211: failed to load regulatory.db [ 97.771303][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.785649][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.807585][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.819245][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.888819][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.908136][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.921213][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.935536][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.048780][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.072610][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.098184][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.109678][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.220934][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.237008][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.254005][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.266377][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.277982][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.328856][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.361371][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.368758][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.379975][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.387196][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.426746][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.521113][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.548726][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.555960][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.568608][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.598618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.605937][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.701293][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.734587][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.741869][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.797441][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.804724][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.860529][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.867319][ T5839] Bluetooth: hci0: command tx timeout [ 98.867362][ T5839] Bluetooth: hci2: command tx timeout [ 98.882984][ T51] Bluetooth: hci1: command tx timeout [ 98.939956][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.955525][ T5839] Bluetooth: hci3: command tx timeout [ 98.977324][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.007887][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.036135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.043376][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.075897][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.083296][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.276268][ T5829] veth0_vlan: entered promiscuous mode [ 99.316213][ T5829] veth1_vlan: entered promiscuous mode [ 99.391381][ T5829] veth0_macvtap: entered promiscuous mode [ 99.432104][ T5829] veth1_macvtap: entered promiscuous mode [ 99.456389][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.490765][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.520705][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.569174][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.606030][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.618580][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.681366][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.698244][ T5827] veth0_vlan: entered promiscuous mode [ 99.768145][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.803775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.807897][ T5827] veth1_vlan: entered promiscuous mode [ 99.829457][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.830755][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.935582][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.948080][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.967020][ T5826] veth0_vlan: entered promiscuous mode [ 99.988065][ T5827] veth0_macvtap: entered promiscuous mode [ 100.036727][ T5826] veth1_vlan: entered promiscuous mode [ 100.038346][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.074499][ T5827] veth1_macvtap: entered promiscuous mode [ 100.098597][ T5828] veth0_vlan: entered promiscuous mode [ 100.170335][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.206448][ T5828] veth1_vlan: entered promiscuous mode [ 100.218450][ T5826] veth0_macvtap: entered promiscuous mode [ 100.239203][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.264409][ T5826] veth1_macvtap: entered promiscuous mode [ 100.297593][ T5918] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.302122][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325200][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.370703][ T5828] veth0_macvtap: entered promiscuous mode [ 100.398918][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.408084][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.425379][ T5828] veth1_macvtap: entered promiscuous mode [ 100.517392][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.569184][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.587227][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.636975][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.645015][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.654083][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.681332][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.700395][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.733268][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.745696][ T1342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.764426][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.778591][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.795267][ T1342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.825617][ T1342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.946256][ T5839] Bluetooth: hci2: command tx timeout [ 100.947691][ T51] Bluetooth: hci0: command tx timeout [ 100.953452][ T5839] Bluetooth: hci1: command tx timeout [ 100.963936][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.981186][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.022160][ T5839] Bluetooth: hci3: command tx timeout [ 101.116473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.129590][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.233505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.251856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.328308][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.348503][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.407012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.448106][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.677325][ T5944] Zero length message leads to an empty skb [ 103.029036][ T5839] Bluetooth: hci1: command tx timeout [ 103.032202][ T51] Bluetooth: hci0: command tx timeout [ 103.036003][ T5839] Bluetooth: hci2: command tx timeout [ 103.103250][ T5839] Bluetooth: hci3: command tx timeout [ 104.664303][ T5979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.301122][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 106.552668][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.579848][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.618147][ T5992] bond0 (unregistering): Released all slaves [ 109.704110][ T6023] zswap: compressor not available [ 110.754367][ T6040] netlink: 980 bytes leftover after parsing attributes in process `syz.2.21'. [ 111.150256][ T6049] netlink: 86 bytes leftover after parsing attributes in process `syz.3.23'. [ 111.308554][ T6051] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 111.622487][ T6057] netlink: 342 bytes leftover after parsing attributes in process `syz.0.25'. [ 116.991336][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.278374][ T6114] netlink: 342 bytes leftover after parsing attributes in process `syz.1.35'. [ 117.442853][ T6114] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.747151][ T6184] netlink: 342 bytes leftover after parsing attributes in process `syz.1.48'. [ 123.787431][ T6202] FAULT_INJECTION: forcing a failure. [ 123.787431][ T6202] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.831372][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 123.831422][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.831450][ T6202] Call Trace: [ 123.831461][ T6202] [ 123.831474][ T6202] dump_stack_lvl+0x100/0x190 [ 123.831532][ T6202] should_fail_ex.cold+0x5/0xa [ 123.831574][ T6202] get_futex_key+0x1d2/0x1620 [ 123.831626][ T6202] ? __pfx_get_futex_key+0x10/0x10 [ 123.831667][ T6202] futex_wait_setup+0x83/0x510 [ 123.831715][ T6202] __futex_wait+0x19f/0x300 [ 123.831758][ T6202] ? __pfx___futex_wait+0x10/0x10 [ 123.831803][ T6202] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.831847][ T6202] ? find_held_lock+0x2b/0x80 [ 123.831871][ T6202] ? futex_wake+0x456/0x530 [ 123.831916][ T6202] futex_wait+0xed/0x380 [ 123.831955][ T6202] ? __pfx_futex_wait+0x10/0x10 [ 123.832001][ T6202] ? putname+0xb1/0x110 [ 123.832034][ T6202] ? kmem_cache_free+0x124/0x6a0 [ 123.832076][ T6202] do_futex+0x1ef/0x350 [ 123.832110][ T6202] ? __pfx_do_futex+0x10/0x10 [ 123.832141][ T6202] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.832178][ T6202] ? do_raw_spin_lock+0x128/0x260 [ 123.832219][ T6202] __x64_sys_futex+0x34f/0x4d0 [ 123.832255][ T6202] ? __x64_sys_openat+0x12d/0x210 [ 123.832290][ T6202] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.832335][ T6202] do_syscall_64+0x106/0xf80 [ 123.832373][ T6202] ? clear_bhb_loop+0x40/0x90 [ 123.832403][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.832429][ T6202] RIP: 0033:0x7fb933b9c799 [ 123.832454][ T6202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.832477][ T6202] RSP: 002b:00007fb934a000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.832504][ T6202] RAX: ffffffffffffffda RBX: 00007fb933e16098 RCX: 00007fb933b9c799 [ 123.832520][ T6202] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb933e16098 [ 123.832534][ T6202] RBP: 00007fb933e16090 R08: 0000000000000000 R09: 0000000000000000 [ 123.832549][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.832564][ T6202] R13: 00007fb933e16128 R14: 00007ffe7df58a60 R15: 00007ffe7df58b48 [ 123.832595][ T6202] [ 124.357450][ T6202] aoe: could not set interface list: too many interfaces [ 125.223291][ T6217] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 126.731315][ T6233] FAULT_INJECTION: forcing a failure. [ 126.731315][ T6233] name failslab, interval 1, probability 0, space 0, times 1 [ 