last executing test programs: 12.322294987s ago: executing program 3 (id=322): r0 = socket(0x8, 0xa, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0x23}, 0x1c) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025040008003800010400000000000000670324b32e1679d469b16ea6e32387d5dd9be337151084c1f85021115b2a81308205de80095009b44ac6b7cda4"], 0x50}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40044) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) symlink$auto(&(0x7f00000020c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r0) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0x7, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES8=0x0, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = socket(0x1a, 0x8000e, 0x84) getsockopt$auto(r3, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) write$auto(0x3, 0x0, 0x5c8) pipe$auto(&(0x7f0000000080)=r0) r4 = socket(0x15, 0x80000, 0x5) mmap$auto(0x100000000000, 0x2000d, 0xa, 0xeb1, r4, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram13/power/runtime_suspended_time\x00', 0x80, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xca, &(0x7f0000000240)='\x04>\x00\x01\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1O\xf68\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B*]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8fA\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6h\b\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1er\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\xe9\xf2\x0e\xc8\x00\x00\x00\x00', 0x3) 10.944969178s ago: executing program 3 (id=330): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r0, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0x6, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) setresuid$auto(0x2, 0x7, 0x8080) inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="13002ebd70005641e3a81394531d08000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_OBSS_PD={0x68, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x5c, 0x5, "1f297dfd41f0682318541904aacf46688f01fd6cb37b0ac1f0a39c4bb92d7f928be5688311827b26f695053b05d53f552f00d25fd843819420002a2cbcc754dc6745b823b4d3f81f1b07ab880346e57dde55a3be4e0e8fa2"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0) 7.226446863s ago: executing program 3 (id=343): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram10\x00', 0x100, 0x0) ioctl$auto_BLKIOMIN(r0, 0x1278, 0x0) r1 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0005, 0x17) (async, rerun: 32) madvise$auto(0x1, 0xffffffffffff0001, 0x15) (async, rerun: 32) prctl$auto(0x10, 0x9, r2, 0x5, 0x42c) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) getpriority$auto_PRIO_USER(0x2, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 64) pipe2$auto(0x0, 0x80) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x4, 0x0, 0x85, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x8) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x8000000000000000) (async) socket(0x10, 0x2, 0x2) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) ioctl$auto_BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) read$auto_state_fops_(0xffffffffffffffff, &(0x7f0000000180)=""/61, 0xfffffeeb) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xfc6, 0x3, 0x0, 0x9b40, 0x4) write$auto_fops_x16_ro_(r4, &(0x7f0000000280)="28840e96ef30b2e731e8cbf2300f4d1020b565b080f935ec5398e7f0942f7a60e9009d0caf5a7a7837e91acf6ef92a8a5b955b357a97f029443e90ad91f8086f1713871929dc232ff8860d9dc7fc13aa813fd4fc59e6562039027d5322f78bb5b4bfb38b6287544b42829861d365c9f20f89fa7f8f", 0x75) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) mmap$auto(0x3, 0x202000b, 0x7b0e, 0x4000000000000eb1, r3, 0x2000000008000) 6.513696942s ago: executing program 2 (id=344): write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111, 0x0) 6.444188254s ago: executing program 0 (id=345): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xa) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) renameat2$auto(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000300)=':,\x00', 0x6) execve$auto(&(0x7f00000002c0)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@generic={0xa, "fbbb5bafbf0728ecd7e0b7fa5906"}, 0x6d) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) write$auto(r3, 0x0, 0x7) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)=@test={r3, 0x2, 0x1, 0x4, 0xa2, 0x51, 0xff, 0x4, 0x7fff, 0x2, 0xf290, 0x10, 0x4, 0x0, 0xffffffff}, 0xf) socket(0x28, 0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2, 0x3, 0x100) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x274, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x193, 0x2, 0x0, 0x1, [@nested={0x8, 0x64, 0x0, 0x1, [@typed={0x4, 0x149}]}, @typed={0x30, 0x135, 0x0, 0x0, @binary="62b8f5d263869d6bc81718acf6f7901547a8ac96c39996140e57a76e910b52f8f7653b572167c53e8fc77e34"}, @nested={0x9d, 0x1a, 0x0, 0x1, [@typed={0x4, 0xe8}, @generic="557914719f9e12b0fbd060630d5fc819c809d36553ac594e7cf1ce577ee17be2b4f05a2297cad1da99ef2184ca9490ab8353586501c786423d4dc074210cea37d54e6df9c892ae86f89b21ed81f7326082393dfa62362ee9647c26517d37ef84f1d9e17b25137b2592ee84e08bcad6cf10fe6bebe4ab459a6a331c4f7fead8839d52076edcaee2094e731beffafd5623d3", @nested={0x4, 0xbe}]}, @typed={0x57, 0x8e, 0x0, 0x0, @binary="806071b1108bd73a0c7baa2fa5a17587bb912dace03237a1d505e6926c6b6e78fe10b33922eaa6824b70af0d8fe0fad86368229c380d4db6a03a680c384d7b1ac20d54a0eabaa40d397a7cc4cabd949d6c5db1"}, @typed={0x8, 0xe9, 0x0, 0x0, @fd}, @generic="83259d8868cd784ce3288ff46a29ca2c4680449dd2b069f7543caae541cc72176ca5a4d6fcef6e9f86fd8014e132c3d84a7bc3d38e3fd73a1455ed7de190f5a0afe3584bf27c09a62a8bdc0e09669521ad9eb2", @typed={0x4, 0x14a}]}, @MACSEC_ATTR_RXSC_CONFIG={0xc1, 0x2, 0x0, 0x1, [@typed={0x8, 0x15d, 0x0, 0x0, @ipv4=@loopback}, @generic="313830ce00cb63efe958e9beab56008cbc43d752a40940bc5bd4508cc0a0a6d6cec059f0efb5e9f0a9058a594994edd43c7abcc6b60463f5a71e6fb33a6de5b7668a3687e8ef5b505792a64c42c73fba7196355e67a1ae7d467dd83a80000ba8e643b3cd35cba93aa4d665cf4c31609d4e9524c658d1ed37ffc8fbb5a70c8717c2b4f9d8c37f19e93abcf53f4bcc2bf2ced5ad7deb9758a8eb316da07817272284", @typed={0x8, 0x14d, 0x0, 0x0, @uid}, @typed={0x8, 0xfc, 0x0, 0x0, @uid}, @typed={0x4, 0x1e}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x274}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 6.031951415s ago: executing program 2 (id=346): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r2, 0x6, 0x2b, 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKIOOPT(r1, 0x1279, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xa8) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) 5.268476029s ago: executing program 0 (id=348): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x2a08c0, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x1940, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000040)=0x74c7) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(r0, 0x0, 0x100000010000a) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) write$auto(r0, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r3 = pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r3, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0xffff93e3, @_sigsys={0x0, 0x732, 0x9}}}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000000500)=""/1, 0x1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket(0x2, 0x3, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) shutdown$auto(0xffffffffffffffff, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/cec28/power/runtime_suspended_time\x00', 0x22040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) read$auto(r6, 0x0, 0x20) 4.775574673s ago: executing program 2 (id=350): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) symlink$auto(&(0x7f00000020c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) r2 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000000c0)=0x8) read$auto_debug_help_fops_orangefs_debugfs(r2, &(0x7f0000000100)=""/43, 0x2b) 4.491890473s ago: executing program 0 (id=352): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504004000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2bdd73929a3210e1f216ce5179acff73330045a851373ef9915a21c09ce72ec04c574ca") openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x6, 0x1, 0x3ad2dd5) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) 4.409103016s ago: executing program 2 (id=353): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ttyca/power/runtime_status\x00', 