last executing test programs: 10.235326788s ago: executing program 3 (id=582): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x1, 0x2, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x7) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) keyctl$auto(0x1e, 0x1, 0x6, 0x0, 0x3fc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x400000000141, 0xffffffffffff0005, 0xc) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, r2, 0x2) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf251b00000018000180036933b5fe8f70a002696f9400020064756d6d79"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, r5, 0x2) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f0000000080)="c5b692c9182ba0307058fd2920dec137f836d153e26cbda30d39ec00cd48bf24e30c7a9d4e491f97a41da0431077d27987460646782b812748e38aa6ab49436d2f2aa5d9df395f18a99c793202bb7ace4baf53b6e39ebce469cea85cdc530307f349dadeee96a856fb52ee4196a3765be55c98ad197d1af30f2afe085d42e48ebd3f0429820b5bc6f56758485d5fc773aa4e50697866a7335c2009f498c2d2e62238cb8527f9a791fded9bb25729994a", 0xc2fe, &(0x7f0000000240)={&(0x7f0000000140)="70ab9ea9cce6135c9449a41336ad526c9146542fb30bfca4d163858ff7946c9df2c89056a9f3da6bd1895839009f49953bdbccd6a3daadee1671687529615727df6e1e9d2f7ea6a07124a8717b5ca7d3f63c47debc743176520f92b9a576213e941e717865faef0071a3f7ca6dd96214f42d6d27efa997d8736b9535a416d7216fc883453ad1d8ff9fc663fa35113e6ea3634d0cfb9593305ed9576ece7c53ee77fe172d948f0934ca83997e7fdf66141a22f3f9084c52a2be39d023eb0a3f387a96991b907f1f472fcc7b0a00c5c10fc47423effd74004abd3d823eeec7b06392efad4462a0", 0xfd04}, 0x3, &(0x7f0000000280)="a840b3db1bf6303c4f205553a3ae5a9a8bd520467ede90bd2b56b16147d5bbd82ecf5d5146a01141dd7e5b8d99b19d75394b69b4d8789069c33c9c1b55cb9ece1eb6a3506782e9d39b5e8fbdea5b996e7bf90d83a8d222211f2a7e61670e225d60fa10091dd078b675f58f8d9c34093863a3714c0fd36b4e721e003284e817b99c089d3a95f92d6c45b33f94221b861a91a9539fe998a78cd4b1781ea7ae4021e69a5c6eb5beddf99abdcd6e291412c38e5eab5cff09c8c7cca574cd38350f6366e2eba18827a7b86cdf335cd946d60583eaa1ecddd074418b4e50af4d", 0x6, 0xe3b}, 0x3}, 0x6, 0x9) 7.933960156s ago: executing program 1 (id=587): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000005c0)={&(0x7f0000000540), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8884) bind$auto(0x3, &(0x7f0000000040)=@generic={0x29, "bf417066f90c721cabd0e72edc97"}, 0x6b) (async) bind$auto(0x3, &(0x7f0000000040)=@generic={0x29, "bf417066f90c721cabd0e72edc97"}, 0x6b) r2 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x54) (async) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x54) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r3 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="07e8be50be96aaa93bf8a88a10362fe9689176ec6825b002da852088cb7da48615d00f30e1771f9dd128fe31bc5da4c406c97952fd3c8cda3ecaf5ea70e1367c583f587076498f0812cc40d121a132", @ANYRESDEC=r3], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r6) (async) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r6) sendmsg$auto_IPVS_CMD_GET_DEST(r6, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="8c160000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0063b3"], 0x168c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4040081) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000200", @ANYRES16, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0800040006000000d600018093aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f358044ee9ff490dd116448eeaf8c032aa34a5c1a45f0535c226fe78bd9a776bda2674090beee62302e0ba791bf1c86a0f676aecbc18bc4044d36de3f1b4cc714e3685ae2b13ff0d06a46fccb5302b83a3e970eff9ac83491ddc8eb1d7e5c0b716616971541212c49b236b980000"], 0x108}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4) (async) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000200", @ANYRES16, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0800040006000000d600018093aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f358044ee9ff490dd116448eeaf8c032aa34a5c1a45f0535c226fe78bd9a776bda2674090beee62302e0ba791bf1c86a0f676aecbc18bc4044d36de3f1b4cc714e3685ae2b13ff0d06a46fccb5302b83a3e970eff9ac83491ddc8eb1d7e5c0b716616971541212c49b236b980000"], 0x108}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r8, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xd, 0x0, 0x200, 0x696b}, 0xed7138c}, 0x2, 0x6) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xd, 0x0, 0x200, 0x696b}, 0xed7138c}, 0x2, 0x6) socket(0x15, 0x1, 0x40) (async) r9 = socket(0x15, 0x1, 0x40) sendto$auto(r9, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 6.636591931s ago: executing program 1 (id=588): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0xa983, 0x0) getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x4, 0x1d, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f00000000c0)=0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101080, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 6.311503493s ago: executing program 1 (id=589): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x809, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xa2042, 0x28) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) ioctl$auto(r3, 0xc038563c, r2) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x80) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000000)="02") ioctl$auto(r0, 0x541c, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x2, 0x3, 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) (async) io_uring_setup$auto(0x809, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0xa2042, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) (async) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) semctl$auto(0x2, 0x5, 0x13, 0x9) (async) ioctl$auto(r3, 0xc038563c, r2) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) (async) read$auto(r5, 0x0, 0x80) (async) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000000)="02") (async) ioctl$auto(r0, 0x541c, r1) (async) 5.571115529s ago: executing program 3 (id=591): select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r1, 0x80dc5521, 0xffffffffffffffff) (async) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000240)="e3", 0xffffffffffffff81}, 0x3) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, 0x0, 0xb06af94f6e038a6) (async) socket(0x10, 0x2, 0x14) 5.306996437s ago: executing program 1 (id=593): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x21aa01, 0x0) io_cancel$auto(0x8, &(0x7f0000000000)={0xaf5b, 0x123c, 0x335, 0xc23a, 0xdf5, r0, 0xff, 0x0, 0x6, 0x0, 0x8001, r0}, &(0x7f0000000040)={0x10, 0x3, 0x3, 0x7fffffffffffffff}) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x17, 0x0, 0x4) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio1\x00', 0x101001, 0x0) ioctl$auto_SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) (async) sendfile$auto(r0, r1, 0x0, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 5.147192555s ago: executing program 3 (id=595): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4000000000001) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x151924, 0x0) readv$auto(r1, 0x0, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) pidfd_open$auto(0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port4/connect_type\x00', 0x2020, 0x0) sendto$auto(r3, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x7) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x6, 0x62, 0x5, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x6, 0x3a, r2, 0x28000) fcntl$auto(0x8000000000000001, 0x7, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x6, 0x3, 0x3, 0x3, 0x8003, 0x6, 0x2, 0x6d3c, 0x1, 0x2, 0x44a03baf]}, 0x0) clock_gettime$auto(0x80000020, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.726708683s ago: executing program 2 (id=598): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB='X'], 0x1ac}}, 0x40080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.142199487s ago: executing program 2 (id=599): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x401870cb, 0xffffffffffffffff) (async) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) (async) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x43, @local}, 0x51) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r3 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) ioperm$auto(0x80, 0xfff, 0x2) (async) socket(0x26, 0x6, 0x106) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c4b", 0x23) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) (async) socket(0x28, 0x1, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x199bc2, 0x0) (async) r5 = socket(0x10, 0x2, 0xc) (async) connect$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e23, @multicast2}, 0x9) r6 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000f9", @ANYRES16=r6, @ANYBLOB="f50128bd7000fbdbdf250a00000a"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 4.141955807s ago: executing program 1 (id=600): close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 64) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff}, 0xf) (rerun: 64) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) (async) preadv2$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="cca077b8865e8b19b8f3fbda9fc1aa4ee082efdb1fabab361a64651a17d875db8b2f9572e89fc316dc1a7533514e72f391a0f3d952c135343472094a7d011970e37c5d037feb55f204e235a21f07ed212fc78c23e6198014d73ae00a9ea7d1e9f17071165820ed", 0x2}, 0x1, 0x81, 0x2, 0x5) (async) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdb6503000000180001801400020073797a5f74756e00000000000000000005000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x400c880) keyctl$auto(0x2000000000000017, 0x0, 0x0, 0x0, 0x20823) 3.442852342s ago: executing program 2 (id=601): socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getcpu$auto(&(0x7f0000000000)=0x8, &(0x7f0000000080)=0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x40200, 0x0) 3.26803489s ago: executing program 1 (id=602): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x9, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="20002601000000dbdf255f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="a001ee", @ANYRES16, @ANYBLOB], 0x1a0}, 0x1, 0x0, 0x0, 0x4040004}, 0x24048000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'pim6reg\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5e}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "43b64abb291980d24977e953"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x18, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x40}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r6, 0x40383d0c, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$auto(0x3, 0x8905, 0x38) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 2.175110521s ago: executing program 0 (id=603): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000000)={0x1, 0x5, 0x8, 0x6, 0x42b, 0x0}) process_vm_readv$auto(r1, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x7}, 0x4, &(0x7f00000010c0)={&(0x7f0000001080)="c10772732ed5e7575613b7bf637e8c7f2af0", 0xa}, 0x7, 0x7) mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x100000000000eb1, r0, 0x8000) unshare$auto(0x40000080) fgetxattr$auto(r0, 0x0, 0x0, 0x7) 2.074701876s ago: executing program 2 (id=604): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2102, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0) sendfile$auto(r0, r3, 0x0, 0x9) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r4, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r4, 0x4, 0x6, 0x101, 0x1, r4}, 0x6f3) getsockopt$auto_SO_REUSEPORT(r5, 0x62, 0xf, &(0x7f0000000000)='],[\x00', &(0x7f0000000080)=0x2) 1.97515624s ago: executing program 3 (id=605): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f00000001c0)={@sival_int=0x6, @inferred=r0, 0x2, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000040)=0x5, &(0x7f0000000100)="2c6b290446af50c0742b810094ba1b10348cdafe3af2f3c38fe2b63cef6ecac4f636d0c16a3a52babbd710edba1d701da35c6cbf0a2fad723864e1f7516f2fac85a84a7f8dfc62613019cac69cf24193c17feba71132614fa59eba02ad918eb0462b0625f5ee2ef4b8af7ac722ecbf86b91c65664eea8cc4a49130298adfaef3f5d2f5f4df73"}}, &(0x7f0000000200)=0xb52) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) 1.814320772s ago: executing program 2 (id=606): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2c, 0x3, 0x0) socket(0x1a, 0x2, 0x4) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@unspec, 0xe) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000280)=0x200) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x541b, 0x7f) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbf9, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xe8a54c445fae291c}, 0x4008000) close$auto(r1) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) mmap$auto(0x0, 0x80004020009, 0x0, 0xeb1, r4, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffffb) r5 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x5, 0x80000400007, 0xe1, 0xdf8, 0xffffffffffffffff, 0x4000000000008) (async) getsockopt$auto_SO_MEMINFO(r5, 0x4000008, 0x37, 0x0, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, 0x0, 0x800) (async, rerun: 32) timer_delete$auto(0x8) (rerun: 32) write$auto(0x3, 0x0, 0xffd8) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1.310467763s ago: executing program 3 (id=607): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x101000, 0x0) mmap$auto(0x0, 0x200000000e982, 0xdf, 0xeb1, r0, 0x8000000008000) io_uring_setup$auto(0xa9, 0x0) timer_create$auto(0x2, 0x0, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r1, &(0x7f0000001c80)={0x0, 0x101}, 0x6) ioperm$auto(0x7, 0x6, 0x2) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000000280)="3c56e86300") openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x1000000009fd, 0x2, 0xdf, 0x2009b7e, 0x2, 0x20008000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mprotect$auto(0xc000, 0x8, 0x8) pwritev$auto(r3, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$auto(0x0, 0x80) 1.30962829s ago: executing program 0 (id=615): r0 = fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)="2d492e036741aa08ec0d27d875473ac114a33acac0346e6a657a467d5484aa0e3b5b574512ac9303a301990934a59538e8036d", 0x6) ioctl$auto_PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x6) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) 1.169615025s ago: executing