last executing test programs: 14.338268163s ago: executing program 3 (id=212): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x8000003, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008411, 0x3, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x4) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0), 0x4) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) ioctl$auto_SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) futex$auto(0x0, 0x4, 0x996, 0x0, 0x0, 0x8) 11.845047266s ago: executing program 3 (id=217): openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x42e01, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.750569225s ago: executing program 1 (id=219): r0 = open(&(0x7f0000000540)='./file0\x00', 0x641c0, 0xae) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x700, 0x5, 0x0, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) capset$auto(&(0x7f0000000080)={0x9, r2}, &(0x7f00000000c0)={0x81, 0xab7e, 0xf}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000180)=0x2000) sched_setaffinity$auto(r4, 0x9, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x145403, 0x0) bpf$auto(0x3, &(0x7f0000000280)=@prog_bind_map={r1, r5, 0x9}, 0xffffffff) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(r6, 0x7, r3) ioctl$auto(0x3, 0x541b, 0x38) 9.525632854s ago: executing program 1 (id=220): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, 0x0, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, 0x0, 0x401) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, 0x0, 0xa3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) set_tid_address$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x4800) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa40, 0x0) 8.41651718s ago: executing program 0 (id=223): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x2, 0x34}, {0x9c, 0x3}, 0x779c, 0x3ff, 0x2, 0x0, 0x8, 0x8a, 0x3, 0x1, 0x100, 0x6, 0x5, 0x47, 0x80000000, 0x40000}) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r1, 0x4b71, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) setgroups$auto(0xe32, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) 8.280844892s ago: executing program 3 (id=224): io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) lsetxattr$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f00000006c0)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\xee\x1a\a-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bOp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xf7=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/N\xc6\f\xef\xda\xaay\xf8fm\f\xabH\x9f\f\xd1\xc2fZ8\xcd\xb61\xcd\xd8\xcc|p:7\x15\xb2\xcb\xf5\x13\xcc\xb6\x97\x18=[\x8a\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) 5.375566461s ago: executing program 2 (id=229): socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto(0x0, 0xffff7b6b, 0x0) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.5/usb6/removable\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x80) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.013374902s ago: executing program 1 (id=230): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup$auto(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.2278529s ago: executing program 0 (id=231): socket(0xa, 0x3, 0x3b) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ed03"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 2.762179754s ago: executing program 2 (id=232): r0 = socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto_SO_BSDCOMPAT(r0, 0x0, 0xe, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r1 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/190, 0xfffffe39) 2.462464467s ago: executing program 1 (id=233): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x803, 0x18, 0x6, 0x0, 0x1000073, 0x1, 0x1, 0x8}) close_range$auto(0x2, r0, 0x4) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80a040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x1, 0x4, 0x284) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638838712, 0x0) r2 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) pread64$auto(r2, 0x0, 0xc, 0x8000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) 2.456884184s ago: executing program 3 (id=243): socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigqueueinfo$auto(0x0, 0xffff7b6b, 0x0) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0xffffffffffffffff, 0x81) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.5/usb6/removable\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x80) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.569231077s ago: executing program 0 (id=234): r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x109000, 0x0) write$auto_proc_loginuid_operations_base(r0, &(0x7f0000000040)="8cd1c097c5061c121d7b05843b04347151df6a5e909cb8bc22b6d683acf63d726adb2ea87511c6466af9c085d144fdbcc00abe6cb8ab285cd879d03633c3ec379d04dc8cebd4a0d4a3500b7bb0e3363aa4a23a3b0ed0b1c5c4b9dc3c6a015749ab88374a5b34272a474898df46cc921793b04b0a382f3f67614d0166b7de5fdfb3a805794be35c5c891f8fb48765222abd1555108c36a59c21542d206dc78ad4873d5786b6aad7aaf2f7b6e9fa1a27230cf8cc50690bbefc8b5b4e", 0xbb) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x55) connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r2, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xb, 0x0) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) socket(0x2, 0x3, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) readv$auto(r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop14/queue/stable_writes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x2400000) 1.210944606s ago: executing program 2 (id=236): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x73, 0x0, &(0x7f00000002c0)=0x5) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x10) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) socket(0x8, 0x800, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 398.527585ms ago: executing program 3 (id=238): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) poll$auto(&(0x7f0000000040)={r1, 0xfffa, 0x6}, 0x1, 0x80000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0xb8, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_BSSID={0x6a, 0xf5, "e01f7111b0a4f0e9d0a52cac524e2a759ed0ee5a24cb9f786c01e15b93bcce999ba51a31243fab9f9aa26f13411490f788570e572c05d5c56ab5f366be6808e57ca577a39357a79659c07b2bd3c9fc3897820c6160cc951a5e6dc755d18f7d57951d55fcf7a2"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0b4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_MESH_ID={0x1b, 0x18, "1365921c280959ce8eb325acafa0285e10debed92ea209"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c050}, 0x45) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r6, 0x4004743d, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x234, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SAR_SPEC={0x218, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6b}, @NL80211_SAR_ATTR_SPECS={0x90, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb012}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7ff}]}]}, @NL80211_SAR_ATTR_SPECS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x800}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2008000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS={0x4}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xc}, @NL80211_SAR_ATTR_SPECS={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfcd}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xed62}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10001}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}]}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7fffffff}]}, 0x234}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) write$auto(r0, 0x0, 0x10007c) lsm_list_modules$auto(0x0, 0x0, 0x0) 393.7244ms ago: executing program 0 (id=239): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0501, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) r1 = accept$auto(0x3, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{@raw=0x8, 0x7, 0x200, 0x481, "3baada912063aa08326de39b458c42c58e5697ae8758eb056ddc4a43c73a8cea18d4b45a80a1f49cedbb00f9", @raw=0x5}, 0x1, @iec958={"453c9e5773573d5a10ca31c4b0deec94b37e3ac12d8d3ee9", "a922ff7a0a491cb4d363dfd32f93c6be915f366dfb5d12993d074ca7f6e4e6060c7715b15719c67748abeb11aff0a9ddde9e6e75827c59dee29d81be296f3ad608a6488eaf1bab8dc5ead1821aacec961c7255a26382d30c73ff5c933f892c863cb840c659bf05a61e7c0397cb515a6daeadda67ce497aa9cb5444c69f6552d49168c6476c3637005321d3d36388af82d66120", 0x0, "9dcfc6e9"}, "a054e9c01cb2c8af6dc4bf831fc4b59231961a4479ad0964856da03461b2acee3c2802d94a3a45389079f564370b881309f1adae03c8ff7b3e98d461173da57cb08cc0e2021395f18adb1b333d8bc7c46c5075780ec2cc971726d532efc3f3f4daaaf56770b9cdcc5c86dc4de9ff00fcddb26b10d68199c9506e3d6ee4f38a62"}) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) 284.103106ms ago: executing program 1 (id=240): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) read$auto(r1, 0x0, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) socket(0x22, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x3d, 0x7, 0x64, 0x7}, 0x6b) sendfile$auto(r0, r2, 0x0, 0x1000200) mmap$auto(0x0, 0x5, 0x4000, 0xeb1, r2, 0x8001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/cuse\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) socket(0x2, 0x1, 0x84) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) 0s ago: executing program 2 (id=241): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x109802, 0x0) unshare$auto(0x40000080) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x9, 0x0, 0x20008004) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mlock$auto(0x3, 