last executing test programs: 18.647630561s ago: executing program 3 (id=156): sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 18.389845477s ago: executing program 3 (id=159): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty27\x00', 0x901e81, 0x0) ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) r2 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_cmdlines_size\x00', 0x400, 0x0) socket(0xa, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810085, 0xffb, 0x8000000008011, r2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x0, 0x14, 0xffffffffffffffff, 0x9) r5 = socketpair$auto(0x5, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r5, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) read$auto(r6, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket(0x28, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 18.068363974s ago: executing program 3 (id=161): ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x163340, 0x6a) (async) socket(0xa, 0x2, 0x88) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x5) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x102, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x6) (async) io_uring_setup$auto(0x6, 0x0) (async) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) (async) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) socket(0x29, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x401) (async) close_range$auto(0x2, 0xa, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) (async) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) 17.440629143s ago: executing program 3 (id=167): sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 17.1909104s ago: executing program 3 (id=168): read$auto(0x3, 0x0, 0x8080) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1}, 0xc) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/devices/pci0000:00/0000:00:00.0/driver_override\x00', 0x4a401, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/batadv_slave_1/base_reachable_time_ms\x00', 0x141241, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1, &(0x7f00000000c0)={0xe4, 0x37b60000, 0x8, @raw=0x34}, 0x800) read$auto(r4, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r5, r5, 0x0, 0x7ffff000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/snd_dummy.0/sound/card0/pcmC0D0p/power/autosuspend_delay_ms\x00', 0xa0000, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 16.40748031s ago: executing program 3 (id=174): unshare$auto(0x40000080) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f0000000100)={0x1, @ptr=0x3ff, 0xf51}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x800000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x25, 0x2, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) close_range$auto(0x2, 0xa, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = socket(0x5, 0x2, 0xd) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_lockdown_ops_lockdown(r3, &(0x7f0000000040)=""/84, 0x54) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 5.45910848s ago: executing program 0 (id=225): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) socketpair$auto(0x3, 0x5, 0x8, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) close_range$auto(0x2, 0xa, 0x0) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\xaa\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;H\xa2\xac\x8a\xddt8\xec\xfb\a0a\xb4\xdds\x86\x88\xc3+M\xf3\x1f!F\x14\xea\xd7\xee\x10\xf7t\x91\x80\xf3=Y\xbf.\x8b)@\xd2\x1dr$4pJ\xf9\xb9\x01\v#2\xb2\x9f\xe6\xa3\xb5i0+E\xfa\x0e\xe1}\x9d\xc8\xa4Y\xee%\xaaH', 0x8000002, 0x3) 5.127173981s ago: executing program 0 (id=226): clock_gettime$auto(0xfffffffffffffbfb, 0xfffffffffffffffc) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000040)={0x400, 0x1, 0x1, 0x73, 0x6, 0xffffffffffffffff}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0xd7773ac, 0x3, 0x137, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe1, 0x7, 0xf7, 0x2, 0x0, 0x1, 0x100000000, 0x0, 0x2, 0x6}) rt_sigqueueinfo$auto(r3, 0x101, &(0x7f0000000400)={@siginfo_0_0={0xfffffffc, 0x9, 0x1, @_sigchld={r4, r5, 0x2, 0xb2, 0xf}}}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video3\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) 4.076860293s ago: executing program 0 (id=229): mmap$auto(0xfffffffffffffffe, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x7, 0x89, 0x1, 0xeb7, 0xfffffffffffffffa, 0x8000) ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x77) prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x2, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x40002, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) 3.106912483s ago: executing program 1 (id=232): sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 2.995415459s ago: executing program 1 (id=233): socket(0x11, 0x4, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70003e8) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) madvise$auto(0x0, 0x2003f0, 0x17) 2.595661112s ago: executing program 0 (id=234): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0xc08c5332, 0x38) close_range$auto(0x2, 0x8000, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x5) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, r0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x1, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0xbb0a, 0x2000000df, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) epoll_create$auto(0xfffffff0) 2.510467957s ago: executing program 2 (id=235): r0 = socket(0x2, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x801, 0x100) (async) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) r4 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ramdisk_pages/ram15\x00', 0x1005, 0x0) read$auto_fops_u64_ro_(r4, &(0x7f0000000100)=""/55, 0x37) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0400a980820001802c47992c4f60e56166dd471862826dcc66fc9a347e99c7f44c5957b940ab5537f51ee37d73e76b4748cd1ac65c6de7156aad22b22b21d765fdb08a056d92ac3ea3910171f656a440a4394ca8dc695c3e4fafa105498d8b641a2924006f80040049801b0041005db6fca3b04d97cc9dff260720fcaeb4e29e59d588d51e000000"], 0x3bc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) (async) sendmmsg$auto(r0, 0x0, 0x7, 0x20020000) 2.341495397s ago: executing program 0 (id=236): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x80000000008000) (async, rerun: 64) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x0) (async) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) mmap$auto(0x0, 0x2000e, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) r0 = gettid() (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) rt_sigtimedwait$auto(&(0x7f0000000180)={0xfffffffffffffc03}, 0x0, 0x0, 0x8) (async) r1 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = socket(0x5, 0x2, 0xd) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_lockdown_ops_lockdown(r3, &(0x7f0000000040)=""/84, 0x54) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 1.13416809s ago: executing program 1 (id=240): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111101, 0x0) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) (async) msgctl$auto_IPC_SET(0x8000, 0x1, &(0x7f0000000100)={{0x7, 0x0, 0xee01, 0x400, 0x10001, 0x3, 0x9c}, &(0x7f0000000080)=0xff, &(0x7f00000000c0)=0x8, 0x4, 0x9, 0x4, 0x1, 0x8, 0xfffe, 0xfffb, 0x660, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000000180)=ANY=[@ANYBLOB="78120000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf253a000000bf005b0088eb2d6487f77660297d5c6111aa2155e2c3086415975e0af7e8ab20fa3f27cbe44962d39e4d9b0fd0931a0ea05ba8892281fcc2778a077eb68b951613b54b22b85e34b68365d40583507e72164f7d27b9f46d0f0a56a946e7083a3033db14c6c3da4d35b04019a4fd389757d2cddd8de1c80f06ea1a8a1aa9352f90b1b1dfeb2b63c6983001fef4a18de538e2edb85e2c236a6c8e78ef1bba70583f39c4c1716171b436caceebba065d7157ca4d0d3cea56d4dc8ba16271e2342500b6007a80aefff35a5db53871b603f8005ffbce980a1aed71d1b7b87eacbec212bde6bd731ee7782db3bda4db1fab7f6cdf9e6ecdcc170800c680040018801991d7f8f6765872d55484ab59a489190288a50d78f5a0b2cbe5a8202cdbcc3473c4a7115bc880283712e27d00931c046d8fa4c0673e3573d7fc3b26f51bd40df1022683c652586e5cfdabe819719211d1686b9fc73ef6b6d1f93391ea7bb5d49b6e8e16ff06c46bad84a564cb83233f080050800400cd80000004104300fbcfbead9e35643488d7f76b5fb9557a678046e92f1b47460eb7cc76c5ac6c052dd5f07d4d0a4a1df753050978c71846e4d11031450550bcc5bca66806f4944827527985a4e7437f68f2e1e5637ca79fedfa65e01be15941dc5ebb7e7f9ab1cc61929d1282800c4de5e5082fe1ac9e3558301774cdf258212752e580f8068fccdc512f8e1ca86367e258c1ccbdecefb5f610f70ac82dee82e661c2686563af240b732af1725ef8f7004dd4319df91d880d4adadfe5ab1321e6267cedaa409811175dbef4ac8b11b12bda50e5bc2629447b833d32274a2fa82b538d15dbf11b3c0a76f5fc6653d779d2a51206bc54387fd9247ee7fe758ac86cbb13a21dcc74c9e4f652d917e1ac7bfbd2c96cef9bab3955111e3bd5582ad143932da1b146c28faa9b5c5ab0f3f5947cbff8e61bc2e5045cffa3cd0b2ed25a24e26d902422fd48d69683f01c70691654f6bea45ca7827a810a4031e4d00aaeecf66bd1001dec00de27bf26517c530d77a62ca73985f722242ce0ab4f6dd6e12a70876aa0c3e0c3596f6c655dab6f8acf26463fddae3f0083df492fee1777fb72fc45329d74a56d62b5d20ac8afea61a1ced9ef1c23088a44b6f397d011cdc6c3189d06471af12cc361279bd49164c68e0eee74eb7790a3dc887750cba48288099dafa56a687fcece9486c6d734c32448de1e73bdfc1df7093fe9b9a477afa0f9fbdd25e93a55cc9cde910e8bbeddc8fedf930fde44c18f9df1e855ff9aa8ffd4692ec718d8b51dcc66e386a7751f68c8fa6427d543303d457f36cae8c6f2fc59e86c7c8c808d68279c74f7d7d7d816e3be82837a57f0e1e4658bac3f62b5b77aece0d6ff18897d493fb7df6748049385e462ca8b569754802410ef4198c362c5441df254a58b25f815aa2db59a8ace34307a0032b80ac5956aa0b16aae673547758f4c3472f66652fc65ed163297dfee53e1a9af45140068c795eeeb21f1c7bf5d4d5889cdf0691de2c97517dc5fb2accc477fb2e6504a5cdbd6f48e2cb28c19738fe77b7a436df50b1693f82e0c64e0ca696c92591d76dec69f4ef3c6b7aa850a4784d66c20296a34305c189c6fb0eecd2d7b1e06c2621777bd76ba9fe0c3ef7bcd3d4f7655d9ed5ce694e