last executing test programs: 6.924811302s ago: executing program 2 (id=67): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'rose0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x22) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101142, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc01) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.620202399s ago: executing program 0 (id=69): mmap$auto(0x0, 0x40000c, 0xdb, 0x10, 0x2, 0x8000) r0 = socket(0x9, 0x1, 0x4) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e21, @multicast1}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000280)="8f79f4012a369cc335510eeb3500db1ec47b93f6e16dd8f612443e5685010579675298e787bd291cb7bedd51ae052c28af9d8512279e46896bde2d7261e3068679258589b58badcb09014ae8e980bfab11eb0dbe17d9605db8b1335609e7a82102d1b702c0a9a6b4f67c4e1c35500b7b0f8382c0dcc93c7af5c6c42f533694b536aecc7cbba50c64089779ae5180a78ab78add672034d0884a6b24879affc36302d5a62a37488f297a0f1197b001baf4a3191d3da3540d07cdecd75247428481", 0x8, 0x0, 0x5, 0x0, 0x1f, 0xfffff0c2}, 0x8}, 0x7, 0x1) madvise$auto(0x8c, 0x1, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) epoll_create$auto(0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi26\x00', 0x18a041, 0x0) epoll_ctl$auto(r0, 0x1, r2, 0x0) mmap$auto(0x3, 0x4020005, 0x6, 0xe31, 0x401, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/6/node\x00', 0x88000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r4 = socket(0x1d, 0x2, 0x7) r5 = socket(0x21, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000200)=@can={0x1d, r6}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) connect$auto(r1, &(0x7f0000000240)=@ax25={0x3, @default, 0x3}, 0x457) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f0000000040)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x25b, 0x7ff) io_uring_setup$auto(0xffd, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0x11, 0x3, 0x3a) ioctl$auto(r7, 0x8916, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptye3\x00', 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x80002) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) 6.360837764s ago: executing program 2 (id=71): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c0000000c0003800800038004000580"], 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) migrate_pages$auto(0x0, 0x9, &(0x7f0000000100)=0x7, &(0x7f0000000040)=0x101) 5.122856861s ago: executing program 0 (id=74): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x2a002, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0xfffff000}}) r1 = socketpair$auto(0x2c29c000, 0x9, 0x6, 0x0) (async) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100), 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x7, 0x0, 0x0) (async) close_range$auto(0x2, r1, 0x0) (async) ioctl$auto_TUNGETIFF2(r1, 0x800454d2, &(0x7f0000000080)=0x8001) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x80040, 0x0) ioctl$auto_BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") (async) write$auto_tracing_mark_raw_fops_trace(r0, &(0x7f0000002180)="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", 0x493) 4.703048179s ago: executing program 3 (id=76): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x800, 0xa) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) read$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffffff, &(0x7f00000000c0)=""/45, 0x2d) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40000000000021, 0xdf, 0x9972, 0x1000, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x606b43, 0x0) mmap$auto(0xfffffffffffffffa, 0x1000e983, 0x3, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xf4240, 0x1) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000380), 0x80180, 0x0) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x6) mmap$auto(0x5, 0x4, 0x1, 0xeb1, r1, 0x3) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="14000800", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) readv$auto(r5, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') getdents$auto(r7, 0x0, 0xfff) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, 0x6) 4.639858105s ago: executing program 0 (id=77): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) epoll_create$auto(0x8ca0d1a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(r0, 0x0, 0x7) mmap$auto(0x288, 0x2020009, 0x0, 0xefd, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, 0x0, 0x2b) r2 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffddffe00, 0x0) gettid() socket(0xa, 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r4, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) epoll_create$auto(0x8800001) 4.001472928s ago: executing program 1 (id=80): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r1 = open_by_handle_at$auto(r0, &(0x7f00000001c0)={0x8, 0x2, "750000000000001b"}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv2$auto(r1, &(0x7f0000000000)={&(0x7f0000000200)="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", 0x9}, 0x1, 0x1, 0x7b, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x800000001, 0x0, 0x6, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x806, 0x0) shutdown$auto(0x200000003, 0x2) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) writev$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) 3.765370448s ago: executing program 3 (id=81): openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x101000, 0x0) r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_kernel_debug_fops_orangefs_debugfs(r0, 0x0, 0x0) (async) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4000002, 0x4, 0x7234}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) (async) socket(0x2, 0x2, 0x73) (async) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) (async) dup2$auto(0x0, 0x3) (async) r2 = fcntl$auto_F_GETOWN(r1, 0x9, 0xeee4) capset$auto(&(0x7f0000000140)={0x4f, r2}, &(0x7f0000000200)={0x3, 0x7f, 0x6}) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x29, 0x2, 0x0) (async) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) (async) fsopen$auto(0x0, 0x1) (async) socket(0x2, 0x3, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r3) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002000)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, 0x0) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 3.642165252s ago: executing program 2 (id=82): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0x29, 0x1, 0x100) unshare$auto(0x40000080) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 3.567341637s ago: executing program 3 (id=83): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x400000000009b72, 0x2, 0x8800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) statx$auto(r2, 0xfffffffffffffffc, 0x1000, 0x7, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, 0x0) fanotify_init$auto(0x602, 0x1) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0xc0002, 0x0) write$auto_sg_fops_sg(r4, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c7", 0x30) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@sco, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) 3.421256256s ago: executing program 0 (id=84): close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x4b564d01, 0x400, 0xfffffffffffffffe}]}) 2.752672913s ago: executing program 0 (id=85): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x900000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xe0, 0x100000009b72, 0xffffffffffffffff, 0x3) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r2, 0x1, 0x2, 0x6653) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES16=r4, @ANYBLOB="e3b72bbd7000fcdbdf25190000000c00018008f4020007000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x48000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x680800, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f2, 0x400, 0x9}]}) mmap$auto(0x0, 0x40000b, 0xdf, 0x18, r8, 0x8000) 2.631860544s ago: executing program 1 (id=86): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) (async) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = socket(0x1e, 0x5, 0x0) ioctl$auto(r0, 0x89e1, r0) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/pf_emulate\x00', 0x109200, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r1 = socket(0xa, 0x801, 0x84) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) write$auto(0x3, 0x0, 0xfdf3) (async) sendfile$auto(r2, r2, 0x0, 0xa) (async) getsockopt$auto(r1, 0x84, 0xc, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ppoll$auto(0x0, 0xfd, 0x0, 0x0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) socket(0x27, 0x2, 0x3a) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcsu\x00', 0x428941, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) 2.580005205s ago: executing program 2 (id=87): mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x6, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x401006, 0x4015, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) 2.344014223s ago: executing program 3 (id=88): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lsm_set_self_attr$auto(0x1, 0x0, 0x4000080, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xfdef}, 0x3, 0x0, 0x5, 0x7}, 0xff}, 0xffffffff, 0xb10) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x4}, 0x1, 0x7, 0x2, 0x280, @inferred, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2fa81"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(r0, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xffffffffbffffff9, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 2.098826399s ago: executing program 1 (id=89): mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0xfffffffc, 0x0, 0x0) (async) timer_create$auto(0xfffffffc, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0xffffffffffffffbf}, {0x9, 0x3}}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x149e42, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x3, 0x1, 0x4000000000000003, 0x10000001a, 0xffffffffffffffff, 0x80000000071) socketpair$auto(0x1e, 0x1, 0x20000000, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) (async) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) socket(0x1, 0x800, 0x49) (async) socket(0x1, 0x800, 0x49) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) unshare$auto(0x2) write$auto(0xffffffffffffffff, 0x0, 0x56ec) (async) write$auto(0xffffffffffffffff, 0x0, 0x56ec) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x3, 0x3, 0x7) (async) socket(0x3, 0x3, 0x7) socket(0x21, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) (async) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto(0x3, 0x0, 0x5) (async) write$auto(0x3, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.814562882s ago: executing program 1 (id=90): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) inotify_init1$auto(0x2009) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) futex$auto(0x0, 0x9, 0x3c, &(0x7f0000000080)={0x6, 0x36b}, 0x0, 0x6) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) io_uring_setup$auto(0x5, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socketpair$auto(0xffffffff, 0xa, 0x4000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x200000000000, 0x806124, 0x8) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) fcntl$auto(r2, 0x7, 0x4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x440000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40000403c6f2b, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sysfs$auto(0x81, 0x6, 0xb7) close_range$auto(0x2, 0x8, 0x0) 1.691797772s ago: executing program 1 (id=91): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (rerun: 64) madvise$auto(0x0, 0x7, 0x13) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x1, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x80, 0x0) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r1 = socket(0x15, 0x3, 0x70) getpeername$auto(r1, 0x0, 0x0) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) setsockopt$auto_SO_MAX_PACING_RATE(r0, 0xffffffff, 0x2f, &(0x7f0000000080)='/dev/dri/card0\x00', 0xe) ioctl$auto(r2, 0x92106400, r2) 1.352906698s ago: executing program 3 (id=92): mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x801, 0x106) setsockopt$auto(r0, 0x1, 0x2, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x82840, 0x0) r1 = socket(0x2, 0x801, 0x106) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x7fff, 0x9}, 0xd, 0x9) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) sysfs$auto(0x2, 0x23, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/set_event\x00', 0x3c3001, 0x0) write$auto(r6, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) 1.349665415s ago: executing program 2 (id=93): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) cachestat$auto(r0, &(0x7f0000000000)={0x6, 0x81}, &(0x7f00000000c0)={0x1, 0x401, 0x5}, 0x3) r1 = getsid$auto(0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0x0, 0x5) getsockopt$auto(r0, 0x84, 0x82, 0x0, &(0x7f0000000300)=0x1000c) 917.270002ms ago: executing program 3 (id=94): socket(0x21, 0x5, 0x7d55) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) socket(0x2, 0x2, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b66, r2) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex$auto(0x0, 0x86, 0x8, &(0x7f0000000280)={0x40000000000800, 0x9}, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) select$auto(0xa4d, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x8, 0x208, 0x1, 0x0, 0x4000000008, 0x15f6da12, 0x3, 0x800080000010d08, 0x10000000000000b, 0xfffffffffffffffc, 0x3, 0x6d3f, 0x6, 0x4, 0x5]}, 0x0) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x23}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a3, 0xe000) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) 739.567287ms ago: executing program 0 (id=95): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) semctl$auto(0x2400, 0x9, 0x13, 0x0) (async) r1 = socket(0x11, 0x3, 0x9) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) (async) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x201, 0xc000) (async) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r5 = socket(0x2, 0x2, 0x88) setsockopt$auto(r5, 0x0, 0x5f71, 0x0, 0x8) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) io_pgetevents$auto(0x1, 0x8, 0x4, 0x0, &(0x7f0000000080)={0x5e, 0xffffffffffffff80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000280)={0x7, 0x100, 0x7, 0x5, 0x4}) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) (async) clock_gettime$auto(0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 615.298018ms ago: executing program 2 (id=96): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x400000) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_MEMISLOCKED(r0, 0x80084d17, 0x0) mmap$auto(0x0, 0x3fa, 0xdf, 0x18, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) connect$auto(0x3, 0x0, 0x55) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x7, 0x0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c010000", @ANYRES16=0x0, @ANYBLOB="000428252600000008000200020000af1fb456d81695ce000c0001021f5af79dab9edcdfd803a553070000002461415309672d42d39fc2737f77383d", @ANYRES32=0x0, @ANYBLOB="2c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010001000c00018008000300090000000800070007000000a00001801400020064766d727031000000000000000000001400020076657468305f746f5f687372000000000800030006000000140002006d6163767461703000000000000000001400020074756e6c30000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000014000200776c616e3100000000000000000000002000018008000300d70d00001400020064766d72703000"/72], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r2, r2, 0x0, 0x7) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) 0s ago: executing program 1 (id=97): timer_settime$auto(0xffffffff, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10008}, {0x9, 0x2}}, 0x0) stat$auto(0x0, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xa0342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x44040) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x7, 0x0, 0x29, 0x0, 0x0, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x4) fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getsockopt$auto_SO_MEMINFO(0xffffffffffffffff, 0x200b, 0x37, 0x0, &(0x7f00000000c0)) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r3, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) getsockopt$auto_SO_ACCEPTCONN(r0, 0x800, 0x1e, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) mmap$auto(0x4, 0x9, 0x2000000000000dd, 0x9b72, r0, 0x7ffd) unshare$auto(0x40000080) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x3, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x9]}, 0x0, 0x0, &(0x7f0000001040)) read$auto(r4, 0x0, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 81.431072][ T5822] cgroup: Unknown subsys name 'net' [ 81.560411][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.569660][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.069580][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.008839][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.027403][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.035569][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.044262][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.052083][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.094108][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.118678][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.127313][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.138344][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.156854][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.196510][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.197131][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.214040][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.223610][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.243056][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.275601][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.284625][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.292552][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.302512][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.310746][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.516782][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.703072][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.711034][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.718987][ T5833] bridge_slave_0: entered allmulticast mode [ 85.726201][ T5833] bridge_slave_0: entered promiscuous mode [ 85.752021][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.759961][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.767568][ T5833] bridge_slave_1: entered allmulticast mode [ 85.775432][ T5833] bridge_slave_1: entered promiscuous mode [ 85.852492][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.866478][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.902296][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.929441][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.002859][ T5833] team0: Port device team_slave_0 added [ 86.050384][ T5833] team0: Port device team_slave_1 added [ 86.118663][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 86.133368][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.140394][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.166769][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.178567][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.185820][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.193228][ T5838] bridge_slave_0: entered allmulticast mode [ 86.200418][ T5838] bridge_slave_0: entered promiscuous mode [ 86.220299][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.227716][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.254200][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.265485][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.272756][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.280052][ T5838] bridge_slave_1: entered allmulticast mode [ 86.287327][ T5838] bridge_slave_1: entered promiscuous mode [ 86.352941][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.360306][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.367901][ T5837] bridge_slave_0: entered allmulticast mode [ 86.374859][ T5837] bridge_slave_0: entered promiscuous mode [ 86.391194][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.400583][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.407924][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.415247][ T5837] bridge_slave_1: entered allmulticast mode [ 86.422597][ T5837] bridge_slave_1: entered promiscuous mode [ 86.451932][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.524253][ T5833] hsr_slave_0: entered promiscuous mode [ 86.530755][ T5833] hsr_slave_1: entered promiscuous mode [ 86.550754][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.573522][ T5838] team0: Port device team_slave_0 added [ 86.579298][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.587357][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.594702][ T5843] bridge_slave_0: entered allmulticast mode [ 86.602057][ T5843] bridge_slave_0: entered promiscuous mode [ 86.612040][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.624010][ T5838] team0: Port device team_slave_1 added [ 86.641925][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.649336][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.657057][ T5843] bridge_slave_1: entered allmulticast mode [ 86.664083][ T5843] bridge_slave_1: entered promiscuous mode [ 86.730548][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.737900][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.764112][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.786981][ T5837] team0: Port device team_slave_0 added [ 86.803283][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.810380][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.837114][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.850880][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.861933][ T5837] team0: Port device team_slave_1 added [ 86.882532][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.949120][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.956090][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.982394][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.012249][ T5843] team0: Port device team_slave_0 added [ 87.018561][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.025595][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.051887][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.081343][ T5843] team0: Port device team_slave_1 added [ 87.100522][ T5838] hsr_slave_0: entered promiscuous mode [ 87.107184][ T5838] hsr_slave_1: entered promiscuous mode [ 87.113315][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 87.120121][ T5836] Bluetooth: hci0: command tx timeout [ 87.125718][ T5838] Cannot create hsr debugfs directory [ 87.199766][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.206841][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.232912][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.267182][ T5836] Bluetooth: hci2: command tx timeout [ 87.278964][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.285932][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.312247][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.336364][ T5837] hsr_slave_0: entered promiscuous mode [ 87.342720][ T5837] hsr_slave_1: entered promiscuous mode [ 87.348401][ T5836] Bluetooth: hci3: command tx timeout [ 87.353937][ T52] Bluetooth: hci1: command tx timeout [ 87.355555][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 87.365720][ T5837] Cannot create hsr debugfs directory [ 87.529090][ T5843] hsr_slave_0: entered promiscuous mode [ 87.535898][ T5843] hsr_slave_1: entered promiscuous mode [ 87.542331][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 87.548374][ T5843] Cannot create hsr debugfs directory [ 87.640372][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.684479][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.712781][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.745563][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.863191][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.874448][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.894628][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.932652][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.022132][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.032972][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.049541][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.065683][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.170580][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.181755][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.204709][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.215556][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.287739][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.371412][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.381034][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.410117][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.417432][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.446044][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.453208][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.475835][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.494930][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.502197][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.530260][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.537493][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.555116][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.572069][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.635396][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.663218][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.670364][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.684928][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.705745][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.712968][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.749204][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.756388][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.802935][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.810203][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.961399][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.104056][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.194263][ T52] Bluetooth: hci0: command tx timeout [ 89.265607][ T5833] veth0_vlan: entered promiscuous mode [ 89.347369][ T52] Bluetooth: hci2: command tx timeout [ 89.353419][ T5833] veth1_vlan: entered promiscuous mode [ 89.365850][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.384822][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.433965][ T52] Bluetooth: hci3: command tx timeout [ 89.433975][ T5836] Bluetooth: hci1: command tx timeout [ 89.468601][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.508665][ T5833] veth0_macvtap: entered promiscuous mode [ 89.533072][ T5833] veth1_macvtap: entered promiscuous mode [ 89.548121][ T5838] veth0_vlan: entered promiscuous mode [ 89.556482][ T5837] veth0_vlan: entered promiscuous mode [ 89.585240][ T5838] veth1_vlan: entered promiscuous mode [ 89.604594][ T5837] veth1_vlan: entered promiscuous mode [ 89.630006][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.652337][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.673415][ T5843] veth0_vlan: entered promiscuous mode [ 89.698425][ T3486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708905][ T3486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.723284][ T3486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.736082][ T3486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.751747][ T5843] veth1_vlan: entered promiscuous mode [ 89.792284][ T5838] veth0_macvtap: entered promiscuous mode [ 89.801814][ T5837] veth0_macvtap: entered promiscuous mode [ 89.823657][ T5838] veth1_macvtap: entered promiscuous mode [ 89.849382][ T5837] veth1_macvtap: entered promiscuous mode [ 89.938199][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.946408][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.946491][ T5843] veth0_macvtap: entered promiscuous mode [ 89.978919][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.989427][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.015338][ T5843] veth1_macvtap: entered promiscuous mode [ 90.031121][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.040576][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.061600][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.082073][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.094125][ T1951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104633][ T1951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125345][ T1951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.138781][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.162170][ T4030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179205][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.209107][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.234013][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.242548][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.253431][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263786][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.304316][ T4030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.363823][ T4030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.378124][ T1951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.381194][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.386115][ T1951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.455813][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.508071][ T4030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.531655][ T4030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.548881][ T4030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.565456][ T4030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.680765][ T5926] random: crng reseeded on system resumption [ 90.698041][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.705868][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.765405][ T5926] hub 1-0:1.0: USB hub found [ 90.794403][ T5926] hub 1-0:1.0: 1 port detected [ 90.819261][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.847219][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.941503][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.956716][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.987359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.997034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.236933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.267101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 91.268163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.277267][ T52] Bluetooth: hci0: command tx timeout [ 91.292385][ T5934] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 91.427250][ T52] Bluetooth: hci2: command tx timeout [ 91.507729][ T52] Bluetooth: hci1: command tx timeout [ 91.507771][ T5836] Bluetooth: hci3: command tx timeout [ 91.825992][ T5940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 93.087478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.267264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 93.341059][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.349954][ T5836] Bluetooth: hci0: command tx timeout [ 93.497884][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.517171][ T5836] Bluetooth: hci2: command tx timeout [ 93.587361][ T5836] Bluetooth: hci1: command tx timeout [ 93.587376][ T52] Bluetooth: hci3: command tx timeout [ 93.988867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.006750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.077159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.160269][ T5965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.911168][ T6005] Zero length message leads to an empty skb [ 96.981004][ T5999] zswap: compressor not available [ 97.024054][ T6008] FAULT_INJECTION: forcing a failure. [ 97.024054][ T6008] name failslab, interval 1, probability 0, space 0, times 1 [ 97.063073][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 97.063110][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.063133][ T6008] Call Trace: [ 97.063142][ T6008] [ 97.063153][ T6008] dump_stack_lvl+0x16c/0x1f0 [ 97.063187][ T6008] should_fail_ex+0x512/0x640 [ 97.063230][ T6008] ? __kmalloc_cache_noprof+0x5f/0x800 [ 97.063271][ T6008] should_failslab+0xc2/0x120 [ 97.063301][ T6008] __kmalloc_cache_noprof+0x72/0x800 [ 97.063335][ T6008] ? snd_seq_pool_new+0x44/0x230 [ 97.063366][ T6008] ? snd_seq_pool_new+0x44/0x230 [ 97.063388][ T6008] ? __pfx_snd_seq_open+0x10/0x10 [ 97.063421][ T6008] snd_seq_pool_new+0x44/0x230 [ 97.063447][ T6008] seq_create_client1+0x66/0x630 [ 97.063485][ T6008] ? __pfx_snd_seq_open+0x10/0x10 [ 97.063517][ T6008] snd_seq_open+0x59/0x590 [ 97.063547][ T6008] ? __pfx_snd_seq_open+0x10/0x10 [ 97.063575][ T6008] snd_open+0x22d/0x4c0 [ 97.063611][ T6008] ? __pfx_snd_open+0x10/0x10 [ 97.063646][ T6008] chrdev_open+0x234/0x6a0 [ 97.063676][ T6008] ? __pfx_chrdev_open+0x10/0x10 [ 97.063707][ T6008] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 97.063744][ T6008] do_dentry_open+0x748/0x1590 [ 97.063770][ T6008] ? __pfx_chrdev_open+0x10/0x10 [ 97.063809][ T6008] vfs_open+0x82/0x3f0 [ 97.063847][ T6008] path_openat+0x2078/0x3140 [ 97.063887][ T6008] ? __pfx_path_openat+0x10/0x10 [ 97.063929][ T6008] do_filp_open+0x20b/0x470 [ 97.063959][ T6008] ? __pfx_do_filp_open+0x10/0x10 [ 97.064023][ T6008] ? alloc_fd+0x471/0x7d0 [ 97.064064][ T6008] do_sys_openat2+0x11f/0x280 [ 97.064099][ T6008] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.064151][ T6008] __x64_sys_openat+0x174/0x210 [ 97.064188][ T6008] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.064238][ T6008] do_syscall_64+0xcd/0xf80 [ 97.064268][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.064293][ T6008] RIP: 0033:0x7f4d6678f7c9 [ 97.064320][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.064345][ T6008] RSP: 002b:00007f4d649f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.064379][ T6008] RAX: ffffffffffffffda RBX: 00007f4d669e5fa0 RCX: 00007f4d6678f7c9 [ 97.064396][ T6008] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 97.064418][ T6008] RBP: 00007f4d66813f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.064434][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.064449][ T6008] R13: 00007f4d669e6038 R14: 00007f4d669e5fa0 R15: 00007ffea52850e8 [ 97.064486][ T6008] [ 97.512288][ T9] cfg80211: failed to load regulatory.db [ 97.579848][ T5999] FAULT_INJECTION: forcing a failure. [ 97.579848][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 97.618785][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.1.15 Not tainted syzkaller #0 PREEMPT(full) [ 97.618824][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.618839][ T5999] Call Trace: [ 97.618848][ T5999] [ 97.618859][ T5999] dump_stack_lvl+0x16c/0x1f0 [ 97.618894][ T5999] should_fail_ex+0x512/0x640 [ 97.618923][ T5999] ? fs_reclaim_acquire+0xae/0x150 [ 97.618957][ T5999] should_failslab+0xc2/0x120 [ 97.619061][ T5999] kmem_cache_alloc_noprof+0x75/0x760 [ 97.619105][ T5999] ? __pfx_map_id_range_down+0x10/0x10 [ 97.619129][ T5999] ? security_inode_alloc+0x3b/0x2b0 [ 97.619162][ T5999] ? security_inode_alloc+0x3b/0x2b0 [ 97.619186][ T5999] security_inode_alloc+0x3b/0x2b0 [ 97.619213][ T5999] inode_init_always_gfp+0xced/0x1040 [ 97.619249][ T5999] alloc_inode+0x86/0x240 [ 97.619285][ T5999] new_inode+0x22/0x1c0 [ 97.619323][ T5999] debugfs_create_symlink+0xd3/0x320 [ 97.619356][ T5999] ref_tracker_dir_symlink+0x255/0x360 [ 97.619403][ T5999] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 97.619442][ T5999] ? __lock_acquire+0x433/0x22f0 [ 97.619517][ T5999] ? __lock_acquire+0x433/0x22f0 [ 97.619551][ T5999] ? crng_make_state+0x48e/0x6c0 [ 97.619590][ T5999] ? __pfx_net_ns_net_init+0x10/0x10 [ 97.619627][ T5999] net_ns_net_init+0xd2/0x120 [ 97.619671][ T5999] ops_init+0x1e2/0x5f0 [ 97.619711][ T5999] setup_net+0x11d/0x3a0 [ 97.619749][ T5999] ? __pfx_setup_net+0x10/0x10 [ 97.619781][ T5999] ? lockdep_init_map_type+0x5c/0x270 [ 97.619822][ T5999] ? mutex_init_lockep+0x110/0x150 [ 97.619863][ T5999] copy_net_ns+0x351/0x5d0 [ 97.619910][ T5999] create_new_namespaces+0x3ea/0xab0 [ 97.619965][ T5999] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 97.620012][ T5999] ksys_unshare+0x45b/0xa40 [ 97.620040][ T5999] ? __pfx_ksys_unshare+0x10/0x10 [ 97.620075][ T5999] __x64_sys_unshare+0x31/0x40 [ 97.620098][ T5999] do_syscall_64+0xcd/0xf80 [ 97.620127][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.620153][ T5999] RIP: 0033:0x7f1551f8f7c9 [ 97.620176][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.620200][ T5999] RSP: 002b:00007f1552e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.620225][ T5999] RAX: ffffffffffffffda RBX: 00007f15521e5fa0 RCX: 00007f1551f8f7c9 [ 97.620241][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 97.620256][ T5999] RBP: 00007f1552013f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.620271][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.620285][ T5999] R13: 00007f15521e6038 R14: 00007f15521e5fa0 R15: 00007ffd3fefea18 [ 97.620318][ T5999] [ 97.622687][ T5999] debugfs: out of free dentries, can not create symlink 'netns-2a-4026533711-notrefcnt' [ 97.887943][ T6008] zswap: compressor 000 not available [ 98.317480][ T6030] Invalid ELF header magic: != ELF [ 98.648305][ T6038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.473566][ T6041] netlink: 342 bytes leftover after parsing attributes in process `syz.1.23'. [ 99.535152][ T6047] sp0: Synchronizing with TNC [ 99.727947][ T6058] ubi0: attaching mtd0 [ 99.735767][ T6058] ubi0: scanning is finished [ 99.740955][ T6058] ubi0: empty MTD device detected [ 100.036503][ T6058] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.046660][ T6058] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.069215][ T6058] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.081337][ T6058] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 100.119422][ T6058] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.166653][ T6058] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.184119][ T6058] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 787673745 [ 100.230955][ T6058] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.259523][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.328237][ T6061] ubi0: detaching mtd0 [ 100.369732][ T6061] ubi0: mtd0 is detached [ 100.943607][ T6077] svc: failed to register nfsdv3 RPC service (errno 111). [ 100.980463][ T6077] svc: failed to register nfsaclv3 RPC service (errno 111). [ 101.745954][ T6099] mmap: syz.0.30 (6099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.893935][ T6105] capability: warning: `syz.0.31' uses 32-bit capabilities (legacy support in use) [ 102.068024][ T6104] process 'syz.3.32' launched './file0' with NULL argv: empty string added [ 102.382284][ T6115] FAULT_INJECTION: forcing a failure. [ 102.382284][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 102.413179][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 102.413200][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.413208][ T6115] Call Trace: [ 102.413214][ T6115] [ 102.413219][ T6115] dump_stack_lvl+0x16c/0x1f0 [ 102.413241][ T6115] should_fail_ex+0x512/0x640 [ 102.413256][ T6115] ? kmem_cache_alloc_noprof+0x62/0x760 [ 102.413278][ T6115] should_failslab+0xc2/0x120 [ 102.413295][ T6115] kmem_cache_alloc_noprof+0x75/0x760 [ 102.413313][ T6115] ? __pfx_acct_collect+0x10/0x10 [ 102.413325][ T6115] ? taskstats_exit+0x654/0xbe0 [ 102.413341][ T6115] ? taskstats_exit+0x654/0xbe0 [ 102.413352][ T6115] taskstats_exit+0x654/0xbe0 [ 102.413366][ T6115] ? __pfx_taskstats_exit+0x10/0x10 [ 102.413381][ T6115] ? exit_signals+0x388/0xb00 [ 102.413403][ T6115] do_exit+0x5e4/0x2bd0 [ 102.413422][ T6115] ? __pfx_do_exit+0x10/0x10 [ 102.413436][ T6115] ? do_raw_spin_lock+0x12c/0x2b0 [ 102.413454][ T6115] ? find_held_lock+0x2b/0x80 [ 102.413478][ T6115] do_group_exit+0xd3/0x2a0 [ 102.413501][ T6115] get_signal+0x2671/0x26d0 [ 102.413527][ T6115] ? __pfx_get_signal+0x10/0x10 [ 102.413548][ T6115] ? do_futex+0x122/0x350 [ 102.413567][ T6115] arch_do_signal_or_restart+0x8f/0x7a0 [ 102.413589][ T6115] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.413614][ T6115] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.413635][ T6115] exit_to_user_mode_loop+0x8c/0x540 [ 102.413657][ T6115] do_syscall_64+0x4ee/0xf80 [ 102.413673][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.413686][ T6115] RIP: 0033:0x7f4d6678f7c9 [ 102.413698][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.413711][ T6115] RSP: 002b:00007f4d649f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.413724][ T6115] RAX: fffffffffffffe00 RBX: 00007f4d669e5fa8 RCX: 00007f4d6678f7c9 [ 102.413732][ T6115] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d669e5fa8 [ 102.413740][ T6115] RBP: 00007f4d669e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.413748][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.413756][ T6115] R13: 00007f4d669e6038 R14: 00007ffea5285000 R15: 00007ffea52850e8 [ 102.413774][ T6115] [ 102.890928][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 105.074891][ T6190] sg_read: process 50 (syz.1.48) changed security contexts after opening file descriptor, this is not allowed. [ 105.355950][ T6197] UHID_CREATE from different security context by process 38 (syz.2.49), this is not allowed. [ 105.434271][ T6203] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 105.940908][ T6207] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 108.557056][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 108.650902][ T6243] netlink: 326 bytes leftover after parsing attributes in process `syz.2.60'. [ 109.534437][ T6263] syz.3.64 uses obsolete (PF_INET,SOCK_PACKET) [ 109.583162][ T6262] input: 00 [ 109.583162][ T6262] as /devices/virtual/input/input9 [ 110.779907][ T6302] random: crng reseeded on system resumption [ 110.916153][ T6299] hub 1-0:1.0: USB hub found [ 110.958173][ T6299] hub 1-0:1.0: 1 port detected [ 111.729265][ T6320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.021127][ T6325] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.296832][ T30] audit: type=1800 audit(1764949670.311:2): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.77" name="dbroot" dev="configfs" ino=10663 res=0 errno=0 [ 112.447271][ T6052] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 112.555158][ T6336] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 112.581128][ T6336] device-mapper: ioctl: Invalid ioctl structure: name , dev 200010007 [ 113.586691][ T5839] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 113.586708][ T6052] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.369346][ T6370] random: crng reseeded on system resumption [ 114.454308][ T6366] zswap: compressor not available [ 115.666665][ T6052] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.666764][ T5839] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 115.804032][ T6403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.142715][ T6407] warning: `syz.0.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.269186][ T6411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.917918][ C1] ------------[ cut here ]------------ [ 116.923698][ C1] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#1: ksoftirqd/1/23 [ 116.934009][ C1] Modules linked in: [ 116.938055][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 116.947619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.957736][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 116.963583][ C1] Code: 89 ee e8 f8 53 6e f6 40 84 ed 75 21 e8 9e 59 6e f6 44 89 fe bf 07 00 00 00 e8 41 54 6e f6 41 83 ff 07 74 09 e8 86 59 6e f6 90 <0f> 0b 90 e8 7d 59 6e f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6 [ 116.983360][ C1] RSP: 0018:ffffc900001d7310 EFLAGS: 00010246 [ 116.989460][ C1] RAX: 0000000000000000 RBX: ffff888079ab0cc0 RCX: ffffffff8b4f3edf [ 116.997549][ C1] RDX: ffff88801dac5b80 RSI: ffffffff8b4f3eea RDI: 0000000000000005 [ 117.005633][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 117.013798][ C1] R10: 0000000000000004 R11: 00000000a2c7994d R12: ffff88803206ec00 [ 117.021895][ C1] R13: 1ffff9200003ae62 R14: ffff88807d635000 R15: 0000000000000004 [ 117.029940][ C1] FS: 0000000000000000(0000) GS:ffff888124a67000(0000) knlGS:0000000000000000 [ 117.038927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.045634][ C1] CR2: 0000000000506000 CR3: 000000007a488000 CR4: 00000000003526f0 [ 117.053638][ C1] Call Trace: [ 117.056954][ C1] [ 117.059887][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 117.065436][ C1] ? tcp_data_ecn_check+0x54/0x740 [ 117.070582][ C1] tcp_data_ready+0x110/0x5a0 [ 117.075355][ C1] tcp_data_queue+0x1aa6/0x5000 [ 117.080255][ C1] ? tcp_urg+0x10f/0xb80 [ 117.084506][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 117.089758][ C1] ? tcp_parse_options+0x11e0/0x1250 [ 117.095047][ C1] tcp_rcv_state_process+0xfb6/0x6490 [ 117.100451][ C1] ? lock_acquire+0x179/0x330 [ 117.105143][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 117.111142][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 117.116375][ C1] ? lock_acquire+0x179/0x330 [ 117.121233][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.126275][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 117.131161][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 117.135858][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 117.140414][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 117.145466][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 117.151085][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 117.155948][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 117.161458][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 117.166973][ C1] ip_local_deliver+0x18e/0x1f0 [ 117.171850][ C1] ip_rcv+0x2e0/0x600 [ 117.175936][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 117.180531][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 117.186443][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 117.193172][ C1] ? lock_acquire+0x179/0x330 [ 117.197898][ C1] ? process_backlog+0x450/0x1650 [ 117.202939][ C1] __netif_receive_skb+0x1d/0x160 [ 117.208005][ C1] process_backlog+0x4a2/0x1650 [ 117.212955][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 