program 0 (id=608): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = socket(0x2, 0x5, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto(r1, 0x8926, r1) (async) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/addr_prefs\x00', 0x200, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) (async) write$auto_ctl_device_fops_user(r2, 0x0, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x49402, 0x0) read$auto(r4, 0x0, 0x9a28) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_register$auto(r0, 0x1, &(0x7f00000000c0)="0144f40d163f37bcf4cc29fd49ebada99b249834b60d10ecfb6dd1630d9e9fc2d39b2cb63c5a6161c10c5877264a0218b9f6527d2b0ec7117e348e31ad555484a9a2133e04068593e6808696410f8f3e01ea8a4d70ca54a329f35b933532b1b8975bc6cbd73db7f70cb835486d3abf93bfb2ba33d2d03cd8faa8fe9db204bcca1a043375e9817b6929ede2060b6544e702273d8f625bb90eecae90527f431b46d9d8111e", 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001540)=""/104, 0x68) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 994.344767ms ago: executing program 0 (id=609): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2800, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x40040, 0x0) ioctl$auto_EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0xa, 0x6]) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket(0x2, 0x1, 0x0) pipe$auto(&(0x7f0000000280)) finit_module$auto(0x1, 0xfffffffffffffffc, 0x1) socket(0x10, 0x2, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r2, 0x0, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x446b, 0x0, 0x106, 0x0, 0x1, 0x2003}, 0xed7138c}, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 982.417836ms ago: executing program 0 (id=610): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/event0\x00', 0x60000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FS_IOC_FSGETXATTR(r0, 0x801c581f, 0xa) r1 = io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) futex$auto(&(0x7f0000000000)=0x6, 0x0, 0x6, &(0x7f0000000080)={0xffff}, 0x0, 0xd75b) epoll_ctl$auto_EPOLL_CTL_DEL(r2, 0x2, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r3) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000140)={0x0, 0x9e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) r5 = socket(0x10, 0x0, 0xc) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000300)="528dd64dbe89fc4e635fc1783dc917e93fd4fde669985cdf65825196466e62932593a9ef5e185046055413ed4b822875edc96ac93d4de461828f4d10548319b6be11b83414917118ef15f88ad6416c18d2539f31814e6c5685e431c26ac14adc62e6dc1e705aebbc36c6482a251e2387dd26b310ebdec24529fd7edd82191d501eb11b1326a1e2cf968415fc475e5c9d21c7bc269941e17990087f3bbcefe5306523e7549d2ba438b0") 526.095252ms ago: executing program 2 (id=611): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0x22aa01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r0, r1, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) read$auto(r2, &(0x7f0000000100)='/dev/bus/usb/011/001\x00', 0x7f) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000280)=@bpf_attr_1={r0, 0x6, @next_key=0x3, 0x40000429d}, 0x5) (async) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000280)=@bpf_attr_1={r0, 0x6, @next_key=0x3, 0x40000429d}, 0x5) mmap$auto(0x2, 0x840e, 0x4000080000e1, 0x40eb2, 0xffffffffffffffff, 0x300080000000) (async) mmap$auto(0x2, 0x840e, 0x4000080000e1, 0x40eb2, 0xffffffffffffffff, 0x300080000000) fsopen$auto(0x0, 0x1) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0xd5f7, 0x0, 0x4, 0x353) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0xcc, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r4, 0xc30, &(0x7f0000000200)='+\x00_\xe8\xdb\xff\x0fQXv\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\xa5\x00.Eu1\xfd\x1c\x00'/44, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x2000003, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_pwait2$auto(r4, 0x0, 0x9, &(0x7f0000000100)={0xa, 0x9}, &(0x7f0000000140)={0x9}, 0x8) sendmmsg$auto(0x3, 0x0, 0x0, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x0, 0x7000000) socket(0xf, 0x0, 0x1) (async) r5 = socket(0xf, 0x0, 0x1) bind$auto(r5, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x66) (async) bind$auto(r5, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x66) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=&(0x7f00000001c0)="677fd6b7bcde0156236c784637e89feef87a4b0d35941418b22cee4b8815c8d86af5ae144306b2b66e82fe6553d4d1ca35519808ee1593d5883fe50c3152f337", 0x800c000, 0x4800c000, 0x800c000}, 0x4) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) 70.822067ms ago: executing program 0 (id=612): unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x80101, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000180)={0x7f, 0x3b, 0x9, 0x81, 0x6, 0x8001, 0x7d6, 0x9a, 0x1, 0xbfaf, 0x7, 0x1, 0x10d9b, 0x8000000000, 0x2}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 0s ago: executing program 3 (id=613): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop11/rqos/wbt/min_lat_nsec\x00', 0x0, 0x0) mmap$auto(0x1, 0x0, 0xf, 0x10, r0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4eb}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xec}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c081) ioctl$auto_SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000180)="f7d6c4cfda8a170d38685361216d431233cbf74e649e689a2da4f7dfe593ef0924ef5efe66b5c8305867302afcdd828f073ad473b01e9b27193a775465e2f592d1f6a66205363cd610b1ce80a89025855dc6a26393b6bc3c799b0fcc6f6f70b7174647b8bdfe011b121f5a6f0a1c0897d658ada20edf85bc9a36defd4ec80f4be64eb3430f0bba3f12d6c66f17c2b59d0492fbfcede1e7c14d7800381e836fa7ef51771135ffcabf4eb803d5fc4dbc94ea5aa97a2c4d06b8982b17dc9bfc54b06eb95d5f6195668626ff5c7b34f366b92f84ba6d68f4032209023353d9cb41") setsockopt$auto_SO_BUSY_POLL(r0, 0xae78, 0x2e, &(0x7f0000000280)='nl80211\x00', 0x961f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x24000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/midi2\x00', 0x181000, 0x0) pread64$auto(r4, &(0x7f0000000440)='-\x00', 0x7fff, 0x4) epoll_ctl$auto(r0, 0x0, r4, &(0x7f0000000480)={0x6ad, 0x8}) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/midiC2D1\x00', 0x20000, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004052}, 0x20000010) r6 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r2, 0x6, 0x8000}) write$auto_tty_fops_tty_io(r7, &(0x7f0000000640)="547633602454c6580198abe2e3b5aed5c49ec3d6f8e0828cbe70195d9a3a46df1745b08601e5ac6b44e2536bc5ef74d669bd01d9ac10d59c8f2ae62f5abdc73ab3157c03759a8288be32362514ce5bcdbadb6f5df6ce51d3f5e022d81b6b5359f8635083d4e6da74da3edfbbfc22c7df7bce46c83f4a1bfd47cfd14b15bd", 0x7e) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), r7) sendmsg$auto_IPVS_CMD_NEW_DEST(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x78a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x3c}}, 0x80) ppoll$auto(&(0x7f0000000800)={r2, 0x8}, 0x101, &(0x7f0000000840)={0x68, 0x8}, &(0x7f0000000880)={0x8}, 0x8) munmap$auto(0x1, 0x3) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000900), r7) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001f40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000940)={0x15b0, r10, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4f8, 0x2, 0x0, 0x1, [@typed={0xc, 0x89, 0x0, 0x0, @u64=0x6}, @nested={0x118, 0x136, 0x0, 0x1, [@generic="3598be5300d996822e5638b93c90c89d5aa57ef82f7febf8346a0e57bfcfe7ee965f19aabd252197d2c66154336d45f50a38caf66ad702ed6f2ef39c453fb0354f793b34b86b4e83b41251ad22", @generic="7c5392648740df30390b0fda1a1c342ab605a9db7ba98ef72b7a63d86d345b08cd9f9a320a731e5835b14a9b8b9b740e07dc759fd73c209efed6b92b999183c7217fb30a4d72195b27466521bc1ba37735708e66821a173f5038be1c4d4c1d4b5386e7db69e77c14f0529cc0b284881c4d1aa7d751266b5468962886c8d6762b5590f4136caeaf8fe6c949f1dd831ff06150b36a0cb167ded2238337741618dc23fa2d80d79401f4d386c12eb1317cb64b789ce01e81ecb73cba562e2c375a949217ec2919f04e"]}, @nested={0x6f, 0x132, 0x0, 0x1, [@generic="ed4626ab4ae612cc595170adc9963ebe8c81ef51ae35bf4b01bf19ebea5aa212d62b5ce6d27f76712c1a25108e58f730da322eff835819ed6c25080f4c24dd7a44bf2af4f82f5ba2f92b0a8f2beb4bf3287b6f", @generic="e79dce7fdf3ebbd2ead14de39c31983d54cfc591a27d4896"]}, @generic="9d070e69443be3900151ae722e9c1eba619bacf7d6c1a4758c115cbac2e02b5b3a5458c2a0d51bbb6babb11f4c4e5812951cde171fbb1970d701debe574310b970982f04362341eb8ed295d60bac7f34ef07f57255b1b8bfc07a552073288ebd882f1c1ebf693bb059863f1deace6a3600198727b4143296e4b4f71f1f1681a3046397dd6d51f6a378cff8b27ffa271114ead8b062ea88ca90977f4ab36af375829aa863507bb4f24bbc7591dd9b68ecaa6787b9758fc79c6d6fa248eafba0028efed1249a7a4fbdcfe259d0c75d6185373c95a9b60a80ad8d44545d653cf495034fee2b8ae7c26aa8d6a97114c04e36", @nested={0xe9, 0xc5, 0x0, 0x1, [@nested={0x4, 0x10c}, @generic="1cb87c4f74bb623cb3414a2918740cb8362266d8ef525fd52aca3bb6c82c0178a91e688c0649ba0ca6be12c28d1da9a2ba569db6243ea4840a5d30a77a8b2dc3f6e676d81bdef641e7729b32c088fe45c19e982007ef66d4c59910c41016cce7294e27fd7038b379c77ba57d693c0abdc19834f0269affbebcd3c0cc0cb0d0624c3ebb061e8b747e18cc8a2c6d5498a786978c3ba6620fe1f15b06c75cd0534cd97dfba330b2913c17f9ba0fbf7b2d9faf1fcb930992d16eeeadd819b9362cdb3f384e8d2335a1375b58bc2b097f2e0c67aaf8fc491f34494ddc49a1e20f1b3705"]}, @nested={0x93, 0x131, 0x0, 0x1, [@generic="01e79435f20412fd6b34374e13fdaf7572abc413ee302126499ba5aeaea40b7074b0ad2aa6ea61bf0c5a38953e7c1b045b00e01dae7d54ce5926ddaff43790a495695bb581b9cda3bea5b0910cfde75e8c406f0308dad61c47b1ff6c0c2dab0c8defe3b6a380e6deee810476fc6b8f46124d0b4ea40e21356146089bd2ba42733aaae1bf51630fb31bd468", @nested={0x4, 0x141}]}, @nested={0xef, 0xa7, 0x0, 0x1, [@nested={0x4, 0xdb}, @nested={0x4, 0x70}, @generic="1c0d89130c53d31b1759414fc54715d8ce29b6def8355fe97ed8fd086e083500cdce69c2bff4306dad3ab7453bbef09a985a75d18536a2ab7b4447465e38b5f904cc97e5c89cb8854bac97016bd824796cc431ece048767972d15af0bc64f3eeadddda991de414f4af0e8f32af241bc03f28fd62da53cd81", @typed={0xd, 0x53, 0x0, 0x0, @str='ovs_flow\x00'}, @nested={0x4, 0x149}, @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0xeb, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xaf}, @generic="282917997982b4a2b1aceb3c5eae7a38ec70170e349c4a6460dbc7b02b7a5d09cdc6de6185c6e1121cc6236e93e0f9fd6e8480", @typed={0xc, 0x6b, 0x0, 0x0, @u64=0x89}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10a1, 0x2, 0x0, 0x1, [@generic="a7dde2bd618fe9f4b26133504354cbd308cb6ac47e15d9e678772d2686837d97badb2fd542b09e", @generic="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", @generic="771f36fd2cc7ccf78e642674b2db3aa4b4afe93c36093a8432a7f05c4581509183204e6b90aa97015d24dcd9ae9293683dead9beba14a8575ebefdea2ccf82b6c59a646b88dd96c7748e735554513c6c4ad1338545a31a6340fc0e32e90efe84f46c14315b1d12d7fd8963a9e1073f25da9a98ec8e04"]}]}, 0x15b0}, 0x1, 0x0, 0x0, 0x81}, 0x40) write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000001f80)="35c2c4689bf2e7c6b4864480fbf18a38000744191dfc9f6a19b9573b21a7a935e21ff33642c83919c42b9aa0fc4a16061527220c30de275072da9b33498f26ae7c0434ed34a6a870705f3addc8e497d72415b0ee63d25a10d2962f388bd81ddbeb033d0f554c08d6ca131f6e8c06c3f470ef9797a276c245f468931f0ff2f6830de77cb683fe4da3b43453ac", 0x8c) r11 = ioctl$auto_TUNSETOFFLOAD2(r9, 0x400454d0, &(0x7f0000002040)=0x6) write$auto_ocfs2_control_fops_stack_user(r11, &(0x7f0000002080)="aac2672a9fb98bfab45107430923d77930ac304e72673649e92324a4d141c4a1d3adf56eb6dcb89c8efb1f1120fa93b62305fbadad92149458fc5e8013af63b059e42c2cef28f121e181705e81d4f111eebee51281c463c8ce8f5f7a77f7c7ed29738f66bc3fbb69f30fcbb877f58b017f656da9", 0x74) socketpair$auto(0x0, 0x7, 0x665de223, &(0x7f0000002100)=0x81) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000002140)=@batch={0x10000, 0x3, 0x5, 0x7, 0x10001, r9, 0x0, 0x3ff}, 0x5) ioctl$auto_BLKTRACETEARDOWN(r11, 0x1276, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002200)={'pim6reg\x00', 0x0}) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000002280)=@bpf_attr_0={0x8, 0x2, 0x10, 0x5, 0x1, r5, 0x3, "5c1703c7e71d5c6b2da3cc90534e5108", r12, r4, 0x8, 0x3, 0x80000001, 0x5, r6}, 0xfffffff9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 82.767491][ T5821] cgroup: Unknown subsys name 'net' [ 82.895089][ T5821] cgroup: Unknown subsys name 'cpuset' [ 82.904422][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.375729][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.151740][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.174956][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.183116][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.184579][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.193997][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.198673][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.205579][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.213879][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.220404][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.233921][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.234994][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.241818][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.251018][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.264400][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.273238][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.281433][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.289133][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.304247][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.312604][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.319934][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.876932][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.943342][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.958985][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.109183][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.270357][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.277660][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.285577][ T5833] bridge_slave_0: entered allmulticast mode [ 87.292939][ T5833] bridge_slave_0: entered promiscuous mode [ 87.327687][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.335077][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.343341][ T5833] bridge_slave_1: entered allmulticast mode [ 87.350541][ T5833] bridge_slave_1: entered promiscuous mode [ 