last executing test programs: 7.584472602s ago: executing program 2 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002880), 0xffffffffffffffff) (async) r2 = socket(0x1e, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) (async) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x55d881, 0x0) (async) ioperm$auto(0x1, 0x1004, 0x7f) (async) iopl$auto(0x2) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) (async) fcntl$auto_F_GETPIPE_SZ(0xffffffffffffffff, 0x408, 0x47) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) getrandom$auto(0x0, 0x6002000, 0x3) r4 = getsockopt$auto_SO_PEERPIDFD(r0, 0x0, 0x4d, &(0x7f0000000000)='+\x00', &(0x7f0000000040)=0xeed) (async) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x401}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r6}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8812) (async) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) socket(0x2, 0x80002, 0x73) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f00000028c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01f927bd70000b154672123cc23dbe98983103000000"], 0x1c}}, 0x0) 7.386413994s ago: executing program 2 (id=72): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xe5, 0x0, 0x1, 0x4}, 0xea8) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.65943249s ago: executing program 1 (id=78): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (fail_nth: 21) mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 5.370816106s ago: executing program 0 (id=79): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/sit0/ioam6_id_wide\x00', 0x163802, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f0000000100)={[0x29, 0x7fff, 0x6, 0x0, 0xa00000000000000, 0x4, 0x6, 0x400000000004, 0x6, 0xc, 0x5, 0xef24, 0xfff, 0x5, 0x1, 0x4]}, 0x0) sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25018000000880021a03000009"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) 4.484633822s ago: executing program 1 (id=80): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf250f00000039063300afa6e0335f4a2c0c9b03ed037529ed1f8c19df0534c0c618363857d371dfe3575f074ed09281c32a0f2392027bee6d0506bdc9f52f16c9cddce2ee2bf411b5c37071c69297cbc252870e10ae089076ebd6ce5e42336573f7457224fb6e4d5cbc4b2847351ae8b9723b261b5876aa693b1f99786a8aff10d220aadda3c7f68a53903dbf2891b524fb9d9f1935f6873af22229e32a71276fac61cfbb99a0e9896735a111f46a73d9141b874444d253c3bcc98c2eddc451cb222af5ff8bdf0222e89524e44e1550d57f65061818b2e64ed23cbadd4cd35c4e675a6c76c93487649d5e120e876eef7d33bda62ec8ff4194ac957e81ef9aea0f96d44b4d7d28d0a90f3f3f1ab2302188a33eba4baeb8a36328ff04c2f77de5f5c1a202b358ced0d7ea41158c3745dc867e377ecadeccfcd5b8b519bef4dabe08dc5d923fb1a0bcfb63eb4c8e2143c4d2132e5e9c82712afab78723dc43d092eeb8a1bf619dd7d7c27b9785b953d4506d0d5207f3e8b76284b7749045ca2b5f062013c53f35be3e4489a1b8e3232314c86fbe18a58751f0b58219c53c1907daa47745badd8947431a66134913519262c65969aae0a78e040810ad130354b65c729754e9af226114904d39c5b24eaf02702067fdae7ae01c7fb58aa834b3d815caabb1761ba0d83cf8d53502a268b63fc3501fb67ded5c1b1482367ee4f5214303dc652abe046ce1abf20a3f49e1036026d77c132d332e98878ea17bd994e882becd6fc52d9fd91260ef25c204390f2c88c9e8cccd2d3f51bb9a93f0765f02dd8422bd3715b1205811f72ef91397fd5ab58f60cd10542ef3fa257e6cb0c311287b1af50dac0fb5614eaa5e67563c8efd9e89bb8fc2d7c6c4f64e95768bed149a69a345aadb64c89bb9e4bec361d74bef891543a5c8ba242c434b476bad123aece2a552ad43999907b425f4df57d3e4ca2c2b865568e619be2ef134718b47b6055a0bcc8ea64ff4ebc05339f5481e3c6fceadbd6f4126ccca4fb0e6b2303c4ec0d591cb45a076706a700ff34ad1c569fd11674bcbab1228132f1bfe192d138f25ec2520da501ed6e583492447734f69fa581e64a96f90582f9d757e391c0d33ce8250cc7c9e0d3651801cb285c9eee5bd0224d388dddf8527e49ca9030fd7955e93e3365f9602b4a4ef1aaca177e44e7f1142c8ec0015f2b505a775afe9ae820df18adaad4b3924d8033965991fe1e59acbbad440bc64b3198a4eae215fd32283be418b6ee791a89eaf386422aed1ca9a18a0220f88a7609d536ffd7db73c9654cbe7a7835668771f8f2f98d58cf1d60cff1004ee2fb4c394bf3b48d0232866d382ceeae8f340bddb3ac677edc560982312ac13bf765db179a235e47ec0747d428fe273fda500641154f168cad55351172f93a970ccf26626ec89d52f64d89f0d7456212854f35542794264126abf75567f56cf0081de22def6305d279b2aabdb91ac0813ccd0a4e87dd63b3188cc10a3eee94e7af67e2ab5070bc5e639a204af69b49aef29b61c7efd1a9f4b6bc51659aeb399b34cf21dc827259991979828515c776d86f06cf69ea710e6be91ec0ea9e46e9d08e07ad2ab67a4b43e2d0763a4673a8002df95761309b011b25a6effab4da60e599c27e263394328da81b0af4ebcd6d838c1a9ff729482681115b4964be42bb4b8d8855c71450e9c48999e195227f41eb0fde516123e1da39f0db125045c3e5dadbfba05b329cf3d02dbd9fa01c75856ee233ef96b5e61f845560c640758d3883bb7ca2da85c9c5c15dc0f4033bc8140ec0965f91a4be0692c0348a3cc38fbac8a0e6db18433aeb3f05921c5cf614be4754f76c9e3323026a646d89a7a894e1b493a999af49864886b6ed68ce635ba2eeff167e99ac5fa5696aca29f1517b47f460151ca4b9afb34cc5ffbeb037ece8de9d223d8a1124b6c0ce000928070c021dc17499c9313264903ccc5ba90f9b0eb3c1617cb53c8192a7e2d12c566c83ac35ee265bd5bafb2b3208af0cc938e8306a45b50ccd17ee5e59fbfcf30c09185c2d84db35e05190a3251c097c288d5bfd800f2fc5e60aaaaa7bb297e39e40dfc35da14b1ffa060ed3f02722f35e345e7ad453e6758b5ec8ef2ebd3a57413a1ea68df9684dc4dda5bdeaf81ec602fee0057dfa42fe9bcd7f571e906b31c4044c07070a0cdfab85594b18c54691b269a23e39fcbcb48eb4aab9b7950f145d87c750a5bd301ef6c1816aee61ac31b0000000800a500080000000600f7000e0900000800620007000000"], 0x668}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_register$auto(r1, 0x80000000, 0x0, 0x76a7ceb) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) userfaultfd$auto(0x1) socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) ustat$auto(0x200, &(0x7f00000009c0)={0x1, 0x2, "a6265ce976ae", "7089c54e162a"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x406040, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000240)={r2, 0x0, 0xd7, 0x6, 0x401, 0x0, [0x7, 0x2, 0x9, 0x2b, 0x9, 0x10]}) 4.412802276s ago: executing program 3 (id=81): openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001600), 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_TIMESTAMP_OLD(r1, 0x800, 0x1d, &(0x7f0000000040)='-{\x93(\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) gettid() r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x10001) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) creat$auto(&(0x7f0000000040)='./file0\x00', 0x8) writev$auto(r1, &(0x7f0000000100)={0x0, 0x202000000000007}, 0x1000800016) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000000c0), r3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x304) 3.577765717s ago: executing program 0 (id=82): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socket(0x10, 0x2, 0xc) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) socket(0x25, 0x3, 0x6) socket(0x10, 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x3, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6, r1}, 0x1000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 3.232482238s ago: executing program 3 (id=83): mmap$auto(0x3, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) getsockopt$auto(0x6, 0x11b, 0x8, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000100)='/dev/dri/card1\x00', &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x2) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x9, 0x2}, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigaction$auto(0x1, 0x0, 0x0, 0x8) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) rt_sigaction$auto(0x4, &(0x7f0000000340)={0x0, 0x9342, 0x0, {0x3}}, 0x0, 0x8) epoll_ctl$auto_EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0xffffc00000000001) r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/trap_flow_action_cookie\x00', 0x400900, 0x0) close_range$auto(r1, r1, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x0, 0x84) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @loopback}, 0x6e) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) ioctl$auto(r2, 0x961064a0, 0x600000000200007) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) 3.232260213s ago: executing program 1 (id=84): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x58043, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fccbdf25030000000400080008000380040011806ae5dfc7fcd0f03b60052e7b859082884700000400028000"/62], 