117.218358][ C1] net_rx_action+0x9f9/0xfa0 [ 117.222963][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 117.228191][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.232969][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 117.238810][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.244010][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 117.249247][ C1] ? sched_clock+0x38/0x60 [ 117.253712][ C1] ? sched_clock_cpu+0x6c/0x530 [ 117.258694][ C1] handle_softirqs+0x219/0x8b0 [ 117.263517][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.268888][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 117.274034][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 117.279184][ C1] run_ksoftirqd+0x3a/0x60 [ 117.283614][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 117.288586][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 117.294042][ C1] kthread+0x3c5/0x780 [ 117.298145][ C1] ? __pfx_kthread+0x10/0x10 [ 117.302775][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.307999][ C1] ? __pfx_kthread+0x10/0x10 [ 117.312601][ C1] ret_from_fork+0x983/0xb10 [ 117.317217][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.322415][ C1] ? __switch_to+0x7af/0x10d0 [ 117.327119][ C1] ? __pfx_kthread+0x10/0x10 [ 117.331747][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.336610][ C1] [ 117.339671][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.347031][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 117.356225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.366273][ C1] Call Trace: [ 117.369545][ C1] [ 117.372471][ C1] dump_stack_lvl+0x3d/0x1f0 [ 117.377087][ C1] vpanic+0x640/0x6f0 [ 117.381092][ C1] ? subflow_data_ready+0x40b/0x790 [ 117.386297][ C1] panic+0xca/0xd0 [ 117.390023][ C1] ? __pfx_panic+0x10/0x10 [ 117.394770][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 117.399936][ C1] check_panic_on_warn+0xab/0xb0 [ 117.404923][ C1] __warn+0x108/0x3c0 [ 117.408936][ C1] __report_bug+0x2a0/0x520 [ 117.413476][ C1] ? subflow_data_ready+0x40b/0x790 [ 117.418868][ C1] ? __pfx___report_bug+0x10/0x10 [ 117.424009][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 117.429921][ C1] ? __ip_queue_xmit+0x94d/0x2330 [ 117.434963][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.440883][ C1] ? mptcp_get_options+0x19c/0x2af0 [ 117.446111][ C1] ? _raw_spin_unlock_irq+0x32/0x50 [ 117.451334][ C1] ? subflow_data_ready+0x40b/0x790 [ 117.456557][ C1] report_bug+0xb2/0x220 [ 117.460829][ C1] ? subflow_data_ready+0x40b/0x790 [ 117.466087][ C1] handle_bug+0x127/0x260 [ 117.470447][ C1] exc_invalid_op+0x17/0x50 [ 117.474981][ C1] asm_exc_invalid_op+0x1a/0x20 [ 117.479862][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 117.485802][ C1] Code: 89 ee e8 f8 53 6e f6 40 84 ed 75 21 e8 9e 59 6e f6 44 89 fe bf 07 00 00 00 e8 41 54 6e f6 41 83 ff 07 74 09 e8 86 59 6e f6 90 <0f> 0b 90 e8 7d 59 6e f6 48 89 df e8 35 ae ff ff 31 ff 89 c5 89 c6 [ 117.505431][ C1] RSP: 0018:ffffc900001d7310 EFLAGS: 00010246 [ 117.511515][ C1] RAX: 0000000000000000 RBX: ffff888079ab0cc0 RCX: ffffffff8b4f3edf [ 117.519494][ C1] RDX: ffff88801dac5b80 RSI: ffffffff8b4f3eea RDI: 0000000000000005 [ 117.527477][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 117.535448][ C1] R10: 0000000000000004 R11: 00000000a2c7994d R12: ffff88803206ec00 [ 117.543432][ C1] R13: 1ffff9200003ae62 R14: ffff88807d635000 R15: 0000000000000004 [ 117.551422][ C1] ? subflow_data_ready+0x3ff/0x790 [ 117.556637][ C1] ? subflow_data_ready+0x40a/0x790 [ 117.561940][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 117.567592][ C1] ? tcp_data_ecn_check+0x54/0x740 [ 117.572718][ C1] tcp_data_ready+0x110/0x5a0 [ 117.577411][ C1] tcp_data_queue+0x1aa6/0x5000 [ 117.582297][ C1] ? tcp_urg+0x10f/0xb80 [ 117.586560][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 117.591795][ C1] ? tcp_parse_options+0x11e0/0x1250 [ 117.597153][ C1] tcp_rcv_state_process+0xfb6/0x6490 [ 117.602647][ C1] ? lock_acquire+0x179/0x330 [ 117.607358][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 117.613208][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 117.618448][ C1] ? lock_acquire+0x179/0x330 [ 117.623160][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.628208][ C1] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 117.633083][ C1] tcp_v4_do_rcv+0x68e/0x10a0 [ 117.637954][ C1] tcp_v4_rcv+0x3077/0x4db0 [ 117.642499][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 117.647380][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 117.652888][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 117.657759][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 117.663157][ C1] ip_local_deliver_finish+0x3f2/0x720 [ 117.668647][ C1] ip_local_deliver+0x18e/0x1f0 [ 117.673523][ C1] ip_rcv+0x2e0/0x600 [ 117.677648][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 117.682360][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 117.688379][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 117.694821][ C1] ? lock_acquire+0x179/0x330 [ 117.699562][ C1] ? process_backlog+0x450/0x1650 [ 117.704617][ C1] __netif_receive_skb+0x1d/0x160 [ 117.709674][ C1] process_backlog+0x4a2/0x1650 [ 117.714550][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 117.719944][ C1] net_rx_action+0x9f9/0xfa0 [ 117.724558][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 117.729685][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.734456][ C1] ? finish_task_switch.isra.0+0x207/0xbd0 [ 117.740287][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.745616][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 117.750822][ C1] ? sched_clock+0x38/0x60 [ 117.755260][ C1] ? sched_clock_cpu+0x6c/0x530 [ 117.760142][ C1] handle_softirqs+0x219/0x8b0 [ 117.765021][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 117.770335][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 117.775516][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 117.780637][ C1] run_ksoftirqd+0x3a/0x60 [ 117.785083][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 117.790033][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 117.795597][ C1] kthread+0x3c5/0x780 [ 117.799683][ C1] ? __pfx_kthread+0x10/0x10 [ 117.804332][ C1] ? rcu_is_watching+0x12/0xc0 [ 117.809105][ C1] ? __pfx_kthread+0x10/0x10 [ 117.813715][ C1] ret_from_fork+0x983/0xb10 [ 117.818321][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 117.823789][ C1] ? __switch_to+0x7af/0x10d0 [ 117.828494][ C1] ? __pfx_kthread+0x10/0x10 [ 117.833101][ C1] ret_from_fork_asm+0x1a/0x30 [ 117.837913][ C1] [ 117.841405][ C1] Kernel Offset: disabled [ 117.845745][ C1] Rebooting in 86400 seconds..