0x7fff) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='@)\x00', &(0x7f0000000180)=&(0x7f0000000140)='\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xb, 0x0) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x3a, 0x1, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/dirty_background_bytes\x00', 0x81, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) close_range$auto(r4, 0x8, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 90.189763][ T5821] cgroup: Unknown subsys name 'net' [ 90.301783][ T5821] cgroup: Unknown subsys name 'cpuset' [ 90.311555][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.003427][ T1693] cfg80211: failed to load regulatory.db [ 92.073211][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.141436][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.165242][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.173806][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.183721][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.193680][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.195052][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.208382][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.210798][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.219659][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.228693][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.234841][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.239227][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.244605][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.260145][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.268241][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.271862][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.283927][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.294298][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.296615][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.327413][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.851044][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 94.943856][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 95.042603][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 95.150406][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.157697][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.164998][ T5834] bridge_slave_0: entered allmulticast mode [ 95.172792][ T5834] bridge_slave_0: entered promiscuous mode [ 95.182729][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.229399][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.236793][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.244389][ T5834] bridge_slave_1: entered allmulticast mode [ 95.251858][ T5834] bridge_slave_1: entered promiscuous mode [ 95.275514][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.282869][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.290514][ T5835] bridge_slave_0: entered allmulticast mode [ 95.298242][ T5835] bridge_slave_0: entered promiscuous mode [ 95.335321][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.342758][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.350444][ T5835] bridge_slave_1: entered allmulticast mode [ 95.358495][ T5835] bridge_slave_1: entered promiscuous mode [ 95.414872][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.428827][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.526492][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.554828][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.562332][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.569654][ T5836] bridge_slave_0: entered allmulticast mode [ 95.577577][ T5836] bridge_slave_0: entered promiscuous mode [ 95.588011][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.612107][ T5834] team0: Port device team_slave_0 added [ 95.629778][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.637037][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.644574][ T5836] bridge_slave_1: entered allmulticast mode [ 95.652426][ T5836] bridge_slave_1: entered promiscuous mode [ 95.672563][ T5834] team0: Port device team_slave_1 added [ 95.703067][ T5835] team0: Port device team_slave_0 added [ 95.720054][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.727445][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.734770][ T5833] bridge_slave_0: entered allmulticast mode [ 95.742446][ T5833] bridge_slave_0: entered promiscuous mode [ 95.763470][ T5835] team0: Port device team_slave_1 added [ 95.780263][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.787854][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.795154][ T5833] bridge_slave_1: entered allmulticast mode [ 95.802910][ T5833] bridge_slave_1: entered promiscuous mode [ 95.817991][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.839033][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.846506][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.872682][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.898742][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.920485][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.927893][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.954303][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.988963][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.996037][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.022683][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.046104][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.059430][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.091679][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.098751][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.124737][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.157014][ T5836] team0: Port device team_slave_0 added [ 96.166591][ T5836] team0: Port device team_slave_1 added [ 96.231229][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.238696][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.265304][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.279081][ T5833] team0: Port device team_slave_0 added [ 96.304719][ T5834] hsr_slave_0: entered promiscuous mode [ 96.312501][ T5834] hsr_slave_1: entered promiscuous mode [ 96.320563][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.328163][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.354380][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.368000][ T5833] team0: Port device team_slave_1 added [ 96.392516][ T5835] hsr_slave_0: entered promiscuous mode [ 96.398935][ T5838] Bluetooth: hci2: command tx timeout [ 96.401036][ T5152] Bluetooth: hci1: command tx timeout [ 96.405805][ T5841] Bluetooth: hci0: command tx timeout [ 96.415744][ T5835] hsr_slave_1: entered promiscuous mode [ 96.417067][ T5843] Bluetooth: hci3: command tx timeout [ 96.428110][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 96.434283][ T5835] Cannot create hsr debugfs directory [ 96.528284][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.535390][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.561592][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.600123][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.607584][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.633789][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.668673][ T5836] hsr_slave_0: entered promiscuous mode [ 96.675204][ T5836] hsr_slave_1: entered promiscuous mode [ 96.681679][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 96.687496][ T5836] Cannot create hsr debugfs directory [ 96.850942][ T5833] hsr_slave_0: entered promiscuous mode [ 96.857630][ T5833] hsr_slave_1: entered promiscuous mode [ 96.864020][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 96.870035][ T5833] Cannot create hsr debugfs directory [ 97.188219][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.201519][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.210794][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.224309][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.246283][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.258015][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.276153][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.288823][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.359460][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.372202][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.381668][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.392042][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.400716][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.413258][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.421396][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.431798][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.546038][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.560391][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.569297][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.583508][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.600415][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.610325][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.630651][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.640732][ T5836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.738157][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.748716][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.756644][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.770058][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.779150][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.789644][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.805632][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.816147][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.854383][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.915627][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.945942][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.953645][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.984253][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.991475][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.016255][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.098956][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.123608][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.150734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.157946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.185960][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.200037][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.207267][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.243843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.251161][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.278161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.285403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.340988][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.463975][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.479862][ T5843] Bluetooth: hci3: command tx timeout [ 98.485789][ T5841] Bluetooth: hci2: command tx timeout [ 98.486555][ T5838] Bluetooth: hci0: command tx timeout [ 98.493444][ T5843] Bluetooth: hci1: command tx timeout [ 98.524923][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.532362][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.556574][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.563839][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.674361][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.884790][ T5834] veth0_vlan: entered promiscuous mode [ 98.938230][ T5834] veth1_vlan: entered promiscuous mode [ 98.969124][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.107679][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.122922][ T5834] veth0_macvtap: entered promiscuous mode [ 99.161231][ T5834] veth1_macvtap: entered promiscuous mode [ 99.171839][ T5836] veth0_vlan: entered promiscuous mode [ 99.207711][ T5836] veth1_vlan: entered promiscuous mode [ 99.224305][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.245421][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.280139][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.311722][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.321739][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.334443][ T5835] veth0_vlan: entered promiscuous mode [ 99.342592][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.352048][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.420360][ T5835] veth1_vlan: entered promiscuous mode [ 99.429885][ T5836] veth0_macvtap: entered promiscuous mode [ 99.478418][ T5836] veth1_macvtap: entered promiscuous mode [ 99.502529][ T5833] veth0_vlan: entered promiscuous mode [ 99.553228][ T5833] veth1_vlan: entered promiscuous mode [ 99.569940][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.590678][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.611848][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.641171][ T5835] veth0_macvtap: entered promiscuous mode [ 99.663032][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.671028][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.681709][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.689994][ T5835] veth1_macvtap: entered promiscuous mode [ 99.725253][ T1046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.737032][ T1046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.769535][ T5833] veth0_macvtap: entered promiscuous mode [ 99.782229][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.798119][ T1046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.807352][ T1046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.824000][ T5833] veth1_macvtap: entered promiscuous mode [ 99.836812][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.854954][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.910212][ T1046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.969299][ T1046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.002792][ T1046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.012640][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.080377][ T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.101686][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.150351][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.212303][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.223840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.233237][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.273623][ T1046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.324511][ T1046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336075][ T1046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.345461][ T1046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.388961][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.389005][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.559616][ T5841] Bluetooth: hci3: command tx timeout [ 100.559646][ T5152] Bluetooth: hci2: command tx timeout [ 100.565357][ T5843] Bluetooth: hci0: command tx timeout [ 100.572712][ T5838] Bluetooth: hci1: command tx timeout [ 100.660372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.680735][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.876190][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.913918][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.574377][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.612220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.224522][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 102.240432][ T5948] Zero length message leads to an empty skb [ 102.555756][ T5956] netlink: 342 bytes leftover after parsing attributes in process `syz.2.6'. [ 102.637792][ T5838] Bluetooth: hci0: command tx timeout [ 102.637834][ T5838] Bluetooth: hci3: command tx timeout [ 102.638645][ T5152] Bluetooth: hci1: command tx timeout [ 102.638683][ T5152] Bluetooth: hci2: command tx timeout [ 102.824662][ T5954] FAULT_INJECTION: forcing a failure. [ 102.824662][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 102.844793][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 102.844836][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.844863][ T5954] Call Trace: [ 102.844873][ T5954] [ 102.844886][ T5954] dump_stack_lvl+0x100/0x190 [ 102.844948][ T5954] should_fail_ex.cold+0x5/0xa [ 102.844987][ T5954] ? memcg_list_lru_alloc+0x4ec/0x740 [ 102.845040][ T5954] should_failslab+0xc2/0x120 [ 102.845071][ T5954] __kmalloc_noprof+0xe0/0x850 [ 102.845117][ T5954] ? proc_ns_get_link+0x121/0x230 [ 102.845169][ T5954] memcg_list_lru_alloc+0x4ec/0x740 [ 102.845230][ T5954] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 102.845287][ T5954] ? rcu_read_unlock+0x17/0x60 [ 102.845330][ T5954] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 102.845386][ T5954] __memcg_slab_post_alloc_hook+0x15d/0xdf0 [ 102.845431][ T5954] ? kasan_save_track+0x14/0x30 [ 102.845485][ T5954] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 102.845533][ T5954] ? alloc_inode+0x183/0x250 [ 102.845583][ T5954] alloc_inode+0x183/0x250 [ 102.845624][ T5954] path_from_stashed+0x25b/0x750 [ 102.845658][ T5954] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.845706][ T5954] ns_get_path+0x60/0x80 [ 102.845740][ T5954] proc_ns_get_link+0x121/0x230 [ 102.845787][ T5954] ? __pfx_proc_ns_get_link+0x10/0x10 [ 102.845858][ T5954] ? atime_needs_update+0x8b/0x6b0 [ 102.845911][ T5954] pick_link+0xd17/0x13c0 [ 102.845957][ T5954] ? __pfx_proc_ns_get_link+0x10/0x10 [ 102.846011][ T5954] step_into_slowpath+0x9ba/0xf90 [ 102.846066][ T5954] ? __pfx_step_into_slowpath+0x10/0x10 [ 102.846114][ T5954] ? find_held_lock+0x2b/0x80 [ 102.846166][ T5954] path_openat+0xf95/0x31a0 [ 102.846211][ T5954] ? __pfx_path_openat+0x10/0x10 [ 102.846266][ T5954] do_file_open+0x20e/0x430 [ 102.846302][ T5954] ? __pfx_do_file_open+0x10/0x10 [ 102.846361][ T5954] ? alloc_fd+0x476/0x790 [ 102.846394][ T5954] ? do_getname+0x191/0x390 [ 102.846436][ T5954] do_sys_openat2+0x10d/0x1e0 [ 102.846477][ T5954] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.846522][ T5954] ? __fget_files+0x21f/0x3d0 [ 102.846583][ T5954] __x64_sys_openat+0x12d/0x210 [ 102.846628][ T5954] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.846679][ T5954] ? rcu_is_watching+0x12/0xc0 [ 102.846721][ T5954] do_syscall_64+0x10b/0xf80 [ 102.846763][ T5954] ? clear_bhb_loop+0x40/0x90 [ 102.846805][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.846840][ T5954] RIP: 0033:0x7f41fc15d04e [ 102.846877][ T5954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.846916][ T5954] RSP: 002b:00007f41fd015ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.846953][ T5954] RAX: ffffffffffffffda RBX: 00007f41fd0166c0 RCX: 00007f41fc15d04e [ 102.846976][ T5954] RDX: 0000000000000002 RSI: 00007f41fd015f90 RDI: ffffffffffffff9c [ 102.846997][ T5954] RBP: 00007f41fc232c91 R08: 0000000000000000 R09: 0000000000000000 [ 102.847017][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.847036][ T5954] R13: 00007f41fc416038 R14: 00007f41fc415fa0 R15: 00007ffed8dfd8a8 [ 102.847081][ T5954] [ 103.490695][ T5961] binder: 5953:5961 ioctl c00c620f 2000000001c0 returned -22 [ 103.610498][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.287768][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.363169][ T5991] netlink: 354 bytes leftover after parsing attributes in process `syz.0.14'. [ 105.586004][ T5984] syz.1.13 (5984) used greatest stack depth: 19704 bytes left [ 105.969748][ T5998] netlink: 350 bytes leftover after parsing attributes in process `syz.1.17'. [ 106.610182][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 106.647778][ T6007] netlink: 354 bytes leftover after parsing attributes in process `syz.3.20'. [ 106.985327][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.997705][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 107.050065][ T6005] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 107.138070][ T6005] mmap: syz.0.18 (6005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.971287][ T6029] can: request_module (can-proto-0) failed. [ 108.502697][ T6038] netlink: 25 bytes leftover after parsing attributes in process `syz.2.27'. [ 108.543254][ T6039] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.679211][ T30] audit: type=1800 audit(1776440917.795:2): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="dummy_udc" dev="gadgetfs" ino=7320 res=0 errno=0 [ 108.881050][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 108.935537][ T6041] netlink: 354 bytes leftover after parsing attributes in process `syz.2.28'. [ 110.132737][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 111.053945][ T6073] netlink: 342 bytes leftover after parsing attributes in process `syz.1.35'. [ 111.268547][ T6072] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 112.185965][ T6087] FAULT_INJECTION: forcing a failure. [ 112.185965][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 112.310170][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 112.310211][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.310225][ T6087] Call Trace: [ 112.310233][ T6087] [ 112.310242][ T6087] dump_stack_lvl+0x100/0x190 [ 112.310295][ T6087] should_fail_ex.cold+0x5/0xa [ 112.310325][ T6087] ? tomoyo_realpath_from_path+0xb6/0x690 [ 112.310360][ T6087] should_failslab+0xc2/0x120 [ 112.310384][ T6087] __kmalloc_noprof+0xe0/0x850 [ 112.310417][ T6087] ? kfree+0x1dd/0x6c0 [ 112.310450][ T6087] tomoyo_realpath_from_path+0xb6/0x690 [ 112.310492][ T6087] tomoyo_path_number_perm+0x23c/0x580 [ 112.310520][ T6087] ? tomoyo_path_number_perm+0x22e/0x580 [ 112.310550][ T6087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.310578][ T6087] ? __lock_acquire+0x4a5/0x2630 [ 112.310623][ T6087] ? d_splice_alias_ops+0x5be/0x1320 [ 112.310658][ T6087] ? d_splice_alias_ops+0x5be/0x1320 [ 112.310705][ T6087] ? kernfs_iop_lookup+0x234/0x2d0 [ 112.310741][ T6087] ? current_check_access_path+0x269/0x430 [ 112.310777][ T6087] ? __pfx_current_check_access_path+0x10/0x10 [ 112.310812][ T6087] ? kernfs_iop_lookup+0x247/0x2d0 [ 112.310858][ T6087] ? lookup_one_qstr_excl+0xaf/0x250 [ 112.310895][ T6087] tomoyo_path_mkdir+0x9b/0xe0 [ 112.310937][ T6087] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 112.310984][ T6087] security_path_mkdir+0x154/0x2e0 [ 112.311019][ T6087] filename_mkdirat+0x168/0x5e0 [ 112.311047][ T6087] ? __pfx_filename_mkdirat+0x10/0x10 [ 112.311081][ T6087] ? strncpy_from_user+0x19d/0x2d0 [ 112.311112][ T6087] ? do_getname+0x191/0x390 [ 112.311144][ T6087] __x64_sys_mkdir+0x6b/0x90 [ 112.311170][ T6087] do_syscall_64+0x10b/0xf80 [ 112.311199][ T6087] ? clear_bhb_loop+0x40/0x90 [ 112.311238][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.311263][ T6087] RIP: 0033:0x7fc7ed99c819 [ 112.311282][ T6087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.311305][ T6087] RSP: 002b:00007fc7ee89a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 112.311327][ T6087] RAX: ffffffffffffffda RBX: 00007fc7edc15fa0 RCX: 00007fc7ed99c819 [ 112.311343][ T6087] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 112.311357][ T6087] RBP: 00007fc7eda32c91 R08: 0000000000000000 R09: 0000000000000000 [ 112.311371][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.311384][ T6087] R13: 00007fc7edc16038 R14: 00007fc7edc15fa0 R15: 00007ffed8216ea8 [ 112.311414][ T6087] [ 112.872419][ T6087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.075232][ T5838] Bluetooth: hci1: unexpected event 0x10 length: 11 > 1 [ 113.076312][ T5152] Bluetooth: hci1: hardware error 0x00 [ 115.197334][ T5152] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 115.214007][ T6113] ecryptfs_miscdev_write: Invalid packet size [0] [ 120.173010][ T6170] process 'syz.2.52' launched './file0' with NULL argv: empty string added [ 122.322009][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.373476][ T6190] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 122.415294][ T6190] netlink: 'syz.0.56': attribute type 3 has an invalid length. [ 122.442846][ T6190] netlink: 51465 bytes leftover after parsing attributes in process `syz.0.56'. [ 123.597938][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.604747][ T6179] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.984845][ T6203] TCP: TCP_TX_DELAY enabled [ 124.182750][ T6179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.212177][ T6179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.225651][ T6179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.234591][ T6179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.246694][ T6179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.255944][ T6179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.262392][ T6179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.271785][ T6179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.889321][ T6205] kexec: Could not allocate control_code_buffer [ 124.972097][ T6213] netlink: 342 bytes leftover after parsing attributes in process `syz.2.62'. [ 125.677355][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.129384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.237534][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.317345][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.757280][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.101978][ T6241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.114769][ T6241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.182898][ T6241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.078354][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.157445][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.197301][ T6269] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.203461][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 130.237934][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.237460][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.320088][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.968262][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974713][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112509][ T6304] __vm_enough_memory: pid: 6304, comm: syz.2.77, bytes: 4398046511104 not enough memory for the allocation [ 134.168900][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 134.241685][ T5152] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 136.318506][ T6372] netlink: 330 bytes leftover after parsing attributes in process `syz.3.85'. [ 136.366926][ T6372] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 139.009377][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 139.047797][ T6401] netlink: 354 bytes leftover after parsing attributes in process `syz.1.91'. [ 141.278663][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.533591][ T6501] bridge0: port 3(gretap0) entered blocking state [ 145.563548][ T6501] bridge0: port 3(gretap0) entered disabled state [ 145.599472][ T6501] gretap0: entered allmulticast mode [ 145.637672][ T6501] gretap0: entered promiscuous mode [ 145.672232][ T6501] FAULT_INJECTION: forcing a failure. [ 145.672232][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 145.715478][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.1.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.715534][ T6501] Tainted: [L]=SOFTLOCKUP [ 145.715542][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.715557][ T6501] Call Trace: [ 145.715564][ T6501] [ 145.715573][ T6501] dump_stack_lvl+0x100/0x190 [ 145.715621][ T6501] should_fail_ex.cold+0x5/0xa [ 145.715651][ T6501] should_failslab+0xc2/0x120 [ 145.715675][ T6501] __kmalloc_cache_noprof+0x7a/0x6f0 [ 145.715705][ T6501] ? nbp_vlan_add+0x1eb/0x3e0 [ 145.715743][ T6501] nbp_vlan_add+0x1eb/0x3e0 [ 145.715774][ T6501] nbp_vlan_init+0x373/0x500 [ 145.715803][ T6501] ? __pfx_nbp_vlan_init+0x10/0x10 [ 145.715839][ T6501] ? br_fdb_add_local+0x43/0x60 [ 145.715867][ T6501] ? __local_bh_enable_ip+0xff/0x120 [ 145.715939][ T6501] br_add_if+0xf79/0x1b40 [ 145.715980][ T6501] ? veth_get_iflink+0x253/0x2c0 [ 145.716013][ T6501] add_del_if+0x114/0x160 [ 145.716044][ T6501] br_dev_siocdevprivate+0x8ac/0x1650 [ 145.716080][ T6501] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 145.716118][ T6501] ? do_raw_spin_lock+0x128/0x260 [ 145.716144][ T6501] ? find_held_lock+0x2b/0x80 [ 145.716172][ T6501] ? debug_mutex_remove_waiter+0xa8/0x320 [ 145.716200][ T6501] ? debug_mutex_remove_waiter+0xa8/0x320 [ 145.716238][ T6501] ? netdev_name_node_lookup+0x107/0x150 [ 145.716268][ T6501] ? __mutex_lock+0x838/0x1b10 [ 145.716303][ T6501] dev_ifsioc+0xc1e/0x1e90 [ 145.716337][ T6501] ? __pfx_dev_ifsioc+0x10/0x10 [ 145.716371][ T6501] ? __pfx___mutex_lock+0x10/0x10 [ 145.716412][ T6501] ? dev_load+0x8e/0x240 [ 145.716440][ T6501] ? dev_load+0x8e/0x240 [ 145.716499][ T6501] dev_ioctl+0x70e/0x1070 [ 145.716546][ T6501] sock_ioctl+0x494/0x6b0 [ 145.716587][ T6501] ? __pfx_sock_ioctl+0x10/0x10 [ 145.716623][ T6501] ? hook_file_ioctl_common+0x149/0x410 [ 145.716666][ T6501] ? __fget_files+0x21f/0x3d0 [ 145.716716][ T6501] ? __pfx_sock_ioctl+0x10/0x10 [ 145.716758][ T6501] __x64_sys_ioctl+0x18e/0x210 [ 145.716801][ T6501] do_syscall_64+0x10b/0xf80 [ 145.716840][ T6501] ? clear_bhb_loop+0x40/0x90 [ 145.716877][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.716912][ T6501] RIP: 0033:0x7efc9fb9c819 [ 145.716951][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.716979][ T6501] RSP: 002b:00007efc9ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.717007][ T6501] RAX: ffffffffffffffda RBX: 00007efc9fe16090 RCX: 00007efc9fb9c819 [ 145.717027][ T6501] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009 [ 145.717044][ T6501] RBP: 00007efc9fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 145.717061][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.717077][ T6501] R13: 00007efc9fe16128 R14: 00007efc9fe16090 R15: 00007ffc72f2ad78 [ 145.717116][ T6501] [ 146.074358][ T6501] gretap0: failed to initialize vlan filtering on this port [ 146.094521][ T6501] gretap0: left allmulticast mode [ 146.172327][ T6499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.183362][ T6499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.345953][ T6499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.029660][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.113'. [ 147.598294][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.397378][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.397524][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.781822][ T6545] vivid-007: ================= START STATUS ================= [ 149.800553][ T6545] vivid-007: Generate PTS: true [ 149.823921][ T6545] vivid-007: Generate SCR: true [ 149.851367][ T6545] tpg source WxH: 320x240 (Y'CbCr) [ 149.877448][ T6545] tpg field: 1 [ 149.896167][ T6545] tpg crop: (0,0)/320x240 [ 149.963106][ T6545] tpg compose: (0,0)/320x240 [ 150.010913][ T6545] tpg colorspace: 8 [ 150.039669][ T6545] tpg transfer function: 0/0 [ 150.092779][ T6545] tpg Y'CbCr encoding: 0/0 [ 150.167287][ T6545] tpg quantization: 0/0 [ 150.211175][ T6545] tpg RGB range: 0/2 [ 150.258319][ T6545] vivid-007: ================== END STATUS ================== [ 150.924662][ T6568] FAULT_INJECTION: forcing a failure. [ 150.924662][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 150.924708][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.2.121 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.924741][ T6568] Tainted: [L]=SOFTLOCKUP [ 150.924749][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.924763][ T6568] Call Trace: [ 150.924770][ T6568] [ 150.924779][ T6568] dump_stack_lvl+0x100/0x190 [ 150.924824][ T6568] should_fail_ex.cold+0x5/0xa [ 150.924855][ T6568] should_failslab+0xc2/0x120 [ 150.924879][ T6568] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 150.924917][ T6568] ? kvasprintf_const+0x66/0x1a0 [ 150.924952][ T6568] kvasprintf+0xbc/0x150 [ 150.924980][ T6568] ? __pfx_kvasprintf+0x10/0x10 [ 150.925009][ T6568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.925041][ T6568] ? lockdep_init_map_type+0x5c/0x250 [ 150.925087][ T6568] kvasprintf_const+0x66/0x1a0 [ 150.925117][ T6568] kobject_set_name_vargs+0x5a/0x140 [ 150.925164][ T6568] device_create_groups_vargs+0x1b1/0x270 [ 150.925204][ T6568] device_create+0xed/0x130 [ 150.925239][ T6568] ? __pfx_device_create+0x10/0x10 [ 150.925270][ T6568] ? do_raw_spin_lock+0x128/0x260 [ 150.925296][ T6568] ? is_console_locked+0x9/0x20 [ 150.925330][ T6568] ? con_is_visible+0x65/0x150 [ 150.925361][ T6568] ? csi_J+0x57e/0xad0 [ 150.925405][ T6568] vcs_make_sysfs+0x32/0x80 [ 150.925439][ T6568] vc_allocate+0x539/0x880 [ 150.925461][ T6568] ? __pfx_vc_allocate+0x10/0x10 [ 150.925491][ T6568] con_install+0xa1/0x620 [ 150.925515][ T6568] ? __pfx_con_install+0x10/0x10 [ 150.925542][ T6568] ? __pfx_con_install+0x10/0x10 [ 150.925565][ T6568] tty_init_dev.part.0+0x9e/0x470 [ 150.925593][ T6568] tty_open+0xa63/0xfa0 [ 150.925623][ T6568] ? __pfx_tty_open+0x10/0x10 [ 150.925646][ T6568] ? chrdev_open+0x589/0x6a0 [ 150.925668][ T6568] ? chrdev_open+0x589/0x6a0 [ 150.925695][ T6568] ? __pfx_tty_open+0x10/0x10 [ 150.925719][ T6568] chrdev_open+0x234/0x6a0 [ 150.925743][ T6568] ? __pfx_chrdev_open+0x10/0x10 [ 150.925767][ T6568] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 150.925831][ T6568] do_dentry_open+0x6d8/0x1660 [ 150.925867][ T6568] ? __pfx_chrdev_open+0x10/0x10 [ 150.925897][ T6568] vfs_open+0x82/0x3f0 [ 150.925929][ T6568] path_openat+0x208c/0x31a0 [ 150.925962][ T6568] ? __pfx_path_openat+0x10/0x10 [ 150.925997][ T6568] do_file_open+0x20e/0x430 [ 150.926022][ T6568] ? __pfx_do_file_open+0x10/0x10 [ 150.926067][ T6568] ? alloc_fd+0x476/0x790 [ 150.926091][ T6568] ? do_getname+0x191/0x390 [ 150.926122][ T6568] do_sys_openat2+0x10d/0x1e0 [ 150.926159][ T6568] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.926192][ T6568] ? __fget_files+0x21f/0x3d0 [ 150.926236][ T6568] __x64_sys_openat+0x12d/0x210 [ 150.926267][ T6568] ? __pfx___x64_sys_openat+0x10/0x10 [ 150.926303][ T6568] ? rcu_is_watching+0x12/0xc0 [ 150.926334][ T6568] do_syscall_64+0x10b/0xf80 [ 150.926362][ T6568] ? clear_bhb_loop+0x40/0x90 [ 150.926393][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.926420][ T6568] RIP: 0033:0x7f2f20d9c819 [ 150.926439][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.926462][ T6568] RSP: 002b:00007f2f21c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.926485][ T6568] RAX: ffffffffffffffda RBX: 00007f2f21016090 RCX: 00007f2f20d9c819 [ 150.926501][ T6568] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 150.926515][ T6568] RBP: 00007f2f20e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 150.926529][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.926543][ T6568] R13: 00007f2f21016128 R14: 00007f2f21016090 R15: 00007ffed454cd48 [ 150.926573][ T6568] [ 154.480948][ T6610] FAULT_INJECTION: forcing a failure. [ 154.480948][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 154.516195][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.1.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.516250][ T6610] Tainted: [L]=SOFTLOCKUP [ 154.516262][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 154.516286][ T6610] Call Trace: [ 154.516297][ T6610] [ 154.516310][ T6610] dump_stack_lvl+0x100/0x190 [ 154.516376][ T6610] should_fail_ex.cold+0x5/0xa [ 154.516419][ T6610] should_failslab+0xc2/0x120 [ 154.516454][ T6610] __kmalloc_cache_noprof+0x7a/0x6f0 [ 154.516498][ T6610] ? sctp_auth_init+0x12c/0x530 [ 154.516560][ T6610] sctp_auth_init+0x12c/0x530 [ 154.516618][ T6610] sctp_setsockopt+0x64d6/0xb370 [ 154.516656][ T6610] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.516702][ T6610] ? __pfx_sctp_setsockopt+0x10/0x10 [ 154.516744][ T6610] ? aa_sock_opt_perm+0xfe/0x1b0 [ 154.516822][ T6610] ? sock_common_setsockopt+0x2e/0xf0 [ 154.516854][ T6610] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.516893][ T6610] do_sock_setsockopt+0xf3/0x1d0 [ 154.516954][ T6610] __sys_setsockopt+0x119/0x190 [ 154.517007][ T6610] __x64_sys_setsockopt+0xbd/0x160 [ 154.517048][ T6610] ? do_syscall_64+0x90/0xf80 [ 154.517083][ T6610] ? lockdep_hardirqs_on+0x78/0x100 [ 154.517124][ T6610] do_syscall_64+0x10b/0xf80 [ 154.517162][ T6610] ? clear_bhb_loop+0x40/0x90 [ 154.517204][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.517237][ T6610] RIP: 0033:0x7efc9fb9c819 [ 154.517265][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.517297][ T6610] RSP: 002b:00007efca0980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.517328][ T6610] RAX: ffffffffffffffda RBX: 00007efc9fe15fa0 RCX: 00007efc9fb9c819 [ 154.517350][ T6610] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 154.517369][ T6610] RBP: 00007efc9fc32c91 R08: 0000000000000008 R09: 0000000000000000 [ 154.517388][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.517407][ T6610] R13: 00007efc9fe16038 R14: 00007efc9fe15fa0 R15: 00007ffc72f2ad78 [ 154.517451][ T6610] [ 156.472732][ T6640] FAULT_INJECTION: forcing a failure. [ 156.472732][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.508180][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.1.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.508231][ T6640] Tainted: [L]=SOFTLOCKUP [ 156.508241][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.508260][ T6640] Call Trace: [ 156.508270][ T6640] [ 156.508281][ T6640] dump_stack_lvl+0x100/0x190 [ 156.508342][ T6640] should_fail_ex.cold+0x5/0xa [ 156.508383][ T6640] core_sys_select+0x938/0xbb0 [ 156.508444][ T6640] ? __pfx_core_sys_select+0x10/0x10 [ 156.508541][ T6640] ? ktime_get_ts64+0x306/0x420 [ 156.508591][ T6640] ? ktime_get_ts64+0x318/0x420 [ 156.508635][ T6640] ? ktime_get_ts64+0x257/0x420 [ 156.508687][ T6640] kern_select+0x20c/0x270 [ 156.508742][ T6640] ? __pfx_kern_select+0x10/0x10 [ 156.508795][ T6640] ? xfd_validate_state+0x129/0x190 [ 156.508837][ T6640] __x64_sys_select+0xbd/0x160 [ 156.508886][ T6640] ? do_syscall_64+0x90/0xf80 [ 156.508933][ T6640] ? lockdep_hardirqs_on+0x78/0x100 [ 156.508974][ T6640] do_syscall_64+0x10b/0xf80 [ 156.509014][ T6640] ? clear_bhb_loop+0x40/0x90 [ 156.509055][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.509089][ T6640] RIP: 0033:0x7efc9fb9c819 [ 156.509114][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.509145][ T6640] RSP: 002b:00007efca0980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 156.509175][ T6640] RAX: ffffffffffffffda RBX: 00007efc9fe15fa0 RCX: 00007efc9fb9c819 [ 156.509196][ T6640] RDX: 0000200000000100 RSI: 0000200000000340 RDI: 0000000000000001 [ 156.509215][ T6640] RBP: 00007efc9fc32c91 R08: 0000200000000200 R09: 0000000000000000 [ 156.509234][ T6640] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 156.509262][ T6640] R13: 00007efc9fe16038 R14: 00007efc9fe15fa0 R15: 00007ffc72f2ad78 [ 156.509304][ T6640] [ 157.016426][ T6648] random: crng reseeded on system resumption [ 157.903741][ T6650] hub 1-0:1.0: USB hub found [ 157.963091][ T6650] hub 1-0:1.0: 1 port detected [ 159.288354][ T6674] futex_wake_op: syz.2.135 tries to shift op by -2048; fix this program [ 159.337851][ T6671] FAULT_INJECTION: forcing a failure. [ 159.337851][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 159.407741][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.0.