126.793074][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(full) [ 126.793121][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.793140][ T6233] Call Trace: [ 126.793162][ T6233] [ 126.793175][ T6233] dump_stack_lvl+0x100/0x190 [ 126.793236][ T6233] should_fail_ex.cold+0x5/0xa [ 126.793277][ T6233] ? tomoyo_realpath_from_path+0xb6/0x690 [ 126.793326][ T6233] should_failslab+0xc2/0x120 [ 126.793365][ T6233] __kmalloc_noprof+0xe0/0x850 [ 126.793430][ T6233] tomoyo_realpath_from_path+0xb6/0x690 [ 126.793489][ T6233] tomoyo_path_number_perm+0x23c/0x580 [ 126.793529][ T6233] ? tomoyo_path_number_perm+0x22e/0x580 [ 126.793573][ T6233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.793612][ T6233] ? futex_wake+0x1ad/0x530 [ 126.793702][ T6233] ? rcu_is_watching+0x12/0xc0 [ 126.793756][ T6233] ? do_sock_setsockopt+0x101/0x1d0 [ 126.793790][ T6233] ? kfree+0x2ec/0x6b0 [ 126.793834][ T6233] ? ipv6_setsockopt+0xcb/0x170 [ 126.793870][ T6233] ? hook_file_ioctl_common+0x146/0x410 [ 126.793915][ T6233] ? __x64_sys_futex+0x34f/0x4d0 [ 126.793960][ T6233] ? __x64_sys_futex+0x358/0x4d0 [ 126.794014][ T6233] ? xfd_validate_state+0x129/0x190 [ 126.794071][ T6233] security_file_ioctl+0xd3/0x230 [ 126.794114][ T6233] __x64_sys_ioctl+0xb7/0x210 [ 126.794180][ T6233] do_syscall_64+0x106/0xf80 [ 126.794233][ T6233] ? clear_bhb_loop+0x40/0x90 [ 126.794277][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.794313][ T6233] RIP: 0033:0x7f97f079c799 [ 126.794342][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.794375][ T6233] RSP: 002b:00007f97f15bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.794407][ T6233] RAX: ffffffffffffffda RBX: 00007f97f0a15fa0 RCX: 00007f97f079c799 [ 126.794429][ T6233] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 126.794450][ T6233] RBP: 00007f97f0832c99 R08: 0000000000000000 R09: 0000000000000000 [ 126.794471][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.794491][ T6233] R13: 00007f97f0a16038 R14: 00007f97f0a15fa0 R15: 00007ffd982a8e38 [ 126.794544][ T6233] [ 126.794558][ T6233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.134622][ T6242] FAULT_INJECTION: forcing a failure. [ 127.134622][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 127.169928][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT(full) [ 127.169975][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.169990][ T6242] Call Trace: [ 127.169998][ T6242] [ 127.170007][ T6242] dump_stack_lvl+0x100/0x190 [ 127.170051][ T6242] should_fail_ex.cold+0x5/0xa [ 127.170084][ T6242] ? ring_buffer_read_start+0x1b9/0x460 [ 127.170122][ T6242] should_failslab+0xc2/0x120 [ 127.170150][ T6242] __kmalloc_noprof+0xe0/0x850 [ 127.170197][ T6242] ring_buffer_read_start+0x1b9/0x460 [ 127.170236][ T6242] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 127.170276][ T6242] ? lockdep_init_map_type+0x5c/0x250 [ 127.170313][ T6242] ? ring_buffer_overruns+0x14e/0x1a0 [ 127.170348][ T6242] tracing_open+0x9cd/0xef0 [ 127.170385][ T6242] do_dentry_open+0x6d8/0x1660 [ 127.170411][ T6242] ? __pfx_tracing_open+0x10/0x10 [ 127.170449][ T6242] vfs_open+0x82/0x3f0 [ 127.170485][ T6242] path_openat+0x208c/0x31a0 [ 127.170522][ T6242] ? __pfx_path_openat+0x10/0x10 [ 127.170560][ T6242] do_file_open+0x20e/0x430 [ 127.170589][ T6242] ? __pfx_do_file_open+0x10/0x10 [ 127.170638][ T6242] ? alloc_fd+0x476/0x790 [ 127.170666][ T6242] ? do_getname+0x191/0x390 [ 127.170702][ T6242] do_sys_openat2+0x10d/0x1e0 [ 127.170736][ T6242] ? __pfx_do_sys_openat2+0x10/0x10 [ 127.170781][ T6242] ? __fget_files+0x21f/0x3d0 [ 127.170812][ T6242] __x64_sys_openat+0x12d/0x210 [ 127.170848][ T6242] ? __pfx___x64_sys_openat+0x10/0x10 [ 127.170895][ T6242] do_syscall_64+0x106/0xf80 [ 127.170934][ T6242] ? clear_bhb_loop+0x40/0x90 [ 127.170965][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.170991][ T6242] RIP: 0033:0x7fb933b9c799 [ 127.171011][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.171035][ T6242] RSP: 002b:00007fb934a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.171059][ T6242] RAX: ffffffffffffffda RBX: 00007fb933e15fa0 RCX: 00007fb933b9c799 [ 127.171075][ T6242] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 127.171091][ T6242] RBP: 00007fb933c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 127.171106][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.171120][ T6242] R13: 00007fb933e16038 R14: 00007fb933e15fa0 R15: 00007ffe7df58b48 [ 127.171153][ T6242] [ 129.817583][ T6274] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.933253][ T6280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.369518][ T6333] Invalid ELF header magic: != ELF [ 140.007821][ T6425] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 142.493795][ T6453] random: crng reseeded on system resumption [ 142.672054][ T6471] netlink: 342 bytes leftover after parsing attributes in process `syz.3.97'. [ 143.156897][ T6479] FAULT_INJECTION: forcing a failure. [ 143.156897][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 143.170677][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.1.99 Not tainted syzkaller #0 PREEMPT(full) [ 143.170728][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.170744][ T6479] Call Trace: [ 143.170752][ T6479] [ 143.170761][ T6479] dump_stack_lvl+0x100/0x190 [ 143.170807][ T6479] should_fail_ex.cold+0x5/0xa [ 143.170836][ T6479] ? __register_sysctl_table+0xbe4/0x1650 [ 143.170860][ T6479] should_failslab+0xc2/0x120 [ 143.170888][ T6479] __kmalloc_noprof+0xe0/0x850 [ 143.170933][ T6479] __register_sysctl_table+0xbe4/0x1650 [ 143.170964][ T6479] ? __pfx___register_sysctl_table+0x10/0x10 [ 143.170988][ T6479] ? rcu_is_cpu_rrupt_from_idle+0x231/0x270 [ 143.171033][ T6479] ? __asan_memcpy+0x3c/0x60 [ 143.171071][ T6479] register_pidns_sysctls+0x11d/0x1c0 [ 143.171108][ T6479] ? __ns_common_init+0x299/0x4b0 [ 143.171143][ T6479] copy_pid_ns+0x680/0x10a0 [ 143.171175][ T6479] ? __pfx_copy_pid_ns+0x10/0x10 [ 143.171206][ T6479] ? rcu_is_watching+0x12/0xc0 [ 143.171247][ T6479] ? copy_mnt_ns+0x106/0xc30 [ 143.171278][ T6479] ? create_new_namespaces+0x30/0xac0 [ 143.171310][ T6479] create_new_namespaces+0x2aa/0xac0 [ 143.171343][ T6479] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 143.171398][ T6479] ksys_unshare+0x473/0xad0 [ 143.171446][ T6479] ? __pfx_ksys_unshare+0x10/0x10 [ 143.171505][ T6479] __x64_sys_unshare+0x31/0x40 [ 143.171547][ T6479] do_syscall_64+0x106/0xf80 [ 143.171595][ T6479] ? clear_bhb_loop+0x40/0x90 [ 143.171644][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.171678][ T6479] RIP: 0033:0x7fb933b9c799 [ 143.171705][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.171736][ T6479] RSP: 002b:00007fb934a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.171767][ T6479] RAX: ffffffffffffffda RBX: 00007fb933e15fa0 RCX: 00007fb933b9c799 [ 143.171788][ T6479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 143.171807][ T6479] RBP: 00007fb933c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 143.171824][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.171840][ T6479] R13: 00007fb933e16038 R14: 00007fb933e15fa0 R15: 00007ffe7df58b48 [ 143.171880][ T6479] [ 143.442570][ T6479] sysctl could not get directory: /kernel -12 [ 147.285342][ T6544] smpboot: CPU 1 is now offline [ 147.869346][ T6546] Zero length message leads to an empty skb [ 148.133923][ T6548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.185025][ T6548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.250590][ T6548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.269223][ T6548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.286231][ T6548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.323724][ T6548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.358335][ T6548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.366285][ T6548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.423142][ T6548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.445723][ T6548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.476972][ T6548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.530989][ T6548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.247142][ T6563] netlink: 342 bytes leftover after parsing attributes in process `syz.2.112'. [ 149.300806][ T6563] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.741541][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.301945][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.382224][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.464051][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.822363][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.376649][ T6614] random: crng reseeded on system resumption [ 152.384502][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.462394][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.543446][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.901494][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.461643][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.543663][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.621925][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.305125][ T6656] netlink: 342 bytes leftover after parsing attributes in process `syz.1.129'. [ 156.367351][ T6672] bridge0: port 3(batadv0) entered blocking state [ 156.478036][ T6672] bridge0: port 3(batadv0) entered disabled state [ 156.551904][ T6672] batadv0: entered allmulticast mode [ 156.607905][ T6672] batadv0: entered promiscuous mode [ 156.654443][ T6672] bridge0: port 3(batadv0) entered blocking state [ 156.661360][ T6672] bridge0: port 3(batadv0) entered forwarding state [ 156.825083][ T1323] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.835238][ T1323] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 158.262442][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 160.336294][ T6680] kexec: Could not allocate control_code_buffer [ 171.820377][ T6841] random: crng reseeded on system resumption [ 172.042298][ T6841] FAULT_INJECTION: forcing a failure. [ 172.042298][ T6841] name failslab, interval 1, probability 0, space 0, times 0 [ 172.074535][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 172.074569][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.074584][ T6841] Call Trace: [ 172.074592][ T6841] [ 172.074601][ T6841] dump_stack_lvl+0x100/0x190 [ 172.074644][ T6841] should_fail_ex.cold+0x5/0xa [ 172.074674][ T6841] should_failslab+0xc2/0x120 [ 172.074701][ T6841] __kmalloc_cache_noprof+0x7a/0x6f0 [ 172.074736][ T6841] ? ip_vs_protocol_net_init+0xbe/0x300 [ 172.074767][ T6841] ip_vs_protocol_net_init+0xbe/0x300 [ 172.074797][ T6841] __ip_vs_init+0x239/0x520 [ 172.074832][ T6841] ? __pfx___ip_vs_init+0x10/0x10 [ 172.074865][ T6841] ops_init+0x1e2/0x5f0 [ 172.074907][ T6841] setup_net+0x118/0x3a0 [ 172.074947][ T6841] ? __pfx_setup_net+0x10/0x10 [ 172.074985][ T6841] ? lockdep_init_map_type+0x5c/0x250 [ 172.075021][ T6841] ? mutex_init_lockep+0x110/0x150 [ 172.075060][ T6841] copy_net_ns+0x46f/0x7c0 [ 172.075088][ T6841] create_new_namespaces+0x3ea/0xac0 [ 172.075122][ T6841] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 172.075153][ T6841] ksys_unshare+0x473/0xad0 [ 172.075187][ T6841] ? __pfx_ksys_unshare+0x10/0x10 [ 172.075231][ T6841] __x64_sys_unshare+0x31/0x40 [ 172.075263][ T6841] do_syscall_64+0x106/0xf80 [ 172.075300][ T6841] ? clear_bhb_loop+0x40/0x90 [ 172.075331][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.075356][ T6841] RIP: 0033:0x7f97f079c799 [ 172.075376][ T6841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.075407][ T6841] RSP: 002b:00007f97f15bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.075430][ T6841] RAX: ffffffffffffffda RBX: 00007f97f0a15fa0 RCX: 00007f97f079c799 [ 172.075446][ T6841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 172.075461][ T6841] RBP: 00007f97f0832c99 R08: 0000000000000000 R09: 0000000000000000 [ 172.075475][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.075490][ T6841] R13: 00007f97f0a16038 R14: 00007f97f0a15fa0 R15: 00007ffd982a8e38 [ 172.075521][ T6841] [ 180.225306][ T6959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.178'. [ 180.801354][ T6964] FAULT_INJECTION: forcing a failure. [ 180.801354][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 180.972835][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 180.972868][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.972895][ T6964] Call Trace: [ 180.972904][ T6964] [ 180.972913][ T6964] dump_stack_lvl+0x100/0x190 [ 180.972957][ T6964] should_fail_ex.cold+0x5/0xa [ 180.972987][ T6964] should_failslab+0xc2/0x120 [ 180.973015][ T6964] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 180.973054][ T6964] ? __proc_create+0x2cb/0x8c0 [ 180.973084][ T6964] __proc_create+0x2cb/0x8c0 [ 180.973108][ T6964] ? __pfx___proc_create+0x10/0x10 [ 180.973138][ T6964] ? _raw_write_unlock+0x28/0x50 [ 180.973174][ T6964] ? proc_register+0x559/0x8a0 [ 180.973202][ T6964] proc_create_reg+0x75/0x170 [ 180.973230][ T6964] proc_create_net_data+0x8e/0x1c0 [ 180.973256][ T6964] ? __pfx_proc_create_net_data+0x10/0x10 [ 180.973281][ T6964] ? sctp_defaults_init+0x720/0xd90 [ 180.973327][ T6964] sctp_proc_init+0x14c/0x270 [ 180.973364][ T6964] ? __pfx_sctp_defaults_init+0x10/0x10 [ 180.973400][ T6964] sctp_defaults_init+0x758/0xd90 [ 180.973446][ T6964] ? __pfx_sctp_defaults_init+0x10/0x10 [ 180.973485][ T6964] ops_init+0x1e2/0x5f0 [ 180.973528][ T6964] setup_net+0x118/0x3a0 [ 180.973568][ T6964] ? __pfx_setup_net+0x10/0x10 [ 180.973607][ T6964] ? lockdep_init_map_type+0x5c/0x250 [ 180.973643][ T6964] ? mutex_init_lockep+0x110/0x150 [ 180.973682][ T6964] copy_net_ns+0x46f/0x7c0 [ 180.973710][ T6964] create_new_namespaces+0x3ea/0xac0 [ 180.973744][ T6964] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 180.973775][ T6964] ksys_unshare+0x473/0xad0 [ 180.973809][ T6964] ? __pfx_ksys_unshare+0x10/0x10 [ 180.973853][ T6964] __x64_sys_unshare+0x31/0x40 [ 180.973885][ T6964] do_syscall_64+0x106/0xf80 [ 180.973922][ T6964] ? clear_bhb_loop+0x40/0x90 [ 180.973952][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.973978][ T6964] RIP: 0033:0x7f6ad239c799 [ 180.973997][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.974021][ T6964] RSP: 002b:00007f6ad32c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 180.974045][ T6964] RAX: ffffffffffffffda RBX: 00007f6ad2616090 RCX: 00007f6ad239c799 [ 180.974061][ T6964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 180.974076][ T6964] RBP: 00007f6ad2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 180.974090][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.974105][ T6964] R13: 00007f6ad2616128 R14: 00007f6ad2616090 R15: 00007ffe47508658 [ 180.974138][ T6964] [ 182.417547][ T6964] mmap: syz.3.179 (6964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.101297][ T7008] syz.1.187 uses obsolete (PF_INET,SOCK_PACKET) [ 191.469511][ T7087] FAULT_INJECTION: forcing a failure. [ 191.469511][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 191.500770][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 191.500804][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.500819][ T7087] Call Trace: [ 191.500827][ T7087] [ 191.500836][ T7087] dump_stack_lvl+0x100/0x190 [ 191.500880][ T7087] should_fail_ex.cold+0x5/0xa [ 191.500911][ T7087] should_failslab+0xc2/0x120 [ 191.500938][ T7087] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 191.500977][ T7087] ? __proc_create+0x2cb/0x8c0 [ 191.501006][ T7087] __proc_create+0x2cb/0x8c0 [ 191.501031][ T7087] ? __pfx___proc_create+0x10/0x10 [ 191.501059][ T7087] ? _raw_write_unlock+0x28/0x50 [ 191.501095][ T7087] ? proc_register+0x559/0x8a0 [ 191.501122][ T7087] proc_create_reg+0x75/0x170 [ 191.501150][ T7087] proc_create_data+0x86/0x110 [ 191.501175][ T7087] ? __pfx_proc_create_data+0x10/0x10 [ 191.501201][ T7087] ? cache_register_net+0x137/0x5e0 [ 191.501224][ T7087] ? cache_register_net+0x137/0x5e0 [ 191.501253][ T7087] cache_register_net+0x25a/0x5e0 [ 191.501278][ T7087] gss_svc_init_net+0x14e/0x640 [ 191.501312][ T7087] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 191.501354][ T7087] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 191.501391][ T7087] ops_init+0x1e2/0x5f0 [ 191.501434][ T7087] setup_net+0x118/0x3a0 [ 191.501481][ T7087] ? __pfx_setup_net+0x10/0x10 [ 191.501519][ T7087] ? lockdep_init_map_type+0x5c/0x250 [ 191.501555][ T7087] ? mutex_init_lockep+0x110/0x150 [ 191.501596][ T7087] copy_net_ns+0x46f/0x7c0 [ 191.501623][ T7087] create_new_namespaces+0x3ea/0xac0 [ 191.501658][ T7087] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 191.501688][ T7087] ksys_unshare+0x473/0xad0 [ 191.501723][ T7087] ? __pfx_ksys_unshare+0x10/0x10 [ 191.501766][ T7087] __x64_sys_unshare+0x31/0x40 [ 191.501803][ T7087] do_syscall_64+0x106/0xf80 [ 191.501840][ T7087] ? clear_bhb_loop+0x40/0x90 [ 191.501870][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.501895][ T7087] RIP: 0033:0x7fb933b9c799 [ 191.501915][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.501939][ T7087] RSP: 002b:00007fb934a21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 191.501962][ T7087] RAX: ffffffffffffffda RBX: 00007fb933e15fa0 RCX: 00007fb933b9c799 [ 191.501978][ T7087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 191.501992][ T7087] RBP: 00007fb933c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 191.502007][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.502021][ T7087] R13: 00007fb933e16038 R14: 00007fb933e15fa0 R15: 00007ffe7df58b48 [ 191.502053][ T7087] [ 195.582655][ T7147] block2mtd: Using custom MTD label '' for dev [ 195.588965][ T7147] block2mtd: error: cannot open device [ 197.675852][ T7166] nbd: socks must be embedded in a SOCK_ITEM attr [ 197.777337][ T7166] block nbd0: shutting down sockets [ 200.853721][ T7199] futex_wake_op: syz.3.217 tries to shift op by -2048; fix this program [ 201.069482][ T7210] input: f as /devices/virtual/input/input83 [ 201.224594][ T7210] zram: Removed device: zram0 [ 202.046188][ T7225] delete_channel: no stack [ 202.124304][ T7228] netlink: 186 bytes leftover after parsing attributes in process `syz.0.223'. [ 202.253464][ T29] audit: type=1804 audit(4294967340.888:2): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.223" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=3636 res=1 errno=0 [ 207.603596][ T7294] zswap: compressor not available [ 207.921905][ T7303] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 208.348259][ T7310] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.975995][ T7345] vivid-007: ================= START STATUS ================= [ 210.996502][ T7345] vivid-007: Generate PTS: true [ 211.002746][ T7345] vivid-007: Generate SCR: true [ 211.009632][ T7345] tpg source WxH: 320x240 (Y'CbCr) [ 211.014853][ T7345] tpg field: 1 [ 211.018739][ T7345] tpg crop: (0,0)/320x240 [ 211.023206][ T7345] tpg compose: (0,0)/320x240 [ 211.029248][ T7345] tpg colorspace: 8 [ 211.033080][ T7345] tpg transfer function: 0/0 [ 211.043705][ T7345] tpg Y'CbCr encoding: 0/0 [ 211.058736][ T7345] tpg quantization: 0/0 [ 211.062951][ T7345] tpg RGB range: 0/2 [ 211.077059][ T7345] vivid-007: ================== END STATUS ================== [ 211.446070][ T7353] random: crng reseeded on system resumption [ 211.521321][ T7353] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 211.530042][ T7353] pci 0000:00:01.3: PCI INT A: no GSI [ 212.549136][ T7362] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 213.358721][ T7371] netlink: 330 bytes leftover after parsing attributes in process `syz.0.250'. [ 214.906816][ T7363] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 216.667821][ T7397] sg_read: process 294 (syz.3.255) changed security contexts after opening file descriptor, this is not allowed. [ 218.039569][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'. [ 218.081821][ T7429] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 218.280751][ T7430] bond0: entered promiscuous mode [ 218.303712][ T7430] bond_slave_0: entered promiscuous mode [ 218.346039][ T7430] bond_slave_1: entered promiscuous mode [ 225.266294][ T7538] netlink: 338 bytes leftover after parsing attributes in process `syz.1.276'. [ 225.478770][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 225.655272][ T7539] netlink: 338 bytes leftover after parsing attributes in process `syz.1.276'. [ 226.667190][ T7556] netlink: 330 bytes leftover after parsing attributes in process `syz.3.279'. [ 229.243302][ T7582] FAULT_INJECTION: forcing a failure. [ 229.243302][ T7582] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 229.307684][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 229.307716][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.307731][ T7582] Call Trace: [ 229.307739][ T7582] [ 229.307748][ T7582] dump_stack_lvl+0x100/0x190 [ 229.307792][ T7582] should_fail_ex.cold+0x5/0xa [ 229.307822][ T7582] _copy_to_user+0x32/0xd0 [ 229.307862][ T7582] io_uring_setup.cold+0x1560/0x1d79 [ 229.307906][ T7582] ? __pfx_io_uring_setup+0x10/0x10 [ 229.307947][ T7582] ? __pfx_do_futex+0x10/0x10 [ 229.307995][ T7582] ? xfd_validate_state+0x129/0x190 [ 229.308040][ T7582] __x64_sys_io_uring_setup+0xc2/0x170 [ 229.308078][ T7582] do_syscall_64+0x106/0xf80 [ 229.308115][ T7582] ? clear_bhb_loop+0x40/0x90 [ 229.308146][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.308171][ T7582] RIP: 0033:0x7fb933b9c799 [ 229.308190][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.308214][ T7582] RSP: 002b:00007fb934a21028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 229.308237][ T7582] RAX: ffffffffffffffda RBX: 00007fb933e15fa0 RCX: 00007fb933b9c799 [ 229.308253][ T7582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 229.308267][ T7582] RBP: 00007fb933c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 229.308282][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.308297][ T7582] R13: 00007fb933e16038 R14: 00007fb933e15fa0 R15: 00007ffe7df58b48 [ 229.308328][ T7582] [ 230.483036][ T7586] FAULT_INJECTION: forcing a failure. [ 230.483036][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 230.610259][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.1.283 Not tainted syzkaller #0 PREEMPT(full) [ 230.610293][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.610308][ T7586] Call Trace: [ 230.610316][ T7586] [ 230.610324][ T7586] dump_stack_lvl+0x100/0x190 [ 230.610368][ T7586] should_fail_ex.cold+0x5/0xa [ 230.610399][ T7586] should_failslab+0xc2/0x120 [ 230.610427][ T7586] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 230.610466][ T7586] ? __proc_create+0x2cb/0x8c0 [ 230.610496][ T7586] __proc_create+0x2cb/0x8c0 [ 230.610520][ T7586] ? __pfx___proc_create+0x10/0x10 [ 230.610548][ T7586] ? _raw_write_unlock+0x28/0x50 [ 230.610584][ T7586] ? proc_register+0x559/0x8a0 [ 230.610611][ T7586] proc_create_reg+0x75/0x170 [ 230.610638][ T7586] proc_create_net_data+0x8e/0x1c0 [ 230.610672][ T7586] ? __pfx_proc_create_net_data+0x10/0x10 [ 230.610705][ T7586] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 230.610741][ T7586] kcm_proc_init_net+0xa3/0x120 [ 230.610776][ T7586] ops_init+0x1e2/0x5f0 [ 230.610819][ T7586] setup_net+0x118/0x3a0 [ 230.610859][ T7586] ? __pfx_setup_net+0x10/0x10 [ 230.610897][ T7586] ? lockdep_init_map_type+0x5c/0x250 [ 230.610932][ T7586] ? mutex_init_lockep+0x110/0x150 [ 230.610972][ T7586] copy_net_ns+0x46f/0x7c0 [ 230.610999][ T7586] create_new_namespaces+0x3ea/0xac0 [ 230.611033][ T7586] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 230.611064][ T7586] ksys_unshare+0x473/0xad0 [ 230.611098][ T7586] ? __pfx_ksys_unshare+0x10/0x10 [ 230.611142][ T7586] __x64_sys_unshare+0x31/0x40 [ 230.611174][ T7586] do_syscall_64+0x106/0xf80 [ 230.611211][ T7586] ? clear_bhb_loop+0x40/0x90 [ 230.611241][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.611266][ T7586] RIP: 0033:0x7fb933b9c799 [ 230.611286][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.611310][ T7586] RSP: 002b:00007fb934a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 230.611332][ T7586] RAX: ffffffffffffffda RBX: 00007fb933e16090 RCX: 00007fb933b9c799 [ 230.611348][ T7586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 230.611363][ T7586] RBP: 00007fb933c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 230.611378][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.611392][ T7586] R13: 00007fb933e16128 R14: 00007fb933e16090 R15: 00007ffe7df58b48 [ 230.611423][ T7586] [ 234.772651][ T7626] futex_wake_op: syz.1.288 tries to shift op by -2048; fix this program [ 238.294274][ T7682] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 239.430637][ T7698] process 'syz.2.297' launched ':,' with NULL argv: empty string added [ 240.099204][ T7712] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input105 [ 241.659138][ T7734] netlink: 220 bytes leftover after parsing attributes in process `syz.2.304'. [ 242.959988][ T7750] netlink: 342 bytes leftover after parsing attributes in process `syz.2.306'. [ 250.951220][ T7836] bond0: invalid ARP target specified [ 259.302271][ T7943] futex_wake_op: syz.1.337 tries to shift op by -2048; fix this program [ 259.341313][ T7943] futex_wake_op: syz.1.337 tries to shift op by -2048; fix this program [ 259.419291][ T7943] 0x000000000001-0x000000020000 : "" [ 259.477554][ T7955] netlink: 186 bytes leftover after parsing attributes in process `syz.3.338'. [ 259.487013][ T7943] ftl_cs: FTL header corrupt! [ 261.556117][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 265.679116][ T8030] futex_wake_op: syz.0.351 tries to shift op by -2048; fix this program [ 265.734883][ T8033] misc userio: No port type given on /dev/userio [ 265.822635][ T8030] futex_wake_op: syz.0.351 tries to shift op by -2048; fix this program [ 266.605007][ T8030] : Can't lookup blockdev [ 266.956536][ T8049] nbd: socks must be embedded in a SOCK_ITEM attr [ 267.045615][ T8049] block nbd0: shutting down sockets [ 274.489284][ T8134] Invalid ELF header magic: != ELF [ 276.198547][ T8149] GUP no longer grows the stack in syz.2.369 (8149): 14000-401000 (4000) [ 276.245614][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 276.245648][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.245667][ T8149] Call Trace: [ 276.245676][ T8149] [ 276.245685][ T8149] dump_stack_lvl+0x100/0x190 [ 276.245729][ T8149] gup_vma_lookup.cold+0x83/0x96 [ 276.245766][ T8149] __get_user_pages+0x241/0x34d0 [ 276.245811][ T8149] ? down_read_killable+0x30e/0x4c0 [ 276.245837][ T8149] ? __lock_acquire+0x4a5/0x2630 [ 276.245870][ T8149] ? __pfx___get_user_pages+0x10/0x10 [ 276.245908][ T8149] __gup_longterm_locked+0x87d/0x16f0 [ 276.245947][ T8149] ? __pfx___gup_longterm_locked+0x10/0x10 [ 276.245980][ T8149] ? try_get_folio+0x262/0x750 [ 276.246005][ T8149] ? find_held_lock+0x2b/0x80 [ 276.246030][ T8149] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 276.246064][ T8149] gup_fast_fallback+0x18c6/0x2460 [ 276.246115][ T8149] ? __pfx_gup_fast_fallback+0x10/0x10 [ 276.246147][ T8149] ? __lock_acquire+0x4a5/0x2630 [ 276.246179][ T8149] ? bio_associate_blkg_from_css+0xe33/0x13f0 [ 276.246215][ T8149] ? bio_associate_blkg+0x10c/0x2a0 [ 276.246250][ T8149] ? pcpu_block_update+0x20b/0x690 [ 276.246288][ T8149] pin_user_pages_fast+0xa7/0xf0 [ 276.246318][ T8149] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 276.246350][ T8149] ? find_held_lock+0x2b/0x80 [ 276.246373][ T8149] ? __debug_object_init+0x2de/0x3d0 [ 276.246397][ T8149] ? __debug_object_init+0x2de/0x3d0 [ 276.246424][ T8149] iov_iter_extract_pages+0xa0d/0x1ef0 [ 276.246463][ T8149] ? __lock_acquire+0x4a5/0x2630 [ 276.246496][ T8149] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 276.246532][ T8149] ? __lock_acquire+0x4a5/0x2630 [ 276.246571][ T8149] iov_iter_extract_bvecs+0x10e/0xf40 [ 276.246609][ T8149] ? find_held_lock+0x2b/0x80 [ 276.246632][ T8149] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 276.246671][ T8149] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 276.246705][ T8149] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 276.246748][ T8149] bio_iov_iter_get_pages+0x26a/0x970 [ 276.246793][ T8149] __blkdev_direct_IO_simple+0x3a7/0x890 [ 276.246839][ T8149] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 276.246902][ T8149] ? __lock_acquire+0x4a5/0x2630 [ 276.246943][ T8149] blkdev_direct_IO+0xc76/0x1fb0 [ 276.246994][ T8149] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 276.247039][ T8149] ? rcu_is_watching+0x12/0xc0 [ 276.247079][ T8149] ? __mark_inode_dirty+0x55c/0x1790 [ 276.247117][ T8149] ? filemap_check_errors+0xa9/0x150 [ 276.247154][ T8149] blkdev_write_iter+0x703/0xd70 [ 276.247199][ T8149] vfs_write+0x6ac/0x1070 [ 276.247224][ T8149] ? __pfx_blkdev_write_iter+0x10/0x10 [ 276.247264][ T8149] ? __pfx_vfs_write+0x10/0x10 [ 276.247285][ T8149] ? find_held_lock+0x2b/0x80 [ 276.247328][ T8149] ksys_write+0x12a/0x250 [ 276.247351][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 276.247384][ T8149] do_syscall_64+0x106/0xf80 [ 276.247422][ T8149] ? clear_bhb_loop+0x40/0x90 [ 276.247452][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.247477][ T8149] RIP: 0033:0x7f97f079c799 [ 276.247498][ T8149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.247521][ T8149] RSP: 002b:00007f97f15bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.247550][ T8149] RAX: ffffffffffffffda RBX: 00007f97f0a15fa0 RCX: 00007f97f079c799 [ 276.247566][ T8149] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000004 [ 276.247581][ T8149] RBP: 00007f97f0832c99 R08: 0000000000000000 R09: 0000000000000000 [ 276.247596][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.247610][ T8149] R13: 00007f97f0a16038 R14: 00007f97f0a15fa0 R15: 00007ffd982a8e38 [ 276.247642][ T8149] [ 279.218935][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 279.366145][ T8199] ipvlan0: entered promiscuous mode [ 279.371407][ T8199] ipvlan0: entered allmulticast mode [ 279.441880][ T8199] veth0_vlan: entered allmulticast mode [ 279.467788][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 280.491003][ T8214] netlink: 17 bytes leftover after parsing attributes in process `syz.2.379'. [ 282.289573][ T8236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.304392][ T8236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.313337][ T8236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.321396][ T8236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.328924][ T8236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.052389][ T8247] netlink: 342 bytes leftover after parsing attributes in process `syz.2.384'. [ 283.312762][ T8245] FAULT_INJECTION: forcing a failure. [ 283.312762][ T8245] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 283.420883][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 283.457611][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.0.383 Not tainted syzkaller #0 PREEMPT(full) [ 283.457651][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.457666][ T8245] Call Trace: [ 283.457674][ T8245] [ 283.457684][ T8245] dump_stack_lvl+0x100/0x190 [ 283.457727][ T8245] should_fail_ex.cold+0x5/0xa [ 283.457753][ T8245] ? prepare_alloc_pages+0x16d/0x5f0 [ 283.457785][ T8245] should_fail_alloc_page+0xeb/0x140 [ 283.457814][ T8245] prepare_alloc_pages+0x1f0/0x5f0 [ 283.457849][ T8245] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 283.457889][ T8245] ? xa_load+0x153/0x2c0 [ 283.457912][ T8245] ? __pfx_xa_load+0x10/0x10 [ 283.457943][ T8245] ? __lock_acquire+0x4a5/0x2630 [ 283.457982][ T8245] ? workingset_refault+0x477/0xf60 [ 283.458030][ T8245] ? workingset_refault+0x477/0xf60 [ 283.458073][ T8245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.458122][ T8245] ? __lock_acquire+0x4a5/0x2630 [ 283.458165][ T8245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.458193][ T8245] ? policy_nodemask+0xed/0x4f0 [ 283.458222][ T8245] alloc_pages_mpol+0x1fb/0x550 [ 283.458251][ T8245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.458285][ T8245] ? swap_entry_swapped+0x1ff/0x2b0 [ 283.458311][ T8245] ? __pfx_swap_entry_swapped+0x10/0x10 [ 283.458341][ T8245] folio_alloc_mpol_noprof+0x36/0x340 [ 283.458376][ T8245] swap_cache_alloc_folio+0x1a8/0x300 [ 283.458415][ T8245] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 283.458452][ T8245] ? __pfx_get_swap_device+0x10/0x10 [ 283.458477][ T8245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.458521][ T8245] read_swap_cache_async+0xd9/0x480 [ 283.458560][ T8245] ? __pfx_read_swap_cache_async+0x10/0x10 [ 283.458599][ T8245] ? find_held_lock+0x2b/0x80 [ 283.458622][ T8245] ? find_held_lock+0x2b/0x80 [ 283.458649][ T8245] ? swapin_walk_pmd_entry+0x2d9/0x640 [ 283.458678][ T8245] ? swapin_walk_pmd_entry+0x2d9/0x640 [ 283.458713][ T8245] swapin_walk_pmd_entry+0x2fd/0x640 [ 283.458747][ T8245] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 283.458776][ T8245] ? __lock_acquire+0x4a5/0x2630 [ 283.458816][ T8245] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 283.458848][ T8245] walk_pgd_range+0xc04/0x1eb0 [ 283.458907][ T8245] ? __pfx_walk_pgd_range+0x10/0x10 [ 283.458956][ T8245] __walk_page_range+0x163/0x820 [ 283.459015][ T8245] walk_page_range_vma_unsafe+0x209/0x8f0 [ 283.459044][ T8245] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 283.459070][ T8245] ? lock_acquire+0x1cf/0x380 [ 283.459104][ T8245] ? finish_task_switch.isra.0+0x200/0xb80 [ 283.459134][ T8245] ? rcu_is_watching+0x12/0xc0 [ 283.459178][ T8245] walk_page_range_vma+0x63/0x90 [ 283.459204][ T8245] madvise_vma_behavior+0x1e14/0x3050 [ 283.459239][ T8245] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 283.459271][ T8245] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 283.459314][ T8245] ? mas_prev+0x9b/0xf0 [ 283.459336][ T8245] ? __pfx_mas_prev+0x10/0x10 [ 283.459366][ T8245] ? find_vma_prev+0xd8/0x150 [ 283.459392][ T8245] ? futex_unqueue+0x133/0x2c0 [ 283.459423][ T8245] ? __pfx_find_vma_prev+0x10/0x10 [ 283.459460][ T8245] ? __futex_wait+0x256/0x300 [ 283.459505][ T8245] madvise_walk_vmas+0x2fe/0xa90 [ 283.459540][ T8245] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 283.459579][ T8245] madvise_do_behavior+0x1ea/0x510 [ 283.459613][ T8245] ? __pfx_madvise_do_behavior+0x10/0x10 [ 283.459645][ T8245] ? down_read+0x13b/0x460 [ 283.459682][ T8245] do_madvise+0x195/0x240 [ 283.459712][ T8245] ? __pfx_do_madvise+0x10/0x10 [ 283.459742][ T8245] ? do_futex+0x192/0x350 [ 283.459780][ T8245] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 283.459836][ T8245] __x64_sys_madvise+0xa9/0x110 [ 283.459866][ T8245] ? lockdep_hardirqs_on+0x78/0x100 [ 283.459904][ T8245] do_syscall_64+0x106/0xf80 [ 283.459941][ T8245] ? clear_bhb_loop+0x40/0x90 [ 283.459972][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.459997][ T8245] RIP: 0033:0x7efc3699c799 [ 283.460038][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.460062][ T8245] RSP: 002b:00007efc377c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 283.460085][ T8245] RAX: ffffffffffffffda RBX: 00007efc36c16090 RCX: 00007efc3699c799 [ 283.460101][ T8245] RDX: 0000000000000003 RSI: 2000000080000001 RDI: 0000000000000000 [ 283.460116][ T8245] RBP: 00007efc36a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 283.460131][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.460145][ T8245] R13: 00007efc36c16128 R14: 00007efc36c16090 R15: 00007fff7c334088 [ 283.460176][ T8245] [ 284.707338][ T7652] Bluetooth: hci0: command tx timeout syzkaller syzkaller login: [ 286.685006][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.712786][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.734427][ T7652] Bluetooth: hci0: command tx timeout [ 286.744592][ T8235] bridge_slave_0: entered allmulticast mode [ 286.777364][ T8235] bridge_slave_0: entered promiscuous mode [ 286.947002][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.965018][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.004904][ T8235] bridge_slave_1: entered allmulticast mode [ 287.031249][ T8235] bridge_slave_1: entered promiscuous mode [ 287.256286][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.460474][ T8270] netlink: 186 bytes leftover after parsing attributes in process `syz.3.388'. [ 287.486937][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.763870][ T8235] team0: Port device team_slave_0 added [ 287.793947][ T8235] team0: Port device team_slave_1 added [ 287.966558][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.993260][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.106955][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.223863][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.251141][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.356828][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.608426][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'. [ 288.650715][ T8235] hsr_slave_0: entered promiscuous mode [ 288.678138][ T8235] hsr_slave_1: entered promiscuous mode [ 288.694081][ T8235] debugfs: 'hsr0' already exists in 'hsr' [ 288.705218][ T8235] Cannot create hsr debugfs directory [ 288.815020][ T7652] Bluetooth: hci0: command tx timeout [ 288.869784][ T8299] ipvlan0: entered promiscuous mode [ 288.877875][ T8299] ipvlan0: entered allmulticast mode [ 288.892028][ T8299] veth0_vlan: entered allmulticast mode [ 289.655676][ T8311] netlink: 354 bytes leftover after parsing attributes in process `syz.3.396'. [ 289.669415][ T8235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.727011][ T8235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.753384][ T8235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.788052][ T8235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.956581][ T29] audit: type=1800 audit(4294967428.597:3): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.395" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 290.319371][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.418151][ T8328] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 290.435611][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.506339][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.513600][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.589139][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.596424][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.807072][ T8235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.895314][ T7652] Bluetooth: hci0: command tx timeout [ 291.794080][ T8235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.709635][ T29] audit: type=1806 audit(4294967431.347:4): xattr="." res=0 [ 293.012198][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 293.227904][ T8235] veth0_vlan: entered promiscuous mode [ 293.287308][ T8235] veth1_vlan: entered promiscuous mode [ 293.405435][ T8235] veth0_macvtap: entered promiscuous mode [ 293.451612][ T8235] veth1_macvtap: entered promiscuous mode [ 293.525776][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.568195][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.640786][ T7649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.702719][ T7649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.768953][ T7649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.811316][ T7649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.235927][ T7655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.294468][ T7655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.434371][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.460450][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.628247][ T8235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 294.951554][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 295.002720][ T8406] syz.4.381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.600910][ T8398] block2mtd: illegal erase size [ 297.451670][ T8439] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 304.061469][ T8529] futex_wake_op: syz.2.427 tries to shift op by -2048; fix this program [ 305.852865][ T8565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 310.173194][ T8622] zswap: compressor not available [ 314.292208][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 314.326993][ T8680] netlink: 354 bytes leftover after parsing attributes in process `syz.0.453'. [ 316.789967][ T8236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.804330][ T8236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.812365][ T8236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.823112][ T8236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.830992][ T8236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.515495][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 317.916794][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.926968][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.955289][ T8711] bridge_slave_0: entered allmulticast mode [ 317.985928][ T8711] bridge_slave_0: entered promiscuous mode [ 318.009529][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.054883][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.062265][ T8711] bridge_slave_1: entered allmulticast mode [ 318.098084][ T8711] bridge_slave_1: entered promiscuous mode [ 318.202024][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.259450][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.415218][ T8711] team0: Port device team_slave_0 added [ 318.441063][ T8711] team0: Port device team_slave_1 added [ 318.583609][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.626711][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.711064][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.771732][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.797687][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.876721][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.895415][ T7652] Bluetooth: hci4: command tx timeout [ 319.092639][ T8711] hsr_slave_0: entered promiscuous mode [ 319.109420][ T8711] hsr_slave_1: entered promiscuous mode [ 319.125033][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 319.139668][ T8711] Cannot create hsr debugfs directory [ 320.063279][ T8711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.197101][ T8711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.232484][ T8711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.309892][ T8711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.815410][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.898576][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.976388][ T7652] Bluetooth: hci4: command tx timeout [ 320.996604][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.003882][ T7657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.095993][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.103138][ T7647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.082758][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.054486][ T7652] Bluetooth: hci4: command tx timeout [ 323.312913][ T8711] veth0_vlan: entered promiscuous mode [ 323.426523][ T8711] veth1_vlan: entered promiscuous mode [ 323.631105][ T8711] veth0_macvtap: entered promiscuous mode [ 323.733630][ T8711] veth1_macvtap: entered promiscuous mode [ 323.836424][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.912719][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.087770][ T7647] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.115961][ T7647] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.296868][ T7647] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.341536][ T7647] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.715037][ T7647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.722893][ T7647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.950274][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.998640][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.135354][ T7652] Bluetooth: hci4: command tx timeout [ 326.880256][ T8826] kexec: Could not allocate control_code_buffer [ 327.604575][ T8860] zswap: compressor not available [ 328.667865][ T7652] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 330.629194][ T8901] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 335.441202][ T8914] kexec: Could not allocate control_code_buffer [ 340.023394][ T8236] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 341.793092][ T8965] FAULT_INJECTION: forcing a failure. [ 341.793092][ T8965] name failslab, interval 1, probability 0, space 0, times 0 [ 341.954072][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz.3.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.954112][ T8965] Tainted: [L]=SOFTLOCKUP [ 341.954120][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.954135][ T8965] Call Trace: [ 341.954142][ T8965] [ 341.954151][ T8965] dump_stack_lvl+0x100/0x190 [ 341.954195][ T8965] should_fail_ex.cold+0x5/0xa [ 341.954225][ T8965] ? ima_write_template_field_data+0x59/0x1d0 [ 341.954260][ T8965] should_failslab+0xc2/0x120 [ 341.954288][ T8965] __kmalloc_noprof+0xe0/0x850 [ 341.954333][ T8965] ima_write_template_field_data+0x59/0x1d0 [ 341.954372][ T8965] ima_eventname_init_common+0x1c6/0x2a0 [ 341.954410][ T8965] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 341.954451][ T8965] ? __kmalloc_noprof+0x320/0x850 [ 341.954495][ T8965] ima_alloc_init_template+0x399/0x6d0 [ 341.954530][ T8965] ima_store_measurement+0x1e3/0x5b0 [ 341.954560][ T8965] ? __pfx_ima_store_measurement+0x10/0x10 [ 341.954599][ T8965] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 341.954644][ T8965] process_measurement+0x19cc/0x2350 [ 341.954696][ T8965] ? __pfx_process_measurement+0x10/0x10 [ 341.954741][ T8965] ? trace_contention_end+0x140/0x180 [ 341.954782][ T8965] ? tracing_check_open_get_tr.part.0+0x101/0x170 [ 341.954866][ T8965] ? tracing_check_open_get_tr.part.0+0x106/0x170 [ 341.954907][ T8965] ? inode_to_bdi+0x9e/0x160 [ 341.954936][ T8965] ima_file_check+0xcc/0x120 [ 341.954978][ T8965] ? __pfx_ima_file_check+0x10/0x10 [ 341.955027][ T8965] security_file_post_open+0xc4/0x210 [ 341.955058][ T8965] path_openat+0x1418/0x31a0 [ 341.955095][ T8965] ? __pfx_path_openat+0x10/0x10 [ 341.955133][ T8965] do_file_open+0x20e/0x430 [ 341.955162][ T8965] ? __pfx_do_file_open+0x10/0x10 [ 341.955210][ T8965] ? alloc_fd+0x476/0x790 [ 341.955237][ T8965] ? do_getname+0x191/0x390 [ 341.955273][ T8965] do_sys_openat2+0x10d/0x1e0 [ 341.955308][ T8965] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.955344][ T8965] ? __fget_files+0x21f/0x3d0 [ 341.955375][ T8965] __x64_sys_openat+0x12d/0x210 [ 341.955410][ T8965] ? __pfx___x64_sys_openat+0x10/0x10 [ 341.955457][ T8965] do_syscall_64+0x106/0xf80 [ 341.955494][ T8965] ? clear_bhb_loop+0x40/0x90 [ 341.955526][ T8965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.955551][ T8965] RIP: 0033:0x7f6ad239c799 [ 341.955571][ T8965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.955595][ T8965] RSP: 002b:00007f6ad32e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 341.955618][ T8965] RAX: ffffffffffffffda RBX: 00007f6ad2615fa0 RCX: 00007f6ad239c799 [ 341.955634][ T8965] RDX: 0000000000040000 RSI: 0000200000001200 RDI: ffffffffffffff9c [ 341.955650][ T8965] RBP: 00007f6ad2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 341.955665][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.955679][ T8965] R13: 00007f6ad2616038 R14: 00007f6ad2615fa0 R15: 00007ffe47508658 [ 341.955711][ T8965] [ 344.567781][ T29] audit: type=1804 audit(4294967312.250:5): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.492" name="/newroot/sys/kernel/debug/tracing/tracing_on" dev="tracefs" ino=3647 res=0 errno=0 [ 346.268488][ T9001] netlink: 342 bytes leftover after parsing attributes in process `syz.3.502'. [ 347.201903][ T9013] random: crng reseeded on system resumption [ 350.016334][ T8236] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 353.550019][ T9072] FAULT_INJECTION: forcing a failure. [ 353.550019][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 353.719648][ T9072] CPU: 0 UID: 0 PID: 9072 Comm: syz.0.520 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.719688][ T9072] Tainted: [L]=SOFTLOCKUP [ 353.719697][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.719712][ T9072] Call Trace: [ 353.719787][ T9072] [ 353.719797][ T9072] dump_stack_lvl+0x100/0x190 [ 353.719905][ T9072] should_fail_ex.cold+0x5/0xa [ 353.719951][ T9072] should_failslab+0xc2/0x120 [ 353.719995][ T9072] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 353.720049][ T9072] ? kstrdup_const+0x63/0x80 [ 353.720076][ T9072] ? find_held_lock+0x2b/0x80 [ 353.720119][ T9072] kstrdup+0x51/0xe0 [ 353.720143][ T9072] kstrdup_const+0x63/0x80 [ 353.720166][ T9072] __kernfs_new_node+0x9b/0x960 [ 353.720227][ T9072] ? __pfx___kernfs_new_node+0x10/0x10 [ 353.720272][ T9072] ? find_held_lock+0x2b/0x80 [ 353.720296][ T9072] ? kernfs_root+0xee/0x2a0 [ 353.720330][ T9072] ? kernfs_root+0xee/0x2a0 [ 353.720374][ T9072] kernfs_new_node+0x11b/0x1a0 [ 353.720402][ T9072] kernfs_create_link+0xcc/0x240 [ 353.720436][ T9072] sysfs_do_create_link_sd+0x90/0x140 [ 353.720475][ T9072] sysfs_create_link+0x61/0xc0 [ 353.720511][ T9072] device_add+0xb5d/0x1950 [ 353.720600][ T9072] ? __pfx_device_add+0x10/0x10 [ 353.720649][ T9072] __add_disk+0x518/0xe40 [ 353.720715][ T9072] ? find_held_lock+0x2b/0x80 [ 353.720742][ T9072] add_disk_fwnode+0x3d4/0x5c0 [ 353.720772][ T9072] zram_add+0x4d2/0x610 [ 353.720847][ T9072] ? __pfx_zram_add+0x10/0x10 [ 353.720901][ T9072] ? find_held_lock+0x2b/0x80 [ 353.720925][ T9072] ? sysfs_file_kobj+0xe4/0x290 [ 353.720960][ T9072] ? __pfx_hot_add_show+0x10/0x10 [ 353.720996][ T9072] hot_add_show+0x21/0x80 [ 353.721031][ T9072] class_attr_show+0x72/0xa0 [ 353.721076][ T9072] ? __pfx_class_attr_show+0x10/0x10 [ 353.721105][ T9072] sysfs_kf_seq_show+0x217/0x3a0 [ 353.721144][ T9072] seq_read_iter+0x32f/0x1270 [ 353.721205][ T9072] kernfs_fop_read_iter+0x46c/0x610 [ 353.721235][ T9072] ? rw_verify_area+0xce/0x6d0 [ 353.721277][ T9072] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 353.721309][ T9072] vfs_read+0x825/0xb30 [ 353.721335][ T9072] ? __pfx_vfs_read+0x10/0x10 [ 353.721378][ T9072] ksys_read+0x12a/0x250 [ 353.721401][ T9072] ? __pfx_ksys_read+0x10/0x10 [ 353.721433][ T9072] do_syscall_64+0x106/0xf80 [ 353.721524][ T9072] ? clear_bhb_loop+0x40/0x90 [ 353.721563][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.721588][ T9072] RIP: 0033:0x7efc3699c799 [ 353.721609][ T9072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.721638][ T9072] RSP: 002b:00007efc377c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.721688][ T9072] RAX: ffffffffffffffda RBX: 00007efc36c16090 RCX: 00007efc3699c799 [ 353.721704][ T9072] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 353.721719][ T9072] RBP: 00007efc36a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 353.721734][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.721748][ T9072] R13: 00007efc36c16128 R14: 00007efc36c16090 R15: 00007fff7c334088 [ 353.721781][ T9072] [ 363.688666][ T9153] FAULT_INJECTION: forcing a failure. [ 363.688666][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 363.798145][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.2.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.798185][ T9153] Tainted: [L]=SOFTLOCKUP [ 363.798193][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.798208][ T9153] Call Trace: [ 363.798216][ T9153] [ 363.798225][ T9153] dump_stack_lvl+0x100/0x190 [ 363.798272][ T9153] should_fail_ex.cold+0x5/0xa [ 363.798303][ T9153] should_failslab+0xc2/0x120 [ 363.798331][ T9153] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 363.798375][ T9153] ? kstrdup_const+0x63/0x80 [ 363.798405][ T9153] kstrdup+0x51/0xe0 [ 363.798428][ T9153] kstrdup_const+0x63/0x80 [ 363.798451][ T9153] __kernfs_new_node+0x9b/0x960 [ 363.798493][ T9153] ? __pfx___kernfs_new_node+0x10/0x10 [ 363.798537][ T9153] ? find_held_lock+0x2b/0x80 [ 363.798561][ T9153] ? kernfs_root+0xee/0x2a0 [ 363.798596][ T9153] ? kernfs_root+0xee/0x2a0 [ 363.798639][ T9153] kernfs_new_node+0x11b/0x1a0 [ 363.798667][ T9153] kernfs_create_link+0xcc/0x240 [ 363.798700][ T9153] sysfs_do_create_link_sd+0x90/0x140 [ 363.798739][ T9153] sysfs_create_link+0x61/0xc0 [ 363.798784][ T9153] __add_disk+0x619/0xe40 [ 363.798811][ T9153] ? find_held_lock+0x2b/0x80 [ 363.798839][ T9153] add_disk_fwnode+0x3d4/0x5c0 [ 363.798868][ T9153] zram_add+0x4d2/0x610 [ 363.798904][ T9153] ? __pfx_zram_add+0x10/0x10 [ 363.798958][ T9153] ? find_held_lock+0x2b/0x80 [ 363.798981][ T9153] ? sysfs_file_kobj+0xe4/0x290 [ 363.799017][ T9153] ? __pfx_hot_add_show+0x10/0x10 [ 363.799053][ T9153] hot_add_show+0x21/0x80 [ 363.799088][ T9153] class_attr_show+0x72/0xa0 [ 363.799119][ T9153] ? __pfx_class_attr_show+0x10/0x10 [ 363.799148][ T9153] sysfs_kf_seq_show+0x217/0x3a0 [ 363.799187][ T9153] seq_read_iter+0x32f/0x1270 [ 363.799241][ T9153] kernfs_fop_read_iter+0x46c/0x610 [ 363.799271][ T9153] ? rw_verify_area+0xce/0x6d0 [ 363.799308][ T9153] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 363.799339][ T9153] vfs_read+0x825/0xb30 [ 363.799366][ T9153] ? __pfx_vfs_read+0x10/0x10 [ 363.799409][ T9153] ksys_read+0x12a/0x250 [ 363.799432][ T9153] ? __pfx_ksys_read+0x10/0x10 [ 363.799464][ T9153] do_syscall_64+0x106/0xf80 [ 363.799502][ T9153] ? clear_bhb_loop+0x40/0x90 [ 363.799533][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.799559][ T9153] RIP: 0033:0x7f97f079c799 [ 363.799578][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.799602][ T9153] RSP: 002b:00007f97f159a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.799626][ T9153] RAX: ffffffffffffffda RBX: 00007f97f0a16090 RCX: 00007f97f079c799 [ 363.799642][ T9153] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 363.799657][ T9153] RBP: 00007f97f0832c99 R08: 0000000000000000 R09: 0000000000000000 [ 363.799672][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.799686][ T9153] R13: 00007f97f0a16128 R14: 00007f97f0a16090 R15: 00007ffd982a8e38 [ 363.799719][ T9153] [ 373.125726][ T9214] binder: 9213:9214 ioctl c0306201 200000000000 returned -14 [ 374.837301][ T9227] netlink: 342 bytes leftover after parsing attributes in process `syz.0.570'. [ 374.848746][ T9231] FAULT_INJECTION: forcing a failure. [ 374.848746][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 374.929471][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.3.