1114cd3d9244febed421c30a109990ad1d71d4bbb560f3f19f0803bb33a7b9c1ec03fc5a16bee29d1c4ff678ca683736c61a044d1f661a04fee20d4d7363ea38decdeb0894459cf72ab51de8f677b8c37911a4826b38514114de642f0dd7fc1e2372c4021bd2a38b539a9e8249ce3b55c88f4aeb1a2c09f233001e05b195abc21d4c5bc2b0519ecf4b6ec7870932e49bd21e083d65924e2c79b45f2ba28eee66b3f2f686eec0486de81f01496fd8d19e2edbd8a233437e74293aaa9b9c84034a0fdb681b35fb26c95ba7bc74c3e3a05ab702a7e6126fd07e137c6802bb1d067fedd2759795ffa63a7dff764e05ecb006ee56332c88bd375950f3386c43e1292071f666ed2def0b8b4e01a316164acb139639a557189cab9536c11ebc527d0713e94fb652adac9cd3c37e8897a9df41f14ce6139c07e90d86326919c451db50f314a2a9e2465063fe4117ebec6bf8c3e3e35ebb21ab80b72a727c81e4572ed230157f9e2438adb5a57418a2cc126a76888d53485288d3ab7b843a1d1849893ba8c349fd86d33253af61311e546e7c59a1fd78b40a90bdc19047e3335b728729592c2b566683824b0395ff0c617ca17307f2fa1f4ad8bde592c69a6e929402b43b36dbcf2ba9e346aa04c5840135a7aabe20833fef642abe7df8c20cec4b22c5137424f18d243cfac4cf5c92f47c09fbc88efa5e7b6c6b7843097481447a9d4e2dcce9810ff0f0a865be55990629a32a0bebaab7fe261c66b33f84d0f3d78f8a5df46c77a20dbf65c1371e3efb26476c337f63e8170715fa0395d6053beaafa0cbc837e4f06eefaafde2689a912039470af110d1a1af1a256b63aea6c1bac546d508a09c5d769a3f9b5c4586928df7dbefa1fa3b53952caf44bd87d3e663dc3c629c89ad5f117b70b7cb8aa2e78070b001b2c7970cfcfd3742917e8e91c858b5386fd88158402db4fc4555cc39c32b5aa26ac0bdb1aed4d35fd20a1e0a3978bfa67ac6fc2b2d8c49392d651cb850cf587cca81c6d947b3d579aa22db45a6e169c7fa8c45e03102ea09dcb049161f2fbea7317c62572f725964891e8845736a70afbb75813d3bb4d950621acde12d4c2b7d09a58bc4436f74d1a068e1359a2ced29e753b5fde94ce5b25afc09a4e777da3150ac428a11ee2d793daf10ea183cb74a15e4fb8e06bd5067f31c240b189aa68f220b646dbda638fbf11ad4de725959c901580dff80aaa5736d16c4cd0c75d8ed0eae07a4ea223f766c6b01e90f850bc53f584ce90031f062c3361f7dc5a5dd8948a015b5482ef1b320d54f04c2e173d4a46cb9dd6d50eb886a8d6aea9a8c3c98972b0a2cd907582778c73a2358a55b702208f4e66f548a577884c62074a0014cf9b329850ec8f7dd634a8d56318c682bb6b808aa1b9b6346bac88739c1f0836730be86d6ae029321ed100bcb9d3878ead297e2e5e96a75ff53957004e6f6626399dac059eb2147affad0ad51f3d1776248d8c135a78a0989a7347a26dd34db1dbd17332a18a7bade8467d844d7bc9b4e56423976b70cb2fcd5d0939cf403f54644645067e98ef059ec84609ea856c87378b30b556e561bf7418a10fe81ac654563c946241be75de4f84e0a9c5c96d3dd49765005545fe366849b6628307bc88b29277f540efa459648c861fa1d6671a5b13da07494e31ce41bbb667f3e09ec64f5760e68f782cc5f27114f15afe1614539237880c71892a47cff69b81b24950d6a5d6c9a131ea947df4c7b2a0cb112adc6a7123b008f70b36816220dd6f19e2af34dc4f59752ee04b5396a4f927738f34fb206c70452fed887b949def6e7dae3bb805991cabcba47f971afa98da69cdd3a95f5ede6346a75051788fe214c4e31e41fb208f97d03b3ac827a111836fcd599f307743d02a1979ecd8de7648653dccab8a958e910714c0b6e1606f774b3b0cbd5a19c2cc2ef5274ba758ddad3c3d21904774ec4e337bc5032cfab2b7ed64c9929b73f7101a9b8d0f1f2f21436c824899bf061f381d9210595857e54f7b5ee7024a586015f6238a26cd38a94c3f593a125ab5e2acdef0e0ee099e8c897c2fdbcf3758f03acf63965ebde5b9b88ce6fe340d862a3068f0f1f7ee8794d26e9c455b7466ccc13816c7deeba30dfda3a6b4ddc5c6a6a02329198b71ae4ff4ad63287bd2b225682db4882201404dbcf0fd01e49eeefde6c8a67afc1dca2845257fcfcb076b8e6450422dcbf9214599ee39690542b04a6de01ddbf826dca8a997804e9fcc9cda45cb3be8c23cc4c11ab9e3d8410d9b576c0249ea7aa892b2fed712664bdae92c36f0fd4d18b630cfd59e84d8b8c3f9ccd6462ea33120c696f52361caada3a1ed8de7ceee0da599ce0068c8363cc53cfe73bd02e20a946caaebf751e76b302b77eb67eaf01a93289825a3e0a52d08c8f1501b95ecd130b8be15d476e56bc8b19b436b520981fef2b853ddd36b7032791766181fe7770883ae26f6617d643563cb2967d039a759718e505a212ebd50b455701a9ca34efe8d797517feb98fe50f15d76f64e5cff2658eedbafcbb8961612a512e20259d145c3e63d04490386dab6087100f7671989f7c7195fc25a694a89c78f8cd37f47e9aec57c3cba3db29f3b84178179e3e19044bc18b46b52aee26120925178f7f6735eb35a9eddff9ae7de1865a8bc47f17980130ad12cb6be4f694f7db6f9468134f0b39a3712e3816a15c127e967f1bc103db5bd942a3c5ce3238bec9219616aeb61d3dcdc26766b3080c298c36efbae90bb51028c4fd7100bfbc7eff28a0d27b029fe361af9dff46ca95204642e094290d65fb53f5072cdfb4ffcfbf3155357cb0a9a5b7a76506e429893202a62f07a729c61ba93efa3d6a549be8bc782a92ff3fc00aae41237816b1c94b94a5c27186a8dab9cf52111444c7bcf3c84f53ef6e7fee0b1d96ccf2e1529bfab4c47fe383cd15cb4acf789dbf97dcc877020664f92c71eb0ddb57990c6069d48fc0ac22978c9790fd78a869a1cf94db6b91a210ec68f8f925b4c188dd138e3fbdad3991bfb5f2dc32aad27de7ab63a92dd587e1493fdd27af7dddd2d7725be53a083b8e8a59e8fa720d7770e9600e3d2f598fa6f76aac72dc28e17062a87804f9b2e4d3db6fd0d720a50474020b750f7277b0984d9b0a8c228f0fd85a2cf6ac7b4d4157024ad83e683a6861f812a1db4ee974005bc003895d1da3aacdcd42e69dad3efbce4bb1126deee32b43e29d4635e4b1c3735114be6d90a92b69e23f03d3ac92bdbb986563eb536e2b410701e4e08076f22944beae30b4bdd9c5df0b2845d1d152e126d2ccde8806ff6bf9b8b4199c3c876631f40c2cc734ad018bc14399b1a960d5877ccc0c3c98a84d61d08471320eabb01101af8eb7078d79b6a70340516195757b56b3f5e03d23e90764bc60e34b4deefd19c321c2e33f29473274b9a3471f81c6b07223d523717a74eb53b372fcba2877b0abc515e8a064a2a28754ce98a9aa432b37b99253cf9674b19d1b89314c09c7a47ac4ff9eb2f2e391d09a37f6c8304eccb89feefbf4ceef24d11c0fb554a60e847baf97737e0254251f72cd043504361bdccb00e271dd068b0b0834c4ecb2eb887ed4d55497334f0b297d249f9ace28613d826a02aaeb25603f2b737e0dc05a7bc6138952b5f6d6274726c015a0008f3f11a437e09d8ec5afca599b074e038bcb8a73448eea28f42bba5a48a3e3b02d4d9e4a26059f029c737dbbc443a9a095922b0d30b5af5917ad642934a395538acad101a0cc4c5535a96f539440cf146487734ac2d31f7585021981dfc6ce1b03c863939a60a2d70510aa76c007404bf2b1be4d7b6f30d2e4487b1460949447bf07ae236d7f8a70f87d0e18f7de8411a33c51ec7b1a30e324b46f4b551af002fba3d725977d865e568dbea5211940080d757c357cc0d26729d55fda589e3fae8f08f68827085cdf109255790173fc9fb0a9f805ad70451a550b85bded089f5c83c3a924d94956a2a95f7ea12ebdec36d8b584cc92425dd7e1d2dc8c6ccb81589898e4017bea4bc897b276309ac1706004189d2e47e2ae6ad0ac4c789797d599b49d3978576fd1cdc53b609f0b0b1735c4ebba2ef4526e81429f47294e82fe4106f97d7f7c5cf7b65bfb8ee5a027cdda1239fb85be79922c615def4124e622f6e73065fb50c13f182e391bb6be662d00100ff52bc748612e9849aa5b2021dcc8c8bfbefae523bd91a368baad230b45a6486e96662bfbf84017fbbe5f7a8c540068563232299e033848e1145296a208ee1bbec59a08d7a7ce91cb4661ed409a06b97f985159ee3b46527d89d1d713c6b65f3ace0c71c86cfe8197e62311aa1d3fcbe8628a587d07b9ccf3260eef3a116601fd87a9c28c3c3a3479fab598f7ee3b02905472c786114dfcb3efec41c1728fdc13487b74faec9fedb7244335d0c6a67ce1e49d11b9bfb5f5dcb5803d8449c12232720ecdeea321d9efb9853fa6da4097026e24309e3d94e281cbbba85b4259bdcd0c06d23252cedea2224ffa41275c1a23dd32655b0857db2bb68b4872e9aec271a4aa8a3bea3444e9936459a2165b4dae5a1b31664bfea115056e9fcac2715af3cdefb0947dd43f0892ee51b85fd0701970363377512dea874e53a04aa0b88705001d000000000005008a0009000000cb00458008004f0000000000666b5a86bd0e5e3c8cfb38647c90b0dd0296bcc17c1cd4dda489602b6e3b3e7b28e03c0c0ad8221f2749ea92c7f31f1bced8fffcb07ec6d1339aed3a225b8e478a816f0198d39c6f83d0d9fd32423026b73170765074e6920e57d315c07a9aa388dde1cc85cb564b5824914c815790e8432bdcb2f51bce01678e761f66be0d378629b4daf2a1ce88f11dfbe98054d3bd116ba22c75b752251414c6d90327a44e221e0b9d4bfbeafb1a5c08b070a58808004300", @ANYRES32=r3, @ANYBLOB="0800f900", @ANYRES32=r4, @ANYBLOB="0005001c004000000004002d01"], 0x1278}, 0x1, 0x0, 0x0, 0x40041}, 0x40) (async) madvise$auto(0x0, 0x2003f0, 0x18) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) (async) write$auto(r0, &(0x7f0000000040)='\x00', 0x200) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r7 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x800400b, 0x2000000329, 0x2000000010012, r7, 0x8000) (async) r8 = socket(0x2a, 0x2, 0x800009) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) sendfile$auto(r8, r9, 0x0, 0x8) (async) ioctl$auto_XFS_IOC_ERROR_INJECTION(r7, 0x40085874, &(0x7f0000000080)={r8, 0x7}) (async) mprotect$auto(0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) 1.107544724s ago: executing program 2 (id=241): mmap$auto(0x0, 0x7fff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20000092) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8, 0x0, 0x8, 0x9}, 0x7}, 0x3, 0x8) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x3, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x7, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0xa5c, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x7, 0x0, 0x1487, 0x0, 0xe3c1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe85, &(0x7f0000000200)={0x0, 0xffe7}}, 0x881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) socket(0x1d, 0x3, 0x1) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="1b0026bd7400fddbdf2503000000040008005400038004000f800400110008001e00", @ANYRES32=0x0, @ANYBLOB="3e00ba809bdd3500e6006e4f74b952aa5712f88a7a8fb419c8806810e9132c14bc81998b9330fea5b928ceda31c689e030e397a640b5db26e4077700000000001200010089877148000000000000000000000000040002"], 0x84}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 783.242828ms ago: executing program 0 (id=242): socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x8982, 0x1) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) getcwd$auto(0x0, 0x7) (async) getcwd$auto(0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) socket(0xa, 0x2, 0x73) (async) r1 = socket(0xa, 0x2, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000000)=""/118, 0x76) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x2cc, 0x0, 0x206, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xffffffff}, @NL80211_ATTR_MLO_TTLM_DLINK={0x71, 0x148, "c2b53bcbdd93096d193fceee18fd5ed284178c346372934d6cc0f6c285345df10fa176fe16d790aba9c8b626236436bd19f36669478a8bc9d6383037c3f34d9e6d2df205f495b2f9e4a932b428b7a40c2c1bf18f7509d73519e054b7a024526452e8c49721028d3b72ebe94164"}, @NL80211_ATTR_FRAME={0x232, 0x33, "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"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8000}, 0xc008800) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 580.747377ms ago: executing