last executing test programs: 10.036135371s ago: executing program 3 (id=131): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa9"}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000001cc0)='\x00', 0x0, 0x0, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000240)={@config_section=0x0, 0xfe}) 9.280846854s ago: executing program 2 (id=133): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000440)=""/82, 0x52) ioctl$auto_TIOCSWINSZ2(r4, 0x5414, &(0x7f00000001c0)) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 7.600528656s ago: executing program 3 (id=134): acct$auto(&(0x7f00000002c0)='nl802154\x00') r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x100000000) waitid$auto_P_PID(0x1, r1, 0x0, 0x7, &(0x7f0000000080)={{0x3, 0x8}, {0x7, 0x7}, 0x2, 0x3, 0x7fffffff, 0x2f, 0x7, 0x19e296a3, 0x100000001, 0x3883, 0x7, 0x7, 0x81, 0x81, 0x0, 0x7}) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000000)="421a500d77f796ee16d344ad424cb4a1b31d1cb3d6dd2e222d07171ece7aae6a2e1bc0f71446cb60dbe477bec77f9ab2fe418023ee36d0ddc8d3ea5effddcf508f8ec031971dec15a328f8292099723a88da18beb7", 0x7, &(0x7f00000001c0)={&(0x7f00000000c0)="e243c5276013d88a90d924156c4484cb9a3c43d482ea6f84aef04ed7cb0e61462cf1df1281538c83e640c31fbd18524009109f5ffb5b1c9bd70e608e17336a5ef412cf9dd51f593938410c3eeff03bbd4aaadb02a2f8a5a7ba78b45c24a15cf675ade451d9494b7a460c9a43fdedf5437984af68a79a0987b5d406b4b0be088ac2ef64d9b310947928512ccdb47f5d025e784b4d11a7e82d2f6c87456b07e92b4bcb7b06b08ce9d5e2356c3c05afcf889269ff721ef00321f9eb47a4dd1e75e86520a800f6e05900eace9fe224b3dee340afee48b6c0760116", 0x3000000000}, 0x80, &(0x7f0000000200)="d480b8109a63c1cb9b07cc3c6b4d45bf00dc8e06c84105c0851dfe7cd425ae047e6bdc047b419555bad16b2c9595ae2cce58cac3fbaa4f0bfa32ce8a6db4b5ab4232b75a363c91fffa51652dad2a837256c2c11c96bc9c2e", 0x1003, 0x7}, 0x8}, 0x9, 0x3) symlink$auto(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00') rename$auto(&(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mremap$auto(0x3, 0x8, 0x1f449f79, 0x23, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x50) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) migrate_pages$auto(0x0, 0x2, &(0x7f0000000000)=0xffffffff9aa1c8c2, &(0x7f0000000040)=0x9) 7.202007214s ago: executing program 0 (id=136): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb) socket(0xa, 0x3, 0x40000073) mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000) getcwd$auto(&(0x7f0000000080)='@\x00', 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xb02, 0x0) cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0) 7.15021421s ago: executing program 2 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x10, 0xfffffffffffff4e0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop4/hctx0/tags_bitmap\x00', 0x101800, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f00000001c0)=""/70, 0x46) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r2, @ANYBLOB="05008a00080042000500f600071a0000000bc38e66a8950ee3ab259a4dffde2016f61a9d1a71fdd267b60e8be22f016b650bbcaa453fb002bcf118f0e96d4b6248efe1352050bde81bcec7d7d37591a1304ff17feb"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) write$auto(r6, &(0x7f0000000cc0)='\x00\xad\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\xae\x1a\x13I_{\xe8\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b_\xd0\xd7\xc0+:\x17\x8d\xf4\t\x00\x00\x00`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00[\x1a\fX[\xb8\x91M\xdb\xe7\xdc6w\xb1\x8b9\x9a\x9a\xf9c\x95)b\xff\x80\xd5\xbb\xc9+Ed\xa16?\xab<\xee\x8b\x18\xe6\xf3a]1OZ\x9e\xa9\xb2;H\xbcn}n\xca\x0e\x0e\xd8\xce_2\xe2\xb1@\x8dy\v\xc3\xacH\x9a\t\x8e\xa1g\xa2?\x89\x01\xb9\xf1\xbb%[\xf1L<\xd8\x8c\xd9\x1f\x9e\xfe\xbf\xb2\x95\xb6Y\xba\xaf\'a\xe2\xc3\x9a$c\xad\x82\x13\x1e\xbc\xf3\x1f.\xef\x1es\xb0\xf2I$\x02\x0e\xc8\xf0\x8b\xc7\xd8\x9c\x04\xa6[\xe2Q\xd6\x13\xa8[\xbcP,\xadS\x7f}/>\x13\xbe\\\x8cq(\x06\xdb4', 0x4) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000029c0)={0xb70, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REKEY_DATA={0x2b9, 0x7a, 0x0, 0x1, [@generic="f8bf7da670828cc89e5fcf22a05571af5eb22b42cfd13ab6b0fa9df83d70a979996091ccd74bd34616", @generic="c3bce308d171c90cba8bb672", @nested={0xc3, 0x62, 0x0, 0x1, [@generic="38761d17319d795f75c39a8c340322eb4b9aefd2423f6b9bc498d5b3c9f488102ed6607a2e6631e8b9346f36a75b2cdcd834e79f513d3757e56c431fd42eb1a689b56081774a690dad153b9c5562509acece94207ca9bbbcb7979096ce205b224be06f02473355397f1b27a1876fb3edaf9119aea84423cb2f9f14a903f91e50ce086904831d1fe516edafb08ec928984697b12c163873c1de24c34a43baffce336277b7f75abe8b4acdb64e50be091a2e6ba0c3dd3c19e8029ce57f7d4152"]}, @nested={0x5f, 0x86, 0x0, 0x1, [@nested={0x4, 0x71}, @typed={0x4, 0xa4}, @generic, @generic="155a149570f6", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r6}, @generic="4d5a05afd97f83266003d552dfa209a2a51fffc26850451c16caac930023f4504f3e590eedc32d950a7af5a8d8dfdda53fad16ee8442a432c96e1a04649b985f29", @nested={0x4, 0x7a}]}, @nested={0x15c, 0xac, 0x0, 0x1, [@nested={0x4, 0x11}, @nested={0x151, 0x19, 0x0, 0x1, [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@remote}, @generic="f4804701c9c8d5f673062fe1ea48006dfe223bfb512f51b9fff85b7b38c902451d7f75c98cbe70e0f083bae1399dad166f6098b8d54258029038dce6474fa7771d0b4d3dec08b61968cfa119cb44ce1e154f7e6357a6308d59e3448d035c1beb2d17fe86ac73756b55d7b54c2a4c7e3ef4ac9a0dc3240dce8c607116176baa", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x75, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x3e, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x8, 0x114, 0x0, 0x1, [@nested={0x4, 0x57}]}, @nested={0x49, 0x1b, 0x0, 0x1, [@generic="e8d246cf88cb3c2d2c54934083d2d0b34c8dc1cc7b9155f8c1e7bdf74d1d9602410604bbbefaee281532f00e4e24d73aa841583ec1ab3d5687ae23c8c1", @nested={0x4, 0x4d}, @nested={0x4, 0x78}]}, @generic="99602ae5c78bb56187be25745a54d2930031b81499a6bde49055fd62b0a55355db5e621bf5f791283178846a091a8a427d8f50e3dde7956a7759a4ba4a9eae36b265020162c2"]}]}]}, @NL80211_ATTR_PMKID={0xb1, 0x55, "44dfa66f5f9962ee10e36b21b5b913763a6dcb3428d3d74257be4d47e3b657f7c6a36391fcccddf3c28f526e1a213b8970b1b77172d31611094fc50b057629690b396ff6fcd5ad2ca77baec09c660fc70183242717590d1ebe29895ff4da34a44858569b5c73365227cc9edf7d68d8d2d1e4b52a7cb5a0786600aef08550bc94674bba7492a0164f871fd90da7bb5c8e7779dff3431028577c67fa10b4e4206fdaf2e6d27306b2ea0fba2ac7a7"}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_KEY_DATA={0x7, 0x7, "97c78a"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_IE={0x79f, 0x2a, "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"}, @NL80211_ATTR_MAC_MASK={0x2f, 0xd7, "94d655f1aa78ece36c3012fe8d04bd352b5c5548a6542882601312bc43664967017fd6f04f82ed735776a4"}]}, 0xb70}, 0x1, 0x0, 0x0, 0xc800}, 0x40000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(r0, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x1ff}, 0xc, &(0x7f00000001c0), 0xc, 0xa}, 0x5a57}, 0xd, 0x5, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, r0) close_range$auto(0x2, 0x8, 0x0) 6.262393096s ago: executing program 2 (id=138): socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x10e, 0x1, 0x0, 0xe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x1ff) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0) 5.986029413s ago: executing program 3 (id=139): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0x40000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) exit$auto(0xffffff9f) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) getpgrp(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x168081, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001e40)="2e271caeedc13d69b4fc13780654c968af9f176b5bbf60445af0b193e8756a01222effbf37f05a957cb25aa6ff48fc0f820814b41e96d12cf8677427b39d1d0c92c87beaf864f5f006a2bd510c18feaf2fec4e848ef5f5f0cba87d0fa2d929", 0x5f) 5.921150544s ago: executing program 1 (id=140): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 5.113774593s ago: executing program 0 (id=141): unshare$auto(0x2) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0xc, 0x8001, 0x800006, 0xec5, 0x6, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0xf43, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0xffff, 0x101, 0x876c5, 0xc7, 0x3}}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r2 = prctl$auto_PR_SCHED_CORE_GET(0x76, 0x0, 0x0, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyrd/dev\x00', 0x20f42, 0x0) write$auto(r4, &(0x7f0000000200)='0\xec\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\xe0c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xec\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x92z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe3\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) msgctl$auto_IPC_SET(0x7f7, 0x1, 0x0) setregid$auto(0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.403889054s