87.394941][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.403469][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.410790][ T5835] bridge_slave_0: entered allmulticast mode [ 87.418760][ T5835] bridge_slave_0: entered promiscuous mode [ 87.431762][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.438945][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.446311][ T5832] bridge_slave_0: entered allmulticast mode [ 87.453704][ T5832] bridge_slave_0: entered promiscuous mode [ 87.472731][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.479888][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.487376][ T5835] bridge_slave_1: entered allmulticast mode [ 87.494773][ T5835] bridge_slave_1: entered promiscuous mode [ 87.512882][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.520130][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.527872][ T5832] bridge_slave_1: entered allmulticast mode [ 87.535408][ T5832] bridge_slave_1: entered promiscuous mode [ 87.545375][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.586680][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.607054][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.614365][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.621970][ T5834] bridge_slave_0: entered allmulticast mode [ 87.629012][ T5834] bridge_slave_0: entered promiscuous mode [ 87.658769][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.668373][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.676120][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.683772][ T5834] bridge_slave_1: entered allmulticast mode [ 87.690773][ T5834] bridge_slave_1: entered promiscuous mode [ 87.700264][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.723115][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.747482][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.760612][ T5833] team0: Port device team_slave_0 added [ 87.797371][ T5833] team0: Port device team_slave_1 added [ 87.826458][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.860746][ T5835] team0: Port device team_slave_0 added [ 87.868606][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.879147][ T5832] team0: Port device team_slave_0 added [ 87.886162][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.893347][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.919379][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.933661][ T5835] team0: Port device team_slave_1 added [ 87.949899][ T5832] team0: Port device team_slave_1 added [ 87.956337][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.964089][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.990361][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.047865][ T5834] team0: Port device team_slave_0 added [ 88.066212][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.073502][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.099821][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.117058][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.124836][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.151401][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.165061][ T5834] team0: Port device team_slave_1 added [ 88.172357][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.179317][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.206505][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.218227][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.225343][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.251361][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.292427][ T5842] Bluetooth: hci3: command tx timeout [ 88.347303][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.354412][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.380549][ T5842] Bluetooth: hci2: command tx timeout [ 88.386721][ T5845] Bluetooth: hci1: command tx timeout [ 88.387037][ T5846] Bluetooth: hci0: command tx timeout [ 88.398224][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.414583][ T5833] hsr_slave_0: entered promiscuous mode [ 88.421736][ T5833] hsr_slave_1: entered promiscuous mode [ 88.434207][ T5832] hsr_slave_0: entered promiscuous mode [ 88.440646][ T5832] hsr_slave_1: entered promiscuous mode [ 88.447156][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 88.453012][ T5832] Cannot create hsr debugfs directory [ 88.459268][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.466425][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.492898][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.550910][ T5835] hsr_slave_0: entered promiscuous mode [ 88.557701][ T5835] hsr_slave_1: entered promiscuous mode [ 88.564114][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.569853][ T5835] Cannot create hsr debugfs directory [ 88.678337][ T5834] hsr_slave_0: entered promiscuous mode [ 88.684924][ T5834] hsr_slave_1: entered promiscuous mode [ 88.691156][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 88.696955][ T5834] Cannot create hsr debugfs directory [ 89.082260][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.097171][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.110269][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.125584][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.197911][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.208534][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.219277][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.239360][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.316382][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.330291][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.348456][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.362802][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.453906][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.469597][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.480687][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.500435][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.610917][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.666979][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.681096][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.712708][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.719917][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.747204][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.754430][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.775927][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.788085][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.813668][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.820801][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.834734][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.851026][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.858256][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.892968][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.923950][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.935000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942217][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.967643][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.974903][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.985276][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.992448][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.035818][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.043182][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.362854][ T5846] Bluetooth: hci3: command tx timeout [ 90.440156][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.447211][ T5846] Bluetooth: hci2: command tx timeout [ 90.451398][ T5846] Bluetooth: hci0: command tx timeout [ 90.456253][ T5842] Bluetooth: hci1: command tx timeout [ 90.528692][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.615313][ T5832] veth0_vlan: entered promiscuous mode [ 90.674498][ T5832] veth1_vlan: entered promiscuous mode [ 90.687837][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.720310][ T5835] veth0_vlan: entered promiscuous mode [ 90.746040][ T5835] veth1_vlan: entered promiscuous mode [ 90.777603][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.799945][ T5832] veth0_macvtap: entered promiscuous mode [ 90.832651][ T5832] veth1_macvtap: entered promiscuous mode [ 90.846119][ T5835] veth0_macvtap: entered promiscuous mode [ 90.857087][ T5833] veth0_vlan: entered promiscuous mode [ 90.874404][ T5835] veth1_macvtap: entered promiscuous mode [ 90.895487][ T5833] veth1_vlan: entered promiscuous mode [ 90.910541][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.939987][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.950555][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.977741][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.988079][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.005292][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.013269][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.023162][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.050836][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.061160][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.080534][ T5834] veth0_vlan: entered promiscuous mode [ 91.087885][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.098165][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.119383][ T5833] veth0_macvtap: entered promiscuous mode [ 91.148872][ T5833] veth1_macvtap: entered promiscuous mode [ 91.171127][ T5834] veth1_vlan: entered promiscuous mode [ 91.258461][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.290534][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.305397][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.313516][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.374090][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.382669][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.383007][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.392771][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428814][ T5834] veth0_macvtap: entered promiscuous mode [ 91.437965][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447600][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489988][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.499017][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.499567][ T5834] veth1_macvtap: entered promiscuous mode [ 91.532127][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.552827][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.604660][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.644375][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.683950][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.778774][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.810210][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.816926][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.829402][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.845177][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.863433][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949558][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.957844][ T5928] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 91.972262][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.048334][ T24] cfg80211: failed to load regulatory.db [ 92.161924][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.169794][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.191989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.363432][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.372574][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.406295][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.441987][ T5842] Bluetooth: hci3: command tx timeout [ 92.502169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.510725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.521561][ T5845] Bluetooth: hci2: command tx timeout [ 92.529474][ T5846] Bluetooth: hci0: command tx timeout [ 92.535411][ T5842] Bluetooth: hci1: command tx timeout [ 92.873249][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'. [ 93.024412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.274091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.638771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.671949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.741460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.842262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.844904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.196093][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.312407][ T5967] netlink: 'syz.2.9': attribute type 11 has an invalid length. [ 94.531913][ T5845] Bluetooth: hci3: command tx timeout [ 94.603031][ T5846] Bluetooth: hci0: command tx timeout [ 94.608572][ T5842] Bluetooth: hci1: command tx timeout [ 94.616988][ T5845] Bluetooth: hci2: command tx timeout [ 94.679705][ T5962] Zero length message leads to an empty skb [ 95.916082][ T5993] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.231703][ T5967] syz.2.9 (5967): drop_caches: 1 [ 97.984221][ T6009] syz.1.17 (6009) used greatest stack depth: 19688 bytes left [ 98.416792][ T6031] random: crng reseeded on system resumption [ 99.090439][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 102.647561][ T6102] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.941377][ T6106] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.276822][ T6111] bridge0: port 3(gretap0) entered blocking state [ 103.317900][ T6111] bridge0: port 3(gretap0) entered disabled state [ 103.325049][ T6111] gretap0: entered allmulticast mode [ 103.331299][ T6111] FAULT_INJECTION: forcing a failure. [ 103.331299][ T6111] name failslab, interval 1, probability 0, space 0, times 1 [ 103.383946][ T6111] CPU: 0 UID: 0 PID: 6111 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 103.383970][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 103.383982][ T6111] Call Trace: [ 103.383987][ T6111] [ 103.383995][ T6111] dump_stack_lvl+0x16c/0x1f0 [ 103.384026][ T6111] should_fail_ex+0x512/0x640 [ 103.384042][ T6111] ? kmem_cache_alloc_noprof+0x62/0x770 [ 103.384062][ T6111] should_failslab+0xc2/0x120 [ 103.384084][ T6111] kmem_cache_alloc_noprof+0x83/0x770 [ 103.384100][ T6111] ? __kernfs_new_node+0xd2/0x9b0 [ 103.384119][ T6111] ? __kernfs_new_node+0xd2/0x9b0 [ 103.384133][ T6111] __kernfs_new_node+0xd2/0x9b0 [ 103.384150][ T6111] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.384170][ T6111] ? find_held_lock+0x2b/0x80 [ 103.384188][ T6111] ? kernfs_root+0xee/0x2a0 [ 103.384206][ T6111] kernfs_new_node+0x13c/0x1e0 [ 103.384225][ T6111] ? __pfx_map_id_range_down+0x10/0x10 [ 103.384246][ T6111] __kernfs_create_file+0x53/0x350 [ 103.384269][ T6111] sysfs_add_file_mode_ns+0x207/0x3c0 [ 103.384288][ T6111] sysfs_create_file_ns+0x13d/0x1d0 [ 103.384303][ T6111] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 103.384317][ T6111] ? kernfs_create_link+0x1bd/0x240 [ 103.384330][ T6111] ? kernfs_put+0x35/0x60 [ 103.384344][ T6111] ? sysfs_do_create_link_sd+0xbb/0x140 [ 103.384362][ T6111] br_sysfs_addif+0xe4/0x220 [ 103.384378][ T6111] br_add_if+0x70d/0x1b70 [ 103.384399][ T6111] ? security_capable+0x7e/0x260 [ 103.384415][ T6111] add_del_if+0x114/0x160 [ 103.384436][ T6111] br_dev_siocdevprivate+0x908/0x1650 [ 103.384458][ T6111] ? __lock_acquire+0x436/0x2890 [ 103.384471][ T6111] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 103.384497][ T6111] ? do_raw_spin_lock+0x12c/0x2b0 [ 103.384516][ T6111] ? mark_held_locks+0x49/0x80 [ 103.384531][ T6111] ? netdev_name_node_lookup+0x127/0x180 [ 103.384547][ T6111] ? __mutex_lock+0x27b/0x1ca0 [ 103.384563][ T6111] dev_ifsioc+0x8ee/0x1ee0 [ 103.384582][ T6111] ? __pfx_dev_ifsioc+0x10/0x10 [ 103.384598][ T6111] ? __pfx___mutex_lock+0x10/0x10 [ 103.384619][ T6111] ? dev_load+0x8e/0x240 [ 103.384639][ T6111] dev_ioctl+0x1b2/0x1060 [ 103.384658][ T6111] sock_ioctl+0x5b3/0x6b0 [ 103.384673][ T6111] ? __pfx_sock_ioctl+0x10/0x10 [ 103.384685][ T6111] ? hook_file_ioctl_common+0x144/0x410 [ 103.384706][ T6111] ? __fget_files+0x20e/0x3c0 [ 103.384727][ T6111] ? __pfx_sock_ioctl+0x10/0x10 [ 103.384742][ T6111] __x64_sys_ioctl+0x18e/0x210 [ 103.384760][ T6111] do_syscall_64+0xcd/0xf80 [ 103.384774][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.384788][ T6111] RIP: 0033:0x7f550978f7c9 [ 103.384801][ T6111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.384814][ T6111] RSP: 002b:00007f550a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.384829][ T6111] RAX: ffffffffffffffda RBX: 00007f55099e6180 RCX: 00007f550978f7c9 [ 103.384838][ T6111] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 103.384854][ T6111] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.384862][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.384870][ T6111] R13: 00007f55099e6218 R14: 00007f55099e6180 R15: 00007fffdc4a6198 [ 103.384890][ T6111] [ 103.385474][ T6111] gretap0: left allmulticast mode [ 103.982209][ T6117] random: crng reseeded on system resumption [ 105.145553][ T6128] No such timeout policy "" [ 105.150553][ T6128] netlink: Failed to associated timeout policy '' [ 105.828694][ T6133] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.094374][ T6155] __vm_enough_memory: pid: 6155, comm: syz.1.48, bytes: 4398046511104 not enough memory for the allocation [ 107.165821][ T6155] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1986356271.1936024425), cmd(5) [ 107.658280][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.473498][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 112.528700][ T6233] netlink: 29 bytes leftover after parsing attributes in process `syz.2.62'. [ 112.593707][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 113.889542][ T6280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.390661][ T6290] Invalid ELF header magic: != ELF [ 114.790426][ T6308] bridge0: port 3(gretap0) entered blocking state [ 114.797095][ T6308] bridge0: port 3(gretap0) entered disabled state [ 114.803809][ T6308] gretap0: entered allmulticast mode [ 114.811450][ T6308] gretap0: entered promiscuous mode [ 114.818571][ T6308] bridge0: port 3(gretap0) entered blocking state [ 114.825417][ T6308] bridge0: port 3(gretap0) entered forwarding state [ 115.049306][ T5845] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 115.313245][ T6317] mkiss: ax0: crc mode is auto. [ 116.196410][ T6343] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 116.494365][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 116.571718][ T6358] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.048234][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 117.952037][ T6410] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.970979][ T6400] syz.0.107 uses obsolete (PF_INET,SOCK_PACKET) [ 118.074119][ T6409] HSR: entered promiscuous mode [ 118.207438][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 120.556172][ T6465] netlink: 12 bytes leftover after parsing attributes in process `'. [ 120.663798][ T6465] FAULT_INJECTION: forcing a failure. [ 120.663798][ T6465] name failslab, interval 1, probability 0, space 0, times 0 [ 120.798705][ T6465] CPU: 0 UID: 7 PID: 6465 Comm: Tainted: G L syzkaller #0 PREEMPT(full) [ 120.798762][ T6465] Tainted: [L]=SOFTLOCKUP [ 120.798771][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 120.798785][ T6465] Call Trace: [ 120.798802][ T6465] [ 120.798812][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 120.798856][ T6465] should_fail_ex+0x512/0x640 [ 120.798892][ T6465] ? __kmalloc_cache_noprof+0x5f/0x800 [ 120.798926][ T6465] should_failslab+0xc2/0x120 [ 120.798976][ T6465] __kmalloc_cache_noprof+0x80/0x800 [ 120.799011][ T6465] ? alloc_super+0x52/0xd00 [ 120.799051][ T6465] ? alloc_super+0x52/0xd00 [ 120.799083][ T6465] alloc_super+0x52/0xd00 [ 120.799112][ T6465] ? sget_fc+0xd3/0xc20 [ 120.799150][ T6465] sget_fc+0x116/0xc20 [ 120.799182][ T6465] ? __pfx_set_anon_super_fc+0x10/0x10 [ 120.799214][ T6465] ? __pfx_mqueue_fill_super+0x10/0x10 [ 120.799238][ T6465] get_tree_nodev+0x28/0x190 [ 120.799280][ T6465] mqueue_get_tree+0xf1/0x130 [ 120.799305][ T6465] vfs_get_tree+0x8e/0x330 [ 120.799335][ T6465] fc_mount_longterm+0x1a/0x270 [ 120.799369][ T6465] mq_init_ns+0x482/0x810 [ 120.799399][ T6465] copy_ipcs+0x3db/0x7d0 [ 120.799429][ T6465] create_new_namespaces+0x20a/0xab0 [ 120.799462][ T6465] ? security_capable+0x7e/0x260 [ 120.799491][ T6465] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 120.799527][ T6465] ksys_unshare+0x45b/0xa40 [ 120.799550][ T6465] ? __pfx_ksys_unshare+0x10/0x10 [ 120.799574][ T6465] ? xfd_validate_state+0x61/0x180 [ 120.799607][ T6465] __x64_sys_unshare+0x31/0x40 [ 120.799629][ T6465] do_syscall_64+0xcd/0xf80 [ 120.799655][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.799680][ T6465] RIP: 0033:0x7f550978f7c9 [ 120.799700][ T6465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.799722][ T6465] RSP: 002b:00007f550a627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 120.799753][ T6465] RAX: ffffffffffffffda RBX: 00007f55099e5fa0 RCX: 00007f550978f7c9 [ 120.799770][ T6465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 120.799785][ T6465] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.799800][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.799815][ T6465] R13: 00007f55099e6038 R14: 00007f55099e5fa0 R15: 00007fffdc4a6198 [ 120.799852][ T6465] [ 121.382793][ T6475] Unable to find swap-space signature [ 121.604905][ T6480] FAULT_INJECTION: forcing a failure. [ 121.604905][ T6480] name failslab, interval 1, probability 0, space 0, times 0 [ 121.624608][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.1.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.624649][ T6480] Tainted: [L]=SOFTLOCKUP [ 121.624657][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 121.624671][ T6480] Call Trace: [ 121.624679][ T6480] [ 121.624688][ T6480] dump_stack_lvl+0x16c/0x1f0 [ 121.624743][ T6480] should_fail_ex+0x512/0x640 [ 121.624771][ T6480] ? __kvmalloc_node_noprof+0x129/0xa40 [ 121.624810][ T6480] should_failslab+0xc2/0x120 [ 121.624844][ T6480] __kvmalloc_node_noprof+0x14a/0xa40 [ 121.624877][ T6480] ? __pfx_futex_wake_mark+0x10/0x10 [ 121.624910][ T6480] ? do_semtimedop+0x23a/0x2e0 [ 121.624946][ T6480] ? do_semtimedop+0x23a/0x2e0 [ 121.624971][ T6480] do_semtimedop+0x23a/0x2e0 [ 121.625000][ T6480] ? __pfx_do_semtimedop+0x10/0x10 [ 121.625073][ T6480] ? __x64_sys_futex+0x1e0/0x4c0 [ 121.625099][ T6480] ? __x64_sys_futex+0x1e9/0x4c0 [ 121.625130][ T6480] __x64_sys_semtimedop+0x1b4/0x1f0 [ 121.625160][ T6480] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 121.625191][ T6480] ? fdget+0x187/0x210 [ 121.625230][ T6480] do_syscall_64+0xcd/0xf80 [ 121.625263][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.625288][ T6480] RIP: 0033:0x7f550978f7c9 [ 121.625307][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.625328][ T6480] RSP: 002b:00007f550a5e5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 121.625351][ T6480] RAX: ffffffffffffffda RBX: 00007f55099e6180 RCX: 00007f550978f7c9 [ 121.625367][ T6480] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.625381][ T6480] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.625395][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.625409][ T6480] R13: 00007f55099e6218 R14: 00007f55099e6180 R15: 00007fffdc4a6198 [ 121.625445][ T6480] [ 121.834892][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 122.454099][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 122.620922][ T6509] netlink: 'syz.1.129': attribute type 4 has an invalid length. [ 122.625626][ T49] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.356945][ T6526] Unable to find swap-space signature [ 123.550639][ T6535] FAULT_INJECTION: forcing a failure. [ 123.550639][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.566778][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.3.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.566820][ T6535] Tainted: [L]=SOFTLOCKUP [ 123.566828][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 123.566840][ T6535] Call Trace: [ 123.566848][ T6535] [ 123.566856][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 123.566896][ T6535] should_fail_ex+0x512/0x640 [ 123.566927][ T6535] _copy_from_user+0x2e/0xd0 [ 123.566956][ T6535] do_semtimedop+0x182/0x2e0 [ 123.566985][ T6535] ? __pfx_do_semtimedop+0x10/0x10 [ 123.567060][ T6535] ? __x64_sys_futex+0x1e0/0x4c0 [ 123.567090][ T6535] ? __x64_sys_futex+0x1e9/0x4c0 [ 123.567122][ T6535] __x64_sys_semtimedop+0x1b4/0x1f0 [ 123.567154][ T6535] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 123.567196][ T6535] do_syscall_64+0xcd/0xf80 [ 123.567220][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.567242][ T6535] RIP: 0033:0x7f2cf358f7c9 [ 123.567262][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.567282][ T6535] RSP: 002b:00007f2cf4396038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 123.567302][ T6535] RAX: ffffffffffffffda RBX: 00007f2cf37e6180 RCX: 00007f2cf358f7c9 [ 123.567316][ T6535] RDX: 00000000000001f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.567330][ T6535] RBP: 00007f2cf3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.567345][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.567358][ T6535] R13: 00007f2cf37e6218 R14: 00007f2cf37e6180 R15: 00007ffdc1cfd898 [ 123.567392][ T6535] [ 124.019192][ T6539] zswap: compressor not available [ 124.169943][ T6553] netlink: 342 bytes leftover after parsing attributes in process `syz.2.138'. [ 124.465511][ T6564] FAULT_INJECTION: forcing a failure. [ 124.465511][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 124.534106][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.1.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.534144][ T6564] Tainted: [L]=SOFTLOCKUP [ 124.534152][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 124.534165][ T6564] Call Trace: [ 124.534173][ T6564] [ 124.534181][ T6564] dump_stack_lvl+0x16c/0x1f0 [ 124.534222][ T6564] should_fail_ex+0x512/0x640 [ 124.534249][ T6564] ? __kmalloc_noprof+0xca/0x910 [ 124.534277][ T6564] should_failslab+0xc2/0x120 [ 124.534311][ T6564] __kmalloc_noprof+0xeb/0x910 [ 124.534337][ T6564] ? sk_prot_alloc+0x1a8/0x2a0 [ 124.534364][ T6564] ? sk_prot_alloc+0x1a8/0x2a0 [ 124.534383][ T6564] sk_prot_alloc+0x1a8/0x2a0 [ 124.534408][ T6564] sk_alloc+0x36/0xe30 [ 124.534437][ T6564] __netlink_create+0x5e/0x2c0 [ 124.534465][ T6564] ? __wake_up+0x3f/0x60 [ 124.534500][ T6564] netlink_create+0x39e/0x620 [ 124.534529][ T6564] ? __pfx_genl_bind+0x10/0x10 [ 124.534549][ T6564] ? __pfx_genl_unbind+0x10/0x10 [ 124.534569][ T6564] ? __pfx_genl_release+0x10/0x10 [ 124.534595][ T6564] __sock_create+0x339/0x8a0 [ 124.534625][ T6564] __sys_socket+0x14d/0x260 [ 124.534650][ T6564] ? __pfx___sys_socket+0x10/0x10 [ 124.534677][ T6564] ? do_user_addr_fault+0x843/0x1370 [ 124.534710][ T6564] __x64_sys_socket+0x72/0xb0 [ 124.534733][ T6564] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.534754][ T6564] do_syscall_64+0xcd/0xf80 [ 124.534780][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.534802][ T6564] RIP: 0033:0x7f55097916e7 [ 124.534822][ T6564] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.534842][ T6564] RSP: 002b:00007f550a625fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 124.534864][ T6564] RAX: ffffffffffffffda RBX: 00007f55099e5fa0 RCX: 00007f55097916e7 [ 124.534879][ T6564] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 124.534893][ T6564] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 124.534906][ T6564] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 124.534919][ T6564] R13: 00007f55099e6038 R14: 00007f55099e5fa0 R15: 00007fffdc4a6198 [ 124.534952][ T6564] [ 124.789651][ T6573] bridge0: port 4(macvlan0) entered blocking state [ 124.801086][ T6573] bridge0: port 4(macvlan0) entered disabled state [ 124.818230][ T6573] macvlan0: entered allmulticast mode [ 124.830003][ T6573] veth1_vlan: entered allmulticast mode [ 124.846222][ T6573] macvlan0: entered promiscuous mode [ 125.044576][ T6573] bridge0: port 4(macvlan0) entered blocking state [ 125.051201][ T6573] bridge0: port 4(macvlan0) entered forwarding state [ 125.333087][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 125.420605][ T6586] hugetlbfs: syz.1.147 (6586): Using mlock ulimits for SHM_HUGETLB is obsolete [ 125.636176][ T6596] capability: warning: `syz.1.150' uses 32-bit capabilities (legacy support in use) [ 127.789851][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 128.281632][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 130.395995][ T6687] device-mapper: ioctl: name not supplied when creating device [ 131.842367][ T6716] netlink: 330 bytes leftover after parsing attributes in process `syz.0.177'. [ 131.894351][ T6719] netlink: 330 bytes leftover after parsing attributes in process `syz.0.177'. [ 131.929586][ T6716] \: renamed from lo (while UP) [ 133.933237][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 133.985643][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 134.425635][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 134.598556][ T6767] ipvlan0: entered promiscuous mode [ 134.615316][ T6767] ipvlan0: entered allmulticast mode [ 134.635107][ T6767] veth0_vlan: entered allmulticast mode [ 135.033786][ T5845] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 135.140883][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 137.252550][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 137.282190][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'. [ 138.134231][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.148800][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.884081][ T6872] random: crng reseeded on system resumption [ 141.509141][ T6934] process 'syz.3.225' launched ':,' with NULL argv: empty string added [ 143.156775][ T6990] netlink: 186 bytes leftover after parsing attributes in process `syz.0.239'. [ 143.428889][ T6999] FAULT_INJECTION: forcing a failure. [ 143.428889][ T6999] name failslab, interval 1, probability 0, space 0, times 0 [ 143.441866][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.1.240 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.441913][ T6999] Tainted: [L]=SOFTLOCKUP [ 143.441922][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 143.441937][ T6999] Call Trace: [ 143.441945][ T6999] [ 143.441955][ T6999] dump_stack_lvl+0x16c/0x1f0 [ 143.442003][ T6999] should_fail_ex+0x512/0x640 [ 143.442032][ T6999] ? kmem_cache_alloc_noprof+0x62/0x770 [ 143.442067][ T6999] should_failslab+0xc2/0x120 [ 143.442102][ T6999] kmem_cache_alloc_noprof+0x83/0x770 [ 143.442131][ T6999] ? sk_prot_alloc+0x60/0x2a0 [ 143.442161][ T6999] ? sk_prot_alloc+0x60/0x2a0 [ 143.442181][ T6999] ? find_held_lock+0x2b/0x80 [ 143.442210][ T6999] sk_prot_alloc+0x60/0x2a0 [ 143.442236][ T6999] sk_alloc+0x36/0xe30 [ 143.442267][ T6999] inet_create+0x3a1/0x1040 [ 143.442298][ T6999] ? inet_create+0x93/0x1040 [ 143.442333][ T6999] __sock_create+0x339/0x8a0 [ 143.442377][ T6999] __sys_socket+0x14d/0x260 [ 143.442423][ T6999] ? __pfx___sys_socket+0x10/0x10 [ 143.442450][ T6999] ? xfd_validate_state+0x61/0x180 [ 143.442472][ T6999] ? __pfx___do_sys_close_range+0x10/0x10 [ 143.442538][ T6999] __x64_sys_socket+0x72/0xb0 [ 143.442564][ T6999] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.442599][ T6999] do_syscall_64+0xcd/0xf80 [ 143.442626][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.442652][ T6999] RIP: 0033:0x7f550978f7c9 [ 143.442673][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.442695][ T6999] RSP: 002b:00007f550a606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 143.442718][ T6999] RAX: ffffffffffffffda RBX: 00007f55099e6090 RCX: 00007f550978f7c9 [ 143.442735][ T6999] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 143.442750][ T6999] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 143.442765][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.442779][ T6999] R13: 00007f55099e6128 R14: 00007f55099e6090 R15: 00007fffdc4a6198 [ 143.442814][ T6999] [ 143.446055][ T6999] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 144.150216][ T7021] syz.0.244: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 144.169213][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.0.244 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.169243][ T7021] Tainted: [L]=SOFTLOCKUP [ 144.169248][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 144.169258][ T7021] Call Trace: [ 144.169264][ T7021] [ 144.169270][ T7021] dump_stack_lvl+0x16c/0x1f0 [ 144.169297][ T7021] warn_alloc+0x248/0x3a0 [ 144.169315][ T7021] ? __pfx_warn_alloc+0x10/0x10 [ 144.169332][ T7021] ? __lock_acquire+0x436/0x2890 [ 144.169354][ T7021] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 144.169368][ T7021] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 144.169382][ T7021] ? __pfx___might_resched+0x10/0x10 [ 144.169402][ T7021] ? rcu_is_watching+0x12/0xc0 [ 144.169424][ T7021] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 144.169438][ T7021] ? find_held_lock+0x2b/0x80 [ 144.169454][ T7021] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 144.169467][ T7021] ? tomoyo_path_number_perm+0x295/0x580 [ 144.169485][ T7021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 144.169498][ T7021] ? __pfx___mutex_lock+0x10/0x10 [ 144.169511][ T7021] ? tomoyo_path_number_perm+0x18d/0x580 [ 144.169528][ T7021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 144.169543][ T7021] ? futex_wake+0x1ad/0x530 [ 144.169563][ T7021] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 144.169575][ T7021] __vmalloc_node_noprof+0xad/0xf0 [ 144.169588][ T7021] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 144.169604][ T7021] dvb_dvr_do_ioctl+0x15d/0x290 [ 144.169620][ T7021] dvb_usercopy+0x167/0x340 [ 144.169633][ T7021] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 144.169651][ T7021] ? __pfx_dvb_usercopy+0x10/0x10 [ 144.169671][ T7021] ? __fget_files+0x20e/0x3c0 [ 144.169693][ T7021] dvb_dvr_ioctl+0x29/0x40 [ 144.169706][ T7021] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 144.169720][ T7021] __x64_sys_ioctl+0x18e/0x210 [ 144.169739][ T7021] do_syscall_64+0xcd/0xf80 [ 144.169753][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.169766][ T7021] RIP: 0033:0x7fe55438f7c9 [ 144.169778][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.169791][ T7021] RSP: 002b:00007fe55519a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.169804][ T7021] RAX: ffffffffffffffda RBX: 00007fe5545e6090 RCX: 00007fe55438f7c9 [ 144.169813][ T7021] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 144.169821][ T7021] RBP: 00007fe554413f91 R08: 0000000000000000 R09: 0000000000000000 [ 144.169829][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.169836][ T7021] R13: 00007fe5545e6128 R14: 00007fe5545e6090 R15: 00007ffc0146f398 [ 144.169854][ T7021] [ 144.170012][ T7021] Mem-Info: [ 144.475870][ T7021] active_anon:12783 inactive_anon:0 isolated_anon:0 [ 144.475870][ T7021] active_file:16350 inactive_file:4387 isolated_file:0 [ 144.475870][ T7021] unevictable:768 dirty:110 writeback:0 [ 144.475870][ T7021] slab_reclaimable:11193 slab_unreclaimable:91572 [ 144.475870][ T7021] mapped:25374 shmem:3830 pagetables:1126 [ 144.475870][ T7021] sec_pagetables:0 bounce:0 [ 144.475870][ T7021] kernel_misc_reclaimable:0 [ 144.475870][ T7021] free:1345181 free_pcp:21658 free_cma:0 [ 144.621922][ T7021] Node 0 active_anon:59816kB inactive_anon:0kB active_file:65400kB inactive_file:17340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104268kB dirty:440kB writeback:0kB shmem:17984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:20480kB kernel_stack:12112kB pagetables:4552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.714215][ T7021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.799921][ T7032] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 144.928701][ T7021] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.035704][ T7021] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 145.186727][ T7021] Node 0 DMA32 free:1483468kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70636kB inactive_anon:0kB active_file:65528kB inactive_file:17132kB unevictable:1536kB writepending:20kB zspages:0kB present:3129332kB managed:2540988kB mlocked:0kB bounce:0kB free_pcp:47880kB local_pcp:27416kB free_cma:0kB [ 145.665670][ T7021] lowmem_reserve[]: 0 0 1 1 1 [ 145.739166][ T7021] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.774029][ T7021] lowmem_reserve[]: 0 0 0 0 0 [ 145.784085][ T7021] Node 1 Normal free:3864272kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27648kB local_pcp:15424kB free_cma:0kB [ 145.906158][ T7021] lowmem_reserve[]: 0 0 0 0 0 [ 145.936767][ T7021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 145.959920][ T7021] Node 0 DMA32: 628*4kB (UE) 772*8kB (U) 223*16kB (UME) 103*32kB (UME) 197*64kB (UME) 302*128kB (UME) 199*256kB (UM) 57*512kB (UM) 27*1024kB (UME) 3*2048kB (UME) 306*4096kB (M) = 1434112kB [ 145.995478][ T7021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.007232][ T7021] Node 1 Normal: 227*4kB (UME) 59*8kB (UME) 50*16kB (UME) 74*32kB (UE) 29*64kB (UE) 6*128kB (UM) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 940*4096kB (M) = 3864324kB [ 146.045269][ T7021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.069264][ T7021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.096089][ T7021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.117978][ T7021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.151661][ T7021] 40487 total pagecache pages [ 146.174818][ T7021] 0 pages in swap cache [ 146.185341][ T7021] Free swap = 124996kB [ 146.195697][ T7021] Total swap = 124996kB [ 146.223793][ T7021] 2097051 pages RAM [ 146.230580][ T7021] 0 pages HighMem/MovableOnly [ 146.245977][ T7021] 429778 pages reserved [ 146.260763][ T7021] 0 pages cma reserved [ 146.814968][ T7069] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 147.221069][ T7083] FAULT_INJECTION: forcing a failure. [ 147.221069][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 147.321419][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.1.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.321460][ T7083] Tainted: [L]=SOFTLOCKUP [ 147.321468][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 147.321482][ T7083] Call Trace: [ 147.321491][ T7083] [ 147.321500][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 147.321545][ T7083] should_fail_ex+0x512/0x640 [ 147.321572][ T7083] ? kmem_cache_alloc_noprof+0x62/0x770 [ 147.321607][ T7083] should_failslab+0xc2/0x120 [ 147.321645][ T7083] kmem_cache_alloc_noprof+0x83/0x770 [ 147.321674][ T7083] ? __kernfs_new_node+0xd2/0x9b0 [ 147.321725][ T7083] ? __kernfs_new_node+0xd2/0x9b0 [ 147.321755][ T7083] __kernfs_new_node+0xd2/0x9b0 [ 147.321785][ T7083] ? kernfs_add_one+0x37d/0x840 [ 147.321816][ T7083] ? __pfx___kernfs_new_node+0x10/0x10 [ 147.321858][ T7083] ? find_held_lock+0x2b/0x80 [ 147.321891][ T7083] ? kernfs_root+0xee/0x2a0 [ 147.321924][ T7083] kernfs_new_node+0x13c/0x1e0 [ 147.321953][ T7083] ? net_ns_get_ownership+0xf8/0x1b0 [ 147.321988][ T7083] kernfs_create_dir_ns+0x4c/0x1a0 [ 147.322025][ T7083] internal_create_group+0x36c/0xf70 [ 147.322063][ T7083] ? __pfx_internal_create_group+0x10/0x10 [ 147.322093][ T7083] ? __pfx_internal_create_group+0x10/0x10 [ 147.322128][ T7083] ? __pfx_dev_add_physical_location+0x10/0x10 [ 147.322164][ T7083] ? bus_to_subsys+0x131/0x160 [ 147.322193][ T7083] dpm_sysfs_add+0x80/0x280 [ 147.322228][ T7083] device_add+0x9cc/0x1980 [ 147.322267][ T7083] ? __pfx_device_add+0x10/0x10 [ 147.322301][ T7083] ? lockdep_init_map_type+0x5c/0x270 [ 147.322327][ T7083] ? __init_waitqueue_head+0xca/0x150 [ 147.322364][ T7083] netdev_register_kobject+0x1a9/0x3d0 [ 147.322394][ T7083] register_netdevice+0x13c1/0x21e0 [ 147.322438][ T7083] ? __pfx_register_netdevice+0x10/0x10 [ 147.322496][ T7083] ppp_dev_configure+0xa1e/0xd40 [ 147.322556][ T7083] ppp_ioctl+0x170e/0x2880 [ 147.322582][ T7083] ? find_held_lock+0x2b/0x80 [ 147.322614][ T7083] ? __pfx_ppp_ioctl+0x10/0x10 [ 147.322641][ T7083] ? __fget_files+0x20e/0x3c0 [ 147.322690][ T7083] ? __pfx_ppp_ioctl+0x10/0x10 [ 147.322714][ T7083] __x64_sys_ioctl+0x18e/0x210 [ 147.322748][ T7083] do_syscall_64+0xcd/0xf80 [ 147.322775][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.322800][ T7083] RIP: 0033:0x7f550978f7c9 [ 147.322822][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.322844][ T7083] RSP: 002b:00007f550a627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.322867][ T7083] RAX: ffffffffffffffda RBX: 00007f55099e5fa0 RCX: 00007f550978f7c9 [ 147.322883][ T7083] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 147.322898][ T7083] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.322912][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.322926][ T7083] R13: 00007f55099e6038 R14: 00007f55099e5fa0 R15: 00007fffdc4a6198 [ 147.322962][ T7083] [ 147.704417][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 147.808483][ T7089] nbd: must specify a size in bytes for the device [ 150.055241][ T7148] FAULT_INJECTION: forcing a failure. [ 150.055241][ T7148] name fail_futex, interval 1, probability 0, space 0, times 1 [ 150.082646][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.3.