program 1 (id=243): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/version\x00', 0x8040, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socketpair$auto(0xc9, 0x23, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x10000) getsockopt$auto(r1, 0x80084, 0xd, 0x0, &(0x7f0000000000)=0x48) arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) socket(0x11, 0x80003, 0x300) r2 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x2000, 0x0) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x7, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) 571.919713ms ago: executing program 2 (id=244): mmap$auto(0x0, 0x7fff, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf781d2502000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20000092) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8, 0x0, 0x8, 0x9}, 0x7}, 0x3, 0x8) 451.870488ms ago: executing program 2 (id=245): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)="5963a72e0fb3c20ad7e273ed", 0x4, &(0x7f0000000040), 0x2, 0x0, &(0x7f0000000180)=0x1ff}, 0x2, &(0x7f0000000300)={0x6, 0x7fff, &(0x7f00000001c0)="6811c59cddb917fd127970567b4ec6412b0a5cd26381a1c6239527f23c4ac289f64d4f509b80d03a20cb83111d41fe80c66a4015eba0c626f9c7a9fb22622f9cf29e1e341a53bdeaea4ae49ae531e23d52e36c89933d9cd7c9ccf76047b9652530dfc5a68a7db7f9bea64d78aeb670", &(0x7f00000002c0)="3fe90cafe87c27db66de6e56", 0xce, 0x8}}) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x6, 0x40000b}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x5, 0x84) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) socket(0x10, 0x2, 0x0) (async) socket(0x18, 0xa, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="02002c060000000000000000000004001601"], 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xfffffffffffffcfd, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0x24, 0x34, "c43c1f36ba53ce79892fc1f745673db5b6013c1970828d5f1c5436cb7f2d4c28"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x40040) (async) socket(0x2b, 0x2, 0x300) (async) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (async) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x7e5874c8b5c55401, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) (async) socket(0xa, 0x2, 0x73) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) brk$auto(0x7fffffffefff) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) (async) sendfile$auto(r4, r1, 0x0, 0x4) 79.309278ms ago: executing program 1 (id=246): r0 = socket(0x3, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000180)=@bpf_attr_11={0x80000000, 0xfffffffffffffff8, 0x1c, 0xf6e6, 0x7, 0x0, 0x1, r0}, 0x9) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r2, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0xa, 0x3, 0x3a) close$auto(r3) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r3, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(0x0, 0x4603, 0x56) getdents$auto(r4, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x2082, 0x0) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/uptime\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) 0s ago: executing program 2 (id=247): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) r1 = socket(0x2, 0x3, 0x6) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4d", 0xfdef) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) lsm_list_modules$auto(&(0x7f0000000100)=0x9, &(0x7f0000000140)=0xef, 0x0) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0xaa442, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r4 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) read$auto_stats_fops_(r4, &(0x7f0000000840)=""/4096, 0x1000) write$auto(r3, &(0x7f0000000000)='/dev/loop6\x00', 0x6) write$auto_fops_init_pkru_pkeys(r4, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003", 0x3d) write$auto(r3, &(0x7f0000000380)='\xff\xff', 0x7fff) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 83.007866][ T5811] cgroup: Unknown subsys name 'net' [ 83.113822][ T5811] cgroup: Unknown subsys name 'cpuset' [ 83.122775][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.908388][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.779135][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.788105][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.796546][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.805582][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.813621][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.822231][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.823316][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.838304][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.838656][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.849963][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.854871][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.861336][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.867796][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.874479][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.894828][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.898855][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.910083][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.929932][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.937474][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.947603][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.635204][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.765986][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.783135][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.876657][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 87.936370][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.944203][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.952691][ T5823] bridge_slave_0: entered allmulticast mode [ 87.960152][ T5823] bridge_slave_0: entered promiscuous mode [ 87.997001][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.004650][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.012689][ T5823] bridge_slave_1: entered allmulticast mode [ 88.020576][ T5823] bridge_slave_1: entered promiscuous mode [ 88.098428][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.105750][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.113385][ T5822] bridge_slave_0: entered allmulticast mode [ 88.121056][ T5822] bridge_slave_0: entered promiscuous mode [ 88.146132][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.154126][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.161706][ T5824] bridge_slave_0: entered allmulticast mode [ 88.168898][ T5824] bridge_slave_0: entered promiscuous mode [ 88.176557][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.183994][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.191733][ T5822] bridge_slave_1: entered allmulticast mode [ 88.198985][ T5822] bridge_slave_1: entered promiscuous mode [ 88.209199][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.226094][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.233796][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.241153][ T5824] bridge_slave_1: entered allmulticast mode [ 88.248610][ T5824] bridge_slave_1: entered promiscuous mode [ 88.269023][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.341546][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.377235][ T5823] team0: Port device team_slave_0 added [ 88.386090][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.396997][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.404781][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.412843][ T5821] bridge_slave_0: entered allmulticast mode [ 88.420546][ T5821] bridge_slave_0: entered promiscuous mode [ 88.431223][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.443258][ T5823] team0: Port device team_slave_1 added [ 88.458390][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.466014][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.473749][ T5821] bridge_slave_1: entered allmulticast mode [ 88.481338][ T5821] bridge_slave_1: entered promiscuous mode [ 88.490994][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.557114][ T5822] team0: Port device team_slave_0 added [ 88.591455][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.599231][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.626921][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.642036][ T5822] team0: Port device team_slave_1 added [ 88.650571][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.662228][ T5824] team0: Port device team_slave_0 added [ 88.670697][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.681216][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.688541][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.715521][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.741312][ T5824] team0: Port device team_slave_1 added [ 88.798482][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.805688][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.832170][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.871130][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.878136][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.905052][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.918792][ T5821] team0: Port device team_slave_0 added [ 88.926098][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.933557][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.959894][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.970623][ T51] Bluetooth: hci3: command tx timeout [ 88.976612][ T5838] Bluetooth: hci2: command tx timeout [ 88.996095][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.003977][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.032510][ T5838] Bluetooth: hci0: command tx timeout [ 89.038077][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.039799][ T5838] Bluetooth: hci1: command tx timeout [ 89.061412][ T5821] team0: Port device team_slave_1 added [ 89.150141][ T5822] hsr_slave_0: entered promiscuous mode [ 89.157240][ T5822] hsr_slave_1: entered promiscuous mode [ 89.165065][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.173556][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.201288][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.219115][ T5824] hsr_slave_0: entered promiscuous mode [ 89.226273][ T5824] hsr_slave_1: entered promiscuous mode [ 89.233090][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 89.239001][ T5824] Cannot create hsr debugfs directory [ 89.251089][ T5823] hsr_slave_0: entered promiscuous mode [ 89.257954][ T5823] hsr_slave_1: entered promiscuous mode [ 89.264586][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.270777][ T5823] Cannot create hsr debugfs directory [ 89.280997][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.288298][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.317603][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.476358][ T5821] hsr_slave_0: entered promiscuous mode [ 89.483505][ T5821] hsr_slave_1: entered promiscuous mode [ 89.491163][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 89.497484][ T5821] Cannot create hsr debugfs directory [ 89.912189][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.930332][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.953053][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.963595][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.028706][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.043585][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.071909][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.095036][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.158283][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.169075][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.183117][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.196417][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.316342][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.335378][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.348433][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.367209][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.439311][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.518507][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.534841][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.568335][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.575735][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.603165][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.625451][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.632673][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.652428][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.688936][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.710935][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.718199][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.746679][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.754090][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.764546][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.771782][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.801275][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.808672][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.822936][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.928854][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.972694][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.980549][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.022854][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.030289][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.044674][ T5838] Bluetooth: hci2: command tx timeout [ 91.050294][ T51] Bluetooth: hci3: command tx timeout [ 91.111830][ T5838] Bluetooth: hci1: command tx timeout [ 91.117569][ T5838] Bluetooth: hci0: command tx timeout [ 91.502701][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.621215][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.643530][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.698235][ T5822] veth0_vlan: entered promiscuous mode [ 91.737311][ T5822] veth1_vlan: entered promiscuous mode [ 91.751699][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.842086][ T5823] veth0_vlan: entered promiscuous mode [ 91.854207][ T5824] veth0_vlan: entered promiscuous mode [ 91.863007][ T5822] veth0_macvtap: entered promiscuous mode [ 91.882973][ T5822] veth1_macvtap: entered promiscuous mode [ 91.896417][ T5823] veth1_vlan: entered promiscuous mode [ 91.912798][ T5824] veth1_vlan: entered promiscuous mode [ 91.953006][ T5821] veth0_vlan: entered promiscuous mode [ 91.968515][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.982502][ T5821] veth1_vlan: entered promiscuous mode [ 92.015415][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.033527][ T5824] veth0_macvtap: entered promiscuous mode [ 92.056874][ T5823] veth0_macvtap: entered promiscuous mode [ 92.069005][ T5823] veth1_macvtap: entered promiscuous mode [ 92.078295][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088881][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.102552][ T5824] veth1_macvtap: entered promiscuous mode [ 92.113312][ T115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.124479][ T115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.155073][ T9] cfg80211: failed to load regulatory.db [ 92.204670][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.214208][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.255759][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.265903][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.287398][ T115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.297203][ T5821] veth0_macvtap: entered promiscuous mode [ 92.327031][ T115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.340530][ T115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.351020][ T5821] veth1_macvtap: entered promiscuous mode [ 92.376570][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386500][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414537][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426374][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.443595][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.449871][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.464412][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.589084][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.631113][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.641319][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.650738][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.685035][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.720538][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.783108][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.799585][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.811983][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.827841][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.838607][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.867288][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.880038][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.888753][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.901496][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013961][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.041251][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.106731][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.116277][ T5838] Bluetooth: hci2: command tx timeout [ 93.124259][ T51] Bluetooth: hci3: command tx timeout [ 93.141094][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.190022][ T5838] Bluetooth: hci0: command tx timeout [ 93.195493][ T5838] Bluetooth: hci1: command tx timeout [ 93.222861][ T30] audit: type=1326 audit(1773054646.990:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.2.3" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac9719c799 code=0x0 [ 93.248446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.288967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.753045][ T5922] FAULT_INJECTION: forcing a failure. [ 93.753045][ T5922] name failslab, interval 1, probability 0, space 0, times 1 [ 93.933245][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 93.933286][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.933308][ T5922] Call Trace: [ 93.933318][ T5922] [ 93.933328][ T5922] dump_stack_lvl+0x100/0x190 [ 93.933380][ T5922] should_fail_ex.cold+0x5/0xa [ 93.933424][ T5922] ? lsm_blob_alloc+0x68/0x90 [ 93.933458][ T5922] should_failslab+0xc2/0x120 [ 93.933491][ T5922] __kmalloc_noprof+0xe0/0x850 [ 93.933537][ T5922] ? trace_kmem_cache_alloc+0xf3/0x120 [ 93.933578][ T5922] lsm_blob_alloc+0x68/0x90 [ 93.933616][ T5922] security_sk_alloc+0x2d/0x290 [ 93.933661][ T5922] sk_prot_alloc+0x1d1/0x2a0 [ 93.933709][ T5922] sk_alloc+0x36/0xe80 [ 93.933744][ T5922] unix_create1+0xa6/0x700 [ 93.933793][ T5922] unix_create+0x145/0x270 [ 93.933833][ T5922] __sock_create+0x339/0x860 [ 93.933884][ T5922] __sys_socketpair+0x261/0x5b0 [ 93.933915][ T5922] ? __pfx___sys_socketpair+0x10/0x10 [ 93.933945][ T5922] ? xfd_validate_state+0x129/0x190 [ 93.933998][ T5922] __x64_sys_socketpair+0x96/0x100 [ 93.934028][ T5922] ? lockdep_hardirqs_on+0x78/0x100 [ 93.934065][ T5922] do_syscall_64+0x106/0xf80 [ 93.934101][ T5922] ? clear_bhb_loop+0x40/0x90 [ 93.934140][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.934170][ T5922] RIP: 0033:0x7f1f51f9c799 [ 93.934197][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.934223][ T5922] RSP: 002b:00007f1f52e06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 93.934252][ T5922] RAX: ffffffffffffffda RBX: 00007f1f52216090 RCX: 00007f1f51f9c799 [ 93.934270][ T5922] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 93.934288][ T5922] RBP: 00007f1f52032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 93.934304][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.934322][ T5922] R13: 00007f1f52216128 R14: 00007f1f52216090 R15: 00007ffd31792028 [ 93.934360][ T5922] [ 94.178260][ T5921] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 94.203313][ T30] audit: type=1800 audit(1773054647.970:3): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5" name="lu_gp_id" dev="configfs" ino=7136 res=0 errno=0 [ 94.230285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.290512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.440445][ T5931] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.460592][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.190200][ T51] Bluetooth: hci3: command tx timeout [ 95.195888][ T5838] Bluetooth: hci2: command tx timeout [ 95.271429][ T5838] Bluetooth: hci1: command tx timeout [ 95.277545][ T51] Bluetooth: hci0: command tx timeout [ 95.570632][ T5915] kexec: Could not allocate control_code_buffer [ 95.747738][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.945361][ T5955] nbd: illegal input index 37139 [ 96.824131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.833614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.842799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.879872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.949949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.430171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.869939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.878921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.340653][ T5999] Zero length message leads to an empty skb [ 99.776559][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.806205][ T30] audit: type=1800 audit(1773054653.570:4): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.32" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 100.608733][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 103.113506][ T6085] netlink: 'syz.3.43': attribute type 9 has an invalid length. [ 105.900171][ T6122] zswap: compressor not available [ 106.345786][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 106.525056][ T6148] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 106.679398][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 106.958334][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.023331][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.109349][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.181675][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.278044][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.319189][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 107.339680][ T6149] netlink: 62 bytes leftover after parsing attributes in process `syz.2.58'. [ 109.398039][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 139 > 18 [ 109.406731][ T51] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 109.476464][ T6196] random: crng reseeded on system resumption [ 110.387966][ T6208] block2mtd: illegal erase size [ 111.243374][ T6220] vivid-007: ================= START STATUS ================= [ 111.254339][ T6217] zram: Added device: zram1 [ 111.289609][ T6220] vivid-007: Generate PTS: true [ 111.297664][ T6220] vivid-007: Generate SCR: true [ 111.303530][ T6220] tpg source WxH: 320x240 (Y'CbCr) [ 111.308898][ T6220] tpg field: 1 [ 111.369831][ T6220] tpg crop: (0,0)/320x240 [ 111.374328][ T6220] tpg compose: (0,0)/320x240 [ 111.448790][ T6220] tpg colorspace: 8 [ 111.453102][ T6220] tpg transfer function: 0/0 [ 111.458178][ T6220] tpg Y'CbCr encoding: 0/0 [ 111.552035][ T6220] tpg quantization: 0/0 [ 111.556369][ T6220] tpg RGB range: 0/2 [ 111.600344][ T6220] vivid-007: ================== END STATUS ================== [ 111.998127][ T6245] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.034658][ T6244] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.749196][ T6259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.770818][ T6259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.870247][ T6259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.961131][ T6259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.006661][ T6259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.047788][ T6259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.144445][ T6259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.170966][ T6259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.218694][ T6259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.250679][ T6285] bridge0: port 3(gretap0) entered blocking state [ 114.262457][ T6259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.290205][ T6259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.301505][ T6285] bridge0: port 3(gretap0) entered disabled state [ 114.305071][ T6259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.308590][ T6285] gretap0: entered allmulticast mode [ 114.328492][ T6285] FAULT_INJECTION: forcing a failure. [ 114.328492][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 114.341527][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.2.90 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.341574][ T6285] Tainted: [L]=SOFTLOCKUP [ 114.341584][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.341600][ T6285] Call Trace: [ 114.341610][ T6285] [ 114.341620][ T6285] dump_stack_lvl+0x100/0x190 [ 114.341668][ T6285] should_fail_ex.cold+0x5/0xa [ 114.341701][ T6285] should_failslab+0xc2/0x120 [ 114.341732][ T6285] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 114.341776][ T6285] ? __kernfs_new_node+0xd2/0x960 [ 114.341834][ T6285] __kernfs_new_node+0xd2/0x960 [ 114.341884][ T6285] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.341934][ T6285] ? find_held_lock+0x2b/0x80 [ 114.341961][ T6285] ? kernfs_root+0xee/0x2a0 [ 114.341997][ T6285] ? kernfs_root+0xee/0x2a0 [ 114.342042][ T6285] kernfs_new_node+0x11b/0x1a0 [ 114.342094][ T6285] __kernfs_create_file+0x53/0x350 [ 114.342135][ T6285] sysfs_add_file_mode_ns+0x207/0x3c0 [ 114.342187][ T6285] sysfs_create_file_ns+0x145/0x1e0 [ 114.342228][ T6285] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 114.342266][ T6285] ? kernfs_create_link+0x1bd/0x240 [ 114.342300][ T6285] ? kernfs_put+0x3f/0x60 [ 114.342343][ T6285] ? sysfs_do_create_link_sd+0xbb/0x140 [ 114.342390][ T6285] br_sysfs_addif+0xe4/0x210 [ 114.342434][ T6285] br_add_if+0x701/0x1b40 [ 114.342471][ T6285] ? security_capable+0x80/0x260 [ 114.342519][ T6285] add_del_if+0x114/0x160 [ 114.342555][ T6285] br_dev_siocdevprivate+0x8ac/0x1650 [ 114.342592][ T6285] ? __lock_acquire+0x4a5/0x2630 [ 114.342627][ T6285] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 114.342675][ T6285] ? do_raw_spin_lock+0x128/0x260 [ 114.342740][ T6285] ? mark_held_locks+0x40/0x70 [ 114.342786][ T6285] ? netdev_name_node_lookup+0x107/0x150 [ 114.342819][ T6285] ? __mutex_lock+0x26a/0x1b90 [ 114.342874][ T6285] dev_ifsioc+0xc1e/0x1e90 [ 114.342914][ T6285] ? __pfx_dev_ifsioc+0x10/0x10 [ 114.342944][ T6285] ? __pfx___mutex_lock+0x10/0x10 [ 114.342999][ T6285] ? dev_load+0x8e/0x240 [ 114.343030][ T6285] ? dev_load+0x8e/0x240 [ 114.343072][ T6285] dev_ioctl+0x70e/0x1070 [ 114.343109][ T6285] sock_ioctl+0x494/0x6b0 [ 114.343159][ T6285] ? __pfx_sock_ioctl+0x10/0x10 [ 114.343204][ T6285] ? hook_file_ioctl_common+0x146/0x410 [ 114.343263][ T6285] ? __fget_files+0x21f/0x3d0 [ 114.343300][ T6285] ? __pfx_sock_ioctl+0x10/0x10 [ 114.343351][ T6285] __x64_sys_ioctl+0x18e/0x210 [ 114.343398][ T6285] do_syscall_64+0x106/0xf80 [ 114.343434][ T6285] ? clear_bhb_loop+0x40/0x90 [ 114.343473][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.343505][ T6285] RIP: 0033:0x7fac9719c799 [ 114.343532][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.343560][ T6285] RSP: 002b:00007fac97fff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.343590][ T6285] RAX: ffffffffffffffda RBX: 00007fac97416090 RCX: 00007fac9719c799 [ 114.343618][ T6285] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a [ 114.343636][ T6285] RBP: 00007fac97232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 114.343654][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.343671][ T6285] R13: 00007fac97416128 R14: 00007fac97416090 R15: 00007ffd4004bff8 [ 114.343716][ T6285] [ 114.358246][ T6285] gretap0: left allmulticast mode [ 114.397119][ T6259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.672832][ T6298] FAULT_INJECTION: forcing a failure. [ 114.672832][ T6298] name fail_futex, interval 1, probability 0, space 0, times 1 [ 114.672865][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.0.91 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.672889][ T6298] Tainted: [L]=SOFTLOCKUP [ 114.672896][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.672906][ T6298] Call Trace: [ 114.672912][ T6298] [ 114.672919][ T6298] dump_stack_lvl+0x100/0x190 [ 114.672949][ T6298] should_fail_ex.cold+0x5/0xa [ 114.672971][ T6298] get_futex_key+0x1d2/0x1620 [ 114.672996][ T6298] ? __pfx_get_futex_key+0x10/0x10 [ 114.673025][ T6298] futex_wake+0xea/0x530 [ 114.673055][ T6298] ? __pfx_futex_wake+0x10/0x10 [ 114.673092][ T6298] do_futex+0x32b/0x350 [ 114.673115][ T6298] ? __pfx_do_futex+0x10/0x10 [ 114.673148][ T6298] ? __do_sys_request_key+0x35c/0x3c0 [ 114.673175][ T6298] __x64_sys_futex+0x34f/0x4d0 [ 114.673200][ T6298] ? __do_sys_request_key+0x203/0x3c0 [ 114.673225][ T6298] ? __pfx___x64_sys_futex+0x10/0x10 [ 114.673256][ T6298] do_syscall_64+0x106/0xf80 [ 114.673278][ T6298] ? clear_bhb_loop+0x40/0x90 [ 114.673300][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.673319][ T6298] RIP: 0033:0x7f606ab9c799 [ 114.673334][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.673351][ T6298] RSP: 002b:00007f606b99f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.673368][ T6298] RAX: ffffffffffffffda RBX: 00007f606ae15fa8 RCX: 00007f606ab9c799 [ 114.673379][ T6298] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f606ae15fac [ 114.673389][ T6298] RBP: 00007f606ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 114.673399][ T6298] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 114.673410][ T6298] R13: 00007f606ae16038 R14: 00007ffe8fdc5300 R15: 00007ffe8fdc53e8 [ 114.673431][ T6298] [ 115.159258][ T6303] __nla_validate_parse: 11 callbacks suppressed [ 115.159281][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 115.196290][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.684678][ T6303] veth1_macvtap: left promiscuous mode [ 115.989542][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.149621][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.309541][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.270536][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.069539][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.229716][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.390980][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.431432][ T6363] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.924461][ T6383] FAULT_INJECTION: forcing a failure. [ 118.924461][ T6383] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.979647][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.1.109 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.979696][ T6383] Tainted: [L]=SOFTLOCKUP [ 118.979707][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.979726][ T6383] Call Trace: [ 118.979736][ T6383] [ 118.979749][ T6383] dump_stack_lvl+0x100/0x190 [ 118.979801][ T6383] should_fail_ex.cold+0x5/0xa [ 118.979837][ T6383] get_futex_key+0x1d2/0x1620 [ 118.979878][ T6383] ? __pfx_get_futex_key+0x10/0x10 [ 118.979929][ T6383] futex_wake+0xea/0x530 [ 118.979978][ T6383] ? __pfx_futex_wake+0x10/0x10 [ 118.980027][ T6383] ? putname+0xb1/0x110 [ 118.980056][ T6383] ? kmem_cache_free+0x124/0x6a0 [ 118.980116][ T6383] do_futex+0x32b/0x350 [ 118.980156][ T6383] ? __pfx_do_futex+0x10/0x10 [ 118.980193][ T6383] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.980236][ T6383] ? __fget_files+0x21f/0x3d0 [ 118.980269][ T6383] __x64_sys_futex+0x34f/0x4d0 [ 118.980310][ T6383] ? __x64_sys_openat+0x12d/0x210 [ 118.980350][ T6383] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.980407][ T6383] do_syscall_64+0x106/0xf80 [ 118.980442][ T6383] ? clear_bhb_loop+0x40/0x90 [ 118.980480][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.980511][ T6383] RIP: 0033:0x7f9beed9c799 [ 118.980536][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.980562][ T6383] RSP: 002b:00007f9befc4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.980591][ T6383] RAX: ffffffffffffffda RBX: 00007f9bef016098 RCX: 00007f9beed9c799 [ 118.980610][ T6383] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9bef01609c [ 118.980628][ T6383] RBP: 00007f9bef016090 R08: 0000000000000000 R09: 0000000000000000 [ 118.980645][ T6383] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 118.980662][ T6383] R13: 00007f9bef016128 R14: 00007ffd4fd9af50 R15: 00007ffd4fd9b038 [ 118.980703][ T6383] [ 119.349671][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.962422][ T6391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.003316][ T30] audit: type=1326 audit(1773054673.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.1.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9beed9c799 code=0x0 [ 120.039329][ T5838] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 120.066207][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 120.149618][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.244618][ T6385] capability: warning: `syz.2.108' uses 32-bit capabilities (legacy support in use) [ 120.316010][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.469534][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.080652][ T6401] ima: policy update failed [ 121.093047][ T30] audit: type=1802 audit(1773054674.860:6): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.115" res=0 errno=0 [ 122.158041][ T6435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.389793][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.785710][ T6462] nfs: Unknown parameter 'm?LH>｢^eko}* ' [ 123.830721][ T6462] MTRR 1 not used [ 123.870211][ T6460] can: request_module (can-proto-4) failed. [ 123.919012][ T6475] FAULT_INJECTION: forcing a failure. [ 123.919012][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 123.950403][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.1.127 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.950453][ T6475] Tainted: [L]=SOFTLOCKUP [ 123.950464][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.950481][ T6475] Call Trace: [ 123.950490][ T6475] [ 123.950501][ T6475] dump_stack_lvl+0x100/0x190 [ 123.950549][ T6475] should_fail_ex.cold+0x5/0xa [ 123.950583][ T6475] should_failslab+0xc2/0x120 [ 123.950615][ T6475] __kmalloc_cache_noprof+0x7a/0x6f0 [ 123.950651][ T6475] ? snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 123.950686][ T6475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.950737][ T6475] snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 123.950769][ T6475] ? fixup_unreferenced_params+0x4b5/0xea0 [ 123.950814][ T6475] snd_pcm_hw_params+0x1729/0x1cb0 [ 123.950856][ T6475] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 123.950892][ T6475] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 123.950944][ T6475] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 123.951000][ T6475] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 123.951036][ T6475] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 123.951101][ T6475] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 123.951150][ T6475] ? task_work_add+0x201/0x3b0 [ 123.951194][ T6475] ? __pfx___mutex_lock+0x10/0x10 [ 123.951258][ T6475] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 123.951311][ T6475] snd_pcm_oss_sync+0x265/0x840 [ 123.951343][ T6475] snd_pcm_oss_release+0x238/0x300 [ 123.951371][ T6475] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 123.951398][ T6475] __fput+0x3ff/0xb40 [ 123.951442][ T6475] task_work_run+0x150/0x240 [ 123.951487][ T6475] ? __pfx_task_work_run+0x10/0x10 [ 123.951542][ T6475] exit_to_user_mode_loop+0x100/0x4a0 [ 123.951588][ T6475] do_syscall_64+0x668/0xf80 [ 123.951623][ T6475] ? clear_bhb_loop+0x40/0x90 [ 123.951662][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.951693][ T6475] RIP: 0033:0x7f9beed9c799 [ 123.951720][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.951748][ T6475] RSP: 002b:00007f9befc6d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 123.951791][ T6475] RAX: 0000000000000000 RBX: 00007f9bef015fa0 RCX: 00007f9beed9c799 [ 123.951811][ T6475] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 123.951828][ T6475] RBP: 00007f9beee32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 123.951847][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.951865][ T6475] R13: 00007f9bef016038 R14: 00007f9bef015fa0 R15: 00007ffd4fd9b038 [ 123.951909][ T6475] [ 124.376110][ T30] audit: type=1326 audit(1773054678.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.3.129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f51f9c799 code=0x0 [ 124.977884][ T6492] netlink: zone id is out of range [ 124.984688][ T6492] netlink: zone id is out of range [ 124.993479][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 125.008398][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 125.074141][ T6492] netlink: zone id is out of range [ 125.118055][ T6492] netlink: zone id is out of range [ 125.152062][ T6492] netlink: zone id is out of range [ 125.261516][ T6492] netlink: set zone limit has 8 unknown bytes [ 125.781236][ T30] audit: type=1326 audit(1773054679.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.3.134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f51f9c799 code=0x0 [ 126.230530][ T6513] FAULT_INJECTION: forcing a failure. [ 126.230530][ T6513] name fail_futex, interval 1, probability 0, space 0, times 0 [ 126.289817][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.3.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.289867][ T6513] Tainted: [L]=SOFTLOCKUP [ 126.289878][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.289895][ T6513] Call Trace: [ 126.289904][ T6513] [ 126.289916][ T6513] dump_stack_lvl+0x100/0x190 [ 126.289962][ T6513] should_fail_ex.cold+0x5/0xa [ 126.289992][ T6513] get_futex_key+0x1d2/0x1620 [ 126.290032][ T6513] ? __pfx_get_futex_key+0x10/0x10 [ 126.290080][ T6513] futex_wake+0xea/0x530 [ 126.290123][ T6513] ? do_raw_spin_lock+0x128/0x260 [ 126.290168][ T6513] ? __pfx_futex_wake+0x10/0x10 [ 126.290208][ T6513] ? do_timer_create+0xea1/0x14b0 [ 126.290255][ T6513] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.290299][ T6513] ? lockdep_hardirqs_on+0x78/0x100 [ 126.290337][ T6513] ? _raw_spin_unlock_irq+0x2e/0x50 [ 126.290369][ T6513] ? do_timer_create+0x746/0x14b0 [ 126.290410][ T6513] do_futex+0x32b/0x350 [ 126.290455][ T6513] ? __pfx_do_futex+0x10/0x10 [ 126.290494][ T6513] ? __fget_files+0x21f/0x3d0 [ 126.290528][ T6513] __x64_sys_futex+0x34f/0x4d0 [ 126.290566][ T6513] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 126.290608][ T6513] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.290661][ T6513] do_syscall_64+0x106/0xf80 [ 126.290704][ T6513] ? clear_bhb_loop+0x40/0x90 [ 126.290742][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.290774][ T6513] RIP: 0033:0x7f1f51f9c799 [ 126.290810][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.290838][ T6513] RSP: 002b:00007f1f52dc40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.290868][ T6513] RAX: ffffffffffffffda RBX: 00007f1f52216278 RCX: 00007f1f51f9c799 [ 126.290887][ T6513] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f5221627c [ 126.290905][ T6513] RBP: 00007f1f52216270 R08: 0000000000000000 R09: 0000000000000000 [ 126.290922][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.290938][ T6513] R13: 00007f1f52216308 R14: 00007ffd31791f40 R15: 00007ffd31792028 [ 126.290974][ T6513] [ 126.729162][ T6520] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 127.061365][ T6531] FAULT_INJECTION: forcing a failure. [ 127.061365][ T6531] name failslab, interval 1, probability 0, space 0, times 0 [ 127.159613][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.2.