last executing test programs: 6.358405889s ago: executing program 2 (id=210): add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)='&\x00', 0x0, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) write$auto_proc_fault_inject_operations_base(r0, &(0x7f00000000c0)="6764d28f852c5bae4a08337aa479b37c9a806c28f210a4e5af15590f04bfb8df63201c806d6a840089c8a69c3db4edee73bb903c4538eb063216cc4b58aa2587d72a343cea2c0220ec0146c0bbf9119a948b27d0f08697adcc7f716aa6cf5b46d353c73807df45afa249c2f6d230792d6359f9ef268144906c1f7d5bdbf3d3fb6668ab840c63f4a1dbb6db6520a0ed0df454bc0e1b5e6b56585ce72908f6", 0x9e) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) swapoff$auto(&(0x7f00000000c0)='/dev/dri/card1\x00') close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x400801, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f00000001c0)="117aed5f44afa2be3a2345ace20e4bb11f684ecd59d6dbde63bc61acddb4596174d70700062da2fef6b6004741e4e553afdbdd53835b886a904d07433340be6968a62570db71c712187efc347229037c3b21ecc57afaf7687dd4c4cce66724c505f53185f9346827bb15e4", 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) getsockopt$auto_SO_SNDBUF(r0, 0xd, 0x7, &(0x7f0000000040)='/sys/kernel/mm/ksm/merge_across_nodes\x00', &(0x7f0000000080)) 6.10077851s ago: executing program 2 (id=212): fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) statmount$auto(0x0, 0x0, 0x200, 0x81) setfsuid$auto(0xee00) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x2000003b, 0x1, 0x4, 0x5, 0x100000005) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getegid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) close_range$auto(0x0, 0x5, 0x0) 5.755785097s ago: executing program 0 (id=214): connect$auto(0xffffffffffffffff, 0x0, 0x8) io_uring_setup$auto(0x59, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) r0 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x410c01, 0x0) (rerun: 64) preadv2$auto(r0, 0x0, 0x20000006, 0xffffffffffffffff, 0x4000c1ac, 0x3) close_range$auto(0xffffffffffffffff, 0xa, 0x0) (async, rerun: 32) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) (rerun: 32) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) (async, rerun: 64) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x9, 0x600, 0x0, 0x75) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async, rerun: 32) socket(0xa, 0x2, 0x0) (async, rerun: 32) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) setitimer$auto(0x1, &(0x7f0000000000)={{0x14cd, 0x2000000000000081}, {0x3, 0xb}}, 0x0) (async, rerun: 32) socket(0x18, 0x800, 0x1) (async, rerun: 32) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x4}, 0x3a) (async, rerun: 64) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (rerun: 64) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) (async) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x12002, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000340)={{r4, &(0x7f0000000040)="5963a72e0fb3c20ad7e273ed7d0362", 0x4, &(0x7f0000000040), 0xb4aa, &(0x7f0000000140)="d0507ce69fcd1afb0741a14185a8f73dd4675eff4ab883c8f980910ebeb49589d4047d206b3ae75b330f72eb", &(0x7f0000000180)=0x1ff}, 0xfffffffe, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec641ac00000000000000239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e2d7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670f3bc07a6ab937cee7bc141e094b86bd54db005e61ecbff562379ba564982c1a4d0f3267f4b15cdd47338d18855e0142d751da75d19645d116fdec716f5e68daaaa13a9344ce72cb22bdcfb5b3a828bab6c9d7d613eef5c021ba7618b490b6cfd70b23bcd55f71c38d2753854660e319134940963", &(0x7f0000000080)="3fe90cafe87c27db66de6e568623cc7e1ffffbf70f7a00", 0xce}}) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) socket(0x2, 0x1, 0x106) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x84) 5.13995536s ago: executing program 0 (id=216): r0 = bpf$auto(0x9, &(0x7f0000000000)=@link_create={@map_fd, @target_fd, 0x3, 0xf, @netfilter={0xf6e, 0x200, 0x1, 0xff}}, 0x8) mmap$auto(0x7, 0x9, 0x8000000000008, 0x1009b7e, r0, 0x8001000000008004) setrlimit$auto(0x8, 0x0) mmap$auto(0x400000, 0x20008, 0xdf, 0xeb5, 0x401, 0x100000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) mlockall$auto(0x7) 4.762376882s ago: executing program 0 (id=217): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getgroups$auto(0xeda, 0x0) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x0, 0x7f, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x800, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'erspan0\x00'}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) getsockopt$auto(r0, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket(0x10, 0x2, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) socket(0x2, 0x3, 0x4c38c34) r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) unshare$auto(0x40000080) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001ec0)=""/4104, 0x1008) 4.218715653s ago: executing program 0 (id=219): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) (async) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) signalfd$auto(r1, &(0x7f0000000080)={0x7}, 0x2) (async) signalfd$auto(r1, &(0x7f0000000080)={0x7}, 0x2) r3 = socket(0x10, 0x4, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4ab20000fea96097cf33df8c32016cf7c0de751169e0e7e1804fbbb960fbeaac7d501eaaa5ce328d2b3787df613949601e234fd16a65063741f796ef4ef8594d83055edcb9e9342b69304122cd634cef685a00b00e796f0a30ead6596b7189114c5cc3b15dab9ce0c161c19930699b8eb78f864368c29201b2598289324c4b5afa6acbbb74fb9d435be39b196bb319a4bf99346f40d8a0eda48a792d64db394c5d7cae6b9cd6563706bb1e", @ANYRES16=r5, @ANYBLOB="230325bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008804) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000280)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000280)=0x0) sendto$auto(r4, &(0x7f0000000480)="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", 0x8000000000000000, 0x7, &(0x7f0000000300)=@nfc={0x27, r6, 0x0, 0x1}, 0x5) bind$auto(r0, &(0x7f0000000040)=@nfc={0x27, r6, 0x1, 0x2}, 0x442) write$auto(0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7, 0x17) (async) madvise$auto(0x0, 0x7, 0x17) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) (async) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r7, 0x0, 0x400000000807f) (async) read$auto(r7, 0x0, 0x400000000807f) madvise$auto(0xa84, 0x20499d, 0x7) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r8, 0x0, 0x80000001, 0x0) ioctl$auto(0x3, 0xc0383e04, 0xffffffffffffffff) 3.566704579s ago: executing program 2 (id=220): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af20, r0) close_range$auto(0x0, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x800, 0x0) shmctl$auto(0x0, 0x1, 0x0) mkdir$auto(0x0, 0x8001) capset$auto(0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x80002, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r2, 0x40246f4c, 0x38) 3.181629034s ago: executing program 0 (id=223): r0 = socket(0x2, 0x1, 0x84) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r4 = getpgid$auto(0xffffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0xc80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), 0xffffffffffffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8000000000001b) unshare$auto(0x40000080) mmap$auto(0x1, 0x2, 0x44000000000dd, 0x17, 0x401, 0x7fff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) socket(0x2, 0x80002, 0x73) msgget$auto(0x0, 0x5) getsockopt$auto_SO_BINDTODEVICE(r5, 0x8, 0x19, &(0x7f0000000240)=')@:-\\-\x00', &(0x7f0000000280)=0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) removexattr$auto(0x0, 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x510, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f4, 0x2, 0x0, 0x1, [@nested={0xbd, 0x70, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x118, 0x0, 0x0, @u32=0x800}, @generic="8ad63b1b1ff0a28039e9685d6c2fc8834f0562d8d6f64b05970d08186d42535cb20d2057a4186ca97febe6a2435505685d30b46888ce1710716cdbd80284af2923b51337ae38097eaea134be60747635cc91450a63", @nested={0x4, 0x153}, @generic="b2c8373fe40b01699113ae6b79bda10cdac49129135f2a755e11d74f7ffb151c7096a33d22847a7be6755527996aa266b288e6b5cb0e9fd40ac978ac6398cd382f6cca0022892796", @typed={0x8, 0x76, 0x0, 0x0, @pid=r4}]}, @typed={0x5, 0xd4, 0x0, 0x0, @str='\x00'}, @nested={0x125, 0x13e, 0x0, 0x1, [@nested={0x4, 0x11f}, @nested={0x4, 0x119}, @generic="87bd8d51405fc6a10c2bb2aabcf0712c54e113719ac4a90e604dcdb8114b78e92ca4d967d9b91220f99f2f25fd0954630fa6d44a9457f311ae166f8bd5fd38098d829cadaedf3d8ebb7313c077391c58e37f63eafccdb648585cc9266d163bd7db4dfffac7f7d7ad2157722ec2b0f4c4d59318925f", @typed={0x4, 