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrusage$auto(0x1, &(0x7f0000000080)={{0x3, 0x6}, {0x9, 0xe}, 0x2, 0x800000101, 0x8000000000000001, 0x5, 0x1000e, 0x7, 0x3, 0x8000000000000001, 0x6, 0x2, 0x6, 0x0, 0x7, 0x2}) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x40087101, 0x0) readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r3, &(0x7f0000000080)="33109fb4fd08230600"/18, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) 3.071244748s ago: executing program 2 (id=85): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x4, 0x1007) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.849161674s ago: executing program 0 (id=86): mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x7, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 2.492485055s ago: executing program 2 (id=87): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="06000000", @ANYRES16=r0, @ANYBLOB="010031bd7000fddbdf250c0000001400038010000380490005805647f8223100000018000180140002006e657464754874d16d30000000000000"], 0x40}}, 0x24048084) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pci0000:00/0000:00:02.0/dma_mask_bits\x00', 0x474201, 0x0) (async) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub5/status\x00', 0xf00, 0x0) (async) socket(0x18, 0xa, 0x1) (async) r3 = socket(0xa, 0x2, 0x0) connect$auto(r3, &(0x7f0000000080)=@generic={0x26, "648ce29dfcf4e31ef1c0356ec089"}, 0xfffffbff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRESDEC=r2, @ANYBLOB="958a309c8ad0e1de3adc9f8d7f524ca5ae057464a7c803858460a93ed3af52ff041c3265f43fce96be30414a36739d88115a7230089f4b11faf46175c60de7ec133eaa7e564c94fc25f393b937dc2394379c56ec801f252e1699c01d55341f4a2ef9eec71e20"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0xffffffffffffffff, 0x1) (async) socket(0xa, 0x3, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r7, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000003c0)="51c75d2313871baf7d4ed635b813a0416541bb754b2d640de1ff85785cfb948c72b30b42a8a0c7123dce65943be36e10e93f4f4856764a63341b2af93f76621b3dbc03aa1411a103884c761f04ca184944c198ff9275f4264d08ed67dcc6f00c9f10", 0xfff}, 0x80) (async) io_uring_setup$auto(0x6, &(0x7f0000000340)={0x5, 0x4, 0x3, 0x1, 0x7e, 0xffff, r8, [0x8, 0x2, 0x9], {0xae56, 0x2, 0xffffffff, 0x5, 0x6, 0x7ff, 0x9, 0xfffff6d9, 0xfffffffffffffffc}, {0x7, 0x64, 0x7, 0x4ed9, 0x6, 0x813, 0xffff, 0x8}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) 2.275565089s ago: executing program 0 (id=88): r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x400400, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000380)={0xfffffffc, r0}) mmap$auto(0xffffffffffffffff, 0x2, 0x4000000000d7, 0xebd, r0, 0x10000008010) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0c\x00', 0xeca1bfbe7e821904, 0x0) sendmmsg$auto(r2, &(0x7f0000000340)={{&(0x7f0000000100)="8b7f06530c6430060a253f45f98d2492793f378b00ee39f397b4691f52fd4a6259fe0aef20ada9929725e478c8b635285a82430515184a543be7b9777c17f7fbdcf279869f9625d6f5ac996609db46895aa5af8c9489e676c295292d48d2b2e38c4724bae47bb20b0ba306d327599544a746d3920dc9e88a0d4028f08a6a55ee4dc16fe37880dbd39cd56f8126f55ebb0e5d87a124ec0db440ea16", 0x6, &(0x7f0000000280)={&(0x7f0000000200)="b61bd095548576efaa3ab7fce7d583172d3250d5f92755a4ddbf8d66724707a912dddd76b5e9f7628ea5df609569dd9d6442de0d809660a3901012aa7c29a43547979cafb78d20370a89d8046d7a29bafd3e", 0x8}, 0xb, &(0x7f00000002c0)="74592ddc6625d4d1a29c95f9607c0259d04d3988f7bb55963f051c1f2fdafc616d4336e4690046a6d23d9349b9f48107c43a5e836af76a2ad8b300e0e87b4f9e026be9fdcf46cc049f6f6e2e57ec79865e7bce00a54b1f64", 0xfffffffffffffff7, 0x8}, 0x5}, 0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) setresuid$auto(0xee01, 0x1000, 0x607) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FIFREEZE(r4, 0xc0045878, 0x5595) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) r9 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r9, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r10, 0x0, 0x7ff) 1.90567223s ago: executing program 3 (id=89): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$auto(r0, 0x5101, 0x3) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop12/queue/wbt_lat_usec\x00', 0x102, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r3 = open(0x0, 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0x11, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pim6reg1\x00'}) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r3, 0x0) mmap$auto(0x0, 0xa, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) r4 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) close_range$auto(0x2, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) capget$auto(&(0x7f0000000040)={0x1, 0xffffffffffffffff}, &(0x7f00000000c0)={0x5, 0x56c79251, 0x5}) ptrace$auto(0x1, r6, 0x4, 0x40) write$auto(r4, 0x0, 0x1) sendfile$auto(r1, r1, 0x0, 0x3) 1.772546216s ago: executing program 0 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) fcntl$auto_F_UNLCK(r0, 0x8, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) 1.550395399s ago: executing program 2 (id=91): socket(0x2, 0x1, 0x106) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) setfsuid$auto(0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4b, r0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 1.399905707s ago: executing program 3 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0xd3bed26fbb0d8463, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x300}, [@SMC_PNETID_ETHNAME={0xb, 0x2, 'yz_tun\x00'}, @SMC_PNETID_NAME={0xc, 0x1, 'ethtool\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) 1.192413528s ago: executing program 2 (id=93): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xe5, 0x0, 0x1, 0x4}, 0xea8) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1.101158285s ago: executing program 1 (id=94): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000) connect$auto(0x3, 0x0, 0x54) madvise$auto_MADV_GUARD_INSTALL(0x9, 0x3, 0x66) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 575.759313ms ago: executing program 3 (id=95): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev4\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc0905664, r0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r1 = socket(0x23, 0x80805, 0x0) ioctl$auto(r1, 0x89ef, 0xffffffffffffffff) r2 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r2, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 432.601249ms ago: executing program 1 (id=96): mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) 207.483862ms ago: executing program 0 (id=97): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (fail_nth: 16) 105.26077ms ago: executing program 3 (id=98): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), r1) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r4 = io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x2, 0x88) r6 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_prog_fd=r3}, 0xa3) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r6, @new_prog_fd=r7, 0x1, @old_prog_fd=r4}, 0x9) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0xd3bed26fbb0d8463, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x300}, [@SMC_PNETID_ETHNAME={0xc, 0x2, 'syz_tun\x00'}, @SMC_PNETID_NAME={0xc, 0x1, 'ethtool\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) 0s ago: executing program 1 (id=99): adjtimex$auto(&(0x7f0000000000)={0x40, 0x0, 0x2, 0x8, 0x1ff, 0x8, 0xfffffffe, 0x0, 0x2, 0x3, 0x5, {0x6, 0x4}, 0x4, 0x4, 0x4, 0x3, 0x0, 0x6, 0x1, 0x880, 0x6, 0x585c, 0xb6}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) keyctl$auto_KEYCTL_SETPERM(0x5, 0x2, 0x1, 0x401, 0xf07c) sendfile$auto(r0, r0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 98.182500][ T5834] cgroup: Unknown subsys name 'net' [ 98.295493][ T5834] cgroup: Unknown subsys name 'cpuset' [ 98.305069][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.131009][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.245879][ T55] cfg80211: failed to load regulatory.db [ 102.310769][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.322061][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.340844][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.349179][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.357139][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.397899][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.406407][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.415062][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.424249][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.450360][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.475357][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.488296][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.498736][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.510902][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.519054][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.528570][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.588384][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.600680][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.609084][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.617091][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.896638][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 103.118064][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.127115][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.134969][ T5849] bridge_slave_0: entered allmulticast mode [ 103.143342][ T5849] bridge_slave_0: entered promiscuous mode [ 103.155218][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.162700][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.169953][ T5849] bridge_slave_1: entered allmulticast mode [ 103.177647][ T5849] bridge_slave_1: entered promiscuous mode [ 103.292343][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 103.350711][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.385766][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.464198][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 103.496643][ T5849] team0: Port device team_slave_0 added [ 103.505659][ T5849] team0: Port device team_slave_1 added [ 103.542017][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 103.610823][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.617836][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.644417][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.686732][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.694627][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.702095][ T5853] bridge_slave_0: entered allmulticast mode [ 103.709533][ T5853] bridge_slave_0: entered promiscuous mode [ 103.718131][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.725416][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.751796][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.791106][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.798263][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.805834][ T5853] bridge_slave_1: entered allmulticast mode [ 103.814628][ T5853] bridge_slave_1: entered promiscuous mode [ 103.910184][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.939877][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.947233][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.954747][ T5858] bridge_slave_0: entered allmulticast mode [ 103.963152][ T5858] bridge_slave_0: entered promiscuous mode [ 103.973048][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.013533][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.020918][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.028079][ T5858] bridge_slave_1: entered allmulticast mode [ 104.035932][ T5858] bridge_slave_1: entered promiscuous mode [ 104.076855][ T5849] hsr_slave_0: entered promiscuous mode [ 104.083663][ T5849] hsr_slave_1: entered promiscuous mode [ 104.138872][ T5853] team0: Port device team_slave_0 added [ 104.145072][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.152379][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.159634][ T5855] bridge_slave_0: entered allmulticast mode [ 104.167131][ T5855] bridge_slave_0: entered promiscuous mode [ 104.178538][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.192449][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.204810][ T5853] team0: Port device team_slave_1 added [ 104.211148][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.218411][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.226252][ T5855] bridge_slave_1: entered allmulticast mode [ 104.234307][ T5855] bridge_slave_1: entered promiscuous mode [ 104.360371][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.367717][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.393907][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.408581][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.418119][ T5852] Bluetooth: hci0: command tx timeout [ 104.440935][ T5858] team0: Port device team_slave_0 added [ 104.447707][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.455008][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.481340][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.491974][ T5852] Bluetooth: hci1: command tx timeout [ 104.506508][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.525303][ T5858] team0: Port device team_slave_1 added [ 104.599035][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.606431][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.633347][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.640815][ T5852] Bluetooth: hci3: command tx timeout [ 104.647630][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.649750][ T5861] Bluetooth: hci2: command tx timeout [ 104.657073][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.688969][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.753488][ T5855] team0: Port device team_slave_0 added [ 104.789342][ T5853] hsr_slave_0: entered promiscuous mode [ 104.796520][ T5853] hsr_slave_1: entered promiscuous mode [ 104.803138][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.811739][ T5853] Cannot create hsr debugfs directory [ 104.819439][ T5855] team0: Port device team_slave_1 added [ 104.934219][ T5858] hsr_slave_0: entered promiscuous mode [ 104.941605][ T5858] hsr_slave_1: entered promiscuous mode [ 104.947913][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.955611][ T5858] Cannot create hsr debugfs directory [ 104.969830][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.977233][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.003598][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.016593][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.024494][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.055328][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.215988][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.257099][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.275127][ T5855] hsr_slave_0: entered promiscuous mode [ 105.282302][ T5855] hsr_slave_1: entered promiscuous mode [ 105.288477][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.296468][ T5855] Cannot create hsr debugfs directory [ 105.322977][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.376635][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.676927][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.692628][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.707019][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.733952][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.818121][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.828842][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.860634][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.873610][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.976746][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.984175][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.998192][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.020398][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.031398][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.106707][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.158534][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.165996][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.199304][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.218756][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.225951][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.271807][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.318751][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.325927][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.357788][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.365012][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.380357][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.407840][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.440338][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.457180][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.480890][ T5861] Bluetooth: hci0: command tx timeout [ 106.493419][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.500753][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.512584][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.519708][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.561276][ T5861] Bluetooth: hci1: command tx timeout [ 106.577200][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.659398][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.708124][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.715355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.731259][ T5852] Bluetooth: hci3: command tx timeout [ 106.736816][ T5861] Bluetooth: hci2: command tx timeout [ 106.765562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.772815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.003341][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.154520][ T5849] veth0_vlan: entered promiscuous mode [ 107.189538][ T5849] veth1_vlan: entered promiscuous mode [ 107.268622][ T5849] veth0_macvtap: entered promiscuous mode [ 107.299602][ T5849] veth1_macvtap: entered promiscuous mode [ 107.355743][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.397468][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.435715][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.448309][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.457716][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.475624][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.536000][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.558257][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.605951][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.689599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.704841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.775900][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.786791][ T5858] veth0_vlan: entered promiscuous mode [ 107.793786][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.832819][ T5853] veth0_vlan: entered promiscuous mode [ 107.870811][ T5858] veth1_vlan: entered promiscuous mode [ 107.894350][ T5853] veth1_vlan: entered promiscuous mode [ 107.908721][ T5855] veth0_vlan: entered promiscuous mode [ 107.936985][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.952501][ T5853] veth0_macvtap: entered promiscuous mode [ 107.989493][ T5855] veth1_vlan: entered promiscuous mode [ 108.014748][ T5853] veth1_macvtap: entered promiscuous mode [ 108.115246][ T5858] veth0_macvtap: entered promiscuous mode [ 108.135498][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.148669][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.170434][ T5858] veth1_macvtap: entered promiscuous mode [ 108.195335][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.204415][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.213542][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.223191][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.307218][ T5855] veth0_macvtap: entered promiscuous mode [ 108.326937][ T5855] veth1_macvtap: entered promiscuous mode [ 108.337820][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.386392][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.431316][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.440180][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.449212][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.458376][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.479016][ T5935] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 108.482849][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.497092][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.507942][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.549875][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.562595][ T5861] Bluetooth: hci0: command tx timeout [ 108.604252][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.630566][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.639365][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.652188][ T5861] Bluetooth: hci1: command tx timeout [ 108.663680][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.715578][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.735911][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.743524][ T5937] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 108.801341][ T5861] Bluetooth: hci2: command tx timeout [ 108.805813][ T5852] Bluetooth: hci3: command tx timeout [ 109.005254][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.034907][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.126449][ T5852] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 109.153933][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.176698][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.191943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.298097][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.321187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.337947][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.358797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.531071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.539449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.548466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.749265][ T5941] netlink: 330 bytes leftover after parsing attributes in process `syz.0.7'. [ 109.906984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.233334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.334727][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.641103][ T5852] Bluetooth: hci0: command tx timeout [ 110.726267][ T5852] Bluetooth: hci1: command tx timeout [ 110.831098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.833790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.836290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.882052][ T5852] Bluetooth: hci3: command tx timeout [ 110.898604][ T5956] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.898639][ T5852] Bluetooth: hci2: command tx timeout [ 110.901229][ T5956] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.156619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.643987][ T5983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.799113][ T5986] FAULT_INJECTION: forcing a failure. [ 112.799113][ T5986] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.847963][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.1.12 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 112.848002][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.848022][ T5986] Call Trace: [ 112.848031][ T5986] [ 112.848044][ T5986] dump_stack_lvl+0x16c/0x1f0 [ 112.848083][ T5986] should_fail_ex+0x512/0x640 [ 112.848119][ T5986] _copy_to_user+0x32/0xd0 [ 112.848157][ T5986] simple_read_from_buffer+0xcb/0x170 [ 112.848209][ T5986] proc_fail_nth_read+0x197/0x270 [ 112.848250][ T5986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.848294][ T5986] ? rw_verify_area+0xcf/0x680 [ 112.848341][ T5986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.848385][ T5986] vfs_read+0x1e4/0xc60 [ 112.848420][ T5986] ? __pfx___mutex_lock+0x10/0x10 [ 112.848453][ T5986] ? __pfx_vfs_read+0x10/0x10 [ 112.848494][ T5986] ? __fget_files+0x20e/0x3c0 [ 112.848554][ T5986] ksys_read+0x12a/0x250 [ 112.848592][ T5986] ? __pfx_ksys_read+0x10/0x10 [ 112.848626][ T5986] do_syscall_64+0xcd/0x490 [ 112.848655][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.848683][ T5986] RIP: 0033:0x7f0a5c98d3bc [ 112.848710][ T5986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.848737][ T5986] RSP: 002b:00007f0a5a7d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.848764][ T5986] RAX: ffffffffffffffda RBX: 00007f0a5cbb6080 RCX: 00007f0a5c98d3bc [ 112.848782][ T5986] RDX: 000000000000000f RSI: 00007f0a5a7d50a0 RDI: 0000000000000006 [ 112.848797][ T5986] RBP: 00007f0a5a7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 112.848825][ T5986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.848841][ T5986] R13: 0000000000000000 R14: 00007f0a5cbb6080 R15: 00007ffc4016f3e8 [ 112.848895][ T5986] [ 113.239736][ T5997] FAULT_INJECTION: forcing a failure. [ 113.239736][ T5997] name failslab, interval 1, probability 0, space 0, times 1 [ 113.253564][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: syz.3.15 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 113.253603][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.253621][ T5997] Call Trace: [ 113.253631][ T5997] [ 113.253654][ T5997] dump_stack_lvl+0x16c/0x1f0 [ 113.253691][ T5997] should_fail_ex+0x512/0x640 [ 113.253730][ T5997] should_failslab+0xc2/0x120 [ 113.253769][ T5997] __kmalloc_cache_noprof+0x6a/0x3e0 [ 113.253820][ T5997] ? __sctp_v6_cmp_addr+0x206/0x530 [ 113.253858][ T5997] ? sctp_add_bind_addr+0xae/0x3f0 [ 113.253894][ T5997] sctp_add_bind_addr+0xae/0x3f0 [ 113.253931][ T5997] sctp_copy_local_addr_list+0x39d/0x5a0 [ 113.253977][ T5997] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 113.254023][ T5997] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 113.254072][ T5997] ? sctp_bind_addr_copy+0xe0/0x530 [ 113.254104][ T5997] sctp_bind_addr_copy+0xe0/0x530 [ 113.254146][ T5997] sctp_connect_new_asoc+0x1d7/0x790 [ 113.254195][ T5997] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 113.254243][ T5997] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 113.254297][ T5997] __sctp_connect+0x3f3/0xc60 [ 113.254347][ T5997] ? do_raw_spin_lock+0x12c/0x2b0 [ 113.254401][ T5997] ? __pfx___sctp_connect+0x10/0x10 [ 113.254451][ T5997] ? __pfx_sctp_inet_connect+0x10/0x10 [ 113.254499][ T5997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 113.254552][ T5997] ? __pfx_sctp_inet_connect+0x10/0x10 [ 113.254596][ T5997] sctp_inet_connect+0x15f/0x200 [ 113.254650][ T5997] __sys_connect_file+0x13e/0x1a0 [ 113.254706][ T5997] __sys_connect+0x13b/0x160 [ 113.254756][ T5997] ? __pfx___sys_connect+0x10/0x10 [ 113.254822][ T5997] ? __pfx_ksys_write+0x10/0x10 [ 113.254862][ T5997] __x64_sys_connect+0x72/0xb0 [ 113.254910][ T5997] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.254939][ T5997] do_syscall_64+0xcd/0x490 [ 113.254975][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.255008][ T5997] RIP: 0033:0x7fc35e58e9a9 [ 113.255032][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.255060][ T5997] RSP: 002b:00007fc35f425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 113.255088][ T5997] RAX: ffffffffffffffda RBX: 00007fc35e7b5fa0 RCX: 00007fc35e58e9a9 [ 113.255108][ T5997] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 113.255125][ T5997] RBP: 00007fc35f425090 R08: 0000000000000000 R09: 0000000000000000 [ 113.255143][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.255160][ T5997] R13: 0000000000000000 R14: 00007fc35e7b5fa0 R15: 00007ffcb55ab208 [ 113.255200][ T5997] [ 113.909594][ T6003] FAULT_INJECTION: forcing a failure. [ 113.909594][ T6003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.947834][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.3.18 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 113.947877][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.947895][ T6003] Call Trace: [ 113.947905][ T6003] [ 113.947917][ T6003] dump_stack_lvl+0x16c/0x1f0 [ 113.947955][ T6003] should_fail_ex+0x512/0x640 [ 113.947992][ T6003] _copy_from_user+0x2e/0xd0 [ 113.948030][ T6003] copy_msghdr_from_user+0x98/0x160 [ 113.948065][ T6003] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 113.948105][ T6003] ? kfree+0x24f/0x4d0 [ 113.948152][ T6003] ? __lock_acquire+0x622/0x1c90 [ 113.948204][ T6003] ___sys_recvmsg+0xdb/0x1a0 [ 113.948238][ T6003] ? __pfx____sys_recvmsg+0x10/0x10 [ 113.948295][ T6003] ? __pfx___might_resched+0x10/0x10 [ 113.948339][ T6003] do_recvmmsg+0x2fe/0x750 [ 113.948379][ T6003] ? __pfx_do_recvmmsg+0x10/0x10 [ 113.948423][ T6003] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 113.948472][ T6003] ? __fget_files+0x20e/0x3c0 [ 113.948534][ T6003] __x64_sys_recvmmsg+0x22a/0x280 [ 113.948573][ T6003] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 113.948623][ T6003] do_syscall_64+0xcd/0x490 [ 113.948672][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.948702][ T6003] RIP: 0033:0x7fc35e58e9a9 [ 113.948726][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.948754][ T6003] RSP: 002b:00007fc35f425038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 113.948789][ T6003] RAX: ffffffffffffffda RBX: 00007fc35e7b5fa0 RCX: 00007fc35e58e9a9 [ 113.948807][ T6003] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.948822][ T6003] RBP: 00007fc35f425090 R08: 0000000000000000 R09: 0000000000000000 [ 113.948838][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.948854][ T6003] R13: 0000000000000000 R14: 00007fc35e7b5fa0 R15: 00007ffcb55ab208 [ 113.948891][ T6003] [ 114.436267][ T6016] svc: failed to register nfsdv3 RPC service (errno 111). [ 114.440989][ T6016] svc: failed to register nfsaclv3 RPC service (errno 111). [ 114.506138][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.522039][ T6031] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 116.042963][ T6039] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 116.373907][ T6048] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 116.723526][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.033314][ T6070] svc: failed to register nfsdv3 RPC service (errno 111). [ 118.117678][ T6070] svc: failed to register nfsaclv3 RPC service (errno 111). [ 119.055111][ T6093] netlink: 'syz.2.38': attribute type 35 has an invalid length. [ 119.109968][ T6093] Zero length message leads to an empty skb [ 120.317626][ T6122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 120.565500][ T6127] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 121.450157][ T6136] svc: failed to register nfsdv3 RPC service (errno 111). [ 121.458675][ T6136] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.763886][ T6142] FAULT_INJECTION: forcing a failure. [ 121.763886][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 121.820171][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.2.51 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 121.820213][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.820230][ T6142] Call Trace: [ 121.820240][ T6142] [ 121.820253][ T6142] dump_stack_lvl+0x16c/0x1f0 [ 121.820296][ T6142] should_fail_ex+0x512/0x640 [ 121.820336][ T6142] should_failslab+0xc2/0x120 [ 121.820374][ T6142] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.820423][ T6142] ? sctp_add_bind_addr+0xae/0x3f0 [ 121.820460][ T6142] sctp_add_bind_addr+0xae/0x3f0 [ 121.820498][ T6142] sctp_copy_local_addr_list+0x39d/0x5a0 [ 121.820543][ T6142] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 121.820588][ T6142] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 121.820635][ T6142] ? sctp_bind_addr_copy+0xe0/0x530 [ 121.820666][ T6142] sctp_bind_addr_copy+0xe0/0x530 [ 121.820706][ T6142] sctp_connect_new_asoc+0x1d7/0x790 [ 121.820755][ T6142] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 121.820802][ T6142] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 121.820856][ T6142] __sctp_connect+0x3f3/0xc60 [ 121.820905][ T6142] ? do_raw_spin_lock+0x12c/0x2b0 [ 121.820958][ T6142] ? __pfx___sctp_connect+0x10/0x10 [ 121.821005][ T6142] ? __pfx_sctp_inet_connect+0x10/0x10 [ 121.821052][ T6142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.821104][ T6142] ? __pfx_sctp_inet_connect+0x10/0x10 [ 121.821145][ T6142] sctp_inet_connect+0x15f/0x200 [ 121.821192][ T6142] __sys_connect_file+0x13e/0x1a0 [ 121.821246][ T6142] __sys_connect+0x13b/0x160 [ 121.821303][ T6142] ? __pfx___sys_connect+0x10/0x10 [ 121.821369][ T6142] ? __pfx_ksys_write+0x10/0x10 [ 121.821409][ T6142] __x64_sys_connect+0x72/0xb0 [ 