last executing test programs: 8.315560007s ago: executing program 3 (id=491): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) 7.620093345s ago: executing program 0 (id=494): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio14\x00', 0x80000, 0x0) ioctl$auto(r2, 0x80885659, r2) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r3, 0x8) write$auto(r1, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 7.171262906s ago: executing program 3 (id=496): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x123102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="08002dbd7000fddbdf250e000000050012004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x80000001}, 0x3, &(0x7f0000002a40)={0x0, 0x8}, 0x80, 0xffbffffffffffff8) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000500)=""/186, 0xba) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250200000014000c00ff0100"/38], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000280)="e1e9aa10bbd3fcc26a2f1e0207d2c3b7a755080863b4b752d8811e6d6d0e012e5951d234c99a5e0295c82d98aedbdfeecc59c284c49d0d70ab8514722bb3349cb19bc858688c97190e9767a66182e77acaa89256903a330778681e1623d6f7126ddb649c", 0x64) socket(0xa, 0x1, 0x84) 6.003968772s ago: executing program 1 (id=498): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, 0x0) socket(0x22, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x40000000000401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x4]}, 0x1, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24048000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 5.745171305s ago: executing program 0 (id=499): sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/wlan0/route_localnet\x00', 0xd7a185e906c5fc10, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) r2 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim0/psample/out_tc_occ_max\x00', 0x800000, 0x0) write$auto_fops_u64_(r2, &(0x7f0000000480)="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", 0xfa) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv6/conf/veth1_vlan/force_tllao\x00', 0x4daa80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) r4 = socket(0x15, 0xa, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x165a00, 0x0) setsockopt$auto(r4, 0x110, 0x7, 0x0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) 5.022200293s ago: executing program 3 (id=500): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x40000000000401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x4]}, 0x1, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24048000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 4.939452326s ago: executing program 0 (id=501): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0xa, 0x200503a) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(r0, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x1, 0x8001}]}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyr4\x00', 0x8800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x301443, 0x10) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/vp_vdpa/version\x00', 0x191e42, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='\x0e\x00\x1e\x96q\x87\xf5\xc4\xd3%Qq\'mR>\xc5\xc4b\xda\xd5S&\x9e^\xc9\x0fsH^\x82+\xfcR\t?\xef0M`,9@\xe2\xf6B!', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x83}, 0x1, 0x0, 0x0, 0x44041}, 0x4000000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0xa40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, r2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x325d42, 0x0) 4.899431721s ago: executing program 2 (id=502): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x40000000000401bf, 0x7352, 0x31, 0x8000, 0x9, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x4]}, 0x1, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24048000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 4.546455646s ago: executing program 1 (id=503): sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586a", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000004c0)) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), r0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xfffffff4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xe6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xe63a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x88000) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.457941153s ago: executing program 0 (id=504): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) read$auto(0xffffffffffffffff, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) ioctl$auto(0xffffffffffffffff, 0x80885659, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r1, 0x8) 3.890202429s ago: executing program 1 (id=505): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) read$auto(0xffffffffffffffff, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio14\x00', 0x80000, 0x0) ioctl$auto(r1, 0x80885659, r1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r2, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 3.478567647s ago: executing program 0 (id=506): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1d, 0x2, 0x10006) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0xa, 0x800, 0xe) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x16d080, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x5, @broadcast}, 0x50) (async) bind$auto(r1, &(0x7f0000000080)=@generic={0x1d, 'my\b\x00\x00\x00\x00\x00\x00\x00\f\x00'}, 0x13) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, 0x0, 0x48080) (async) socket(0x10, 0x6, 0x2) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2500000008000300000000360500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x200d02, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) 3.446879721s ago: executing program 2 (id=507): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x184, 0x1a, 0x0, 0x0) write$auto(r0, 0x0, 0x10007c) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0xfffffffffffffff9, 0x2, 0x9, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) connect$auto(r3, &(0x7f00000001c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xb) madvise$auto(0x1, 0x8, 0x1) madvise$auto(0x3, 0x2, 0x2) madvise$auto(0x2, 0x2, 0x8) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0xffffffffffffffff, 0x4, 0xf) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) r6 = clone$auto(0x20003b4b, 0xa, 0x0, 0x0, 0x10) fsopen$auto(&(0x7f0000000280)='\'\x00', 0x96d) process_vm_writev$auto(0x0, &(0x7f0000002980)={0x0, 0x804}, 0x3, &(0x7f00000002c0)={0x0, 0x100000004007}, 0x9, 0x0) r7 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/oom_score_adj\x00', 0x102, 0x0) read$auto(r7, 0x0, 0x7fff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000440)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "7e6b5a81e80eec78e180393fc668039dd8b8b4516b2277d9b37056af8f2f24ba9064323a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) newfstatat$auto(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x1, 0x0, 0x8, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x2, 0x1, 0xd, 0x9, 0x8, 0x8, 0xf7, 0xfffffffffffff7b3}, 0xfffeffff) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a0040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="64d4c961a950761358b56ff5cb5ce9a5ae6704edcf4f78521ad3250cf2c4a1af928a187b21293dee0e51a5574fe2b8a48f4b73f91264b65ea90cf958514ca1ab6302b33c29663bdef192e8a74eef373831fa095f800d0a474857e873e928e6d6aabdbe3de60f0397d63991d18ebea284ceb6294842fbb7f457cf633e05deea96b69880f7e36acb26ab4cc7d879ef0793d33af70f5df5271ad1b7baee909e1a7a538ae1675ea8a6c669f8a30c00be000e000000000000000400e38008006200", @ANYRESDEC=r2, @ANYBLOB='\x00\b\x00S\x00', @ANYRES32=r10, @ANYBLOB="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"], 0x4a0}, 0x1, 0x0, 0x0, 0x40000}, 0x81) write$auto(0x3, 0x0, 0xfffffdef) 3.157704243s ago: executing program 2 (id=508): mmap$auto(0x4000, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppoe\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x5, 0x1) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x20000, 0x0) 2.958166274s ago: executing program 2 (id=509): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x123102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="08002dbd7000fddbdf250e000000050012004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x80000001}, 0x3, &(0x7f0000002a40)={0x0, 0x8}, 0x80, 0xffbffffffffffff8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r6) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250200000014000c00ff0100"/38], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000280)="e1e9aa10bbd3fcc26a2f1e0207d2c3b7a755080863b4b752d8811e6d6d0e012e5951d234c99a5e0295c82d98aedbdfeecc59c284c49d0d70ab8514722bb3349cb19bc858688c97190e9767a66182e77acaa89256903a330778681e1623d6f7126ddb649c", 0x64) socket(0xa, 0x1, 0x84) 2.761670208s ago: executing program 1 (id=510): sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyyb\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000ca858c4e1e6aa90920080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xfffffffffffffffd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x202000b, 0x2, 0xf8, 0xffffffffffffffff, 0x8000) inotify_init1$auto(0x3000000000000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x9, 0xd3e, 0x1, 0x948b, 0x2, 0x95f4da0a, 0x7f3, 0xe07, 0x8000000000000001, 0x2a61, 0x6, 0x8, 0x9, 0x6, 0x4]}, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) 2.671527073s ago: executing program 3 (id=511): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) statmount$auto(0x0, 0x0, 0x9, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x4000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto_SO_PASSPIDFD(r2, 0x3, 0x4c, &(0x7f0000000040)=']\x19\xff]\x00', 0x402) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20000000) 2.336663685s ago: executing program 0 (id=512): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x123102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="08002dbd7000fddbdf250e000000050012004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x80000001}, 0x3, &(0x7f0000002a40)={0x0, 0x8}, 0x80, 0xffbffffffffffff8) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000500)=""/186, 0xba) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250200000014000c00ff0100"/38], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000000280)="e1e9aa10bbd3fcc26a2f1e0207d2c3b7a755080863b4b752d8811e6d6d0e012e5951d234c99a5e0295c82d98aedbdfeecc59c284c49d0d70ab8514722bb3349cb19bc858688c97190e9767a66182e77acaa89256903a330778681e1623d6f7126ddb649c", 