0x1dd7c1, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x20004000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/README\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2000c, 0x8, 0x11, r1, 0x4) socket(0x2, 0x2, 0x1) bpf$auto(0x0, 0x0, 0x10) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) 4.40515033s ago: executing program 1 (id=354): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 4.237710531s ago: executing program 1 (id=355): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0xa, 0x3a) (async) r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, 0x0, 0x3) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/statistics/rx_packets\x00', 0x244100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) (async) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x1, 0x80802, 0x5) (async, rerun: 64) sendmsg$auto_NL80211_CMD_ADD_LINK(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) (async, rerun: 64) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@sco, 0x6) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) (rerun: 64) socket(0xa, 0x1, 0x84) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) (async) socket(0x2, 0x5, 0x0) 3.44416662s ago: executing program 3 (id=356): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) clone3$auto(&(0x7f0000000040)={0x4, 0x5, 0x82, 0x8000000000000000, 0x9, 0xf95, 0x1, 0x6c5d47b60000, 0x81, 0x7, 0x2}, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mlock$auto(0x7c88, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0xeda5, 0xc86) sendmmsg$auto(0x3, 0x0, 0x2000001, 0x6) 2.896726533s ago: executing program 0 (id=357): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xa) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) renameat2$auto(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000300)=':,\x00', 0x6) execve$auto(&(0x7f00000002c0)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @remote}, 0x6a) bind$auto(0x3, &(0x7f0000000100)=@generic={0xa, "fbbb5bafbf0728ecd7e0b7fa5906"}, 0x6d) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) write$auto(r3, 0x0, 0x7) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)=@test={r3, 0x2, 0x1, 0x4, 0xa2, 0x51, 0xff, 0x4, 0x7fff, 0x2, 0xf290, 0x10, 0x4, 0x0, 0xffffffff}, 0xf) socket(0x28, 0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2, 0x3, 0x100) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x274, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x193, 0x2, 0x0, 0x1, [@nested={0x8, 0x64, 0x0, 0x1, [@typed={0x4, 0x149}]}, @typed={0x30, 0x135, 0x0, 0x0, @binary="62b8f5d263869d6bc81718acf6f7901547a8ac96c39996140e57a76e910b52f8f7653b572167c53e8fc77e34"}, @nested={0x9d, 0x1a, 0x0, 0x1, [@typed={0x4, 0xe8}, @generic="557914719f9e12b0fbd060630d5fc819c809d36553ac594e7cf1ce577ee17be2b4f05a2297cad1da99ef2184ca9490ab8353586501c786423d4dc074210cea37d54e6df9c892ae86f89b21ed81f7326082393dfa62362ee9647c26517d37ef84f1d9e17b25137b2592ee84e08bcad6cf10fe6bebe4ab459a6a331c4f7fead8839d52076edcaee2094e731beffafd5623d3", @nested={0x4, 0xbe}]}, @typed={0x57, 0x8e, 0x0, 0x0, @binary="806071b1108bd73a0c7baa2fa5a17587bb912dace03237a1d505e6926c6b6e78fe10b33922eaa6824b70af0d8fe0fad86368229c380d4db6a03a680c384d7b1ac20d54a0eabaa40d397a7cc4cabd949d6c5db1"}, @typed={0x8, 0xe9, 0x0, 0x0, @fd}, @generic="83259d8868cd784ce3288ff46a29ca2c4680449dd2b069f7543caae541cc72176ca5a4d6fcef6e9f86fd8014e132c3d84a7bc3d38e3fd73a1455ed7de190f5a0afe3584bf27c09a62a8bdc0e09669521ad9eb2", @typed={0x4, 0x14a}]}, @MACSEC_ATTR_RXSC_CONFIG={0xc1, 0x2, 0x0, 0x1, [@typed={0x8, 0x15d, 0x0, 0x0, @ipv4=@loopback}, @generic="313830ce00cb63efe958e9beab56008cbc43d752a40940bc5bd4508cc0a0a6d6cec059f0efb5e9f0a9058a594994edd43c7abcc6b60463f5a71e6fb33a6de5b7668a3687e8ef5b505792a64c42c73fba7196355e67a1ae7d467dd83a80000ba8e643b3cd35cba93aa4d665cf4c31609d4e9524c658d1ed37ffc8fbb5a70c8717c2b4f9d8c37f19e93abcf53f4bcc2bf2ced5ad7deb9758a8eb316da07817272284", @typed={0x8, 0x14d, 0x0, 0x0, @uid}, @typed={0x8, 0xfc, 0x0, 0x0, @uid}, @typed={0x4, 0x1e}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x274}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 2.223364185s ago: executing program 1 (id=358): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc7\x00', 0x0, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="227a5cda972146045a60f4910380") r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) ioctl$auto(r4, 0xb21064a6, 0x20000a) ioctl$auto_VFIO_GET_API_VERSION(r1, 0x3b64, 0x0) 1.765129627s ago: executing program 0 (id=359): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc7\x00', 0x0, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="227a5cda972146045a60f4910380") r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r4, 0xb21064a6, 0x20000a) ioctl$auto_VFIO_GET_API_VERSION(r1, 0x3b64, 0x0) 1.254104273s ago: executing program 2 (id=360): close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x2, 0x0) r0 = prctl$auto_PR_SET_MM_END_DATA(0x400, 0x4, 0xffffffffffffffff, 0x6, 0x7) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x8000, 0x7e, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) bind$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x80807, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x240042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0c/sub7/hw_params\x00', 0x488400, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x80240, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') clone3$auto(&(0x7f0000000380)={0x101, 0x2, 0x8000, 0x1000, 0x3, 0x8, 0x2d, 0x5, 0x0, 0x1, 0x5}, 0x7) io_uring_setup$auto(0xc, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) 1.232692962s ago: executing program 0 (id=361): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x101, 0x0, 0x1, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r1, 0x3314, 0x0) setsockopt$auto(0xffffffffffffffff, 0x12f, 0x4, 0x0, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000000000004, 0x400004, 0xdf, 0x9b72, r2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)="df17a9b4", 0x4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000080), 0xa0100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 1.208236966s ago: executing program 1 (id=362): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) socket(0x2c, 0x3, 0x0) r0 = open(0x0, 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x1fe, 0x81) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0x9, 0x10, 0x0) ioctl$auto(r5, 0x8946, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, r1, 0x98, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r0, 0x0, 0x6}, 0xc) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002080)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f00000020c0)="639ba264a968f05a3ba9b5ef2aac5d6aa8bca3f891774c61ddbb35524f057da2d24989e7") 1.002339147s ago: executing program 1 (id=363): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) 823.595955ms ago: executing program 1 (id=364): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x100000001, 0xffffffffffff0004, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getgroups$auto(0xeda, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b) prctl$auto(0x4f, 0x2, 0x0, 0x5, 0x800007) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x0) 603.120139ms ago: executing program 3 (id=365): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) pwrite64$auto(r0, &(0x7f0000000100)='/proc/self/pagemap\x00', 0x2000005, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="030026bd0ecd72913be4837b000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) setsockopt$auto_SO_RCVBUF(r0, 0xd, 0x8, &(0x7f0000000040)='/proc/self/pagemap\x00', 0xfffffffd) socketpair$auto(0x400, 0x1ff, 0xdae3, &(0x7f0000000000)=0xfff) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) (async) pwrite64$auto(r0, &(0x7f0000000100)='/proc/self/pagemap\x00', 0x2000005, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="030026bd0ecd72913be4837b000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) setsockopt$auto_SO_RCVBUF(r0, 0xd, 0x8, &(0x7f0000000040)='/proc/self/pagemap\x00', 0xfffffffd) (async) socketpair$auto(0x400, 0x1ff, 0xdae3, &(0x7f0000000000)=0xfff) (async) 126.311959ms ago: executing program 2 (id=366): socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8004) socket(0x2, 