121.821456][ T6142] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.821485][ T6142] do_syscall_64+0xcd/0x490 [ 121.821522][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.821553][ T6142] RIP: 0033:0x7f2da878e9a9 [ 121.821578][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.821605][ T6142] RSP: 002b:00007f2da96a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 121.821633][ T6142] RAX: ffffffffffffffda RBX: 00007f2da89b5fa0 RCX: 00007f2da878e9a9 [ 121.821652][ T6142] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 121.821669][ T6142] RBP: 00007f2da96a3090 R08: 0000000000000000 R09: 0000000000000000 [ 121.821686][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.821702][ T6142] R13: 0000000000000000 R14: 00007f2da89b5fa0 R15: 00007ffc8538ea78 [ 121.821741][ T6142] [ 123.202402][ T6146] FAULT_INJECTION: forcing a failure. [ 123.202402][ T6146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.254425][ T6146] CPU: 1 UID: 0 PID: 6146 Comm: syz.2.52 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 123.254470][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.254487][ T6146] Call Trace: [ 123.254497][ T6146] [ 123.254509][ T6146] dump_stack_lvl+0x16c/0x1f0 [ 123.254546][ T6146] should_fail_ex+0x512/0x640 [ 123.254583][ T6146] _copy_from_user+0x2e/0xd0 [ 123.254619][ T6146] copy_msghdr_from_user+0x98/0x160 [ 123.254653][ T6146] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.254704][ T6146] ? kfree+0x24f/0x4d0 [ 123.254765][ T6146] ? __lock_acquire+0x622/0x1c90 [ 123.254817][ T6146] ___sys_recvmsg+0xdb/0x1a0 [ 123.254851][ T6146] ? __pfx____sys_recvmsg+0x10/0x10 [ 123.254906][ T6146] ? __pfx___might_resched+0x10/0x10 [ 123.254959][ T6146] do_recvmmsg+0x2fe/0x750 [ 123.254995][ T6146] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.255055][ T6146] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 123.255102][ T6146] ? __fget_files+0x20e/0x3c0 [ 123.255169][ T6146] __x64_sys_recvmmsg+0x22a/0x280 [ 123.255207][ T6146] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.255255][ T6146] do_syscall_64+0xcd/0x490 [ 123.255291][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.255322][ T6146] RIP: 0033:0x7f2da878e9a9 [ 123.255345][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.255374][ T6146] RSP: 002b:00007f2da96a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.255402][ T6146] RAX: ffffffffffffffda RBX: 00007f2da89b5fa0 RCX: 00007f2da878e9a9 [ 123.255422][ T6146] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.255440][ T6146] RBP: 00007f2da96a3090 R08: 0000000000000000 R09: 0000000000000000 [ 123.255458][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.255476][ T6146] R13: 0000000000000000 R14: 00007f2da89b5fa0 R15: 00007ffc8538ea78 [ 123.255516][ T6146] [ 124.314151][ T6154] FAULT_INJECTION: forcing a failure. [ 124.314151][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 124.380715][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz.3.56 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 124.380757][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.380775][ T6154] Call Trace: [ 124.380784][ T6154] [ 124.380794][ T6154] dump_stack_lvl+0x16c/0x1f0 [ 124.380830][ T6154] should_fail_ex+0x512/0x640 [ 124.380890][ T6154] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 124.380924][ T6154] should_failslab+0xc2/0x120 [ 124.380962][ T6154] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 124.380996][ T6154] ? __alloc_skb+0x2b2/0x380 [ 124.381035][ T6154] __alloc_skb+0x2b2/0x380 [ 124.381066][ T6154] ? __pfx___alloc_skb+0x10/0x10 [ 124.381104][ T6154] ? find_held_lock+0x2b/0x80 [ 124.381145][ T6154] sctp_packet_transmit+0x1ca/0x3040 [ 124.381199][ T6154] ? __sctp_packet_append_chunk+0x489/0xd60 [ 124.381278][ T6154] ? sctp_packet_append_chunk+0xe33/0x1160 [ 124.381324][ T6154] ? sctp_packet_config+0x761/0xf40 [ 124.381380][ T6154] sctp_packet_singleton+0x19e/0x370 [ 124.381427][ T6154] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 124.381486][ T6154] ? sctp_outq_select_transport+0x208/0x740 [ 124.381540][ T6154] sctp_outq_flush+0x53d/0x3350 [ 124.381584][ T6154] ? _raw_spin_unlock_irq+0x21/0x50 [ 124.381643][ T6154] ? __pfx_sctp_outq_flush+0x10/0x10 [ 124.381693][ T6154] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 124.381725][ T6154] ? sctp_outq_tail+0x671/0xa30 [ 124.381772][ T6154] ? sctp_endpoint_add_asoc+0x1db/0x2f0 [ 124.381816][ T6154] sctp_do_sm+0x1792/0x5c80 [ 124.381880][ T6154] ? kasan_save_stack+0x42/0x60 [ 124.381910][ T6154] ? kasan_save_stack+0x33/0x60 [ 124.381937][ T6154] ? kasan_save_track+0x14/0x30 [ 124.381968][ T6154] ? __pfx_sctp_do_sm+0x10/0x10 [ 124.382012][ T6154] ? sctp_sendmsg+0xef5/0x1ee0 [ 124.382054][ T6154] ? ____sys_sendmsg+0x973/0xc70 [ 124.382095][ T6154] ? __x64_sys_sendmmsg+0x9c/0x100 [ 124.382127][ T6154] ? do_syscall_64+0xcd/0x490 [ 124.382220][ T6154] ? sk_leave_memory_pressure+0xdd/0x130 [ 124.382266][ T6154] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 124.382314][ T6154] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 124.382368][ T6154] sctp_sendmsg_to_asoc+0xa45/0x1bf0 [ 124.382404][ T6154] ? sctp_assoc_set_primary+0x177/0x300 [ 124.382459][ T6154] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 124.382502][ T6154] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 124.382550][ T6154] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 124.382606][ T6154] sctp_sendmsg+0xef5/0x1ee0 [ 124.382651][ T6154] ? __lock_acquire+0x622/0x1c90 [ 124.382708][ T6154] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.382758][ T6154] ? __pfx___might_resched+0x10/0x10 [ 124.382813][ T6154] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.382864][ T6154] ? __pfx_sctp_sendmsg+0x10/0x10 [ 124.382919][ T6154] inet_sendmsg+0x11c/0x140 [ 124.382973][ T6154] ____sys_sendmsg+0x973/0xc70 [ 124.383022][ T6154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.383075][ T6154] ? __pfx__kstrtoull+0x10/0x10 [ 124.383132][ T6154] ___sys_sendmsg+0x134/0x1d0 [ 124.383169][ T6154] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.383225][ T6154] ? find_held_lock+0x2b/0x80 [ 124.383286][ T6154] __sys_sendmmsg+0x200/0x420 [ 124.383327][ T6154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.383378][ T6154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.383442][ T6154] ? fput+0x70/0xf0 [ 124.383479][ T6154] ? ksys_write+0x1ac/0x250 [ 124.383508][ T6154] ? __pfx_ksys_write+0x10/0x10 [ 124.383545][ T6154] __x64_sys_sendmmsg+0x9c/0x100 [ 124.383578][ T6154] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.383607][ T6154] do_syscall_64+0xcd/0x490 [ 124.383642][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.383673][ T6154] RIP: 0033:0x7fc35e58e9a9 [ 124.383697][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.383726][ T6154] RSP: 002b:00007fc35f425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.383753][ T6154] RAX: ffffffffffffffda RBX: 00007fc35e7b5fa0 RCX: 00007fc35e58e9a9 [ 124.383771][ T6154] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 124.383788][ T6154] RBP: 00007fc35f425090 R08: 0000000000000000 R09: 0000000000000000 [ 124.383804][ T6154] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000002 [ 124.383821][ T6154] R13: 0000000000000000 R14: 00007fc35e7b5fa0 R15: 00007ffcb55ab208 [ 124.383861][ T6154] [ 126.794618][ T6182] FAULT_INJECTION: forcing a failure. [ 126.794618][ T6182] name failslab, interval 1, probability 0, space 0, times 0 [ 126.811564][ T6182] CPU: 1 UID: 0 PID: 6182 Comm: syz.1.59 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 126.811610][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.811629][ T6182] Call Trace: [ 126.811640][ T6182] [ 126.811652][ T6182] dump_stack_lvl+0x16c/0x1f0 [ 126.811698][ T6182] should_fail_ex+0x512/0x640 [ 126.811731][ T6182] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.811786][ T6182] ? __pfx_drm_debugfs_entry_open+0x10/0x10 [ 126.811817][ T6182] should_failslab+0xc2/0x120 [ 126.811856][ T6182] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.811912][ T6182] ? single_open+0x4d/0x1f0 [ 126.811958][ T6182] ? __pfx_drm_debugfs_entry_open+0x10/0x10 [ 126.811988][ T6182] ? __pfx_vkms_config_show+0x10/0x10 [ 126.812039][ T6182] single_open+0x4d/0x1f0 [ 126.812084][ T6182] drm_debugfs_entry_open+0x127/0x1c0 [ 126.812118][ T6182] full_proxy_open_regular+0x1b6/0x360 [ 126.812167][ T6182] do_dentry_open+0x744/0x1c10 [ 126.812201][ T6182] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 126.812255][ T6182] vfs_open+0x82/0x3f0 [ 126.812303][ T6182] path_openat+0x1de4/0x2cb0 [ 126.812348][ T6182] ? __pfx_path_openat+0x10/0x10 [ 126.812383][ T6182] ? __lock_acquire+0xb8a/0x1c90 [ 126.812433][ T6182] do_filp_open+0x20b/0x470 [ 126.812466][ T6182] ? __pfx_do_filp_open+0x10/0x10 [ 126.812536][ T6182] ? alloc_fd+0x471/0x7d0 [ 126.812600][ T6182] do_sys_openat2+0x11b/0x1d0 [ 126.812644][ T6182] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.812716][ T6182] __x64_sys_openat+0x174/0x210 [ 126.812761][ T6182] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.812826][ T6182] do_syscall_64+0xcd/0x490 [ 126.812863][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.812896][ T6182] RIP: 0033:0x7f0a5c98e9a9 [ 126.812922][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.812952][ T6182] RSP: 002b:00007f0a5a7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.812982][ T6182] RAX: ffffffffffffffda RBX: 00007f0a5cbb6080 RCX: 00007f0a5c98e9a9 [ 126.813003][ T6182] RDX: 0000000000000000 RSI: 0000200000001040 RDI: ffffffffffffff9c [ 126.813022][ T6182] RBP: 00007f0a5ca10d69 R08: 0000000000000000 R09: 0000000000000000 [ 126.813041][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.813058][ T6182] R13: 0000000000000000 R14: 00007f0a5cbb6080 R15: 00007ffc4016f3e8 [ 126.813099][ T6182] [ 126.988237][ T6179] process 'syz.3.60' launched ':,' with NULL argv: empty string added [ 127.749142][ T6187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.755854][ T6187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.910038][ T6187] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 128.012446][ T6187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.018548][ T6187] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.127871][ T6187] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.263497][ T6192] svc: failed to register nfsdv3 RPC service (errno 111). [ 128.274333][ T6187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.283510][ T6187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.284748][ T6192] svc: failed to register nfsaclv3 RPC service (errno 111). [ 128.376521][ T5852] Bluetooth: hci0: Malformed Event: 0x02 [ 128.416944][ T6187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.429835][ T6187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.436650][ T6187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.468367][ T6187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.423076][ T6211] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 129.800075][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.969266][ T6222] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.080684][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.330772][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.482675][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.392061][ T6247] FAULT_INJECTION: forcing a failure. [ 131.392061][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 131.406501][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.3.75 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 131.406540][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.406554][ T6247] Call Trace: [ 131.406562][ T6247] [ 131.406570][ T6247] dump_stack_lvl+0x16c/0x1f0 [ 131.406598][ T6247] should_fail_ex+0x512/0x640 [ 131.406626][ T6247] should_failslab+0xc2/0x120 [ 131.406653][ T6247] __kmalloc_cache_noprof+0x6a/0x3e0 [ 131.406691][ T6247] ? sctp_add_bind_addr+0xae/0x3f0 [ 131.406721][ T6247] sctp_add_bind_addr+0xae/0x3f0 [ 131.406747][ T6247] sctp_copy_local_addr_list+0x39d/0x5a0 [ 131.406779][ T6247] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.406813][ T6247] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 131.406847][ T6247] ? sctp_bind_addr_copy+0xe0/0x530 [ 131.406870][ T6247] sctp_bind_addr_copy+0xe0/0x530 [ 131.406900][ T6247] sctp_connect_new_asoc+0x1d7/0x790 [ 131.406936][ T6247] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.406971][ T6247] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 131.407010][ T6247] __sctp_connect+0x3f3/0xc60 [ 131.407046][ T6247] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.407085][ T6247] ? __pfx___sctp_connect+0x10/0x10 [ 131.407120][ T6247] ? __pfx_sctp_inet_connect+0x10/0x10 [ 131.407155][ T6247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.407193][ T6247] ? __pfx_sctp_inet_connect+0x10/0x10 [ 131.407225][ T6247] sctp_inet_connect+0x15f/0x200 [ 131.407260][ T6247] __sys_connect_file+0x13e/0x1a0 [ 131.407301][ T6247] __sys_connect+0x13b/0x160 [ 131.407337][ T6247] ? __pfx___sys_connect+0x10/0x10 [ 131.407384][ T6247] ? __pfx_ksys_write+0x10/0x10 [ 131.407413][ T6247] __x64_sys_connect+0x72/0xb0 [ 131.407462][ T6247] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.407484][ T6247] do_syscall_64+0xcd/0x490 [ 131.407510][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.407534][ T6247] RIP: 0033:0x7fc35e58e9a9 [ 131.407551][ T6247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.407574][ T6247] RSP: 002b:00007fc35f425038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 131.407595][ T6247] RAX: ffffffffffffffda RBX: 00007fc35e7b5fa0 RCX: 00007fc35e58e9a9 [ 131.407610][ T6247] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 131.407624][ T6247] RBP: 00007fc35f425090 R08: 0000000000000000 R09: 0000000000000000 [ 131.407638][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.407652][ T6247] R13: 0000000000000000 R14: 00007fc35e7b5fa0 R15: 00007ffcb55ab208 [ 131.407681][ T6247] [ 131.980811][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.160704][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.307854][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.77'. [ 132.401158][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.553338][ T6256] svc: failed to register nfsdv3 RPC service (errno 111). [ 132.570974][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.596573][ T6256] svc: failed to register nfsaclv3 RPC service (errno 111). [ 132.605008][ T6261] FAULT_INJECTION: forcing a failure. [ 132.605008][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.831760][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.1.78 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 132.831808][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.831826][ T6261] Call Trace: [ 132.831836][ T6261] [ 132.831847][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 132.831882][ T6261] should_fail_ex+0x512/0x640 [ 132.831920][ T6261] _copy_from_user+0x2e/0xd0 [ 132.831957][ T6261] copy_msghdr_from_user+0x98/0x160 [ 132.831991][ T6261] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 132.832035][ T6261] ? kfree+0x24f/0x4d0 [ 132.832082][ T6261] ? __lock_acquire+0x622/0x1c90 [ 132.832138][ T6261] ___sys_recvmsg+0xdb/0x1a0 [ 132.832172][ T6261] ? __pfx____sys_recvmsg+0x10/0x10 [ 132.832233][ T6261] ? __pfx___might_resched+0x10/0x10 [ 132.832307][ T6261] do_recvmmsg+0x2fe/0x750 [ 132.832349][ T6261] ? __pfx_do_recvmmsg+0x10/0x10 [ 132.832398][ T6261] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 132.832446][ T6261] ? __fget_files+0x20e/0x3c0 [ 132.832514][ T6261] __x64_sys_recvmmsg+0x22a/0x280 [ 132.832553][ T6261] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 132.832610][ T6261] do_syscall_64+0xcd/0x490 [ 132.832647][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.832680][ T6261] RIP: 0033:0x7f0a5c98e9a9 [ 132.832708][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.832738][ T6261] RSP: 002b:00007f0a5a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 132.832768][ T6261] RAX: ffffffffffffffda RBX: 00007f0a5cbb5fa0 RCX: 00007f0a5c98e9a9 [ 132.832788][ T6261] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 132.832805][ T6261] RBP: 00007f0a5a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.832824][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.832841][ T6261] R13: 0000000000000000 R14: 00007f0a5cbb5fa0 R15: 00007ffc4016f3e8 [ 132.832886][ T6261] [ 133.268190][ T6265] netlink: 25 bytes leftover after parsing attributes in process `syz.0.79'. [ 134.014021][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.242827][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.480673][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.640821][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.155954][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 135.512080][ T6300] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 135.625298][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 136.466713][ T6318] svc: failed to register nfsdv3 RPC service (errno 111). [ 136.525992][ T6318] svc: failed to register nfsaclv3 RPC service (errno 111). [ 137.952798][ T6341] FAULT_INJECTION: forcing a failure. [ 137.952798][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 138.050748][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.0.97 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 138.050790][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.050807][ T6341] Call Trace: [ 138.050815][ T6341] [ 138.050824][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 138.050855][ T6341] should_fail_ex+0x512/0x640 [ 138.050885][ T6341] should_failslab+0xc2/0x120 [ 138.050914][ T6341] __kmalloc_cache_noprof+0x6a/0x3e0 [ 138.050956][ T6341] ? sctp_add_bind_addr+0xae/0x3f0 [ 138.050986][ T6341] sctp_add_bind_addr+0xae/0x3f0 [ 138.051018][ T6341] sctp_copy_local_addr_list+0x39d/0x5a0 [ 138.051053][ T6341] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 138.051089][ T6341] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 138.051130][ T6341] ? sctp_bind_addr_copy+0xe0/0x530 [ 138.051158][ T6341] sctp_bind_addr_copy+0xe0/0x530 [ 138.051194][ T6341] sctp_connect_new_asoc+0x1d7/0x790 [ 138.051234][ T6341] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 138.051283][ T6341] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 138.051333][ T6341] __sctp_connect+0x3f3/0xc60 [ 138.051383][ T6341] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.051436][ T6341] ? __pfx___sctp_connect+0x10/0x10 [ 138.051485][ T6341] ? __pfx_sctp_inet_connect+0x10/0x10 [ 138.051531][ T6341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.051585][ T6341] ? __pfx_sctp_inet_connect+0x10/0x10 [ 138.051629][ T6341] sctp_inet_connect+0x15f/0x200 [ 138.051677][ T6341] __sys_connect_file+0x13e/0x1a0 [ 138.051736][ T6341] __sys_connect+0x13b/0x160 [ 138.051786][ T6341] ? __pfx___sys_connect+0x10/0x10 [ 138.051852][ T6341] ? __pfx_ksys_write+0x10/0x10 [ 138.051893][ T6341] __x64_sys_connect+0x72/0xb0 [ 138.051941][ T6341] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.051972][ T6341] do_syscall_64+0xcd/0x490 [ 138.052008][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.052041][ T6341] RIP: 0033:0x7fc57878e9a9 [ 138.052065][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.052095][ T6341] RSP: 002b:00007fc5795b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 138.052122][ T6341] RAX: ffffffffffffffda RBX: 00007fc5789b5fa0 RCX: 00007fc57878e9a9 [ 138.052141][ T6341] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 138.052158][ T6341] RBP: 00007fc5795b7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.052174][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.052190][ T6341] R13: 0000000000000000 R14: 00007fc5789b5fa0 R15: 00007ffe8b3e8dc8 [ 138.052231][ T6341] [ 138.315241][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.725487][ T5852] ================================================================== [ 138.733622][ T5852] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 138.741478][ T5852] Read of size 140 at addr ffffc9000909d000 by task kworker/u9:2/5852 [ 138.749654][ T5852] [ 138.751996][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:2 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 138.752035][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.752053][ T5852] Workqueue: hci0 hci_devcd_timeout [ 138.752096][ T5852] Call Trace: [ 138.752105][ T5852] [ 138.752115][ T5852] dump_stack_lvl+0x116/0x1f0 [ 138.752143][ T5852] print_report+0xcd/0x610 [ 138.752173][ T5852] ? __virt_addr_valid+0x81/0x610 [ 138.752205][ T5852] ? hci_devcd_dump+0x142/0x240 [ 138.752243][ T5852] kasan_report+0xe0/0x110 [ 138.752277][ T5852] ? hci_devcd_dump+0x142/0x240 [ 138.752320][ T5852] kasan_check_range+0x100/0x1b0 [ 138.752356][ T5852] __asan_memcpy+0x23/0x60 [ 138.752396][ T5852] hci_devcd_dump+0x142/0x240 [ 138.752436][ T5852] hci_devcd_timeout+0xb5/0x2e0 [ 138.752474][ T5852] ? rcu_is_watching+0x12/0xc0 [ 138.752505][ T5852] process_one_work+0x9cf/0x1b70 [ 138.752553][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 138.752600][ T5852] ? assign_work+0x1a0/0x250 [ 138.752640][ T5852] worker_thread+0x6c8/0xf10 [ 138.752686][ T5852] ? __kthread_parkme+0x19e/0x250 [ 138.752719][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 138.752761][ T5852] kthread+0x3c2/0x780 [ 138.752799][ T5852] ? __pfx_kthread+0x10/0x10 [ 138.752838][ T5852] ? rcu_is_watching+0x12/0xc0 [ 138.752866][ T5852] ? __pfx_kthread+0x10/0x10 [ 138.752904][ T5852] ret_from_fork+0x5d4/0x6f0 [ 138.752941][ T5852] ? __pfx_kthread+0x10/0x10 [ 138.752978][ T5852] ret_from_fork_asm+0x1a/0x30 [ 138.753021][ T5852] [ 138.753030][ T5852] [ 138.905492][ T5852] The buggy address ffffc9000909d000 belongs to a vmalloc virtual mapping [ 138.914013][ T5852] Memory state around the buggy address: [ 138.919687][ T5852] ffffc9000909cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 138.927851][ T5852] ffffc9000909cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 138.935944][ T5852] >ffffc9000909d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 138.944049][ T5852] ^ [ 138.948135][ T5852] ffffc9000909d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 138.956216][ T5852] ffffc9000909d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 138.964312][ T5852] ================================================================== [ 138.972450][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.983329][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.990567][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:2 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 139.002729][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.012806][ T5852] Workqueue: hci0 hci_devcd_timeout [ 139.018050][ T5852] Call Trace: [ 139.021332][ T5852] [ 139.024269][ T5852] dump_stack_lvl+0x3d/0x1f0 [ 139.028866][ T5852] panic+0x71c/0x800 [ 139.032817][ T5852] ? __pfx_panic+0x10/0x10 [ 139.037274][ T5852] ? mark_held_locks+0x49/0x80 [ 139.042155][ T5852] ? preempt_schedule_thunk+0x16/0x30 [ 139.047547][ T5852] ? hci_devcd_dump+0x142/0x240 [ 139.052423][ T5852] ? preempt_schedule_common+0x44/0xc0 [ 139.057916][ T5852] ? check_panic_on_warn+0x1f/0xb0 [ 139.063060][ T5852] ? hci_devcd_dump+0x142/0x240 [ 139.067938][ T5852] check_panic_on_warn+0xab/0xb0 [ 139.072906][ T5852] end_report+0x107/0x170 [ 139.077344][ T5852] kasan_report+0xee/0x110 [ 139.081781][ T5852] ? hci_devcd_dump+0x142/0x240 [ 139.086661][ T5852] kasan_check_range+0x100/0x1b0 [ 139.091630][ T5852] __asan_memcpy+0x23/0x60 [ 139.096077][ T5852] hci_devcd_dump+0x142/0x240 [ 139.100800][ T5852] hci_devcd_timeout+0xb5/0x2e0 [ 139.105774][ T5852] ? rcu_is_watching+0x12/0xc0 [ 139.110567][ T5852] process_one_work+0x9cf/0x1b70 [ 139.115530][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 139.120932][ T5852] ? assign_work+0x1a0/0x250 [ 139.125650][ T5852] worker_thread+0x6c8/0xf10 [ 139.130307][ T5852] ? __kthread_parkme+0x19e/0x250 [ 139.135355][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 139.140512][ T5852] kthread+0x3c2/0x780 [ 139.144625][ T5852] ? __pfx_kthread+0x10/0x10 [ 139.149234][ T5852] ? rcu_is_watching+0x12/0xc0 [ 139.154017][ T5852] ? __pfx_kthread+0x10/0x10 [ 139.158651][ T5852] ret_from_fork+0x5d4/0x6f0 [ 139.163273][ T5852] ? __pfx_kthread+0x10/0x10 [ 139.167887][ T5852] ret_from_fork_asm+0x1a/0x30 [ 139.173540][ T5852] [ 139.176915][ T5852] Kernel Offset: disabled [ 139.181264][ T5852] Rebooting in 86400 seconds..