ago: executing program 3 (id=142): connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r1, 0xbd1a1717121636e7, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x7}, @HWSIM_ATTR_RADIO_NAME={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 4.322735816s ago: executing program 2 (id=143): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x400000, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) socket(0x11, 0xa, 0x9) unshare$auto(0x40000080) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC0\x00', 0x40000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000240)={@raw=0x5, 0x2, 0x5, 0x1b02, "cabf33fa7f995c7f77e443beae925c67c6d397c944fdd3234cab4997be56f02a6f53399444f2d75686f5f05e"}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fchown$auto(r2, 0xffffffffffffffff, 0xffffffffffffffff) unshare$auto(0x40000080) ioctl$auto_SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000080)="967e9482324fdfd5776285448db2e80c1d1cff60c4cbbb3779d46ae7c574b1455490e34c906d364b28cfb5d9c862f6f8db93") mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x0, 0x402, 0x80000000) io_uring_setup$auto(0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084) unshare$auto(0x40000080) arch_prctl$auto(0x5003, 0x5) read$auto(0x3, 0x0, 0x13) 3.689387377s ago: executing program 1 (id=144): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x8925, r0) mmap$auto(0x0, 0x10000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='r\x02', 0x2fb) r3 = socket(0x11, 0x80003, 0x300) sendto$auto(r3, 0x0, 0x13, 0xc, 0x0, 0x1e) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCGSERIAL2(0xffffffffffffffff, 0x541e, &(0x7f0000000100)="b41e4423e7b50e6ce2ef01d380879eff0155a155d1dafc402e4cd19223cb4eaeccbdf8e4ad372ebd0fbf6df90da91d9311822287cbaf1f1b82dea1264b0548075747954f7e1c24ac39566dc526eb1d45e41f084bd56b6edf37897603b1f627c57f87268c60f7faa53d2ba59f890b46089207d970a3e8ec7219f54475e6a574790a3fc034759188416e8b59786185c2a487e3") sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="1e"], 0x1ac}}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x5, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) readv$auto(r3, &(0x7f0000000040)={0x0, 0x400000000ffff}, 0x803) ioctl$auto(0x3, 0x40085400, 0x5) 3.319492255s ago: executing program 0 (id=145): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r4, 0x311, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) 2.959545007s ago: executing program 1 (id=146): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x5b4) 2.845428501s ago: executing program 3 (id=147): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x101}, 0x1) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x5, 0x0, 0x2, 0x0) mmap$auto(0x88, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=&(0x7f00000004c0)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xcaGzw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\x1c\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00', 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) bind$auto(r4, &(0x7f0000000340)=@rc={0x1f, @any, 0x2}, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) madvise$auto(0x1000, 0x400050, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r3, 0x4004550d, &(0x7f0000000180)=0x795) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x341, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x400]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) 2.616161927s ago: executing program 2 (id=148): mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0x9) renameat2$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0xfffffffe) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0xfffffff8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0002", @ANYRES16=0x0, @ANYBLOB="200327bd"], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xcc}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) 2.350279252s ago: executing program 1 (id=149): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) ioctl$auto(0xc8, 0x400454ce, 0xffffffffffffffff) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 2.057743506s ago: executing program 0 (id=150): mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r3, 0x3, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) 1.325473645s ago: executing program 3 (id=151): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv$auto(r0, &(0x7f0000000180)={&(0x7f0000000140), 0x9}, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) set_mempolicy$auto(0x1, &(0x7f00000000c0)=0x6, 0x21) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRK2(r1, 0x5409, 0x0) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) 1.154912408s ago: executing program 0 (id=152): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb37774", &(0x7f0000000240)}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/251, 0xfb) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socket(0xa, 0x1, 0x84) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(0xffffffffffffffff, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000004c0)="e3188176b96f56170e647ad5b75e3e9d5b25824af2509ae55ed5ee191ee9257ac48ac1e8c7ca249fdb72092d4d6cb4b85c6e5e63af6e6386605a2acad0c973ffc78036fb03e7317159be64a299df97910013248ab5d114aa9179182bc486b00af747556837f9ef96271ce9d8c9987a0c8f56", 0x72) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 769.539923ms ago: executing program 1 (id=153): fanotify_init$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/neigh/bridge_slave_1/mcast_resolicit\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pts/ptmx\x00', 0x80, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfdef) 566.989635ms ago: executing program 2 (id=154): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000001", @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 97.995398ms ago: executing program 1 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r2 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0xc, 0x7, "e840c652882181dc"}, @NL80211_ATTR_WIPHY_NAME={0x24, 0x2, '/proc/sys/fs/binfmt_misc/status\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0xc000) close_range$auto(0x2, 0x8, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) preadv$auto(r0, &(0x7f0000000280)={&(0x7f0000000240), 0xee5}, 0x8, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xd) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 0s ago: executing program 0 (id=156): unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r0, 0x7ffe) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, r2, 0x401) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f00000000c0)=0x52a6, &(0x7f0000000140)=0x2) ioctl$auto_VHOST_SET_LOG_FD2(r3, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x9, 0xfffffffffffffbff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0) splice$auto(r6, &(0x7f0000000040)=0x7, r5, &(0x7f0000000080)=0x4, 0x26c4, 0x895) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 97.601768][ T29] cfg80211: failed to load regulatory.db [ 97.895994][ T5807] cgroup: Unknown subsys name 'net' [ 98.034927][ T5807] cgroup: Unknown subsys name 'cpuset' [ 98.045134][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.891463][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.060476][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.070113][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.078658][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.082144][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.092934][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.094028][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.104673][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.115894][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.121362][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.123836][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.135145][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.140962][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.147211][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.154308][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.166788][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.169645][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.181248][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.183861][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.212652][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.225910][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.819938][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 102.946669][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 103.038351][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 103.064247][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.072981][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.080912][ T5830] bridge_slave_0: entered allmulticast mode [ 103.088604][ T5830] bridge_slave_0: entered promiscuous mode [ 103.104388][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.111821][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.119110][ T5830] bridge_slave_1: entered allmulticast mode [ 103.126872][ T5830] bridge_slave_1: entered promiscuous mode [ 103.159035][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 103.235874][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.277684][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.377010][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.384839][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.392175][ T5825] bridge_slave_0: entered allmulticast mode [ 103.400182][ T5825] bridge_slave_0: entered promiscuous mode [ 103.428733][ T5830] team0: Port device team_slave_0 added [ 103.434930][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.442693][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.450406][ T5825] bridge_slave_1: entered allmulticast mode [ 103.457987][ T5825] bridge_slave_1: entered promiscuous mode [ 103.486523][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.494134][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.501697][ T5829] bridge_slave_0: entered allmulticast mode [ 103.509528][ T5829] bridge_slave_0: entered promiscuous mode [ 103.521011][ T5830] team0: Port device team_slave_1 added [ 103.526786][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.534312][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.542076][ T5829] bridge_slave_1: entered allmulticast mode [ 103.550113][ T5829] bridge_slave_1: entered promiscuous mode [ 103.616365][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.623899][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.631547][ T5824] bridge_slave_0: entered allmulticast mode [ 103.639661][ T5824] bridge_slave_0: entered promiscuous mode [ 103.675059][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.685528][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.693168][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.700546][ T5824] bridge_slave_1: entered allmulticast mode [ 103.708115][ T5824] bridge_slave_1: entered promiscuous mode [ 103.716839][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.724154][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.750799][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.766058][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.782321][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.804375][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.812359][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.838931][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.852664][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.931233][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.943426][ T5825] team0: Port device team_slave_0 added [ 103.952326][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.978349][ T5825] team0: Port device team_slave_1 added [ 104.010965][ T5829] team0: Port device team_slave_0 added [ 104.057139][ T5829] team0: Port device team_slave_1 added [ 104.077010][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.084562][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.111401][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.125486][ T5824] team0: Port device team_slave_0 added [ 104.151856][ T5830] hsr_slave_0: entered promiscuous mode [ 104.158504][ T5830] hsr_slave_1: entered promiscuous mode [ 104.166333][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.173809][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.200052][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.213182][ T5824] team0: Port device team_slave_1 added [ 104.240886][ T51] Bluetooth: hci2: command tx timeout [ 104.247065][ T5828] Bluetooth: hci3: command tx timeout [ 104.278169][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.285739][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.312140][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.323282][ T5828] Bluetooth: hci1: command tx timeout [ 104.323519][ T51] Bluetooth: hci0: command tx timeout [ 104.375181][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.382712][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.409680][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.435964][ T5825] hsr_slave_0: entered promiscuous mode [ 104.442758][ T5825] hsr_slave_1: entered promiscuous mode [ 104.449075][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 104.455400][ T5825] Cannot create hsr debugfs directory [ 104.462218][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.470474][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.497014][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.545452][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.552693][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.579819][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.676453][ T5829] hsr_slave_0: entered promiscuous mode [ 104.683362][ T5829] hsr_slave_1: entered promiscuous mode [ 104.691221][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 104.696999][ T5829] Cannot create hsr debugfs directory [ 104.816389][ T5824] hsr_slave_0: entered promiscuous mode [ 104.824462][ T5824] hsr_slave_1: entered promiscuous mode [ 104.830932][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 104.836765][ T5824] Cannot create hsr debugfs directory [ 105.196965][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.229321][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.248756][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.284345][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.340435][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.357759][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.380459][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.414509][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.518933][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.531480][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.542485][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.573350][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.678878][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.697424][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.708770][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.721259][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.737646][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.789123][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.826948][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.834338][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.870898][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.878248][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.976244][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.050273][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.132826][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.140179][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.151551][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.158955][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.175476][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.273019][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.295388][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.323699][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.329704][ T51] Bluetooth: hci3: command tx timeout [ 106.331301][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.336450][ T51] Bluetooth: hci2: command tx timeout [ 106.394596][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.401857][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.411715][ T5828] Bluetooth: hci1: command tx timeout [ 106.417448][ T51] Bluetooth: hci0: command tx timeout [ 106.477333][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.493156][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.522616][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.530158][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.569176][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.576560][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.784719][ T5830] veth0_vlan: entered promiscuous mode [ 106.828126][ T5830] veth1_vlan: entered promiscuous mode [ 106.948900][ T5830] veth0_macvtap: entered promiscuous mode [ 106.967435][ T5830] veth1_macvtap: entered promiscuous mode [ 106.983562][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.052466][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.074415][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.134522][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.148550][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.180959][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.191397][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.304257][ T5825] veth0_vlan: entered promiscuous mode [ 107.323538][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.358427][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.383025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.404345][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.440264][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.448355][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.466993][ T5825] veth1_vlan: entered promiscuous mode [ 107.566891][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.603520][ T5824] veth0_vlan: entered promiscuous mode [ 107.635344][ T5825] veth0_macvtap: entered promiscuous mode [ 107.645340][ T5829] veth0_vlan: entered promiscuous mode [ 107.684292][ T5825] veth1_macvtap: entered promiscuous mode [ 107.698897][ T5824] veth1_vlan: entered promiscuous mode [ 107.723431][ T5829] veth1_vlan: entered promiscuous mode [ 107.795540][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.822030][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.884309][ T127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.914866][ T5829] veth0_macvtap: entered promiscuous mode [ 107.936125][ T127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.948176][ T127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.982706][ T5824] veth0_macvtap: entered promiscuous mode [ 107.991270][ T127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.014846][ T5829] veth1_macvtap: entered promiscuous mode [ 108.052678][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.112876][ T5824] veth1_macvtap: entered promiscuous mode [ 108.156717][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.195306][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.224443][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.271912][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.284998][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.296477][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.314762][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.356677][ T127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.409826][ T51] Bluetooth: hci2: command tx timeout [ 108.415441][ T51] Bluetooth: hci3: command tx timeout [ 108.428097][ T127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.438313][ T127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.480382][ T5828] Bluetooth: hci1: command tx timeout [ 108.485943][ T51] Bluetooth: hci0: command tx timeout [ 108.507156][ T127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.521662][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.532365][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.792197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.806883][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.818517][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.825207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.935881][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 109.027870][ T5917] netlink: 'syz.2.5': attribute type 1 has an invalid length. [ 109.041919][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.059675][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.067103][ T5917] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.5'. [ 109.154063][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.208757][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.325734][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.348968][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.981482][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.481679][ T51] Bluetooth: hci3: command tx timeout [ 110.487561][ T5828] Bluetooth: hci2: command tx timeout [ 110.559894][ T51] Bluetooth: hci0: command tx timeout [ 110.559929][ T51] Bluetooth: hci1: command tx timeout [ 110.785901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.787279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.069830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.265985][ T5949] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 112.640575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.649398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.520466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 113.888141][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 114.576560][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.676739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.689753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 114.829627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.838578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.366884][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 115.521995][ T5974] netlink: 354 bytes leftover after parsing attributes in process `syz.0.14'. [ 115.557078][ T5974] Zero length message leads to an empty skb [ 116.938310][ T5987] Invalid ELF header magic: != ELF [ 118.339402][ T5828] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 120.290379][ T6023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.092035][ T5828] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 122.255947][ T6031] openvswitch: netlink: Multiple metadata blocks provided [ 123.626126][ T6047] syz.3.28 (6047): /proc/6046/oom_adj is deprecated, please use /proc/6046/oom_score_adj instead. [ 123.814345][ T6047] FAULT_INJECTION: forcing a failure. [ 123.814345][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 123.911626][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(full) [ 123.911671][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.911699][ T6047] Call Trace: [ 123.911709][ T6047] [ 123.911725][ T6047] dump_stack_lvl+0x100/0x190 [ 123.911795][ T6047] should_fail_ex.cold+0x5/0xa [ 123.911832][ T6047] should_failslab+0xc2/0x120 [ 123.911864][ T6047] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 123.911915][ T6047] ? __kernfs_new_node+0xd2/0x960 [ 123.911976][ T6047] __kernfs_new_node+0xd2/0x960 [ 123.912028][ T6047] ? __pfx___kernfs_new_node+0x10/0x10 [ 123.912097][ T6047] ? find_held_lock+0x2b/0x80 [ 123.912128][ T6047] ? kernfs_root+0xee/0x2a0 [ 123.912173][ T6047] ? kernfs_root+0xee/0x2a0 [ 123.912230][ T6047] kernfs_new_node+0x11b/0x1a0 [ 123.912290][ T6047] __kernfs_create_file+0x53/0x350 [ 123.912335][ T6047] sysfs_add_file_mode_ns+0x207/0x3c0 [ 123.912390][ T6047] internal_create_group+0x593/0xf40 [ 123.912449][ T6047] ? __pfx_internal_create_group+0x10/0x10 [ 123.912504][ T6047] ? kernfs_create_link+0x1bd/0x240 [ 123.912549][ T6047] internal_create_groups+0x9d/0x150 [ 123.912601][ T6047] device_add+0x71a/0x1950 [ 123.912661][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.912718][ T6047] ? __pfx_device_add+0x10/0x10 [ 123.912771][ T6047] ? lockdep_init_map_type+0x5c/0x250 [ 123.912817][ T6047] ? __init_waitqueue_head+0xca/0x150 [ 123.912876][ T6047] netdev_register_kobject+0x1a9/0x3d0 [ 123.912932][ T6047] register_netdevice+0x12e0/0x2210 [ 123.912984][ T6047] ? __pfx_register_netdevice+0x10/0x10 [ 123.913045][ T6047] register_netdev+0x34/0x50 [ 123.913086][ T6047] sit_init_net+0x2c0/0x5f0 [ 123.913139][ T6047] ? __pfx_sit_init_net+0x10/0x10 [ 123.913190][ T6047] ops_init+0x1e2/0x5f0 [ 123.913238][ T6047] setup_net+0x118/0x3a0 [ 123.913281][ T6047] ? __pfx_setup_net+0x10/0x10 [ 123.913321][ T6047] ? lockdep_init_map_type+0x5c/0x250 [ 123.913365][ T6047] ? mutex_init_lockep+0x110/0x150 [ 123.913415][ T6047] copy_net_ns+0x46f/0x7c0 [ 123.913464][ T6047] create_new_namespaces+0x3ea/0xac0 [ 123.913509][ T6047] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 123.913548][ T6047] ksys_unshare+0x473/0xad0 [ 123.913592][ T6047] ? __pfx_ksys_unshare+0x10/0x10 [ 123.913649][ T6047] __x64_sys_unshare+0x31/0x40 [ 123.913688][ T6047] do_syscall_64+0x106/0xf80 [ 123.913726][ T6047] ? clear_bhb_loop+0x40/0x90 [ 123.913767][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.913800][ T6047] RIP: 0033:0x7f6a43d9c799 [ 123.913837][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.913868][ T6047] RSP: 002b:00007f6a44c5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.913901][ T6047] RAX: ffffffffffffffda RBX: 00007f6a44015fa0 RCX: 00007f6a43d9c799 [ 123.913922][ T6047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 123.913942][ T6047] RBP: 00007f6a43e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 123.913961][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.913980][ T6047] R13: 00007f6a44016038 R14: 00007f6a44015fa0 R15: 00007ffcce0540a8 [ 123.914023][ T6047] [ 125.936046][ T6060] Invalid ELF header magic: != ELF [ 125.950040][ T6072] bridge0: port 3(gretap0) entered blocking state [ 125.956936][ T6072] bridge0: port 3(gretap0) entered disabled state [ 125.979570][ T6072] gretap0: entered allmulticast mode [ 126.010822][ T6072] FAULT_INJECTION: forcing a failure. [ 126.010822][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 126.059090][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) [ 126.059140][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.059160][ T6072] Call Trace: [ 126.059174][ T6072] [ 126.059190][ T6072] dump_stack_lvl+0x100/0x190 [ 126.059270][ T6072] should_fail_ex.cold+0x5/0xa [ 126.059311][ T6072] should_failslab+0xc2/0x120 [ 126.059349][ T6072] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 126.059400][ T6072] ? __kernfs_new_node+0xd2/0x960 [ 126.059458][ T6072] __kernfs_new_node+0xd2/0x960 [ 126.059510][ T6072] ? __pfx___kernfs_new_node+0x10/0x10 [ 126.059570][ T6072] ? find_held_lock+0x2b/0x80 [ 126.059600][ T6072] ? kernfs_root+0xee/0x2a0 [ 126.059643][ T6072] ? kernfs_root+0xee/0x2a0 [ 126.059696][ T6072] kernfs_new_node+0x11b/0x1a0 [ 126.059752][ T6072] __kernfs_create_file+0x53/0x350 [ 126.059793][ T6072] sysfs_add_file_mode_ns+0x207/0x3c0 [ 126.059846][ T6072] sysfs_create_file_ns+0x145/0x1e0 [ 126.059901][ T6072] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 126.059946][ T6072] ? kernfs_create_link+0x1bd/0x240 [ 126.059986][ T6072] ? kernfs_put+0x3f/0x60 [ 126.060034][ T6072] ? sysfs_do_create_link_sd+0xbb/0x140 [ 126.060086][ T6072] br_sysfs_addif+0xe4/0x210 [ 126.060135][ T6072] br_add_if+0x701/0x1b40 [ 126.060191][ T6072] ? security_capable+0x80/0x260 [ 126.060244][ T6072] add_del_if+0x114/0x160 [ 126.060287][ T6072] br_dev_siocdevprivate+0x8ac/0x1650 [ 126.060327][ T6072] ? __lock_acquire+0x4a5/0x2630 [ 126.060370][ T6072] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 126.060424][ T6072] ? do_raw_spin_lock+0x128/0x260 [ 126.060478][ T6072] ? mark_held_locks+0x40/0x70 [ 126.060524][ T6072] ? netdev_name_node_lookup+0x107/0x150 [ 126.060557][ T6072] ? __mutex_lock+0x26a/0x1b90 [ 126.060603][ T6072] dev_ifsioc+0xc1e/0x1e90 [ 126.060643][ T6072] ? __pfx_dev_ifsioc+0x10/0x10 [ 126.060674][ T6072] ? __pfx___mutex_lock+0x10/0x10 [ 126.060730][ T6072] ? dev_load+0x8e/0x240 [ 126.060760][ T6072] ? dev_load+0x8e/0x240 [ 126.060803][ T6072] dev_ioctl+0x70e/0x1070 [ 126.060842][ T6072] sock_ioctl+0x494/0x6b0 [ 126.060908][ T6072] ? __pfx_sock_ioctl+0x10/0x10 [ 126.060954][ T6072] ? hook_file_ioctl_common+0x146/0x410 [ 126.061013][ T6072] ? __fget_files+0x21f/0x3d0 [ 126.061046][ T6072] ? __pfx_sock_ioctl+0x10/0x10 [ 126.061095][ T6072] __x64_sys_ioctl+0x18e/0x210 [ 126.061145][ T6072] do_syscall_64+0x106/0xf80 [ 126.061184][ T6072] ? clear_bhb_loop+0x40/0x90 [ 126.061225][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.061261][ T6072] RIP: 0033:0x7f653e79c799 [ 126.061289][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.061323][ T6072] RSP: 002b:00007f653f616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.061354][ T6072] RAX: ffffffffffffffda RBX: 00007f653ea16090 RCX: 00007f653e79c799 [ 126.061376][ T6072] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009 [ 126.061396][ T6072] RBP: 00007f653e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.061417][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.061438][ T6072] R13: 00007f653ea16128 R14: 00007f653ea16090 R15: 00007ffc8b06fac8 [ 126.061483][ T6072] [ 126.740434][ T6072] gretap0: left allmulticast mode [ 129.564103][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.090197][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 131.041558][ T6122] bridge0: port 3(team0) entered blocking state [ 131.062122][ T6122] bridge0: port 3(team0) entered disabled state [ 131.071403][ T6122] team0: entered allmulticast mode [ 131.076621][ T6122] team_slave_0: entered allmulticast mode [ 131.083334][ T6122] team_slave_1: entered allmulticast mode [ 131.092252][ T6122] team0: entered promiscuous mode [ 131.097943][ T6122] team_slave_0: entered promiscuous mode [ 131.105596][ T6122] team_slave_1: entered promiscuous mode [ 131.376375][ T6122] bridge0: port 3(team0) entered blocking state [ 131.383450][ T6122] bridge0: port 3(team0) entered forwarding state [ 132.034638][ T6137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.447895][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.455389][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.108285][ T6161] Invalid ELF header magic: != ELF [ 135.134070][ T6178] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 135.288311][ T6182] netlink: 330 bytes leftover after parsing attributes in process `syz.0.51'. [ 135.318803][ T6182] mac80211_hwsim hwsim7 ›: renamed from wlan0 (while UP) [ 136.747923][ T6191] zswap: compressor û not available [ 137.069510][ T6199] netlink: 17 bytes leftover after parsing attributes in process `syz.0.56'. [ 137.468868][ T6208] bond0: invalid ARP target specified [ 137.509685][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'. [ 137.520108][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.529448][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.548464][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.583008][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.610717][ T6212] FAULT_INJECTION: forcing a failure. [ 137.610717][ T6212] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 137.631925][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT(full) [ 137.631972][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.631994][ T6212] Call Trace: [ 137.632005][ T6212] [ 137.632017][ T6212] dump_stack_lvl+0x100/0x190 [ 137.632090][ T6212] should_fail_ex.cold+0x5/0xa [ 137.632115][ T6212] ? prepare_alloc_pages+0x16d/0x5f0 [ 137.632151][ T6212] should_fail_alloc_page+0xeb/0x140 [ 137.632179][ T6212] prepare_alloc_pages+0x1f0/0x5f0 [ 137.632212][ T6212] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 137.632250][ T6212] ? __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 137.632286][ T6212] ? alloc_pages_noprof+0x131/0x390 [ 137.632308][ T6212] ? __vmalloc_node_range_noprof+0xe5c/0x1530 [ 137.632337][ T6212] ? __vmalloc_node_noprof+0xad/0xf0 [ 137.632364][ T6212] ? __vmalloc_noprof+0xa3/0x120 [ 137.632396][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 137.632433][ T6212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.632473][ T6212] ? lock_acquire+0x1cf/0x380 [ 137.632503][ T6212] ? kvm_sched_clock_read+0x11/0x20 [ 137.632529][ T6212] ? sched_clock+0x38/0x60 [ 137.632563][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 137.632597][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 137.632627][ T6212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.632669][ T6212] ? policy_nodemask+0xed/0x4f0 [ 137.632695][ T6212] alloc_pages_mpol+0x1fb/0x550 [ 137.632721][ T6212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.632743][ T6212] ? find_held_lock+0x2b/0x80 [ 137.632764][ T6212] ? finish_task_switch.isra.0+0x200/0xb80 [ 137.632790][ T6212] ? finish_task_switch.isra.0+0x200/0xb80 [ 137.632820][ T6212] folio_alloc_mpol_noprof+0x36/0x340 [ 137.632851][ T6212] shmem_alloc_folio+0x135/0x160 [ 137.632882][ T6212] shmem_alloc_and_add_folio+0x371/0xd40 [ 137.632926][ T6212] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 137.632965][ T6212] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 137.633008][ T6212] shmem_get_folio_gfp+0x6ab/0x1900 [ 137.633050][ T6212] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 137.633088][ T6212] ? filemap_map_pages+0xe69/0x2020 [ 137.633128][ T6212] shmem_fault+0x1f9/0xa20 [ 137.633170][ T6212] ? __lock_acquire+0x4a5/0x2630 [ 137.633201][ T6212] ? __pfx_shmem_fault+0x10/0x10 [ 137.633243][ T6212] ? __pfx_filemap_map_pages+0x10/0x10 [ 137.633289][ T6212] __do_fault+0x10d/0x550 [ 137.633332][ T6212] do_fault+0xaf9/0x1950 [ 137.633363][ T6212] __handle_mm_fault+0x180f/0x2b60 [ 137.633399][ T6212] ? mt_find+0x45e/0x8e0 [ 137.633431][ T6212] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.633462][ T6212] ? __pfx_mt_find+0x10/0x10 [ 137.633508][ T6212] ? find_vma+0xbf/0x140 [ 137.633529][ T6212] ? __pfx_find_vma+0x10/0x10 [ 137.633553][ T6212] handle_mm_fault+0x36d/0xa20 [ 137.633591][ T6212] do_user_addr_fault+0x74c/0x12f0 [ 137.633639][ T6212] exc_page_fault+0x6f/0xd0 [ 137.633667][ T6212] asm_exc_page_fault+0x26/0x30 [ 137.633692][ T6212] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 137.633729][ T6212] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 137.633752][ T6212] RSP: 0018:ffffc900049dfd30 EFLAGS: 00050206 [ 137.633771][ T6212] RAX: 0000000000000001 RBX: 0000000000001fe4 RCX: 0000000000007ba0 [ 137.633785][ T6212] RDX: 0000000000000001 RSI: 0000000000001fe4 RDI: ffffc90004ee1060 [ 137.633800][ T6212] RBP: 0000000000007ba0 R08: 0000000000000001 R09: fffff520009dd17f [ 137.633814][ T6212] R10: ffffc90004ee8bff R11: 0000000000000000 R12: 0000000000000000 [ 137.633828][ T6212] R13: ffffc90004ee1060 R14: 0000000000007ba0 R15: ffffc90004ee1060 [ 137.633857][ T6212] _copy_from_user+0x98/0xd0 [ 137.633898][ T6212] bpf_prog_create_from_user+0x109/0x2f0 [ 137.633932][ T6212] ? __pfx_seccomp_check_filter+0x10/0x10 [ 137.633964][ T6212] do_seccomp+0x7f7/0x2740 [ 137.634003][ T6212] ? __pfx_do_seccomp+0x10/0x10 [ 137.634034][ T6212] ? __x64_sys_openat+0x12d/0x210 [ 137.634067][ T6212] ? xfd_validate_state+0x129/0x190 [ 137.634112][ T6212] do_syscall_64+0x106/0xf80 [ 137.634145][ T6212] ? clear_bhb_loop+0x40/0x90 [ 137.634175][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.634200][ T6212] RIP: 0033:0x7f653e79c799 [ 137.634220][ T6212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.634242][ T6212] RSP: 002b:00007f653f616028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 137.634263][ T6212] RAX: ffffffffffffffda RBX: 00007f653ea16090 RCX: 00007f653e79c799 [ 137.634279][ T6212] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 137.634294][ T6212] RBP: 00007f653e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 137.634308][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.634323][ T6212] R13: 00007f653ea16128 R14: 00007f653ea16090 R15: 00007ffc8b06fac8 [ 137.634355][ T6212] [ 138.852871][ T6205] vivid-007: ================= START STATUS ================= [ 138.879675][ T6205] vivid-007: Generate PTS: true [ 138.885692][ T6205] vivid-007: Generate SCR: true [ 138.891320][ T6205] tpg source WxH: 320x240 (Y'CbCr) [ 138.921224][ T6205] tpg field: 1 [ 138.924655][ T6205] tpg crop: (0,0)/320x240 [ 138.939756][ T6205] tpg compose: (0,0)/320x240 [ 138.947189][ T6205] tpg colorspace: 8 [ 138.954748][ T6205] tpg transfer function: 0/0 [ 138.961761][ T6205] tpg Y'CbCr encoding: 0/0 [ 139.111348][ T6205] tpg quantization: 0/0 [ 139.122004][ T6205] tpg RGB range: 0/2 [ 139.125962][ T6205] vivid-007: ================== END STATUS ================== [ 139.142340][ T6219] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.295888][ T6223] HfR: entered promiscuous mode [ 139.311415][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'. [ 139.327537][ T6223] HfR: left promiscuous mode [ 140.605969][ T6241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.652939][ T6241] Invalid ELF header magic: != ELF [ 141.327049][ T6245] mmap: syz.3.68 (6245) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.340445][ T5828] block nbd0: Receive control failed (result -32) [ 143.430451][ T6276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.508030][ T6278] syz.0.75(6278): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 143.946950][ T5803] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.966940][ T5803] rtc_cmos 00:00: Alarms can be up to one day in the future [ 143.979769][ T5803] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.009787][ T5803] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.024477][ T5803] rtc rtc0: __rtc_set_alarm: err=-22 [ 144.497986][ T6303] program syz.3.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.451438][ T6325] netlink: 330 bytes leftover after parsing attributes in process `syz.0.85'. [ 147.512625][ T6337] Invalid ELF header magic: != ELF [ 152.665130][ T6394] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.063426][ T6399] misc userio: Invalid payload size [ 154.969128][ T6422] HfR: entered promiscuous mode [ 154.999066][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 155.078806][ T6422] HfR: left promiscuous mode [ 156.366065][ T6449] bridge0: port 3(gretap0) entered blocking state [ 156.379788][ T6449] bridge0: port 3(gretap0) entered disabled state [ 156.396141][ T6449] gretap0: entered allmulticast mode [ 156.430799][ T6449] FAULT_INJECTION: forcing a failure. [ 156.430799][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 156.501475][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.3.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.501525][ T6449] Tainted: [L]=SOFTLOCKUP [ 156.501533][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.501548][ T6449] Call Trace: [ 156.501557][ T6449] [ 156.501567][ T6449] dump_stack_lvl+0x100/0x190 [ 156.501609][ T6449] should_fail_ex.cold+0x5/0xa [ 156.501640][ T6449] should_failslab+0xc2/0x120 [ 156.501664][ T6449] __kmalloc_cache_noprof+0x7a/0x6f0 [ 156.501696][ T6449] ? __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 156.501728][ T6449] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 156.501759][ T6449] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 156.501799][ T6449] __netdev_upper_dev_link+0x3d8/0x7e0 [ 156.501839][ T6449] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 156.501874][ T6449] ? kernfs_root+0xf8/0x2a0 [ 156.501911][ T6449] ? kernfs_add_one+0x214/0x850 [ 156.501956][ T6449] netdev_master_upper_dev_link+0x9f/0xd0 [ 156.501994][ T6449] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 156.502040][ T6449] ? lockdep_rtnl_is_held+0x26/0x40 [ 156.502078][ T6449] ? netdev_is_rx_handler_busy+0x83/0x140 [ 156.502115][ T6449] br_add_if+0x9fd/0x1b40 [ 156.502144][ T6449] ? security_capable+0x80/0x260 [ 156.502180][ T6449] add_del_if+0x114/0x160 [ 156.502208][ T6449] br_dev_siocdevprivate+0x8ac/0x1650 [ 156.502239][ T6449] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 156.502279][ T6449] ? lock_acquire+0x1cf/0x380 [ 156.502320][ T6449] ? netdev_name_node_lookup+0x107/0x150 [ 156.502343][ T6449] ? __mutex_lock+0x26a/0x1b90 [ 156.502375][ T6449] dev_ifsioc+0xc1e/0x1e90 [ 156.502404][ T6449] ? __pfx_dev_ifsioc+0x10/0x10 [ 156.502428][ T6449] ? __pfx___mutex_lock+0x10/0x10 [ 156.502467][ T6449] ? dev_load+0x8e/0x240 [ 156.502494][ T6449] ? dev_load+0x8e/0x240 [ 156.502525][ T6449] dev_ioctl+0x70e/0x1070 [ 156.502553][ T6449] sock_ioctl+0x494/0x6b0 [ 156.502591][ T6449] ? __pfx_sock_ioctl+0x10/0x10 [ 156.502627][ T6449] ? hook_file_ioctl_common+0x146/0x410 [ 156.502672][ T6449] ? __fget_files+0x21f/0x3d0 [ 156.502698][ T6449] ? __pfx_sock_ioctl+0x10/0x10 [ 156.502737][ T6449] __x64_sys_ioctl+0x18e/0x210 [ 156.502774][ T6449] do_syscall_64+0x106/0xf80 [ 156.502804][ T6449] ? clear_bhb_loop+0x40/0x90 [ 156.502834][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.502858][ T6449] RIP: 0033:0x7f6a43d9c799 [ 156.502879][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.502901][ T6449] RSP: 002b:00007f6a44c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.502924][ T6449] RAX: ffffffffffffffda RBX: 00007f6a44016090 RCX: 00007f6a43d9c799 [ 156.502940][ T6449] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 156.502955][ T6449] RBP: 00007f6a43e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 156.502971][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.502985][ T6449] R13: 00007f6a44016128 R14: 00007f6a44016090 R15: 00007ffcce0540a8 [ 156.503017][ T6449] [ 156.510549][ T6449] gretap0: left allmulticast mode [ 157.586779][ T6459] FAULT_INJECTION: forcing a failure. [ 157.586779][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 157.639408][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.2.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.639461][ T6459] Tainted: [L]=SOFTLOCKUP [ 157.639473][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.639495][ T6459] Call Trace: [ 157.639509][ T6459] [ 157.639519][ T6459] dump_stack_lvl+0x100/0x190 [ 157.639561][ T6459] should_fail_ex.cold+0x5/0xa [ 157.639590][ T6459] should_failslab+0xc2/0x120 [ 157.639615][ T6459] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 157.639660][ T6459] ? ima_collect_measurement+0x4c1/0xa40 [ 157.639698][ T6459] ? ima_alloc_tfm+0x21a/0x2e0 [ 157.639734][ T6459] krealloc_node_align_noprof+0x30a/0x3e0 [ 157.639773][ T6459] ? ima_calc_file_hash+0x1b4/0x480 [ 157.639811][ T6459] ima_collect_measurement+0x4c1/0xa40 [ 157.639847][ T6459] ? ima_file_check+0xcc/0x120 [ 157.639885][ T6459] ? __pfx_ima_collect_measurement+0x10/0x10 [ 157.639923][ T6459] ? lock_acquire+0x1cf/0x380 [ 157.639975][ T6459] ? process_measurement+0x5ab/0x2350 [ 157.640008][ T6459] ? is_bad_inode+0xd/0x40 [ 157.640043][ T6459] ? xattr_resolve_name+0x27d/0x3f0 [ 157.640086][ T6459] ? vfs_getxattr_alloc+0xec/0x350 [ 157.640116][ T6459] ? ima_get_hash_algo+0x22d/0x400 [ 157.640146][ T6459] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 157.640182][ T6459] ? process_measurement+0xdfe/0x2350 [ 157.640213][ T6459] process_measurement+0xdfe/0x2350 [ 157.640255][ T6459] ? __pfx_process_measurement+0x10/0x10 [ 157.640289][ T6459] ? trace_contention_end+0x140/0x180 [ 157.640326][ T6459] ? find_held_lock+0x2b/0x80 [ 157.640347][ T6459] ? trace_array_get+0xd8/0x100 [ 157.640368][ T6459] ? trace_array_get+0xd8/0x100 [ 157.640414][ T6459] ? bpf_lsm_locked_down+0x9/0x10 [ 157.640438][ T6459] ? security_locked_down+0x70/0x1e0 [ 157.640465][ T6459] ? tracing_open_generic+0x94/0xc0 [ 157.640501][ T6459] ? subsystem_open+0x1bc/0x4b0 [ 157.640525][ T6459] ? inode_to_bdi+0x9e/0x160 [ 157.640551][ T6459] ima_file_check+0xcc/0x120 [ 157.640584][ T6459] ? __pfx_ima_file_check+0x10/0x10 [ 157.640624][ T6459] security_file_post_open+0xc4/0x210 [ 157.640665][ T6459] path_openat+0x1418/0x31a0 [ 157.640698][ T6459] ? __pfx_path_openat+0x10/0x10 [ 157.640733][ T6459] do_file_open+0x20e/0x430 [ 157.640759][ T6459] ? __pfx_do_file_open+0x10/0x10 [ 157.640805][ T6459] ? alloc_fd+0x476/0x790 [ 157.640829][ T6459] ? do_getname+0x191/0x390 [ 157.640862][ T6459] do_sys_openat2+0x10d/0x1e0 [ 157.640893][ T6459] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.640936][ T6459] __x64_sys_openat+0x12d/0x210 [ 157.640975][ T6459] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.641020][ T6459] do_syscall_64+0x106/0xf80 [ 157.641049][ T6459] ? clear_bhb_loop+0x40/0x90 [ 157.641080][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.641105][ T6459] RIP: 0033:0x7fab5359c799 [ 157.641125][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.641148][ T6459] RSP: 002b:00007fab54374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.641172][ T6459] RAX: ffffffffffffffda RBX: 00007fab53816090 RCX: 00007fab5359c799 [ 157.641187][ T6459] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 157.641203][ T6459] RBP: 00007fab53632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 157.641217][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.641231][ T6459] R13: 00007fab53816128 R14: 00007fab53816090 R15: 00007ffebf02c238 [ 157.641262][ T6459] [ 157.641640][ T30] audit: type=1800 audit(1772651642.629:2): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.112" name="filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 158.097203][ T6469] syz.1.115 uses obsolete (PF_INET,SOCK_PACKET) [ 158.148278][ T6469] random: crng reseeded on system resumption [ 158.353218][ T6472] vivid-007: ================= START STATUS ================= [ 158.364971][ T6469] hub 1-0:1.0: USB hub found [ 158.376637][ T6469] hub 1-0:1.0: 1 port detected [ 158.383543][ T6472] vivid-007: Generate PTS: true [ 158.388585][ T6472] vivid-007: Generate SCR: true [ 158.405616][ T6472] tpg source WxH: 320x240 (Y'CbCr) [ 158.445315][ T6472] tpg field: 1 [ 158.469422][ T6472] tpg crop: (0,0)/320x240 [ 158.474230][ T6472] tpg compose: (0,0)/320x240 [ 158.478974][ T6472] tpg colorspace: 8 [ 158.553334][ T6472] tpg transfer function: 0/0 [ 158.558458][ T6472] tpg Y'CbCr encoding: 0/0 [ 158.568851][ T6472] tpg quantization: 0/0 [ 158.583787][ T6472] tpg RGB range: 0/2 [ 158.674526][ T6472] vivid-007: ================== END STATUS ================== [ 159.224745][ T6482] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.244391][ T6482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.354559][ T6482] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.401460][ T6482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.409787][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.471008][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.508651][ T6482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.551098][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.592293][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.623396][ T6482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.641396][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 159.662387][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.246592][ T6506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 161.279458][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.340499][ T6513] syz.1.121 (6513) used greatest stack depth: 19672 bytes left [ 161.439528][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.519488][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.679961][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.338985][ T6547] FAULT_INJECTION: forcing a failure. [ 162.338985][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 162.353073][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.3.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.353123][ T6547] Tainted: [L]=SOFTLOCKUP [ 162.353134][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.353153][ T6547] Call Trace: [ 162.353163][ T6547] [ 162.353175][ T6547] dump_stack_lvl+0x100/0x190 [ 162.353233][ T6547] should_fail_ex.cold+0x5/0xa [ 162.353303][ T6547] should_failslab+0xc2/0x120 [ 162.353339][ T6547] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 162.353391][ T6547] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 162.353431][ T6547] alloc_unbound_pwq+0x3ff/0xdd0 [ 162.353474][ T6547] apply_wqattrs_prepare+0x847/0xbb0 [ 162.353522][ T6547] apply_workqueue_attrs_locked+0x64/0xe0 [ 162.353559][ T6547] __alloc_workqueue+0x1111/0x1880 [ 162.353614][ T6547] alloc_workqueue_noprof+0xd2/0x200 [ 162.353654][ T6547] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 162.353700][ T6547] ? kobject_init+0x159/0x1b0 [ 162.353746][ T6547] ? __alloc_disk_node+0x4d8/0x6b0 [ 162.353810][ T6547] nbd_dev_add+0x51a/0xb10 [ 162.353865][ T6547] ? find_held_lock+0x2b/0x80 [ 162.353899][ T6547] ? __pfx_nbd_dev_add+0x10/0x10 [ 162.353944][ T6547] ? nbd_genl_connect+0x131a/0x1a40 [ 162.354019][ T6547] ? bpf_lsm_capable+0x9/0x10 [ 162.354055][ T6547] ? __radix_tree_lookup+0x217/0x2b0 [ 162.354097][ T6547] nbd_genl_connect+0xb8d/0x1a40 [ 162.354144][ T6547] ? rcu_is_watching+0x12/0xc0 [ 162.354200][ T6547] ? __pfx_nbd_genl_connect+0x10/0x10 [ 162.354253][ T6547] ? __nla_parse+0x40/0x60 [ 162.354311][ T6547] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 162.354366][ T6547] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 162.354428][ T6547] genl_family_rcv_msg_doit+0x214/0x300 [ 162.354484][ T6547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 162.354534][ T6547] ? genl_get_cmd+0x3ef/0x720 [ 162.354593][ T6547] ? __dev_queue_xmit+0x5af/0x4800 [ 162.354646][ T6547] ? __radix_tree_lookup+0x217/0x2b0 [ 162.354687][ T6547] genl_rcv_msg+0x560/0x800 [ 162.354741][ T6547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.354792][ T6547] ? __pfx_nbd_genl_connect+0x10/0x10 [ 162.354859][ T6547] netlink_rcv_skb+0x159/0x420 [ 162.354904][ T6547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.354955][ T6547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.355017][ T6547] ? netlink_deliver_tap+0x1ae/0xcc0 [ 162.355063][ T6547] genl_rcv+0x28/0x40 [ 162.355107][ T6547] netlink_unicast+0x5aa/0x870 [ 162.355157][ T6547] ? __pfx_netlink_unicast+0x10/0x10 [ 162.355219][ T6547] netlink_sendmsg+0x8b0/0xda0 [ 162.355270][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.355319][ T6547] ? __import_iovec+0x1d2/0x640 [ 162.355357][ T6547] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 162.355411][ T6547] ____sys_sendmsg+0xa54/0xc30 [ 162.355465][ T6547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.355526][ T6547] ? __pfx_futex_wake_mark+0x10/0x10 [ 162.355585][ T6547] ___sys_sendmsg+0x190/0x1e0 [ 162.355642][ T6547] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.355749][ T6547] __sys_sendmsg+0x170/0x220 [ 162.355792][ T6547] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.355833][ T6547] ? __x64_sys_futex+0x34f/0x4d0 [ 162.355903][ T6547] do_syscall_64+0x106/0xf80 [ 162.355943][ T6547] ? clear_bhb_loop+0x40/0x90 [ 162.355986][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.356020][ T6547] RIP: 0033:0x7f6a43d9c799 [ 162.356049][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.356082][ T6547] RSP: 002b:00007f6a44c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.356116][ T6547] RAX: ffffffffffffffda RBX: 00007f6a44015fa0 RCX: 00007f6a43d9c799 [ 162.356138][ T6547] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000008 [ 162.356158][ T6547] RBP: 00007f6a43e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 162.356178][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.356197][ T6547] R13: 00007f6a44016038 R14: 00007f6a44015fa0 R15: 00007ffcce0540a8 [ 162.356241][ T6547] [ 162.357995][ T6547] block (null): Could not allocate knbd recv work queue. [ 162.819681][ T6547] nbd: failed to add new device [ 163.361263][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.522026][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.609387][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.766418][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.442165][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.609473][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.679416][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.840297][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.142653][ T6649] random: crng reseeded on system resumption [ 168.347081][ T6649] hub 1-0:1.0: USB hub found [ 168.362533][ T6649] hub 1-0:1.0: 1 port detected [ 169.392964][ T6674] FAULT_INJECTION: forcing a failure. [ 169.392964][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 169.574801][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.2.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.574840][ T6674] Tainted: [L]=SOFTLOCKUP [ 169.574848][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.574870][ T6674] Call Trace: [ 169.574878][ T6674] [ 169.574887][ T6674] dump_stack_lvl+0x100/0x190 [ 169.574929][ T6674] should_fail_ex.cold+0x5/0xa [ 169.574957][ T6674] should_failslab+0xc2/0x120 [ 169.575018][ T6674] __kmalloc_cache_noprof+0x7a/0x6f0 [ 169.575064][ T6674] ? sc_common_open+0x46/0x200 [ 169.575089][ T6674] ? __pfx___debugfs_file_get+0x10/0x10 [ 169.575116][ T6674] ? find_held_lock+0x2b/0x80 [ 169.575143][ T6674] ? __pfx_stats_fop_open+0x10/0x10 [ 169.575166][ T6674] sc_common_open+0x46/0x200 [ 169.575192][ T6674] full_proxy_open_regular+0x1b6/0x370 [ 169.575227][ T6674] do_dentry_open+0x6d8/0x1660 [ 169.575249][ T6674] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 169.575288][ T6674] vfs_open+0x82/0x3f0 [ 169.575321][ T6674] path_openat+0x208c/0x31a0 [ 169.575355][ T6674] ? __pfx_path_openat+0x10/0x10 [ 169.575389][ T6674] do_file_open+0x20e/0x430 [ 169.575415][ T6674] ? __pfx_do_file_open+0x10/0x10 [ 169.575459][ T6674] ? alloc_fd+0x476/0x790 [ 169.575485][ T6674] ? do_getname+0x191/0x390 [ 169.575516][ T6674] do_sys_openat2+0x10d/0x1e0 [ 169.575547][ T6674] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.575580][ T6674] ? __fget_files+0x21f/0x3d0 [ 169.575607][ T6674] __x64_sys_openat+0x12d/0x210 [ 169.575639][ T6674] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.575682][ T6674] do_syscall_64+0x106/0xf80 [ 169.575709][ T6674] ? clear_bhb_loop+0x40/0x90 [ 169.575738][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.575762][ T6674] RIP: 0033:0x7fab5359c799 [ 169.575783][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.575805][ T6674] RSP: 002b:00007fab517f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.575831][ T6674] RAX: ffffffffffffffda RBX: 00007fab53816180 RCX: 00007fab5359c799 [ 169.575847][ T6674] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 169.575867][ T6674] RBP: 00007fab53632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 169.575881][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.575895][ T6674] R13: 00007fab53816218 R14: 00007fab53816180 R15: 00007ffebf02c238 [ 169.575926][ T6674] [ 170.850960][ T30] audit: type=1800 audit(1772651655.829:3): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.142" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 172.495463][ T6713] process 'syz.3.147' launched './file0' with NULL argv: empty string added [ 175.273757][ T6748] [ 175.276135][ T6748] ====================================================== [ 175.283190][ T6748] WARNING: possible circular locking dependency detected [ 175.290689][ T6748] syzkaller #0 Tainted: G L [ 175.296696][ T6748] ------------------------------------------------------ [ 175.303779][ T6748] syz.1.155/6748 is trying to acquire lock: [ 175.309708][ T6748] ffff88805db9d568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 175.321324][ T6748] [ 175.321324][ T6748] but task is already holding lock: [ 175.328822][ T6748] ffff88805db940e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 175.337844][ T6748] [ 175.337844][ T6748] which lock already depends on the new lock. [ 175.337844][ T6748] [ 175.348367][ T6748] [ 175.348367][ T6748] the existing dependency chain (in reverse order) is: [ 175.357445][ T6748] [ 175.357445][ T6748] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 175.365376][ T6748] lock_sock_nested+0x41/0xf0 [ 175.370748][ T6748] smc_listen_out+0x1f5/0x4b0 [ 175.376601][ T6748] smc_listen_work+0x4c2/0x50e0 [ 175.382031][ T6748] process_one_work+0x9d7/0x1920 [ 175.387623][ T6748] worker_thread+0x5da/0xe40 [ 175.392888][ T6748] kthread+0x370/0x450 [ 175.397636][ T6748] ret_from_fork+0x754/0xd80 [ 175.402963][ T6748] ret_from_fork_asm+0x1a/0x30 [ 175.408288][ T6748] [ 175.408288][ T6748] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 175.418493][ T6748] __lock_acquire+0x14b8/0x2630 [ 175.423900][ T6748] lock_acquire+0x1cf/0x380 [ 175.429048][ T6748] __flush_work+0x4de/0xcb0 [ 175.434429][ T6748] cancel_work_sync+0xd1/0xf0 [ 175.439745][ T6748] smc_clcsock_release+0x5f/0xe0 [ 175.445244][ T6748] __smc_release+0x5c2/0x880 [ 175.450432][ T6748] smc_close_non_accepted+0xda/0x200 [ 175.456283][ T6748] smc_close_active+0x4ff/0x1070 [ 175.461788][ T6748] __smc_release+0x634/0x880 [ 175.466952][ T6748] smc_release+0x1fc/0x620 [ 175.471927][ T6748] __sock_release+0xb3/0x260 [ 175.477073][ T6748] sock_close+0x1c/0x30 [ 175.481785][ T6748] __fput+0x3ff/0xb40 [ 175.486413][ T6748] task_work_run+0x150/0x240 [ 175.491609][ T6748] exit_to_user_mode_loop+0x100/0x4a0 [ 175.497817][ T6748] do_syscall_64+0x668/0xf80 [ 175.502996][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.509613][ T6748] [ 175.509613][ T6748] other info that might help us debug this: [ 175.509613][ T6748] [ 175.519869][ T6748] Possible unsafe locking scenario: [ 175.519869][ T6748] [ 175.527449][ T6748] CPU0 CPU1 [ 175.532843][ T6748] ---- ---- [ 175.538319][ T6748] lock(sk_lock-AF_SMC/1); [ 175.542871][ T6748] lock((work_completion)(&new_smc->smc_listen_work)); [ 175.552669][ T6748] lock(sk_lock-AF_SMC/1); [ 175.559827][ T6748] lock((work_completion)(&new_smc->smc_listen_work)); [ 175.566924][ T6748] [ 175.566924][ T6748] *** DEADLOCK *** [ 175.566924][ T6748] [ 175.575166][ T6748] 3 locks held by syz.1.155/6748: [ 175.580216][ T6748] #0: ffff88805f20aa48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 175.590981][ T6748] #1: ffff88805db940e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 175.600605][ T6748] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 175.610145][ T6748] [ 175.610145][ T6748] stack backtrace: [ 175.616109][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.1.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.616147][ T6748] Tainted: [L]=SOFTLOCKUP [ 175.616155][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.616170][ T6748] Call Trace: [ 175.616182][ T6748] [ 175.616192][ T6748] dump_stack_lvl+0x100/0x190 [ 175.616232][ T6748] print_circular_bug.cold+0x178/0x1c7 [ 175.616272][ T6748] check_noncircular+0x146/0x160 [ 175.616304][ T6748] __lock_acquire+0x14b8/0x2630 [ 175.616338][ T6748] lock_acquire+0x1cf/0x380 [ 175.616365][ T6748] ? __flush_work+0x4ca/0xcb0 [ 175.616401][ T6748] ? mark_held_locks+0x40/0x70 [ 175.616428][ T6748] ? __flush_work+0x4ca/0xcb0 [ 175.616461][ T6748] __flush_work+0x4de/0xcb0 [ 175.616494][ T6748] ? __flush_work+0x4ca/0xcb0 [ 175.616529][ T6748] ? __pfx___flush_work+0x10/0x10 [ 175.616563][ T6748] ? __pfx_wq_barrier_func+0x10/0x10 [ 175.616604][ T6748] ? __pfx___might_resched+0x10/0x10 [ 175.616640][ T6748] cancel_work_sync+0xd1/0xf0 [ 175.616662][ T6748] smc_clcsock_release+0x5f/0xe0 [ 175.616687][ T6748] __smc_release+0x5c2/0x880 [ 175.616724][ T6748] ? __pfx_sock_def_readable+0x10/0x10 [ 175.616748][ T6748] smc_close_non_accepted+0xda/0x200 [ 175.616772][ T6748] smc_close_active+0x4ff/0x1070 [ 175.616797][ T6748] __smc_release+0x634/0x880 [ 175.616833][ T6748] smc_release+0x1fc/0x620 [ 175.616869][ T6748] __sock_release+0xb3/0x260 [ 175.616898][ T6748] ? __pfx_sock_close+0x10/0x10 [ 175.616925][ T6748] sock_close+0x1c/0x30 [ 175.616951][ T6748] __fput+0x3ff/0xb40 [ 175.616978][ T6748] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.617004][ T6748] task_work_run+0x150/0x240 [ 175.617037][ T6748] ? __pfx_task_work_run+0x10/0x10 [ 175.617068][ T6748] ? __x64_sys_poll+0x12e/0x420 [ 175.617108][ T6748] exit_to_user_mode_loop+0x100/0x4a0 [ 175.617139][ T6748] do_syscall_64+0x668/0xf80 [ 175.617167][ T6748] ? clear_bhb_loop+0x40/0x90 [ 175.617193][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.617217][ T6748] RIP: 0033:0x7f653e79c799 [ 175.617237][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.617259][ T6748] RSP: 002b:00007f653f637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 175.617281][ T6748] RAX: 0000000000000001 RBX: 00007f653ea15fa0 RCX: 00007f653e79c799 [ 175.617296][ T6748] RDX: 0000000000000108 RSI: 0000000000000005 RDI: 0000200000000080 [ 175.617311][ T6748] RBP: 00007f653e832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 175.617324][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.617338][ T6748] R13: 00007f653ea16038 R14: 00007f653ea15fa0 R15: 00007ffc8b06fac8 [ 175.617360][ T6748]