0x1, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) sendmsg$auto(r0, &(0x7f0000000400)={&(0x7f0000000100)="2fe2b2341a6128547a40dba51e626571996e503f01cdd93be8a19609ab06e12a78d3c6155f40f272e9275fc724930332dfdb36b57e8d586763251946ef280d1fc557cb2251e6fd1575984de65e0e4c4bc7b7d6fb7c04fed3c783fcc1c2ea9c950e36471ef7c907f9d23d6283d8d5665683313994a2a3eed4", 0x5, &(0x7f0000000380)={&(0x7f0000000280)="378a424676363a50561bb3bf1cbf949dd63a85296bebb5c97aa3d589a20241d5d0d310b2d576396dbcf451eae10771ff00100c435a4cb19eb4db57d71161149454cdee793af4ad3ce9efec4c6b876591633d7d123018bf66cd0a05b9a46c97893c0b3069b5aa6f3e029c24e1b460b0f671aeb4a95d093452b2baa184c53aa3ff20f179dde3bb4ab36f72e9d2aa3e14dd7c8535f2bf63a0296c7b4155862ef9b504bdcd124704f4059d37fac1f9349ce816040a6475f2978716f7dc7c9938e0d2d6eb88c284f3fea8", 0x4}, 0x7, &(0x7f00000003c0)="13498fc909788833fc3e4e7b0588c374a17aa9f17f9b2ab2173e5f43", 0x7, 0x9}, 0x9f0) (async) read$auto(r0, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) clock_gettime$auto(0x6bde, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) shutdown$auto(0x200000003, 0x2) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (rerun: 32) read$auto(0xffffffffffffffff, 0x0, 0x10001) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) (async) prctl$auto(0x26, 0x17000000, 0x0, 0x0, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) (async) pidfd_open$auto(0x1, 0x0) (async) socket(0x2, 0x3, 0x100) (async) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) (async) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async, rerun: 64) r1 = socket(0x10, 0x2, 0x4) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x20802, 0x0) 0s ago: executing program 3 (id=367): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone3$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) mmap$auto(0x0, 0x80, 0x36, 0x19, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x4) write$auto(0x3, 0x0, 0xffef) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x16bb82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) writev$auto(r4, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000001b40), 0x700, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 71.391691][ T5612] cgroup: Unknown subsys name 'net' [ 71.507018][ T5612] cgroup: Unknown subsys name 'cpuset' [ 71.516217][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.964032][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.672500][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.681541][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.693137][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.699335][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.700988][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.709788][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.716998][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.721813][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.734437][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.735387][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.742934][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.749807][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.760031][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.765344][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.772858][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.777478][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.800733][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.808214][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.820558][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.834347][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.301020][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.308809][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.316059][ T5623] bridge_slave_0: entered allmulticast mode [ 76.323458][ T5623] bridge_slave_0: entered promiscuous mode [ 76.353158][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.360383][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.367876][ T5625] bridge_slave_0: entered allmulticast mode [ 76.375327][ T5625] bridge_slave_0: entered promiscuous mode [ 76.392370][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.399786][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.407417][ T5624] bridge_slave_0: entered allmulticast mode [ 76.414586][ T5624] bridge_slave_0: entered promiscuous mode [ 76.421666][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.428893][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.436133][ T5623] bridge_slave_1: entered allmulticast mode [ 76.443086][ T5623] bridge_slave_1: entered promiscuous mode [ 76.457994][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.465356][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.472511][ T5625] bridge_slave_1: entered allmulticast mode [ 76.479859][ T5625] bridge_slave_1: entered promiscuous mode [ 76.495592][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.502721][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.510239][ T5624] bridge_slave_1: entered allmulticast mode [ 76.517223][ T5624] bridge_slave_1: entered promiscuous mode [ 76.572460][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.593813][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.611006][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.622566][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.634484][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.663210][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.719613][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.727584][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.734910][ T5626] bridge_slave_0: entered allmulticast mode [ 76.741899][ T5626] bridge_slave_0: entered promiscuous mode [ 76.750892][ T5625] team0: Port device team_slave_0 added [ 76.768220][ T5623] team0: Port device team_slave_0 added [ 76.774572][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.781742][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.789139][ T5626] bridge_slave_1: entered allmulticast mode [ 76.796169][ T5626] bridge_slave_1: entered promiscuous mode [ 76.804652][ T50] Bluetooth: hci0: command tx timeout [ 76.807139][ T5625] team0: Port device team_slave_1 added [ 76.830762][ T5624] team0: Port device team_slave_0 added [ 76.838324][ T5623] team0: Port device team_slave_1 added [ 76.879348][ T5624] team0: Port device team_slave_1 added [ 76.885356][ T50] Bluetooth: hci2: command tx timeout [ 76.894079][ T50] Bluetooth: hci1: command tx timeout [ 76.894086][ T5635] Bluetooth: hci3: command tx timeout [ 76.916737][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.923799][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.950188][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.976563][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.983519][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.009859][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.023670][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.033406][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.040510][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.066632][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.087468][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.094515][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.121078][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.134668][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.151817][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.158963][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.185044][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.232650][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.239675][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.265916][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.289457][ T5626] team0: Port device team_slave_0 added [ 77.315780][ T5626] team0: Port device team_slave_1 added [ 77.360165][ T5625] hsr_slave_0: entered promiscuous mode [ 77.366635][ T5625] hsr_slave_1: entered promiscuous mode [ 77.396129][ T5623] hsr_slave_0: entered promiscuous mode [ 77.402537][ T5623] hsr_slave_1: entered promiscuous mode [ 77.408827][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 77.414742][ T5623] Cannot create hsr debugfs directory [ 77.421548][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.428524][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.454446][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.478224][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.485507][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.511473][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.527508][ T5624] hsr_slave_0: entered promiscuous mode [ 77.533726][ T5624] hsr_slave_1: entered promiscuous mode [ 77.539932][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 77.545792][ T5624] Cannot create hsr debugfs directory [ 77.674877][ T5626] hsr_slave_0: entered promiscuous mode [ 77.681649][ T5626] hsr_slave_1: entered promiscuous mode [ 77.688366][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 77.694325][ T5626] Cannot create hsr debugfs directory [ 78.047077][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.062612][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.071513][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.081628][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.090905][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.100735][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.108747][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.118692][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.198007][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.210204][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.218189][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.228650][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.237059][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.247895][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.256554][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.267705][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.360728][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.371447][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.384634][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.395842][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.412466][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.422967][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.430901][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.440598][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.517819][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.531698][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.541335][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.549540][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.559564][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.567655][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.578735][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.587407][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.597755][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.642388][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.673778][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.681246][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.722036][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.729172][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.819454][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.846341][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.878586][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.885504][ T50] Bluetooth: hci0: command tx timeout [ 78.906060][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.917456][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.948870][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.956101][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.964215][ T50] Bluetooth: hci1: command tx timeout [ 78.969648][ T50] Bluetooth: hci2: command tx timeout [ 78.975409][ T5635] Bluetooth: hci3: command tx timeout [ 78.987699][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.994897][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.022890][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.030026][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.051282][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.058478][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.074391][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.095884][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.103052][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.143315][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.150528][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.720520][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.910782][ T5625] veth0_vlan: entered promiscuous mode [ 79.954914][ T5625] veth1_vlan: entered promiscuous mode [ 80.029916][ T5625] veth0_macvtap: entered promiscuous mode [ 80.059873][ T5625] veth1_macvtap: entered promiscuous mode [ 80.110493][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.140513][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.183780][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.222279][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.232804][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.263200][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.308147][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.370576][ T5626] veth0_vlan: entered promiscuous mode [ 80.397448][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.431414][ T5626] veth1_vlan: entered promiscuous mode [ 80.449985][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.491005][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.507400][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.563179][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.572408][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.580107][ T5626] veth0_macvtap: entered promiscuous mode [ 80.613723][ T5626] veth1_macvtap: entered promiscuous mode [ 80.657201][ T5623] veth0_vlan: entered promiscuous mode [ 80.673586][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.673690][ T5624] veth0_vlan: entered promiscuous mode [ 80.729361][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.771587][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.781515][ T5623] veth1_vlan: entered promiscuous mode [ 80.800065][ T5624] veth1_vlan: entered promiscuous mode [ 80.819801][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.826105][ T5770] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.856614][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.867694][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.896258][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.964333][ T5635] Bluetooth: hci0: command tx timeout [ 81.035292][ T5624] veth0_macvtap: entered promiscuous mode [ 81.045511][ T5635] Bluetooth: hci3: command tx timeout [ 81.050973][ T50] Bluetooth: hci2: command tx timeout [ 81.056531][ T5627] Bluetooth: hci1: command tx timeout [ 81.078319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.090464][ T5623] veth0_macvtap: entered promiscuous mode [ 81.100375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.156010][ T5624] veth1_macvtap: entered promiscuous mode [ 81.185743][ T5623] veth1_macvtap: entered promiscuous mode [ 81.226663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.250829][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.293560][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.315316][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.341197][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.362176][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.401852][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.419627][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.435698][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.462151][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497118][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.530620][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.547914][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.580280][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622265][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.143622][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.168251][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.293669][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.319980][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.378014][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.391680][ T5786] random: crng reseeded on system resumption [ 82.399143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.557639][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.584770][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.044381][ T5635] Bluetooth: hci0: command tx timeout [ 83.125621][ T5635] Bluetooth: hci3: command tx timeout [ 83.131084][ T5627] Bluetooth: hci1: command tx timeout [ 83.136529][ T50] Bluetooth: hci2: command tx timeout [ 84.459419][ T5832] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.548018][ T5849] block2mtd: illegal erase size [ 85.585432][ T5850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.542619][ T5863] block2mtd: illegal erase size [ 86.688791][ T5860] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 86.731934][ T9] cfg80211: failed to load regulatory.db [ 88.572256][ T5893] smpboot: CPU 1 is now offline [ 88.581026][ T5894] FAULT_INJECTION: forcing a failure. [ 88.581026][ T5894] name failslab, interval 1, probability 0, space 0, times 1 [ 88.718258][ T5900] futex_wake_op: syz.2.24 tries to shift op by -2048; fix this program [ 88.867982][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 88.868006][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.868020][ T5894] Call Trace: [ 88.868025][ T5894] [ 88.868032][ T5894] dump_stack_lvl+0x100/0x190 [ 88.868057][ T5894] should_fail_ex.cold+0x5/0xa [ 88.868077][ T5894] ? nfc_llcp_build_tlv+0x105/0x250 [ 88.868095][ T5894] should_failslab+0xc2/0x120 [ 88.868112][ T5894] __kmalloc_noprof+0xe0/0x850 [ 88.868140][ T5894] nfc_llcp_build_tlv+0x105/0x250 [ 88.868156][ T5894] ? lockdep_hardirqs_on+0x78/0x100 [ 88.868176][ T5894] nfc_llcp_build_gb.isra.0+0x193/0x3f0 [ 88.868193][ T5894] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 88.868219][ T5894] ? lockdep_init_map_type+0x5c/0x250 [ 88.868234][ T5894] ? lockdep_init_map_type+0x5c/0x250 [ 88.868251][ T5894] nfc_llcp_register_device+0x600/0xa60 [ 88.868269][ T5894] nfc_register_device+0x6d/0x3e0 [ 88.868288][ T5894] nci_register_device+0x7f1/0xb80 [ 88.868312][ T5894] ? __pfx_nci_register_device+0x10/0x10 [ 88.868337][ T5894] ? lockdep_init_map_type+0x5c/0x250 [ 88.868354][ T5894] virtual_ncidev_open+0x141/0x220 [ 88.868377][ T5894] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 88.868398][ T5894] misc_open+0x26d/0x450 [ 88.868416][ T5894] ? __pfx_misc_open+0x10/0x10 [ 88.868432][ T5894] chrdev_open+0x234/0x6a0 [ 88.868451][ T5894] ? __pfx_chrdev_open+0x10/0x10 [ 88.868470][ T5894] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 88.868493][ T5894] do_dentry_open+0x6d8/0x1660 [ 88.868510][ T5894] ? __pfx_chrdev_open+0x10/0x10 [ 88.868532][ T5894] vfs_open+0x82/0x3f0 [ 88.868555][ T5894] path_openat+0x208c/0x31a0 [ 88.868579][ T5894] ? __pfx_path_openat+0x10/0x10 [ 88.868603][ T5894] do_file_open+0x20e/0x430 [ 88.868622][ T5894] ? __pfx_do_file_open+0x10/0x10 [ 88.868653][ T5894] ? alloc_fd+0x476/0x790 [ 88.868672][ T5894] ? do_getname+0x191/0x390 [ 88.868695][ T5894] do_sys_openat2+0x10d/0x1e0 [ 88.868716][ T5894] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.868738][ T5894] ? __fget_files+0x21f/0x3d0 [ 88.868759][ T5894] __x64_sys_openat+0x12d/0x210 [ 88.868781][ T5894] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.868806][ T5894] ? rcu_is_watching+0x12/0xc0 [ 88.868827][ T5894] do_syscall_64+0x10b/0xf80 [ 88.868844][ T5894] ? clear_bhb_loop+0x40/0x90 [ 88.868862][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.868877][ T5894] RIP: 0033:0x7fc989d9cdd9 [ 88.868891][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.868912][ T5894] RSP: 002b:00007fc98ace0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.868927][ T5894] RAX: ffffffffffffffda RBX: 00007fc98a016180 RCX: 00007fc989d9cdd9 [ 88.868937][ T5894] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 88.868947][ T5894] RBP: 00007fc989e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 88.868956][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.868965][ T5894] R13: 00007fc98a016218 R14: 00007fc98a016180 R15: 00007ffd0b6517a8 [ 88.868985][ T5894] [ 89.527251][ T5900] futex_wake_op: syz.2.24 tries to shift op by -2048; fix this program [ 90.082422][ T5885] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.309669][ T30] audit: type=1800 audit(1777583768.763:2): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="members" dev="configfs" ino=8006 res=0 errno=0 [ 94.083440][ T5937] random: crng reseeded on system resumption [ 94.242415][ T5937] process 'syz.3.33' launched ':,' with NULL argv: empty string added [ 96.955778][ T5969] capability: warning: `syz.0.40' uses 32-bit capabilities (legacy support in use) [ 97.168773][ T5973] random: crng reseeded on system resumption [ 97.598933][ T5979] block2mtd: illegal erase size [ 98.766164][ T5971] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.818966][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 102.495124][ T6017] random: crng reseeded on system resumption [ 103.044866][ T6023] block2mtd: illegal erase size [ 103.621192][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 104.423684][ T6041] FAULT_INJECTION: forcing a failure. [ 104.423684][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 104.546163][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 104.546188][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.546197][ T6041] Call Trace: [ 104.546203][ T6041] [ 104.546209][ T6041] dump_stack_lvl+0x100/0x190 [ 104.546232][ T6041] should_fail_ex.cold+0x5/0xa [ 104.546252][ T6041] should_failslab+0xc2/0x120 [ 104.546269][ T6041] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 104.546292][ T6041] ? skb_clone+0x190/0x400 [ 104.546311][ T6041] skb_clone+0x190/0x400 [ 104.546326][ T6041] netlink_deliver_tap+0xaed/0xcc0 [ 104.546348][ T6041] netlink_unicast+0x62b/0x850 [ 104.546369][ T6041] ? __pfx_netlink_unicast+0x10/0x10 [ 104.546393][ T6041] netlink_sendmsg+0x8b0/0xda0 [ 104.546415][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.546432][ T6041] ? __import_iovec+0x1d2/0x640 [ 104.546449][ T6041] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 104.546473][ T6041] ____sys_sendmsg+0x9e1/0xb70 [ 104.546491][ T6041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.546512][ T6041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.546541][ T6041] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.546564][ T6041] ___sys_sendmsg+0x190/0x1e0 [ 104.546586][ T6041] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.546628][ T6041] __sys_sendmsg+0x170/0x220 [ 104.546644][ T6041] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.546658][ T6041] ? __x64_sys_futex+0x34f/0x4d0 [ 104.546681][ T6041] ? rcu_is_watching+0x12/0xc0 [ 104.546701][ T6041] do_syscall_64+0x10b/0xf80 [ 104.546718][ T6041] ? clear_bhb_loop+0x40/0x90 [ 104.546736][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.546752][ T6041] RIP: 0033:0x7f457799cdd9 [ 104.546766][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.546779][ T6041] RSP: 002b:00007f45787e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.546794][ T6041] RAX: ffffffffffffffda RBX: 00007f4577c15fa0 RCX: 00007f457799cdd9 [ 104.546804][ T6041] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 104.546813][ T6041] RBP: 00007f4577a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 104.546822][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.546831][ T6041] R13: 00007f4577c16038 R14: 00007f4577c15fa0 R15: 00007ffedcdf0578 [ 104.546850][ T6041] [ 106.696000][ T6060] random: crng reseeded on system resumption [ 106.720121][ T6055] mmap: syz.2.57 (6055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.467193][ T6077] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 107.982183][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 108.181088][ T6052] Zero length message leads to an empty skb [ 108.480337][ T6089] netlink: Unknown NAT attribute (type=140, max=9) [ 109.324803][ T6105] block2mtd: illegal erase size [ 110.522952][ T6117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.71'. [ 110.854582][ T6124] ubi0: attaching mtd0 [ 110.899904][ T6124] ubi0: scanning is finished [ 110.935415][ T6124] ubi0: empty MTD device detected [ 111.579648][ T6124] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.744459][ T6124] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.890179][ T6124] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.043660][ T6124] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 112.206885][ T6124] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.379893][ T6124] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.559484][ T6124] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1458932271 [ 112.762371][ T6124] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.935042][ T6131] ubi0: background thread "ubi_bgt0d" started, PID 6131 [ 112.958470][ T6126] ubi0: detaching mtd0 [ 113.075506][ T6126] ubi0: mtd0 is detached [ 113.160694][ T30] audit: type=1800 audit(1777583790.613:3): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.74" name="file0" dev="tmpfs" ino=100 res=0 errno=0 [ 113.290628][ T6134] random: crng reseeded on system resumption [ 116.503053][ T6166] random: crng reseeded on system resumption [ 117.782604][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 118.893155][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 120.367420][ T6211] block2mtd: illegal erase size [ 121.689355][ T6219] random: crng reseeded on system resumption [ 122.563686][ T6229] random: crng reseeded on system resumption [ 125.126257][ T6245] syz.0.94 (6245) used greatest stack depth: 19720 bytes left [ 125.905078][ T6271] random: crng reseeded on system resumption [ 126.744658][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 127.161663][ T6291] block nbd0: NBD_DISCONNECT [ 128.439419][ T6313] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 129.050020][ T6323] block2mtd: illegal erase size [ 131.144100][ T6339] netlink: 10 bytes leftover after parsing attributes in process `syz.2.112'. [ 131.656812][ T30] audit: type=1800 audit(1843104533.900:4): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.113" name="file0" dev="tmpfs" ino=142 res=0 errno=0 [ 132.809792][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818304][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.855705][ T6349] random: crng reseeded on system resumption [ 133.265248][ T6356] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 134.599943][ T6372] can: request_module (can-proto-0) failed. [ 135.124074][ T6378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.123'. [ 137.213064][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 137.313438][ T6414] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 138.225109][ T6422] random: crng reseeded on system resumption [ 138.369898][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 140.359539][ T6466] random: crng reseeded on system resumption [ 141.154124][ T6480] random: crng reseeded on system resumption [ 141.765475][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 142.202745][ T6493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 144.265143][ T30] audit: type=1800 audit(1843104546.510:5): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="file0" dev="tmpfs" ino=196 res=0 errno=0 [ 145.621868][ T6541] random: crng reseeded on system resumption [ 146.947591][ T6559] random: crng reseeded on system resumption [ 147.041996][ T6563] netlink: 10 bytes leftover after parsing attributes in process `syz.3.160'. [ 148.115487][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 150.159178][ T6604] netlink: 342 bytes leftover after parsing attributes in process `syz.0.170'. [ 151.477342][ T6617] random: crng reseeded on system resumption [ 151.503282][ T6630] Unable to find swap-space signature [ 152.154042][ T30] audit: type=1800 audit(1843104554.400:6): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.176" name="file0" dev="tmpfs" ino=304 res=0 errno=0 [ 152.396537][ T6648] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd1f [ 153.571507][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 154.734908][ T6691] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 155.630388][ T6713] FAULT_INJECTION: forcing a failure. [ 155.630388][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 155.706428][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 155.706451][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.706460][ T6713] Call Trace: [ 155.706465][ T6713] [ 155.706471][ T6713] dump_stack_lvl+0x100/0x190 [ 155.706503][ T6713] should_fail_ex.cold+0x5/0xa [ 155.706523][ T6713] ? lsm_blob_alloc+0x68/0x90 [ 155.706541][ T6713] should_failslab+0xc2/0x120 [ 155.706558][ T6713] __kmalloc_noprof+0xe0/0x850 [ 155.706581][ T6713] ? trace_kmem_cache_alloc+0xd5/0x100 [ 155.706601][ T6713] lsm_blob_alloc+0x68/0x90 [ 155.706620][ T6713] security_prepare_creds+0x2d/0x290 [ 155.706638][ T6713] prepare_creds+0x5d6/0x950 [ 155.706656][ T6713] lookup_user_key+0xfb2/0x1300 [ 155.706672][ T6713] ? __pfx_lookup_user_key+0x10/0x10 [ 155.706688][ T6713] ? do_raw_spin_lock+0x128/0x260 [ 155.706707][ T6713] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 155.706734][ T6713] ? _raw_spin_unlock_irq+0x2e/0x50 [ 155.706749][ T6713] ? do_sigaltstack.constprop.0+0x4c0/0x670 [ 155.706783][ T6713] keyctl_restrict_keyring+0x99/0x250 [ 155.706806][ T6713] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 155.706830][ T6713] ? ksys_write+0x1ac/0x250 [ 155.706851][ T6713] __do_sys_keyctl+0x2e8/0x5a0 [ 155.706875][ T6713] do_syscall_64+0x10b/0xf80 [ 155.706891][ T6713] ? clear_bhb_loop+0x40/0x90 [ 155.706909][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.706924][ T6713] RIP: 0033:0x7fc989d9cdd9 [ 155.706940][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.706958][ T6713] RSP: 002b:00007fc98ad22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 155.706973][ T6713] RAX: ffffffffffffffda RBX: 00007fc98a015fa0 RCX: 00007fc989d9cdd9 [ 155.706983][ T6713] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 155.706993][ T6713] RBP: 00007fc989e32d69 R08: fffffffffffffffd R09: 0000000000000000 [ 155.707003][ T6713] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 155.707011][ T6713] R13: 00007fc98a016038 R14: 00007fc98a015fa0 R15: 00007ffd0b6517a8 [ 155.707030][ T6713] [ 156.222569][ T6713] i2c i2c-0: new_device: Can't parse I2C address [ 157.541788][ T6739] netlink: 334 bytes leftover after parsing attributes in process `syz.3.199'. [ 157.912160][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 158.540908][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 158.579279][ T6758] netlink: 13 bytes leftover after parsing attributes in process `syz.3.203'. [ 161.122107][ T6809] binder: 6808:6809 ioctl c0306201 200000001100 returned -14 [ 161.353216][ T6811] binder: 6810:6811 ioctl c0306201 200000001100 returned -14 [ 161.402446][ T6807] netlink: 10 bytes leftover after parsing attributes in process `syz.2.215'. [ 161.751941][ T6824] random: crng reseeded on system resumption [ 162.240182][ T6830] random: crng reseeded on system resumption [ 162.925013][ T6856] block2mtd: illegal erase size [ 163.687431][ T6871] random: crng reseeded on system resumption [ 163.713892][ T30] audit: type=1800 audit(1843104565.940:7): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.227" name="file0" dev="tmpfs" ino=241 res=0 errno=0 [ 164.105437][ T6881] FAULT_INJECTION: forcing a failure. [ 164.105437][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 164.171620][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.3.232 Not tainted syzkaller #0 PREEMPT(full) [ 164.171641][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.171650][ T6881] Call Trace: [ 164.171655][ T6881] [ 164.171661][ T6881] dump_stack_lvl+0x100/0x190 [ 164.171682][ T6881] should_fail_ex.cold+0x5/0xa [ 164.171702][ T6881] should_failslab+0xc2/0x120 [ 164.171720][ T6881] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 164.171743][ T6881] ? do_getname+0x35/0x390 [ 164.171767][ T6881] do_getname+0x35/0x390 [ 164.171789][ T6881] do_utimes_path+0xc9/0x1b0 [ 164.171811][ T6881] ? __pfx_do_utimes_path+0x10/0x10 [ 164.171832][ T6881] ? __fget_files+0x21f/0x3d0 [ 164.171851][ T6881] __x64_sys_utime+0x17d/0x1f0 [ 164.171873][ T6881] ? __pfx___x64_sys_utime+0x10/0x10 [ 164.171894][ T6881] ? ksys_write+0x1ac/0x250 [ 164.171912][ T6881] ? rcu_is_watching+0x12/0xc0 [ 164.171932][ T6881] do_syscall_64+0x10b/0xf80 [ 164.171950][ T6881] ? clear_bhb_loop+0x40/0x90 [ 164.171968][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.171989][ T6881] RIP: 0033:0x7f457799cdd9 [ 164.172001][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.172015][ T6881] RSP: 002b:00007f45787e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 164.172029][ T6881] RAX: ffffffffffffffda RBX: 00007f4577c15fa0 RCX: 00007f457799cdd9 [ 164.172039][ T6881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 164.172047][ T6881] RBP: 00007f45787e1090 R08: 0000000000000000 R09: 0000000000000000 [ 164.172056][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.172064][ T6881] R13: 00007f4577c16038 R14: 00007f4577c15fa0 R15: 00007ffedcdf0578 [ 164.172082][ T6881] [ 165.429058][ T6903] block2mtd: illegal erase size [ 167.735272][ T6944] block2mtd: illegal erase size [ 168.114998][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 170.472283][ T6986] random: crng reseeded on system resumption [ 171.603935][ T7013] block2mtd: illegal erase size [ 172.923567][ T30] audit: type=1800 audit(1843104575.160:8): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.262" name="file0" dev="tmpfs" ino=277 res=0 errno=0 [ 173.758777][ T7033] random: crng reseeded on system resumption [ 175.234682][ T30] audit: type=1800 audit(1843104577.480:9): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.264" name="file0" dev="tmpfs" ino=373 res=0 errno=0 [ 175.338640][ T7056] block2mtd: illegal erase size [ 178.073499][ T30] audit: type=1800 audit(1843104580.310:10): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.273" name="file0" dev="tmpfs" ino=372 res=0 errno=0 [ 178.151245][ T7083] random: crng reseeded on system resumption [ 179.638744][ T7094] random: crng reseeded on system resumption [ 181.287878][ T7114] FAULT_INJECTION: forcing a failure. [ 181.287878][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.470155][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) [ 181.470180][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.470192][ T7114] Call Trace: [ 181.470197][ T7114] [ 181.470203][ T7114] dump_stack_lvl+0x100/0x190 [ 181.470224][ T7114] should_fail_ex.cold+0x5/0xa [ 181.470244][ T7114] _copy_to_user+0x32/0xd0 [ 181.470269][ T7114] simple_read_from_buffer+0xcb/0x170 [ 181.470288][ T7114] proc_fail_nth_read+0x1af/0x230 [ 181.470311][ T7114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.470335][ T7114] ? rw_verify_area+0xce/0x6d0 [ 181.470350][ T7114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.470372][ T7114] vfs_read+0x1e4/0xb30 [ 181.470390][ T7114] ? __pfx_vfs_read+0x10/0x10 [ 181.470405][ T7114] ? __fget_files+0x215/0x3d0 [ 181.470426][ T7114] ? __fget_files+0x21f/0x3d0 [ 181.470452][ T7114] ksys_read+0x12a/0x250 [ 181.470471][ T7114] ? __pfx_ksys_read+0x10/0x10 [ 181.470493][ T7114] ? rcu_is_watching+0x12/0xc0 [ 181.470514][ T7114] do_syscall_64+0x10b/0xf80 [ 181.470532][ T7114] ? clear_bhb_loop+0x40/0x90 [ 181.470550][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.470566][ T7114] RIP: 0033:0x7fc989d5d60e [ 181.470578][ T7114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.470592][ T7114] RSP: 002b:00007fc98ad21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.470610][ T7114] RAX: ffffffffffffffda RBX: 00007fc98ad226c0 RCX: 00007fc989d5d60e [ 181.470619][ T7114] RDX: 000000000000000f RSI: 00007fc98ad220a0 RDI: 0000000000000003 [ 181.470628][ T7114] RBP: 00007fc98ad22090 R08: 0000000000000000 R09: 0000000000000000 [ 181.470636][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.470645][ T7114] R13: 00007fc98a016038 R14: 00007fc98a015fa0 R15: 00007ffd0b6517a8 [ 181.470663][ T7114] [ 183.476258][ T7136] netlink: 334 bytes leftover after parsing attributes in process `syz.1.285'. [ 183.516418][ T7136] netlink: 334 bytes leftover after parsing attributes in process `syz.1.285'. [ 184.368562][ T7144] random: crng reseeded on system resumption [ 185.398231][ T7162] random: crng reseeded on system resumption [ 186.009535][ T7171] random: crng reseeded on system resumption [ 186.498578][ T7180] unsupported nla_type 113 [ 187.961984][ T7200] block2mtd: illegal erase size [ 189.509166][ T7209] random: crng reseeded on system resumption [ 193.125589][ T7247] Process accounting resumed [ 193.179900][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 193.187452][ T50] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 193.212219][ T7255] FAULT_INJECTION: forcing a failure. [ 193.212219][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 193.302607][ T7252] misc userio: Invalid payload size [ 193.589529][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT(full) [ 193.589550][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.589559][ T7255] Call Trace: [ 193.589564][ T7255] [ 193.589570][ T7255] dump_stack_lvl+0x100/0x190 [ 193.589590][ T7255] should_fail_ex.cold+0x5/0xa [ 193.589610][ T7255] should_failslab+0xc2/0x120 [ 193.589627][ T7255] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 193.589650][ T7255] ? do_getname+0x35/0x390 [ 193.589673][ T7255] ? find_held_lock+0x2b/0x80 [ 193.589691][ T7255] ? ksys_write+0x190/0x250 [ 193.589710][ T7255] do_getname+0x35/0x390 [ 193.589732][ T7255] do_sys_openat2+0xc5/0x1e0 [ 193.589754][ T7255] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.589775][ T7255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.589797][ T7255] ? __fget_files+0x21f/0x3d0 [ 193.589817][ T7255] __x64_sys_openat+0x12d/0x210 [ 193.589839][ T7255] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.589860][ T7255] ? ksys_write+0x1ac/0x250 [ 193.589879][ T7255] ? rcu_is_watching+0x12/0xc0 [ 193.589898][ T7255] do_syscall_64+0x10b/0xf80 [ 193.589915][ T7255] ? clear_bhb_loop+0x40/0x90 [ 193.589933][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.589948][ T7255] RIP: 0033:0x7f457799cdd9 [ 193.589961][ T7255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.589974][ T7255] RSP: 002b:00007f45787e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.589989][ T7255] RAX: ffffffffffffffda RBX: 00007f4577c15fa0 RCX: 00007f457799cdd9 [ 193.589998][ T7255] RDX: 00000000000c0000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 193.590007][ T7255] RBP: 00007f45787e1090 R08: 0000000000000000 R09: 0000000000000000 [ 193.590015][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.590024][ T7255] R13: 00007f4577c16038 R14: 00007f4577c15fa0 R15: 00007ffedcdf0578 [ 193.590042][ T7255] [ 193.798318][ T7259] Process accounting resumed [ 194.264640][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270995][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.387596][ T7285] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 196.170246][ T7301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.322'. [ 196.251231][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 196.333162][ T7306] netlink: 354 bytes leftover after parsing attributes in process `syz.1.325'. [ 196.469766][ T7301] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 196.718511][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 196.824002][ T7312] random: crng reseeded on system resumption [ 199.989186][ T7317] ima: policy update failed [ 200.131568][ T30] audit: type=1802 audit(1843104602.370:11): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.328" res=0 errno=0 [ 201.449151][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 201.455294][ T4942] Bluetooth: hci3: command 0x0406 tx timeout [ 201.461298][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 201.467375][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 201.781090][ T7394] random: crng reseeded on system resumption [ 202.386115][ T7401] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 202.690911][ T7401] CIFS mount error: No usable UNC path provided in device string! [ 202.690911][ T7401] [ 202.801400][ T7401] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 202.909076][ T7417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 203.365741][ T7424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.610419][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 203.818719][ T30] audit: type=1804 audit(1843104606.060:12): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.355" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=1050 res=1 errno=0 [ 205.288715][ T7456] random: crng reseeded on system resumption [ 206.912975][ T7477] random: crng reseeded on system resumption [ 207.488411][ T7481] hub 1-0:1.0: USB hub found [ 207.514286][ T7481] hub 1-0:1.0: 1 port detected [ 208.060737][ T7500] ================================================================== [ 208.068824][ T7500] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 208.076797][ T7500] Read of size 8 at addr ffff8880226e3800 by task syz.2.366/7500 [ 208.084491][ T7500] [ 208.086807][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.2.