last executing test programs: 14.87497784s ago: executing program 3 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0x200001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040804) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x801) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r4, 0xc080aebe, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0001000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r7, &(0x7f0000001600)={0x0, 0x12, &(0x7f00000015c0)={&(0x7f0000000600)={0x38, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000129bd7000fedbdf25010000004400018008000200040000000800020001010000080001000400000008000100ff00ff010000000000000000080002000700000008000200060000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRES8, @ANYRESDEC=r4, @ANYRESOCT=r4], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) 14.014663988s ago: executing program 3 (id=492): clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) clone$auto(0x4, 0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unlinkat$auto(r0, 0x0, 0x1) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) r2 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) close_range$auto(0x2, r2, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x80000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) 12.967438433s ago: executing program 1 (id=494): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x2) madvise$auto(0x5, 0x4, 0xc) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x448402, 0x0) r2 = socket(0x2, 0x5, 0x0) getsockname$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, &(0x7f0000000100)=0x100005) read$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x81, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000e80)=""/206, 0xce) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x10000, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004045}, 0x20000004) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) 10.286745761s ago: executing program 3 (id=497): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 9.553123825s ago: executing program 1 (id=498): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 9.426593063s ago: executing program 2 (id=499): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/kernel/tainted\x00', 0xc2381, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/discard_max_bytes\x00', 0x10b142, 0x0) write$auto(r0, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/discard_max_bytes\x00', 0x9) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x2cb8, 0x401, 0x300000000000) r1 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) inotify_init1$auto(0x7fff) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000080)="351547") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r4, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) lseek$auto(r2, 0x7, 0x401) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight_device\x00', 0xca401, 0x0) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) madvise$auto(0x0, 0x2003f0, 0x17) fallocate$auto(r1, 0x0, 0x8, 0x1000b) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r1, &(0x7f00000002c0)=""/153, 0x99) 9.370862288s ago: executing program 0 (id=500): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001340)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001580), r0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f0000001240)=':,\x00', 0x0, 0x9000000, &(0x7f0000001280)={0x4, 0xac, 0xfffffffffffffffb, 0x1, 0xee00, 0x0, 0x7, 0x100, 0xa, 0x8001, 0x2, 0x0, {0x4, 0x7}, {0x3, 0x3274925}, {0x1, 0x4}, {0x180000000000000, 0x400}, 0x10001, 0x3, 0x8, 0x727, 0x33, 0x8, 0xfffffffd, 0xfffffffffffffffd, 0xfffffffe, 0x401, 0x3, 0xc58, [0x5, 0xa71d, 0x7df5, 0x6, 0x9, 0x0, 0x8000, 0x6, 0x81]}) r8 = wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) shmctl$auto_IPC_INFO(0x2, 0x3, &(0x7f0000001580)={{0x8, 0x0, r7, 0x7bf, 0x19, 0x7ff, 0x8001}, 0x3, 0x1, 0x3, 0x4, @inferred=r8, @raw=0x101, 0xe641, 0x0, 0x0, &(0x7f0000001540)="65c8e2dc93f86ac11fb36326c1fbced2a465fc8969632a9a94465951ed56a5d6ef64ccdae2420078f6c4cdcf"}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f00000015c0)={0x460, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [@nested={0x4, 0x157}, @nested={0x24, 0x8c, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x77}, @typed={0x6, 0xc6, 0x0, 0x0, @str='[\x00'}, @typed={0xc, 0x12a, 0x0, 0x0, @u64=0x6}]}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x2}, @nested={0x20, 0x5b, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0xcb8}, @generic]}, @typed={0x4, 0xa8}, @generic]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3e2, 0x2, 0x0, 0x1, [@nested={0x95, 0x4d, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @uid=0xee00}, @generic="35e778354a4cbbe66767af46447c2a916be188961f60217bca921fb75729764a6c7c3c120f4d577e9ef3d031944d9c536edb68f32c9ffe8b406f97b09c0a3c210ab31952e376889c028b0295537be8b7696fb76083a2a1994cbfc50516f0434c90dca8ab94bd1b8fb9087388090224ffade4e1d4361349d2a9c05b02ae9d12f990d878ec8207ea419f"]}, @generic="55d67aa9eb50baa8b549389e99869b7ccf334d1f0593450b7551ef04576384c88763ebbe06254ae6fc75", @nested={0x28f, 0x92, 0x0, 0x1, [@typed={0x101, 0x156, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x22}, @generic="97068e7d5cad19da5fb2a0d6c5dc42c5359eee09e3f7dd215547d2e5ef6b011eee641e2bedad396d9182e5a88934df667f3adc8ba9d6d60f7a42d5d0afd2e7490eee1ed6f428d3cb1325bb0b2a78e24cf3549c36a298a80a0e056de075d7489d642a57dfdd3b0330a2e4428582baddc22ed661f0defa944000851fe9a1414066a8ae6031a216728e4d3b09701f0b9f3e4215df76adf7dc2a15de3991fc4c26f03b8a0dcdd661e1482e8dc4e1ac1300ed466b8ec79917a934834912b7c6548150df9e859cb3509639cc", @generic="cbf10c685484165bf14589d7ab869dbd02a585daca2674a5c6a484130cc079e8b133e75558f3ad1d7802c8252112c9630eb13c5a8aa557f995d2eb2e5a64d9aa5c45496c4340f2df3704636313fd4b277242ab751255a3814fef6c2e105a9f366ab8f26409ad6b4376d4a9aefa9d46a60ac80177c9e31814aed29fcdb7895d4bc2f0bfe444ddce9b7951295ca992dcdc518e55e71eaeed49daae", @typed={0x8, 0x15a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x9}, @generic, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @generic="48932c880e4a69a2b993548a860cb8d041b8cfb5941b0bd7f25a6fd03e299ee697f5cc93236f2d97", @generic="e67e66", @generic="50800a78bd77ec33e28a7c42d257e4ef70059c3f2bbd4a1af7d79c914232a119552bbe460eda5ee650aa17e9592f3e3a1f7b9bbbf3c095851139de2855dcb69b7136fcd4ad5ebe64dbf897f79a68845e056ab4c048de94af8f"]}]}, 0x460}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r9, 0xc0045627, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 8.689012349s ago: executing program 2 (id=501): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x4, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x24048084) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) 7.957008172s ago: executing program 0 (id=502): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0xfffffffffffffff9, 0x2000c, 0x2, 0xa818, 0x40000000000a5, 0x5) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r2, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x4048010) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r5, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0xc) memfd_create$auto(0x0, 0xe) write$auto(r4, &(0x7f0000000280)='\x90\x96\xd1\x00\xe4\xd2\xab1\xc7\xe8\xad\x83\xb7=\x89Z;\xa3\f\x13A\x1c\xdc\x9a\x89\x98\x12\xb4\xbb\'\x1eu@\xe1=A\xbe\xaaa\xabA\xea\x147\xa6\xb2\x1d,\xafD\xcd\xa1\x8c\xd2\xc1R\xeb\x01\x86\xf8\x92ys&\xcf\x83\b&s\x04\x9b\xd6\xe9\xb0\x82_\xd2\xb9\x8a\xcd\x87jY\x03\xe7\xedW\x17<\xca\xef\xc2\x97\xdb\x91Pk\xd3\x01!\xba\x04\x951B\xa1\xc7ue&vU\xbc\xcesG\xea\x01\xd1\x8c\xca\xb3{\x1c7^gk&\x85\x95k4\xc3\xf4\x1fC\xceN\xcc\x16@\x1f\x0e\r', 0x80000000) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 7.464569136s ago: executing program 2 (id=503): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) mmap$auto(0xfffffffffffffff9, 0x2000c, 0x2, 0xa818, 0x40000000000a5, 0x5) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) lseek$auto(r2, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x4048010) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff024}}) write$auto(r4, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0xc) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 6.295734065s ago: executing program 0 (id=504): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nullb0/queue/virt_boundary_mask\x00', 0x101000, 0x0) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 5.909705322s ago: executing program 2 (id=505): clone$auto(0x6fc, 0x4dbb2, 0x0, 0x0, 0x4000c1a) clone$auto(0x4, 0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unlinkat$auto(r0, 0x0, 0x1) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) r2 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) close_range$auto(0x2, r2, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x80000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) 5.174591889s ago: executing program 3 (id=506): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x24084005) listen$auto(0x3, 0x81) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x26, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x40000, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d8a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYRESHEX], 0xd4}, 0x1, 0x0, 0x0, 0x24000050}, 0x4080) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x1, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x4007, 0x8000}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0x8000000, 0x2020009, 0x1ff, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x8000001ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(r2, 0x4008af22, r1) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) socket(0x2, 0x2, 0x0) 4.866542824s ago: executing program 1 (id=507): mmap$auto(0x2, 0x400008, 0xdf, 0x18, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000380), 0x10d040, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = gettid() tkill$auto(r1, 0x7) io_uring_setup$auto(0x401, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x2) 4.098398009s ago: executing program 0 (id=508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 3.980707771s ago: executing program 1 (id=509): mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaea3, 0xffffffffffffffff) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, 0x0, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) 3.614184588s ago: executing program 2 (id=510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7, 0x68, 0x5, 0x7c002fa6, [0x2, 0x3, 0x7, 0x6, 0x5, 0x8]}) getsockopt$auto_SO_REUSEPORT(r2, 0x3, 0xf, 0x0, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event2\x00', 0x40002, 0x0) ioctl$auto_EVIOCREVOKE(r3, 0x40044591, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='P^\x00', 0x1) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, r0, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) 2.296738116s ago: executing program 3 (id=511): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x8c1a2, 0x0) socket(0x25, 0x5, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x4611, r0) r1 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x94, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_VENDOR_DATA={0x70, 0x1f, "4867d901dacc02eee1ab47506566b7c229d22cc8a7fbdfcfd9bd6028aa45e54fa80dca082e29c1e5b387677a7a5ae38f64b5edda851d2e0632b3268a8713d048450c51ae49a3cab3b0434f170ac98a1d4b2af52a1318bc7b75e97377c1719dc4396b8cd427aebea5bd8b9ef8"}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x44110}, 0x2400c000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000004c0a15770d3c8624268adb31474d65fd988d4ed5775c3cb2e680705a7f66bc6a9dbb2170a54e3795e4114c8b5ac23f458e70273f2135e1529c53db84b52da477735b42e03aa05b30e5d8d17a3aefa82db522bd87c545de0af4f8a753a6b6c28d8f77bfecd10719678e1453a56039ce6fbfce53eeb63f2ef49cc14fe9be963bde73ce595a15b14d11462800"/157, @ANYRES16=r2, @ANYBLOB="00042cbd7000fbdbdf250200000008000400080000000e001400255c2723292626252a28000005000f00030000000d0002002f6465762f66623000000000060002002b2f0000050010000100000005000f000900"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0xc044) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x3a, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) fsopen$auto(0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r9 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="0000001400000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) close_range$auto(0x2, 0x8000, 0x0) 1.820104025s ago: executing program 0 (id=512): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 1.487599352s ago: executing program 1 (id=513): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20005, 0x7fffffff, 0xeb1, r1, 0x7ffe) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xffffffffffffffc0, 0x800000000006, 0x9b72, 0x2, 0x8006) socket(0xa, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, 0x0, 0x9, 0x90) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r5, r4, 0x0, 0x10000) close_range$auto(0x2, r3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 603.801873ms ago: executing program 2 (id=514): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 332.437316ms ago: executing program 1 (id=515): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 143.890622ms ago: executing program 3 (id=516): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r0, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x24}}, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x8000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 0s ago: executing program 0 (id=517): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/mdio_bus/drivers/Microchip LAN937x TX/bind\x00', 0x4a000, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x5, 0x8c68) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xc}, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty56\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)={0x7, 0x3e, 0x80, @raw=0x9}}) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r4, 0x6, &(0x7f00000001c0)="46a03e98c00d5dd3b483d3") r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r6, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r1, 0xd0, 0x800000e4, 0x0, 0x569) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 72.452058][ T5808] cgroup: Unknown subsys name 'net' [ 72.579023][ T5808] cgroup: Unknown subsys name 'cpuset' [ 72.587899][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.993263][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.735410][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.744851][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.753071][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.762211][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.762255][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.770754][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.785794][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.786320][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.794150][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.802035][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.809186][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.816646][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.829476][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.830017][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.844793][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.853225][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.854949][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.868647][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.878253][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.885942][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.403349][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 76.473899][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 76.546962][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 76.566482][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 76.678078][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.686406][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.693972][ T5820] bridge_slave_0: entered allmulticast mode [ 76.701943][ T5820] bridge_slave_0: entered promiscuous mode [ 76.733808][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.741608][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.749366][ T5820] bridge_slave_1: entered allmulticast mode [ 76.756853][ T5820] bridge_slave_1: entered promiscuous mode [ 76.828485][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.836536][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.844034][ T5821] bridge_slave_0: entered allmulticast mode [ 76.851600][ T5821] bridge_slave_0: entered promiscuous mode [ 76.882832][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.895000][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.904575][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.912275][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.920341][ T5821] bridge_slave_1: entered allmulticast mode [ 76.927697][ T5821] bridge_slave_1: entered promiscuous mode [ 76.948326][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.955986][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.963624][ T5819] bridge_slave_0: entered allmulticast mode [ 76.971307][ T5819] bridge_slave_0: entered promiscuous mode [ 77.000656][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.008319][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.017627][ T5822] bridge_slave_0: entered allmulticast mode [ 77.025092][ T5822] bridge_slave_0: entered promiscuous mode [ 77.032499][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.040600][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.048882][ T5819] bridge_slave_1: entered allmulticast mode [ 77.057068][ T5819] bridge_slave_1: entered promiscuous mode [ 77.087882][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.095440][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.104631][ T5822] bridge_slave_1: entered allmulticast mode [ 77.111910][ T5822] bridge_slave_1: entered promiscuous mode [ 77.131885][ T5820] team0: Port device team_slave_0 added [ 77.141138][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.173980][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.187425][ T5820] team0: Port device team_slave_1 added [ 77.206467][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.223029][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.254441][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.295723][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.319170][ T5821] team0: Port device team_slave_0 added [ 77.327473][ T5819] team0: Port device team_slave_0 added [ 77.334140][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.342002][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.368999][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.396418][ T5821] team0: Port device team_slave_1 added [ 77.405983][ T5819] team0: Port device team_slave_1 added [ 77.412686][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.420663][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.448338][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.503352][ T5822] team0: Port device team_slave_0 added [ 77.535194][ T5822] team0: Port device team_slave_1 added [ 77.542194][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.553004][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.582408][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.607937][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.615989][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.645147][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.669105][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.678244][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.710339][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.738060][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.745703][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.775739][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.807445][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.816235][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.846254][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.866737][ T51] Bluetooth: hci2: command tx timeout [ 77.874415][ T5820] hsr_slave_0: entered promiscuous mode [ 77.881429][ T5820] hsr_slave_1: entered promiscuous mode [ 77.911793][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.919385][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.945726][ T51] Bluetooth: hci0: command tx timeout [ 77.948723][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.953158][ T5825] Bluetooth: hci3: command tx timeout [ 77.963898][ T5828] Bluetooth: hci1: command tx timeout [ 78.051972][ T5821] hsr_slave_0: entered promiscuous mode [ 78.058556][ T5821] hsr_slave_1: entered promiscuous mode [ 78.064833][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 78.072227][ T5821] Cannot create hsr debugfs directory [ 78.092752][ T5822] hsr_slave_0: entered promiscuous mode [ 78.099565][ T5822] hsr_slave_1: entered promiscuous mode [ 78.106528][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 78.114527][ T5822] Cannot create hsr debugfs directory [ 78.148059][ T5819] hsr_slave_0: entered promiscuous mode [ 78.154490][ T5819] hsr_slave_1: entered promiscuous mode [ 78.161053][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 78.167098][ T5819] Cannot create hsr debugfs directory [ 78.620114][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.638410][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.651357][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.673213][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.727579][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.741389][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.762929][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.784783][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.874653][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.889986][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.902059][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.914009][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.024661][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.042101][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.055068][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.075191][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.111806][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.173042][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.207876][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.215275][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.239114][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.247168][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.296777][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.338222][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.357890][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.382822][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.391069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.421573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.429029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.447420][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.465190][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.500126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.508052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.531347][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.539006][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.636730][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.663540][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.671144][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.753230][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.761184][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.923576][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.947091][ T5828] Bluetooth: hci2: command tx timeout [ 80.024277][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.028049][ T5828] Bluetooth: hci1: command tx timeout [ 80.033403][ T51] Bluetooth: hci0: command tx timeout [ 80.037965][ T5828] Bluetooth: hci3: command tx timeout [ 80.101317][ T5820] veth0_vlan: entered promiscuous mode [ 80.128973][ T5820] veth1_vlan: entered promiscuous mode [ 80.242733][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.253562][ T5820] veth0_macvtap: entered promiscuous mode [ 80.275878][ T5821] veth0_vlan: entered promiscuous mode [ 80.292039][ T5820] veth1_macvtap: entered promiscuous mode [ 80.315308][ T5821] veth1_vlan: entered promiscuous mode [ 80.349925][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.371250][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.384845][ T5822] veth0_vlan: entered promiscuous mode [ 80.403883][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.420305][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.440266][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.450516][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.464405][ T5822] veth1_vlan: entered promiscuous mode [ 80.477054][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.559263][ T5821] veth0_macvtap: entered promiscuous mode [ 80.602323][ T5821] veth1_macvtap: entered promiscuous mode [ 80.632783][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.638724][ T5819] veth0_vlan: entered promiscuous mode [ 80.642132][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.660072][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.672902][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.720237][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734421][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.758877][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.768721][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.779033][ T5819] veth1_vlan: entered promiscuous mode [ 80.787106][ T5822] veth0_macvtap: entered promiscuous mode [ 80.797095][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.805070][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.827973][ T5822] veth1_macvtap: entered promiscuous mode [ 80.923879][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.932898][ T5819] veth0_macvtap: entered promiscuous mode [ 80.940270][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.949801][ T5819] veth1_macvtap: entered promiscuous mode [ 80.971722][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.991065][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.995966][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.029346][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.039052][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053562][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.088858][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099043][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.120312][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.158883][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.184476][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.223636][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.247776][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.266760][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.270030][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.274614][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.357994][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.425138][ T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.434094][ T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.457247][ T5909] pim6reg: entered allmulticast mode [ 81.668886][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.695595][ T5914] Zero length message leads to an empty skb [ 81.779259][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.976300][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.984198][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.025795][ T51] Bluetooth: hci2: command tx timeout [ 82.107233][ T5825] Bluetooth: hci1: command tx timeout [ 82.110424][ T5828] Bluetooth: hci0: command tx timeout [ 82.113025][ T51] Bluetooth: hci3: command tx timeout [ 82.164279][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.920012][ T51] Bluetooth: hci0: Malformed LE Event: 0x0b [ 84.115542][ T51] Bluetooth: hci2: command tx timeout [ 84.185963][ T51] Bluetooth: hci0: command tx timeout [ 84.191411][ T51] Bluetooth: hci3: command tx timeout [ 84.192388][ T5828] Bluetooth: hci1: command tx timeout [ 85.199068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.906355][ T5989] pim6reg: entered allmulticast mode [ 85.964037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 86.625178][ T5997] smpboot: CPU 1 is now offline [ 86.793939][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 86.908799][ T6002] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 86.927407][ T9] cfg80211: failed to load regulatory.db [ 87.167258][ T6016] tipc: Started in network mode [ 87.296753][ T6016] tipc: Node identity ee00, cluster identity 4711 [ 87.435643][ T6016] tipc: Node number set to 60928 [ 87.507350][ T6021] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 89.199268][ T6056] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 89.375299][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 89.452041][ T6061] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 89.482634][ T6062] pim6reg: entered allmulticast mode [ 89.546966][ T6052] smpboot: CPU 1 is now offline [ 90.806883][ T30] audit: type=1800 audit(1772585473.233:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="discovery_nqn" dev="configfs" ino=8487 res=0 errno=0 [ 91.815888][ T5828] block nbd0: Receive control failed (result -32) [ 92.327302][ T6106] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 92.530889][ T6110] smpboot: CPU 1 is now offline [ 92.579293][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 92.652190][ T6106] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 92.796065][ T6119] FAULT_INJECTION: forcing a failure. [ 92.796065][ T6119] name failslab, interval 1, probability 