last executing test programs: 27.719054146s ago: executing program 0 (id=364): mmap$auto(0xa9a, 0x804020009, 0xdf, 0xeb3, 0xffffffffffffffff, 0x0) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) mmap$auto(0x6, 0xffffffffffffffff, 0x2, 0x13, r0, 0x4) write$auto(r0, &(0x7f0000000080)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0xc49) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) getsockopt$auto(r0, 0x1, 0x6, &(0x7f00000000c0)='),^\x00', &(0x7f0000000100)=0xffff) r1 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap$auto(0x0, 0x5, 0x1000000df, 0xd16, r1, 0x8000) socket(0xb, 0x0, 0xb) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x20201, 0x0) memfd_secret$auto(0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x888083, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x3, "50592cd57400000000000100"}, 0x6a) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1c/sub0/status\x00', 0x80, 0x0) 24.702781624s ago: executing program 0 (id=365): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) 19.497453593s ago: executing program 0 (id=373): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 13.572594369s ago: executing program 0 (id=380): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 13.171360917s ago: executing program 1 (id=381): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 10.627058375s ago: executing program 1 (id=382): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 9.144406814s ago: executing program 0 (id=384): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 7.884789584s ago: executing program 1 (id=387): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyxd\x00', 0x102, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r1 = socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfdef) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002380)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002340)={&(0x7f00000011c0)={0x1174, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @uid}]}, @NL80211_ATTR_PMKID={0x1004, 0x55, "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"}, @NL80211_ATTR_MLD_ADDR={0x73, 0x13a, "57b0ce3e2820c4c768d8cf8e9c56f93958a2760d5a4c06cbd4e965500989b74f0848452549e828b8355086476a26eeaef0d36852d8095cb1885b667c452290f7901d1da4142e7aad7f31962a2dad0f7bc31c9335e972973fbdd1c9fdeb1f19e0c3ac05102d9b252c918080d51792e6"}, @NL80211_ATTR_FRAME={0x5d, 0x33, "867dfdda80cc483c79d14ebd2054bc65554a236c737bd1924a5e1f55c0ed03ee853214990927adeea00a8da48691624224ed07e1954304b0396e28bdca1bef8d13f1326e00fb66bf2d9a9f1da0588888d0672cc123f4b8febd"}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x6e, 0x115, "72a9d9ed1adf640fc912cca93ad07bd574c6efdba30de7fdc07eb2536d2e402e7c29243ebbba660a85470a7a01b1263638875acabeebf5a9b16273d51cbbc8744ba69b870d3f99cd8c5b13fd3e7226d13638daa9bfc4281a64414aa07df0c44a712e531d13b9caa5619e"}]}, 0x1174}, 0x1, 0x0, 0x0, 0x8090}, 0x20000000) setsockopt$auto_SO_TIMESTAMPING_OLD(r1, 0x6, 0x17, &(0x7f0000000040)='(\x00', 0x7) r3 = epoll_create$auto(0x2) epoll_pwait$auto(r3, 0x0, 0x6, 0xfffffffe, &(0x7f00000000c0)={0x800}, 0x8) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000140)={@raw=0x68a, "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"}) ioctl$auto(r0, 0x5606, r0) 6.762894566s ago: executing program 3 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x3) pwrite64$auto(0xc8, 0x0, 0x28, 0x100000000) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003ce1fd8aec20716259c33bc914b7038d83a0cc7f72dd349a6c278e328f81e0e9eea879a24a7dffdf2287ebfed0a3cbc1a3ec25dfdf9677583a43b3f7cd04a4cd628b7bc85ee538890e115039e23220dcc43ac15e53d62c38726c5fd05efff03a8c42207af8c0a1bef6060000b9912a4b20e805df50cd40edc8269c1eb30340c58686ac7a12ac93bf13ecb81c6597280a3c0504156dcb9edbcfe3249975921d705e2d82abcc1eb21cebfc23c852b1d1e7a109002d72f2b0f11844aac341bc5426a68b53a6cdb8f1503034000000000000", @ANYRES16=r2, @ANYBLOB="e3b72bbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008841}, 0x48000) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000014c0), r0) close_range$auto(0x2, 0x8, 0x0) r3 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0xffffffff, &(0x7f00000002c0)={{0x6, 0x1000}, {0x6, 0x24d4}, 0x7, 0x6, 0x6, 0x7, 0xff, 0xfffffffffffffeff, 0x80, 0xfff, 0x8, 0x8, 0x9c1, 0x5, 0x2, 0x7fffffffffffffff}) r4 = prctl$auto(0xffffff00, 0x0, r3, 0x0, 0x9) ioctl$auto(r4, 0x541b, 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(r4, 0xc0401273, &(0x7f0000000140)={"ce0ba8e95139e253b3ada9826809639252df4e5e86a0716bd88dbf25e7d9499d", 0x2, 0x1b, 0x6de7, 0x8, 0x0, 0x0}) r6 = getsid$auto(0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x90, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x1040) rt_tgsigqueueinfo$auto(r5, r6, 0x2, &(0x7f00000001c0)={@_si_pad}) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) preadv2$auto(r9, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r10 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/pcmC1D1p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE(r10, 0x4140, 0x0) mmap$auto(0x0, 0x6, 0xffe, 0x8000000008011, 0x3, 0x0) r11 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r11, 0xc0686611, &(0x7f0000000080)={0x68, 0x4, 0xd, 0x4, 0x80000000009, 0x7fb4, 0x9, 0x5, 0x200000000003, 0x416c7c0c, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) getpgrp(0xffffffffffffffff) 6.302435962s ago: executing program 1 (id=391): socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x2c0, 0x0) setitimer$auto(0x5, &(0x7f0000000040)={{0x1b8, 0x4}, {0x8, 0x8000000000000000}}, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0x998, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81}) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0x4, 0xfffffffe, 0xcb, 0x0, 0x800049) r1 = socket(0x2, 0x2, 0x0) bind$auto(r1, 0x0, 0x6a) ioctl$auto_XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000080)={{[0x2, 0xa96f, 0x5, 0x101]}, 0x4, 0x2, 0xa7d, 0x0, 0xa}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) memfd_create$auto(&(0x7f0000000000)='\x00', 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) 5.284902598s ago: executing program 3 (id=392): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x6f) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) 4.96122361s ago: executing program 1 (id=393): write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd7\x00', 0x14ba03, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="e6efb6"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x89f1, 0x24) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0xf6, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) lstat$auto(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)={0x3, 0x200, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x7, 0xd3, 0xa5, 0x100, 0x4, 0x707b, 0x0, 0x5, 0x1}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x2) unshare$auto(0x40000080) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.95367022s ago: executing program 3 (id=394): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0xf, 0x4) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x20301, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1000, 0x6, 0xa2) socket(0x2, 0x801, 0x6) madvise$auto(0x2, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xff, 0xffffffffffffffff, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x2, 0x0) mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0xb3) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb4, r2, 0x2) close_range$auto(0x2, 0xa, 0x0) 4.571878302s ago: executing program 2 (id=395): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x100000001) close_range$auto(r0, r0, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)="051d3ea2d06e5ae4c28f17640781f9c6142a37f16da681ac03e47d29f125040ecc66e3f78b7328c05a6bb2e7b4fa0a0de2815d4b50a37b4d36824348a7950baa1277fab3443a97ee77719fec438845ccc85c454280c2db05c5a8fbaa3f8ab339a7ca6fb692f5df917958df87e12076d94714b5127de84e4d19a155141fbe15179362e0304b1ca6e238c1e3740655d22f927c6556c04ce038825d66c445266c0abe6833aa8c7b28d2e6a4b7f58c7fabc541a43abf6244a2a9236a889b10200f561b874519c2", 0xfc2}, 0x402, &(0x7f00000001c0), 0x6, 0xa509}, 0x800}, 0x7, 0x4008) ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0xc, r0}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x8, 0x8, 0xdf, 0x9b72, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29b, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x200007, 0x8) 3.764049632s ago: executing program 2 (id=396): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x17, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, 0x9) sysfs$auto(0x2, 0x40, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="28030bb66cd1fce1a03b095e2b68646a75b147146de2fa7c03d44fac9c45f431b1fa250213834fd327b049b878c84d324a8e418cc23a39b161a575bf1f1155826e1fc2df4764e5d85d75a48fd5279da50c7f3136473490cd0855cb36459773dc78d8192ac2ea1428ab56a55ef079e2becfee7f9c08db654fdf13744926a8ac94106e6dc13055b98bbb5396dca234bbb0f8dbfd5505bff5eaacc15e870ce8492ae24ed46c5e8f79c07f80f3d14fb9edb9358ec236c6e84836088bc2610b", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b49, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xffff) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye0\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000200)) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket(0x1d, 0x3, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x1, 0x5, 0x84) 3.64921572s ago: executing program 3 (id=397): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x101080, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) epoll_ctl$auto(0xffffffffffffffff, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40006) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2ac842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r1) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x1c, r2, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) 3.2703767s ago: executing program 0 (id=398): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x15, 0x19, 0x0, 0x1, [@generic="8196fda546881836864818a6c3179f71e6"]}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x101}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x40) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) write$auto(r6, &(0x7f0000000180)='erspan0\x00', 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) setsockopt$auto(r7, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r8, r8, 0x0, 0x3) unshare$auto(0x2000000000000003) 2.408298671s ago: executing program 3 (id=399): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) munmap$auto(0x0, 0xffffffff) 2.104185444s ago: executing program 1 (id=400): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) 2.103978324s ago: executing program 2 (id=401): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0) read$auto_short_retry_limit_ops_(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x202, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, 0x0, 0x3, 0x100) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) r2 = fcntl$getown(r1, 0x9) waitid$auto_P_PGID(0x2, r2, &(0x7f0000000140)={@_si_pad}, 0x2, 0x0) personality$auto(0x40004010410ffc) r3 = epoll_create$auto(0x20009) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r4, 0x0) 1.772028284s ago: executing program 2 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000680)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4002) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) 1.470750758s ago: executing program 2 (id=403): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) (async) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x100) (async) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e21, @loopback}, 0x1) shmctl$auto_IPC_INFO(0x1, 0x3, 0x0) (async) shmctl$auto_IPC_INFO(0x1, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) madvise$auto(0x108000, 0x2, 0xa) (async) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x490441, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000140)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch5\x00', 0x0, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-touch5\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000010c0)=""/22, 0x16) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r4, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x101, 0x2, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$auto(r5, 0xa, r5) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x7, 0x0, [{0x8f, 0x1, 0x7}]}) 16.951449ms ago: executing program 2 (id=404): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2, 0x200800, 0xffffffff, 0x7}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) ioctl$auto(r1, 0x5603, r2) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 0s ago: executing program 3 (id=405): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r0, 0x0, 0xf42c, 0x38) (async) pread64$auto(r0, 0x0, 0xf42c, 0x38) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 93.408362][ T5611] cgroup: Unknown subsys name 'net' [ 93.522226][ T5611] cgroup: Unknown subsys name 'cpuset' [ 93.534167][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.344688][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.300921][ T24] cfg80211: failed to load regulatory.db [ 97.733549][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.742177][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.756254][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.769074][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.777196][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.787760][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.798884][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.808386][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.816436][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.820343][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.835943][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.845243][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.852435][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.854372][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.869048][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.872639][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.878997][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.888527][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.901071][ T4941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.910530][ T4941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.660580][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.668196][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.675588][ T5626] bridge_slave_0: entered allmulticast mode [ 99.683934][ T5626] bridge_slave_0: entered promiscuous mode [ 99.729628][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.736900][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.744498][ T5626] bridge_slave_1: entered allmulticast mode [ 99.752036][ T5626] bridge_slave_1: entered promiscuous mode [ 99.827350][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.834853][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.842408][ T5629] bridge_slave_0: entered allmulticast mode [ 99.850037][ T5629] bridge_slave_0: entered promiscuous mode [ 99.891917][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.899255][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.906569][ T5629] bridge_slave_1: entered allmulticast mode [ 99.914553][ T5629] bridge_slave_1: entered promiscuous mode [ 99.928579][ T5630] Bluetooth: hci2: command tx timeout [ 99.938025][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.979530][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.007603][ T5630] Bluetooth: hci0: command tx timeout [ 100.007806][ T5640] Bluetooth: hci3: command tx timeout [ 100.014433][ T50] Bluetooth: hci1: command tx timeout [ 100.071328][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.080935][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.088674][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.095931][ T5632] bridge_slave_0: entered allmulticast mode [ 100.103689][ T5632] bridge_slave_0: entered promiscuous mode [ 100.123027][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.130465][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.137892][ T5625] bridge_slave_0: entered allmulticast mode [ 100.145766][ T5625] bridge_slave_0: entered promiscuous mode [ 100.156329][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.166553][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.174615][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.182394][ T5632] bridge_slave_1: entered allmulticast mode [ 100.190190][ T5632] bridge_slave_1: entered promiscuous mode [ 100.199522][ T5626] team0: Port device team_slave_0 added [ 100.205340][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.212737][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.220191][ T5625] bridge_slave_1: entered allmulticast mode [ 100.227829][ T5625] bridge_slave_1: entered promiscuous mode [ 100.262190][ T5626] team0: Port device team_slave_1 added [ 100.333033][ T5629] team0: Port device team_slave_0 added [ 100.342087][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.366728][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.378484][ T5629] team0: Port device team_slave_1 added [ 100.387141][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.397548][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.404594][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.431627][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.446254][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.495320][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.502598][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.529075][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.553250][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.560388][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.588070][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.602626][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.609713][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.635733][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.694012][ T5632] team0: Port device team_slave_0 added [ 100.703290][ T5632] team0: Port device team_slave_1 added [ 100.712031][ T5625] team0: Port device team_slave_0 added [ 100.721791][ T5625] team0: Port device team_slave_1 added [ 100.804585][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.812060][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.839051][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.863052][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.870399][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.896780][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.921819][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.929129][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.955329][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.973834][ T5626] hsr_slave_0: entered promiscuous mode [ 100.980757][ T5626] hsr_slave_1: entered promiscuous mode [ 100.988373][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.995465][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.021532][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.039001][ T5629] hsr_slave_0: entered promiscuous mode [ 101.045524][ T5629] hsr_slave_1: entered promiscuous mode [ 101.052124][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 101.058047][ T5629] Cannot create hsr debugfs directory [ 101.181079][ T5625] hsr_slave_0: entered promiscuous mode [ 101.188463][ T5625] hsr_slave_1: entered promiscuous mode [ 101.194798][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 101.201001][ T5625] Cannot create hsr debugfs directory [ 101.212797][ T5632] hsr_slave_0: entered promiscuous mode [ 101.219404][ T5632] hsr_slave_1: entered promiscuous mode [ 101.225643][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 101.231546][ T5632] Cannot create hsr debugfs directory [ 