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.086827][ T7500] Tainted: [L]=SOFTLOCKUP [ 208.086833][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.086841][ T7500] Call Trace: [ 208.086847][ T7500] [ 208.086852][ T7500] dump_stack_lvl+0x100/0x190 [ 208.086869][ T7500] print_report+0x13d/0x4b0 [ 208.086891][ T7500] ? __virt_addr_valid+0x239/0x430 [ 208.086916][ T7500] ? cache_seq_start_rcu+0x3fe/0x420 [ 208.086934][ T7500] kasan_report+0xdf/0x1d0 [ 208.086955][ T7500] ? cache_seq_start_rcu+0x3fe/0x420 [ 208.086976][ T7500] cache_seq_start_rcu+0x3fe/0x420 [ 208.086997][ T7500] seq_read_iter+0x2c1/0x1270 [ 208.087016][ T7500] seq_read+0x33b/0x4c0 [ 208.087031][ T7500] ? __pfx_seq_read+0x10/0x10 [ 208.087047][ T7500] ? lock_acquire+0x1b1/0x370 [ 208.087063][ T7500] ? __pfx_seq_read+0x10/0x10 [ 208.087077][ T7500] proc_reg_read+0x240/0x330 [ 208.087093][ T7500] ? __pfx_proc_reg_read+0x10/0x10 [ 208.087109][ T7500] vfs_read+0x1e4/0xb30 [ 208.087125][ T7500] ? __pfx_vfs_read+0x10/0x10 [ 208.087140][ T7500] ? __fget_files+0x215/0x3d0 [ 208.087158][ T7500] ? __fget_files+0x21f/0x3d0 [ 208.087175][ T7500] ksys_read+0x12a/0x250 [ 208.087190][ T7500] ? __pfx_ksys_read+0x10/0x10 [ 208.087206][ T7500] ? rcu_is_watching+0x12/0xc0 [ 208.087224][ T7500] do_syscall_64+0x10b/0xf80 [ 208.087241][ T7500] ? clear_bhb_loop+0x40/0x90 [ 208.087260][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.087275][ T7500] RIP: 0033:0x7fc989d9cdd9 [ 208.087287][ T7500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.087301][ T7500] RSP: 002b:00007fc98ad01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.087315][ T7500] RAX: ffffffffffffffda RBX: 00007fc98a016090 RCX: 00007fc989d9cdd9 [ 208.087325][ T7500] RDX: 000000000000067b RSI: 0000200000000440 RDI: 0000000000000003 [ 208.087333][ T7500] RBP: 00007fc989e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 208.087342][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.087351][ T7500] R13: 00007fc98a016128 R14: 00007fc98a016090 R15: 00007ffd0b6517a8 [ 208.087364][ T7500] [ 208.087369][ T7500] [ 208.309714][ T7500] Allocated by task 5624: [ 208.314030][ T7500] kasan_save_stack+0x30/0x50 [ 208.318693][ T7500] kasan_save_track+0x14/0x30 [ 208.323349][ T7500] __kasan_kmalloc+0xaa/0xb0 [ 208.327922][ T7500] __kmalloc_noprof+0x301/0x850 [ 208.332760][ T7500] cache_create_net+0xa2/0x1f0 [ 208.337525][ T7500] nfsd_idmap_init+0x62/0x250 [ 208.342186][ T7500] nfsd_net_init+0x85/0x3e0 [ 208.346678][ T7500] ops_init+0x1e2/0x5f0 [ 208.350836][ T7500] setup_net+0x118/0x3a0 [ 208.355058][ T7500] copy_net_ns+0x46f/0x7c0 [ 208.359455][ T7500] create_new_namespaces+0x3ea/0xac0 [ 208.364722][ T7500] unshare_nsproxy_namespaces+0xf2/0x220 [ 208.370343][ T7500] ksys_unshare+0x438/0xab0 [ 208.374839][ T7500] __x64_sys_unshare+0x31/0x40 [ 208.379618][ T7500] do_syscall_64+0x10b/0xf80 [ 208.384198][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.390079][ T7500] [ 208.392389][ T7500] The buggy address belongs to the object at ffff8880226e3000 [ 208.392389][ T7500] which belongs to the cache kmalloc-2k of size 2048 [ 208.406421][ T7500] The buggy address is located 0 bytes to the right of [ 208.406421][ T7500] allocated 2048-byte region [ffff8880226e3000, ffff8880226e3800) [ 208.420980][ T7500] [ 208.423299][ T7500] The buggy address belongs to the physical page: [ 208.429700][ T7500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x226e0 [ 208.438447][ T7500] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 208.446927][ T7500] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 208.454462][ T7500] page_type: f5(slab) [ 208.458427][ T7500] raw: 00fff00000000040 ffff88813fe2e000 dead000000000100 dead000000000122 [ 208.467003][ T7500] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 208.475568][ T7500] head: 00fff00000000040 ffff88813fe2e000 dead000000000100 dead000000000122 [ 208.484217][ T7500] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 208.492868][ T7500] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 208.501543][ T7500] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 208.510191][ T7500] page dumped because: kasan: bad access detected [ 208.516587][ T7500] page_owner tracks the page as allocated [ 208.522275][ T7500] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3133554439, free_ts 0 [ 208.541875][ T7500] post_alloc_hook+0x153/0x170 [ 208.546636][ T7500] get_page_from_freelist+0x11a6/0x33b0 [ 208.552169][ T7500] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 208.558048][ T7500] new_slab+0xa6/0x6c0 [ 208.562104][ T7500] refill_objects+0x277/0x420 [ 208.566786][ T7500] __pcs_replace_empty_main+0x375/0x650 [ 208.572321][ T7500] __kmalloc_cache_noprof+0x493/0x6f0 [ 208.577683][ T7500] acpi_ds_create_walk_state+0x95/0x300 [ 208.583213][ T7500] acpi_ps_execute_method+0x2c1/0xe90 [ 208.588566][ T7500] acpi_ns_evaluate+0x640/0x1670 [ 208.593488][ T7500] acpi_ut_evaluate_object+0xf7/0x610 [ 208.598845][ T7500] acpi_rs_get_method_data+0xa1/0x160 [ 208.604201][ T7500] acpi_walk_resources+0x178/0x270 [ 208.609297][ T7500] acpi_mipi_check_crs_csi2+0xa4/0x3c0 [ 208.614739][ T7500] acpi_bus_check_add+0x6e9/0x920 [ 208.619765][ T7500] acpi_ns_walk_namespace+0x4cc/0x760 [ 208.625132][ T7500] page_owner free stack trace missing [ 208.630474][ T7500] [ 208.632781][ T7500] Memory state around the buggy address: [ 208.638387][ T7500] ffff8880226e3700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.646429][ T7500] ffff8880226e3780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 208.654468][ T7500] >ffff8880226e3800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.662504][ T7500] ^ [ 208.666546][ T7500] ffff8880226e3880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.674582][ T7500] ffff8880226e3900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.682618][ T7500] ================================================================== [ 210.041487][ T7500] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.048704][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.2.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.059475][ T7500] Tainted: [L]=SOFTLOCKUP [ 210.063786][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.073823][ T7500] Call Trace: [ 210.077101][ T7500] [ 210.080014][ T7500] dump_stack_lvl+0x100/0x190 [ 210.084677][ T7500] vpanic+0x552/0x970 [ 210.088640][ T7500] ? __pfx_vpanic+0x10/0x10 [ 210.093123][ T7500] ? cache_seq_start_rcu+0x3fe/0x420 [ 210.098396][ T7500] panic+0xd1/0xe0 [ 210.102097][ T7500] ? __pfx_panic+0x10/0x10 [ 210.106494][ T7500] ? cache_seq_start_rcu+0x3fe/0x420 [ 210.111769][ T7500] ? preempt_schedule_common+0x42/0xc0 [ 210.117221][ T7500] ? check_panic_on_warn+0x1f/0x90 [ 210.122315][ T7500] check_panic_on_warn.cold+0x19/0x34 [ 210.127669][ T7500] end_report.part.0+0x3a/0x90 [ 210.132420][ T7500] kasan_report.cold+0xe/0x18 [ 210.137084][ T7500] ? cache_seq_start_rcu+0x3fe/0x420 [ 210.142357][ T7500] cache_seq_start_rcu+0x3fe/0x420 [ 210.147456][ T7500] seq_read_iter+0x2c1/0x1270 [ 210.152121][ T7500] seq_read+0x33b/0x4c0 [ 210.156258][ T7500] ? __pfx_seq_read+0x10/0x10 [ 210.160920][ T7500] ? lock_acquire+0x1b1/0x370 [ 210.165584][ T7500] ? __pfx_seq_read+0x10/0x10 [ 210.170244][ T7500] proc_reg_read+0x240/0x330 [ 210.174816][ T7500] ? __pfx_proc_reg_read+0x10/0x10 [ 210.179915][ T7500] vfs_read+0x1e4/0xb30 [ 210.184057][ T7500] ? __pfx_vfs_read+0x10/0x10 [ 210.188716][ T7500] ? __fget_files+0x215/0x3d0 [ 210.193385][ T7500] ? __fget_files+0x21f/0x3d0 [ 210.198045][ T7500] ksys_read+0x12a/0x250 [ 210.202269][ T7500] ? __pfx_ksys_read+0x10/0x10 [ 210.207019][ T7500] ? rcu_is_watching+0x12/0xc0 [ 210.211769][ T7500] do_syscall_64+0x10b/0xf80 [ 210.216343][ T7500] ? clear_bhb_loop+0x40/0x90 [ 210.221005][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.226878][ T7500] RIP: 0033:0x7fc989d9cdd9 [ 210.231276][ T7500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.250863][ T7500] RSP: 002b:00007fc98ad01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.259274][ T7500] RAX: ffffffffffffffda RBX: 00007fc98a016090 RCX: 00007fc989d9cdd9 [ 210.267229][ T7500] RDX: 000000000000067b RSI: 0000200000000440 RDI: 0000000000000003 [ 210.275180][ T7500] RBP: 00007fc989e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 210.283130][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.291079][ T7500] R13: 00007fc98a016128 R14: 00007fc98a016090 R15: 00007ffd0b6517a8 [ 210.299035][ T7500] [ 210.302107][ T7500] Kernel Offset: disabled [ 210.306418][ T7500] Rebooting in 86400 seconds..