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.082672][ T7148] Tainted: [L]=SOFTLOCKUP [ 150.082677][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 150.082685][ T7148] Call Trace: [ 150.082690][ T7148] [ 150.082696][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 150.082724][ T7148] should_fail_ex+0x512/0x640 [ 150.082804][ T7148] get_futex_key+0x1d0/0x15f0 [ 150.082830][ T7148] ? __pfx_get_futex_key+0x10/0x10 [ 150.082851][ T7148] ? kmem_cache_free+0x2d8/0x770 [ 150.082869][ T7148] ? kernel_setlease+0x10d/0x140 [ 150.082888][ T7148] ? do_fcntl_add_lease+0x400/0x550 [ 150.082911][ T7148] futex_wake+0xea/0x530 [ 150.082933][ T7148] ? __pfx_futex_wake+0x10/0x10 [ 150.082954][ T7148] ? fcntl_setlease+0x103/0x180 [ 150.082975][ T7148] do_futex+0x1e3/0x350 [ 150.082990][ T7148] ? __pfx_do_futex+0x10/0x10 [ 150.083005][ T7148] ? do_fcntl+0x268/0x1660 [ 150.083022][ T7148] __x64_sys_futex+0x1e0/0x4c0 [ 150.083040][ T7148] ? __pfx___x64_sys_futex+0x10/0x10 [ 150.083055][ T7148] ? tomoyo_file_fcntl+0x6c/0xc0 [ 150.083069][ T7148] ? fput+0x70/0xf0 [ 150.083085][ T7148] do_syscall_64+0xcd/0xf80 [ 150.083100][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.083113][ T7148] RIP: 0033:0x7f2cf358f7c9 [ 150.083126][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.083139][ T7148] RSP: 002b:00007f2cf43b70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 150.083153][ T7148] RAX: ffffffffffffffda RBX: 00007f2cf37e6098 RCX: 00007f2cf358f7c9 [ 150.083161][ T7148] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cf37e609c [ 150.083169][ T7148] RBP: 00007f2cf37e6090 R08: 00007f2cf43d9000 R09: 0000000000000000 [ 150.083178][ T7148] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 150.083186][ T7148] R13: 00007f2cf37e6128 R14: 00007ffdc1cfd7b0 R15: 00007ffdc1cfd898 [ 150.083205][ T7148] [ 150.578454][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 150.961326][ T7165] netlink: zone id is out of range [ 150.995543][ T7164] netlink: set zone limit has 8 unknown bytes [ 152.557899][ T7200] netlink: 338 bytes leftover after parsing attributes in process `syz.2.285'. [ 154.015763][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 155.508706][ T7254] nbd: socks must be embedded in a SOCK_ITEM attr [ 155.729010][ T30] audit: type=1800 audit(1768928682.281:2): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.298" name="lu_gp_id" dev="configfs" ino=15820 res=0 errno=0 [ 157.564179][ T7279] __vm_enough_memory: pid: 7279, comm: syz.2.302, bytes: 4398046511104 not enough memory for the allocation [ 158.630509][ T5845] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 158.721478][ T5845] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 159.891685][ T7330] synth uevent: /module/hid_razer: unknown uevent action string [ 159.960182][ T7340] random: crng reseeded on system resumption [ 159.992201][ T7337] netlink: 342 bytes leftover after parsing attributes in process `syz.1.315'. [ 160.039376][ T7339] netlink: 342 bytes leftover after parsing attributes in process `syz.1.315'. [ 163.588550][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 163.640470][ T7415] hsr_slave_0: left promiscuous mode [ 163.833226][ T7415] hsr_slave_1: left promiscuous mode [ 164.182384][ T7425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 165.714919][ T7476] input: f as /devices/virtual/input/input8 [ 165.983739][ T7480] zram: Removed device: zram0 [ 168.130056][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 168.152307][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 168.458266][ T7512] sd 0:0:1:0: PR command failed: 1026 [ 168.463917][ T7512] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 168.480117][ T7512] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.649936][ T7516] netlink: 334 bytes leftover after parsing attributes in process `syz.0.352'. [ 169.297490][ T7543] FAULT_INJECTION: forcing a failure. [ 169.297490][ T7543] name fail_futex, interval 1, probability 0, space 0, times 0 [ 169.395500][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.0.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.395536][ T7543] Tainted: [L]=SOFTLOCKUP [ 169.395543][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 169.395554][ T7543] Call Trace: [ 169.395560][ T7543] [ 169.395568][ T7543] dump_stack_lvl+0x16c/0x1f0 [ 169.395605][ T7543] should_fail_ex+0x512/0x640 [ 169.395636][ T7543] get_futex_key+0x1d0/0x15f0 [ 169.395663][ T7543] ? find_held_lock+0x2b/0x80 [ 169.395691][ T7543] ? __pfx_get_futex_key+0x10/0x10 [ 169.395725][ T7543] futex_wake+0xea/0x530 [ 169.395752][ T7543] ? futex_wait+0x120/0x380 [ 169.395777][ T7543] ? __pfx_futex_wait+0x10/0x10 [ 169.395803][ T7543] ? __lock_acquire+0x436/0x2890 [ 169.395823][ T7543] ? __pfx_futex_wake+0x10/0x10 [ 169.395851][ T7543] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 169.395890][ T7543] do_futex+0x1e3/0x350 [ 169.395917][ T7543] ? __pfx_do_futex+0x10/0x10 [ 169.395940][ T7543] ? rcu_is_watching+0x12/0xc0 [ 169.395967][ T7543] ? ktime_get+0x200/0x310 [ 169.395993][ T7543] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.396013][ T7543] ? read_tsc+0x9/0x20 [ 169.396044][ T7543] __x64_sys_futex+0x1e0/0x4c0 [ 169.396073][ T7543] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.396097][ T7543] ? xfd_validate_state+0x61/0x180 [ 169.396127][ T7543] do_syscall_64+0xcd/0xf80 [ 169.396150][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.396173][ T7543] RIP: 0033:0x7fe55438f7c9 [ 169.396192][ T7543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.396213][ T7543] RSP: 002b:00007ffc0146f4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.396235][ T7543] RAX: ffffffffffffffda RBX: 00007fe5545e6188 RCX: 00007fe55438f7c9 [ 169.396251][ T7543] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5545e6188 [ 169.396265][ T7543] RBP: 0000000000000002 R08: 0000000000000000 R09: 000000120146f7ef [ 169.396279][ T7543] R10: 00007fe5545e5fa0 R11: 0000000000000246 R12: 00007fe5545e618c [ 169.396292][ T7543] R13: 00007fe5545e6180 R14: 00000000000000fc R15: 0000000000000003 [ 169.396324][ T7543] [ 171.863991][ T7586] ======================================================= [ 171.863991][ T7586] WARNING: The mand mount option has been deprecated and [ 171.863991][ T7586] and is ignored by this kernel. Remove the mand [ 171.863991][ T7586] option from the mount to silence this warning. [ 171.863991][ T7586] ======================================================= [ 173.357970][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 173.993588][ T7600] FAULT_INJECTION: forcing a failure. [ 173.993588][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 174.041720][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.0.368 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.041758][ T7600] Tainted: [L]=SOFTLOCKUP [ 174.041766][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 174.041780][ T7600] Call Trace: [ 174.041787][ T7600] [ 174.041796][ T7600] dump_stack_lvl+0x16c/0x1f0 [ 174.041837][ T7600] should_fail_ex+0x512/0x640 [ 174.041863][ T7600] ? kmem_cache_alloc_noprof+0x62/0x770 [ 174.041894][ T7600] should_failslab+0xc2/0x120 [ 174.041928][ T7600] kmem_cache_alloc_noprof+0x83/0x770 [ 174.041956][ T7600] ? ptlock_alloc+0x1f/0x70 [ 174.041986][ T7600] ? ptlock_alloc+0x1f/0x70 [ 174.042008][ T7600] ptlock_alloc+0x1f/0x70 [ 174.042032][ T7600] pte_alloc_one+0x84/0x3d0 [ 174.042063][ T7600] __pte_alloc+0x6d/0x3f0 [ 174.042094][ T7600] ? __pfx___pte_alloc+0x10/0x10 [ 174.042123][ T7600] ? __pfx___might_resched+0x10/0x10 [ 174.042154][ T7600] ? copy_page_range+0x22fb/0x6780 [ 174.042184][ T7600] copy_page_range+0x3f3e/0x6780 [ 174.042249][ T7600] ? __pfx_copy_page_range+0x10/0x10 [ 174.042287][ T7600] ? __pfx___might_resched+0x10/0x10 [ 174.042315][ T7600] ? __pfx_mas_store+0x10/0x10 [ 174.042352][ T7600] ? dup_mmap+0xba4/0x20e0 [ 174.042372][ T7600] ? down_write+0x14d/0x200 [ 174.042402][ T7600] ? up_write+0x282/0x4e0 [ 174.042431][ T7600] dup_mmap+0xbea/0x20e0 [ 174.042465][ T7600] ? __pfx_dup_mmap+0x10/0x10 [ 174.042506][ T7600] copy_process+0x3b9f/0x7430 [ 174.042536][ T7600] ? preempt_schedule_thunk+0x16/0x30 [ 174.042573][ T7600] ? __pfx_copy_process+0x10/0x10 [ 174.042605][ T7600] ? find_held_lock+0x2b/0x80 [ 174.042638][ T7600] ? futex_private_hash_put+0x160/0x1b0 [ 174.042668][ T7600] kernel_clone+0xfc/0x910 [ 174.042698][ T7600] ? __pfx_futex_wake+0x10/0x10 [ 174.042727][ T7600] ? __pfx_kernel_clone+0x10/0x10 [ 174.042780][ T7600] __do_sys_clone+0xce/0x120 [ 174.042813][ T7600] ? __pfx___do_sys_clone+0x10/0x10 [ 174.042862][ T7600] ? xfd_validate_state+0x61/0x180 [ 174.042895][ T7600] do_syscall_64+0xcd/0xf80 [ 174.042920][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.042943][ T7600] RIP: 0033:0x7fe55438f7c9 [ 174.042962][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.042982][ T7600] RSP: 002b:00007fe555199fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 174.043003][ T7600] RAX: ffffffffffffffda RBX: 00007fe5545e6090 RCX: 00007fe55438f7c9 [ 174.043017][ T7600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 174.043029][ T7600] RBP: 00007fe554413f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.043042][ T7600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.043053][ T7600] R13: 00007fe5545e6128 R14: 00007fe5545e6090 R15: 00007ffc0146f398 [ 174.043084][ T7600] [ 174.500116][ T7599] zswap: compressor not available [ 174.602168][ T7605] netlink: 330 bytes leftover after parsing attributes in process `syz.2.369'. [ 174.887413][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 175.349839][ T7628] loop6: detected capacity change from 0 to 8 [ 177.633895][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 179.200585][ T7696] : Can't lookup blockdev [ 180.328607][ T7721] zswap: compressor not available [ 180.833746][ T7738] FAULT_INJECTION: forcing a failure. [ 180.833746][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 180.849569][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.849593][ T7738] Tainted: [L]=SOFTLOCKUP [ 180.849598][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 180.849606][ T7738] Call Trace: [ 180.849611][ T7738] [ 180.849619][ T7738] dump_stack_lvl+0x16c/0x1f0 [ 180.849646][ T7738] should_fail_ex+0x512/0x640 [ 180.849662][ T7738] ? fs_reclaim_acquire+0xae/0x150 [ 180.849685][ T7738] should_failslab+0xc2/0x120 [ 180.849705][ T7738] __kmalloc_noprof+0xeb/0x910 [ 180.849721][ T7738] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849752][ T7738] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849771][ T7738] tomoyo_realpath_from_path+0xc2/0x6e0 [ 180.849793][ T7738] ? tomoyo_profile+0x47/0x60 [ 180.849807][ T7738] tomoyo_path_number_perm+0x245/0x580 [ 180.849823][ T7738] ? tomoyo_path_number_perm+0x237/0x580 [ 180.849841][ T7738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.849876][ T7738] ? find_held_lock+0x2b/0x80 [ 180.849893][ T7738] ? hook_file_ioctl_common+0x144/0x410 [ 180.849914][ T7738] ? __fget_files+0x20e/0x3c0 [ 180.849935][ T7738] security_file_ioctl+0x9b/0x240 [ 180.849953][ T7738] __x64_sys_ioctl+0xb7/0x210 [ 180.849971][ T7738] do_syscall_64+0xcd/0xf80 [ 180.849990][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.850005][ T7738] RIP: 0033:0x7f550978f7c9 [ 180.850017][ T7738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.850030][ T7738] RSP: 002b:00007f550a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.850043][ T7738] RAX: ffffffffffffffda RBX: 00007f55099e6180 RCX: 00007f550978f7c9 [ 180.850052][ T7738] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 180.850059][ T7738] RBP: 00007f5509813f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.850067][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.850074][ T7738] R13: 00007f55099e6218 R14: 00007f55099e6180 R15: 00007fffdc4a6198 [ 180.850092][ T7738] [ 180.850098][ T7738] ERROR: Out of memory at tomoyo_realpath_from_path. syzkaller syzkaller login: [ 181.385207][ T7755] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 182.922952][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 183.070602][ T30] audit: type=1804 audit(1768928709.760:3): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.409" name="/newroot/114/file0" dev="tmpfs" ino=602 res=1 errno=0 [ 183.116133][ T30] audit: type=1804 audit(1768928709.810:4): pid=7791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.409" name="/newroot/114/file0" dev="tmpfs" ino=602 res=1 errno=0 [ 183.704048][ T7804] __vm_enough_memory: pid: 7804, comm: syz.1.411, bytes: 4398046511104 not enough memory for the allocation [ 186.640634][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.650695][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.662469][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.670008][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.676942][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.684458][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.691208][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.698698][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.705985][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.713407][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.721969][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.730026][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.738361][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.745850][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.752693][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.760177][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.766923][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.774449][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.781164][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.788593][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.795307][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.802881][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.809648][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.817101][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.823983][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.833012][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.839770][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.847663][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.855516][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.862949][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.869845][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.877387][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.885900][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.893798][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.900726][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.908196][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.914973][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.925089][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.932837][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.940439][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.948155][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.956274][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.963159][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.970584][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.979227][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 186.986745][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 