101.738116][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.757192][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.765643][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.779237][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.787299][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.799285][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.809136][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.820019][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.919957][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.934340][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.944516][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.959117][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.969314][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.983498][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.005062][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.016525][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.024073][ T5630] Bluetooth: hci2: command tx timeout [ 102.087861][ T50] Bluetooth: hci0: command tx timeout [ 102.087871][ T5640] Bluetooth: hci1: command tx timeout [ 102.099338][ T5630] Bluetooth: hci3: command tx timeout [ 102.139580][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.151565][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.161682][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.173491][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.187216][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.198525][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.206870][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.220071][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.342563][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.355746][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.365052][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.377209][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.391303][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.402318][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.412039][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.422931][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.454778][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.533382][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.578446][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.586291][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.619454][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.630374][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.637632][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.730457][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.756663][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.770659][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.777921][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.823547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.830759][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.873012][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.902089][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.919417][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.926673][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.976075][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.983387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.037665][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.093757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.101074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.160947][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.168224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.019863][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.089676][ T50] Bluetooth: hci2: command tx timeout [ 104.168839][ T50] Bluetooth: hci0: command tx timeout [ 104.174378][ T5630] Bluetooth: hci3: command tx timeout [ 104.175168][ T5640] Bluetooth: hci1: command tx timeout [ 104.226280][ T5626] veth0_vlan: entered promiscuous mode [ 104.291670][ T5626] veth1_vlan: entered promiscuous mode [ 104.326420][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.377247][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.476497][ T5626] veth0_macvtap: entered promiscuous mode [ 104.492684][ T5626] veth1_macvtap: entered promiscuous mode [ 104.581344][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.593655][ T5629] veth0_vlan: entered promiscuous mode [ 104.614415][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.632317][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.650423][ T5625] veth0_vlan: entered promiscuous mode [ 104.674611][ T5629] veth1_vlan: entered promiscuous mode [ 104.683939][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.694803][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.706126][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.722119][ T5625] veth1_vlan: entered promiscuous mode [ 104.741059][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.866060][ T5625] veth0_macvtap: entered promiscuous mode [ 104.903550][ T5629] veth0_macvtap: entered promiscuous mode [ 104.930867][ T5625] veth1_macvtap: entered promiscuous mode [ 104.940776][ T5632] veth0_vlan: entered promiscuous mode [ 104.957908][ T5629] veth1_macvtap: entered promiscuous mode [ 104.973512][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.983568][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.019114][ T5632] veth1_vlan: entered promiscuous mode [ 105.050302][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.064035][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.114412][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.122010][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.131868][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.144502][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.154985][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.164555][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.173794][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.192431][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.230757][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.251632][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.290379][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.300099][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.354145][ T5632] veth0_macvtap: entered promiscuous mode [ 105.372688][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.411052][ T5632] veth1_macvtap: entered promiscuous mode [ 105.463557][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.472642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.572548][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.611779][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.632269][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.668464][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.725987][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.745428][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.746974][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764449][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.786605][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.806312][ T1047] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.863366][ T1047] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.869966][ T5778] futex_wake_op: syz.0.1 tries to shift op by -2048; fix this program [ 105.893403][ T1047] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.168794][ T5640] Bluetooth: hci2: command tx timeout [ 106.249023][ T5640] Bluetooth: hci3: command tx timeout [ 106.254611][ T5640] Bluetooth: hci0: command tx timeout [ 106.255166][ T5630] Bluetooth: hci1: command tx timeout [ 106.487117][ T5794] FAULT_INJECTION: forcing a failure. [ 106.487117][ T5794] name failslab, interval 1, probability 0, space 0, times 1 [ 106.507936][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 106.507973][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.507997][ T5794] Call Trace: [ 106.508006][ T5794] [ 106.508015][ T5794] dump_stack_lvl+0x100/0x190 [ 106.508056][ T5794] should_fail_ex.cold+0x5/0xa [ 106.508087][ T5794] ? tomoyo_realpath_from_path+0xb6/0x690 [ 106.508120][ T5794] should_failslab+0xc2/0x120 [ 106.508152][ T5794] __kmalloc_noprof+0xe0/0x850 [ 106.508196][ T5794] ? kfree+0x1dd/0x6c0 [ 106.508240][ T5794] tomoyo_realpath_from_path+0xb6/0x690 [ 106.508290][ T5794] tomoyo_path_number_perm+0x23c/0x580 [ 106.508321][ T5794] ? tomoyo_path_number_perm+0x22e/0x580 [ 106.508357][ T5794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.508434][ T5794] ? find_held_lock+0x2b/0x80 [ 106.508476][ T5794] ? __fget_files+0x215/0x3d0 [ 106.508510][ T5794] ? hook_file_ioctl_common+0x149/0x410 [ 106.508543][ T5794] ? __fget_files+0x215/0x3d0 [ 106.508585][ T5794] ? __fget_files+0x21f/0x3d0 [ 106.508630][ T5794] security_file_ioctl+0xd3/0x230 [ 106.508664][ T5794] __x64_sys_ioctl+0xb7/0x210 [ 106.508711][ T5794] do_syscall_64+0x10b/0xf80 [ 106.508750][ T5794] ? clear_bhb_loop+0x40/0x90 [ 106.508790][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.508824][ T5794] RIP: 0033:0x7f368039cdd9 [ 106.508851][ T5794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.508881][ T5794] RSP: 002b:00007f36811f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.508916][ T5794] RAX: ffffffffffffffda RBX: 00007f3680615fa0 RCX: 00007f368039cdd9 [ 106.508936][ T5794] RDX: 0000000000000000 RSI: 0000000040045201 RDI: 0000000000000003 [ 106.508955][ T5794] RBP: 00007f36811f3090 R08: 0000000000000000 R09: 0000000000000000 [ 106.508974][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.508991][ T5794] R13: 00007f3680616038 R14: 00007f3680615fa0 R15: 00007ffcccbe5dc8 [ 106.509032][ T5794] [ 106.509073][ T5794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.760759][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.779621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.024028][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.035485][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.245450][ T5796] Zero length message leads to an empty skb [ 110.215497][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 110.401725][ T5853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.222258][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.260075][ T5861] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.380227][ T5861] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.440555][ T5861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.463558][ T5861] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.529916][ T5861] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.574175][ T5861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.631440][ T5861] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.682899][ T5861] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.719184][ T5861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.730242][ T5861] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.786634][ T5861] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.141798][ T5883] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.796234][ T5883] process 'syz.1.20' launched ':,' with NULL argv: empty string added [ 112.887910][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.015623][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.457968][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.619003][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.770726][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.208334][ T5921] futex_wake_op: syz.2.26 tries to shift op by -2048; fix this program [ 114.967964][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.528004][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.601628][ T5948] futex_wake_op: syz.2.30 tries to shift op by -2048; fix this program [ 115.607654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.688330][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.852143][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.281519][ T5952] can: request_module (can-proto-0) failed. [ 116.844980][ T5969] random: crng reseeded on system resumption [ 117.057526][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.304353][ T5969] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.617592][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.782095][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.831226][ T5971] netlink: 202 bytes leftover after parsing attributes in process `syz.3.36'. [ 117.868190][ T5991] futex_wake_op: syz.1.39 tries to shift op by -2048; fix this program [ 117.928040][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.228363][ T6008] block2mtd: too many arguments [ 119.268342][ T6008] netlink: 206 bytes leftover after parsing attributes in process `syz.1.43'. [ 120.068935][ T6022] can: request_module (can-proto-0) failed. [ 121.075095][ T6038] futex_wake_op: syz.3.50 tries to shift op by -2048; fix this program [ 121.086986][ T6056] futex_wake_op: syz.0.51 tries to shift op by -2048; fix this program [ 121.780717][ T6065] block2mtd: too many arguments [ 121.826674][ T6065] netlink: 206 bytes leftover after parsing attributes in process `syz.0.56'. [ 121.880013][ T6044] netlink: 202 bytes leftover after parsing attributes in process `syz.1.49'. [ 122.075192][ T6073] futex_wake_op: syz.3.55 tries to shift op by -2048; fix this program [ 124.428057][ T6124] futex_wake_op: syz.1.64 tries to shift op by -2048; fix this program [ 125.029799][ T6135] futex_wake_op: syz.0.65 tries to shift op by -2048; fix this program [ 125.222004][ T6137] binder: 6136:6137 ioctl 40107447 200000000100 returned -22 [ 126.337818][ T6162] FAULT_INJECTION: forcing a failure. [ 126.337818][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 126.371446][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT(full) [ 126.371488][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.371507][ T6162] Call Trace: [ 126.371517][ T6162] [ 126.371534][ T6162] dump_stack_lvl+0x100/0x190 [ 126.371574][ T6162] should_fail_ex.cold+0x5/0xa [ 126.371615][ T6162] ? tomoyo_encode2+0xfb/0x3c0 [ 126.371653][ T6162] should_failslab+0xc2/0x120 [ 126.371691][ T6162] __kmalloc_noprof+0xe0/0x850 [ 126.371740][ T6162] ? d_absolute_path+0x136/0x1b0 [ 126.371799][ T6162] tomoyo_encode2+0xfb/0x3c0 [ 126.371844][ T6162] tomoyo_encode+0x29/0x50 [ 126.371880][ T6162] tomoyo_realpath_from_path+0x18c/0x690 [ 126.371930][ T6162] tomoyo_path_number_perm+0x23c/0x580 [ 126.371963][ T6162] ? tomoyo_path_number_perm+0x22e/0x580 [ 126.371998][ T6162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.372072][ T6162] ? find_held_lock+0x2b/0x80 [ 126.372113][ T6162] ? __fget_files+0x215/0x3d0 [ 126.372147][ T6162] ? hook_file_ioctl_common+0x149/0x410 [ 126.372180][ T6162] ? __fget_files+0x215/0x3d0 [ 126.372224][ T6162] ? __fget_files+0x21f/0x3d0 [ 126.372274][ T6162] security_file_ioctl+0xd3/0x230 [ 126.372308][ T6162] __x64_sys_ioctl+0xb7/0x210 [ 126.372344][ T6162] do_syscall_64+0x10b/0xf80 [ 126.372383][ T6162] ? clear_bhb_loop+0x40/0x90 [ 126.372422][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.372453][ T6162] RIP: 0033:0x7f368039cdd9 [ 126.372479][ T6162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.372525][ T6162] RSP: 002b:00007f36811f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.372555][ T6162] RAX: ffffffffffffffda RBX: 00007f3680615fa0 RCX: 00007f368039cdd9 [ 126.372575][ T6162] RDX: 0000000000000000 RSI: 0000000040045201 RDI: 0000000000000003 [ 126.372593][ T6162] RBP: 00007f36811f3090 R08: 0000000000000000 R09: 0000000000000000 [ 126.372611][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.372629][ T6162] R13: 00007f3680616038 R14: 00007f3680615fa0 R15: 00007ffcccbe5dc8 [ 126.372671][ T6162] [ 126.375160][ T6162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.361429][ T6186] can: request_module (can-proto-5) failed. [ 127.789845][ T6195] futex_wake_op: syz.1.80 tries to shift op by -2048; fix this program [ 128.370777][ T6215] FAULT_INJECTION: forcing a failure. [ 128.370777][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.400633][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT(full) [ 128.400675][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.400694][ T6215] Call Trace: [ 128.400704][ T6215] [ 128.400716][ T6215] dump_stack_lvl+0x100/0x190 [ 128.400757][ T6215] should_fail_ex.cold+0x5/0xa [ 128.400796][ T6215] _copy_to_user+0x32/0xd0 [ 128.400849][ T6215] simple_read_from_buffer+0xcb/0x170 [ 128.400888][ T6215] proc_fail_nth_read+0x1af/0x230 [ 128.400940][ T6215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.400993][ T6215] ? rw_verify_area+0xce/0x6d0 [ 128.401020][ T6215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.401065][ T6215] vfs_read+0x1e4/0xb30 [ 128.401101][ T6215] ? __pfx_vfs_read+0x10/0x10 [ 128.401131][ T6215] ? __fget_files+0x215/0x3d0 [ 128.401174][ T6215] ? __fget_files+0x21f/0x3d0 [ 128.401221][ T6215] ksys_read+0x12a/0x250 [ 128.401255][ T6215] ? __pfx_ksys_read+0x10/0x10 [ 128.401293][ T6215] ? rcu_is_watching+0x12/0xc0 [ 128.401336][ T6215] do_syscall_64+0x10b/0xf80 [ 128.401372][ T6215] ? clear_bhb_loop+0x40/0x90 [ 128.401417][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.401447][ T6215] RIP: 0033:0x7f368035d60e [ 128.401470][ T6215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.401499][ T6215] RSP: 002b:00007f36811f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.401530][ T6215] RAX: ffffffffffffffda RBX: 00007f36811f36c0 RCX: 00007f368035d60e [ 128.401551][ T6215] RDX: 000000000000000f RSI: 00007f36811f30a0 RDI: 0000000000000004 [ 128.401570][ T6215] RBP: 00007f36811f3090 R08: 0000000000000000 R09: 0000000000000000 [ 128.401587][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.401605][ T6215] R13: 00007f3680616038 R14: 00007f3680615fa0 R15: 00007ffcccbe5dc8 [ 128.401646][ T6215] [ 130.491238][ T5630] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 131.150803][ T6246] random: crng reseeded on system resumption [ 132.024492][ T6274] futex_wake_op: syz.3.94 tries to shift op by -2048; fix this program [ 132.202021][ T6287] netlink: 354 bytes leftover after parsing attributes in process `syz.2.97'. [ 133.133133][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.143880][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.179275][ T5630] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 134.972125][ T6311] random: crng reseeded on system resumption [ 136.257647][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.576764][ T6350] futex_wake_op: syz.0.108 tries to shift op by -2048; fix this program [ 137.821913][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 137.973617][ T6364] ipvlan1: entered promiscuous mode [ 137.983665][ T6364] ipvlan1: entered allmulticast mode [ 137.997746][ T6364] veth0_vlan: entered allmulticast mode [ 138.327690][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.388645][ T50] Bluetooth: hci3: Malformed Event: 0x02 [ 138.748004][ T6382] random: crng reseeded on system resumption [ 139.373483][ T29] audit: type=1800 audit(1777662872.842:2): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.115" name="dummy_udc" dev="gadgetfs" ino=7005 res=0 errno=0 [ 141.255676][ T6421] futex_wake_op: syz.1.122 tries to shift op by -2048; fix this program [ 143.281780][ T6454] mmap: syz.0.131 (6454) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.318383][ T6454] FAULT_INJECTION: forcing a failure. [ 143.318383][ T6454] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 143.373241][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 143.373287][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.373307][ T6454] Call Trace: [ 143.373317][ T6454] [ 143.373330][ T6454] dump_stack_lvl+0x100/0x190 [ 143.373373][ T6454] should_fail_ex.cold+0x5/0xa [ 143.373412][ T6454] ? prepare_alloc_pages+0x16d/0x5f0 [ 143.373459][ T6454] should_fail_alloc_page+0xeb/0x140 [ 143.373501][ T6454] prepare_alloc_pages+0x1f0/0x5f0 [ 143.373551][ T6454] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 143.373619][ T6454] ? __lock_acquire+0x4a5/0x2630 [ 143.373657][ T6454] ? __lock_acquire+0x4a5/0x2630 [ 143.373687][ T6454] ? css_rstat_updated+0x1ce/0x5a0 [ 143.373743][ T6454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.373804][ T6454] ? do_raw_spin_lock+0x128/0x260 [ 143.373849][ T6454] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.373888][ T6454] ? find_held_lock+0x2b/0x80 [ 143.373945][ T6454] ? __lock_acquire+0x4a5/0x2630 [ 143.373977][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.374029][ T6454] ? policy_nodemask+0xed/0x4f0 [ 143.374072][ T6454] alloc_pages_mpol+0x1fb/0x540 [ 143.374121][ T6454] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.374162][ T6454] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 143.374206][ T6454] folio_alloc_mpol_noprof+0x36/0x260 [ 143.374257][ T6454] shmem_alloc_folio+0x135/0x160 [ 143.374309][ T6454] shmem_alloc_and_add_folio+0x371/0xd40 [ 143.374376][ T6454] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 143.374439][ T6454] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 143.374507][ T6454] shmem_get_folio_gfp+0x6ab/0x1900 [ 143.374574][ T6454] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 143.374631][ T6454] ? filemap_map_pages+0x9c1/0x2140 [ 143.374695][ T6454] shmem_fault+0x1f9/0xa20 [ 143.374730][ T6454] ? __pfx_shmem_fault+0x10/0x10 [ 143.374769][ T6454] ? __pfx_filemap_map_pages+0x10/0x10 [ 143.374828][ T6454] ? find_held_lock+0x2b/0x80 [ 143.374875][ T6454] __do_fault+0x10b/0x440 [ 143.374912][ T6454] do_fault+0xa99/0x1750 [ 143.374960][ T6454] __handle_mm_fault+0x187d/0x2a00 [ 143.375014][ T6454] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.375060][ T6454] ? __pfx___handle_mm_fault+0x10/0x10 [ 143.375123][ T6454] ? pte_offset_map_lock+0x174/0x320 [ 143.375164][ T6454] ? find_held_lock+0x2b/0x80 [ 143.375223][ T6454] ? follow_page_pte+0x4d0/0x13f0 [ 143.375274][ T6454] handle_mm_fault+0x36d/0xa20 [ 143.375335][ T6454] __get_user_pages+0x1178/0x32a0 [ 143.375393][ T6454] ? __pfx___get_user_pages+0x10/0x10 [ 143.375448][ T6454] populate_vma_page_range+0x267/0x3f0 [ 143.375496][ T6454] ? __pfx_populate_vma_page_range+0x10/0x10 [ 143.375541][ T6454] ? __pfx_find_vma_intersection+0x10/0x10 [ 143.375584][ T6454] ? do_mmap+0x93f/0x12f0 [ 143.375629][ T6454] __mm_populate+0x107/0x3a0 [ 143.375676][ T6454] ? __pfx___mm_populate+0x10/0x10 [ 143.375721][ T6454] ? up_write+0x28c/0x4f0 [ 143.375759][ T6454] __do_sys_remap_file_pages+0x835/0xa10 [ 143.375812][ T6454] ? __fget_files+0x21f/0x3d0 [ 143.375851][ T6454] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 143.375895][ T6454] ? __x64_sys_futex+0x34f/0x4d0 [ 143.375932][ T6454] ? __x64_sys_futex+0x358/0x4d0 [ 143.375973][ T6454] ? xfd_validate_state+0x129/0x190 [ 143.376014][ T6454] ? rcu_is_watching+0x12/0xc0 [ 143.376057][ T6454] do_syscall_64+0x10b/0xf80 [ 143.376093][ T6454] ? clear_bhb_loop+0x40/0x90 [ 143.376138][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.376170][ T6454] RIP: 0033:0x7feb2919cdd9 [ 143.376194][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.376223][ T6454] RSP: 002b:00007feb2a0f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 143.376250][ T6454] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2919cdd9 [ 143.376270][ T6454] RDX: 0000000000000000 RSI: 000000000000f3a4 RDI: 0000000000000000 [ 143.376287][ T6454] RBP: 00007feb29232d69 R08: 0000000000000015 R09: 0000000000000000 [ 143.376304][ T6454] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 143.376321][ T6454] R13: 00007feb29416038 R14: 00007feb29415fa0 R15: 00007ffcdf577ce8 [ 143.376358][ T6454] [ 146.362169][ T6485] FAULT_INJECTION: forcing a failure. [ 146.362169][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 146.410303][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.1.139 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.410356][ T6485] Tainted: [L]=SOFTLOCKUP [ 146.410367][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.410387][ T6485] Call Trace: [ 146.410397][ T6485] [ 146.410410][ T6485] dump_stack_lvl+0x100/0x190 [ 146.410452][ T6485] should_fail_ex.cold+0x5/0xa [ 146.410495][ T6485] should_failslab+0xc2/0x120 [ 146.410536][ T6485] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 146.410591][ T6485] ? __kernfs_new_node+0xd2/0x9f0 [ 146.410640][ T6485] __kernfs_new_node+0xd2/0x9f0 [ 146.410682][ T6485] ? __pfx___kernfs_new_node+0x10/0x10 [ 146.410730][ T6485] ? find_held_lock+0x2b/0x80 [ 146.410774][ T6485] ? kernfs_root+0xee/0x2a0 [ 146.410804][ T6485] ? kernfs_root+0xee/0x2a0 [ 146.410845][ T6485] kernfs_new_node+0x11b/0x1a0 [ 146.410888][ T6485] __kernfs_create_file+0x53/0x350 [ 146.410945][ T6485] sysfs_add_file_mode_ns+0x207/0x3c0 [ 146.410994][ T6485] internal_create_group+0x593/0xf40 [ 146.411042][ T6485] ? __pfx_internal_create_group+0x10/0x10 [ 146.411088][ T6485] ? kernfs_create_link+0x1bd/0x240 [ 146.411155][ T6485] internal_create_groups+0x9d/0x150 [ 146.411197][ T6485] device_add+0x77a/0x1950 [ 146.411262][ T6485] ? __pfx_device_add+0x10/0x10 [ 146.411318][ T6485] __add_disk+0x518/0xe40 [ 146.411367][ T6485] ? find_held_lock+0x2b/0x80 [ 146.411416][ T6485] add_disk_fwnode+0x3d4/0x5c0 [ 146.411469][ T6485] zram_add+0x495/0x5d0 [ 146.411518][ T6485] ? __pfx_zram_add+0x10/0x10 [ 146.411594][ T6485] ? find_held_lock+0x2b/0x80 [ 146.411639][ T6485] ? sysfs_file_kobj+0xe4/0x290 [ 146.411699][ T6485] ? __pfx_hot_add_show+0x10/0x10 [ 146.411747][ T6485] hot_add_show+0x21/0x80 [ 146.411803][ T6485] class_attr_show+0x72/0xa0 [ 146.411847][ T6485] ? __pfx_class_attr_show+0x10/0x10 [ 146.411887][ T6485] sysfs_kf_seq_show+0x217/0x3a0 [ 146.411948][ T6485] seq_read_iter+0x32f/0x1270 [ 146.411983][ T6485] ? lock_acquire+0x1b1/0x370 [ 146.412030][ T6485] kernfs_fop_read_iter+0x46c/0x610 [ 146.412082][ T6485] ? rw_verify_area+0xce/0x6d0 [ 146.412115][ T6485] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 146.412179][ T6485] vfs_read+0x825/0xb30 [ 146.412225][ T6485] ? __pfx_vfs_read+0x10/0x10 [ 146.412293][ T6485] ksys_read+0x12a/0x250 [ 146.412332][ T6485] ? __pfx_ksys_read+0x10/0x10 [ 146.412375][ T6485] ? rcu_is_watching+0x12/0xc0 [ 146.412423][ T6485] do_syscall_64+0x10b/0xf80 [ 146.412465][ T6485] ? clear_bhb_loop+0x40/0x90 [ 146.412510][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.412546][ T6485] RIP: 0033:0x7f05b559cdd9 [ 146.412574][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.412607][ T6485] RSP: 002b:00007f05b37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.412640][ T6485] RAX: ffffffffffffffda RBX: 00007f05b5816090 RCX: 00007f05b559cdd9 [ 146.412662][ T6485] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 146.412683][ T6485] RBP: 00007f05b5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.412704][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.412724][ T6485] R13: 00007f05b5816128 R14: 00007f05b5816090 R15: 00007ffe7c41f738 [ 146.412768][ T6485] [ 149.127825][ T6502] FAULT_INJECTION: forcing a failure. [ 149.127825][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 149.218651][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.3.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.218718][ T6502] Tainted: [L]=SOFTLOCKUP [ 149.218730][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.218748][ T6502] Call Trace: [ 149.218757][ T6502] [ 149.218769][ T6502] dump_stack_lvl+0x100/0x190 [ 149.218810][ T6502] should_fail_ex.cold+0x5/0xa [ 149.218852][ T6502] should_failslab+0xc2/0x120 [ 149.218890][ T6502] __kmalloc_cache_noprof+0x7a/0x6f0 [ 149.218940][ T6502] ? kernfs_fop_open+0x9fa/0xd50 [ 149.218998][ T6502] kernfs_fop_open+0x9fa/0xd50 [ 149.219055][ T6502] do_dentry_open+0x6d8/0x1660 [ 149.219096][ T6502] ? __pfx_kernfs_fop_open+0x10/0x10 [ 149.219156][ T6502] vfs_open+0x82/0x3f0 [ 149.219208][ T6502] path_openat+0x208c/0x31a0 [ 149.219265][ T6502] ? __pfx_path_openat+0x10/0x10 [ 149.219323][ T6502] do_file_open+0x20e/0x430 [ 149.219367][ T6502] ? __pfx_do_file_open+0x10/0x10 [ 149.219438][ T6502] ? alloc_fd+0x476/0x790 [ 149.219482][ T6502] ? do_getname+0x191/0x390 [ 149.219534][ T6502] do_sys_openat2+0x10d/0x1e0 [ 149.219585][ T6502] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.219651][ T6502] __x64_sys_openat+0x12d/0x210 [ 149.219712][ T6502] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.219771][ T6502] ? rcu_is_watching+0x12/0xc0 [ 149.219818][ T6502] do_syscall_64+0x10b/0xf80 [ 149.219858][ T6502] ? clear_bhb_loop+0x40/0x90 [ 149.219900][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.219934][ T6502] RIP: 0033:0x7f368039cdd9 [ 149.219960][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.219991][ T6502] RSP: 002b:00007f36811f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.220022][ T6502] RAX: ffffffffffffffda RBX: 00007f3680615fa0 RCX: 00007f368039cdd9 [ 149.220042][ T6502] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 149.220061][ T6502] RBP: 00007f3680432d69 R08: 0000000000000000 R09: 0000000000000000 [ 149.220080][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.220098][ T6502] R13: 00007f3680616038 R14: 00007f3680615fa0 R15: 00007ffcccbe5dc8 [ 149.220140][ T6502] [ 149.571805][ T6516] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.129806][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 151.255370][ T6532] netlink: 206 bytes leftover after parsing attributes in process `syz.1.148'. [ 153.406807][ T6556] zram0: detected capacity change from 0 to 16 [ 158.210853][ T6606] smpboot: CPU 1 is now offline [ 158.305527][ T6614] random: crng reseeded on system resumption [ 158.436048][ T6613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.734867][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 163.570016][ T6657] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET) [ 164.825211][ T6666] futex_wake_op: syz.2.179 tries to shift op by -2048; fix this program [ 164.877636][ T6674] FAULT_INJECTION: forcing a failure. [ 164.877636][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 164.986796][ T6666] futex_wake_op: syz.2.179 tries to shift op by -2048; fix this program [ 165.056073][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.056111][ T6674] Tainted: [L]=SOFTLOCKUP [ 165.056119][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.056133][ T6674] Call Trace: [ 165.056141][ T6674] [ 165.056150][ T6674] dump_stack_lvl+0x100/0x190 [ 165.056181][ T6674] should_fail_ex.cold+0x5/0xa [ 165.056212][ T6674] should_failslab+0xc2/0x120 [ 165.056241][ T6674] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 165.056292][ T6674] ? sock_alloc_inode+0x26/0x290 [ 165.056322][ T6674] ? __pfx_sock_alloc_inode+0x10/0x10 [ 165.056351][ T6674] sock_alloc_inode+0x26/0x290 [ 165.056377][ T6674] ? __pfx_sock_alloc_inode+0x10/0x10 [ 165.056403][ T6674] alloc_inode+0x68/0x250 [ 165.056440][ T6674] sock_alloc+0x44/0x280 [ 165.056463][ T6674] ? security_socket_create+0x7f/0x250 [ 165.056518][ T6674] __sock_create+0xc2/0x860 [ 165.056557][ T6674] __sys_socket+0x14d/0x260 [ 165.056589][ T6674] ? __pfx___sys_socket+0x10/0x10 [ 165.056630][ T6674] __x64_sys_socket+0x72/0xb0 [ 165.056661][ T6674] ? lockdep_hardirqs_on+0x78/0x100 [ 165.056691][ T6674] do_syscall_64+0x10b/0xf80 [ 165.056718][ T6674] ? clear_bhb_loop+0x40/0x90 [ 165.056747][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.056772][ T6674] RIP: 0033:0x7f05b559cdd9 [ 165.056792][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.056822][ T6674] RSP: 002b:00007f05b37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 165.056845][ T6674] RAX: ffffffffffffffda RBX: 00007f05b5816090 RCX: 00007f05b559cdd9 [ 165.056860][ T6674] RDX: 000000000000000c RSI: 0000000000000002 RDI: 000000000000001e [ 165.056874][ T6674] RBP: 00007f05b5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 165.056889][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.056903][ T6674] R13: 00007f05b5816128 R14: 00007f05b5816090 R15: 00007ffe7c41f738 [ 165.056933][ T6674] [ 165.056945][ T6674] socket: no more sockets [ 167.313181][ T6691] futex_wake_op: syz.2.184 tries to shift op by -2048; fix this program [ 173.996261][ T6777] futex_wake_op: syz.2.199 tries to shift op by -2048; fix this program [ 174.481619][ T6778] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 174.921343][ T6781] smpboot: CPU 1 is now offline [ 177.248991][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.206'. [ 177.565958][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 177.989561][ T6817] zswap: compressor not available [ 178.293386][ T6808] kexec: Could not allocate control_code_buffer [ 179.744411][ T6831] netlink: 346 bytes leftover after parsing attributes in process `syz.3.209'. [ 180.367109][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 180.781428][ T6850] random: crng reseeded on system resumption [ 184.691257][ T6899] futex_wake_op: syz.0.220 tries to shift op by -2048; fix this program [ 186.659832][ T6927] netlink: 334 bytes leftover after parsing attributes in process `syz.2.228'. [ 186.758104][ T6921] binder: 6910:6921 ioctl c00c620f 200000000080 returned -22 [ 188.543344][ T6962] capability: warning: `syz.2.233' uses 32-bit capabilities (legacy support in use) [ 189.406257][ T6983] futex_wake_op: syz.2.236 tries to shift op by -2048; fix this program [ 189.792959][ T29] audit: type=1800 audit(4294967330.500:3): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="dummy_udc" dev="gadgetfs" ino=7005 res=0 errno=0 [ 191.522748][ T7017] futex_wake_op: syz.2.239 tries to shift op by -2048; fix this program [ 193.780143][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 194.571381][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580872][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.916944][ T7075] FAULT_INJECTION: forcing a failure. [ 194.916944][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 195.112106][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.1.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.112156][ T7075] Tainted: [L]=SOFTLOCKUP [ 195.112167][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.112181][ T7075] Call Trace: [ 195.112188][ T7075] [ 195.112197][ T7075] dump_stack_lvl+0x100/0x190 [ 195.112236][ T7075] should_fail_ex.cold+0x5/0xa [ 195.112264][ T7075] ? sk_prot_alloc+0x10b/0x2a0 [ 195.112291][ T7075] should_failslab+0xc2/0x120 [ 195.112318][ T7075] __kmalloc_noprof+0xe0/0x850 [ 195.112361][ T7075] sk_prot_alloc+0x10b/0x2a0 [ 195.112391][ T7075] sk_alloc+0x36/0xe80 [ 195.112435][ T7075] __netlink_create+0x5e/0x2c0 [ 195.112457][ T7075] ? __wake_up+0x3f/0x60 [ 195.112492][ T7075] netlink_create+0x29b/0x610 [ 195.112517][ T7075] ? __pfx_genl_bind+0x10/0x10 [ 195.112546][ T7075] ? __pfx_genl_unbind+0x10/0x10 [ 195.112575][ T7075] ? __pfx_genl_release+0x10/0x10 [ 195.112610][ T7075] __sock_create+0x339/0x860 [ 195.112645][ T7075] __sys_socket+0x14d/0x260 [ 195.112677][ T7075] ? __pfx___sys_socket+0x10/0x10 [ 195.112716][ T7075] __x64_sys_socket+0x72/0xb0 [ 195.112746][ T7075] ? lockdep_hardirqs_on+0x78/0x100 [ 195.112775][ T7075] do_syscall_64+0x10b/0xf80 [ 195.112801][ T7075] ? clear_bhb_loop+0x40/0x90 [ 195.112830][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.112854][ T7075] RIP: 0033:0x7f05b559cdd9 [ 195.112876][ T7075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.112898][ T7075] RSP: 002b:00007f05b37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 195.112920][ T7075] RAX: ffffffffffffffda RBX: 00007f05b5815fa0 RCX: 00007f05b559cdd9 [ 195.112935][ T7075] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 195.112948][ T7075] RBP: 00007f05b5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 195.112962][ T7075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.112975][ T7075] R13: 00007f05b5816038 R14: 00007f05b5815fa0 R15: 00007ffe7c41f738 [ 195.113004][ T7075] [ 195.739951][ T7087] netlink: 146 bytes leftover after parsing attributes in process `syz.3.251'. [ 195.956330][ T7096] netlink: 'syz.3.251': attribute type 2 has an invalid length. [ 196.052911][ T7098] futex_wake_op: syz.1.250 tries to shift op by -2048; fix this program [ 198.854293][ T7132] program syz.3.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.910189][ T7132] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 199.944766][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 199.980602][ T7169] futex_wake_op: syz.3.264 tries to shift op by -2048; fix this program [ 200.612841][ T7183] futex_wake_op: syz.2.266 tries to shift op by -2048; fix this program [ 200.833254][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 202.057286][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 202.666689][ T7229] FAULT_INJECTION: forcing a failure. [ 202.666689][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 202.711967][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.3.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.712006][ T7229] Tainted: [L]=SOFTLOCKUP [ 202.712015][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.712029][ T7229] Call Trace: [ 202.712036][ T7229] [ 202.712045][ T7229] dump_stack_lvl+0x100/0x190 [ 202.712077][ T7229] should_fail_ex.cold+0x5/0xa [ 202.712108][ T7229] should_failslab+0xc2/0x120 [ 202.712138][ T7229] __kmalloc_cache_noprof+0x7a/0x6f0 [ 202.712174][ T7229] ? wakeup_source_device_create+0x46/0x2e0 [ 202.712212][ T7229] wakeup_source_device_create+0x46/0x2e0 [ 202.712245][ T7229] wakeup_source_sysfs_add+0x1c/0x90 [ 202.712276][ T7229] wakeup_source_register+0x154/0x3e0 [ 202.712303][ T7229] ep_create_wakeup_source+0x1df/0x2e0 [ 202.712334][ T7229] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 202.712368][ T7229] ? do_epoll_ctl+0x1012/0x36a0 [ 202.712399][ T7229] ? do_epoll_ctl+0x1012/0x36a0 [ 202.712436][ T7229] do_epoll_ctl+0x1eee/0x36a0 [ 202.712479][ T7229] ? __pfx_do_epoll_ctl+0x10/0x10 [ 202.712510][ T7229] ? find_held_lock+0x2b/0x80 [ 202.712540][ T7229] ? __might_fault+0xc5/0x140 [ 202.712576][ T7229] ? __might_fault+0xc5/0x140 [ 202.712623][ T7229] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 202.712654][ T7229] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 202.712688][ T7229] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 202.712723][ T7229] ? rcu_is_watching+0x12/0xc0 [ 202.712755][ T7229] do_syscall_64+0x10b/0xf80 [ 202.712784][ T7229] ? clear_bhb_loop+0x40/0x90 [ 202.712813][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.712838][ T7229] RIP: 0033:0x7f368039cdd9 [ 202.712857][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.712888][ T7229] RSP: 002b:00007f36811f3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 202.712911][ T7229] RAX: ffffffffffffffda RBX: 00007f3680615fa0 RCX: 00007f368039cdd9 [ 202.712937][ T7229] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 202.712951][ T7229] RBP: 00007f3680432d69 R08: 0000000000000000 R09: 0000000000000000 [ 202.712968][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.712981][ T7229] R13: 00007f3680616038 R14: 00007f3680615fa0 R15: 00007ffcccbe5dc8 [ 202.713010][ T7229] [ 203.060161][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 203.163037][ T7238] futex_wake_op: syz.1.277 tries to shift op by -2048; fix this program [ 204.422312][ T7243] FAULT_INJECTION: forcing a failure. [ 204.422312][ T7243] name fail_futex, interval 1, probability 0, space 0, times 1 [ 204.495731][ T7258] futex_wake_op: syz.0.280 tries to shift op by -2048; fix this program [ 204.703102][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.3.