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.407780][ T6671] Tainted: [L]=SOFTLOCKUP [ 159.407788][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 159.407802][ T6671] Call Trace: [ 159.407810][ T6671] [ 159.407819][ T6671] dump_stack_lvl+0x100/0x190 [ 159.407877][ T6671] should_fail_ex.cold+0x5/0xa [ 159.407909][ T6671] should_failslab+0xc2/0x120 [ 159.407932][ T6671] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 159.407966][ T6671] ? acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 159.407996][ T6671] ? acpi_ut_trace+0x1d7/0x2a0 [ 159.408033][ T6671] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 159.408064][ T6671] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 159.408096][ T6671] acpi_ut_create_integer_object+0x46/0xe0 [ 159.408151][ T6671] acpi_ps_execute_method+0x582/0xe90 [ 159.408212][ T6671] acpi_ns_evaluate+0x640/0x1670 [ 159.408257][ T6671] acpi_evaluate_object+0x420/0xe00 [ 159.408285][ T6671] ? kasan_save_stack+0x30/0x50 [ 159.408320][ T6671] ? kasan_save_track+0x14/0x30 [ 159.408354][ T6671] ? __kasan_kmalloc+0xaa/0xb0 [ 159.408388][ T6671] ? __kvmalloc_node_noprof+0x360/0xa00 [ 159.408436][ T6671] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 159.408464][ T6671] ? lock_acquire+0x1b1/0x370 [ 159.408513][ T6671] acpi_evaluate_integer+0xdf/0x220 [ 159.408554][ T6671] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 159.408608][ T6671] ? __pfx_status_show+0x10/0x10 [ 159.408635][ T6671] status_show+0xa0/0x120 [ 159.408663][ T6671] ? __pfx_status_show+0x10/0x10 [ 159.408698][ T6671] dev_attr_show+0x52/0xa0 [ 159.408731][ T6671] ? __pfx_dev_attr_show+0x10/0x10 [ 159.408763][ T6671] sysfs_kf_seq_show+0x217/0x3a0 [ 159.408801][ T6671] seq_read_iter+0x32f/0x1270 [ 159.408836][ T6671] ? lock_acquire+0x1b1/0x370 [ 159.408883][ T6671] kernfs_fop_read_iter+0x46c/0x610 [ 159.408912][ T6671] ? rw_verify_area+0xce/0x6d0 [ 159.408945][ T6671] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 159.408976][ T6671] vfs_read+0x825/0xb30 [ 159.409016][ T6671] ? __pfx_vfs_read+0x10/0x10 [ 159.409071][ T6671] ksys_read+0x12a/0x250 [ 159.409108][ T6671] ? __pfx_ksys_read+0x10/0x10 [ 159.409148][ T6671] ? rcu_is_watching+0x12/0xc0 [ 159.409178][ T6671] do_syscall_64+0x10b/0xf80 [ 159.409207][ T6671] ? clear_bhb_loop+0x40/0x90 [ 159.409236][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.409261][ T6671] RIP: 0033:0x7f41fc19c819 [ 159.409281][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.409304][ T6671] RSP: 002b:00007f41fd016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.409326][ T6671] RAX: ffffffffffffffda RBX: 00007f41fc415fa0 RCX: 00007f41fc19c819 [ 159.409341][ T6671] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 159.409355][ T6671] RBP: 00007f41fc232c91 R08: 0000000000000000 R09: 0000000000000000 [ 159.409369][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.409383][ T6671] R13: 00007f41fc416038 R14: 00007f41fc415fa0 R15: 00007ffed8dfd8a8 [ 159.409413][ T6671] [ 159.496147][ T6671] ACPI Error: Could not allocate an object descriptor (20251212/utobject-180) [ 159.823300][ T6671] ACPI Error: ffff88805dfcb000 walk still has a scope list (20251212/dswstate-694) [ 160.054025][ T6681] capability: warning: `syz.3.136' uses 32-bit capabilities (legacy support in use) [ 160.965026][ T6693] can0: slcan on ttyS2. [ 161.219855][ T6692] can0 (unregistered): slcan off ttyS2. [ 162.045181][ T6699] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 162.750720][ T6727] netlink: 186 bytes leftover after parsing attributes in process `syz.0.144'. [ 163.237640][ T6731] syz.2.146 uses obsolete (PF_INET,SOCK_PACKET) [ 163.360418][ T6731] can0: slcan on ptm0. [ 163.829489][ T6730] can0 (unregistered): slcan off ptm0. [ 165.452737][ T6756] FAULT_INJECTION: forcing a failure. [ 165.452737][ T6756] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 165.508009][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.1.149 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.508046][ T6756] Tainted: [L]=SOFTLOCKUP [ 165.508054][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.508068][ T6756] Call Trace: [ 165.508076][ T6756] [ 165.508084][ T6756] dump_stack_lvl+0x100/0x190 [ 165.508131][ T6756] should_fail_ex.cold+0x5/0xa [ 165.508157][ T6756] ? prepare_alloc_pages+0x16d/0x5f0 [ 165.508186][ T6756] should_fail_alloc_page+0xeb/0x140 [ 165.508211][ T6756] prepare_alloc_pages+0x1f0/0x5f0 [ 165.508242][ T6756] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 165.508284][ T6756] ? stack_trace_save+0x8e/0xc0 [ 165.508315][ T6756] ? __pfx_stack_trace_save+0x10/0x10 [ 165.508348][ T6756] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 165.508385][ T6756] ? stack_depot_save_flags+0x27/0x9d0 [ 165.508418][ T6756] ? __lock_acquire+0x4a5/0x2630 [ 165.508458][ T6756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 165.508494][ T6756] ? kasan_save_track+0x14/0x30 [ 165.508529][ T6756] ? __kasan_slab_alloc+0x89/0x90 [ 165.508565][ T6756] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 165.508599][ T6756] ? copy_page_range+0x418b/0x5b00 [ 165.508629][ T6756] ? copy_process+0x7b37/0x7fa0 [ 165.508659][ T6756] ? kernel_clone+0x12e/0x9c0 [ 165.508688][ T6756] ? __do_sys_clone+0xd9/0x120 [ 165.508717][ T6756] ? do_syscall_64+0x10b/0xf80 [ 165.508746][ T6756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.508784][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.508819][ T6756] ? policy_nodemask+0xed/0x4f0 [ 165.508845][ T6756] alloc_pages_mpol+0x1fb/0x540 [ 165.508876][ T6756] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 165.508907][ T6756] alloc_pages_noprof+0x1a/0x160 [ 165.508936][ T6756] pte_alloc_one+0x1c/0x3d0 [ 165.508970][ T6756] __pte_alloc+0x6d/0x3e0 [ 165.508992][ T6756] ? __pfx___pte_alloc+0x10/0x10 [ 165.509015][ T6756] ? _raw_spin_unlock+0x28/0x50 [ 165.509039][ T6756] ? __pmd_alloc+0x3fb/0x950 [ 165.509068][ T6756] copy_page_range+0x3dbb/0x5b00 [ 165.509130][ T6756] ? mas_wr_store_entry+0xa1/0x1e80 [ 165.509166][ T6756] ? __pfx_copy_page_range+0x10/0x10 [ 165.509203][ T6756] ? mas_store+0x666/0xac0 [ 165.509238][ T6756] ? __pfx_mas_store+0x10/0x10 [ 165.509278][ T6756] ? __pfx___vma_start_write+0x10/0x10 [ 165.509317][ T6756] dup_mmap+0xd25/0x2180 [ 165.509355][ T6756] ? __pfx_dup_mmap+0x10/0x10 [ 165.509380][ T6756] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 165.509414][ T6756] ? __lock_acquire+0x4a5/0x2630 [ 165.509452][ T6756] ? find_held_lock+0x2b/0x80 [ 165.509479][ T6756] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 165.509530][ T6756] copy_process+0x7b37/0x7fa0 [ 165.509577][ T6756] ? __pfx_copy_process+0x10/0x10 [ 165.509608][ T6756] ? find_held_lock+0x2b/0x80 [ 165.509641][ T6756] ? futex_private_hash_put+0x107/0x1c0 [ 165.509684][ T6756] kernel_clone+0x12e/0x9c0 [ 165.509717][ T6756] ? __pfx_kernel_clone+0x10/0x10 [ 165.509764][ T6756] __do_sys_clone+0xd9/0x120 [ 165.509796][ T6756] ? __pfx___do_sys_clone+0x10/0x10 [ 165.509856][ T6756] ? rcu_is_watching+0x12/0xc0 [ 165.509887][ T6756] do_syscall_64+0x10b/0xf80 [ 165.509916][ T6756] ? clear_bhb_loop+0x40/0x90 [ 165.509946][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.509971][ T6756] RIP: 0033:0x7efc9fb9c819 [ 165.509991][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.510013][ T6756] RSP: 002b:00007efca0980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 165.510035][ T6756] RAX: ffffffffffffffda RBX: 00007efc9fe15fa0 RCX: 00007efc9fb9c819 [ 165.510051][ T6756] RDX: 0000000000000000 RSI: 00000000000072d2 RDI: 0000000000000004 [ 165.510065][ T6756] RBP: 00007efc9fc32c91 R08: 0000000000000004 R09: 0000000000000000 [ 165.510079][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.510093][ T6756] R13: 00007efc9fe16038 R14: 00007efc9fe15fa0 R15: 00007ffc72f2ad78 [ 165.510122][ T6756] [ 166.107366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 168.019366][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 168.053968][ T6799] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 168.104162][ T6799] netlink: 5 bytes leftover after parsing attributes in process `syz.0.155'. [ 168.277367][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'. [ 168.341142][ T6782] ipvlan1: entered promiscuous mode [ 168.356803][ T6782] ipvlan1: entered allmulticast mode [ 168.380663][ T6782] veth0_vlan: entered allmulticast mode [ 169.722013][ T6832] netlink: 13 bytes leftover after parsing attributes in process `syz.0.163'. [ 171.008055][ T6848] MTRR 1 not used [ 171.075574][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 172.506252][ T6866] vivid-007: ================= START STATUS ================= [ 172.552366][ T6866] vivid-007: Generate PTS: true [ 172.595173][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 172.610213][ T6866] vivid-007: Generate SCR: true [ 172.643621][ T6866] tpg source WxH: 320x240 (Y'CbCr) [ 172.703548][ T6866] tpg field: 1 [ 172.707072][ T6866] tpg crop: (0,0)/320x240 [ 172.714052][ T6866] tpg compose: (0,0)/320x240 [ 172.775826][ T6866] tpg colorspace: 8 [ 172.825396][ T6866] tpg transfer function: 0/0 [ 172.846374][ T6866] tpg Y'CbCr encoding: 0/0 [ 172.872493][ T6866] tpg quantization: 0/0 [ 172.923456][ T6866] tpg RGB range: 0/2 [ 172.956900][ T6866] vivid-007: ================== END STATUS ================== [ 173.854296][ T6896] FAULT_INJECTION: forcing a failure. [ 173.854296][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 173.898855][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.2.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.898892][ T6896] Tainted: [L]=SOFTLOCKUP [ 173.898901][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.898914][ T6896] Call Trace: [ 173.898922][ T6896] [ 173.898931][ T6896] dump_stack_lvl+0x100/0x190 [ 173.898978][ T6896] should_fail_ex.cold+0x5/0xa [ 173.899008][ T6896] should_failslab+0xc2/0x120 [ 173.899031][ T6896] __kmalloc_cache_noprof+0x7a/0x6f0 [ 173.899074][ T6896] ? usb_control_msg+0xbc/0x4b0 [ 173.899096][ T6896] ? __pfx___mutex_lock+0x10/0x10 [ 173.899132][ T6896] usb_control_msg+0xbc/0x4b0 [ 173.899156][ T6896] ? __pfx_usb_control_msg+0x10/0x10 [ 173.899186][ T6896] ? __lock_acquire+0x4a5/0x2630 [ 173.899228][ T6896] hub_ext_port_status+0x152/0x600 [ 173.899276][ T6896] hub_activate+0x6d8/0x1d50 [ 173.899307][ T6896] ? __pfx_hub_activate+0x10/0x10 [ 173.899331][ T6896] ? usb_generic_driver_resume+0x70/0xa0 [ 173.899373][ T6896] ? usbdev_ioctl+0x2380/0x3aa0 [ 173.899420][ T6896] hub_resume+0xb0/0x400 [ 173.899443][ T6896] ? usb_hub_find_child+0x1d6/0x240 [ 173.899481][ T6896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.899515][ T6896] ? __pfx_hub_resume+0x10/0x10 [ 173.899541][ T6896] ? __pfx_hcd_bus_resume+0x10/0x10 [ 173.899583][ T6896] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 173.899620][ T6896] usb_resume_both+0x53a/0x7f0 [ 173.899654][ T6896] ? __pfx_usb_resume_both+0x10/0x10 [ 173.899685][ T6896] ? __rpm_callback+0x272/0x620 [ 173.899715][ T6896] ? __pfx_usb_runtime_resume+0x10/0x10 [ 173.899750][ T6896] ? rcu_is_watching+0x12/0xc0 [ 173.899778][ T6896] ? __pfx_usb_runtime_resume+0x10/0x10 [ 173.899855][ T6896] __rpm_callback+0xc8/0x620 [ 173.899893][ T6896] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 173.899943][ T6896] ? __pfx_usb_runtime_resume+0x10/0x10 [ 173.899995][ T6896] rpm_callback+0x16a/0x1b0 [ 173.900051][ T6896] ? __pfx_usb_runtime_resume+0x10/0x10 [ 173.900089][ T6896] rpm_resume+0xd22/0x1330 [ 173.900115][ T6896] ? usbdev_open+0x1b6/0x870 [ 173.900156][ T6896] ? __pfx_rpm_resume+0x10/0x10 [ 173.900189][ T6896] ? do_raw_spin_lock+0x128/0x260 [ 173.900215][ T6896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 173.900242][ T6896] ? _raw_spin_lock_irqsave+0x52/0x60 [ 173.900276][ T6896] __pm_runtime_resume+0xb6/0x170 [ 173.900307][ T6896] usb_autoresume_device+0x23/0xe0 [ 173.900344][ T6896] usbdev_open+0x228/0x870 [ 173.900381][ T6896] ? do_raw_spin_lock+0x128/0x260 [ 173.900405][ T6896] ? __pfx_usbdev_open+0x10/0x10 [ 173.900443][ T6896] ? chrdev_open+0x589/0x6a0 [ 173.900465][ T6896] ? chrdev_open+0x589/0x6a0 [ 173.900491][ T6896] ? __pfx_usbdev_open+0x10/0x10 [ 173.900527][ T6896] chrdev_open+0x234/0x6a0 [ 173.900550][ T6896] ? __pfx_chrdev_open+0x10/0x10 [ 173.900575][ T6896] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 173.900606][ T6896] do_dentry_open+0x6d8/0x1660 [ 173.900628][ T6896] ? __pfx_chrdev_open+0x10/0x10 [ 173.900658][ T6896] vfs_open+0x82/0x3f0 [ 173.900689][ T6896] path_openat+0x208c/0x31a0 [ 173.900722][ T6896] ? __pfx_path_openat+0x10/0x10 [ 173.900756][ T6896] do_file_open+0x20e/0x430 [ 173.900781][ T6896] ? __pfx_do_file_open+0x10/0x10 [ 173.900824][ T6896] ? alloc_fd+0x476/0x790 [ 173.900848][ T6896] ? do_getname+0x191/0x390 [ 173.900879][ T6896] do_sys_openat2+0x10d/0x1e0 [ 173.900909][ T6896] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.900942][ T6896] ? __fget_files+0x21f/0x3d0 [ 173.900985][ T6896] __x64_sys_openat+0x12d/0x210 [ 173.901016][ T6896] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.901053][ T6896] ? rcu_is_watching+0x12/0xc0 [ 173.901082][ T6896] do_syscall_64+0x10b/0xf80 [ 173.901112][ T6896] ? clear_bhb_loop+0x40/0x90 [ 173.901141][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.901171][ T6896] RIP: 0033:0x7f2f20d9c819 [ 173.901191][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.901225][ T6896] RSP: 002b:00007f2f21c43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.901247][ T6896] RAX: ffffffffffffffda RBX: 00007f2f21016090 RCX: 00007f2f20d9c819 [ 173.901262][ T6896] RDX: 0000000000040101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 173.901276][ T6896] RBP: 00007f2f20e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 173.901290][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.901303][ T6896] R13: 00007f2f21016128 R14: 00007f2f21016090 R15: 00007ffed454cd48 [ 173.901332][ T6896] [ 173.906944][ T6896] hub 3-0:1.0: hub_ext_port_status failed (err = -12) [ 175.182746][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 176.254326][ T6938] rnbd_client L213: map_device: Parameters missing [ 178.639235][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 178.664005][ T6979] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 178.688553][ T6979] netlink: 51465 bytes leftover after parsing attributes in process `syz.2.196'. [ 179.504339][ T7000] block2mtd: illegal erase size [ 180.016731][ T7011] netlink: 25 bytes leftover after parsing attributes in process `syz.1.201'. [ 180.398707][ T7015] random: crng reseeded on system resumption [ 180.512593][ T7015] hub 1-0:1.0: USB hub found [ 180.540832][ T7015] hub 1-0:1.0: 1 port detected [ 182.697959][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 186.293807][ T7064] FAULT_INJECTION: forcing a failure. [ 186.293807][ T7064] name fail_futex, interval 1, probability 0, space 0, times 1 [ 186.310103][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.3.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.310154][ T7064] Tainted: [L]=SOFTLOCKUP [ 186.310166][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.310212][ T7064] Call Trace: [ 186.310223][ T7064] [ 186.310235][ T7064] dump_stack_lvl+0x100/0x190 [ 186.310299][ T7064] should_fail_ex.cold+0x5/0xa [ 186.310343][ T7064] get_futex_key+0x1d2/0x1510 [ 186.310403][ T7064] ? __pfx_get_futex_key+0x10/0x10 [ 186.310467][ T7064] ? find_held_lock+0x2b/0x80 [ 186.310512][ T7064] futex_wait_requeue_pi+0x1f5/0x870 [ 186.310559][ T7064] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 186.310600][ T7064] ? __futex_wait+0x256/0x300 [ 186.310644][ T7064] ? __pfx___futex_wait+0x10/0x10 [ 186.310683][ T7064] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 186.310757][ T7064] ? __pfx_futex_wake_mark+0x10/0x10 [ 186.310808][ T7064] ? __fget_files+0x21f/0x3d0 [ 186.310867][ T7064] do_futex+0x24f/0x350 [ 186.310901][ T7064] ? __pfx_do_futex+0x10/0x10 [ 186.310944][ T7064] __x64_sys_futex+0x34f/0x4d0 [ 186.310979][ T7064] ? fput+0x79/0x100 [ 186.311013][ T7064] ? __pfx___x64_sys_futex+0x10/0x10 [ 186.311043][ T7064] ? ksys_write+0x1ac/0x250 [ 186.311091][ T7064] ? __pfx_ksys_write+0x10/0x10 [ 186.311145][ T7064] ? rcu_is_watching+0x12/0xc0 [ 186.311196][ T7064] do_syscall_64+0x10b/0xf80 [ 186.311238][ T7064] ? clear_bhb_loop+0x40/0x90 [ 186.311281][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.311316][ T7064] RIP: 0033:0x7fc7ed99c819 [ 186.311343][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.311375][ T7064] RSP: 002b:00007fc7ee89a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.311407][ T7064] RAX: ffffffffffffffda RBX: 00007fc7edc15fa0 RCX: 00007fc7ed99c819 [ 186.311430][ T7064] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 186.311450][ T7064] RBP: 00007fc7eda32c91 R08: 0000000000000000 R09: 00000000fffffffa [ 186.311470][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.311489][ T7064] R13: 00007fc7edc16038 R14: 00007fc7edc15fa0 R15: 00007ffed8216ea8 [ 186.311533][ T7064] [ 186.806339][ T7064] GUP no longer grows the stack in syz.3.212 (7064): 6000-401000 (0) [ 186.870068][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.3.212 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.870106][ T7064] Tainted: [L]=SOFTLOCKUP [ 186.870115][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.870129][ T7064] Call Trace: [ 186.870136][ T7064] [ 186.870145][ T7064] dump_stack_lvl+0x100/0x190 [ 186.870191][ T7064] gup_vma_lookup.cold+0x83/0x96 [ 186.870227][ T7064] __get_user_pages+0x241/0x32a0 [ 186.870266][ T7064] ? down_read_killable+0x307/0x4b0 [ 186.870305][ T7064] ? __pfx___get_user_pages+0x10/0x10 [ 186.870329][ T7064] ? do_raw_spin_lock+0x128/0x260 [ 186.870370][ T7064] __gup_longterm_locked+0x87d/0x16f0 [ 186.870396][ T7064] ? do_raw_spin_unlock+0xb1/0x1e0 [ 186.870429][ T7064] ? __pfx___gup_longterm_locked+0x10/0x10 [ 186.870460][ T7064] ? find_held_lock+0x2b/0x80 [ 186.870488][ T7064] ? gup_fast_fallback+0x7e8/0x2790 [ 186.870514][ T7064] ? rcu_is_watching+0x12/0xc0 [ 186.870545][ T7064] gup_fast_fallback+0x16dc/0x2790 [ 186.870572][ T7064] ? find_held_lock+0x2b/0x80 [ 186.870617][ T7064] ? __pfx_gup_fast_fallback+0x10/0x10 [ 186.870647][ T7064] ? __lock_acquire+0x4a5/0x2630 [ 186.870690][ T7064] get_user_pages_fast+0xa7/0xf0 [ 186.870717][ T7064] ? __pfx_get_user_pages_fast+0x10/0x10 [ 186.870747][ T7064] ? find_held_lock+0x2b/0x80 [ 186.870777][ T7064] get_futex_key+0x2c8/0x1510 [ 186.870818][ T7064] ? __pfx_get_futex_key+0x10/0x10 [ 186.870856][ T7064] ? __futex_wait+0x256/0x300 [ 186.870887][ T7064] ? __pfx___futex_wait+0x10/0x10 [ 186.870918][ T7064] futex_requeue+0x21f/0x20d0 [ 186.870953][ T7064] ? find_held_lock+0x2b/0x80 [ 186.870981][ T7064] ? __pfx_futex_requeue+0x10/0x10 [ 186.871015][ T7064] ? futex_wait+0x11e/0x370 [ 186.871066][ T7064] ? do_vfs_ioctl+0x226/0x13e0 [ 186.871112][ T7064] do_futex+0x2af/0x350 [ 186.871134][ T7064] ? __pfx_do_futex+0x10/0x10 [ 186.871156][ T7064] ? find_held_lock+0x2b/0x80 [ 186.871185][ T7064] __x64_sys_futex+0x34f/0x4d0 [ 186.871209][ T7064] ? __pfx___x64_sys_futex+0x10/0x10 [ 186.871235][ T7064] ? rcu_is_watching+0x12/0xc0 [ 186.871262][ T7064] do_syscall_64+0x10b/0xf80 [ 186.871288][ T7064] ? clear_bhb_loop+0x40/0x90 [ 186.871314][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.871336][ T7064] RIP: 0033:0x7fc7ed99c819 [ 186.871359][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.871380][ T7064] RSP: 002b:00007fc7ee89a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.871401][ T7064] RAX: ffffffffffffffda RBX: 00007fc7edc15fa0 RCX: 00007fc7ed99c819 [ 186.871415][ T7064] RDX: 0000000000000996 RSI: 0000000000000004 RDI: 0000000000000000 [ 186.871427][ T7064] RBP: 00007fc7eda32c91 R08: 0000000000000000 R09: 0000000000000008 [ 186.871440][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.871453][ T7064] R13: 00007fc7edc16038 R14: 00007fc7edc15fa0 R15: 00007ffed8216ea8 [ 186.871480][ T7064] [ 187.798609][ T5152] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 187.828502][ T7084] smpboot: CPU 1 is now offline [ 190.426052][ T7107] vivid-007: ================= START STATUS ================= [ 190.475576][ T7107] vivid-007: Generate PTS: true [ 190.519087][ T7107] vivid-007: Generate SCR: true [ 190.555519][ T7107] tpg source WxH: 320x240 (Y'CbCr) [ 190.643868][ T7107] tpg field: 1 [ 190.688653][ T7107] tpg crop: (0,0)/320x240 [ 190.735364][ T7107] tpg compose: (0,0)/320x240 [ 190.765639][ T7105] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.777834][ T7107] tpg colorspace: 8 [ 190.796068][ T7107] tpg transfer function: 0/0 [ 190.820354][ T7107] tpg Y'CbCr encoding: 0/0 [ 190.837468][ T7107] tpg quantization: 0/0 [ 190.855050][ T7107] tpg RGB range: 0/2 [ 190.871549][ T7107] vivid-007: ================== END STATUS ================== [ 190.892052][ T7105] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.022745][ T7105] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.850488][ T7132] random: crng reseeded on system resumption [ 192.003720][ T7132] hub 1-0:1.0: USB hub found [ 192.108098][ T7132] hub 1-0:1.0: 1 port detected [ 192.558385][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.959357][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.039987][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.404906][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413350][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.105251][ T7175] netlink: 186 bytes leftover after parsing attributes in process `syz.1.230'. [ 198.391731][ T7201] random: crng reseeded on system resumption [ 198.503937][ T7201] hub 1-0:1.0: USB hub found [ 198.535673][ T7201] hub 1-0:1.0: 1 port detected [ 200.251616][ T7221] [ 200.253985][ T7221] ====================================================== [ 200.261003][ T7221] WARNING: possible circular locking dependency detected [ 200.268060][ T7221] syzkaller #0 Tainted: G L [ 200.274036][ T7221] ------------------------------------------------------ [ 200.281072][ T7221] syz.0.239/7221 is trying to acquire lock: [ 200.286973][ T7221] ffff88805bdec8e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 200.298494][ T7221] [ 200.298494][ T7221] but task is already holding lock: [ 200.305871][ T7221] ffff88805bdecd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 200.314935][ T7221] [ 200.314935][ T7221] which lock already depends on the new lock. [ 200.314935][ T7221] [ 200.325352][ T7221] [ 200.325352][ T7221] the existing dependency chain (in reverse order) is: [ 200.334391][ T7221] [ 200.334391][ T7221] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 200.342163][ T7221] lock_sock_nested+0x41/0xf0 [ 200.347387][ T7221] smc_listen_out+0x1f5/0x4b0 [ 200.352614][ T7221] smc_listen_work+0x4c2/0x50e0 [ 200.358015][ T7221] process_one_work+0xa0e/0x1980 [ 200.363511][ T7221] worker_thread+0x5ef/0xe50 [ 200.368666][ T7221] kthread+0x370/0x450 [ 200.373292][ T7221] ret_from_fork+0x72b/0xd50 [ 200.378505][ T7221] ret_from_fork_asm+0x1a/0x30 [ 200.383813][ T7221] [ 200.383813][ T7221] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 200.394021][ T7221] __lock_acquire+0x14b8/0x2630 [ 200.399425][ T7221] lock_acquire+0x1b1/0x370 [ 200.404505][ T7221] __flush_work+0x4de/0xcb0 [ 200.409545][ T7221] cancel_work_sync+0xd1/0xf0 [ 200.414765][ T7221] smc_clcsock_release+0x5f/0xe0 [ 200.420240][ T7221] __smc_release+0x5c2/0x880 [ 200.425359][ T7221] smc_close_non_accepted+0xda/0x200 [ 200.431181][ T7221] smc_close_active+0x4ff/0x1070 [ 200.436654][ T7221] __smc_release+0x634/0x880 [ 200.441779][ T7221] smc_release+0x1fc/0x620 [ 200.446729][ T7221] __sock_release+0xb3/0x260 [ 200.451872][ T7221] sock_close+0x1c/0x30 [ 200.456584][ T7221] __fput+0x3ff/0xb50 [ 200.461107][ T7221] task_work_run+0x150/0x240 [ 200.466248][ T7221] get_signal+0x1bd/0x21e0 [ 200.471260][ T7221] arch_do_signal_or_restart+0x91/0x770 [ 200.477356][ T7221] exit_to_user_mode_loop+0x86/0x4a0 [ 200.483186][ T7221] do_syscall_64+0x6f2/0xf80 [ 200.488322][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.494752][ T7221] [ 200.494752][ T7221] other info that might help us debug this: [ 200.494752][ T7221] [ 200.504986][ T7221] Possible unsafe locking scenario: [ 200.504986][ T7221] [ 200.512455][ T7221] CPU0 CPU1 [ 200.517836][ T7221] ---- ---- [ 200.523314][ T7221] lock(sk_lock-AF_SMC/1); [ 200.527845][ T7221] lock((work_completion)(&new_smc->smc_listen_work)); [ 200.537401][ T7221] lock(sk_lock-AF_SMC/1); [ 200.544446][ T7221] lock((work_completion)(&new_smc->smc_listen_work)); [ 200.551397][ T7221] [ 200.551397][ T7221] *** DEADLOCK *** [ 200.551397][ T7221] [ 200.559810][ T7221] 3 locks held by syz.0.239/7221: [ 200.564851][ T7221] #0: ffff88805d5e0240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 200.575432][ T7221] #1: ffff88805bdecd60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 200.584960][ T7221] #2: ffffffff8e7e6de0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 200.594126][ T7221] [ 200.594126][ T7221] stack backtrace: [ 200.600033][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.600066][ T7221] Tainted: [L]=SOFTLOCKUP [ 200.600073][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 200.600087][ T7221] Call Trace: [ 200.600096][ T7221] [ 200.600105][ T7221] dump_stack_lvl+0x100/0x190 [ 200.600145][ T7221] print_circular_bug.cold+0x178/0x1c7 [ 200.600185][ T7221] check_noncircular+0x146/0x160 [ 200.600221][ T7221] __lock_acquire+0x14b8/0x2630 [ 200.600260][ T7221] lock_acquire+0x1b1/0x370 [ 200.600293][ T7221] ? __flush_work+0x4ca/0xcb0 [ 200.600315][ T7221] ? mark_held_locks+0x40/0x70 [ 200.600349][ T7221] ? __flush_work+0x4ca/0xcb0 [ 200.600369][ T7221] __flush_work+0x4de/0xcb0 [ 200.600388][ T7221] ? __flush_work+0x4ca/0xcb0 [ 200.600410][ T7221] ? __pfx___flush_work+0x10/0x10 [ 200.600432][ T7221] ? __pfx_wq_barrier_func+0x10/0x10 [ 200.600465][ T7221] ? __pfx___might_resched+0x10/0x10 [ 200.600487][ T7221] ? __smc_release+0x5ba/0x880 [ 200.600509][ T7221] cancel_work_sync+0xd1/0xf0 [ 200.600534][ T7221] smc_clcsock_release+0x5f/0xe0 [ 200.600559][ T7221] __smc_release+0x5c2/0x880 [ 200.600581][ T7221] ? __pfx_sock_def_readable+0x10/0x10 [ 200.600611][ T7221] smc_close_non_accepted+0xda/0x200 [ 200.600635][ T7221] smc_close_active+0x4ff/0x1070 [ 200.600661][ T7221] __smc_release+0x634/0x880 [ 200.600682][ T7221] smc_release+0x1fc/0x620 [ 200.600703][ T7221] __sock_release+0xb3/0x260 [ 200.600737][ T7221] ? __pfx_sock_close+0x10/0x10 [ 200.600770][ T7221] sock_close+0x1c/0x30 [ 200.600802][ T7221] __fput+0x3ff/0xb50 [ 200.600828][ T7221] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.600854][ T7221] task_work_run+0x150/0x240 [ 200.600890][ T7221] ? __pfx_task_work_run+0x10/0x10 [ 200.600929][ T7221] get_signal+0x1bd/0x21e0 [ 200.600956][ T7221] ? task_work_add+0x201/0x3b0 [ 200.600991][ T7221] ? __pfx_task_work_add+0x10/0x10 [ 200.601034][ T7221] ? __pfx_get_signal+0x10/0x10 [ 200.601074][ T7221] ? __fput_deferred+0x217/0x4a0 [ 200.601099][ T7221] arch_do_signal_or_restart+0x91/0x770 [ 200.601132][ T7221] ? __sys_accept4+0x1cb/0x200 [ 200.601159][ T7221] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 200.601195][ T7221] ? __pfx___sys_accept4+0x10/0x10 [ 200.601222][ T7221] ? rcu_is_watching+0x12/0xc0 [ 200.601247][ T7221] exit_to_user_mode_loop+0x86/0x4a0 [ 200.601281][ T7221] ? do_syscall_64+0x519/0xf80 [ 200.601308][ T7221] do_syscall_64+0x6f2/0xf80 [ 200.601334][ T7221] ? clear_bhb_loop+0x40/0x90 [ 200.601359][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.601382][ T7221] RIP: 0033:0x7f41fc19c819 [ 200.601400][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.601421][ T7221] RSP: 002b:00007f41fcfd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 200.601441][ T7221] RAX: fffffffffffffe00 RBX: 00007f41fc416180 RCX: 00007f41fc19c819 [ 200.601455][ T7221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 200.601468][ T7221] RBP: 00007f41fc232c91 R08: 0000000000000000 R09: 0000000000000000 [ 200.601481][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.601494][ T7221] R13: 00007f41fc416218 R14: 00007f41fc416180 R15: 00007ffed8dfd8a8 [ 200.601515][ T7221] [ 200.928967][ T7211] base_sock_release(ffff888023d47240) sk=ffff8880798e0000