186.993536][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.001040][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.007863][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.015327][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.022660][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.030081][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.037623][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.046226][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.053122][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.060572][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.067335][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.074761][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.081484][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.088968][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.095690][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.103146][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.109946][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.117367][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.124232][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.131620][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.138941][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.146425][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.153192][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.160618][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.167604][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.175061][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.182044][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.189426][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.196152][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.203584][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.210227][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.217637][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.224428][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.231873][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.238925][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.246385][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.253061][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.260439][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.267250][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.274680][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.281432][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.288906][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.295582][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.311268][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.318026][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.325606][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.332482][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.340590][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.347402][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.354885][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.361993][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.369684][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.376641][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.387187][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.394752][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.402270][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.408927][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.416369][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.424834][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.432336][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.439271][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.447191][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.454324][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.461910][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.468611][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.476110][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.482989][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.490496][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.497195][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.504699][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.511437][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.518854][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.525645][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.533134][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.539780][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.547645][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.554655][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.562110][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.568763][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.576243][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.582953][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.590495][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 187.597297][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 187.604846][ T5845] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 189.687255][ T7887] __vm_enough_memory: pid: 7887, comm: syz.3.430, bytes: 4398046511104 not enough memory for the allocation [ 190.292965][ T7907] mmap: syz.0.438 (7907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.354418][ T30] audit: type=1800 audit(1768928717.074:5): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.438" name="version" dev="configfs" ino=18804 res=0 errno=0 [ 190.895552][ T7924] Invalid ELF header magic: != ELF [ 191.260003][ T7934] vivid-007: ================= START STATUS ================= [ 191.268639][ T7934] vivid-007: Generate PTS: true [ 191.273931][ T7934] vivid-007: Generate SCR: true [ 191.278994][ T7934] tpg source WxH: 320x240 (Y'CbCr) [ 191.292530][ T7934] tpg field: 1 [ 191.300131][ T7934] tpg crop: (0,0)/320x240 [ 191.331899][ T7934] tpg compose: (0,0)/320x240 [ 191.340624][ T7934] tpg colorspace: 8 [ 191.344563][ T7934] tpg transfer function: 0/0 [ 191.349237][ T7934] tpg Y'CbCr encoding: 0/0 [ 191.357632][ T7934] tpg quantization: 0/0 [ 191.361952][ T7934] tpg RGB range: 0/2 [ 191.367777][ T7941] Invalid ELF header magic: != ELF [ 191.373166][ T7934] vivid-007: ================== END STATUS ================== [ 191.558801][ T7921] FAULT_INJECTION: forcing a failure. [ 191.558801][ T7921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.571929][ T7921] CPU: 1 UID: 0 PID: 7921 Comm: syz.3.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.571969][ T7921] Tainted: [L]=SOFTLOCKUP [ 191.571976][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 191.571989][ T7921] Call Trace: [ 191.571996][ T7921] [ 191.572006][ T7921] dump_stack_lvl+0x16c/0x1f0 [ 191.572051][ T7921] should_fail_ex+0x512/0x640 [ 191.572086][ T7921] get_futex_key+0x1d0/0x15f0 [ 191.572116][ T7921] ? __pfx_get_futex_key+0x10/0x10 [ 191.572154][ T7921] futex_wake+0xea/0x530 [ 191.572183][ T7921] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.572209][ T7921] ? __pfx_futex_wake+0x10/0x10 [ 191.572236][ T7921] ? kmem_cache_free+0x2d8/0x770 [ 191.572263][ T7921] ? getname_flags.part.0+0x376/0x550 [ 191.572291][ T7921] ? getname_flags.part.0+0x376/0x550 [ 191.572312][ T7921] ? getname_flags.part.0+0x1c5/0x550 [ 191.572338][ T7921] do_futex+0x1e3/0x350 [ 191.572364][ T7921] ? __pfx_do_futex+0x10/0x10 [ 191.572395][ T7921] __x64_sys_futex+0x1e0/0x4c0 [ 191.572422][ T7921] ? __x64_sys_openat+0x174/0x210 [ 191.572447][ T7921] ? __pfx___x64_sys_futex+0x10/0x10 [ 191.572482][ T7921] do_syscall_64+0xcd/0xf80 [ 191.572506][ T7921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.572529][ T7921] RIP: 0033:0x7f2cf358f7c9 [ 191.572548][ T7921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.572571][ T7921] RSP: 002b:00007f2cf43d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.572592][ T7921] RAX: ffffffffffffffda RBX: 00007f2cf37e5fa8 RCX: 00007f2cf358f7c9 [ 191.572606][ T7921] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cf37e5fac [ 191.572619][ T7921] RBP: 00007f2cf37e5fa0 R08: 00007f2cf43d9000 R09: 0000000000000000 [ 191.572631][ T7921] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 191.572642][ T7921] R13: 00007f2cf37e6038 R14: 00007ffdc1cfd7b0 R15: 00007ffdc1cfd898 [ 191.572669][ T7921] [ 191.893057][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 193.124808][ T7968] random: crng reseeded on system resumption [ 195.104184][ T8002] openvswitch: netlink: IP tunnel TTL not specified. [ 195.184407][ T8001] openvswitch: netlink: IP tunnel TTL not specified. [ 195.662488][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 198.044538][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1c9c00: rx timeout, send abort [ 198.551530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b1c9c00: abort rx timeout. Force session deactivation [ 199.313164][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.325332][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.607399][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 199.973090][ T8094] FAULT_INJECTION: forcing a failure. [ 199.973090][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 200.055455][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.0.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.055497][ T8094] Tainted: [L]=SOFTLOCKUP [ 200.055505][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 200.055520][ T8094] Call Trace: [ 200.055528][ T8094] [ 200.055538][ T8094] dump_stack_lvl+0x16c/0x1f0 [ 200.055585][ T8094] should_fail_ex+0x512/0x640 [ 200.055613][ T8094] ? fs_reclaim_acquire+0xae/0x150 [ 200.055653][ T8094] should_failslab+0xc2/0x120 [ 200.055687][ T8094] kmem_cache_alloc_noprof+0x83/0x770 [ 200.055715][ T8094] ? __pfx_map_id_range_down+0x10/0x10 [ 200.055747][ T8094] ? security_inode_alloc+0x3b/0x2b0 [ 200.055781][ T8094] ? security_inode_alloc+0x3b/0x2b0 [ 200.055806][ T8094] security_inode_alloc+0x3b/0x2b0 [ 200.055835][ T8094] inode_init_always_gfp+0xced/0x1040 [ 200.055875][ T8094] alloc_inode+0x86/0x240 [ 200.055902][ T8094] sock_alloc+0x40/0x280 [ 200.055939][ T8094] __sock_create+0xc2/0x8a0 [ 200.055986][ T8094] __sys_socket+0x14d/0x260 [ 200.056011][ T8094] ? __x64_sys_openat+0x174/0x210 [ 200.056042][ T8094] ? __pfx___sys_socket+0x10/0x10 [ 200.056068][ T8094] ? xfd_validate_state+0x61/0x180 [ 200.056100][ T8094] __x64_sys_socket+0x72/0xb0 [ 200.056124][ T8094] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.056147][ T8094] do_syscall_64+0xcd/0xf80 [ 200.056173][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.056197][ T8094] RIP: 0033:0x7fe55438f7c9 [ 200.056217][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.056239][ T8094] RSP: 002b:00007fe5551bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 200.056261][ T8094] RAX: ffffffffffffffda RBX: 00007fe5545e5fa0 RCX: 00007fe55438f7c9 [ 200.056278][ T8094] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 200.056293][ T8094] RBP: 00007fe554413f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.056308][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.056322][ T8094] R13: 00007fe5545e6038 R14: 00007fe5545e5fa0 R15: 00007ffc0146f398 [ 200.056357][ T8094] [ 200.056416][ T8094] socket: no more sockets [ 206.366901][ T8212] FAULT_INJECTION: forcing a failure. [ 206.366901][ T8212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 206.401981][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.3.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.402023][ T8212] Tainted: [L]=SOFTLOCKUP [ 206.402031][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 206.402045][ T8212] Call Trace: [ 206.402053][ T8212] [ 206.402062][ T8212] dump_stack_lvl+0x16c/0x1f0 [ 206.402108][ T8212] should_fail_ex+0x512/0x640 [ 206.402148][ T8212] get_futex_key+0x1d0/0x15f0 [ 206.402180][ T8212] ? __pfx_get_futex_key+0x10/0x10 [ 206.402209][ T8212] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 206.402253][ T8212] futex_wait_setup+0x9d/0x570 [ 206.402296][ T8212] __futex_wait+0x193/0x2f0 [ 206.402329][ T8212] ? __pfx___futex_wait+0x10/0x10 [ 206.402364][ T8212] ? __pfx_futex_wake_mark+0x10/0x10 [ 206.402401][ T8212] ? find_held_lock+0x2b/0x80 [ 206.402448][ T8212] ? futex_private_hash_put+0x160/0x1b0 [ 206.402478][ T8212] futex_wait+0xe8/0x380 [ 206.402512][ T8212] ? __pfx_futex_wait+0x10/0x10 [ 206.402551][ T8212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.402584][ T8212] ? is_valid_madvise+0x34/0xd0 [ 206.402617][ T8212] do_futex+0x229/0x350 [ 206.402642][ T8212] ? __pfx_do_futex+0x10/0x10 [ 206.402669][ T8212] ? find_held_lock+0x2b/0x80 [ 206.402696][ T8212] __x64_sys_futex+0x1e0/0x4c0 [ 206.402729][ T8212] ? __pfx___x64_sys_futex+0x10/0x10 [ 206.402757][ T8212] ? xfd_validate_state+0x61/0x180 [ 206.402792][ T8212] do_syscall_64+0xcd/0xf80 [ 206.402818][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.402843][ T8212] RIP: 0033:0x7f2cf358f7c9 [ 206.402864][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.402887][ T8212] RSP: 002b:00007f2cf43d80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.402910][ T8212] RAX: ffffffffffffffda RBX: 00007f2cf37e5fa8 RCX: 00007f2cf358f7c9 [ 206.402927][ T8212] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2cf37e5fa8 [ 206.402943][ T8212] RBP: 00007f2cf37e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.402958][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.402972][ T8212] R13: 00007f2cf37e6038 R14: 00007ffdc1cfd7b0 R15: 00007ffdc1cfd898 [ 206.403007][ T8212] [ 206.675141][ T8231] binder: BINDER_SET_CONTEXT_MGR already set [ 206.682518][ T8231] binder: 8227:8231 ioctl 4018620d 9 returned -16 [ 211.068144][ T8283] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 211.068224][ T8283] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 211.273503][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 211.438818][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 211.581952][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 211.581975][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.582001][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.595341][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 212.613354][ T8316] futex_wake_op: syz.3.524 tries to shift op by -2048; fix this program [ 212.641164][ T8316] futex_wake_op: syz.3.524 tries to shift op by -2048; fix this program [ 212.666528][ T8317] 0x000000000001-0x000000020000 : "" [ 212.746703][ T8317] ftl_cs: FTL header corrupt! [ 213.484750][ T8327] zswap: compressor not available [ 213.547739][ T8335] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 213.627594][ T8335] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 213.697792][ T8335] CIFS mount error: No usable UNC path provided in device string! [ 213.697792][ T8335] [ 213.759031][ T8335] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.568139][ T8343] openvswitch: netlink: Message has 4 unknown bytes. [ 216.125011][ T8390] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 216.140043][ T8392] bridge0: port 3(bond0) entered blocking state [ 216.155703][ T8392] bridge0: port 3(bond0) entered disabled state [ 216.162172][ T8392] bond0: entered allmulticast mode [ 216.171604][ T8392] bond_slave_0: entered allmulticast mode [ 216.177686][ T8392] bond_slave_1: entered allmulticast mode [ 216.185986][ T8392] bond0: entered promiscuous mode [ 216.191133][ T8392] bond_slave_0: entered promiscuous mode [ 216.197172][ T8392] bond_slave_1: entered promiscuous mode [ 216.203979][ T8392] bridge0: port 3(bond0) entered blocking state [ 216.210519][ T8392] bridge0: port 3(bond0) entered forwarding state [ 219.075114][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 220.095580][ T8477] netlink: 'syz.2.561': attribute type 33 has an invalid length. [ 220.159162][ T8477] netlink: 322 bytes leftover after parsing attributes in process `syz.2.561'. [ 220.920255][ T8500] FAULT_INJECTION: forcing a failure. [ 220.920255][ T8500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 220.953440][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: syz.1.