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.929511][ T9231] Tainted: [L]=SOFTLOCKUP [ 374.929519][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.929534][ T9231] Call Trace: [ 374.929542][ T9231] [ 374.929551][ T9231] dump_stack_lvl+0x100/0x190 [ 374.929602][ T9231] should_fail_ex.cold+0x5/0xa [ 374.929631][ T9231] ? lsm_blob_alloc+0x68/0x90 [ 374.929755][ T9231] should_failslab+0xc2/0x120 [ 374.929784][ T9231] __kmalloc_noprof+0xe0/0x850 [ 374.929823][ T9231] ? trace_kmem_cache_alloc+0xf3/0x120 [ 374.929855][ T9231] lsm_blob_alloc+0x68/0x90 [ 374.929892][ T9231] security_prepare_creds+0x2d/0x290 [ 374.929945][ T9231] prepare_creds+0x5d6/0x950 [ 374.929992][ T9231] lookup_user_key+0x8e9/0x1300 [ 374.930038][ T9231] ? __pfx_lookup_user_key+0x10/0x10 [ 374.930067][ T9231] ? __pfx_do_futex+0x10/0x10 [ 374.930117][ T9231] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 374.930153][ T9231] ? xfd_validate_state+0x129/0x190 [ 374.930203][ T9231] keyctl_keyring_link+0x22/0xe0 [ 374.930262][ T9231] __do_sys_keyctl+0x1bf/0x5a0 [ 374.930290][ T9231] do_syscall_64+0x106/0xf80 [ 374.930329][ T9231] ? clear_bhb_loop+0x40/0x90 [ 374.930359][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.930384][ T9231] RIP: 0033:0x7f6ad239c799 [ 374.930404][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.930427][ T9231] RSP: 002b:00007f6ad32e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 374.930450][ T9231] RAX: ffffffffffffffda RBX: 00007f6ad2615fa0 RCX: 00007f6ad239c799 [ 374.930467][ T9231] RDX: ffffffffffffffff RSI: fffffffffffffffd RDI: 0000000000000008 [ 374.930482][ T9231] RBP: 00007f6ad2432c99 R08: 0000000000000002 R09: 0000000000000000 [ 374.930497][ T9231] R10: 0000000000005092 R11: 0000000000000246 R12: 0000000000000000 [ 374.930512][ T9231] R13: 00007f6ad2616038 R14: 00007f6ad2615fa0 R15: 00007ffe47508658 [ 374.930543][ T9231] [ 376.123538][ T7652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.198734][ T7652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.240906][ T7652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.338170][ T7652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.371320][ T7652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.576077][ T9235] chnl_net:caif_netlink_parms(): no params data found [ 378.220045][ T9235] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.289043][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.345460][ T9235] bridge_slave_0: entered allmulticast mode [ 378.428081][ T9235] bridge_slave_0: entered promiscuous mode [ 378.495413][ T7652] Bluetooth: hci5: command tx timeout [ 378.533571][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.627509][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.701617][ T9235] bridge_slave_1: entered allmulticast mode [ 378.793970][ T9235] bridge_slave_1: entered promiscuous mode [ 379.055610][ T9235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.162664][ T9235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.355293][ T8236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.373522][ T8236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.390155][ T8236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.398232][ T8236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.426506][ T8236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.593807][ T9235] team0: Port device team_slave_0 added [ 379.668893][ T9235] team0: Port device team_slave_1 added [ 380.102231][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.150878][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.313874][ T9235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.469526][ T9235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.512649][ T9235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.575313][ T8236] Bluetooth: hci5: command tx timeout [ 380.633213][ T9235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.169336][ T9235] hsr_slave_0: entered promiscuous mode [ 381.209869][ T9235] hsr_slave_1: entered promiscuous mode [ 381.264451][ T9235] debugfs: 'hsr0' already exists in 'hsr' [ 381.287234][ T9235] Cannot create hsr debugfs directory [ 381.458421][ T8236] Bluetooth: hci6: command tx timeout [ 382.318789][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 382.551335][ T9277] netlink: 342 bytes leftover after parsing attributes in process `syz.0.582'. [ 382.654781][ T8236] Bluetooth: hci5: command tx timeout [ 383.129308][ T9235] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.211214][ T9235] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.299370][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.344803][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.352220][ T9264] bridge_slave_0: entered allmulticast mode [ 383.425996][ T9264] bridge_slave_0: entered promiscuous mode [ 383.486189][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.493505][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.537081][ T8236] Bluetooth: hci6: command tx timeout [ 383.604742][ T9264] bridge_slave_1: entered allmulticast mode [ 383.674352][ T9264] bridge_slave_1: entered promiscuous mode [ 383.798323][ T9235] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.852861][ T9235] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.207005][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.328134][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.607351][ T9264] team0: Port device team_slave_0 added [ 384.734305][ T8236] Bluetooth: hci5: command tx timeout [ 384.753468][ T9264] team0: Port device team_slave_1 added [ 384.951621][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.006995][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.177168][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.203714][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.203734][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.203763][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.527192][ T9264] hsr_slave_0: entered promiscuous mode [ 385.528393][ T9264] hsr_slave_1: entered promiscuous mode [ 385.529083][ T9264] debugfs: 'hsr0' already exists in 'hsr' [ 385.529103][ T9264] Cannot create hsr debugfs directory [ 385.549746][ T9235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.619507][ T8236] Bluetooth: hci6: command tx timeout [ 385.775318][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.877804][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.877942][ T9071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.945651][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.945741][ T7655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.230054][ T9264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 387.265961][ T9264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 387.308883][ T9264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 387.409314][ T9264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 387.696009][ T8236] Bluetooth: hci6: command tx timeout [ 387.872291][ T9235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.092574][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.229220][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.285329][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.285419][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.289822][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.289928][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.763861][ T9235] veth0_vlan: entered promiscuous mode [ 389.892767][ T9235] veth1_vlan: entered promiscuous mode [ 389.996273][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.239387][ T9235] veth0_macvtap: entered promiscuous mode [ 390.328859][ T9235] veth1_macvtap: entered promiscuous mode [ 390.555985][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.660521][ T9235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.764318][ T7647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.773107][ T7647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.948453][ T7647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.013181][ T7647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.728444][ T7766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.796917][ T7766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.058584][ T7657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.154843][ T7657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.220716][ T9264] veth0_vlan: entered promiscuous mode [ 392.321635][ T9264] veth1_vlan: entered promiscuous mode [ 392.624726][ T9264] veth0_macvtap: entered promiscuous mode [ 392.751420][ T9264] veth1_macvtap: entered promiscuous mode [ 392.971647][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.030715][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.167559][ T7766] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.298648][ T7766] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.429923][ T7766] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.514424][ T7766] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.930927][ T7647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.019820][ T7647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.293135][ T7766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.375836][ T7766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.864015][ T9377] FAULT_INJECTION: forcing a failure. [ 394.864015][ T9377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.024766][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.3.