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.703140][ T7243] Tainted: [L]=SOFTLOCKUP [ 204.703148][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.703162][ T7243] Call Trace: [ 204.703170][ T7243] [ 204.703179][ T7243] dump_stack_lvl+0x100/0x190 [ 204.703210][ T7243] should_fail_ex.cold+0x5/0xa [ 204.703241][ T7243] get_futex_key+0x1d2/0x1510 [ 204.703292][ T7243] ? __pfx_get_futex_key+0x10/0x10 [ 204.703321][ T7243] ? __sys_bpf+0x173/0x4b90 [ 204.703348][ T7243] futex_wake+0xea/0x530 [ 204.703376][ T7243] ? __pfx___sys_bpf+0x10/0x10 [ 204.703400][ T7243] ? __pfx_futex_wait+0x10/0x10 [ 204.703432][ T7243] ? __pfx_futex_wake+0x10/0x10 [ 204.703466][ T7243] ? vfs_write+0x15d/0x1070 [ 204.703493][ T7243] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 204.703533][ T7243] do_futex+0x32b/0x350 [ 204.703560][ T7243] ? __pfx_do_futex+0x10/0x10 [ 204.703596][ T7243] __x64_sys_futex+0x34f/0x4d0 [ 204.703627][ T7243] ? __pfx___x64_sys_futex+0x10/0x10 [ 204.703659][ T7243] ? rcu_is_watching+0x12/0xc0 [ 204.703691][ T7243] do_syscall_64+0x10b/0xf80 [ 204.703720][ T7243] ? clear_bhb_loop+0x40/0x90 [ 204.703762][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.703791][ T7243] RIP: 0033:0x7f368039cdd9 [ 204.703810][ T7243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.703832][ T7243] RSP: 002b:00007f36811900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.703854][ T7243] RAX: ffffffffffffffda RBX: 00007f3680616278 RCX: 00007f368039cdd9 [ 204.703869][ T7243] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f368061627c [ 204.703883][ T7243] RBP: 00007f3680616270 R08: 0000000000000001 R09: 0000000000000000 [ 204.703898][ T7243] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 204.703912][ T7243] R13: 00007f3680616308 R14: 00007ffcccbe5ce0 R15: 00007ffcccbe5dc8 [ 204.703941][ T7243] [ 205.074149][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 208.019426][ T7309] futex_wake_op: syz.3.291 tries to shift op by -2048; fix this program [ 209.332084][ T29] audit: type=1800 audit(4294967350.040:4): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.295" name="dummy_udc" dev="gadgetfs" ino=7005 res=0 errno=0 [ 211.129268][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 213.442315][ T7380] futex_wake_op: syz.1.304 tries to shift op by -2048; fix this program [ 213.615547][ T7381] FAULT_INJECTION: forcing a failure. [ 213.615547][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 213.777763][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: Tainted: G L syzkaller #0 PREEMPT(full) [ 213.777801][ T7381] Tainted: [L]=SOFTLOCKUP [ 213.777809][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.777823][ T7381] Call Trace: [ 213.777831][ T7381] [ 213.777840][ T7381] dump_stack_lvl+0x100/0x190 [ 213.777875][ T7381] should_fail_ex.cold+0x5/0xa [ 213.777906][ T7381] should_failslab+0xc2/0x120 [ 213.777952][ T7381] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 213.777992][ T7381] ? proc_alloc_inode+0x25/0x200 [ 213.778017][ T7381] ? d_alloc_parallel+0x864/0x14e0 [ 213.778044][ T7381] ? __pfx_proc_alloc_inode+0x10/0x10 [ 213.778072][ T7381] proc_alloc_inode+0x25/0x200 [ 213.778103][ T7381] alloc_inode+0x68/0x250 [ 213.778141][ T7381] new_inode+0x22/0x1c0 [ 213.778181][ T7381] proc_get_inode+0x1d/0x780 [ 213.778211][ T7381] proc_lookup_de+0x236/0x360 [ 213.778246][ T7381] proc_tgid_net_lookup+0x61/0x90 [ 213.778280][ T7381] lookup_open.isra.0+0x631/0x11b0 [ 213.778311][ T7381] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 213.778352][ T7381] ? lookup_fast+0x2da/0x600 [ 213.778378][ T7381] path_openat+0xa98/0x31a0 [ 213.778417][ T7381] ? __pfx_path_openat+0x10/0x10 [ 213.778458][ T7381] do_file_open+0x20e/0x430 [ 213.778490][ T7381] ? __pfx_do_file_open+0x10/0x10 [ 213.778530][ T7381] ? __pfx_kfree_link+0x10/0x10 [ 213.778561][ T7381] ? alloc_fd+0x476/0x790 [ 213.778592][ T7381] ? do_getname+0x191/0x390 [ 213.778630][ T7381] do_sys_openat2+0x10d/0x1e0 [ 213.778667][ T7381] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.778714][ T7381] __x64_sys_openat+0x12d/0x210 [ 213.778752][ T7381] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.778795][ T7381] ? rcu_is_watching+0x12/0xc0 [ 213.778828][ T7381] do_syscall_64+0x10b/0xf80 [ 213.778857][ T7381] ? clear_bhb_loop+0x40/0x90 [ 213.778887][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.778912][ T7381] RIP: 0033:0x7f642fd9cdd9 [ 213.778931][ T7381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.778954][ T7381] RSP: 002b:00007f6430c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.778976][ T7381] RAX: ffffffffffffffda RBX: 00007f6430015fa0 RCX: 00007f642fd9cdd9 [ 213.778992][ T7381] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 213.779007][ T7381] RBP: 00007f642fe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 213.779021][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.779035][ T7381] R13: 00007f6430016038 R14: 00007f6430015fa0 R15: 00007fff2232ef88 [ 213.779064][ T7381] [ 216.852269][ T7414] futex_wake_op: syz.3.312 tries to shift op by -2048; fix this program [ 221.860996][ T7460] futex_wake_op: syz.1.321 tries to shift op by -2048; fix this program [ 221.900822][ T7460] futex_wake_op: syz.1.321 tries to shift op by -2048; fix this program [ 221.946377][ T7460] 0x000000000001-0x000000020000 : "" [ 222.063449][ T7460] ftl_cs: FTL header corrupt! [ 222.465313][ T7477] netlink: 'syz.0.324': attribute type 11 has an invalid length. [ 230.676548][ T7541] random: crng reseeded on system resumption [ 233.225455][ T7549] FAULT_INJECTION: forcing a failure. [ 233.225455][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 233.429064][ T7549] CPU: 0 UID: 0 PID: 7549 Comm: Tainted: G L syzkaller #0 PREEMPT(full) [ 233.429101][ T7549] Tainted: [L]=SOFTLOCKUP [ 233.429109][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.429122][ T7549] Call Trace: [ 233.429130][ T7549] [ 233.429139][ T7549] dump_stack_lvl+0x100/0x190 [ 233.429169][ T7549] should_fail_ex.cold+0x5/0xa [ 233.429200][ T7549] should_failslab+0xc2/0x120 [ 233.429228][ T7549] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 233.429268][ T7549] ? proc_alloc_inode+0x25/0x200 [ 233.429293][ T7549] ? d_alloc_parallel+0x864/0x14e0 [ 233.429319][ T7549] ? __pfx_proc_alloc_inode+0x10/0x10 [ 233.429347][ T7549] proc_alloc_inode+0x25/0x200 [ 233.429380][ T7549] alloc_inode+0x68/0x250 [ 233.429424][ T7549] new_inode+0x22/0x1c0 [ 233.429466][ T7549] proc_get_inode+0x1d/0x780 [ 233.429496][ T7549] proc_lookup_de+0x236/0x360 [ 233.429530][ T7549] proc_tgid_net_lookup+0x61/0x90 [ 233.429565][ T7549] lookup_open.isra.0+0x631/0x11b0 [ 233.429595][ T7549] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 233.429635][ T7549] ? lookup_fast+0x2da/0x600 [ 233.429661][ T7549] path_openat+0xa98/0x31a0 [ 233.429701][ T7549] ? __pfx_path_openat+0x10/0x10 [ 233.429749][ T7549] do_file_open+0x20e/0x430 [ 233.429781][ T7549] ? __pfx_do_file_open+0x10/0x10 [ 233.429821][ T7549] ? __pfx_kfree_link+0x10/0x10 [ 233.429853][ T7549] ? alloc_fd+0x476/0x790 [ 233.429884][ T7549] ? do_getname+0x191/0x390 [ 233.429921][ T7549] do_sys_openat2+0x10d/0x1e0 [ 233.429959][ T7549] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.430006][ T7549] __x64_sys_openat+0x12d/0x210 [ 233.430044][ T7549] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.430086][ T7549] ? rcu_is_watching+0x12/0xc0 [ 233.430119][ T7549] do_syscall_64+0x10b/0xf80 [ 233.430148][ T7549] ? clear_bhb_loop+0x40/0x90 [ 233.430177][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.430201][ T7549] RIP: 0033:0x7f05b559cdd9 [ 233.430221][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.430244][ T7549] RSP: 002b:00007f05b37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.430267][ T7549] RAX: ffffffffffffffda RBX: 00007f05b5815fa0 RCX: 00007f05b559cdd9 [ 233.430283][ T7549] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 233.430297][ T7549] RBP: 00007f05b5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 233.430311][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.430325][ T7549] R13: 00007f05b5816038 R14: 00007f05b5815fa0 R15: 00007ffe7c41f738 [ 233.430357][ T7549] [ 234.727747][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 235.261395][ T7567] futex_wake_op: syz.0.340 tries to shift op by -2048; fix this program [ 238.202537][ T7586] zram: Cannot change disksize for initialized device [ 243.525809][ T7626] syz.2.356(7626): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 244.394097][ T29] audit: type=1800 audit(4294967385.100:5): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.364" name="dummy_udc" dev="gadgetfs" ino=7005 res=0 errno=0 [ 244.828070][ T7642] zram: Cannot change disksize for initialized device [ 247.649032][ T7670] futex_wake_op: syz.1.366 tries to shift op by -2048; fix this program [ 248.574242][ T7683] futex_wake_op: syz.2.367 tries to shift op by -2048; fix this program [ 250.573851][ T7705] FAULT_INJECTION: forcing a failure. [ 250.573851][ T7705] name failslab, interval 1, probability 0, space 0, times 0 [ 250.711277][ T7705] CPU: 0 UID: 0 PID: 7705 Comm: syz.2.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.711314][ T7705] Tainted: [L]=SOFTLOCKUP [ 250.711321][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.711348][ T7705] Call Trace: [ 250.711356][ T7705] [ 250.711364][ T7705] dump_stack_lvl+0x100/0x190 [ 250.711395][ T7705] should_fail_ex.cold+0x5/0xa [ 250.711423][ T7705] ? iovec_from_user+0x8d/0x140 [ 250.711449][ T7705] should_failslab+0xc2/0x120 [ 250.711477][ T7705] __kmalloc_noprof+0xe0/0x850 [ 250.711513][ T7705] ? find_held_lock+0x2b/0x80 [ 250.711543][ T7705] ? is_bpf_text_address+0x8a/0x1a0 [ 250.711579][ T7705] iovec_from_user+0x8d/0x140 [ 250.711604][ T7705] __import_iovec+0x81/0x640 [ 250.711624][ T7705] ? __might_fault+0xc5/0x140 [ 250.711665][ T7705] import_iovec+0x82/0xb0 [ 250.711689][ T7705] copy_msghdr_from_user+0x2ed/0x4f0 [ 250.711722][ T7705] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 250.711758][ T7705] ? __pfx__kstrtoull+0x10/0x10 [ 250.711791][ T7705] ___sys_sendmsg+0x106/0x1e0 [ 250.711823][ T7705] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.711867][ T7705] ? find_held_lock+0x2b/0x80 [ 250.711913][ T7705] __sys_sendmmsg+0x205/0x430 [ 250.711939][ T7705] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.711970][ T7705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.712011][ T7705] ? fput+0x79/0x100 [ 250.712042][ T7705] ? ksys_write+0x1ac/0x250 [ 250.712067][ T7705] ? __pfx_ksys_write+0x10/0x10 [ 250.712097][ T7705] __x64_sys_sendmmsg+0x9c/0x100 [ 250.712119][ T7705] ? lockdep_hardirqs_on+0x78/0x100 [ 250.712146][ T7705] do_syscall_64+0x10b/0xf80 [ 250.712173][ T7705] ? clear_bhb_loop+0x40/0x90 [ 250.712200][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.712224][ T7705] RIP: 0033:0x7f642fd9cdd9 [ 250.712242][ T7705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.712276][ T7705] RSP: 002b:00007f6430c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.712297][ T7705] RAX: ffffffffffffffda RBX: 00007f6430015fa0 RCX: 00007f642fd9cdd9 [ 250.712315][ T7705] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.712328][ T7705] RBP: 00007f6430c21090 R08: 0000000000000000 R09: 0000000000000000 [ 250.712341][ T7705] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 250.712354][ T7705] R13: 00007f6430016038 R14: 00007f6430015fa0 R15: 00007fff2232ef88 [ 250.712382][ T7705] [ 252.096108][ T7716] futex_wake_op: syz.2.374 tries to shift op by -2048; fix this program [ 256.013639][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.023107][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.910872][ T7744] futex_wake_op: syz.3.379 tries to shift op by -2048; fix this program [ 267.193580][ T7833] syz.3.394 (7833) used greatest stack depth: 19504 bytes left [ 267.324971][ T7832] Process accounting resumed [ 269.441140][ T7873] netlink: 'syz.2.402': attribute type 3 has an invalid length. [ 270.142504][ T7879] random: crng reseeded on system resumption [ 271.353214][ T7894] ================================================================== [ 271.361339][ T7894] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 271.369446][ T7894] Read of size 8 at addr ffff888035eeb800 by task syz.3.405/7894 [ 271.377174][ T7894] [ 271.379510][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.3.