0x49}, @generic="33457cc0be044b7bc6b192a45ee86660d514549e37f2f359ec6b7815ddbde576e813bcea2218e988b542c040d7d3886a84959f8edc2a9d87b9b5c611f964a6da6e9785542e32c45afeef4e17decab6db2f6d47afb7408c66e90bf5a62967c6123a9babec16a86c87db2b93ffa59255018fc971cc4ff5adbb8753afb4b0354c215ac6ac4b7301919e1a80c86463edf867df7db41c0ed2368ec0c623fb", @nested={0x4, 0x17}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x5b, 0x2, 0x0, 0x1, [@generic="1abdc2361e39b1ae14fde77c52af2d686c660121eef62a5775832c22a4888c0b51408f380a392617eda6ebd896b38fca836aa05f9c045da0cdcdf927ee8037db1e3617314626b3b7618ac25ddc773e6f08955fb3db0e7a"]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x26d, 0x2, 0x0, 0x1, [@generic="237d4b60bcc814fb9d0f0d1ed24dd826b2b961e1aee16e02f0dabd4ac1e66cf5742e3fcc68537574ffc0cd4867c51c0ea8882346d9bf64de647b7a7149e557462384734d60ee2e4ab2f04bdddd52f56311e065f26bfb510131b4a14d33d3cb737a26af365c7851f6edcec7f9dd964f1737e21d39707bd8bf00dd28b5632e618d68c24cf32063a5699a4d7cf940af0f820e6201a3e04a533cb315d27da7abc05d43d2853e21c7c54da676bad10011205eb6cf7ed1d3ca216d9b5fffd8962a3a39caddf4248e732e56f1f881afdecd6179fd37a522a2aaa4fed0264ef3b891a7fe", @generic="0f79c675be6fc1c66c284ceb8a8c3e2dddeb7bda7da6c910a132e9b17477799517fc6189edb7e8e175714ea864fd7b61cbc4a7c4e2b1e6686ae7f9baef628994aee0a8a966da9efc14bdf0a91dea3803d2e4fab232e655742ad4c092e04f02d3a124a0b00111aaf83a304e31d30cd41718ac49548f1fc745e914cf454e507c597ad029e1c8ea45718c6f4cbd5428bde7f00d2f00bb7a836d55d60834d6d1eca82e32d421b22d97637de395f2bc8c57", @generic="eb1a809807952cb0813c756b1a58a8cc471166774ec1be934f1847386f6685e3b31dc6dd70e88720f5bfdce50a7e3282091642c7610c4a4b97bbd9544aa659877b6b95356eac9ebdb103ef3ac45aa10922de7029e3419071af530829a20a6d2d686d8dd3adf3e6f4869743a4490164fb242d8891a3b08cf3e1171ae1de7ab705f28ce1623b15041afadab4b53d0b9ad5fdcddbcf58d240009b898572cd29f44ae5064a33a79723023e28843b205034180bad69937017d2074bff02e9e462877d331a0b271308866c5b2f54515835d4e0c144", @typed={0x5, 0xd2, 0x0, 0x0, @str='\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x57, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @u32=0xf47}]}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x68d85f0923eaf38d}, 0x0) 2.749504051s ago: executing program 2 (id=225): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'ip6gretap0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01022abd7000fedbdf2503000000100002800c0001000a0000000000000008000100", @ANYRES32=r4, @ANYBLOB="39d43c0d1df5482f2a0f86b6c599528e37823f7a11b09da2e210b2f6756ecc0208c92c0186cfcbc1b7d626cf41e40c66d147f734768c24e755fad8d0605276c2162a0a9e1d2a1a2e6cef8d93455c455a9b4c14d35287df0f627f7377ae968431f3cad9d1ad3f0aeef48cc3dcd91d162069c172ef1b127a2ce5b760f202a2e04d26b129ac3111197f42b169ad87f3a09a7f782de625f74c64a812020a32d1df4c1a2ede32d5b4f2410f2143d130bcb5509161dae4cfe66803f67bc845"], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) r5 = getpid() r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) preadv$auto(r6, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x800000000080, 0x5) process_vm_readv$auto(r5, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}) r7 = socket(0x2c, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bind$auto(r7, &(0x7f0000000100)=@xdp={0x2c, 0xc, r9, 0x25}, 0x1006a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pimreg0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x0, @ANYBLOB="b41e100f5b95a362c656ed3fbb35a3b14878952491f7425b979a6cd8e343ea55bc1949b33e1d", @ANYRES32=r13, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x1628, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x250, 0x3, 0x0, 0x1, [@nested={0x162, 0xcb, 0x0, 0x1, [@generic="1dfcf01981ffcf96fc7fa91ca656823ebb0b9b9cba55bd8e2e08774c2dcb81dc1c1fed45907ec48bf878d3e1fbb29243c744720e06d00335f5e181102f2f36c390537cd34f73a299e629a9a6cef8c53001e02f8c6fdad026f4fe16212c524b5445f3211f3c3dabf58e35279db4fe61fc8e9359d00a95fc37f7f4e3fe3320e87c60c415bd8170dbee63350f5dcb1cb3b1b3f007", @generic="08c363fb437011532b5a0d8c686fcd3b64a7823e2bdd8e63667a2c5914b030113d89e07e468d331494b578160f0db562623019e17afdfb42e5aa4158e6efb1546aa36c791eb8cbcdc27681a841ca6d70ff11822ec396d2a563be5fb2358af7e4b3c98ae1fac735211337f78e209c2b5b10a4827745200ba85cbf5e2fff9f2321d0b7dbe481a0bcbfe8105b9267c6215348c7f6ef660fc4f9b3192b5a5e948bbf8f31543a0b859064231b0441a9c08e7ff31a16bf2e5d43cdfefd1f6aad66b59a537b4bd13b27b4f65f3d6b"]}, @generic="9860b49a3c6c1a1849821e0183ea6fb66c84aee314d19d35b50cb54bdea6f0d46966b599df69fb14bd9dbf40c3fd1fd0d7fb0e72cb1719f33d1bf9df65f74bf75ade30f0822245693f9ccbbae33fa3ec53564d146fdfd3bb1d79ed151e343b0252318b606ad2522a70ca8b265e8c9adbee6cb775218b365103812b9b7cdd918262d93479f17a82d55b6c397612fc98fbf02b14820382b095a4c4b39f91bdfcd421fd264404a7141641d93c94d7806af2d5f8945f6a8fb082827b6b12de1c811c57a2dfbb54487c36b0058790beb003fbc48b12679a3b73e8d5ec2bb7685d4b94", @typed={0x8, 0x48, 0x0, 0x0, @fd=r0}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x12ef, 0x3, 0x0, 0x1, [@nested={0x45, 0x31, 0x0, 0x1, [@generic="df2fdacab183d4d9c88a64fea1579e3e6e0a979010a929b14ad5b0f57e8e686f1cfdebd555facc7b20ae7ccf3bc5757e513c7f6bf2", @nested={0x4, 0x1d}, @typed={0x8, 0x155, 0x0, 0x0, @pid=r5}]}, @nested={0x16e, 0xb, 0x0, 0x1, [@generic="83f6f576953a86b73cd293d1c107cd7c8e5678618897f90334f88d1592305580488393b41a873f58be441409e88fdb74adf0aa3a16314a957987255e5884bef98e18377defae2c0acda2adf4e51f831f01418f2b1b1392dfad82b6036b13c76a6ff03816fe14e8273425", @generic="ad817e9b76582354901d97227bf09ee319d958daa000c160eea15e9ab7ca13a3d8b94214a82fe893c3eb7007807d5ba6919c6753a802e130802dd524afc9790f18165ccb6f41f65102bd19b1051fe17133574e2a002db29df1dfa442de40ccccbd99bbb5a603059b4fe9d5eaec2def71ea007eed5d586e6cf218e2b558ca05cde8c25c1f81930f1ac516e91106ed2450c0c3a5f22b9a3a95e52e465d4f58ebcccc3fdf0be06001f98b3dc39be7e8e04ca4fb96475ebb91b1e04cd1fa2a1e234e9d328b3aad4dc789f948efc402f8", @generic="52a8606f9f97d6fa55e35507ec19d9f6f4f0d5b0e771b2a625f3ddaa7eefa5b843231ed06c62ebaf193cfcc4fe31", @nested={0x4, 0x92}]}, @generic="52ad06ab560d942be395a6dfda89916b40d7d66a44737a412aef2dd6272df0d9f535bc069aa78a73b5694f", @nested={0xc, 0x140, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @fd=r8}]}, @nested={0xe2, 0x118, 0x0, 0x1, [@nested={0x4, 0x63}, @generic="7b2b919789c816fb3c5d924a0ccdfb636078e7cb267cac385e62c5707c3ff77234d17a9732f5fae4b24e3489d991626e4ae47d8a6e83d5579fc6da990141ba2e22b39c0148ab5d2d2b206600e7e9f0fed065827cf16aef57f9fa79d422d5f97855bd472ad3a6864749fddf9707187d2a97948ef4c80765ef9c2c056a4518466296c08cfb5084673d780e1ad682debeadb40efeba559d2f1386d40765cf34de976d47febaa94cb0230082c3ebe7762fb4245bcb3946ecd3829bd34bdea976a1001c76c6d18589abd7521fa214d05f6224980d87a45c7922adbd73"]}, @nested={0x1018, 0x21, 0x0, 0x1, [@generic="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", @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0xff, 0x0, 0x0, @u64}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x1628}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000805) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r3, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 1.997413321s ago: executing program 3 (id=229): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000000)=@generic={0x23, "f7fde23096b8e8f2294f9c78baaf"}, 0x68) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r1, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 1.896922358s ago: executing program 1 (id=230): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x6a) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2=0x7f000001, 0x4, 0x68}, 0x6b) 1.725671621s ago: executing program 1 (id=231): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r0, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x203, 0x3, 0x4618ecd2, 0x2, 0x84, 0x4, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) write$auto(r0, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585) (async) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x203, 0x3, 0x4618ecd2, 0x2, 0x84, 0x4, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) (async) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async) getdents$auto(r1, 0x0, 0x400018) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) 1.650183798s ago: executing program 2 (id=232): mmap$auto(0xedc6, 0x4, 0x1084000000000df, 0x40eb1, 0x401, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) getrlimit$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x4, 0x7, 0xdf, 0x12, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x20008800) prctl$auto(0x43, 0xa, 0x0, 0x10000000000009, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x168040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(r3, r4) prctl$auto(0x61, 0x16a2, 0x0, 0x0, 0x0) mlockall$auto(0x7) 1.408953126s ago: executing program 1 (id=233): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af20, r0) close_range$auto(0x0, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x800, 0x0) shmctl$auto(0x0, 0x1, 0x0) mkdir$auto(0x0, 0x8001) capset$auto(0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x80002, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r2, 0x40246f4c, 0x38) 1.391566187s ago: executing program 3 (id=234): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video38\x00', 0x400000, 0x0) mmap$auto(0x101, 0x7, 0x5, 0x19, r0, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video18\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0945662, r1) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) io_uring_setup$auto(0xc, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r3, 0xae44, r3) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x21, 0x2, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) mmap$auto(0x0, 0x420009, 0xe3, 0x200000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) r4 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x10001) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "460ddfc9cb1303e3cb3cb8b78d079250", "b31c382ff7d56364e0d26c7bab8b9e20", "1cafd62b30b2a903dc9a085d9ee0ba162b8330330b264a6a74409a4ce590c4bf", "4e1dbeb57bd17e7c7df1e91365edf04778bc5c1a207095281af9278eb83923bbf15705e9d6f6d69577746d87e49fc720f84fa8577721a04d7c92008bdccfe0090e2d5114ca8d8f294a9eea52b03f0017", "b95bae6d60a3bd673b7cd01cd90c770d", "73f8c280acd3ce3001b3a8a94118e117be5144b4e4569b698f3e26158aa7de1ae9d6274479386aaa7bfbe85c3087831e36a9f252656920847a297220836f4c645eb7665ed896caf88adae98b80ddf64f", "a732243deb65abbae48d3956d6c4c5a6c41d4d421f628112b85322a66e52583a837076fd6605f062c4b467eaa614bb31d9fbc8504b7e811603745b4295f60dfdc01f6465e71577802a14d1c44125d0eead606d4bb97c3e22fadff9c6807177168fda3f963c1a028ed4f5087d740239e850adc1b558578c1b7a4f8347df90a31a"}) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 1.084399985s ago: executing program 3 (id=235): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0) ioctl$auto(0x3, 0x540f, 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0xffffffffffffff82, 0x20000a00004, 0x400002, 0x15, 0x602, 0x5) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x9c943, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, 0x0, 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6) write$auto(r2, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.3/usb15/15-0:1.0/usb15-port2/over_current_count\x00', 0x2000, 0x0) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x0, 0x8, 0x34d, 0x7fffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 752.356384ms ago: executing program 1 (id=236): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(r0, 0x10000000084, 0x12, 0x0, 0x8) r1 = socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_SNDTIMEO_NEW(r2, 0x1, 0x43, &(0x7f0000000540)='veth1_to_batadv\x00', 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES64=r3, @ANYRES16], 0xb4}}, 0x20000054) fcntl$auto_F_SETOWN_EX(r1, 0xf, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) r4 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x8, @old_prog_fd=r4}, 0xa3) bpf$auto(0x2, 0x0, 0x9) 547.194312ms ago: executing program 3 (id=237): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001140)=ANY=[@ANYBLOB="58ff61b01fdb21a365fd77defaf0001b5d0000000000ddffff040000000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250200000008000900800000000e000500eecd71556377220471e700002a0005005416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd6721280000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) unlink$auto(&(0x7f0000000380)='./file0\x00') socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r2, r3, 0x0, 0x8000001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) close_range$auto(r4, 0x8, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) madvise$auto(0x7fffffff, 0x1, 0x81) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f00000010c0)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x88, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0xc, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) 390.932059ms ago: executing program 1 (id=238): pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae\xaeZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb89\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0\x00'/303, 0x100000000000fded, 0x3) 330.651664ms ago: executing program 3 (id=239): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x6a) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2=0x7f000001, 0x4, 0x6c}, 0x6b) 174.690443ms ago: executing program 1 (id=240): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) mremap$auto(0x0, 0x2, 0x3fd6, 0x0, 0x7fffffffb000) mremap$auto(0xfffff000, 0x4, 0x4, 0x6, 0x1001ff000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x6, @link_local}, 0x54) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x8000000000000006, 0x11, 0x0, 0x7ffffc) r3 = prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) fgetxattr$auto(r3, &(0x7f0000000280)='\\@--*\x86\\#]:+]\xc5\x00', 0x0, 0x68) getsockopt$auto(r3, 0x0, 0x2, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) r4 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) setsockopt$auto_SO_BSDCOMPAT(r4, 0x6, 0xe, 0x0, 0x80001) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10) 149.576843ms ago: executing program 3 (id=241): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x19, 0x4cbd5f) (async) sendfile$auto(r0, r0, &(0x7f0000000040)=0x7fffffff, 0xfffffffffffffeff) (async) mmap$auto(0x9, 0x200, 0x4, 0x18, 0x3, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) socket(0x2, 0x1, 0x106) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r2) (async) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x7fffffff) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x100) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x12, 0x0, 0x56b) setsockopt$auto(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x80000001) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000240)="709fc3cbd4e699121f8b59862d5a853d3f5db07c4cb946b8e45a058b0cf1224e549d6fce4d4c0906ed967fe99e4e108c4fb3039d8857e5a938a3b14c333406a1b4c37643187352fbb0", 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x101181, 0x0) 90.710054ms ago: executing program 0 (id=242): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x1, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xb8) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) getsockopt$auto_SO_PROTOCOL(r0, 0x9, 0x26, &(0x7f0000000000)='{,]-Y/\x00', &(0x7f00000000c0)=0xe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x110c230000, 0x200001, 0x6) 0s ago: executing program 2 (id=243): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000440)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x4}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) socket(0x26, 0x6, 0x8) setgroups$auto(0xe32, 0x0) eventfd2$auto(0xf1, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40602, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r3 = epoll_create$auto(0x200004) socket(0xa, 0x1, 0x84) socket(0x21, 0x2, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000003c0)={[0x1ff, 0xb, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) epoll_ctl$auto(r3, 0x1, r2, 0x0) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b41", 0xfdef) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, &(0x7f0000000080)='/sys/kernel/con\x87ig/target/dbro\x7ft\x00', &(0x7f00000000c0)="a513b8212f90589c5660be05df4354f480e42434", 0xf9c0, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 88.079659][ T5812] cgroup: Unknown subsys name 'net' [ 88.195989][ T5812] cgroup: Unknown subsys name 'cpuset' [ 88.207408][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.055093][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.039737][ T1590] cfg80211: failed to load regulatory.db [ 92.123590][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.135320][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.143058][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.152557][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.161500][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.169543][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.182906][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.198375][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.210276][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.210522][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.234716][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.241959][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.247936][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.255270][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.266793][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.277298][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.284543][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.288287][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.311936][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.343292][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.837495][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 92.991623][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 93.034543][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 93.182101][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.189459][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.197324][ T5827] bridge_slave_0: entered allmulticast mode [ 93.205046][ T5827] bridge_slave_0: entered promiscuous mode [ 93.214493][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 93.255878][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.263427][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.270773][ T5827] bridge_slave_1: entered allmulticast mode [ 93.278339][ T5827] bridge_slave_1: entered promiscuous mode [ 93.397037][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.404292][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.412346][ T5826] bridge_slave_0: entered allmulticast mode [ 93.420063][ T5826] bridge_slave_0: entered promiscuous mode [ 93.428200][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.435400][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.442767][ T5835] bridge_slave_0: entered allmulticast mode [ 93.450294][ T5835] bridge_slave_0: entered promiscuous mode [ 93.461481][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.487213][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.494431][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.501784][ T5826] bridge_slave_1: entered allmulticast mode [ 93.509306][ T5826] bridge_slave_1: entered promiscuous mode [ 93.516549][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.523811][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.531587][ T5835] bridge_slave_1: entered allmulticast mode [ 93.539539][ T5835] bridge_slave_1: entered promiscuous mode [ 93.550443][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.661261][ T5827] team0: Port device team_slave_0 added [ 93.667224][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.674399][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.681806][ T5825] bridge_slave_0: entered allmulticast mode [ 93.689607][ T5825] bridge_slave_0: entered promiscuous mode [ 93.700237][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.711729][ T5827] team0: Port device team_slave_1 added [ 93.720350][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.730174][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.737583][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.744808][ T5825] bridge_slave_1: entered allmulticast mode [ 93.752601][ T5825] bridge_slave_1: entered promiscuous mode [ 93.762082][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.798038][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.874120][ T5826] team0: Port device team_slave_0 added [ 93.882169][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.889370][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.915980][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.944146][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.955644][ T5826] team0: Port device team_slave_1 added [ 93.962308][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.970044][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.996472][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.010067][ T5835] team0: Port device team_slave_0 added [ 94.028045][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.068509][ T5835] team0: Port device team_slave_1 added [ 94.074799][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.081904][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.107914][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.145470][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.152853][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.179092][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.238418][ T5825] team0: Port device team_slave_0 added [ 94.256501][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.263764][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.290397][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.305166][ T5825] team0: Port device team_slave_1 added [ 94.318457][ T5827] hsr_slave_0: entered promiscuous mode [ 94.325146][ T5827] hsr_slave_1: entered promiscuous mode [ 94.332752][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.340581][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.367483][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.368333][ T5146] Bluetooth: hci1: command tx timeout [ 94.384696][ T5146] Bluetooth: hci2: command tx timeout [ 94.391266][ T5838] Bluetooth: hci3: command tx timeout [ 94.436863][ T5838] Bluetooth: hci0: command tx timeout [ 94.458365][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.465393][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.492468][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.510556][ T5826] hsr_slave_0: entered promiscuous mode [ 94.518282][ T5826] hsr_slave_1: entered promiscuous mode [ 94.524641][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 94.530945][ T5826] Cannot create hsr debugfs directory [ 94.561467][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.568585][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.594794][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.680771][ T5835] hsr_slave_0: entered promiscuous mode [ 94.687667][ T5835] hsr_slave_1: entered promiscuous mode [ 94.693947][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 94.699808][ T5835] Cannot create hsr debugfs directory [ 94.799091][ T5825] hsr_slave_0: entered promiscuous mode [ 94.805768][ T5825] hsr_slave_1: entered promiscuous mode [ 94.821857][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 94.828073][ T5825] Cannot create hsr debugfs directory [ 95.287169][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.304178][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.317242][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.340337][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.417735][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.434898][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.447967][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.460029][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.564393][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.578986][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.613366][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.633955][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.748927][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.761437][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.780597][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.791728][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.849352][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.884723][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.921156][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.948172][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.955520][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.983422][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.006284][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.013550][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.040420][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.047677][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.079651][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.086977][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.130267][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.234263][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.292665][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.299941][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.350052][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.380891][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388145][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.440409][ T5838] Bluetooth: hci3: command tx timeout [ 96.445907][ T5838] Bluetooth: hci2: command tx timeout [ 96.451839][ T5146] Bluetooth: hci1: command tx timeout [ 96.460828][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.502652][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.509918][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.517923][ T5146] Bluetooth: hci0: command tx timeout [ 96.530140][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.537382][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.754736][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.854721][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.866015][ T5827] veth0_vlan: entered promiscuous mode [ 96.910874][ T5827] veth1_vlan: entered promiscuous mode [ 97.013286][ T5826] veth0_vlan: entered promiscuous mode [ 97.039761][ T5826] veth1_vlan: entered promiscuous mode [ 97.053718][ T5827] veth0_macvtap: entered promiscuous mode [ 97.119735][ T5827] veth1_macvtap: entered promiscuous mode [ 97.188090][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.205907][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.239112][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.260240][ T5826] veth0_macvtap: entered promiscuous mode [ 97.279979][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.295873][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.306540][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.329462][ T5826] veth1_macvtap: entered promiscuous mode [ 97.340588][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.351841][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.422850][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.455725][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.472528][ T5825] veth0_vlan: entered promiscuous mode [ 97.526064][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.539670][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.549741][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.575879][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.592495][ T5825] veth1_vlan: entered promiscuous mode [ 97.631529][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.657925][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.700865][ T5835] veth0_vlan: entered promiscuous mode [ 97.741391][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.768125][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.806958][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.814854][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.829714][ T5825] veth0_macvtap: entered promiscuous mode [ 97.846455][ T5835] veth1_vlan: entered promiscuous mode [ 97.864079][ T5825] veth1_macvtap: entered promiscuous mode [ 97.881550][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.971410][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.015428][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.033435][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.042809][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.076879][ T2968] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.085762][ T2968] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130690][ T5835] veth0_macvtap: entered promiscuous mode [ 98.139586][ T2968] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.153906][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.179392][ T5835] veth1_macvtap: entered promiscuous mode [ 98.386950][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.497636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.518264][ T5146] Bluetooth: hci2: command tx timeout [ 98.518287][ T5838] Bluetooth: hci3: command tx timeout [ 98.523732][ T5146] Bluetooth: hci1: command tx timeout [ 98.556784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.598147][ T5838] Bluetooth: hci0: command tx timeout [ 98.604484][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.708888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.752118][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.127135][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204772][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.213889][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.353771][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.462841][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.660715][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.679469][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.038376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.060620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.101526][ T5937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.109257][ T5937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.145821][ T5937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.171436][ T5939] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.184135][ T5939] Zero length message leads to an empty skb [ 100.202242][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.213803][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.222313][ T5937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.247083][ T5937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.309452][ T5937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.322193][ T5937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.331170][ T5937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.373100][ T5937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.424056][ T5937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.430386][ T5937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.482712][ T5937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.728269][ T5951] sysfs_service_op_store: Client not running :-5: [ 101.021805][ T5958] netlink: ct family unspecified [ 101.030110][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.611079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.631706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.688886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.697878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.809033][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.975507][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 102.117472][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.189037][ T5960] HfR: entered promiscuous mode [ 102.277458][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.357941][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.448563][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.764656][ T5982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.774738][ T5982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.781488][ T5982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.809713][ T5982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.886775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 102.918528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.161304][ T5998] FAULT_INJECTION: forcing a failure. [ 103.161304][ T5998] name failslab, interval 1, probability 0, space 0, times 1 [ 103.206485][ T5998] CPU: 1 UID: 0 PID: 5998 Comm: syz.2.16 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.206542][ T5998] Tainted: [L]=SOFTLOCKUP [ 103.206555][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.206587][ T5998] Call Trace: [ 103.206597][ T5998] [ 103.206609][ T5998] dump_stack_lvl+0x100/0x190 [ 103.206673][ T5998] should_fail_ex.cold+0x5/0xa [ 103.206721][ T5998] should_failslab+0xc2/0x120 [ 103.206759][ T5998] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 103.206810][ T5998] ? alloc_empty_file+0x55/0x1c0 [ 103.206860][ T5998] alloc_empty_file+0x55/0x1c0 [ 103.206905][ T5998] alloc_file_pseudo+0x13a/0x230 [ 103.206952][ T5998] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 103.206999][ T5998] ? _raw_spin_unlock+0x28/0x50 [ 103.207041][ T5998] ? alloc_fd+0x476/0x790 [ 103.207079][ T5998] __anon_inode_getfile+0xe8/0x280 [ 103.207125][ T5998] do_epoll_create+0x329/0x4b0 [ 103.207161][ T5998] __x64_sys_epoll_create+0x45/0x70 [ 103.207198][ T5998] do_syscall_64+0x106/0xf80 [ 103.207247][ T5998] ? clear_bhb_loop+0x40/0x90 [ 103.207290][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.207326][ T5998] RIP: 0033:0x7fec82f9c799 [ 103.207364][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.207409][ T5998] RSP: 002b:00007fec83dee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 103.207444][ T5998] RAX: ffffffffffffffda RBX: 00007fec83215fa0 RCX: 00007fec82f9c799 [ 103.207466][ T5998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 103.207487][ T5998] RBP: 00007fec83032c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.207508][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.207529][ T5998] R13: 00007fec83216038 R14: 00007fec83215fa0 R15: 00007ffdbedd8058 [ 103.207573][ T5998] [ 103.653023][ T5994] kAFS: Invalid Command on /proc/fs/afs/cells file [ 103.772344][ T5992] zswap: compressor not available [ 103.947591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.966913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.224525][ T6026] netlink: ct family unspecified [ 104.360701][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.462786][ T6040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.24'. [ 104.475714][ T6040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.24'. [ 104.485127][ T6033] block nbd0: NBD_DISCONNECT [ 104.490844][ T6040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.24'. [ 104.616985][ T6044] netlink: 342 bytes leftover after parsing attributes in process `syz.2.23'. [ 104.637307][ T6037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.669971][ T6037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.686815][ T6037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.717790][ T6037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.947901][ T6051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.948309][ T6051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.956763][ T6051] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.960369][ T6051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.975525][ T6051] netlink: 342 bytes leftover after parsing attributes in process `syz.3.25'. [ 105.151124][ T6056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.169707][ T6056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.183576][ T6056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.202264][ T6056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.214226][ T6058] netlink: 342 bytes leftover after parsing attributes in process `syz.0.27'. [ 105.324779][ T30] audit: type=1326 audit(1773812718.179:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.28" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f6db9c799 code=0x0 [ 105.650283][ T6070] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.734779][ T6075] vhci_hcd vhci_hcd.2: invalid port number 194 [ 105.741487][ T6075] vhci_hcd vhci_hcd.2: invalid port number 194 [ 106.115553][ T6085] binder: 6084:6085 ioctl 40046210 0 returned -14 [ 107.137661][ T6107] netlink: 342 bytes leftover after parsing attributes in process `syz.1.40'. [ 107.159820][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.206425][ T6109] netlink: 342 bytes leftover after parsing attributes in process `syz.1.40'. [ 107.237232][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.244368][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.250817][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.277284][ T6109] netlink: 342 bytes leftover after parsing attributes in process `syz.1.40'. [ 108.906914][ T6117] netlink: 334 bytes leftover after parsing attributes in process `syz.2.44'. [ 109.330329][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.336563][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.342840][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.559975][ T6167] netlink: 330 bytes leftover after parsing attributes in process `syz.2.52'. [ 110.517545][ T6006] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.878435][ T6181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.257432][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 112.324455][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.425006][ T6212] bridge_slave_1 (unregistering): left allmulticast mode [ 112.445409][ T6212] bridge_slave_1 (unregistering): left promiscuous mode [ 112.465866][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.698857][ T6217] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.327228][ T6231] netlink: 342 bytes leftover after parsing attributes in process `syz.1.66'. [ 113.459646][ T6230] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.474274][ T6230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.493979][ T6230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.500508][ T6230] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.559049][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 113.899080][ T6237] netlink: 'syz.1.68': attribute type 16 has an invalid length. [ 113.909391][ T6237] netlink: 294 bytes leftover after parsing attributes in process `syz.1.68'. [ 114.204490][ T6239] device-mapper: ioctl: name not supplied when creating device [ 115.479832][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.479859][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.560018][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.560036][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.232615][ T6271] netlink: 342 bytes leftover after parsing attributes in process `syz.1.76'. [ 116.365421][ T6262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.385791][ T6262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.440672][ T6262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.447080][ T6262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.013383][ T6307] zram0: detected capacity change from 0 to 16 [ 118.443823][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.449957][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.522235][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.522250][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.877936][ T6322] random: crng reseeded on system resumption [ 119.548366][ T6326] ueagle_atm.cmv_file: string parameter too long [ 122.525131][ T6366] Invalid ELF header magic: != ELF [ 122.705317][ T6384] Unable to find swap-space signature [ 123.068033][ T6389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.074668][ T6389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.103890][ T6389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.110319][ T6389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.435362][ T6399] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 123.494945][ T6400] binder: 6396:6400 ioctl c0306201 200000000000 returned -14 [ 125.084750][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.087463][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.166745][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.172847][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.368228][ T6423] FAULT_INJECTION: forcing a failure. [ 125.368228][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 125.443449][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.0.110 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.443505][ T6423] Tainted: [L]=SOFTLOCKUP [ 125.443517][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.443537][ T6423] Call Trace: [ 125.443547][ T6423] [ 125.443570][ T6423] dump_stack_lvl+0x100/0x190 [ 125.443645][ T6423] should_fail_ex.cold+0x5/0xa [ 125.443685][ T6423] should_failslab+0xc2/0x120 [ 125.443723][ T6423] __kmalloc_cache_noprof+0x7a/0x6f0 [ 125.443770][ T6423] ? alloc_ucounts+0x13d/0x5c0 [ 125.443824][ T6423] alloc_ucounts+0x13d/0x5c0 [ 125.443869][ T6423] ? __pfx_alloc_ucounts+0x10/0x10 [ 125.443925][ T6423] set_cred_ucounts+0xcd/0x200 [ 125.443984][ T6423] __sys_setresuid+0x666/0x1280 [ 125.444027][ T6423] do_syscall_64+0x106/0xf80 [ 125.444076][ T6423] ? clear_bhb_loop+0x40/0x90 [ 125.444123][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.444159][ T6423] RIP: 0033:0x7f065c79c799 [ 125.444194][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.444227][ T6423] RSP: 002b:00007f065d68f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 125.444261][ T6423] RAX: ffffffffffffffda RBX: 00007f065ca15fa0 RCX: 00007f065c79c799 [ 125.444283][ T6423] RDX: 0000000000008080 RSI: 0000000000000007 RDI: 0000000000000002 [ 125.444303][ T6423] RBP: 00007f065c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 125.444324][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.444344][ T6423] R13: 00007f065ca16038 R14: 00007f065ca15fa0 R15: 00007ffcce627c08 [ 125.444389][ T6423] [ 126.119514][ T6433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.135690][ T6433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.143369][ T6433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.157215][ T6433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.127420][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.208090][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.208117][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.208221][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.348517][ T6475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.390948][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.441898][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.479627][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.240669][ T6491] process 'syz.2.127' launched ':,' with NULL argv: empty string added [ 129.627232][ T6504] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET) [ 130.202540][ T6517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.217355][ T6517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.223631][ T6517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.232747][ T6517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.812177][ T6532] synth uevent: /bus/mei: unknown uevent action string [ 131.496453][ T6552] netlink: 342 bytes leftover after parsing attributes in process `syz.3.141'. [ 131.507286][ T6552] netlink: 342 bytes leftover after parsing attributes in process `syz.3.141'. [ 131.518987][ T6552] netlink: 342 bytes leftover after parsing attributes in process `syz.3.141'. [ 132.162848][ T6564] FAULT_INJECTION: forcing a failure. [ 132.162848][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.208493][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.225540][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.2.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.225600][ T6564] Tainted: [L]=SOFTLOCKUP [ 132.225612][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.225633][ T6564] Call Trace: [ 132.225643][ T6564] [ 132.225656][ T6564] dump_stack_lvl+0x100/0x190 [ 132.225713][ T6564] should_fail_ex.cold+0x5/0xa [ 132.225752][ T6564] _copy_from_user+0x2e/0xd0 [ 132.225794][ T6564] get_itimerspec64+0x16c/0x2f0 [ 132.225838][ T6564] ? __pfx_get_itimerspec64+0x10/0x10 [ 132.225881][ T6564] ? __pfx_do_futex+0x10/0x10 [ 132.225939][ T6564] __x64_sys_timerfd_settime+0x15f/0x280 [ 132.225991][ T6564] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 132.226055][ T6564] ? xfd_validate_state+0x129/0x190 [ 132.226122][ T6564] do_syscall_64+0x106/0xf80 [ 132.226170][ T6564] ? clear_bhb_loop+0x40/0x90 [ 132.226212][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.226248][ T6564] RIP: 0033:0x7fec82f9c799 [ 132.226275][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.226308][ T6564] RSP: 002b:00007fec83dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 132.226340][ T6564] RAX: ffffffffffffffda RBX: 00007fec83215fa0 RCX: 00007fec82f9c799 [ 132.226362][ T6564] RDX: 0000200000000040 RSI: 0000000000000003 RDI: ffffffffffffffff [ 132.226383][ T6564] RBP: 00007fec83032c99 R08: 0000000000000000 R09: 0000000000000000 [ 132.226404][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.226424][ T6564] R13: 00007fec83216038 R14: 00007fec83215fa0 R15: 00007ffdbedd8058 [ 132.226469][ T6564] [ 132.294512][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.347500][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.421343][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.013901][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023977][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.679548][ T6596] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.686193][ T6596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.699307][ T6596] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.716824][ T6596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.881519][ T6605] netlink: 342 bytes leftover after parsing attributes in process `syz.1.153'. [ 133.897259][ T6605] netlink: 342 bytes leftover after parsing attributes in process `syz.1.153'. [ 133.915522][ T6605] netlink: 342 bytes leftover after parsing attributes in process `syz.1.153'. [ 133.949909][ T6606] usb usb24: usbfs: process 6606 (syz.2.152) did not claim interface 0 before use [ 135.597608][ T6635] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 135.731992][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.738180][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.738207][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.746833][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.641548][ T6670] netlink: 342 bytes leftover after parsing attributes in process `syz.2.166'. [ 136.840956][ T6671] netlink: 342 bytes leftover after parsing attributes in process `syz.2.166'. [ 136.856111][ T6671] netlink: 342 bytes leftover after parsing attributes in process `syz.2.166'. [ 138.413553][ T6703] netlink: 13 bytes leftover after parsing attributes in process `syz.3.172'. [ 138.711968][ T6713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.752106][ T6710] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 139.497302][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 140.224598][ T6722] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 141.874168][ T6761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 141.953260][ T6761] veth0_macvtap: left promiscuous mode [ 141.964345][ T6761] macvtap0: entered promiscuous mode [ 141.971676][ T6761] macvtap0: entered allmulticast mode [ 142.644763][ T6774] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.650960][ T6774] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.657469][ T6774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.663799][ T6774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.356166][ T6796] FAULT_INJECTION: forcing a failure. [ 143.356166][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 143.393842][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.0.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.393895][ T6796] Tainted: [L]=SOFTLOCKUP [ 143.393906][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.393925][ T6796] Call Trace: [ 143.393935][ T6796] [ 143.393947][ T6796] dump_stack_lvl+0x100/0x190 [ 143.394003][ T6796] should_fail_ex.cold+0x5/0xa [ 143.394042][ T6796] should_failslab+0xc2/0x120 [ 143.394077][ T6796] __kmalloc_cache_noprof+0x7a/0x6f0 [ 143.394130][ T6796] ? kernfs_fop_open+0x23d/0xd50 [ 143.394175][ T6796] kernfs_fop_open+0x23d/0xd50 [ 143.394219][ T6796] do_dentry_open+0x6d8/0x1660 [ 143.394253][ T6796] ? __pfx_kernfs_fop_open+0x10/0x10 [ 143.394300][ T6796] vfs_open+0x82/0x3f0 [ 143.394347][ T6796] path_openat+0x208c/0x31a0 [ 143.394396][ T6796] ? __pfx_path_openat+0x10/0x10 [ 143.394446][ T6796] do_file_open+0x20e/0x430 [ 143.394484][ T6796] ? __pfx_do_file_open+0x10/0x10 [ 143.394547][ T6796] ? alloc_fd+0x476/0x790 [ 143.394584][ T6796] ? do_getname+0x191/0x390 [ 143.394630][ T6796] do_sys_openat2+0x10d/0x1e0 [ 143.394673][ T6796] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.394735][ T6796] ? rcu_is_watching+0x12/0xc0 [ 143.394797][ T6796] __x64_sys_openat+0x12d/0x210 [ 143.394843][ T6796] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.394904][ T6796] do_syscall_64+0x106/0xf80 [ 143.394949][ T6796] ? clear_bhb_loop+0x40/0x90 [ 143.394989][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.395023][ T6796] RIP: 0033:0x7f065c79c799 [ 143.395050][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.395082][ T6796] RSP: 002b:00007f065d66e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.395121][ T6796] RAX: ffffffffffffffda RBX: 00007f065ca16090 RCX: 00007f065c79c799 [ 143.395142][ T6796] RDX: 0000000000048402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 143.395162][ T6796] RBP: 00007f065c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 143.395181][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.395200][ T6796] R13: 00007f065ca16128 R14: 00007f065ca16090 R15: 00007ffcce627c08 [ 143.395242][ T6796] [ 144.680918][ T6838] kAFS: Invalid Command on /proc/fs/afs/cells file [ 144.694751][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.694774][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.700975][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.711268][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.791419][ T6896] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 146.791419][ T6896] program syz.3.213 not setting count and/or reply_len properly [ 146.831163][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 146.978015][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 146.987951][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 146.997492][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.009160][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.020532][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.024062][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.027581][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.027627][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 147.039516][ T6903] futex_wake_op: syz.0.214 tries to shift op by -2048; fix this program [ 150.258136][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 150.314851][ T6954] HfR: entered promiscuous mode [ 