0x64) socket(0xa, 0x1, 0x84) 918.437523ms ago: executing program 1 (id=513): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(r2, 0x401c5504, r2) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1f482e11f4423755, 0x200, 0x25dfdbfb}, 0x14}}, 0x4004010) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) ustat$auto(0x801, 0x0) open(0x0, 0x163b40, 0x175) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r4) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x17}]}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x300080d5}, 0x4001) r7 = socket(0x28, 0x800, 0x5) socket(0x11, 0x80003, 0x300) sendmmsg$auto(r7, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x5b0}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 690.698404ms ago: executing program 2 (id=514): sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586a", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) ioctl$auto_SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000004c0)) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), r0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xfffffff4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xe6}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xe63a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x88000) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 482.922884ms ago: executing program 1 (id=515): socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 438.82326ms ago: executing program 3 (id=516): mmap$auto(0x0, 0x100020005, 0xe2, 0x1e, 0xffffffffffffffff, 0x8000) geteuid() (async) setresuid$auto(0x0, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) r1 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/make-it-fail\x00', 0x101081, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x5) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc3\x00', 0x40001, 0x0) ioctl$auto(r2, 0x5424, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x5, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000070, 0x1, 0x8003}]}) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r3, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000002500)=ANY=[], 0x103c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x2048a1, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 389.924032ms ago: executing program 2 (id=517): socket(0x1d, 0x3, 0x1) r0 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = setfsuid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x6a) r3 = getpid() mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) rt_sigpending$auto(0x0, 0x8) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) madvise$auto(0x2, 0x99c5, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0xe22, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r2) r4 = clone3$auto(&(0x7f0000000040)={0x2, 0x80000000, 0x11, 0x0, 0xfffffffffffffffc, 0x7, 0x107, 0x2, 0x9, 0x3, 0x1}, 0x5) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000a40)={0x6f8, r1, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x294, 0x3, 0x0, 0x1, [@nested={0x167, 0xe5, 0x0, 0x1, [@generic="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", @generic="dd6543f9a7a618fba08afa571b412feea4c8907fd85ac254a2e3ea36506e8455b47ec5dc", @nested={0x4, 0x103}, @nested={0x4, 0xcf}, @nested={0x4, 0xa}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="cf9be6d8a046cd63b459ea8535740e712090c50f4d89cf8a3b968b4c2e559ed135dd43a336a8807590ff1b9c23ed8b"]}, @nested={0x128, 0x15, 0x0, 0x1, [@generic="0e8ab0b82ddf85db19cbb7a9e08f623abb9b05ced6e1938a8a6611b781aa7a28fdb67400525a112cbc0603193fcf3045e8874b0805818b8f49ead62c6cdee9d2dbe3c77a633ae8bf87f2434b6f9c666dcd4ae51549618913f20f267645b80c0978098b06ce5c", @typed={0x8, 0x158, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x4f}, @typed={0x8, 0x135, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x130}, @generic="105c582aa7bc44bdbf9db7c3339c9a0c17a68c8030ba443325d3aa4f7133a2b586eff12daae4e431b5fa97fc6a162d8f9e73fb51fa7c8a53512e792b4f38322b6dc036c7173b332d599862ac57416013f318beb8d5", @generic="220524a220de7260174b7a03d4eaa81ec1eb6fd21b1020986d2c77ffc1a8c23239a726e3092c57feb2abc5ff0de97a3a4181be07f87e7c7a76024dc87ddf296b66", @nested={0x4, 0x33}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1d8, 0x3, 0x0, 0x1, [@generic="e2984c4e72f91a700e43ebfb8d06d2429a9b809ccdf9a9dafa5af706fbcecdb156dd26efe7ad830b8063487c500d46f13a531add58ced49f7d469f1e4a1f628ff492d3981aa16af51c154da94abb5b3edcfbbbed99918a6cdd17188fe9d030acf6dfd9d0c6f4cb1b58a7ee9a00d02788e10b7da5ca24725058a21e7b28a49f765cd0fc48189bd0560c09ace8575e94b98e7c37d6803544a312cf241f5d40f29da1befef4c3642bfd4457f98378562c0e83277cb89070d1767d4496f48f1d397c", @generic="c1060bf5089c865e1b9f5e6e93b30cfbdf77a36b18b707b7e08a4adb26b432e421102042b31981484ce3e05208453b23e723a0da4b873fe91b11d94f68dcb44796bc9c17c82e64ede298f5514eabb9c5b92d5bccf553d5be4f3576c55a34dee6f03933677724df6f406784e2c0c07c536ca8f4b7fb140b6a17d8adc29de07e3ad55fb8198ce7e9914564fabd99a74cfe80d3fb1d831b40ebbf14426da093ed581418414dce299cb4d0531c6ccbb90e", @generic="f6ae104f7e7b98ea7204ca3d68fa6fd3750857820d9db57793bacc05fb43f89a13175baa5e382613a696c7e4fc3d6e9d977077d16b6886cbb58253b195d7bcac991af8d74eebf68834d3b205a36265fc9a", @nested={0xc, 0x38, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x25f, 0x1, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}, @generic="3eea01a710f60afae1d047687d48eb40cbe907bd01017f279d4e1c8df23f8a308a11a69f9606a84baf5b44ae7ed850d19672fd963bbccc0d1e457e6dedb35c8967375200793f0bbabb", @generic="3b12132b74e26ad8d0e63d155fc84bf6a5b6849eb048275921ded7790ab6b91cb480fa7527b3e411bf45c5c37ec617d4480fb5ed5e14922f5c7fb7acf844b5926f686fc856fb4191758bff64404ecac08466893489d7e53948c3f323b08320b604c9f79c73403f17687b8625ade4edf97c6e62a3065ff506b29a42c923be746c2fc17758158a7674bd2addfee47b", @nested={0xea, 0x38, 0x0, 0x1, [@generic="45cbd7b8344b9bcb78df429291b0b0e45cbcc52cb31a59a4e4a264f8e7509a38058c80b2a9d9e0c2bdf6e7de779550979c208989f18558a6f1142aed5d575a139bd9ba3ae6c1a7406b3a111173eea33a76b47108126412d269f08ea7f60f30f399a044b6a8f1e119cd3de4b90e24371829de0900c5941bb99bf7c09299e816eea6a4051fde2ad96652c9240829fe1dd64819c626a538085472a863c2c61f242813b846931ee2c691e1803b0d240cc7752aca9de3f1d4ad1ff5e821a014aadc8d02882ba3a59a43014eae27b45d1df491058dcf74eb92d39695d6765dc1aa1ea0daadbcac41fe"]}, @generic="8f306b4fa6102758403deea41be67700d5e47c3a51a25490257b5c5e24d49d10bcf80b9064074b9f94bc5ee662a8cab1690b2037627014966a6ab55797893b55796f0d33d0a32bc56b6643c27affa71e2fb4ac1ed5680765f57e5d60a8836f488ded4852ea813f0ac4182936b0c349a9f0e5f473856a9b148c91a594a4c63f014e627421e16b7607"]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x20000800}, 0x14) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x240100, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 0s ago: executing program 3 (id=518): socket(0x1d, 0x3, 0x1) r0 = socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = setfsuid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x6a) r3 = getpid() mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) rt_sigpending$auto(0x0, 0x8) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) madvise$auto(0x2, 0x99c5, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0xe22, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r2) r4 = clone3$auto(&(0x7f0000000040)={0x2, 0x80000000, 0x11, 0x0, 0xfffffffffffffffc, 0x7, 0x107, 0x2, 0x9, 0x3, 0x1}, 0x5) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000a40)={0x6f8, r1, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x294, 0x3, 0x0, 0x1, [@nested={0x167, 0xe5, 0x0, 0x1, [@generic="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", @generic="dd6543f9a7a618fba08afa571b412feea4c8907fd85ac254a2e3ea36506e8455b47ec5dc", @nested={0x4, 0x103}, @nested={0x4, 0xcf}, @nested={0x4, 0xa}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="cf9be6d8a046cd63b459ea8535740e712090c50f4d89cf8a3b968b4c2e559ed135dd43a336a8807590ff1b9c23ed8b"]}, @nested={0x128, 0x15, 0x0, 0x1, [@generic="0e8ab0b82ddf85db19cbb7a9e08f623abb9b05ced6e1938a8a6611b781aa7a28fdb67400525a112cbc0603193fcf3045e8874b0805818b8f49ead62c6cdee9d2dbe3c77a633ae8bf87f2434b6f9c666dcd4ae51549618913f20f267645b80c0978098b06ce5c", @typed={0x8, 0x158, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x4f}, @typed={0x8, 0x135, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x130}, @generic="105c582aa7bc44bdbf9db7c3339c9a0c17a68c8030ba443325d3aa4f7133a2b586eff12daae4e431b5fa97fc6a162d8f9e73fb51fa7c8a53512e792b4f38322b6dc036c7173b332d599862ac57416013f318beb8d5", @generic="220524a220de7260174b7a03d4eaa81ec1eb6fd21b1020986d2c77ffc1a8c23239a726e3092c57feb2abc5ff0de97a3a4181be07f87e7c7a76024dc87ddf296b66", @nested={0x4, 0x33}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1d8, 0x3, 0x0, 0x1, [@generic="e2984c4e72f91a700e43ebfb8d06d2429a9b809ccdf9a9dafa5af706fbcecdb156dd26efe7ad830b8063487c500d46f13a531add58ced49f7d469f1e4a1f628ff492d3981aa16af51c154da94abb5b3edcfbbbed99918a6cdd17188fe9d030acf6dfd9d0c6f4cb1b58a7ee9a00d02788e10b7da5ca24725058a21e7b28a49f765cd0fc48189bd0560c09ace8575e94b98e7c37d6803544a312cf241f5d40f29da1befef4c3642bfd4457f98378562c0e83277cb89070d1767d4496f48f1d397c", @generic="c1060bf5089c865e1b9f5e6e93b30cfbdf77a36b18b707b7e08a4adb26b432e421102042b31981484ce3e05208453b23e723a0da4b873fe91b11d94f68dcb44796bc9c17c82e64ede298f5514eabb9c5b92d5bccf553d5be4f3576c55a34dee6f03933677724df6f406784e2c0c07c536ca8f4b7fb140b6a17d8adc29de07e3ad55fb8198ce7e9914564fabd99a74cfe80d3fb1d831b40ebbf14426da093ed581418414dce299cb4d0531c6ccbb90e", @generic="f6ae104f7e7b98ea7204ca3d68fa6fd3750857820d9db57793bacc05fb43f89a13175baa5e382613a696c7e4fc3d6e9d977077d16b6886cbb58253b195d7bcac991af8d74eebf68834d3b205a36265fc9a", @nested={0xc, 0x38, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x25f, 0x1, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=r2}, @generic="3eea01a710f60afae1d047687d48eb40cbe907bd01017f279d4e1c8df23f8a308a11a69f9606a84baf5b44ae7ed850d19672fd963bbccc0d1e457e6dedb35c8967375200793f0bbabb", @generic="3b12132b74e26ad8d0e63d155fc84bf6a5b6849eb048275921ded7790ab6b91cb480fa7527b3e411bf45c5c37ec617d4480fb5ed5e14922f5c7fb7acf844b5926f686fc856fb4191758bff64404ecac08466893489d7e53948c3f323b08320b604c9f79c73403f17687b8625ade4edf97c6e62a3065ff506b29a42c923be746c2fc17758158a7674bd2addfee47b", @nested={0xea, 0x38, 0x0, 0x1, [@generic="45cbd7b8344b9bcb78df429291b0b0e45cbcc52cb31a59a4e4a264f8e7509a38058c80b2a9d9e0c2bdf6e7de779550979c208989f18558a6f1142aed5d575a139bd9ba3ae6c1a7406b3a111173eea33a76b47108126412d269f08ea7f60f30f399a044b6a8f1e119cd3de4b90e24371829de0900c5941bb99bf7c09299e816eea6a4051fde2ad96652c9240829fe1dd64819c626a538085472a863c2c61f242813b846931ee2c691e1803b0d240cc7752aca9de3f1d4ad1ff5e821a014aadc8d02882ba3a59a43014eae27b45d1df491058dcf74eb92d39695d6765dc1aa1ea0daadbcac41fe"]}, @generic="8f306b4fa6102758403deea41be67700d5e47c3a51a25490257b5c5e24d49d10bcf80b9064074b9f94bc5ee662a8cab1690b2037627014966a6ab55797893b55796f0d33d0a32bc56b6643c27affa71e2fb4ac1ed5680765f57e5d60a8836f488ded4852ea813f0ac4182936b0c349a9f0e5f473856a9b148c91a594a4c63f014e627421e16b7607"]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x20000800}, 0x14) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x240100, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 76.827587][ T5623] cgroup: Unknown subsys name 'net' [ 76.940551][ T5623] cgroup: Unknown subsys name 'cpuset' [ 76.949295][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.381115][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.233753][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.245620][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.257354][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.270926][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.279512][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.288901][ T4951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.298841][ T4951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.310015][ T4951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.322691][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.333646][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.370175][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.380246][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.391530][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.391623][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.402136][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.414194][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.424011][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.433151][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.449789][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.462148][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.896826][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.904213][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.913905][ T5634] bridge_slave_0: entered allmulticast mode [ 81.921678][ T5634] bridge_slave_0: entered promiscuous mode [ 81.952226][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.959511][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.967351][ T5634] bridge_slave_1: entered allmulticast mode [ 81.974460][ T5634] bridge_slave_1: entered promiscuous mode [ 82.079228][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.113781][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.138089][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146628][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.153974][ T5638] bridge_slave_0: entered allmulticast mode [ 82.161066][ T5638] bridge_slave_0: entered promiscuous mode [ 82.206222][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.215153][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.223052][ T5638] bridge_slave_1: entered allmulticast mode [ 82.230107][ T5638] bridge_slave_1: entered promiscuous mode [ 82.245465][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.252790][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.260626][ T5643] bridge_slave_0: entered allmulticast mode [ 82.267902][ T5643] bridge_slave_0: entered promiscuous mode [ 82.294132][ T5634] team0: Port device team_slave_0 added [ 82.300048][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.307377][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.314566][ T5643] bridge_slave_1: entered allmulticast mode [ 82.322707][ T5643] bridge_slave_1: entered promiscuous mode [ 82.329617][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.336755][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.338005][ T5636] Bluetooth: hci0: command tx timeout [ 82.344752][ T5644] bridge_slave_0: entered allmulticast mode [ 82.356306][ T5644] bridge_slave_0: entered promiscuous mode [ 82.376123][ T5634] team0: Port device team_slave_1 added [ 82.392710][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.400092][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.407352][ T5644] bridge_slave_1: entered allmulticast mode [ 82.414377][ T5644] bridge_slave_1: entered promiscuous mode [ 82.420906][ T5636] Bluetooth: hci1: command tx timeout [ 82.430327][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.472838][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.498210][ T5636] Bluetooth: hci3: command tx timeout [ 82.504514][ T50] Bluetooth: hci2: command tx timeout [ 82.510427][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.533022][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.540042][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.566230][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.592602][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.605024][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.615474][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.622630][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.648652][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.661510][ T5638] team0: Port device team_slave_0 added [ 82.678030][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.699375][ T5638] team0: Port device team_slave_1 added [ 82.753066][ T5643] team0: Port device team_slave_0 added [ 82.760981][ T5644] team0: Port device team_slave_0 added [ 82.790458][ T5643] team0: Port device team_slave_1 added [ 82.798251][ T5644] team0: Port device team_slave_1 added [ 82.814985][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.823303][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.849441][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.889340][ T5634] hsr_slave_0: entered promiscuous mode [ 82.895897][ T5634] hsr_slave_1: entered promiscuous mode [ 82.903297][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.910313][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.936288][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.968445][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.975540][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.001540][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.021486][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.028700][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.054645][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.076152][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.083241][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.110988][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.123506][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.130675][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.156984][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.230244][ T5638] hsr_slave_0: entered promiscuous mode [ 83.237646][ T5638] hsr_slave_1: entered promiscuous mode [ 83.244672][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 83.250562][ T5638] Cannot create hsr debugfs directory [ 83.316761][ T5644] hsr_slave_0: entered promiscuous mode [ 83.323340][ T5644] hsr_slave_1: entered promiscuous mode [ 83.329716][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 83.335456][ T5644] Cannot create hsr debugfs directory [ 83.361796][ T5643] hsr_slave_0: entered promiscuous mode [ 83.368117][ T5643] hsr_slave_1: entered promiscuous mode [ 83.374143][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 83.380026][ T5643] Cannot create hsr debugfs directory [ 83.781322][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.796139][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.804273][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.814827][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.823968][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.833628][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.853393][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.864613][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.934008][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.943873][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.955086][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.966095][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.974255][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.983906][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.003781][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.013364][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.104689][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.115643][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.123994][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.133300][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.150061][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.160110][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.168262][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.178486][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.274464][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.286461][ T5644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.296473][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.306214][ T5644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.316500][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.324699][ T5644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.333944][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.347517][ T5644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.358646][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.403027][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.417285][ T50] Bluetooth: hci0: command tx timeout [ 84.436974][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.445703][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.484511][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.491671][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.499457][ T50] Bluetooth: hci1: command tx timeout [ 84.577781][ T5636] Bluetooth: hci3: command tx timeout [ 84.580231][ T50] Bluetooth: hci2: command tx timeout [ 84.591495][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.675120][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.686167][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.716961][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.724172][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.755513][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.762735][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.793362][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.835778][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843019][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.864560][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871700][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.913647][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.010654][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.046473][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.053747][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.098830][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.106127][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.401153][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.561291][ T5634] veth0_vlan: entered promiscuous mode [ 85.609090][ T5634] veth1_vlan: entered promiscuous mode [ 85.717846][ T5634] veth0_macvtap: entered promiscuous mode [ 85.753201][ T5634] veth1_macvtap: entered promiscuous mode [ 85.825700][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.886490][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.949047][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.988409][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.008180][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.051342][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.164781][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.204094][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.255181][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.262002][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.271647][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.352360][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.364313][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.391793][ T5643] veth0_vlan: entered promiscuous mode [ 86.436282][ T5638] veth0_vlan: entered promiscuous mode [ 86.467186][ T5643] veth1_vlan: entered promiscuous mode [ 86.497903][ T50] Bluetooth: hci0: command tx timeout [ 86.512675][ T5638] veth1_vlan: entered promiscuous mode [ 86.524524][ T5644] veth0_vlan: entered promiscuous mode [ 86.538777][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.570526][ T5638] veth0_macvtap: entered promiscuous mode [ 86.577560][ T50] Bluetooth: hci1: command tx timeout [ 86.606549][ T5643] veth0_macvtap: entered promiscuous mode [ 86.619637][ T5644] veth1_vlan: entered promiscuous mode [ 86.643120][ T5643] veth1_macvtap: entered promiscuous mode [ 86.654128][ T5638] veth1_macvtap: entered promiscuous mode [ 86.660289][ T50] Bluetooth: hci3: command tx timeout [ 86.660314][ T5636] Bluetooth: hci2: command tx timeout [ 86.743724][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.760192][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.762901][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.793885][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.819073][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.841400][ T5644] veth0_macvtap: entered promiscuous mode [ 86.863584][ T3291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.873994][ T3291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.894407][ T5644] veth1_macvtap: entered promiscuous mode [ 86.906501][ T3291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.934952][ T3291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947197][ T3291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.991492][ T3291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.001178][ T3291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.018303][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.072833][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.143639][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.247961][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.290253][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.302332][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.321148][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.336851][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.347940][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.408362][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.425354][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.478517][ T30] audit: type=1800 audit(1780070909.257:2): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5" name="file0" dev="tmpfs" ino=23 res=0 errno=0 [ 87.560684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.593453][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.598525][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.608690][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.687439][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.720508][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.781957][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.798662][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.189428][ T5795] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.218987][ T5795] Zero length message leads to an empty skb [ 88.230481][ T5802] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.316754][ T5798] zswap: compressor not available [ 88.577666][ T5636] Bluetooth: hci0: command tx timeout [ 88.658056][ T5636] Bluetooth: hci1: command tx timeout [ 88.738048][ T50] Bluetooth: hci3: command tx timeout [ 88.743560][ T5636] Bluetooth: hci2: command tx timeout [ 89.453624][ T5813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 89.536100][ T5823] pim6reg: entered allmulticast mode [ 92.054326][ T24] cfg80211: failed to load regulatory.db [ 93.556286][ T5888] pim6reg: entered allmulticast mode [ 94.771521][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'. [ 96.010711][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 97.685345][ T5949] ======================================================= [ 97.685345][ T5949] WARNING: The mand mount option has been deprecated and [ 97.685345][ T5949] and is ignored by this kernel. Remove the mand [ 97.685345][ T5949] option from the mount to silence this warning. [ 97.685345][ T5949] ======================================================= [ 98.214549][ T5956] process 'syz.1.29' launched '/dev/fd/3' with NULL argv: empty string added [ 98.235192][ T5954] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.679273][ T5965] sysfs_service_op_store: Client not running :-5: [ 98.843785][ T5966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.024751][ T5974] syz.2.33 (5974) used greatest stack depth: 18640 bytes left [ 100.146891][ T5976] pim6reg: entered allmulticast mode [ 100.916498][ T5991] FAULT_INJECTION: forcing a failure. [ 100.916498][ T5991] name failslab, interval 1, probability 0, space 0, times 1 [ 100.930204][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 100.930240][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.930261][ T5991] Call Trace: [ 100.930270][ T5991] [ 100.930281][ T5991] dump_stack_lvl+0x100/0x190 [ 100.930337][ T5991] should_fail_ex.cold+0x5/0xa [ 100.930368][ T5991] ? mpi_alloc_limb_space+0x31/0x60 [ 100.930405][ T5991] should_failslab+0xc2/0x120 [ 100.930437][ T5991] __kmalloc_noprof+0xe0/0x850 [ 100.930468][ T5991] mpi_alloc_limb_space+0x31/0x60 [ 100.930502][ T5991] mpi_powm+0x1083/0x1e50 [ 100.930550][ T5991] ? __pfx_mpi_powm+0x10/0x10 [ 100.930588][ T5991] ? mpi_free+0xa0/0x150 [ 100.930625][ T5991] ? mpi_free+0xe1/0x150 [ 100.930661][ T5991] ? kfree+0x223/0x6c0 [ 100.930706][ T5991] ? mpi_free+0xe6/0x150 [ 100.930748][ T5991] rsa_enc+0x1fe/0x3b0 [ 100.930781][ T5991] ? __pfx_rsa_enc+0x10/0x10 [ 100.930810][ T5991] ? __virt_addr_valid+0x239/0x430 [ 100.930859][ T5991] ? sg_init_one+0xf5/0x1b0 [ 100.930895][ T5991] rsassa_pkcs1_verify+0x4eb/0xc20 [ 100.930944][ T5991] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 100.931001][ T5991] ? rsa_max_size+0xd/0x70 [ 100.931028][ T5991] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 100.931069][ T5991] public_key_verify_signature+0x5ee/0x910 [ 100.931117][ T5991] ? __pfx_public_key_verify_signature+0x10/0x10 [ 100.931185][ T5991] ? __kmalloc_noprof+0x320/0x850 [ 100.931222][ T5991] x509_check_for_self_signed+0x325/0x510 [ 100.931273][ T5991] x509_cert_parse+0x60c/0x910 [ 100.931312][ T5991] ? kasan_save_stack+0x3f/0x50 [ 100.931340][ T5991] ? kasan_save_stack+0x30/0x50 [ 100.931368][ T5991] ? kasan_save_track+0x14/0x30 [ 100.931399][ T5991] pkcs7_extract_cert+0xa4/0x380 [ 100.931431][ T5991] asn1_ber_decoder+0x12b3/0x2170 [ 100.931479][ T5991] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 100.931532][ T5991] pkcs7_parse_message+0x289/0x870 [ 100.931584][ T5991] verify_pkcs7_signature+0x30/0xa0 [ 100.931620][ T5991] valid_regdb+0x211/0x590 [ 100.931657][ T5991] ? __pfx_valid_regdb+0x10/0x10 [ 100.931698][ T5991] reg_reload_regdb+0x11a/0x460 [ 100.931735][ T5991] ? __pfx_reg_reload_regdb+0x10/0x10 [ 100.931774][ T5991] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 100.931817][ T5991] ? nl80211_pre_doit+0x19a/0xae0 [ 100.931866][ T5991] genl_family_rcv_msg_doit+0x214/0x300 [ 100.931915][ T5991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.931959][ T5991] ? genl_get_cmd+0x3e7/0x760 [ 100.932010][ T5991] ? bpf_lsm_capable+0x9/0x10 [ 100.932040][ T5991] ? security_capable+0x80/0x260 [ 100.932075][ T5991] genl_rcv_msg+0x560/0x800 [ 100.932113][ T5991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.932163][ T5991] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 100.932206][ T5991] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 100.932233][ T5991] ? __pfx_nl80211_post_doit+0x10/0x10 [ 100.932286][ T5991] netlink_rcv_skb+0x159/0x420 [ 100.932321][ T5991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.932363][ T5991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.932411][ T5991] ? netlink_deliver_tap+0x1ae/0xcc0 [ 100.932452][ T5991] genl_rcv+0x28/0x40 [ 100.932486][ T5991] netlink_unicast+0x585/0x850 [ 100.932527][ T5991] ? __pfx_netlink_unicast+0x10/0x10 [ 100.932572][ T5991] netlink_sendmsg+0x8b0/0xda0 [ 100.932615][ T5991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.932650][ T5991] ? __import_iovec+0x1d2/0x640 [ 100.932695][ T5991] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 100.932731][ T5991] ____sys_sendmsg+0x9e1/0xb70 [ 100.932768][ T5991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.932806][ T5991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.932850][ T5991] ? __pfx_futex_wake_mark+0x10/0x10 [ 100.932893][ T5991] ___sys_sendmsg+0x190/0x1e0 [ 100.932933][ T5991] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.933014][ T5991] __sys_sendmsg+0x170/0x220 [ 100.933044][ T5991] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.933071][ T5991] ? __x64_sys_futex+0x34f/0x4d0 [ 100.933115][ T5991] ? rcu_is_watching+0x12/0xc0 [ 100.933163][ T5991] do_syscall_64+0x115/0x840 [ 100.933202][ T5991] ? clear_bhb_loop+0x40/0x90 [ 100.933234][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.933261][ T5991] RIP: 0033:0x7f196819ce59 [ 100.933285][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.933311][ T5991] RSP: 002b:00007f1968fdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.933337][ T5991] RAX: ffffffffffffffda RBX: 00007f1968415fa0 RCX: 00007f196819ce59 [ 100.933354][ T5991] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 100.933370][ T5991] RBP: 00007f1968232d6f R08: 0000000000000000 R09: 0000000000000000 [ 100.933384][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.933400][ T5991] R13: 00007f1968416038 R14: 00007f1968415fa0 R15: 00007ffd046861a8 [ 100.933434][ T5991] [ 101.966037][ T6004] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 102.132112][ T6004] pci 0000:00:01.3: PCI INT A: no GSI [ 102.444301][ T6004] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.942619][ T6055] tc_dump_action: action bad kind [ 106.224906][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 106.942602][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'. [ 106.982794][ T6098] FAULT_INJECTION: forcing a failure. [ 106.982794][ T6098] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.997645][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 106.997692][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.997708][ T6098] Call Trace: [ 106.997716][ T6098] [ 106.997727][ T6098] dump_stack_lvl+0x100/0x190 [ 106.997779][ T6098] should_fail_ex.cold+0x5/0xa [ 106.997810][ T6098] ? prepare_alloc_pages+0x16d/0x5f0 [ 106.997848][ T6098] should_fail_alloc_page+0xeb/0x140 [ 106.997884][ T6098] prepare_alloc_pages+0x1f0/0x5f0 [ 106.997920][ T6098] ? mark_held_locks+0x40/0x70 [ 106.997966][ T6098] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 106.998019][ T6098] ? __pfx_do_sync_core+0x10/0x10 [ 106.998061][ T6098] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 106.998101][ T6098] ? __pfx_text_poke_memcpy+0x10/0x10 [ 106.998133][ T6098] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.998179][ T6098] ? find_held_lock+0x2b/0x80 [ 106.998208][ T6098] ? jump_label_update+0x37a/0x550 [ 106.998243][ T6098] ? jump_label_update+0x37a/0x550 [ 106.998285][ T6098] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 106.998324][ T6098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.998363][ T6098] ? policy_nodemask+0xed/0x4f0 [ 106.998397][ T6098] alloc_pages_mpol+0x1fb/0x540 [ 106.998432][ T6098] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.998475][ T6098] alloc_pages_noprof+0x1a/0x160 [ 106.998513][ T6098] kvm_arch_vcpu_create+0x2aa/0xac0 [ 106.998555][ T6098] kvm_vm_ioctl+0x756/0x4050 [ 106.998631][ T6098] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 106.998702][ T6098] ? kasan_quarantine_put+0x104/0x240 [ 106.998731][ T6098] ? lockdep_hardirqs_on+0x78/0x100 [ 106.998777][ T6098] ? find_held_lock+0x2b/0x80 [ 106.998809][ T6098] ? tomoyo_path_number_perm+0x28f/0x580 [ 106.998843][ T6098] ? tomoyo_path_number_perm+0x28f/0x580 [ 106.998885][ T6098] ? tomoyo_path_number_perm+0x188/0x580 [ 106.998923][ T6098] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.998959][ T6098] ? futex_wait+0x11e/0x370 [ 106.999005][ T6098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.999047][ T6098] ? do_vfs_ioctl+0x226/0x13e0 [ 106.999077][ T6098] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.999116][ T6098] ? find_held_lock+0x2b/0x80 [ 106.999147][ T6098] ? __fget_files+0x215/0x3d0 [ 106.999178][ T6098] ? hook_file_ioctl_common+0x149/0x410 [ 106.999218][ T6098] ? __fget_files+0x21f/0x3d0 [ 106.999252][ T6098] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 106.999287][ T6098] __x64_sys_ioctl+0x18e/0x210 [ 106.999317][ T6098] do_syscall_64+0x115/0x840 [ 106.999356][ T6098] ? clear_bhb_loop+0x40/0x90 [ 106.999391][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.999421][ T6098] RIP: 0033:0x7f196819ce59 [ 106.999443][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.999469][ T6098] RSP: 002b:00007f1968fdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.999497][ T6098] RAX: ffffffffffffffda RBX: 00007f1968415fa0 RCX: 00007f196819ce59 [ 106.999516][ T6098] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 106.999532][ T6098] RBP: 00007f1968232d6f R08: 0000000000000000 R09: 0000000000000000 [ 106.999549][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.999564][ T6098] R13: 00007f1968416038 R14: 00007f1968415fa0 R15: 00007ffd046861a8 [ 106.999601][ T6098] [ 110.044239][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'. [ 110.281796][ T6145] netlink: 186 bytes leftover after parsing attributes in process `syz.2.66'. [ 111.872917][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 112.039103][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 113.250161][ T6195] mmap: syz.1.72 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.450192][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 115.098605][ T6213] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 117.240660][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 118.202176][ T6260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 120.995311][ T6314] zswap: compressor not available [ 122.044467][ T6342] zswap: compressor not available [ 125.381702][ T6409] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.314100][ T6479] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 132.284454][ T6516] bond0: invalid ARP target specified [ 132.361080][ T6516] nbd: socks must be embedded in a SOCK_ITEM attr [ 132.375441][ T6516] block nbd0: shutting down sockets [ 132.982657][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989763][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.009455][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 133.462736][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 134.122384][ T6551] zswap: compressor not available [ 135.208079][ T30] audit: type=1806 audit(1780070956.987:3): xattr="." res=0 [ 136.352588][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 136.907016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 138.430225][ T6648] netlink: 146 bytes leftover after parsing attributes in process `syz.1.148'. [ 138.623842][ T6648] netlink: 146 bytes leftover after parsing attributes in process `syz.1.148'. [ 139.203913][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 141.552104][ T6712] FAULT_INJECTION: forcing a failure. [ 141.552104][ T6712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.585748][ T6712] CPU: 1 UID: 0 PID: 6712 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 141.585772][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.585781][ T6712] Call Trace: [ 141.585787][ T6712] [ 141.585793][ T6712] dump_stack_lvl+0x100/0x190 [ 141.585836][ T6712] should_fail_ex.cold+0x5/0xa [ 141.585852][ T6712] ? prepare_alloc_pages+0x16d/0x5f0 [ 141.585873][ T6712] should_fail_alloc_page+0xeb/0x140 [ 141.585893][ T6712] prepare_alloc_pages+0x1f0/0x5f0 [ 141.585918][ T6712] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 141.585941][ T6712] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 141.585967][ T6712] ? unwind_get_return_address+0x59/0xa0 [ 141.585986][ T6712] ? arch_stack_walk+0xa6/0xf0 [ 141.586011][ T6712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.586034][ T6712] ? __pfx_stack_trace_save+0x10/0x10 [ 141.586052][ T6712] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 141.586082][ T6712] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 141.586117][ T6712] ? __pmd_alloc+0xbf/0x950 [ 141.586145][ T6712] ? __handle_mm_fault+0xa9c/0x2a00 [ 141.586164][ T6712] ? handle_mm_fault+0x37b/0xa30 [ 141.586184][ T6712] ? __get_user_pages+0x1178/0x32a0 [ 141.586200][ T6712] ? populate_vma_page_range+0x267/0x3f0 [ 141.586218][ T6712] ? __mm_populate+0x107/0x3a0 [ 141.586236][ T6712] ? vm_mmap_pgoff+0x37f/0x470 [ 141.586252][ T6712] ? ksys_mmap_pgoff+0xe4/0x610 [ 141.586278][ T6712] ? __x64_sys_mmap+0x125/0x190 [ 141.586305][ T6712] ? do_syscall_64+0x115/0x840 [ 141.586330][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.586350][ T6712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.586372][ T6712] ? policy_nodemask+0xed/0x4f0 [ 141.586392][ T6712] alloc_pages_mpol+0x1fb/0x540 [ 141.586411][ T6712] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 141.586431][ T6712] ? __lock_acquire+0x4a5/0x2630 [ 141.586455][ T6712] alloc_pages_noprof+0x1a/0x160 [ 141.586475][ T6712] pte_alloc_one+0x1c/0x3d0 [ 141.586494][ T6712] __pte_alloc+0x6d/0x380 [ 141.586511][ T6712] ? __pfx___pte_alloc+0x10/0x10 [ 141.586528][ T6712] ? do_raw_spin_lock+0x128/0x260 [ 141.586543][ T6712] ? find_held_lock+0x2b/0x80 [ 141.586563][ T6712] do_anonymous_page+0x13c6/0x2050 [ 141.586587][ T6712] ? __pmd_alloc+0x3fb/0x950 [ 141.586607][ T6712] __handle_mm_fault+0x1d2c/0x2a00 [ 141.586631][ T6712] ? mt_find+0x45e/0x8e0 [ 141.586656][ T6712] ? __pfx___handle_mm_fault+0x10/0x10 [ 141.586677][ T6712] ? __pfx_mt_find+0x10/0x10 [ 141.586712][ T6712] handle_mm_fault+0x37b/0xa30 [ 141.586737][ T6712] __get_user_pages+0x1178/0x32a0 [ 141.586763][ T6712] ? __pfx___get_user_pages+0x10/0x10 [ 141.586786][ T6712] populate_vma_page_range+0x267/0x3f0 [ 141.586806][ T6712] ? __pfx_populate_vma_page_range+0x10/0x10 [ 141.586825][ T6712] ? __pfx_find_vma_intersection+0x10/0x10 [ 141.586843][ T6712] ? do_mmap+0x93f/0x12f0 [ 141.586863][ T6712] __mm_populate+0x107/0x3a0 [ 141.586882][ T6712] ? __pfx___mm_populate+0x10/0x10 [ 141.586909][ T6712] ? up_write+0x28c/0x4f0 [ 141.586935][ T6712] vm_mmap_pgoff+0x37f/0x470 [ 141.586970][ T6712] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 141.587004][ T6712] ? do_futex+0x192/0x350 [ 141.587031][ T6712] ? __pfx_do_futex+0x10/0x10 [ 141.587064][ T6712] ksys_mmap_pgoff+0xe4/0x610 [ 141.587096][ T6712] ? __x64_sys_futex+0x358/0x4d0 [ 141.587132][ T6712] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 141.587166][ T6712] ? xfd_validate_state+0x129/0x190 [ 141.587193][ T6712] ? ksys_write+0x1ac/0x250 [ 141.587234][ T6712] __x64_sys_mmap+0x125/0x190 [ 141.587269][ T6712] do_syscall_64+0x115/0x840 [ 141.587308][ T6712] ? clear_bhb_loop+0x40/0x90 [ 141.587343][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.587372][ T6712] RIP: 0033:0x7f6c2bf9ce59 [ 141.587403][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.587434][ T6712] RSP: 002b:00007f6c2a1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 141.587465][ T6712] RAX: ffffffffffffffda RBX: 00007f6c2c215fa0 RCX: 00007f6c2bf9ce59 [ 141.587485][ T6712] RDX: 00000000000000df RSI: 000000000004000b RDI: 0000000000000000 [ 141.587502][ T6712] RBP: 00007f6c2c032d6f R08: 0000000000000007 R09: 0000000100028000 [ 141.587520][ T6712] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 141.587536][ T6712] R13: 00007f6c2c216038 R14: 00007f6c2c215fa0 R15: 00007fffc73384f8 [ 141.587575][ T6712] [ 142.968993][ T6723] pim6reg: entered allmulticast mode [ 144.611422][ T6772] zswap: compressor not available [ 146.274338][ T6798] zswap: compressor not available [ 147.022093][ T6814] zswap: compressor not available [ 151.968483][ T6907] futex_wake_op: syz.2.194 tries to shift op by -2048; fix this program [ 151.997965][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.190'. [ 152.008079][ T6907] futex_wake_op: syz.2.194 tries to shift op by -2048; fix this program [ 152.066384][ T6910] FAULT_INJECTION: forcing a failure. [ 152.066384][ T6910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.087428][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.3.195 Not tainted syzkaller #0 PREEMPT(full) [ 152.087469][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.087486][ T6910] Call Trace: [ 152.087495][ T6910] [ 152.087506][ T6910] dump_stack_lvl+0x100/0x190 [ 152.087561][ T6910] should_fail_ex.cold+0x5/0xa [ 152.087592][ T6910] ? prepare_alloc_pages+0x16d/0x5f0 [ 152.087632][ T6910] should_fail_alloc_page+0xeb/0x140 [ 152.087669][ T6910] prepare_alloc_pages+0x1f0/0x5f0 [ 152.087711][ T6910] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 152.087757][ T6910] ? is_bpf_text_address+0x11/0x1a0 [ 152.087794][ T6910] ? is_bpf_text_address+0x8a/0x1a0 [ 152.087833][ T6910] ? bpf_ksym_find+0x124/0x1c0 [ 152.087863][ T6910] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 152.087904][ T6910] ? is_bpf_text_address+0x94/0x1a0 [ 152.087940][ T6910] ? kernel_text_address+0x8d/0x100 [ 152.087970][ T6910] ? __kernel_text_address+0xd/0x30 [ 152.087997][ T6910] ? unwind_get_return_address+0x59/0xa0 [ 152.088045][ T6910] ? arch_stack_walk+0xa6/0xf0 [ 152.088081][ T6910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.088147][ T6910] ? stack_depot_save_flags+0x27/0x9d0 [ 152.088191][ T6910] ? stack_trace_save+0x8e/0xc0 [ 152.088231][ T6910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.088270][ T6910] ? policy_nodemask+0xed/0x4f0 [ 152.088306][ T6910] alloc_pages_mpol+0x1fb/0x540 [ 152.088342][ T6910] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.088386][ T6910] alloc_pages_noprof+0x1a/0x160 [ 152.088425][ T6910] kimage_alloc_pages+0x72/0x380 [ 152.088472][ T6910] kimage_alloc_control_pages+0x157/0xa20 [ 152.088522][ T6910] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 152.088575][ T6910] do_kexec_load+0x275/0x810 [ 152.088615][ T6910] ? __pfx_do_kexec_load+0x10/0x10 [ 152.088657][ T6910] ? _copy_from_user+0x59/0xd0 [ 152.088699][ T6910] __x64_sys_kexec_load+0x1bf/0x230 [ 152.088746][ T6910] do_syscall_64+0x115/0x840 [ 152.088787][ T6910] ? clear_bhb_loop+0x40/0x90 [ 152.088821][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.088851][ T6910] RIP: 0033:0x7f196819ce59 [ 152.088875][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.088902][ T6910] RSP: 002b:00007f1968fdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 152.088929][ T6910] RAX: ffffffffffffffda RBX: 00007f1968415fa0 RCX: 00007f196819ce59 [ 152.088949][ T6910] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 152.088966][ T6910] RBP: 00007f1968232d6f R08: 0000000000000000 R09: 0000000000000000 [ 152.088983][ T6910] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 152.088999][ T6910] R13: 00007f1968416038 R14: 00007f1968415fa0 R15: 00007ffd046861a8 [ 152.089043][ T6910] [ 152.090089][ T6910] kexec: Could not allocate control_code_buffer [ 152.302764][ T6913] random: crng reseeded on system resumption [ 155.536359][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'. [ 155.547161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 155.566213][ T6968] veth1_macvtap: left promiscuous mode [ 155.575871][ T6968] macsec0: entered promiscuous mode [ 155.587244][ T6968] macsec0: entered allmulticast mode [ 156.589943][ T6986] zswap: compressor not available [ 160.005345][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 160.291220][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 160.612591][ T7076] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 163.161058][ T7129] zswap: compressor not available [ 163.277882][ T5636] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 164.287849][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.233'. [ 164.920812][ T7167] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 165.030044][ T30] audit: type=1807 audit(1780070986.807:4): UNKNOWN=nl80211 res=0 [ 165.061374][ T30] audit: type=1802 audit(1780070986.817:5): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.237" res=0 errno=0 [ 165.216800][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'. [ 165.582454][ T7164] ima: policy update failed [ 165.599427][ T30] audit: type=1802 audit(1780070987.377:6): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.237" res=0 errno=0 [ 168.195292][ T7200] kexec: Could not allocate control_code_buffer [ 169.125258][ T7237] FAULT_INJECTION: forcing a failure. [ 169.125258][ T7237] name failslab, interval 1, probability 0, space 0, times 0 [ 169.169824][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 169.169861][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.169876][ T7237] Call Trace: [ 169.169885][ T7237] [ 169.169895][ T7237] dump_stack_lvl+0x100/0x190 [ 169.169945][ T7237] should_fail_ex.cold+0x5/0xa [ 169.169980][ T7237] should_failslab+0xc2/0x120 [ 169.170013][ T7237] __kmalloc_cache_noprof+0x7a/0x6f0 [ 169.170051][ T7237] ? alloc_pipe_info+0x10e/0x590 [ 169.170086][ T7237] ? find_held_lock+0x2b/0x80 [ 169.170124][ T7237] alloc_pipe_info+0x10e/0x590 [ 169.170162][ T7237] splice_direct_to_actor+0x78f/0xa30 [ 169.170200][ T7237] ? __lock_acquire+0x4a5/0x2630 [ 169.170238][ T7237] ? __pfx_direct_splice_actor+0x10/0x10 [ 169.170274][ T7237] ? __pfx_aa_file_perm+0x10/0x10 [ 169.170315][ T7237] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 169.170364][ T7237] do_splice_direct+0x174/0x240 [ 169.170400][ T7237] ? __pfx_do_splice_direct+0x10/0x10 [ 169.170439][ T7237] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 169.170478][ T7237] ? rw_verify_area+0xce/0x6d0 [ 169.170509][ T7237] do_sendfile+0xadc/0xe20 [ 169.170553][ T7237] ? __pfx_do_sendfile+0x10/0x10 [ 169.170587][ T7237] ? __fget_files+0x21f/0x3d0 [ 169.170629][ T7237] __x64_sys_sendfile64+0x1d8/0x220 [ 169.170668][ T7237] ? ksys_write+0x1ac/0x250 [ 169.170699][ T7237] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 169.170743][ T7237] ? rcu_is_watching+0x12/0xc0 [ 169.170779][ T7237] do_syscall_64+0x115/0x840 [ 169.170816][ T7237] ? clear_bhb_loop+0x40/0x90 [ 169.170849][ T7237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.170877][ T7237] RIP: 0033:0x7f6c2bf9ce59 [ 169.170901][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.170925][ T7237] RSP: 002b:00007f6c2a1ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.170951][ T7237] RAX: ffffffffffffffda RBX: 00007f6c2c215fa0 RCX: 00007f6c2bf9ce59 [ 169.170969][ T7237] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 169.170985][ T7237] RBP: 00007f6c2a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 169.171001][ T7237] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 169.171018][ T7237] R13: 00007f6c2c216038 R14: 00007f6c2c215fa0 R15: 00007fffc73384f8 [ 169.171054][ T7237] [ 169.602977][ T7235] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 169.826026][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 172.607782][ T7282] netlink: 4488 bytes leftover after parsing attributes in process `syz.3.260'. [ 175.578544][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'. [ 177.933767][ T7389] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.989047][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 180.368065][ T7442] syz.1.285 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.475126][ T7435] zswap: compressor not available [ 180.606722][ T5636] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 181.821640][ T7464] ima: policy update failed [ 181.855109][ T30] audit: type=1802 audit(1780071003.627:7): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.289" res=0 errno=0 [ 182.780323][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 183.613208][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 183.989624][ T30] audit: type=1804 audit(1780071005.767:8): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.298" name="/newroot/62/file0" dev="tmpfs" ino=342 res=1 errno=0 [ 186.148900][ T7572] vivid-007: ================= START STATUS ================= [ 186.185926][ T7572] vivid-007: Enable Output Cropping: true grabbed [ 186.220075][ T7572] vivid-007: Enable Output Composing: true grabbed [ 186.243151][ T7572] vivid-007: Enable Output Scaler: true grabbed [ 186.264607][ T7572] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 186.320799][ T7572] vivid-007: Transmit Mode: HDMI grabbed [ 186.364273][ T7572] vivid-007: Hotplug Present: 0x00000000 [ 186.405133][ T7572] vivid-007: RxSense Present: 0x00000000 [ 186.432383][ T7572] vivid-007: EDID Present: 0x00000000 [ 186.454195][ T7572] vivid-007: ================== END STATUS ================== [ 186.981048][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 187.586182][ T7592] zswap: compressor not available [ 188.245554][ T7612] hub 1-0:1.0: USB hub found [ 188.255725][ T7612] hub 1-0:1.0: 1 port detected [ 189.050994][ T30] audit: type=1800 audit(1780071010.827:9): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.316" name="lu_gp_id" dev="configfs" ino=18017 res=0 errno=0 [ 190.325944][ T7662] random: crng reseeded on system resumption [ 190.560414][ T7670] Unrecognized hibernate image header format! [ 190.596724][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.625398][ T7670] Unrecognized hibernate image header format! [ 190.643539][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.662413][ T7670] Unrecognized hibernate image header format! [ 190.676823][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.697210][ T7670] Unrecognized hibernate image header format! [ 190.709919][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.723671][ T7670] Unrecognized hibernate image header format! [ 190.739252][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.746894][ T7670] Unrecognized hibernate image header format! [ 190.753221][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.760926][ T7670] Unrecognized hibernate image header format! [ 190.768777][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.778666][ T7670] Unrecognized hibernate image header format! [ 190.799925][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.832949][ T7670] Unrecognized hibernate image header format! [ 190.850761][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.883970][ T7670] Unrecognized hibernate image header format! [ 190.905803][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.935435][ T7670] Unrecognized hibernate image header format! [ 190.957181][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 190.981359][ T7670] Unrecognized hibernate image header format! [ 191.011440][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 191.036202][ T7670] Unrecognized hibernate image header format! [ 191.061841][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 191.075906][ T7670] Unrecognized hibernate image header format! [ 191.089764][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 191.118829][ T7670] Unrecognized hibernate image header format! [ 191.143440][ T7670] PM: hibernation: Image mismatch: architecture specific data [ 191.294841][ T5636] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 191.321218][ T7679] vivid-008: ================= START STATUS ================= [ 191.376571][ T7679] vivid-008: ================== END STATUS ================== [ 193.378137][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 194.420106][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.426533][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.662333][ T7727] openvswitch: netlink: Key type 79 is out of range max 32 [ 194.924473][ T7723] zswap: compressor not available [ 195.457176][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 199.843223][ T7852] capability: warning: `syz.0.352' uses 32-bit capabilities (legacy support in use) [ 201.454363][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 201.702710][ T7882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.746750][ T7882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.757204][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 201.838349][ T7882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.891970][ T7882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.916280][ T7882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.978980][ T7882] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 202.011337][ T7882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.032053][ T7882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.058878][ T7882] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 202.093085][ T7882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.113060][ T7882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.152147][ T7882] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.395443][ T7891] Invalid ELF header magic: != ELF [ 202.618876][ T7910] random: crng reseeded on system resumption [ 203.609027][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 203.697148][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.948982][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.027145][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.100639][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 204.582578][ T7966] qrtr: Invalid version 0 [ 205.134602][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 205.146800][ T50] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 205.590405][ T7989] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 205.638384][ T7989] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 205.660528][ T7989] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 205.685004][ T7989] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 205.697330][ T7989] page dumped because: unmovable page [ 205.705145][ T7989] page_owner info is not present (never set?) [ 205.777155][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.017500][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.097722][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.177546][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 207.795957][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'. [ 207.857108][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.097003][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.177733][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.257363][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 208.802943][ T8034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 211.101303][ T8065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 211.153224][ T8099] netlink: 326 bytes leftover after parsing attributes in process `syz.1.394'. [ 213.050248][ T8129] Console: switching to colour VGA+ 80x25 [ 215.505593][ T8194] netlink: 330 bytes leftover after parsing attributes in process `syz.1.410'. [ 216.013111][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 221.800170][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 222.827056][ T30] audit: type=1804 audit(1780071044.597:10): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.435" name="/newroot/113/file0" dev="tmpfs" ino=604 res=1 errno=0 [ 222.882220][ T30] audit: type=1804 audit(1780071044.657:11): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.435" name="/newroot/113/file0" dev="tmpfs" ino=604 res=1 errno=0 [ 222.934429][ T30] audit: type=1800 audit(1780071044.657:12): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.435" name="file0" dev="tmpfs" ino=604 res=0 errno=0 [ 223.552297][ T8368] netlink: 342 bytes leftover after parsing attributes in process `syz.3.438'. [ 223.575013][ T8368] futex_wake_op: syz.3.438 tries to shift op by -2048; fix this program [ 223.593041][ T8368] futex_wake_op: syz.3.438 tries to shift op by -2048; fix this program [ 223.616795][ T8368] 0x000000000001-0x000000020000 : "" [ 223.776665][ T8368] ftl_cs: FTL header corrupt! [ 226.283838][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 230.113191][ T8499] netlink: 342 bytes leftover after parsing attributes in process `syz.0.459'. [ 230.544079][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 232.394288][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 232.601332][ T8553] netlink: 342 bytes leftover after parsing attributes in process `syz.2.467'. [ 232.616583][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 233.299303][ T30] audit: type=1800 audit(1780071055.077:13): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.471" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 234.383114][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. Stopping sshd: stopped /usr/sbin/sshd (pid 5398) OK Stopping crond: stopped /usr/sbin/crond (pid 5374) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5296) Stopping network: [ 236.424312][ T8635] FAULT_INJECTION: forcing a failure. [ 236.424312][ T8635] name fail_futex, interval 1, probability 0, space 0, times 1 [ 236.480888][ T8635] CPU: 1 UID: 0 PID: 8635 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) [ 236.480928][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.480956][ T8635] Call Trace: [ 236.480965][ T8635] [ 236.480975][ T8635] dump_stack_lvl+0x100/0x190 [ 236.481028][ T8635] should_fail_ex.cold+0x5/0xa [ 236.481065][ T8635] get_futex_key+0xf78/0x1510 [ 236.481113][ T8635] ? __pfx_get_futex_key+0x10/0x10 [ 236.481162][ T8635] ? find_held_lock+0x2b/0x80 [ 236.481201][ T8635] futex_wait_requeue_pi+0x1f5/0x890 [ 236.481237][ T8635] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 236.481272][ T8635] ? __futex_wait+0x256/0x300 [ 236.481307][ T8635] ? __pfx___futex_wait+0x10/0x10 [ 236.481372][ T8635] ? __pfx_futex_wake_mark+0x10/0x10 [ 236.481417][ T8635] ? __fget_files+0x21f/0x3d0 [ 236.481453][ T8635] do_futex+0x24f/0x350 [ 236.481482][ T8635] ? __pfx_do_futex+0x10/0x10 [ 236.481519][ T8635] __x64_sys_futex+0x34f/0x4d0 [ 236.481566][ T8635] ? __pfx___x64_sys_futex+0x10/0x10 [ 236.481593][ T8635] ? ksys_write+0x1ac/0x250 [ 236.481629][ T8635] ? rcu_is_watching+0x12/0xc0 [ 236.481663][ T8635] do_syscall_64+0x115/0x840 [ 236.481700][ T8635] ? clear_bhb_loop+0x40/0x90 [ 236.481732][ T8635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.481758][ T8635] RIP: 0033:0x7f466219ce59 [ 236.481780][ T8635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.481805][ T8635] RSP: 002b:00007f4662fb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.481831][ T8635] RAX: ffffffffffffffda RBX: 00007f4662415fa0 RCX: 00007f466219ce59 [ 236.481848][ T8635] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 236.481864][ T8635] RBP: 00007f4662232d6f R08: 0000000000000000 R09: 00000000fffffffa [ 236.481880][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.481895][ T8635] R13: 00007f4662416038 R14: 00007f4662415fa0 R15: 00007ffce2c5f208 [ 236.481929][ T8635] [ 236.747052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 237.131582][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. OK Stopping iptables: OK Stopping system message bus: [ 238.644275][ T8699] netlink: 330 bytes leftover after parsing attributes in process `syz.2.487'. done [ 240.022613][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 240.707761][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. Stopping klogd: OK Stopping acpid: [ 241.967812][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.499'. [ 242.057891][ T8780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.150922][ T8780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.267519][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.498'. OK Stopping syslogd: stopped /sbin/syslogd (pid 4984) OK umount: can't remount debugfs read-only [ 245.322842][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 246.002415][ T8848] netlink: 334 bytes leftover after parsing attributes in process `syz.1.510'. [ 246.698943][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.163 closed by remote host. [ 248.592842][ T8452] ------------[ cut here ]------------ [ 248.598450][ T8452] ODEBUG: free active (active state 0) object: ffff88802d1bd438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 248.611393][ T8452] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.451/8452 [ 248.621588][ T8452] Modules linked in: [ 248.626651][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 248.636137][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.646237][ T8452] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 248.652072][ T8452] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 fc e1 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 78 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 248.671846][ T8452] RSP: 0018:ffffc9000df876f8 EFLAGS: 00010246 [ 248.677984][ T8452] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 248.685968][ T8452] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1e9e0 [ 248.694013][ T8452] RBP: 0000000000000001 R08: ffff88802d1bd438 R09: ffffffff8bb2c700 [ 248.702065][ T8452] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 248.710055][ T8452] R13: ffffffff8bb2c740 R14: ffffffff8a913950 R15: ffffc9000df877f8 [ 248.718038][ T8452] FS: 0000000000000000(0000) GS:ffff88812438b000(0000) knlGS:0000000000000000 [ 248.727002][ T8452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.733934][ T8452] CR2: 00007f570ffea2f8 CR3: 00000000756ae000 CR4: 00000000003526f0 [ 248.742213][ T8452] Call Trace: [ 248.745499][ T8452] [ 248.748483][ T8452] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 248.753960][ T8452] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.759790][ T8452] debug_check_no_obj_freed+0x4da/0x630 [ 248.765338][ T8452] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 248.771454][ T8452] ? __page_table_check_zero+0x333/0x410 [ 248.777127][ T8452] ? __page_table_check_zero+0x338/0x410 [ 248.782752][ T8452] __free_frozen_pages+0x3fc/0x10a0 [ 248.787995][ T8452] hci_release_dev+0x4ef/0x630 [ 248.792752][ T8452] ? __pfx_hci_release_dev+0x10/0x10 [ 248.798085][ T8452] ? device_release+0x97/0x270 [ 248.802877][ T8452] ? rcu_is_watching+0x12/0xc0 [ 248.807675][ T8452] ? device_release+0x97/0x270 [ 248.812465][ T8452] bt_host_release+0x6a/0xb0 [ 248.817258][ T8452] ? __pfx_bt_host_release+0x10/0x10 [ 248.822578][ T8452] device_release+0xd2/0x270 [ 248.827216][ T8452] kobject_put+0x1f7/0x640 [ 248.831959][ T8452] put_device+0x1f/0x30 [ 248.836112][ T8452] vhci_release+0x185/0x230 [ 248.840905][ T8452] ? __pfx_vhci_release+0x10/0x10 [ 248.845956][ T8452] __fput+0x3ff/0xb50 [ 248.849987][ T8452] task_work_run+0x150/0x240 [ 248.854568][ T8452] ? __pfx_task_work_run+0x10/0x10 [ 248.859700][ T8452] do_exit+0x951/0x2af0 [ 248.863856][ T8452] ? __pfx_do_exit+0x10/0x10 [ 248.868470][ T8452] ? cgroup_update_frozen_flag+0x107/0x210 [ 248.874275][ T8452] ? find_held_lock+0x2b/0x80 [ 248.878976][ T8452] ? get_signal+0x1872/0x2210 [ 248.883649][ T8452] do_group_exit+0xd5/0x2a0 [ 248.888183][ T8452] get_signal+0x20ff/0x2210 [ 248.892687][ T8452] ? __pfx_get_signal+0x10/0x10 [ 248.897591][ T8452] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 248.903075][ T8452] arch_do_signal_or_restart+0x91/0x7a0 [ 248.908651][ T8452] ? get_timespec64+0x136/0x1b0 [ 248.913496][ T8452] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.919670][ T8452] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 248.925471][ T8452] ? rcu_is_watching+0x12/0xc0 [ 248.930249][ T8452] exit_to_user_mode_loop+0x98/0x670 [ 248.935856][ T8452] ? rcu_is_watching+0x12/0xc0 [ 248.940998][ T8452] do_syscall_64+0x652/0x840 [ 248.945641][ T8452] ? clear_bhb_loop+0x40/0x90 [ 248.950381][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.956266][ T8452] RIP: 0033:0x7f6c2bf5d68e [ 248.960694][ T8452] Code: Unable to access opcode bytes at 0x7f6c2bf5d664. [ 248.967734][ T8452] RSP: 002b:00007f6c2a1edf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 248.976145][ T8452] RAX: fffffffffffffdfc RBX: 00007f6c2a1ee6c0 RCX: 00007f6c2bf5d68e [ 248.984148][ T8452] RDX: 00007f6c2a1edfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.992129][ T8452] RBP: 00007f6c2c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 249.000123][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.008111][ T8452] R13: 00007f6c2c216038 R14: 00007f6c2c215fa0 R15: 00007fffc73384f8 [ 249.016137][ T8452] [ 249.019189][ T8452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.026471][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 249.035659][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.045719][ T8452] Call Trace: [ 249.048988][ T8452] [ 249.051906][ T8452] dump_stack_lvl+0x100/0x190 [ 249.056580][ T8452] vpanic+0x552/0x970 [ 249.060552][ T8452] ? __pfx_vpanic+0x10/0x10 [ 249.065066][ T8452] panic+0xd1/0xe0 [ 249.068775][ T8452] ? __pfx_panic+0x10/0x10 [ 249.073186][ T8452] ? check_panic_on_warn+0x1f/0x90 [ 249.078298][ T8452] check_panic_on_warn.cold+0x19/0x34 [ 249.083684][ T8452] ? debug_print_object+0x18e/0x2a0 [ 249.088893][ T8452] __warn.cold+0x191/0x328 [ 249.093319][ T8452] __report_bug+0x296/0x3d0 [ 249.097837][ T8452] ? debug_print_object+0x18e/0x2a0 [ 249.103046][ T8452] ? __pfx___report_bug+0x10/0x10 [ 249.108092][ T8452] ? unwind_next_frame+0x3c8/0x2090 [ 249.113308][ T8452] report_bug_entry+0xe1/0x290 [ 249.118085][ T8452] ? debug_print_object+0x19b/0x2a0 [ 249.123293][ T8452] handle_bug+0x1cd/0x2a0 [ 249.127628][ T8452] exc_invalid_op+0x17/0x50 [ 249.132136][ T8452] asm_exc_invalid_op+0x1a/0x20 [ 249.136993][ T8452] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 249.142813][ T8452] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d2 fc e1 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 78 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 249.162432][ T8452] RSP: 0018:ffffc9000df876f8 EFLAGS: 00010246 [ 249.168519][ T8452] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 249.176498][ T8452] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1e9e0 [ 249.184474][ T8452] RBP: 0000000000000001 R08: ffff88802d1bd438 R09: ffffffff8bb2c700 [ 249.192450][ T8452] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 249.200425][ T8452] R13: ffffffff8bb2c740 R14: ffffffff8a913950 R15: ffffc9000df877f8 [ 249.208410][ T8452] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 249.213905][ T8452] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 249.219375][ T8452] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 249.225202][ T8452] debug_check_no_obj_freed+0x4da/0x630 [ 249.230775][ T8452] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 249.236858][ T8452] ? __page_table_check_zero+0x333/0x410 [ 249.242511][ T8452] ? __page_table_check_zero+0x338/0x410 [ 249.248165][ T8452] __free_frozen_pages+0x3fc/0x10a0 [ 249.253389][ T8452] hci_release_dev+0x4ef/0x630 [ 249.258171][ T8452] ? __pfx_hci_release_dev+0x10/0x10 [ 249.263477][ T8452] ? device_release+0x97/0x270 [ 249.268263][ T8452] ? rcu_is_watching+0x12/0xc0 [ 249.273038][ T8452] ? device_release+0x97/0x270 [ 249.277822][ T8452] bt_host_release+0x6a/0xb0 [ 249.282435][ T8452] ? __pfx_bt_host_release+0x10/0x10 [ 249.287739][ T8452] device_release+0xd2/0x270 [ 249.292347][ T8452] kobject_put+0x1f7/0x640 [ 249.296776][ T8452] put_device+0x1f/0x30 [ 249.300943][ T8452] vhci_release+0x185/0x230 [ 249.305461][ T8452] ? __pfx_vhci_release+0x10/0x10 [ 249.310502][ T8452] __fput+0x3ff/0xb50 [ 249.314510][ T8452] task_work_run+0x150/0x240 [ 249.319109][ T8452] ? __pfx_task_work_run+0x10/0x10 [ 249.324237][ T8452] do_exit+0x951/0x2af0 [ 249.328419][ T8452] ? __pfx_do_exit+0x10/0x10 [ 249.333026][ T8452] ? cgroup_update_frozen_flag+0x107/0x210 [ 249.338842][ T8452] ? find_held_lock+0x2b/0x80 [ 249.343529][ T8452] ? get_signal+0x1872/0x2210 [ 249.348227][ T8452] do_group_exit+0xd5/0x2a0 [ 249.352752][ T8452] get_signal+0x20ff/0x2210 [ 249.357279][ T8452] ? __pfx_get_signal+0x10/0x10 [ 249.362139][ T8452] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 249.367620][ T8452] arch_do_signal_or_restart+0x91/0x7a0 [ 249.373185][ T8452] ? get_timespec64+0x136/0x1b0 [ 249.378052][ T8452] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.384231][ T8452] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 249.390052][ T8452] ? rcu_is_watching+0x12/0xc0 [ 249.394835][ T8452] exit_to_user_mode_loop+0x98/0x670 [ 249.400141][ T8452] ? rcu_is_watching+0x12/0xc0 [ 249.404919][ T8452] do_syscall_64+0x652/0x840 [ 249.409524][ T8452] ? clear_bhb_loop+0x40/0x90 [ 249.414212][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.420111][ T8452] RIP: 0033:0x7f6c2bf5d68e [ 249.424528][ T8452] Code: Unable to access opcode bytes at 0x7f6c2bf5d664. [ 249.431542][ T8452] RSP: 002b:00007f6c2a1edf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 249.439960][ T8452] RAX: fffffffffffffdfc RBX: 00007f6c2a1ee6c0 RCX: 00007f6c2bf5d68e [ 249.447937][ T8452] RDX: 00007f6c2a1edfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.455909][ T8452] RBP: 00007f6c2c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 249.463881][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.471860][ T8452] R13: 00007f6c2c216038 R14: 00007f6c2c215fa0 R15: 00007fffc73384f8 [ 249.479849][ T8452] [ 249.483431][ T8452] Kernel Offset: disabled [ 249.487751][ T8452] Rebooting in 86400 seconds..