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.024806][ T9377] Tainted: [L]=SOFTLOCKUP [ 395.024815][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.024830][ T9377] Call Trace: [ 395.024837][ T9377] [ 395.024847][ T9377] dump_stack_lvl+0x100/0x190 [ 395.024892][ T9377] should_fail_ex.cold+0x5/0xa [ 395.024917][ T9377] ? prepare_alloc_pages+0x16d/0x5f0 [ 395.024950][ T9377] should_fail_alloc_page+0xeb/0x140 [ 395.024979][ T9377] prepare_alloc_pages+0x1f0/0x5f0 [ 395.025009][ T9377] ? __lock_acquire+0x4a5/0x2630 [ 395.025045][ T9377] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 395.025092][ T9377] ? lock_acquire+0x1cf/0x380 [ 395.025125][ T9377] ? find_held_lock+0x2b/0x80 [ 395.025148][ T9377] ? page_table_check_set+0x49a/0xa10 [ 395.025173][ T9377] ? page_table_check_set+0x49a/0xa10 [ 395.025200][ T9377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.025248][ T9377] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 395.025273][ T9377] ? xas_move_index+0xae/0x110 [ 395.025384][ T9377] ? xas_find+0x32c/0x8e0 [ 395.025427][ T9377] ? find_held_lock+0x2b/0x80 [ 395.025451][ T9377] ? find_held_lock+0x2b/0x80 [ 395.025473][ T9377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.025512][ T9377] ? policy_nodemask+0xed/0x4f0 [ 395.025546][ T9377] alloc_pages_mpol+0x1fb/0x550 [ 395.025575][ T9377] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 395.025611][ T9377] folio_alloc_mpol_noprof+0x36/0x340 [ 395.025645][ T9377] vma_alloc_folio_noprof+0xed/0x1d0 [ 395.025685][ T9377] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 395.025726][ T9377] do_anonymous_page+0xb3a/0x1fb0 [ 395.025773][ T9377] __handle_mm_fault+0x1d42/0x2b60 [ 395.025814][ T9377] ? reacquire_held_locks+0xce/0x1e0 [ 395.025848][ T9377] ? __pfx___handle_mm_fault+0x10/0x10 [ 395.025889][ T9377] ? lock_vma_under_rcu+0x17c/0x590 [ 395.025941][ T9377] handle_mm_fault+0x36d/0xa20 [ 395.025982][ T9377] do_user_addr_fault+0x5a3/0x12f0 [ 395.026025][ T9377] exc_page_fault+0x6f/0xd0 [ 395.026085][ T9377] asm_exc_page_fault+0x26/0x30 [ 395.026111][ T9377] RIP: 0033:0x7f6ad225df4b [ 395.026130][ T9377] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 395.026154][ T9377] RSP: 002b:00007f6ad32e6fa0 EFLAGS: 00010206 [ 395.026173][ T9377] RAX: 0000000000000000 RBX: 00007f6ad2615fa0 RCX: 0000000000000000 [ 395.026189][ T9377] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000100 [ 395.026205][ T9377] RBP: 00007f6ad2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 395.026219][ T9377] R10: 0000200000000100 R11: 0000000000000000 R12: 0000000000000000 [ 395.026234][ T9377] R13: 00007f6ad2616038 R14: 00007f6ad2615fa0 R15: 00007ffe47508658 [ 395.026266][ T9377] [ 395.026436][ T9377] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 396.874669][ T30] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 396.919653][ T30] Tainted: G L syzkaller #0 [ 396.994194][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.051534][ T30] task:kworker/u8:1 state:D stack:23808 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 397.160952][ T30] Workqueue: netns cleanup_net [ 397.204171][ T30] Call Trace: [ 397.224751][ T30] [ 397.227765][ T30] __schedule+0xfee/0x6120 [ 397.232287][ T30] ? __lock_acquire+0x4a5/0x2630 [ 397.341365][ T30] ? __pfx___schedule+0x10/0x10 [ 397.389512][ T30] ? find_held_lock+0x2b/0x80 [ 397.452111][ T30] ? schedule+0x2bf/0x390 [ 397.516563][ T30] schedule+0xdd/0x390 [ 397.544232][ T30] schedule_timeout+0x1b2/0x280 [ 397.581052][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 397.684424][ T30] ? mark_held_locks+0x40/0x70 [ 397.792883][ T30] __wait_for_common+0x2e7/0x4c0 [ 397.871042][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 397.955101][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 397.960637][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.038413][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 398.075604][ T30] __flush_workqueue+0x3f7/0x1200 [ 398.080723][ T30] ? __pfx___might_resched+0x10/0x10 [ 398.143905][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 398.205101][ T30] rxrpc_destroy_all_locals+0x3e/0x190 [ 398.211430][ T30] rxrpc_exit_net+0x8b/0xc0 [ 398.275682][ T30] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 398.280956][ T30] ops_undo_list+0x2ee/0xab0 [ 398.334627][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 398.339859][ T30] ? cleanup_net+0x332/0x920 [ 398.394218][ T30] ? idr_destroy+0x62/0x2e0 [ 398.434423][ T30] cleanup_net+0x499/0x920 [ 398.438906][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 398.443866][ T30] ? rcu_is_watching+0x12/0xc0 [ 398.524292][ T30] process_one_work+0xa23/0x19a0 [ 398.529370][ T30] ? __pfx_process_one_work+0x10/0x10 [ 398.570198][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 398.614473][ T30] worker_thread+0x5ef/0xe50 [ 398.619156][ T30] ? kthread+0x13a/0x450 [ 398.623435][ T30] ? __pfx_worker_thread+0x10/0x10 [ 398.708823][ T30] kthread+0x370/0x450 [ 398.712975][ T30] ? __pfx_kthread+0x10/0x10 [ 398.784164][ T30] ret_from_fork+0x754/0xd80 [ 398.799866][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 398.844874][ T30] ? __switch_to+0x7b4/0x1120 [ 398.849620][ T30] ? __pfx_kthread+0x10/0x10 [ 398.897280][ T30] ret_from_fork_asm+0x1a/0x30 [ 398.902134][ T30] [ 398.948331][ T30] [ 398.948331][ T30] Showing all locks held in the system: [ 399.198613][ T30] 3 locks held by kworker/0:1/10: [ 399.203689][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 399.370184][ T30] #1: ffffc900000f7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 399.504555][ T30] #2: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 399.614337][ T30] 3 locks held by kworker/u8:1/13: [ 399.619506][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 399.754141][ T30] #1: ffffc90000127d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 399.857133][ T30] #2: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 399.958221][ T30] 1 lock held by khungtaskd/30: [ 399.963137][ T30] #0: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 400.105297][ T30] 1 lock held by syz-executor/5826: [ 400.110556][ T30] 3 locks held by kworker/0:4/5833: [ 400.184175][ T30] #0: ffff88801ba92d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 400.285214][ T30] #1: ffffc900040afd08 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 400.387008][ T30] #2: ffffffff8e8735d8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x77/0x1ab0 [ 400.459459][ T30] 7 locks held by kworker/u10:4/7695: [ 400.510717][ T30] 1 lock held by syz.1.354/8049: [ 400.546033][ T30] #0: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 400.618034][ T30] 2 locks held by getty/8274: [ 400.622771][ T30] #0: ffff8880388e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 400.718485][ T30] #1: ffffc9000406e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 400.804228][ T30] 1 lock held by syz.4.423/8498: [ 400.809224][ T30] #0: ffff888042e4f508 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 400.925925][ T30] 1 lock held by syz.5.532/9117: [ 400.931030][ T30] #0: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 401.008925][ T30] 1 lock held by syz.2.542/9155: [ 401.014002][ T30] #0: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 401.114455][ T30] 5 locks held by syz-executor/9235: [ 401.119815][ T30] #0: ffff888082b38ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 401.195782][ T30] #1: ffff888082b380c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 401.277422][ T30] #2: ffffffff908adf88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 401.344582][ T30] #3: ffff88805d70eaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 401.425027][ T30] #4: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 401.484227][ T30] 1 lock held by syz.6.602/9364: [ 401.489245][ T30] #0: ffff888089af5848 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 401.584129][ T30] 5 locks held by syz.7.609/9395: [ 401.589209][ T30] #0: ffff888081fbbcf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 401.676974][ T30] #1: ffff88801bb5c420 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 401.716283][ T30] #2: ffffffff8e88b8c8 (event_mutex){+.+.}-{4:4}, at: ftrace_set_clr_event+0x156/0x330 [ 401.778643][ T30] #3: ffffffff8e886908 (sched_register_mutex){+.+.}-{4:4}, at: tracing_start_sched_switch+0x17/0x170 [ 401.862476][ T30] #4: ffffffff8e8732a8 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x9d/0x110 [ 401.927200][ T30] [ 401.929594][ T30] ============================================= [ 401.929594][ T30] [ 402.228854][ T30] NMI backtrace for cpu 0 [ 402.228875][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 402.228907][ T30] Tainted: [L]=SOFTLOCKUP [ 402.228915][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.228935][ T30] Call Trace: [ 402.228944][ T30] [ 402.228952][ T30] dump_stack_lvl+0x100/0x190 [ 402.228993][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 402.229032][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 402.229087][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 402.229120][ T30] sys_info+0x141/0x190 [ 402.229143][ T30] watchdog+0xd25/0x1050 [ 402.229174][ T30] ? __pfx_watchdog+0x10/0x10 [ 402.229198][ T30] ? __kthread_parkme+0x18c/0x230 [ 402.229229][ T30] ? kthread+0x13a/0x450 [ 402.229258][ T30] ? __pfx_watchdog+0x10/0x10 [ 402.229279][ T30] kthread+0x370/0x450 [ 402.229309][ T30] ? __pfx_kthread+0x10/0x10 [ 402.229343][ T30] ret_from_fork+0x754/0xd80 [ 402.229379][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 402.229417][ T30] ? __switch_to+0x7b4/0x1120 [ 402.229444][ T30] ? __pfx_kthread+0x10/0x10 [ 402.229477][ T30] ret_from_fork_asm+0x1a/0x30 [ 402.229517][ T30] [ 403.165187][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 403.172123][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 403.182819][ T30] Tainted: [L]=SOFTLOCKUP [ 403.187146][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.197302][ T30] Call Trace: [ 403.200593][ T30] [ 403.203535][ T30] dump_stack_lvl+0x100/0x190 [ 403.208333][ T30] vpanic+0x552/0x970 [ 403.212327][ T30] ? __pfx_vpanic+0x10/0x10 [ 403.217032][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 403.223236][ T30] panic+0xd1/0xe0 [ 403.226989][ T30] ? __pfx_panic+0x10/0x10 [ 403.231551][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 403.237732][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 403.243919][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 403.250108][ T30] ? watchdog.cold+0x198/0x1ca [ 403.254913][ T30] ? watchdog+0xd35/0x1050 [ 403.259372][ T30] watchdog.cold+0x1a9/0x1ca [ 403.263998][ T30] ? __pfx_watchdog+0x10/0x10 [ 403.268885][ T30] ? __kthread_parkme+0x18c/0x230 [ 403.273951][ T30] ? kthread+0x13a/0x450 [ 403.278217][ T30] ? __pfx_watchdog+0x10/0x10 [ 403.282910][ T30] kthread+0x370/0x450 [ 403.287013][ T30] ? __pfx_kthread+0x10/0x10 [ 403.291835][ T30] ret_from_fork+0x754/0xd80 [ 403.296485][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 403.301762][ T30] ? __switch_to+0x7b4/0x1120 [ 403.306639][ T30] ? __pfx_kthread+0x10/0x10 [ 403.311282][ T30] ret_from_fork_asm+0x1a/0x30 [ 403.316104][ T30] [ 403.319207][ T30] Kernel Offset: disabled [ 403.323658][ T30] Rebooting in 86400 seconds..