0, space 0, times 1 [ 92.887219][ T30] audit: type=1800 audit(1772585475.333:3): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.29" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 92.956601][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 92.956626][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.956640][ T6119] Call Trace: [ 92.956646][ T6119] [ 92.956655][ T6119] dump_stack_lvl+0x100/0x190 [ 92.956683][ T6119] should_fail_ex.cold+0x5/0xa [ 92.956701][ T6119] should_failslab+0xc2/0x120 [ 92.956716][ T6119] __kmalloc_cache_noprof+0x7a/0x6f0 [ 92.956735][ T6119] ? kstrdup_quotable_cmdline+0x52/0x210 [ 92.956758][ T6119] ? get_cmdline+0x86/0x360 [ 92.956777][ T6119] kstrdup_quotable_cmdline+0x52/0x210 [ 92.956797][ T6119] __report_access+0x77/0x230 [ 92.956812][ T6119] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.956833][ T6119] task_work_run+0x150/0x240 [ 92.956855][ T6119] ? __pfx_task_work_run+0x10/0x10 [ 92.956875][ T6119] ? xfd_validate_state+0x129/0x190 [ 92.956899][ T6119] exit_to_user_mode_loop+0x100/0x4a0 [ 92.956922][ T6119] do_syscall_64+0x668/0xf80 [ 92.956938][ T6119] ? clear_bhb_loop+0x40/0x90 [ 92.956956][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.956971][ T6119] RIP: 0033:0x7fdefe19c799 [ 92.956984][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.956997][ T6119] RSP: 002b:00007fdeff094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 92.957012][ T6119] RAX: ffffffffffffffff RBX: 00007fdefe415fa0 RCX: 00007fdefe19c799 [ 92.957021][ T6119] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 92.957029][ T6119] RBP: 00007fdefe232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 92.957037][ T6119] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 92.957046][ T6119] R13: 00007fdefe416038 R14: 00007fdefe415fa0 R15: 00007ffdb75124c8 [ 92.957064][ T6119] [ 92.957207][ T6119] ptrace attach of "./syz-executor exec"[5822] was attempted by "(null)"[6119] [ 93.693095][ T6129] bridge_slave_1: left allmulticast mode [ 93.734925][ T6129] bridge_slave_1: left promiscuous mode [ 93.776113][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.194593][ T5828] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 95.501098][ T6159] tipc: Started in network mode [ 95.695580][ T6159] tipc: Node identity ee00, cluster identity 4711 [ 95.702286][ T6159] tipc: Node number set to 60928 [ 96.289789][ T6165] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 96.458973][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 96.565980][ T6178] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 96.737703][ T6173] smpboot: CPU 1 is now offline [ 97.272073][ T6198] kAFS: unparsable volume name [ 98.457621][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 99.576296][ T6234] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 99.863648][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.906938][ T6233] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 100.515814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.525128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.536799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.622082][ T6253] FAULT_INJECTION: forcing a failure. [ 100.622082][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 100.665916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.727012][ T6255] zero sized request [ 100.731745][ T6255] zero sized request [ 100.765582][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.1.48 Not tainted syzkaller #0 PREEMPT(full) [ 100.765617][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.765633][ T6253] Call Trace: [ 100.765641][ T6253] [ 100.765651][ T6253] dump_stack_lvl+0x100/0x190 [ 100.765697][ T6253] should_fail_ex.cold+0x5/0xa [ 100.765729][ T6253] should_failslab+0xc2/0x120 [ 100.765758][ T6253] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 100.765799][ T6253] ? seq_open+0x55/0x170 [ 100.765836][ T6253] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 100.765872][ T6253] seq_open+0x55/0x170 [ 100.765905][ T6253] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 100.765938][ T6253] single_open+0xfc/0x1d0 [ 100.765974][ T6253] tracing_trace_options_open+0xb0/0x100 [ 100.766019][ T6253] do_dentry_open+0x6d8/0x1660 [ 100.766045][ T6253] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 100.766097][ T6253] vfs_open+0x82/0x3f0 [ 100.766134][ T6253] path_openat+0x208c/0x31a0 [ 100.766173][ T6253] ? __pfx_path_openat+0x10/0x10 [ 100.766221][ T6253] do_file_open+0x20e/0x430 [ 100.766252][ T6253] ? __pfx_do_file_open+0x10/0x10 [ 100.766306][ T6253] ? alloc_fd+0x476/0x790 [ 100.766335][ T6253] ? do_getname+0x191/0x390 [ 100.766375][ T6253] do_sys_openat2+0x10d/0x1e0 [ 100.766410][ T6253] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.766441][ T6253] ? __fget_files+0x21f/0x3d0 [ 100.766469][ T6253] __x64_sys_openat+0x12d/0x210 [ 100.766499][ T6253] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.766540][ T6253] do_syscall_64+0x106/0xf80 [ 100.766563][ T6253] ? clear_bhb_loop+0x40/0x90 [ 100.766581][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.766597][ T6253] RIP: 0033:0x7fb4c839c799 [ 100.766611][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.766625][ T6253] RSP: 002b:00007fb4c9242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.766639][ T6253] RAX: ffffffffffffffda RBX: 00007fb4c8616180 RCX: 00007fb4c839c799 [ 100.766649][ T6253] RDX: 0000000000000442 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 100.766657][ T6253] RBP: 00007fb4c8432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 100.766665][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.766673][ T6253] R13: 00007fb4c8616218 R14: 00007fb4c8616180 R15: 00007ffedea36538 [ 100.766692][ T6253] [ 100.812464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.816296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.822804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.233913][ T6257] smpboot: CPU 1 is now offline [ 101.250909][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 101.307468][ T6258] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 102.377116][ T6276] tipc: Started in network mode [ 102.498946][ T6276] tipc: Node identity ee00, cluster identity 4711 [ 102.544823][ T6276] tipc: Node number set to 60928 [ 106.815942][ T6337] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.589981][ T6328] tipc: Started in network mode [ 107.681264][ T6328] tipc: Node identity ee00, cluster identity 4711 [ 107.785221][ T6328] tipc: Node number set to 60928 [ 108.468496][ T6355] HfR: entered promiscuous mode [ 108.507387][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 108.651243][ T6356] HfR: left promiscuous mode [ 110.849433][ T6377] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 111.063767][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 111.206762][ T6380] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 112.341949][ T6389] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[6389] [ 112.385618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.919410][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 114.021014][ T6421] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 116.040133][ T6446] smpboot: CPU 1 is now offline [ 116.170782][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 116.322153][ T6454] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 117.076271][ T6462] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.348627][ T6463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.693398][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 117.924465][ T6475] FAULT_INJECTION: forcing a failure. [ 117.924465][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 117.924513][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.924534][ T6475] Tainted: [L]=SOFTLOCKUP [ 117.924539][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.924548][ T6475] Call Trace: [ 117.924553][ T6475] [ 117.924559][ T6475] dump_stack_lvl+0x100/0x190 [ 117.924585][ T6475] should_fail_ex.cold+0x5/0xa [ 117.924603][ T6475] should_failslab+0xc2/0x120 [ 117.924618][ T6475] __kmalloc_cache_noprof+0x7a/0x6f0 [ 117.924636][ T6475] ? trace_pid_list_alloc+0x2fe/0x480 [ 117.924662][ T6475] trace_pid_list_alloc+0x2fe/0x480 [ 117.924685][ T6475] trace_pid_write+0x110/0x460 [ 117.924706][ T6475] ? __pfx_trace_pid_write+0x10/0x10 [ 117.924739][ T6475] event_pid_write.isra.0+0x1e4/0x800 [ 117.924762][ T6475] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 117.924790][ T6475] vfs_write+0x2aa/0x1070 [ 117.924812][ T6475] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 117.924836][ T6475] ? __pfx_vfs_write+0x10/0x10 [ 117.924856][ T6475] ? __fget_files+0x215/0x3d0 [ 117.924874][ T6475] ? __fget_files+0x21f/0x3d0 [ 117.924892][ T6475] ksys_write+0x12a/0x250 [ 117.924913][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 117.924939][ T6475] do_syscall_64+0x106/0xf80 [ 117.924956][ T6475] ? clear_bhb_loop+0x40/0x90 [ 117.924974][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.924989][ T6475] RIP: 0033:0x7fb4c839c799 [ 117.925001][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.925015][ T6475] RSP: 002b:00007fb4c9263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.925029][ T6475] RAX: ffffffffffffffda RBX: 00007fb4c8616090 RCX: 00007fb4c839c799 [ 117.925039][ T6475] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 117.925047][ T6475] RBP: 00007fb4c8432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 117.925055][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.925063][ T6475] R13: 00007fb4c8616128 R14: 00007fb4c8616090 R15: 00007ffedea36538 [ 117.925082][ T6475] [ 118.754882][ T6485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.755023][ T6485] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.918609][ T6485] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.028112][ T6485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.036144][ T6485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.088580][ T6485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.160961][ T6485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.161065][ T6485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.388163][ T6485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.434366][ T6485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.434411][ T6485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.488418][ T6485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.570984][ T6492] zswap: compressor not available [ 120.496745][ T6500] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET) [ 120.506513][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.675239][ T6500] random: crng reseeded on system resumption [ 120.747690][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.758986][ T6507] syz.2.94(6507): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 120.813865][ T6502] FAULT_INJECTION: forcing a failure. [ 120.813865][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 120.828371][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.3.92 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.828404][ T6502] Tainted: [L]=SOFTLOCKUP [ 120.828416][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.828440][ T6502] Call Trace: [ 120.828451][ T6502] [ 120.828460][ T6502] dump_stack_lvl+0x100/0x190 [ 120.828502][ T6502] should_fail_ex.cold+0x5/0xa [ 120.828522][ T6502] should_failslab+0xc2/0x120 [ 120.828539][ T6502] __kmalloc_cache_noprof+0x7a/0x6f0 [ 120.828560][ T6502] ? rose_add_loopback_node+0x16b/0x460 [ 120.828586][ T6502] rose_add_loopback_node+0x16b/0x460 [ 120.828607][ T6502] ? __pfx_rose_open+0x10/0x10 [ 120.828626][ T6502] rose_open+0x3e/0x110 [ 120.828645][ T6502] ? __pfx_rose_open+0x10/0x10 [ 120.828661][ T6502] __dev_open+0x3ad/0x960 [ 120.828678][ T6502] ? __pfx___dev_open+0x10/0x10 [ 120.828695][ T6502] ? __local_bh_enable_ip+0x9e/0x120 [ 120.828714][ T6502] __dev_change_flags+0x558/0x6f0 [ 120.828732][ T6502] ? __pfx___dev_change_flags+0x10/0x10 [ 120.828754][ T6502] netif_change_flags+0x8d/0x160 [ 120.828773][ T6502] dev_change_flags+0xba/0x250 [ 120.828793][ T6502] flags_store+0x187/0x1e0 [ 120.828816][ T6502] ? __pfx_flags_store+0x10/0x10 [ 120.829332][ T6502] ? find_held_lock+0x2b/0x80 [ 120.829347][ T6502] ? sysfs_file_kobj+0xe4/0x290 [ 120.829386][ T6502] ? sysfs_file_kobj+0xe4/0x290 [ 120.829405][ T6502] ? __pfx_flags_store+0x10/0x10 [ 120.829419][ T6502] dev_attr_store+0x58/0x80 [ 120.829444][ T6502] ? __pfx_dev_attr_store+0x10/0x10 [ 120.829469][ T6502] sysfs_kf_write+0xf2/0x150 [ 120.829503][ T6502] kernfs_fop_write_iter+0x3e0/0x5f0 [ 120.829519][ T6502] ? __pfx_sysfs_kf_write+0x10/0x10 [ 120.829539][ T6502] vfs_write+0x6ac/0x1070 [ 120.829562][ T6502] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 120.829579][ T6502] ? __pfx_vfs_write+0x10/0x10 [ 120.829613][ T6502] ksys_write+0x12a/0x250 [ 120.829634][ T6502] ? __pfx_ksys_write+0x10/0x10 [ 120.829661][ T6502] do_syscall_64+0x106/0xf80 [ 120.829678][ T6502] ? clear_bhb_loop+0x40/0x90 [ 120.829697][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.829713][ T6502] RIP: 0033:0x7f19e739c799 [ 120.829738][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.829752][ T6502] RSP: 002b:00007f19e825d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.829767][ T6502] RAX: ffffffffffffffda RBX: 00007f19e7615fa0 RCX: 00007f19e739c799 [ 120.829777][ T6502] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003 [ 120.829786][ T6502] RBP: 00007f19e7432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 120.829794][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.829803][ T6502] R13: 00007f19e7616038 R14: 00007f19e7615fa0 R15: 00007ffc9cc77e68 [ 120.829824][ T6502] [ 121.181147][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.187297][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.645689][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.401549][ T6515] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.421229][ T6512] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 122.578662][ T6500] hub 1-0:1.0: USB hub found [ 122.666681][ T6500] hub 1-0:1.0: 1 port detected [ 122.798482][ T6518] smpboot: CPU 1 is now offline [ 122.825647][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.932057][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'. [ 123.033914][ T6511] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.227649][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.233693][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.705626][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.580952][ T6535] vhci_hcd vhci_hcd.2: invalid port number 16 [ 124.617961][ T6535] vhci_hcd vhci_hcd.2: invalid port number 16 [ 124.871522][ T6540] vhci_hcd: not connected 4 [ 124.905561][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.306084][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.312133][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.785641][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.858631][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 127.936070][ T6599] netlink: 354 bytes leftover after parsing attributes in process `syz.0.110'. [ 128.056175][ T6598] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 128.181762][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 128.232144][ T6601] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 128.300529][ T6600] smpboot: CPU 1 is now offline [ 129.269830][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 129.318519][ T6617] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.852600][ T6645] process 'syz.1.119' launched './file0' with NULL argv: empty string added [ 132.349329][ T6649] mmap: syz.0.118 (6649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.007061][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.581837][ T6671] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 133.765921][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 133.818880][ T6668] smpboot: CPU 1 is now offline [ 133.856247][ T6671] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 134.556269][ T6685] kafs: addr_prefs: Invalid Command [ 135.120943][ T6686] syz.0.126 (6686) used greatest stack depth: 19672 bytes left [ 135.669707][ T6700] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 135.763815][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 135.812744][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 135.823785][ T6700] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 136.394365][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 136.403442][ T6719] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 137.090390][ T51] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 138.548518][ T6758] smpboot: CPU 1 is now offline [ 138.777418][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 138.816884][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 138.856082][ T6759] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 138.866962][ T6775] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 139.697403][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'. [ 139.755935][ T6783] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 140.023067][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 140.092060][ T6789] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 141.232542][ T6806] block nbd7: not configured, cannot reconfigure [ 144.239976][ T6832] zswap: compressor not available [ 144.297365][ T6833] Setting dangerous option i915.mitigations - tainting kernel [ 144.478147][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 144.601393][ T6840] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 146.518402][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'. [ 146.576606][ T6865] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 147.989449][ T91] Process accounting resumed [ 149.508408][ T6917] netlink: 330 bytes leftover after parsing attributes in process `syz.2.168'. [ 151.145824][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 151.227361][ T6927] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 153.121253][ T6948] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 153.527657][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 153.537004][ T6948] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 153.549778][ T6954] netlink: 'syz.1.176': attribute type 23 has an invalid length. [ 156.994625][ T6990] zram: Added device: zram1 [ 158.558075][ T7017] zswap: compressor not available [ 158.811124][ T7032] netlink: 330 bytes leftover after parsing attributes in process `syz.2.187'. [ 161.144834][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 161.173104][ T7069] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 161.680615][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 161.902290][ T7062] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 169.967444][ T7160] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 169.998072][ T7158] Invalid ELF header magic: != ELF [ 170.639053][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 170.768423][ T7163] smpboot: CPU 1 is now offline [ 170.883571][ T7153] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.485867][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 171.536073][ T7170] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 172.567069][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 172.631593][ T7184] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.803917][ T7211] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 177.020734][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 177.146375][ T7210] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.646261][ T7216] smpboot: CPU 1 is now offline [ 177.996325][ T7229] input: jJǸ-J86 as /devices/virtual/input/input5 [ 182.235736][ T7273] random: crng reseeded on system resumption [ 184.761408][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 185.553299][ T7289] bond0: invalid ARP target specified [ 189.061696][ T7326] Invalid ELF header magic: != ELF [ 191.946957][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 192.133266][ T7350] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 192.707493][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 194.128616][ T7371] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 194.432618][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.439061][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.574345][ T7368] smpboot: CPU 1 is now offline [ 198.729138][ T7399] Invalid ELF header magic: != ELF [ 201.530528][ T7435] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 201.822375][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 202.039323][ T7436] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.384764][ T7444] smpboot: CPU 1 is now offline [ 207.119986][ T7479] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 207.304004][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 207.353151][ T7474] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 207.432631][ T7483] smpboot: CPU 1 is now offline [ 210.673352][ T7516] Invalid ELF header magic: != ELF [ 212.123372][ T7525] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 212.742850][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 212.926996][ T7523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 213.391213][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 213.400958][ T7529] smpboot: CPU 1 is now offline [ 215.626371][ T7542] FAULT_INJECTION: forcing a failure. [ 215.626371][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 215.952941][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.0.277 Tainted: G U L syzkaller #0 PREEMPT(full) [ 215.952969][ T7542] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 215.952975][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.952985][ T7542] Call Trace: [ 215.952990][ T7542] [ 215.953008][ T7542] dump_stack_lvl+0x100/0x190 [ 215.953038][ T7542] should_fail_ex.cold+0x5/0xa [ 215.953057][ T7542] should_failslab+0xc2/0x120 [ 215.953073][ T7542] __kmalloc_cache_noprof+0x7a/0x6f0 [ 215.953091][ T7542] ? sctp_auth_shkey_create+0x9e/0x210 [ 215.953113][ T7542] sctp_auth_shkey_create+0x9e/0x210 [ 215.953133][ T7542] sctp_endpoint_new+0x589/0xb20 [ 215.953152][ T7542] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 215.953174][ T7542] ? lockdep_init_map_type+0x5c/0x250 [ 215.953195][ T7542] sctp_init_sock+0xe2b/0x1300 [ 215.953212][ T7542] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 215.953229][ T7542] sctp_v6_init_sock+0x16/0x70 [ 215.953244][ T7542] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 215.953260][ T7542] inet6_create+0xb21/0x12b0 [ 215.953279][ T7542] ? inet6_create+0x7f/0x12b0 [ 215.953297][ T7542] __sock_create+0x339/0x860 [ 215.953322][ T7542] inet_ctl_sock_create+0x94/0x230 [ 215.953344][ T7542] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 215.953364][ T7542] ? timer_init_key+0x150/0x340 [ 215.953382][ T7542] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 215.953398][ T7542] sctp_ctrlsock_init+0x40/0xd0 [ 215.953413][ T7542] ops_init+0x1e2/0x5f0 [ 215.953433][ T7542] setup_net+0x118/0x3a0 [ 215.953451][ T7542] ? __pfx_setup_net+0x10/0x10 [ 215.953467][ T7542] ? lockdep_init_map_type+0x5c/0x250 [ 215.953485][ T7542] ? mutex_init_lockep+0x110/0x150 [ 215.953506][ T7542] copy_net_ns+0x46f/0x7c0 [ 215.953527][ T7542] create_new_namespaces+0x3ea/0xac0 [ 215.953546][ T7542] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 215.953563][ T7542] ksys_unshare+0x473/0xad0 [ 215.953582][ T7542] ? __pfx_ksys_unshare+0x10/0x10 [ 215.953606][ T7542] __x64_sys_unshare+0x31/0x40 [ 215.953622][ T7542] do_syscall_64+0x106/0xf80 [ 215.953638][ T7542] ? clear_bhb_loop+0x40/0x90 [ 215.953656][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.953677][ T7542] RIP: 0033:0x7f7e5d19c799 [ 215.953693][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.953707][ T7542] RSP: 002b:00007f7e5dfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.953722][ T7542] RAX: ffffffffffffffda RBX: 00007f7e5d415fa0 RCX: 00007f7e5d19c799 [ 215.953732][ T7542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 215.953741][ T7542] RBP: 00007f7e5d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 215.953749][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.953758][ T7542] R13: 00007f7e5d416038 R14: 00007f7e5d415fa0 R15: 00007ffcc7d90f38 [ 215.953777][ T7542] [ 219.808963][ T7572] futex_wake_op: syz.0.282 tries to shift op by -2048; fix this program [ 219.948626][ T7572] futex_wake_op: syz.0.282 tries to shift op by -2048; fix this program [ 220.114646][ T7570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.340570][ T7570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.346602][ T7570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.570874][ T7570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.329128][ T7585] ptrace attach of "./syz-executor exec"[5820] was attempted by ""[7585] [ 222.191915][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.429737][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.435803][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.589663][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.516888][ T5828] Bluetooth: hci1: Malformed LE Event: 0x0b [ 226.360643][ T7628] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 226.468134][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 226.620942][ T7633] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 226.672445][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 226.811005][ T7634] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 227.210639][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 227.218873][ T7630] smpboot: CPU 1 is now offline [ 230.970118][ T7660] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 232.741795][ T7679] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 232.862487][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 232.932270][ T7681] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 233.274119][ T7680] smpboot: CPU 1 is now offline [ 235.475039][ T7697] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 235.630502][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 235.639416][ T7701] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.130516][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 236.139502][ T7699] smpboot: CPU 1 is now offline [ 238.909281][ T7729] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 239.280877][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 239.479439][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 239.498360][ T7730] smpboot: CPU 1 is now offline [ 239.652230][ T7729] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 240.826000][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 240.930609][ T7750] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 242.772149][ T7760] block nbd7: not configured, cannot reconfigure [ 244.469347][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 244.562121][ T7787] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.710344][ T7788] FAULT_INJECTION: forcing a failure. [ 244.710344][ T7788] name fail_futex, interval 1, probability 0, space 0, times 1 [ 245.045690][ T7794] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 245.064395][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.3.318 Tainted: G U L syzkaller #0 PREEMPT(full) [ 245.064424][ T7788] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 245.064430][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.064439][ T7788] Call Trace: [ 245.064446][ T7788] [ 245.064452][ T7788] dump_stack_lvl+0x100/0x190 [ 245.064481][ T7788] should_fail_ex.cold+0x5/0xa [ 245.064499][ T7788] get_futex_key+0x1d2/0x1620 [ 245.064520][ T7788] ? __pfx_get_futex_key+0x10/0x10 [ 245.064544][ T7788] futex_wake+0xea/0x530 [ 245.064568][ T7788] ? __pfx_futex_wake+0x10/0x10 [ 245.064595][ T7788] ? putname+0xb1/0x110 [ 245.064608][ T7788] ? kmem_cache_free+0x124/0x6a0 [ 245.064631][ T7788] do_futex+0x32b/0x350 [ 245.064649][ T7788] ? __pfx_do_futex+0x10/0x10 [ 245.064665][ T7788] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.064684][ T7788] ? __fget_files+0x21f/0x3d0 [ 245.064699][ T7788] __x64_sys_futex+0x34f/0x4d0 [ 245.064718][ T7788] ? __x64_sys_openat+0x12d/0x210 [ 245.064736][ T7788] ? __pfx___x64_sys_futex+0x10/0x10 [ 245.064760][ T7788] do_syscall_64+0x106/0xf80 [ 245.064777][ T7788] ? clear_bhb_loop+0x40/0x90 [ 245.064794][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.064809][ T7788] RIP: 0033:0x7f19e739c799 [ 245.064822][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.064835][ T7788] RSP: 002b:00007f19e823c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.064850][ T7788] RAX: ffffffffffffffda RBX: 00007f19e7616098 RCX: 00007f19e739c799 [ 245.064859][ T7788] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19e761609c [ 245.064867][ T7788] RBP: 00007f19e7616090 R08: 0000000000000000 R09: 0000000000000000 [ 245.064875][ T7788] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 245.064883][ T7788] R13: 00007f19e7616128 R14: 00007ffc9cc77d80 R15: 00007ffc9cc77e68 [ 245.064902][ T7788] [ 245.851166][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 245.901264][ T7796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.041932][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 246.097434][ T7798] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.640626][ T7793] smpboot: CPU 1 is now offline [ 248.216791][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.330'. [ 248.352703][ T7812] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 249.520348][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 249.635548][ T7828] HfR: entered promiscuous mode [ 249.745184][ T7834] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 249.850359][ T7831] HfR: left promiscuous mode [ 250.090273][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 250.105509][ T7836] smpboot: CPU 1 is now offline [ 250.197494][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 250.318615][ T7840] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.873008][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 251.898796][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 251.992193][ T7857] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 252.098965][ T7858] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 255.432211][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 255.559311][ T7884] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 255.878504][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.886951][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.751950][ T7906] HfR: entered promiscuous mode [ 256.821457][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 257.121293][ T7907] HfR: left promiscuous mode [ 257.242547][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 259.051681][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 259.131731][ T7920] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 260.414925][ T7940] zswap: compressor not available [ 261.672309][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 261.763129][ T7962] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 266.093114][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 266.240574][ T8001] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 266.841418][ T8007] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 267.366020][ T8013] smpboot: CPU 1 is now offline [ 267.530192][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 267.694798][ T8007] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 267.793986][ T8025] zswap: compressor not available [ 270.899692][ T8041] FAULT_INJECTION: forcing a failure. [ 270.899692][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 271.009210][ T8041] CPU: 0 UID: 0 PID: 8041 Comm: syz.0.371 Tainted: G U L syzkaller #0 PREEMPT(full) [ 271.009238][ T8041] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 271.009243][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.009253][ T8041] Call Trace: [ 271.009258][ T8041] [ 271.009264][ T8041] dump_stack_lvl+0x100/0x190 [ 271.009291][ T8041] should_fail_ex.cold+0x5/0xa [ 271.009311][ T8041] should_failslab+0xc2/0x120 [ 271.009327][ T8041] __kmalloc_cache_noprof+0x7a/0x6f0 [ 271.009346][ T8041] ? alloc_mnt_ns+0xce/0x520 [ 271.009369][ T8041] alloc_mnt_ns+0xce/0x520 [ 271.009390][ T8041] copy_mnt_ns+0x220/0xc30 [ 271.009406][ T8041] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 271.009428][ T8041] ? create_new_namespaces+0x30/0xac0 [ 271.009443][ T8041] ? rcu_is_watching+0x12/0xc0 [ 271.009466][ T8041] create_new_namespaces+0xd3/0xac0 [ 271.009481][ T8041] ? bpf_lsm_capable+0x9/0x10 [ 271.009495][ T8041] ? security_capable+0x80/0x260 [ 271.009517][ T8041] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 271.009537][ T8041] ksys_unshare+0x473/0xad0 [ 271.009556][ T8041] ? __pfx_ksys_unshare+0x10/0x10 [ 271.009581][ T8041] __x64_sys_unshare+0x31/0x40 [ 271.009598][ T8041] do_syscall_64+0x106/0xf80 [ 271.009614][ T8041] ? clear_bhb_loop+0x40/0x90 [ 271.009631][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.009646][ T8041] RIP: 0033:0x7f7e5d19c799 [ 271.009659][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.009672][ T8041] RSP: 002b:00007f7e5dfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 271.009686][ T8041] RAX: ffffffffffffffda RBX: 00007f7e5d415fa0 RCX: 00007f7e5d19c799 [ 271.009695][ T8041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 271.009703][ T8041] RBP: 00007f7e5d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 271.009714][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.009722][ T8041] R13: 00007f7e5d416038 R14: 00007f7e5d415fa0 R15: 00007ffcc7d90f38 [ 271.009741][ T8041] [ 272.986773][ T30] audit: type=1804 audit(1772586678.423:4): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.371" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 277.369998][ T8086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.599743][ T8086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.889362][ T8086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.931263][ T8086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.990597][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 278.482037][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 278.542975][ T8095] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 279.389673][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.629753][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.952247][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.958354][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.924390][ T8134] input: f as /devices/virtual/input/input6 [ 284.384060][ T8135] zram: Removed device: zram0 [ 287.280580][ T8161] bridge_slave_1: left allmulticast mode [ 287.430397][ T8161] bridge_slave_1: left promiscuous mode [ 287.437798][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.791610][ T8165] netlink: 342 bytes leftover after parsing attributes in process `syz.1.390'. [ 290.415379][ T8180] FAULT_INJECTION: forcing a failure. [ 290.415379][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 290.649682][ T8180] CPU: 0 UID: 0 PID: 8180 Comm: syz.2.393 Tainted: G U L syzkaller #0 PREEMPT(full) [ 290.649710][ T8180] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 290.649716][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.649725][ T8180] Call Trace: [ 290.649730][ T8180] [ 290.649737][ T8180] dump_stack_lvl+0x100/0x190 [ 290.649764][ T8180] should_fail_ex.cold+0x5/0xa [ 290.649782][ T8180] should_failslab+0xc2/0x120 [ 290.649797][ T8180] __kmalloc_cache_noprof+0x7a/0x6f0 [ 290.649815][ T8180] ? sctp_endpoint_new+0xfc/0xb20 [ 290.649833][ T8180] ? __debug_object_init+0x2de/0x3d0 [ 290.649857][ T8180] sctp_endpoint_new+0xfc/0xb20 [ 290.649877][ T8180] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 290.649894][ T8180] ? lockdep_init_map_type+0x5c/0x250 [ 290.649915][ T8180] ? lockdep_init_map_type+0x5c/0x250 [ 290.649937][ T8180] sctp_init_sock+0xe2b/0x1300 [ 290.649953][ T8180] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 290.649970][ T8180] sctp_v6_init_sock+0x16/0x70 [ 290.649991][ T8180] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 290.650007][ T8180] inet6_create+0xb21/0x12b0 [ 290.650027][ T8180] ? inet6_create+0x7f/0x12b0 [ 290.650046][ T8180] __sock_create+0x339/0x860 [ 290.650079][ T8180] inet_ctl_sock_create+0x94/0x230 [ 290.650169][ T8180] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 290.650210][ T8180] ? timer_init_key+0x150/0x340 [ 290.650230][ T8180] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 290.650247][ T8180] sctp_ctrlsock_init+0x40/0xd0 [ 290.650264][ T8180] ops_init+0x1e2/0x5f0 [ 290.650284][ T8180] setup_net+0x118/0x3a0 [ 290.650303][ T8180] ? __pfx_setup_net+0x10/0x10 [ 290.650319][ T8180] ? lockdep_init_map_type+0x5c/0x250 [ 290.650338][ T8180] ? mutex_init_lockep+0x110/0x150 [ 290.650361][ T8180] copy_net_ns+0x46f/0x7c0 [ 290.650381][ T8180] create_new_namespaces+0x3ea/0xac0 [ 290.650401][ T8180] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 290.650418][ T8180] ksys_unshare+0x473/0xad0 [ 290.650436][ T8180] ? __pfx_ksys_unshare+0x10/0x10 [ 290.650461][ T8180] __x64_sys_unshare+0x31/0x40 [ 290.650478][ T8180] do_syscall_64+0x106/0xf80 [ 290.650494][ T8180] ? clear_bhb_loop+0x40/0x90 [ 290.650521][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.650537][ T8180] RIP: 0033:0x7fdefe19c799 [ 290.650551][ T8180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.650564][ T8180] RSP: 002b:00007fdeff094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 290.650579][ T8180] RAX: ffffffffffffffda RBX: 00007fdefe415fa0 RCX: 00007fdefe19c799 [ 290.650588][ T8180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 290.650597][ T8180] RBP: 00007fdefe232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 290.650606][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.650615][ T8180] R13: 00007fdefe416038 R14: 00007fdefe415fa0 R15: 00007ffdb75124c8 [ 290.650635][ T8180] [ 295.072012][ T8208] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 295.191229][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 295.250620][ T8205] ubi0: attaching mtd0 [ 295.343404][ T8214] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 295.387205][ T8205] ubi0: scanning is finished [ 295.424744][ T8210] smpboot: CPU 1 is now offline [ 295.468899][ T8205] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 296.722392][ T8205] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 297.948830][ T8237] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 297.992266][ T5828] Bluetooth: hci2: unexpected event 0x33 length: 124 > 10 [ 298.165898][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 298.249997][ T8237] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 298.261528][ T8235] smpboot: CPU 1 is now offline [ 299.845672][ T8262] Invalid ELF header magic: != ELF [ 300.059971][ T8250] netlink: 'syz.0.406': attribute type 23 has an invalid length. [ 300.943424][ T8272] netlink: 330 bytes leftover after parsing attributes in process `syz.0.409'. [ 305.452559][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 306.500489][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'. [ 309.185232][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b97e000: rx timeout, send abort [ 309.194984][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b97e000: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 310.323657][ T8351] can: request_module (can-proto-4) failed. [ 316.436263][ T8407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.483074][ T8407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.523449][ T8407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.563927][ T8407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.991850][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.029646][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 