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.159655][ T6531] Tainted: [L]=SOFTLOCKUP [ 127.159663][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.159677][ T6531] Call Trace: [ 127.159685][ T6531] [ 127.159694][ T6531] dump_stack_lvl+0x100/0x190 [ 127.159734][ T6531] should_fail_ex.cold+0x5/0xa [ 127.159762][ T6531] should_failslab+0xc2/0x120 [ 127.159786][ T6531] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 127.159829][ T6531] ? __kernfs_new_node+0xd2/0x960 [ 127.159868][ T6531] __kernfs_new_node+0xd2/0x960 [ 127.159904][ T6531] ? __pfx___kernfs_new_node+0x10/0x10 [ 127.159952][ T6531] ? find_held_lock+0x2b/0x80 [ 127.159973][ T6531] ? kernfs_root+0xee/0x2a0 [ 127.160003][ T6531] ? kernfs_root+0xee/0x2a0 [ 127.160048][ T6531] kernfs_new_node+0x11b/0x1a0 [ 127.160089][ T6531] __kernfs_create_file+0x53/0x350 [ 127.160119][ T6531] sysfs_add_file_mode_ns+0x207/0x3c0 [ 127.160157][ T6531] internal_create_group+0x593/0xf40 [ 127.160198][ T6531] ? __pfx_internal_create_group+0x10/0x10 [ 127.160237][ T6531] ? kernfs_create_link+0x1bd/0x240 [ 127.160268][ T6531] internal_create_groups+0x9d/0x150 [ 127.160304][ T6531] device_add+0x77a/0x1950 [ 127.160331][ T6531] ? __pfx_device_add+0x10/0x10 [ 127.160352][ T6531] ? trace_kmalloc+0x101/0x130 [ 127.160375][ T6531] ? __kasan_kmalloc+0xaa/0xb0 [ 127.160409][ T6531] ? lockdep_init_map_type+0x5c/0x250 [ 127.160440][ T6531] ? lockdep_init_map_type+0x5c/0x250 [ 127.160474][ T6531] input_register_device+0x7d2/0xe20 [ 127.160510][ T6531] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 127.160550][ T6531] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.160583][ T6531] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 127.160630][ T6531] ? find_held_lock+0x2b/0x80 [ 127.160650][ T6531] ? __fget_files+0x215/0x3d0 [ 127.160686][ T6531] ? __pfx_uinput_ioctl+0x10/0x10 [ 127.160710][ T6531] __x64_sys_ioctl+0x18e/0x210 [ 127.160744][ T6531] do_syscall_64+0x106/0xf80 [ 127.160771][ T6531] ? clear_bhb_loop+0x40/0x90 [ 127.160800][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.160830][ T6531] RIP: 0033:0x7fac9719c799 [ 127.160849][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.160870][ T6531] RSP: 002b:00007fac98020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.160892][ T6531] RAX: ffffffffffffffda RBX: 00007fac97415fa0 RCX: 00007fac9719c799 [ 127.160907][ T6531] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 127.160927][ T6531] RBP: 00007fac97232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 127.160940][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.160953][ T6531] R13: 00007fac97416038 R14: 00007fac97415fa0 R15: 00007ffd4004bff8 [ 127.160984][ T6531] [ 127.193542][ T6510] kexec: Could not allocate control_code_buffer [ 127.565062][ T6549] netlink: 68 bytes leftover after parsing attributes in process `syz.0.141'. [ 130.761689][ T30] audit: type=1326 audit(1773054684.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9beed9c799 code=0x0 [ 130.827989][ T6597] FAULT_INJECTION: forcing a failure. [ 130.827989][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 130.844005][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.1.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.844052][ T6597] Tainted: [L]=SOFTLOCKUP [ 130.844062][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.844079][ T6597] Call Trace: [ 130.844088][ T6597] [ 130.844099][ T6597] dump_stack_lvl+0x100/0x190 [ 130.844146][ T6597] should_fail_ex.cold+0x5/0xa [ 130.844179][ T6597] should_failslab+0xc2/0x120 [ 130.844209][ T6597] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 130.844248][ T6597] ? mas_alloc_nodes+0x280/0x390 [ 130.844285][ T6597] mas_alloc_nodes+0x280/0x390 [ 130.844320][ T6597] mas_preallocate+0x39c/0xf10 [ 130.844366][ T6597] ? __pfx_mas_preallocate+0x10/0x10 [ 130.844397][ T6597] ? find_held_lock+0x2b/0x80 [ 130.844439][ T6597] ? __pfx___might_resched+0x10/0x10 [ 130.844497][ T6597] vma_link+0x12c/0x710 [ 130.844544][ T6597] ? __pfx_vma_link+0x10/0x10 [ 130.844607][ T6597] copy_vma+0x7e6/0xac0 [ 130.844656][ T6597] ? __pfx_copy_vma+0x10/0x10 [ 130.844722][ T6597] ? __lock_acquire+0x4a5/0x2630 [ 130.844779][ T6597] ? finish_task_switch.isra.0+0x200/0xb80 [ 130.844813][ T6597] copy_vma_and_data+0x1cf/0x7c0 [ 130.844861][ T6597] ? __pfx_copy_vma_and_data+0x10/0x10 [ 130.844921][ T6597] ? __vma_start_write+0x17f/0x280 [ 130.844958][ T6597] ? __pfx___vma_start_write+0x10/0x10 [ 130.845006][ T6597] move_vma+0x51b/0x1890 [ 130.845054][ T6597] ? __pfx_move_vma+0x10/0x10 [ 130.845099][ T6597] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 130.845131][ T6597] ? cap_mmap_addr+0x4b/0x120 [ 130.845169][ T6597] ? bpf_lsm_mmap_addr+0x9/0x30 [ 130.845212][ T6597] ? security_mmap_addr+0x71/0x1e0 [ 130.845242][ T6597] ? __get_unmapped_area+0x255/0x3e0 [ 130.845277][ T6597] ? vrm_set_new_addr+0x204/0x290 [ 130.845321][ T6597] mremap_to+0x1b7/0x450 [ 130.845364][ T6597] do_mremap+0xb76/0x2130 [ 130.845420][ T6597] ? __pfx_do_mremap+0x10/0x10 [ 130.845483][ T6597] __do_sys_mremap+0x126/0x170 [ 130.845527][ T6597] ? __pfx___do_sys_mremap+0x10/0x10 [ 130.845570][ T6597] ? __fget_files+0x21f/0x3d0 [ 130.845604][ T6597] ? __x64_sys_futex+0x34f/0x4d0 [ 130.845665][ T6597] do_syscall_64+0x106/0xf80 [ 130.845710][ T6597] ? clear_bhb_loop+0x40/0x90 [ 130.845748][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.845778][ T6597] RIP: 0033:0x7f9beed9c799 [ 130.845804][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.845830][ T6597] RSP: 002b:00007f9befc0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 130.845859][ T6597] RAX: ffffffffffffffda RBX: 00007f9bef016270 RCX: 00007f9beed9c799 [ 130.845877][ T6597] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 130.845895][ T6597] RBP: 00007f9beee32bd9 R08: 0000000100000000 R09: 0000000000000000 [ 130.845912][ T6597] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 130.845927][ T6597] R13: 00007f9bef016308 R14: 00007f9bef016270 R15: 00007ffd4fd9b038 [ 130.845967][ T6597] [ 131.876117][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 132.295166][ T6595] kexec: Could not allocate control_code_buffer [ 133.036399][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 133.114214][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124924][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.596478][ T6675] FAULT_INJECTION: forcing a failure. [ 133.596478][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 133.609779][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.609829][ T6675] Tainted: [L]=SOFTLOCKUP [ 133.609849][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.609866][ T6675] Call Trace: [ 133.609876][ T6675] [ 133.609887][ T6675] dump_stack_lvl+0x100/0x190 [ 133.609940][ T6675] should_fail_ex.cold+0x5/0xa [ 133.609976][ T6675] should_failslab+0xc2/0x120 [ 133.610009][ T6675] __kmalloc_cache_noprof+0x7a/0x6f0 [ 133.610049][ T6675] ? snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 133.610086][ T6675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.610145][ T6675] snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 133.610180][ T6675] ? fixup_unreferenced_params+0x4b5/0xea0 [ 133.610219][ T6675] snd_pcm_hw_params+0x1729/0x1cb0 [ 133.610260][ T6675] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 133.610298][ T6675] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 133.610357][ T6675] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 133.610416][ T6675] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 133.610461][ T6675] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 133.610532][ T6675] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 133.610579][ T6675] ? task_work_add+0x201/0x3b0 [ 133.610622][ T6675] ? __pfx___mutex_lock+0x10/0x10 [ 133.610686][ T6675] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 133.610739][ T6675] snd_pcm_oss_sync+0x265/0x840 [ 133.610775][ T6675] snd_pcm_oss_release+0x238/0x300 [ 133.610806][ T6675] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 133.610845][ T6675] __fput+0x3ff/0xb40 [ 133.610891][ T6675] task_work_run+0x150/0x240 [ 133.610935][ T6675] ? __pfx_task_work_run+0x10/0x10 [ 133.610990][ T6675] exit_to_user_mode_loop+0x100/0x4a0 [ 133.611035][ T6675] do_syscall_64+0x668/0xf80 [ 133.611069][ T6675] ? clear_bhb_loop+0x40/0x90 [ 133.611107][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.611139][ T6675] RIP: 0033:0x7f606ab9c799 [ 133.611165][ T6675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.611193][ T6675] RSP: 002b:00007f606b99f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 133.611222][ T6675] RAX: 0000000000000000 RBX: 00007f606ae15fa0 RCX: 00007f606ab9c799 [ 133.611241][ T6675] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 133.611259][ T6675] RBP: 00007f606ac32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 133.611278][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.611296][ T6675] R13: 00007f606ae16038 R14: 00007f606ae15fa0 R15: 00007ffe8fdc53e8 [ 133.611338][ T6675] [ 135.911876][ T6725] netlink: 186 bytes leftover after parsing attributes in process `syz.2.182'. [ 136.245305][ T6725] input: jJǸ-9%vJ86 as /devices/virtual/input/input7 [ 136.392781][ T6734] syz.1.186 (6734): /proc/6729/oom_adj is deprecated, please use /proc/6729/oom_score_adj instead. [ 138.663753][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 138.753245][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 139.347747][ T6781] program syz.1.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.077544][ T6821] zswap: compressor  not available [ 141.366009][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'. [ 142.446600][ T6850] input: f as /devices/virtual/input/input8 [ 144.329524][ T6892] can: request_module (can-proto-5) failed. [ 145.486888][ T6913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.497257][ T6913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.520204][ T6913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.547017][ T6913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.735304][ T6930] ima: policy update failed [ 145.742821][ T30] audit: type=1807 audit(1773054699.500:10): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 145.780436][ T30] audit: type=1802 audit(1773054699.500:11): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.227" res=0 errno=0 [ 145.798298][ T30] audit: type=1802 audit(1773054699.530:12): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.227" res=0 errno=0 [ 146.551872][ T6937] bridge0: port 3(team0) entered blocking state [ 146.558208][ T6937] bridge0: port 3(team0) entered disabled state [ 146.575124][ T6937] team0: entered allmulticast mode [ 146.583438][ T6937] team_slave_0: entered allmulticast mode [ 146.589344][ T6937] team_slave_1: entered allmulticast mode [ 146.598896][ T6937] team0: entered promiscuous mode [ 146.604082][ T6937] team_slave_0: entered promiscuous mode [ 146.610453][ T6937] team_slave_1: entered promiscuous mode [ 146.618468][ T6937] bridge0: port 3(team0) entered blocking state [ 146.625100][ T6937] bridge0: port 3(team0) entered forwarding state [ 146.870233][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.513212][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.589777][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.596491][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.630010][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.645918][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.657513][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.676633][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.699950][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.640137][ T7019] ================================================================== [ 150.640156][ T7019] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 150.640200][ T7019] Write of size 8 at addr ffffc90004061000 by task syz.2.247/7019 [ 150.640224][ T7019] [ 150.640241][ T7019] CPU: 0 UID: 0 PID: 7019 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.640280][ T7019] Tainted: [L]=SOFTLOCKUP [ 150.640291][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.640307][ T7019] Call Trace: [ 150.640317][ T7019] [ 150.640326][ T7019] dump_stack_lvl+0x100/0x190 [ 150.640367][ T7019] print_report+0x156/0x4c9 [ 150.640408][ T7019] ? _raw_spin_lock_irqsave+0x52/0x60 [ 150.640439][ T7019] ? __virt_addr_valid+0x81/0x620 [ 150.640478][ T7019] ? sys_fillrect+0x174a/0x1910 [ 150.640513][ T7019] kasan_report+0xdf/0x1e0 [ 150.640544][ T7019] ? sys_fillrect+0x174a/0x1910 [ 150.640584][ T7019] sys_fillrect+0x174a/0x1910 [ 150.640627][ T7019] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 150.640680][ T7019] bit_clear+0x17d/0x220 [ 150.640708][ T7019] ? __pfx_bit_clear+0x10/0x10 [ 150.640736][ T7019] ? fb_get_color_depth+0x120/0x250 [ 150.640780][ T7019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.640830][ T7019] __fbcon_clear+0x633/0x760 [ 150.640874][ T7019] ? __pfx_bit_clear+0x10/0x10 [ 150.640904][ T7019] fbcon_scroll+0x48b/0x650 [ 150.640950][ T7019] con_scroll+0x464/0x690 [ 150.640986][ T7019] do_con_write+0x6883/0x8540 [ 150.641034][ T7019] ? __pfx_do_con_write+0x10/0x10 [ 150.641078][ T7019] con_write+0x23/0xb0 [ 150.641113][ T7019] n_tty_write+0x44f/0x12d0 [ 150.641164][ T7019] ? __pfx_n_tty_write+0x10/0x10 [ 150.641206][ T7019] ? trace_kmalloc+0x101/0x130 [ 150.641236][ T7019] ? __pfx_woken_wake_function+0x10/0x10 [ 150.641281][ T7019] ? rcu_is_watching+0x12/0xc0 [ 150.641323][ T7019] ? file_tty_write.isra.0+0x694/0x890 [ 150.641360][ T7019] ? kfree+0x2ec/0x6b0 [ 150.641397][ T7019] ? __pfx_n_tty_write+0x10/0x10 [ 150.641439][ T7019] file_tty_write.isra.0+0x4d2/0x890 [ 150.641479][ T7019] redirected_tty_write+0xd4/0x120 [ 150.641516][ T7019] vfs_write+0x6ac/0x1070 [ 150.641560][ T7019] ? __pfx_redirected_tty_write+0x10/0x10 [ 150.641595][ T7019] ? __pfx_vfs_write+0x10/0x10 [ 150.641632][ T7019] ? find_held_lock+0x2b/0x80 [ 150.641678][ T7019] ksys_write+0x12a/0x250 [ 150.641703][ T7019] ? __pfx_ksys_write+0x10/0x10 [ 150.641732][ T7019] do_syscall_64+0x106/0xf80 [ 150.641765][ T7019] ? clear_bhb_loop+0x40/0x90 [ 150.641801][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.641830][ T7019] RIP: 0033:0x7fac9719c799 [ 150.641852][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.641880][ T7019] RSP: 002b:00007fac98020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.641909][ T7019] RAX: ffffffffffffffda RBX: 00007fac97415fa0 RCX: 00007fac9719c799 [ 150.641929][ T7019] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 150.641948][ T7019] RBP: 00007fac97232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 150.641965][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.641982][ T7019] R13: 00007fac97416038 R14: 00007fac97415fa0 R15: 00007ffd4004bff8 [ 150.642011][ T7019] [ 150.642022][ T7019] [ 150.642031][ T7019] The buggy address belongs to a vmalloc virtual mapping [ 150.642052][ T7019] Memory state around the buggy address: [ 150.642068][ T7019] ffffc90004060f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.642090][ T7019] ffffc90004060f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.642111][ T7019] >ffffc90004061000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.642128][ T7019] ^ [ 150.642144][ T7019] ffffc90004061080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.642166][ T7019] ffffc90004061100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.642183][ T7019] ================================================================== [ 150.642200][ T7019] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.642223][ T7019] CPU: 0 UID: 0 PID: 7019 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.642265][ T7019] Tainted: [L]=SOFTLOCKUP [ 150.642276][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.642294][ T7019] Call Trace: [ 150.642304][ T7019] [ 150.642315][ T7019] dump_stack_lvl+0x100/0x190 [ 150.642361][ T7019] vpanic+0x552/0x970 [ 150.642391][ T7019] ? __pfx_vpanic+0x10/0x10 [ 150.642419][ T7019] ? __pfx_vprintk_emit+0x10/0x10 [ 150.642452][ T7019] ? sys_fillrect+0x174a/0x1910 [ 150.642488][ T7019] panic+0xd1/0xe0 [ 150.642516][ T7019] ? __pfx_panic+0x10/0x10 [ 150.642551][ T7019] ? sys_fillrect+0x174a/0x1910 [ 150.642589][ T7019] check_panic_on_warn.cold+0x19/0x34 [ 150.642624][ T7019] end_report.part.0+0x3a/0x90 [ 150.642676][ T7019] kasan_report.cold+0xe/0x18 [ 150.642720][ T7019] ? sys_fillrect+0x174a/0x1910 [ 150.642761][ T7019] sys_fillrect+0x174a/0x1910 [ 150.642806][ T7019] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 150.642855][ T7019] bit_clear+0x17d/0x220 [ 150.642885][ T7019] ? __pfx_bit_clear+0x10/0x10 [ 150.642916][ T7019] ? fb_get_color_depth+0x120/0x250 [ 150.642963][ T7019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.643016][ T7019] __fbcon_clear+0x633/0x760 [ 150.643064][ T7019] ? __pfx_bit_clear+0x10/0x10 [ 150.643102][ T7019] fbcon_scroll+0x48b/0x650 [ 150.643150][ T7019] con_scroll+0x464/0x690 [ 150.643188][ T7019] do_con_write+0x6883/0x8540 [ 150.643238][ T7019] ? __pfx_do_con_write+0x10/0x10 [ 150.643285][ T7019] con_write+0x23/0xb0 [ 150.643322][ T7019] n_tty_write+0x44f/0x12d0 [ 150.643375][ T7019] ? __pfx_n_tty_write+0x10/0x10 [ 150.643418][ T7019] ? trace_kmalloc+0x101/0x130 [ 150.643449][ T7019] ? __pfx_woken_wake_function+0x10/0x10 [ 150.643495][ T7019] ? rcu_is_watching+0x12/0xc0 [ 150.643541][ T7019] ? file_tty_write.isra.0+0x694/0x890 [ 150.643579][ T7019] ? kfree+0x2ec/0x6b0 [ 150.643617][ T7019] ? __pfx_n_tty_write+0x10/0x10 [ 150.643672][ T7019] file_tty_write.isra.0+0x4d2/0x890 [ 150.643716][ T7019] redirected_tty_write+0xd4/0x120 [ 150.643755][ T7019] vfs_write+0x6ac/0x1070 [ 150.643803][ T7019] ? __pfx_redirected_tty_write+0x10/0x10 [ 150.643844][ T7019] ? __pfx_vfs_write+0x10/0x10 [ 150.643890][ T7019] ? find_held_lock+0x2b/0x80 [ 150.643932][ T7019] ksys_write+0x12a/0x250 [ 150.643959][ T7019] ? __pfx_ksys_write+0x10/0x10 [ 150.643992][ T7019] do_syscall_64+0x106/0xf80 [ 150.644028][ T7019] ? clear_bhb_loop+0x40/0x90 [ 150.644062][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.644091][ T7019] RIP: 0033:0x7fac9719c799 [ 150.644114][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.644143][ T7019] RSP: 002b:00007fac98020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.644171][ T7019] RAX: ffffffffffffffda RBX: 00007fac97415fa0 RCX: 00007fac9719c799 [ 150.644192][ T7019] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 150.644211][ T7019] RBP: 00007fac97232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 150.644230][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.644248][ T7019] R13: 00007fac97416038 R14: 00007fac97415fa0 R15: 00007ffd4004bff8 [ 150.644278][ T7019] [ 150.644741][ T7019] Kernel Offset: disabled