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.379543][ T7894] Tainted: [L]=SOFTLOCKUP [ 271.379551][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.379565][ T7894] Call Trace: [ 271.379573][ T7894] [ 271.379583][ T7894] dump_stack_lvl+0x100/0x190 [ 271.379608][ T7894] print_report+0x13d/0x4b0 [ 271.379641][ T7894] ? __virt_addr_valid+0x239/0x430 [ 271.379679][ T7894] ? cache_seq_start_rcu+0x3fe/0x420 [ 271.379710][ T7894] kasan_report+0xdf/0x1d0 [ 271.379736][ T7894] ? cache_seq_start_rcu+0x3fe/0x420 [ 271.379770][ T7894] cache_seq_start_rcu+0x3fe/0x420 [ 271.379805][ T7894] seq_read_iter+0x2c1/0x1270 [ 271.379835][ T7894] seq_read+0x33b/0x4c0 [ 271.379857][ T7894] ? __pfx_seq_read+0x10/0x10 [ 271.379889][ T7894] ? __pfx_seq_read+0x10/0x10 [ 271.379911][ T7894] proc_reg_read+0x240/0x330 [ 271.379937][ T7894] ? __pfx_proc_reg_read+0x10/0x10 [ 271.379978][ T7894] vfs_read+0x1e4/0xb30 [ 271.380005][ T7894] ? __pfx_vfs_read+0x10/0x10 [ 271.380027][ T7894] ? find_held_lock+0x2b/0x80 [ 271.380057][ T7894] ? __fget_files+0x215/0x3d0 [ 271.380081][ T7894] ? __fget_files+0x215/0x3d0 [ 271.380108][ T7894] ? __fget_files+0x21f/0x3d0 [ 271.380137][ T7894] __x64_sys_pread64+0x1eb/0x250 [ 271.380164][ T7894] ? __pfx___x64_sys_pread64+0x10/0x10 [ 271.380192][ T7894] ? rcu_is_watching+0x12/0xc0 [ 271.380222][ T7894] do_syscall_64+0x10b/0xf80 [ 271.380249][ T7894] ? clear_bhb_loop+0x40/0x90 [ 271.380275][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.380298][ T7894] RIP: 0033:0x7f368039cdd9 [ 271.380316][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.380338][ T7894] RSP: 002b:00007f36811d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 271.380359][ T7894] RAX: ffffffffffffffda RBX: 00007f3680616090 RCX: 00007f368039cdd9 [ 271.380379][ T7894] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000003 [ 271.380397][ T7894] RBP: 00007f3680432d69 R08: 0000000000000000 R09: 0000000000000000 [ 271.380412][ T7894] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 271.380425][ T7894] R13: 00007f3680616128 R14: 00007f3680616090 R15: 00007ffcccbe5dc8 [ 271.380448][ T7894] [ 271.380455][ T7894] [ 271.609705][ T7894] Allocated by task 5625: [ 271.614049][ T7894] kasan_save_stack+0x30/0x50 [ 271.618740][ T7894] kasan_save_track+0x14/0x30 [ 271.623439][ T7894] __kasan_kmalloc+0xaa/0xb0 [ 271.628042][ T7894] __kmalloc_noprof+0x301/0x850 [ 271.632949][ T7894] cache_create_net+0xa2/0x1f0 [ 271.637738][ T7894] ip_map_cache_create+0x60/0x130 [ 271.642871][ T7894] sunrpc_init_net+0x55/0x190 [ 271.647560][ T7894] ops_init+0x1e2/0x5f0 [ 271.651814][ T7894] setup_net+0x118/0x3a0 [ 271.656077][ T7894] copy_net_ns+0x46f/0x7c0 [ 271.660523][ T7894] create_new_namespaces+0x3ea/0xac0 [ 271.665877][ T7894] unshare_nsproxy_namespaces+0xf2/0x220 [ 271.671565][ T7894] ksys_unshare+0x438/0xab0 [ 271.676099][ T7894] __x64_sys_unshare+0x31/0x40 [ 271.680894][ T7894] do_syscall_64+0x10b/0xf80 [ 271.685506][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.691418][ T7894] [ 271.693749][ T7894] The buggy address belongs to the object at ffff888035eeb000 [ 271.693749][ T7894] which belongs to the cache kmalloc-2k of size 2048 [ 271.707814][ T7894] The buggy address is located 0 bytes to the right of [ 271.707814][ T7894] allocated 2048-byte region [ffff888035eeb000, ffff888035eeb800) [ 271.722425][ T7894] [ 271.724776][ T7894] The buggy address belongs to the physical page: [ 271.731194][ T7894] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35ee8 [ 271.739973][ T7894] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 271.748479][ T7894] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 271.756063][ T7894] page_type: f5(slab) [ 271.760059][ T7894] raw: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 271.768662][ T7894] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 271.777258][ T7894] head: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 271.786007][ T7894] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 271.794715][ T7894] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 271.803401][ T7894] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 271.812085][ T7894] page dumped because: kasan: bad access detected [ 271.818543][ T7894] page_owner tracks the page as allocated [ 271.824280][ T7894] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5632, tgid 5632 (syz-executor), ts 98902009580, free_ts 98606666462 [ 271.845659][ T7894] post_alloc_hook+0x153/0x170 [ 271.850484][ T7894] get_page_from_freelist+0x11a6/0x33b0 [ 271.856056][ T7894] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 271.861974][ T7894] new_slab+0xa6/0x6c0 [ 271.866090][ T7894] refill_objects+0x277/0x420 [ 271.870793][ T7894] __pcs_replace_empty_main+0x375/0x650 [ 271.876364][ T7894] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 271.882901][ T7894] kmemdup_noprof+0x29/0x60 [ 271.887435][ T7894] sctp_sysctl_net_register+0x30/0x200 [ 271.892929][ T7894] sctp_defaults_init+0x6d2/0xd90 [ 271.897997][ T7894] ops_init+0x1e2/0x5f0 [ 271.902169][ T7894] setup_net+0x118/0x3a0 [ 271.906445][ T7894] copy_net_ns+0x46f/0x7c0 [ 271.910892][ T7894] create_new_namespaces+0x3ea/0xac0 [ 271.916291][ T7894] unshare_nsproxy_namespaces+0xf2/0x220 [ 271.921949][ T7894] ksys_unshare+0x438/0xab0 [ 271.926477][ T7894] page last free pid 5668 tgid 5668 stack trace: [ 271.932804][ T7894] __free_frozen_pages+0x747/0x1040 [ 271.938043][ T7894] qlist_free_all+0x47/0xf0 [ 271.942571][ T7894] kasan_quarantine_reduce+0x1a0/0x1f0 [ 271.948055][ T7894] __kasan_slab_alloc+0x69/0x90 [ 271.952915][ T7894] kmem_cache_alloc_noprof+0x241/0x6e0 [ 271.958408][ T7894] __anon_vma_prepare+0xae/0x5e0 [ 271.963370][ T7894] __vmf_anon_prepare+0x11f/0x250 [ 271.968412][ T7894] do_anonymous_page+0x536/0x2050 [ 271.973459][ T7894] __handle_mm_fault+0x1d2c/0x2a00 [ 271.978592][ T7894] handle_mm_fault+0x36d/0xa20 [ 271.983399][ T7894] do_user_addr_fault+0x5a3/0x12f0 [ 271.988531][ T7894] exc_page_fault+0x6f/0xd0 [ 271.993057][ T7894] asm_exc_page_fault+0x26/0x30 [ 271.998181][ T7894] [ 272.000504][ T7894] Memory state around the buggy address: [ 272.006141][ T7894] ffff888035eeb700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 272.014213][ T7894] ffff888035eeb780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 272.022283][ T7894] >ffff888035eeb800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.030348][ T7894] ^ [ 272.034422][ T7894] ffff888035eeb880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.042500][ T7894] ffff888035eeb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 272.050562][ T7894] ================================================================== [ 273.739737][ T7894] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 273.747056][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.3.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.757848][ T7894] Tainted: [L]=SOFTLOCKUP [ 273.762184][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.772249][ T7894] Call Trace: [ 273.775535][ T7894] [ 273.778822][ T7894] dump_stack_lvl+0x100/0x190 [ 273.783545][ T7894] vpanic+0x552/0x970 [ 273.787558][ T7894] ? __pfx_vpanic+0x10/0x10 [ 273.792072][ T7894] ? cache_seq_start_rcu+0x3fe/0x420 [ 273.797380][ T7894] panic+0xd1/0xe0 [ 273.801112][ T7894] ? __pfx_panic+0x10/0x10 [ 273.805557][ T7894] ? cache_seq_start_rcu+0x3fe/0x420 [ 273.810867][ T7894] ? preempt_schedule_common+0x42/0xc0 [ 273.816342][ T7894] ? check_panic_on_warn+0x1f/0x90 [ 273.821466][ T7894] check_panic_on_warn.cold+0x19/0x34 [ 273.826851][ T7894] end_report.part.0+0x3a/0x90 [ 273.831633][ T7894] kasan_report.cold+0xe/0x18 [ 273.836336][ T7894] ? cache_seq_start_rcu+0x3fe/0x420 [ 273.841650][ T7894] cache_seq_start_rcu+0x3fe/0x420 [ 273.846797][ T7894] seq_read_iter+0x2c1/0x1270 [ 273.851666][ T7894] seq_read+0x33b/0x4c0 [ 273.855844][ T7894] ? __pfx_seq_read+0x10/0x10 [ 273.860545][ T7894] ? __pfx_seq_read+0x10/0x10 [ 273.865269][ T7894] proc_reg_read+0x240/0x330 [ 273.869873][ T7894] ? __pfx_proc_reg_read+0x10/0x10 [ 273.875002][ T7894] vfs_read+0x1e4/0xb30 [ 273.879171][ T7894] ? __pfx_vfs_read+0x10/0x10 [ 273.883875][ T7894] ? find_held_lock+0x2b/0x80 [ 273.888656][ T7894] ? __fget_files+0x215/0x3d0 [ 273.893348][ T7894] ? __fget_files+0x215/0x3d0 [ 273.898047][ T7894] ? __fget_files+0x21f/0x3d0 [ 273.902764][ T7894] __x64_sys_pread64+0x1eb/0x250 [ 273.908520][ T7894] ? __pfx___x64_sys_pread64+0x10/0x10 [ 273.913998][ T7894] ? rcu_is_watching+0x12/0xc0 [ 273.918811][ T7894] do_syscall_64+0x10b/0xf80 [ 273.923429][ T7894] ? clear_bhb_loop+0x40/0x90 [ 273.928121][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.934026][ T7894] RIP: 0033:0x7f368039cdd9 [ 273.938448][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.958065][ T7894] RSP: 002b:00007f36811d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 273.966493][ T7894] RAX: ffffffffffffffda RBX: 00007f3680616090 RCX: 00007f368039cdd9 [ 273.974475][ T7894] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000003 [ 273.982453][ T7894] RBP: 00007f3680432d69 R08: 0000000000000000 R09: 0000000000000000 [ 273.990463][ T7894] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 273.998443][ T7894] R13: 00007f3680616128 R14: 00007f3680616090 R15: 00007ffcccbe5dc8 [ 274.006440][ T7894] [ 274.009541][ T7894] Kernel Offset: disabled [ 274.013907][ T7894] Rebooting in 86400 seconds..