317.340158][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.346516][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.512021][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.519669][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.589686][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 319.485610][ T8446] block nbd2: not configured, cannot reconfigure [ 322.957386][ T8485] input: f as /devices/virtual/input/input7 [ 323.805778][ T8500] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 323.956048][ T8499] smpboot: CPU 1 is now offline [ 324.246531][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 324.306065][ T8499] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 325.103867][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 331.901026][ T8582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.843353][ T8606] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 334.005265][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 334.125448][ T8607] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 334.371882][ T8602] smpboot: CPU 1 is now offline [ 336.642109][ T8635] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 336.953452][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 337.097205][ T8636] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 337.519383][ T8630] smpboot: CPU 1 is now offline [ 340.422796][ T8662] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 340.618661][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 340.731165][ T8677] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 340.982845][ T8668] smpboot: CPU 1 is now offline [ 342.469772][ T8693] can: request_module (can-proto-4) failed. [ 345.014941][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 345.371836][ T8707] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 345.640382][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 345.933988][ T8722] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 352.270034][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 352.373564][ T8781] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 352.641069][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 353.629302][ T8798] FAULT_INJECTION: forcing a failure. [ 353.629302][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 353.760915][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.0.517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 353.760943][ T8798] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 353.760949][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.760965][ T8798] Call Trace: [ 353.760999][ T8798] [ 353.761005][ T8798] dump_stack_lvl+0x100/0x190 [ 353.761077][ T8798] should_fail_ex.cold+0x5/0xa [ 353.761108][ T8798] should_failslab+0xc2/0x120 [ 353.761140][ T8798] __kmalloc_cache_noprof+0x7a/0x6f0 [ 353.761170][ T8798] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 353.761244][ T8798] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 353.761263][ T8798] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 353.761280][ T8798] vidtv_channel_si_init+0x1289/0x18d0 [ 353.761305][ T8798] vidtv_mux_init+0x526/0xbf0 [ 353.761326][ T8798] vidtv_start_feed+0x33e/0x4c0 [ 353.761370][ T8798] ? __pfx_vidtv_start_feed+0x10/0x10 [ 353.761392][ T8798] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 353.761418][ T8798] ? mark_held_locks+0x40/0x70 [ 353.761453][ T8798] ? __pfx_vidtv_start_feed+0x10/0x10 [ 353.761473][ T8798] dmx_ts_feed_start_filtering+0xf6/0x220 [ 353.761551][ T8798] dvb_dmxdev_start_feed+0x273/0x3f0 [ 353.761575][ T8798] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 353.761599][ T8798] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 353.761622][ T8798] dvb_demux_do_ioctl+0xe64/0x1200 [ 353.761657][ T8798] dvb_usercopy+0x167/0x340 [ 353.761677][ T8798] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 353.761700][ T8798] ? __pfx_dvb_usercopy+0x10/0x10 [ 353.761727][ T8798] ? __fget_files+0x21f/0x3d0 [ 353.761752][ T8798] dvb_demux_ioctl+0x29/0x40 [ 353.761770][ T8798] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 353.761789][ T8798] __x64_sys_ioctl+0x18e/0x210 [ 353.761817][ T8798] do_syscall_64+0x106/0xf80 [ 353.761903][ T8798] ? clear_bhb_loop+0x40/0x90 [ 353.761929][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.761945][ T8798] RIP: 0033:0x7f7e5d19c799 [ 353.761959][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.761972][ T8798] RSP: 002b:00007f7e5dfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.762018][ T8798] RAX: ffffffffffffffda RBX: 00007f7e5d415fa0 RCX: 00007f7e5d19c799 [ 353.762028][ T8798] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 353.762037][ T8798] RBP: 00007f7e5d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 353.762046][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.762055][ T8798] R13: 00007f7e5d416038 R14: 00007f7e5d415fa0 R15: 00007ffcc7d90f38 [ 353.762076][ T8798] [ 353.762133][ T8798] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 354.033862][ T8798] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 354.042406][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.0.517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 354.053157][ T8798] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 354.058424][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.068467][ T8798] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 354.074385][ T8798] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ad 43 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 89 43 dc f9 4d 85 e4 [ 354.094175][ T8798] RSP: 0018:ffffc90004bbfa10 EFLAGS: 00010247 [ 354.100248][ T8798] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90005ce3000 [ 354.108508][ T8798] RDX: 0000000000000000 RSI: ffffffff882bcd93 RDI: 0000000000000005 [ 354.117630][ T8798] RBP: ffff88802ae5f240 R08: 0000000000000000 R09: 4453534204050000 [ 354.125695][ T8798] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 354.133661][ T8798] R13: ffff88802d43ba80 R14: ffff8880226b6ba0 R15: ffff8880328307c0 [ 354.142076][ T8798] FS: 00007f7e5dfa76c0(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 354.151440][ T8798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.158040][ T8798] CR2: 0000001b30c1aff8 CR3: 00000000379ac000 CR4: 00000000003526f0 [ 354.166008][ T8798] Call Trace: [ 354.169278][ T8798] [ 354.172203][ T8798] vidtv_channel_si_init+0x12fc/0x18d0 [ 354.177653][ T8798] vidtv_mux_init+0x526/0xbf0 [ 354.182324][ T8798] vidtv_start_feed+0x33e/0x4c0 [ 354.187169][ T8798] ? __pfx_vidtv_start_feed+0x10/0x10 [ 354.192534][ T8798] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 354.199143][ T8798] ? mark_held_locks+0x40/0x70 [ 354.203899][ T8798] ? __pfx_vidtv_start_feed+0x10/0x10 [ 354.209270][ T8798] dmx_ts_feed_start_filtering+0xf6/0x220 [ 354.214981][ T8798] dvb_dmxdev_start_feed+0x273/0x3f0 [ 354.220288][ T8798] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 354.225767][ T8798] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 354.230977][ T8798] dvb_demux_do_ioctl+0xe64/0x1200 [ 354.236101][ T8798] dvb_usercopy+0x167/0x340 [ 354.240639][ T8798] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 354.246203][ T8798] ? __pfx_dvb_usercopy+0x10/0x10 [ 354.251226][ T8798] ? __fget_files+0x21f/0x3d0 [ 354.255891][ T8798] dvb_demux_ioctl+0x29/0x40 [ 354.260489][ T8798] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 354.265885][ T8798] __x64_sys_ioctl+0x18e/0x210 [ 354.270646][ T8798] do_syscall_64+0x106/0xf80 [ 354.275319][ T8798] ? clear_bhb_loop+0x40/0x90 [ 354.279986][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.285872][ T8798] RIP: 0033:0x7f7e5d19c799 [ 354.290323][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.310188][ T8798] RSP: 002b:00007f7e5dfa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.318605][ T8798] RAX: ffffffffffffffda RBX: 00007f7e5d415fa0 RCX: 00007f7e5d19c799 [ 354.326629][ T8798] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 354.335123][ T8798] RBP: 00007f7e5d232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 354.343091][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.351058][ T8798] R13: 00007f7e5d416038 R14: 00007f7e5d415fa0 R15: 00007ffcc7d90f38 [ 354.359458][ T8798] [ 354.362585][ T8798] Modules linked in: [ 354.367744][ T8798] ---[ end trace 0000000000000000 ]--- [ 354.402242][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 354.447077][ T8795] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 354.880035][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 354.940237][ T8803] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 355.200045][ T8801] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 355.210801][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 355.216568][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 356.181587][ T8798] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 356.187549][ T8798] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 ad 43 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 89 43 dc f9 4d 85 e4 [ 356.263314][ T22] numa_remove_cpu cpu 1 node 0: mask now 0 [ 356.269158][ T22] numa_remove_cpu cpu 1 node 1: mask now 0 [ 356.278914][ T8793] smpboot: CPU 1 is now offline [ 356.427920][ T8798] RSP: 0018:ffffc90004bbfa10 EFLAGS: 00010247 [ 356.499258][ T8798] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90005ce3000 [ 356.648020][ T8798] RDX: 0000000000000000 RSI: ffffffff882bcd93 RDI: 0000000000000005 [ 356.795885][ T8798] RBP: ffff88802ae5f240 R08: 0000000000000000 R09: 4453534204050000 [ 356.929365][ T8798] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 357.047034][ T8798] R13: ffff88802d43ba80 R14: ffff8880226b6ba0 R15: ffff8880328307c0 [ 357.136379][ T8798] FS: 00007f7e5dfa76c0(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 357.239388][ T8798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.284048][ T8798] CR2: 0000001b308d7ff8 CR3: 00000000379ac000 CR4: 00000000003526f0 [ 357.340459][ T8798] Kernel panic - not syncing: Fatal exception [ 357.347133][ T8798] Kernel Offset: disabled [ 357.351961][ T8798] Rebooting in 86400 seconds..