150.675291][ T6976] sg_write: data in/out 65500/90 bytes for SCSI command 0x0-- guessing data in; [ 150.675291][ T6976] program syz.1.231 not setting count and/or reply_len properly [ 151.498578][ T6992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.523567][ T6992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.564267][ T6992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.608761][ T6992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.370793][ T7023] netlink: 342 bytes leftover after parsing attributes in process `syz.2.243'. [ 152.403628][ T7022] mmap: syz.0.242 (7022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.411843][ T7023] netlink: 342 bytes leftover after parsing attributes in process `syz.2.243'. [ 152.498849][ T7023] netlink: 342 bytes leftover after parsing attributes in process `syz.2.243'. [ 152.654157][ T30] audit: type=1800 audit(5321463655.660:3): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.241" name="file0" dev="tmpfs" ino=371 res=0 errno=0 [ 152.803794][ T7025] ================================================================== [ 152.803825][ T7025] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 152.803874][ T7025] Write of size 8 at addr ffffc90004459000 by task syz.2.243/7025 [ 152.803894][ T7025] [ 152.803908][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.803942][ T7025] Tainted: [L]=SOFTLOCKUP [ 152.803951][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.803967][ T7025] Call Trace: [ 152.803974][ T7025] [ 152.803984][ T7025] dump_stack_lvl+0x100/0x190 [ 152.804020][ T7025] print_report+0x156/0x4c9 [ 152.804055][ T7025] ? _raw_spin_lock_irqsave+0x52/0x60 [ 152.804086][ T7025] ? __virt_addr_valid+0x81/0x620 [ 152.804121][ T7025] ? sys_imageblit+0x19fb/0x1d60 [ 152.804155][ T7025] kasan_report+0xdf/0x1e0 [ 152.804181][ T7025] ? sys_imageblit+0x19fb/0x1d60 [ 152.804220][ T7025] sys_imageblit+0x19fb/0x1d60 [ 152.804259][ T7025] ? __pfx_sys_imageblit+0x10/0x10 [ 152.804295][ T7025] ? prb_read_valid+0x78/0xa0 [ 152.804328][ T7025] ? __pfx_prb_read_valid+0x10/0x10 [ 152.804363][ T7025] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 152.804407][ T7025] soft_cursor+0x524/0xa10 [ 152.804438][ T7025] ? fb_get_color_depth+0x120/0x250 [ 152.804465][ T7025] bit_cursor+0xe58/0x16f0 [ 152.804496][ T7025] ? __pfx_bit_cursor+0x10/0x10 [ 152.804524][ T7025] ? __lock_acquire+0x4a5/0x2630 [ 152.804558][ T7025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.804601][ T7025] ? get_color+0x1da/0x450 [ 152.804623][ T7025] ? __pfx_bit_cursor+0x10/0x10 [ 152.804650][ T7025] fbcon_cursor+0x43c/0x5e0 [ 152.804673][ T7025] ? add_softcursor+0x180/0x290 [ 152.804705][ T7025] set_cursor+0x1db/0x250 [ 152.804734][ T7025] con_write+0x89/0xb0 [ 152.804770][ T7025] do_output_char+0x63b/0x850 [ 152.804811][ T7025] n_tty_write+0x528/0x12d0 [ 152.804841][ T7025] ? __pfx_n_tty_write+0x10/0x10 [ 152.804865][ T7025] ? trace_kmalloc+0x101/0x130 [ 152.804898][ T7025] ? __pfx_woken_wake_function+0x10/0x10 [ 152.804938][ T7025] ? rcu_is_watching+0x12/0xc0 [ 152.804975][ T7025] ? file_tty_write.isra.0+0x694/0x890 [ 152.805011][ T7025] ? kfree+0x2ec/0x6b0 [ 152.805042][ T7025] ? __pfx_n_tty_write+0x10/0x10 [ 152.805067][ T7025] file_tty_write.isra.0+0x4d2/0x890 [ 152.805107][ T7025] redirected_tty_write+0xd4/0x120 [ 152.805144][ T7025] vfs_write+0x6ac/0x1070 [ 152.805165][ T7025] ? __pfx_redirected_tty_write+0x10/0x10 [ 152.805204][ T7025] ? __pfx_vfs_write+0x10/0x10 [ 152.805224][ T7025] ? find_held_lock+0x2b/0x80 [ 152.805255][ T7025] ksys_write+0x12a/0x250 [ 152.805277][ T7025] ? __pfx_ksys_write+0x10/0x10 [ 152.805303][ T7025] do_syscall_64+0x106/0xf80 [ 152.805338][ T7025] ? clear_bhb_loop+0x40/0x90 [ 152.805366][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.805392][ T7025] RIP: 0033:0x7fec82f9c799 [ 152.805411][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.805435][ T7025] RSP: 002b:00007fec83dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.805459][ T7025] RAX: ffffffffffffffda RBX: 00007fec83216090 RCX: 00007fec82f9c799 [ 152.805486][ T7025] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 152.805506][ T7025] RBP: 00007fec83032c99 R08: 0000000000000000 R09: 0000000000000000 [ 152.805521][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.805536][ T7025] R13: 00007fec83216128 R14: 00007fec83216090 R15: 00007ffdbedd8058 [ 152.805560][ T7025] [ 152.805568][ T7025] [ 152.805575][ T7025] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004159000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 152.805632][ T7025] Memory state around the buggy address: [ 152.805644][ T7025] ffffc90004458f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 152.805670][ T7025] ffffc90004458f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 152.805687][ T7025] >ffffc90004459000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.805700][ T7025] ^ [ 152.805713][ T7025] ffffc90004459080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.805730][ T7025] ffffc90004459100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.805744][ T7025] ================================================================== [ 152.805758][ T7025] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.805777][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.805812][ T7025] Tainted: [L]=SOFTLOCKUP [ 152.805821][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.805835][ T7025] Call Trace: [ 152.805843][ T7025] [ 152.805852][ T7025] dump_stack_lvl+0x100/0x190 [ 152.805894][ T7025] vpanic+0x552/0x970 [ 152.805918][ T7025] ? __pfx_vpanic+0x10/0x10 [ 152.805941][ T7025] ? __pfx_vprintk_emit+0x10/0x10 [ 152.805967][ T7025] ? sys_imageblit+0x19fb/0x1d60 [ 152.806002][ T7025] panic+0xd1/0xe0 [ 152.806024][ T7025] ? __pfx_panic+0x10/0x10 [ 152.806051][ T7025] ? sys_imageblit+0x19fb/0x1d60 [ 152.806088][ T7025] check_panic_on_warn.cold+0x19/0x34 [ 152.806115][ T7025] end_report.part.0+0x3a/0x90 [ 152.806149][ T7025] kasan_report.cold+0xe/0x18 [ 152.806185][ T7025] ? sys_imageblit+0x19fb/0x1d60 [ 152.806224][ T7025] sys_imageblit+0x19fb/0x1d60 [ 152.806263][ T7025] ? __pfx_sys_imageblit+0x10/0x10 [ 152.806300][ T7025] ? prb_read_valid+0x78/0xa0 [ 152.806332][ T7025] ? __pfx_prb_read_valid+0x10/0x10 [ 152.806373][ T7025] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 152.806416][ T7025] soft_cursor+0x524/0xa10 [ 152.806448][ T7025] ? fb_get_color_depth+0x120/0x250 [ 152.806475][ T7025] bit_cursor+0xe58/0x16f0 [ 152.806507][ T7025] ? __pfx_bit_cursor+0x10/0x10 [ 152.806535][ T7025] ? __lock_acquire+0x4a5/0x2630 [ 152.806570][ T7025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.806613][ T7025] ? get_color+0x1da/0x450 [ 152.806635][ T7025] ? __pfx_bit_cursor+0x10/0x10 [ 152.806662][ T7025] fbcon_cursor+0x43c/0x5e0 [ 152.806686][ T7025] ? add_softcursor+0x180/0x290 [ 152.806718][ T7025] set_cursor+0x1db/0x250 [ 152.806748][ T7025] con_write+0x89/0xb0 [ 152.806784][ T7025] do_output_char+0x63b/0x850 [ 152.806825][ T7025] n_tty_write+0x528/0x12d0 [ 152.806857][ T7025] ? __pfx_n_tty_write+0x10/0x10 [ 152.806888][ T7025] ? trace_kmalloc+0x101/0x130 [ 152.806914][ T7025] ? __pfx_woken_wake_function+0x10/0x10 [ 152.806954][ T7025] ? rcu_is_watching+0x12/0xc0 [ 152.806991][ T7025] ? file_tty_write.isra.0+0x694/0x890 [ 152.807027][ T7025] ? kfree+0x2ec/0x6b0 [ 152.807059][ T7025] ? __pfx_n_tty_write+0x10/0x10 [ 152.807084][ T7025] file_tty_write.isra.0+0x4d2/0x890 [ 152.807125][ T7025] redirected_tty_write+0xd4/0x120 [ 152.807162][ T7025] vfs_write+0x6ac/0x1070 [ 152.807184][ T7025] ? __pfx_redirected_tty_write+0x10/0x10 [ 152.807222][ T7025] ? __pfx_vfs_write+0x10/0x10 [ 152.807243][ T7025] ? find_held_lock+0x2b/0x80 [ 152.807275][ T7025] ksys_write+0x12a/0x250 [ 152.807296][ T7025] ? __pfx_ksys_write+0x10/0x10 [ 152.807323][ T7025] do_syscall_64+0x106/0xf80 [ 152.807358][ T7025] ? clear_bhb_loop+0x40/0x90 [ 152.807387][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.807412][ T7025] RIP: 0033:0x7fec82f9c799 [ 152.807435][ T7025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.807459][ T7025] RSP: 002b:00007fec83dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.807482][ T7025] RAX: ffffffffffffffda RBX: 00007fec83216090 RCX: 00007fec82f9c799 [ 152.807499][ T7025] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000c [ 152.807515][ T7025] RBP: 00007fec83032c99 R08: 0000000000000000 R09: 0000000000000000 [ 152.807530][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.807545][ T7025] R13: 00007fec83216128 R14: 00007fec83216090 R15: 00007ffdbedd8058 [ 152.807570][ T7025] [ 152.808225][ T7025] Kernel Offset: disabled