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.953483][ T8500] Tainted: [L]=SOFTLOCKUP [ 220.953493][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 220.953507][ T8500] Call Trace: [ 220.953516][ T8500] [ 220.953526][ T8500] dump_stack_lvl+0x16c/0x1f0 [ 220.953567][ T8500] should_fail_ex+0x512/0x640 [ 220.953598][ T8500] get_futex_key+0x1d0/0x15f0 [ 220.953623][ T8500] ? kasan_save_free_info+0x3b/0x60 [ 220.953647][ T8500] ? __kasan_slab_free+0x5f/0x80 [ 220.953677][ T8500] ? __pfx_get_futex_key+0x10/0x10 [ 220.953700][ T8500] ? __x64_sys_ioctl+0x18e/0x210 [ 220.953727][ T8500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.953765][ T8500] futex_wait_setup+0x9d/0x570 [ 220.953809][ T8500] __futex_wait+0x193/0x2f0 [ 220.953844][ T8500] ? __pfx___futex_wait+0x10/0x10 [ 220.953883][ T8500] ? __pfx_futex_wake_mark+0x10/0x10 [ 220.953932][ T8500] ? futex_hash+0x2c5/0x380 [ 220.953964][ T8500] ? futex_private_hash_put+0x160/0x1b0 [ 220.953995][ T8500] futex_wait+0xe8/0x380 [ 220.954029][ T8500] ? __pfx_futex_wait+0x10/0x10 [ 220.954085][ T8500] do_futex+0x229/0x350 [ 220.954115][ T8500] ? __pfx_do_futex+0x10/0x10 [ 220.954145][ T8500] ? find_held_lock+0x2b/0x80 [ 220.954189][ T8500] __x64_sys_futex+0x1e0/0x4c0 [ 220.954223][ T8500] ? __pfx_loop_control_ioctl+0x10/0x10 [ 220.954250][ T8500] ? __pfx___x64_sys_futex+0x10/0x10 [ 220.954285][ T8500] ? fput+0x70/0xf0 [ 220.954316][ T8500] do_syscall_64+0xcd/0xf80 [ 220.954342][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.954366][ T8500] RIP: 0033:0x7f550978f7c9 [ 220.954387][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.954411][ T8500] RSP: 002b:00007f550a6060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 220.954435][ T8500] RAX: ffffffffffffffda RBX: 00007f55099e6098 RCX: 00007f550978f7c9 [ 220.954451][ T8500] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f55099e6098 [ 220.954467][ T8500] RBP: 00007f55099e6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.954483][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.954497][ T8500] R13: 00007f55099e6128 R14: 00007fffdc4a60b0 R15: 00007fffdc4a6198 [ 220.954534][ T8500] [ 223.310752][ T8532] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.321749][ T8532] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 223.350525][ T8532] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 223.386124][ T8532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.397563][ T8532] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 223.424482][ T8532] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 223.462531][ T8532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.474119][ T8532] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.509202][ T8532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.521096][ T8532] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.550608][ T8532] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.757562][ T8548] usb usb15: usbfs: process 8548 (syz.3.578) did not claim interface 0 before use [ 223.790562][ T8548] FAULT_INJECTION: forcing a failure. [ 223.790562][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 223.832271][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.832312][ T8548] Tainted: [L]=SOFTLOCKUP [ 223.832319][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 223.832329][ T8548] Call Trace: [ 223.832336][ T8548] [ 223.832345][ T8548] dump_stack_lvl+0x16c/0x1f0 [ 223.832389][ T8548] should_fail_ex+0x512/0x640 [ 223.832416][ T8548] ? kmem_cache_alloc_noprof+0x62/0x770 [ 223.832450][ T8548] should_failslab+0xc2/0x120 [ 223.832487][ T8548] kmem_cache_alloc_noprof+0x83/0x770 [ 223.832515][ T8548] ? prepare_creds+0x2c/0x940 [ 223.832549][ T8548] ? prepare_creds+0x2c/0x940 [ 223.832573][ T8548] prepare_creds+0x2c/0x940 [ 223.832601][ T8548] __sys_setreuid+0x101/0xaf0 [ 223.832633][ T8548] ? rcu_is_watching+0x12/0xc0 [ 223.832669][ T8548] do_syscall_64+0xcd/0xf80 [ 223.832694][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.832719][ T8548] RIP: 0033:0x7f2cf358f7c9 [ 223.832739][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.832761][ T8548] RSP: 002b:00007f2cf43d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 223.832785][ T8548] RAX: ffffffffffffffda RBX: 00007f2cf37e5fa0 RCX: 00007f2cf358f7c9 [ 223.832802][ T8548] RDX: 0000000000000000 RSI: 7fffffffffffffff RDI: 0000000080000000 [ 223.832818][ T8548] RBP: 00007f2cf3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.832833][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.832870][ T8548] R13: 00007f2cf37e6038 R14: 00007f2cf37e5fa0 R15: 00007ffdc1cfd898 [ 223.832926][ T8548] [ 224.091948][ T8548] netlink: 'syz.3.578': attribute type 11 has an invalid length. [ 224.099999][ T8548] netlink: 'syz.3.578': attribute type 11 has an invalid length. [ 224.108068][ T8548] netlink: 'syz.3.578': attribute type 11 has an invalid length. [ 224.116659][ T8548] netlink: 'syz.3.578': attribute type 11 has an invalid length. [ 225.352679][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 225.436532][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 225.517601][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 225.524005][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 227.422837][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 227.502490][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 227.584518][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 227.590799][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 228.924725][ T8626] Console: switching to colour VGA+ 80x25 [ 229.101648][ T8629] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 229.493140][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 229.573991][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 229.663242][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 234.579080][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 234.686378][ T8738] [ 234.688726][ T8738] ====================================================== [ 234.695725][ T8738] WARNING: possible circular locking dependency detected [ 234.702819][ T8738] syzkaller #0 Tainted: G L [ 234.708780][ T8738] ------------------------------------------------------ [ 234.715787][ T8738] syz.0.612/8738 is trying to acquire lock: [ 234.721760][ T8738] ffff888023cd5828 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x19e/0x500 [ 234.732208][ T8738] [ 234.732208][ T8738] but task is already holding lock: [ 234.741308][ T8738] ffff888032333d08 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 234.751100][ T8738] [ 234.751100][ T8738] which lock already depends on the new lock. [ 234.751100][ T8738] [ 234.761952][ T8738] [ 234.761952][ T8738] the existing dependency chain (in reverse order) is: [ 234.771313][ T8738] [ 234.771313][ T8738] -> #2 (vm_lock){++++}-{0:0}: [ 234.778342][ T8738] __vma_enter_locked+0x260/0x770 [ 234.784054][ T8738] __vma_start_write+0x21/0x160 [ 234.789420][ T8738] mprotect_fixup+0x4e3/0xb80 [ 234.794694][ T8738] setup_arg_pages+0x4a2/0xbb0 [ 234.800010][ T8738] load_elf_binary+0xb5b/0x4fe0 [ 234.805390][ T8738] bprm_execve+0x8c2/0x1620 [ 234.810417][ T8738] kernel_execve+0x2ef/0x3b0 [ 234.815538][ T8738] kernel_init+0x14a/0x2b0 [ 234.820478][ T8738] ret_from_fork+0x983/0xb10 [ 234.825572][ T8738] ret_from_fork_asm+0x1a/0x30 [ 234.830943][ T8738] [ 234.830943][ T8738] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 234.838493][ T8738] __might_fault+0x113/0x190 [ 234.843605][ T8738] _copy_to_iter+0x1c2/0x1710 [ 234.848933][ T8738] copy_page_to_iter+0x12a/0x1e0 [ 234.854394][ T8738] filemap_read+0x6b1/0xe40 [ 234.859420][ T8738] blkdev_read_iter+0x1ac/0x500 [ 234.864801][ T8738] vfs_read+0x8bf/0xcf0 [ 234.869684][ T8738] ksys_read+0x12a/0x250 [ 234.874454][ T8738] do_syscall_64+0xcd/0xf80 [ 234.879471][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.885941][ T8738] [ 234.885941][ T8738] -> #0 (&sb->s_type->i_mutex_key#10){++++}-{4:4}: [ 234.894616][ T8738] __lock_acquire+0x1669/0x2890 [ 234.899990][ T8738] lock_acquire+0x179/0x330 [ 234.905120][ T8738] down_read+0x9b/0x460 [ 234.909795][ T8738] blkdev_read_iter+0x19e/0x500 [ 234.915177][ T8738] __kernel_read+0x3f3/0xbf0 [ 234.920277][ T8738] freader_fetch+0x1d7/0x9d0 [ 234.925374][ T8738] __build_id_parse.isra.0+0xdd/0x6c0 [ 234.931257][ T8738] do_procmap_query+0xb0e/0x1080 [ 234.936796][ T8738] procfs_procmap_ioctl+0x9d/0xe0 [ 234.942338][ T8738] __x64_sys_ioctl+0x18e/0x210 [ 234.947610][ T8738] do_syscall_64+0xcd/0xf80 [ 234.952626][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.959026][ T8738] [ 234.959026][ T8738] other info that might help us debug this: [ 234.959026][ T8738] [ 234.969232][ T8738] Chain exists of: [ 234.969232][ T8738] &sb->s_type->i_mutex_key#10 --> &mm->mmap_lock --> vm_lock [ 234.969232][ T8738] [ 234.982621][ T8738] Possible unsafe locking scenario: [ 234.982621][ T8738] [ 234.990059][ T8738] CPU0 CPU1 [ 234.995407][ T8738] ---- ---- [ 235.000848][ T8738] rlock(vm_lock); [ 235.004645][ T8738] lock(&mm->mmap_lock); [ 235.011504][ T8738] lock(vm_lock); [ 235.017729][ T8738] rlock(&sb->s_type->i_mutex_key#10); [ 235.023359][ T8738] [ 235.023359][ T8738] *** DEADLOCK *** [ 235.023359][ T8738] [ 235.031484][ T8738] 1 lock held by syz.0.612/8738: [ 235.036401][ T8738] #0: ffff888032333d08 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x10e/0xed0 [ 235.045193][ T8738] [ 235.045193][ T8738] stack backtrace: [ 235.051171][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.0.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.051193][ T8738] Tainted: [L]=SOFTLOCKUP [ 235.051197][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.051205][ T8738] Call Trace: [ 235.051212][ T8738] [ 235.051218][ T8738] dump_stack_lvl+0x116/0x1f0 [ 235.051243][ T8738] print_circular_bug+0x275/0x340 [ 235.051266][ T8738] check_noncircular+0x146/0x160 [ 235.051288][ T8738] __lock_acquire+0x1669/0x2890 [ 235.051303][ T8738] lock_acquire+0x179/0x330 [ 235.051314][ T8738] ? blkdev_read_iter+0x19e/0x500 [ 235.051333][ T8738] ? __pfx___might_resched+0x10/0x10 [ 235.051352][ T8738] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 235.051373][ T8738] down_read+0x9b/0x460 [ 235.051388][ T8738] ? blkdev_read_iter+0x19e/0x500 [ 235.051404][ T8738] ? register_lock_class+0x41/0x4b0 [ 235.051416][ T8738] ? __pfx_down_read+0x10/0x10 [ 235.051432][ T8738] blkdev_read_iter+0x19e/0x500 [ 235.051449][ T8738] __kernel_read+0x3f3/0xbf0 [ 235.051469][ T8738] ? __pfx___kernel_read+0x10/0x10 [ 235.051490][ T8738] ? __pfx_vma_start_read+0x10/0x10 [ 235.051505][ T8738] freader_fetch+0x1d7/0x9d0 [ 235.051523][ T8738] ? reacquire_held_locks+0xcd/0x1f0 [ 235.051535][ T8738] ? lock_next_vma+0x10e/0xed0 [ 235.051548][ T8738] ? __pfx_freader_fetch+0x10/0x10 [ 235.051566][ T8738] ? __asan_memset+0x23/0x50 [ 235.051583][ T8738] __build_id_parse.isra.0+0xdd/0x6c0 [ 235.051602][ T8738] ? query_matching_vma+0x48e/0x7d0 [ 235.051617][ T8738] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 235.051642][ T8738] do_procmap_query+0xb0e/0x1080 [ 235.051656][ T8738] ? __pfx_do_procmap_query+0x10/0x10 [ 235.051672][ T8738] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.051692][ T8738] ? do_vfs_ioctl+0x128/0x14f0 [ 235.051714][ T8738] ? __fget_files+0x20e/0x3c0 [ 235.051734][ T8738] procfs_procmap_ioctl+0x9d/0xe0 [ 235.051747][ T8738] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 235.051762][ T8738] __x64_sys_ioctl+0x18e/0x210 [ 235.051778][ T8738] do_syscall_64+0xcd/0xf80 [ 235.051790][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.051804][ T8738] RIP: 0033:0x7fe55438f7c9 [ 235.051816][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.051828][ T8738] RSP: 002b:00007fe555179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.051841][ T8738] RAX: ffffffffffffffda RBX: 00007fe5545e6180 RCX: 00007fe55438f7c9 [ 235.051865][ T8738] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000005 [ 235.051877][ T8738] RBP: 00007fe554413f91 R08: 0000000000000000 R09: 0000000000000000 [ 235.051885][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.051892][ T8738] R13: 00007fe5545e6218 R14: 00007fe5545e6180 R15: 00007ffc0146f398 [ 235.051904][ T8738] [ 235.900978][ T8562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium