last executing test programs: 9.388030033s ago: executing program 0 (id=184): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x23, 0x2, 0x0) getsockname$auto(r1, &(0x7f00000001c0), &(0x7f0000000040)=0xcf) open(0x0, 0x4242, 0xe1d2b27bdc14aad4) r2 = open(0x0, 0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:3/max_ratio\x00', 0xa041, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), r0) fstat$auto(r2, &(0x7f0000000480)={0x101, 0x3, 0x1ff, 0x4, 0xee01, 0xee01, 0x0, 0x3, 0x4, 0x7fffffffffffffff, 0xb9c, 0x8, 0x5, 0x16d096bb, 0xc00000000000000, 0x2, 0x14}) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x6) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4000006, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(r3, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 9.22532095s ago: executing program 1 (id=185): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setreuid$auto(0x0, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4040, 0xe1d2b27bdc14aab4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf25030000ffc3aa0818fcc1367c12fa5e0ef60300d95cbbe45aac2a7b9ca17bd328068c8a4a9f7f8453331602deffe979b5f052dfbc6c41b7da1b98107e54908bd9d56faa09b7eabc6721f22048ce55f3d2f0f329e2089c473f7359349ba36cb84decc8d28ee61bbd335ea382a6254d7c8854b22ca3f32a3aa533d3593897e5499a50912b8eddc2e0e5a85b6c8840d6cb0e2e0ad1d8b7701bdbdd5daa7b0d20a92dedbceb62f8d4b9c5e4c9ae48ff22f8002a90fba751b253c48c0031096a9da15ff4ef2fd2740ca4584a74f79139d916e2531c154cda588a6f39d6f63dd60eec25cd22145310d9f1e20feb3cc78a84f0fd7ceeb8fdff1871e5fd8c07929bfb9537a8112ce5d52e2f46b2f58bb2a9ae1f113fd503bfc30f16bd87047f88359ad07dfd67ca1e77f4223afa84f36646844c5b156d29fdba136883ea6b7a70990c437b4bd2daa811"], 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) flock$auto(r0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x80000000) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x29, 0x1, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) 8.972175948s ago: executing program 1 (id=188): symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x401, 0x0) r0 = prctl$auto_PR_SET_MM_BRK(0xfffffff7, 0x7, 0x0, 0x2, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) socket(0x11, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r1, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r3, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x2b6) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7353, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x2000b4, 0x9, 0x4, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0x2, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) 8.925386469s ago: executing program 2 (id=190): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b9", @ANYBLOB, @ANYRES32=r0], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 8.787736303s ago: executing program 2 (id=191): io_cancel$auto(0x4, &(0x7f0000000040)={0x3ff, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x7, 0xc7, 0x6, 0x0, 0x8de}, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="32bb67fb34234af6df250600000008001700080000000400120004001d0008000a0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@_si_pad}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0xa, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x1, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x4}) r5 = gettid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{@inferred, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r5}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/reboot/force\x00', 0x143001, 0x0) write$auto(0x3, 0x0, 0x7fffffff) socket(0xa, 0x1, 0x100) 8.25584795s ago: executing program 0 (id=192): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.732736876s ago: executing program 0 (id=194): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0x7, 0x8003) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) socket(0x2b, 0xa, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/rel\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001100)=""/4105, 0x1009) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) fspick$auto(r4, &(0x7f0000000380)='./file0\x00', 0x7) sendfile$auto(r2, r7, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) 6.263794687s ago: executing program 3 (id=195): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) prctl$auto(0x23, 0x7, 0x2008, 0x3, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, r1}) ioperm$auto(0x7, 0x1, 0x7) ioperm$auto(0x7, 0x6, 0x2) r2 = gettid() openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000600)=""/134, 0x86) socket(0x26, 0xa, 0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000092b0f58b30a9af58e298f7b447c30d83a63463c9bb0526019f50cde4428cdc6e", @ANYBLOB="100025bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="080000010700000005002e00010000a4f19894be51b7a205d0bc658fd45a8b37461c87e489c387e9fc53ae964635c5abbf02e94df9bccc83e68b0a8bca400fbf87898c224357fdfb6b1a5a12099194cbe1dd2b07263f32daf5b59b65e33e417f6ac5530c16358096dc3b85dbec3928a65c994f8353754b4f2f29720fa09bec2c0f5c670f20a57fd469531a64cde42e8fc9f7915afd34195d1377b3d676710b47e99a425e8f211031a61fca26a8764c6514b1ce9f5c39a4b581c26c95f11618bd0a3d4ec4d08c7836d641fc4c408dae893652db399c3a413c2d946ab4308340"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x6, 0x2, r2, 0x4, 0xd) msgctl$auto(0xffff, 0x5, &(0x7f00000002c0)={{0x8, 0x0, 0x0, 0x15f5, 0xffffffff, 0x4, 0x3d2}, &(0x7f0000000040)=0xa0, &(0x7f00000005c0)=0xc6, 0xb, 0x9, 0x3, 0x401, 0x542f1a38, 0x100, 0x3, 0x3, @inferred=r2, @raw=0xf}) r5 = setfsgid$auto(0xffffffffffffffff) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xd, 0x100000001, 0x5, 0xffffffff, 0xee00, r5, 0x0, 0x7fffffffffffffff, 0x3, 0x5, 0x100000000, 0x6, 0x1, 0x0, 0x8, 0x7, 0x4}) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000000480)={{0x2, r4, r5, 0x6, 0x5, 0xfffffffb, 0x1a}, &(0x7f0000000400)=0xf9, &(0x7f0000000440)=0x5c, 0x7ff, 0x6a, 0x6, 0x0, 0xce2, 0xfffb, 0x4, 0xa7ee, @inferred=r2, @raw}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf257e00012c"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mountinfo\x00', 0x40001, 0x0) r6 = epoll_create$auto(0x20003f) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) 5.974650391s ago: executing program 0 (id=196): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x1e, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.455393429s ago: executing program 1 (id=197): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setreuid$auto(0x0, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4040, 0xe1d2b27bdc14aab4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) flock$auto(r0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x80000000) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x29, 0x1, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) 5.217525626s ago: executing program 0 (id=198): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x8, 0x0, 0x3) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000300)={0x3, 0x0, 0x7fffffff, 0x55d, 0x12, 0xf2, 0x9, 0x0, 0x5, 0x0, 0xfffffffffffffffb, {0x9, 0xa7}, 0x9, 0x7, 0x1, 0x8, 0x0, 0x8, 0xce34, 0x6, 0x3, 0xfff, 0x3}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/clk/clk_dump\x00', 0x103000, 0x0) setsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, &(0x7f00000000c0)='/*&\x00', 0x5) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x560a, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r6) sendmsg$auto_OVS_DP_CMD_GET(r6, &(0x7f0000000200)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r7, @ANYBLOB="131729bd7000fcdbdf25030000f008000700f7ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd3\x00', 0x212800, 0x0) sendfile$auto(r0, r1, 0x0, 0x800048) 4.903158399s ago: executing program 1 (id=199): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd8/queue/virt_boundary_mask\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) r3 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0xffffffff, 0x7fff, 0x0, 0xfffd, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) 4.385297684s ago: executing program 2 (id=200): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b9", @ANYBLOB, @ANYRES32=r0], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 4.127643337s ago: executing program 3 (id=201): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x23, 0x2, 0x0) getsockname$auto(r1, &(0x7f00000001c0), &(0x7f0000000040)=0xcf) open(0x0, 0x4242, 0xe1d2b27bdc14aad4) r2 = open(0x0, 0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:3/max_ratio\x00', 0xa041, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), r0) fstat$auto(r2, &(0x7f0000000480)={0x101, 0x3, 0x1ff, 0x4, 0xee01, 0xee01, 0x0, 0x3, 0x4, 0x7fffffffffffffff, 0xb9c, 0x8, 0x5, 0x16d096bb, 0xc00000000000000, 0x2, 0x14}) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x6) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4000006, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(r3, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 4.06760079s ago: executing program 2 (id=202): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x23, 0x2, 0x0) getsockname$auto(r1, &(0x7f00000001c0), &(0x7f0000000040)=0xcf) open(0x0, 0x4242, 0xe1d2b27bdc14aad4) r2 = open(0x0, 0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:3/max_ratio\x00', 0xa041, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000380), r0) fstat$auto(r2, &(0x7f0000000480)={0x101, 0x3, 0x1ff, 0x4, 0xee01, 0xee01, 0x0, 0x3, 0x4, 0x7fffffffffffffff, 0xb9c, 0x8, 0x5, 0x16d096bb, 0xc00000000000000, 0x2, 0x14}) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x6) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4000006, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) shutdown$auto(r3, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x3, &(0x7f0000000100)='^^:#\x00', &(0x7f0000000ac0)="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", 0x0) 3.708455243s ago: executing program 2 (id=203): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0x46, 0x2}, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x1000000002, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x2000062, 0x7ffffffe, 0x7, 0xa6c, 0x9, 0x2, 0xffffffdffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() mremap$auto(0x9, 0x4000007, 0x3fd7, 0xffffffffffffffff, 0x20000020000000) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x200, &(0x7f0000000340)=@info={r2, 0x9, 0xafb1}, 0x9) select$auto(0x1, 0x0, 0x0, &(0x7f0000000200)={[0xf, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x2, 0x8000000010000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fefa465158fbbeb89451043553ff869189cf3250b65c544ccd3988b29f3cdb20660e616d3daa3e36b174c5661e383221287595a7e873202add9b0f11733de4ec2cd9c5b048058ed89c590d73c2e44d11636cb85ea9cb4180c5d1ab11f731cec20c57489baf87d298ef21b138e83a6a13cfdc39ffcf7c18ae6946c0d58c5026cd804c5d2f1a5348a159fe5e6746038217e838e23a24c5cda52d0af4c570a9983422fb706704f8410113a38fc2decb77fbcbca9e8f3dd2b2ccb939869852e91137af1e79ab833c8b104726d0a00", 0xd9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 3.137639333s ago: executing program 1 (id=204): open(&(0x7f0000000000)='./file0\x00', 0x1233c2, 0x130) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="3a0f57bca0453d719b00000000000000419a583550cdca14488b437c49fc0d2cf52728421957d2020000006bce510ed00f2e84ffcb51e22801000000edf0aa06031a5fa0caf533e2f024c3f6c372ddfaee24f15a916e98ed7c2d617709ff35ab4f6c8107d843a69f03b4632bbd", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r2, @ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff05"], 0x1288}, 0x1, 0x0, 0x0, 0x200040f0}, 0x20000051) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/info\x00', 0x5b5f03, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="a7c4ed097000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="010229bd700002dcdf25030000000400087918000180140010800c8b5e13cbadcfefa4fb0fdc062c651210b374928c10cef1db583e3f0d2dcf8a84f380e43ceeaf01ec6a47081485ff0514887887a91ba013e83669b0b0cbfe6eae03814ac5439287f07f9856f735"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) 3.123349561s ago: executing program 3 (id=205): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0x7, 0x8003) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) socket(0x2b, 0xa, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/rel\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001100)=""/4105, 0x1009) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) fspick$auto(r4, &(0x7f0000000380)='./file0\x00', 0x7) sendfile$auto(r2, r7, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) 2.955764373s ago: executing program 0 (id=206): symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x401, 0x0) r0 = prctl$auto_PR_SET_MM_BRK(0xfffffff7, 0x7, 0x0, 0x2, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) socket(0x11, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r1, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0xa, 0x1, 0x84) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r3, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x2b6) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7353, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0x2000b4, 0x9, 0x4, 0x10005, 0x82, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0x2, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) 1.12682913s ago: executing program 3 (id=207): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x1e, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 887.744664ms ago: executing program 3 (id=208): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setreuid$auto(0x0, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4040, 0xe1d2b27bdc14aab4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) flock$auto(r0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x80000000) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x29, 0x1, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) 1.537114ms ago: executing program 3 (id=209): io_cancel$auto(0x4, &(0x7f0000000040)={0x3ff, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x7, 0xc7, 0x6, 0x0, 0x8de}, &(0x7f0000000080)={0x2, 0x7, 0x7, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="32bb67fb34234af6df250600000008001700080000000400120004001d0008000a0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@_si_pad}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0xa, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x1, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x4}) r5 = gettid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{@inferred, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r5}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/reboot/force\x00', 0x143001, 0x0) write$auto(0x3, 0x0, 0x7fffffff) socket(0xa, 0x1, 0x100) 569.666µs ago: executing program 1 (id=217): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setreuid$auto(0x0, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4040, 0xe1d2b27bdc14aab4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x44000884}, 0xc800) flock$auto(r0, 0x1) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x80000000) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x29, 0x1, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) 0s ago: executing program 2 (id=210): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) mmap$auto(0x7, 0x2000a, 0x8, 0xeb2, 0x401, 0x7ffd) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket(0x15, 0xa, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mlock$auto(0x401, 0x439) mmap$auto(0x0, 0x201006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="e6ede6862a6fe6f80b03a1972cdd2c", @ANYRES16=r2, @ANYBLOB="87201c3b4cc332b59f338eed1a6fd2a33bf5bf6254c19e82f0043f9aa401f4e124d6f50334f1ad365df36553e0ee1434a7e7ae2b62c9c82658aad02cfb7582da67e06ed82d67c3461bd803ffe48f99f66c604d7ca864ccc9d104a04c576f9b2572cbe6"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x50004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000040)='..\x00k\xac\x8c9\x0e\x98\x80\xd2\x8f\xa1\xf2\x1e\xe1R1\xa2\x8e3\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11G\xea\xd3=c\x98y\xe1\xa6\xb3\x80t@S\x9a\xadu(:v|\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x00\x00,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xdd) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/6/effective_affinity\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800003, 0x270) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyt5\x00', 0x121183, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b", 0x23) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7ea2) read$auto_stats_fops_(0xffffffffffffffff, &(0x7f00000001c0)=""/10, 0xa) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0xc0802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 99.073292][ T5853] cgroup: Unknown subsys name 'net' [ 99.194538][ T5853] cgroup: Unknown subsys name 'cpuset' [ 99.204308][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.193532][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.241356][ T982] cfg80211: failed to load regulatory.db [ 103.673692][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.682324][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.691063][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.693338][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.699196][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.708551][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.714335][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.721625][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.727542][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.734597][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.742089][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.748483][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.755353][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.764174][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.773885][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.777679][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.785859][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.798002][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.809873][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.820054][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.381015][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 104.514476][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 104.578669][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 104.653089][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 104.791542][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.798813][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.808015][ T5869] bridge_slave_0: entered allmulticast mode [ 104.816096][ T5869] bridge_slave_0: entered promiscuous mode [ 104.870051][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.877216][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.885486][ T5869] bridge_slave_1: entered allmulticast mode [ 104.894077][ T5869] bridge_slave_1: entered promiscuous mode [ 104.901872][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.909030][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.916427][ T5870] bridge_slave_0: entered allmulticast mode [ 104.924757][ T5870] bridge_slave_0: entered promiscuous mode [ 104.967275][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.974612][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.982418][ T5870] bridge_slave_1: entered allmulticast mode [ 104.990264][ T5870] bridge_slave_1: entered promiscuous mode [ 105.005088][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.012318][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.020052][ T5868] bridge_slave_0: entered allmulticast mode [ 105.027418][ T5868] bridge_slave_0: entered promiscuous mode [ 105.077788][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.087453][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.094840][ T5868] bridge_slave_1: entered allmulticast mode [ 105.103167][ T5868] bridge_slave_1: entered promiscuous mode [ 105.113306][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.127465][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.209940][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.219426][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.226673][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.234276][ T5867] bridge_slave_0: entered allmulticast mode [ 105.241921][ T5867] bridge_slave_0: entered promiscuous mode [ 105.268115][ T5869] team0: Port device team_slave_0 added [ 105.277613][ T5869] team0: Port device team_slave_1 added [ 105.286421][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.310414][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.317577][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.325172][ T5867] bridge_slave_1: entered allmulticast mode [ 105.332692][ T5867] bridge_slave_1: entered promiscuous mode [ 105.357340][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.419844][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.433271][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.461952][ T5870] team0: Port device team_slave_0 added [ 105.468889][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.475915][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.501910][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.532702][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.546515][ T5870] team0: Port device team_slave_1 added [ 105.554121][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.561533][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.587659][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.624828][ T5868] team0: Port device team_slave_0 added [ 105.682975][ T5868] team0: Port device team_slave_1 added [ 105.703871][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.711475][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.737477][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.750659][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.757658][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.783823][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.827914][ T5867] team0: Port device team_slave_0 added [ 105.837582][ T5867] team0: Port device team_slave_1 added [ 105.843730][ T5873] Bluetooth: hci0: command tx timeout [ 105.850152][ T5186] Bluetooth: hci3: command tx timeout [ 105.853219][ T5879] Bluetooth: hci1: command tx timeout [ 105.919855][ T5879] Bluetooth: hci2: command tx timeout [ 105.933400][ T5869] hsr_slave_0: entered promiscuous mode [ 105.940467][ T5869] hsr_slave_1: entered promiscuous mode [ 105.947737][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.955150][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.981301][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.993283][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.000584][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.026823][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.069049][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.076376][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.102536][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.114670][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.122440][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.148473][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.186674][ T5870] hsr_slave_0: entered promiscuous mode [ 106.193697][ T5870] hsr_slave_1: entered promiscuous mode [ 106.200187][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 106.205999][ T5870] Cannot create hsr debugfs directory [ 106.350183][ T5868] hsr_slave_0: entered promiscuous mode [ 106.356679][ T5868] hsr_slave_1: entered promiscuous mode [ 106.363896][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 106.369764][ T5868] Cannot create hsr debugfs directory [ 106.425732][ T5867] hsr_slave_0: entered promiscuous mode [ 106.433785][ T5867] hsr_slave_1: entered promiscuous mode [ 106.440373][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 106.446135][ T5867] Cannot create hsr debugfs directory [ 106.853403][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.868873][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.907129][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.944337][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.013236][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.037156][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.064217][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.087520][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.147666][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.177001][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.188418][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.202228][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.315859][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.345394][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.371220][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.385340][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.415408][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.503918][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.517692][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.537433][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.544930][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.576942][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.584145][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.668904][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.706860][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.714197][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.747527][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.754728][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.783122][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.904806][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.924376][ T5879] Bluetooth: hci1: command tx timeout [ 107.930086][ T5873] Bluetooth: hci0: command tx timeout [ 107.935548][ T5873] Bluetooth: hci3: command tx timeout [ 107.945529][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.966060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.973346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.000726][ T5873] Bluetooth: hci2: command tx timeout [ 108.001911][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.013340][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.068408][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.146754][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.154023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.212103][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.219380][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.257735][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.375002][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.533160][ T5869] veth0_vlan: entered promiscuous mode [ 108.615943][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.633890][ T5869] veth1_vlan: entered promiscuous mode [ 108.780853][ T5870] veth0_vlan: entered promiscuous mode [ 108.798189][ T5870] veth1_vlan: entered promiscuous mode [ 108.834772][ T5869] veth0_macvtap: entered promiscuous mode [ 108.879182][ T5869] veth1_macvtap: entered promiscuous mode [ 108.913937][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.953523][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.975128][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.997761][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.008405][ T5870] veth0_macvtap: entered promiscuous mode [ 109.024647][ T5870] veth1_macvtap: entered promiscuous mode [ 109.048916][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.062329][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.102872][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.112064][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.147254][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.163169][ T5867] veth0_vlan: entered promiscuous mode [ 109.174614][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.227646][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.239785][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248885][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.262245][ T5867] veth1_vlan: entered promiscuous mode [ 109.278837][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.356599][ T5868] veth0_vlan: entered promiscuous mode [ 109.394273][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.408674][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.458995][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.470166][ T5867] veth0_macvtap: entered promiscuous mode [ 109.473986][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.478559][ T5868] veth1_vlan: entered promiscuous mode [ 109.530306][ T5867] veth1_macvtap: entered promiscuous mode [ 109.576569][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.585091][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.591175][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.632283][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.651085][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.659014][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.690961][ T1154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.714543][ T5868] veth0_macvtap: entered promiscuous mode [ 109.726119][ T5868] veth1_macvtap: entered promiscuous mode [ 109.742250][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.754234][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.777395][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.801261][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.002119][ T5873] Bluetooth: hci3: command tx timeout [ 110.007611][ T5873] Bluetooth: hci1: command tx timeout [ 110.015401][ T5879] Bluetooth: hci0: command tx timeout [ 110.027237][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.082941][ T5879] Bluetooth: hci2: command tx timeout [ 110.102774][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.133486][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.205528][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.225357][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.243187][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.285264][ T5959] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 110.335519][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.347157][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.514525][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.523219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.546106][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.709719][ T5957] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 110.861514][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.944119][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.078993][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.129562][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.289972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.298563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.419939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.428276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.437096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.446220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.514169][ T5966] zswap: compressor not available [ 111.550685][ T5970] Setting dangerous option i915.mitigations - tainting kernel [ 111.888110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.049957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.087411][ T5879] Bluetooth: hci1: command tx timeout [ 112.087432][ T5873] Bluetooth: hci3: command tx timeout [ 112.095693][ T5879] Bluetooth: hci0: command tx timeout [ 112.164655][ T5873] Bluetooth: hci2: command tx timeout [ 112.445643][ T5988] futex_wake_op: syz.0.1 tries to shift op by -9; fix this program [ 112.569572][ T5990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.604699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 114.718543][ T5991] random: crng reseeded on system resumption [ 114.758677][ T5989] FAULT_INJECTION: forcing a failure. [ 114.758677][ T5989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.793144][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: syz.1.7 Tainted: G U syzkaller #0 PREEMPT(full) [ 114.793192][ T5989] Tainted: [U]=USER [ 114.793202][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.793224][ T5989] Call Trace: [ 114.793238][ T5989] [ 114.793250][ T5989] dump_stack_lvl+0x16c/0x1f0 [ 114.793307][ T5989] should_fail_ex+0x512/0x640 [ 114.793364][ T5989] _copy_from_user+0x2e/0xd0 [ 114.793398][ T5989] get_timespec64+0x8b/0x1b0 [ 114.793437][ T5989] ? __pfx_get_timespec64+0x10/0x10 [ 114.793481][ T5989] ? common_nsleep+0xa1/0xd0 [ 114.793521][ T5989] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 114.793555][ T5989] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 114.793599][ T5989] do_syscall_64+0xcd/0x4c0 [ 114.793659][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.793690][ T5989] RIP: 0033:0x7f1dd4fc1465 [ 114.793719][ T5989] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 114.793749][ T5989] RSP: 002b:00007ffc1e9ce790 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 114.793778][ T5989] RAX: ffffffffffffffda RBX: 00007f1dd51d5fa0 RCX: 00007f1dd4fc1465 [ 114.793797][ T5989] RDX: 00007ffc1e9ce7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.793814][ T5989] RBP: 00007f1dd51d7da0 R08: 0000000000000000 R09: 00007f1dd5d99000 [ 114.793844][ T5989] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001c081 [ 114.793861][ T5989] R13: 00007f1dd51d6180 R14: ffffffffffffffff R15: 00007ffc1e9ce910 [ 114.793900][ T5989] [ 115.045957][ T6005] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.134421][ T6026] zram: Removed device: zram0 [ 120.312129][ T6039] syz.0.18 (6039) used greatest stack depth: 19208 bytes left [ 120.321581][ T6063] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 120.725858][ T6076] netlink: 302 bytes leftover after parsing attributes in process `syz.0.24'. [ 121.508623][ T6069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 122.282779][ T6074] Zero length message leads to an empty skb [ 122.938141][ T6097] mkiss: ax0: crc mode is auto. [ 123.009921][ T6098] FAULT_INJECTION: forcing a failure. [ 123.009921][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 123.096173][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.2.28 Tainted: G U syzkaller #0 PREEMPT(full) [ 123.096224][ T6098] Tainted: [U]=USER [ 123.096234][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.096256][ T6098] Call Trace: [ 123.096266][ T6098] [ 123.096278][ T6098] dump_stack_lvl+0x16c/0x1f0 [ 123.096344][ T6098] should_fail_ex+0x512/0x640 [ 123.096392][ T6098] ? fs_reclaim_acquire+0xae/0x150 [ 123.096444][ T6098] should_failslab+0xc2/0x120 [ 123.096486][ T6098] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 123.096526][ T6098] ? security_inode_alloc+0x3b/0x2b0 [ 123.096575][ T6098] security_inode_alloc+0x3b/0x2b0 [ 123.096619][ T6098] inode_init_always_gfp+0xce4/0x1030 [ 123.096663][ T6098] alloc_inode+0x86/0x240 [ 123.096710][ T6098] sock_alloc+0x40/0x280 [ 123.096742][ T6098] __sock_create+0xc1/0x8d0 [ 123.096787][ T6098] inet_ctl_sock_create+0x94/0x230 [ 123.096827][ T6098] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 123.096867][ T6098] ? ndisc_net_init+0x1bc/0x250 [ 123.096910][ T6098] ? __pfx_ndisc_net_init+0x10/0x10 [ 123.096959][ T6098] igmp6_net_init+0x1b2/0x470 [ 123.097005][ T6098] ? __pfx_igmp6_net_init+0x10/0x10 [ 123.097046][ T6098] ops_init+0x1e2/0x5f0 [ 123.097077][ T6098] setup_net+0x10f/0x380 [ 123.097111][ T6098] ? lockdep_init_map_type+0x5c/0x280 [ 123.097157][ T6098] ? __pfx_setup_net+0x10/0x10 [ 123.097188][ T6098] ? debug_mutex_init+0x37/0x70 [ 123.097223][ T6098] copy_net_ns+0x2a6/0x5f0 [ 123.097258][ T6098] create_new_namespaces+0x3ea/0xa90 [ 123.097303][ T6098] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 123.097344][ T6098] ksys_unshare+0x45b/0xa40 [ 123.097388][ T6098] ? __pfx_ksys_unshare+0x10/0x10 [ 123.097433][ T6098] ? xfd_validate_state+0x61/0x180 [ 123.097489][ T6098] __x64_sys_unshare+0x31/0x40 [ 123.097532][ T6098] do_syscall_64+0xcd/0x4c0 [ 123.097585][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.097616][ T6098] RIP: 0033:0x7f48d098eba9 [ 123.097657][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.097687][ T6098] RSP: 002b:00007f48d181a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 123.097740][ T6098] RAX: ffffffffffffffda RBX: 00007f48d0bd5fa0 RCX: 00007f48d098eba9 [ 123.097761][ T6098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 123.097780][ T6098] RBP: 00007f48d0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 123.097799][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.097818][ T6098] R13: 00007f48d0bd6038 R14: 00007f48d0bd5fa0 R15: 00007ffd5204a278 [ 123.097856][ T6098] [ 123.098211][ T6098] socket: no more sockets [ 123.392691][ T6098] Failed to initialize the IGMP6 autojoin socket (err -23) [ 125.261452][ T6126] mmap: syz.3.33 (6126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.552121][ T6140] FAULT_INJECTION: forcing a failure. [ 126.552121][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 126.603523][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.36 Tainted: G U syzkaller #0 PREEMPT(full) [ 126.603613][ T6140] Tainted: [U]=USER [ 126.603634][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.603659][ T6140] Call Trace: [ 126.603674][ T6140] [ 126.603687][ T6140] dump_stack_lvl+0x16c/0x1f0 [ 126.603742][ T6140] should_fail_ex+0x512/0x640 [ 126.603795][ T6140] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 126.603872][ T6140] should_failslab+0xc2/0x120 [ 126.603923][ T6140] __kmalloc_cache_node_noprof+0x6d/0x420 [ 126.603969][ T6140] ? lockdep_init_map_type+0x5c/0x280 [ 126.604015][ T6140] ? __alloc_workqueue+0x694/0x1810 [ 126.604067][ T6140] __alloc_workqueue+0x694/0x1810 [ 126.604118][ T6140] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.604182][ T6140] alloc_workqueue_noprof+0xd2/0x200 [ 126.604228][ T6140] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 126.604283][ T6140] ? __pfx___debug_object_init+0x10/0x10 [ 126.604333][ T6140] nci_register_device+0x511/0xb80 [ 126.604378][ T6140] ? __pfx_nci_register_device+0x10/0x10 [ 126.604427][ T6140] ? lockdep_init_map_type+0x5c/0x280 [ 126.604478][ T6140] virtual_ncidev_open+0x141/0x220 [ 126.604519][ T6140] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 126.604560][ T6140] misc_open+0x35a/0x420 [ 126.604601][ T6140] ? __pfx_misc_open+0x10/0x10 [ 126.604639][ T6140] chrdev_open+0x234/0x6a0 [ 126.604685][ T6140] ? __pfx_chrdev_open+0x10/0x10 [ 126.604731][ T6140] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 126.604776][ T6140] do_dentry_open+0x982/0x1530 [ 126.604816][ T6140] ? __pfx_chrdev_open+0x10/0x10 [ 126.604881][ T6140] vfs_open+0x82/0x3f0 [ 126.604936][ T6140] path_openat+0x1de4/0x2cb0 [ 126.604988][ T6140] ? __pfx_path_openat+0x10/0x10 [ 126.605037][ T6140] do_filp_open+0x20b/0x470 [ 126.605078][ T6140] ? __pfx_do_filp_open+0x10/0x10 [ 126.605149][ T6140] ? alloc_fd+0x471/0x7d0 [ 126.605195][ T6140] do_sys_openat2+0x11b/0x1d0 [ 126.605240][ T6140] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.605297][ T6140] __x64_sys_openat+0x174/0x210 [ 126.605323][ T6140] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.605363][ T6140] do_syscall_64+0xcd/0x4c0 [ 126.605418][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.605447][ T6140] RIP: 0033:0x7f184718eba9 [ 126.605468][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.605495][ T6140] RSP: 002b:00007f18453f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.605521][ T6140] RAX: ffffffffffffffda RBX: 00007f18473d5fa0 RCX: 00007f184718eba9 [ 126.605538][ T6140] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 126.605555][ T6140] RBP: 00007f1847211e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.605571][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.605589][ T6140] R13: 00007f18473d6038 R14: 00007f18473d5fa0 R15: 00007ffc006e1e18 [ 126.605625][ T6140] [ 127.456781][ T6150] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 128.188215][ T6153] zswap: compressor not available [ 128.447100][ T6154] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 128.679107][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.38'. [ 128.685860][ T6150] HfR: entered promiscuous mode [ 130.040960][ T6177] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.040449][ T6226] FAULT_INJECTION: forcing a failure. [ 133.040449][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 133.149091][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.3.54 Tainted: G U syzkaller #0 PREEMPT(full) [ 133.149127][ T6226] Tainted: [U]=USER [ 133.149134][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.149147][ T6226] Call Trace: [ 133.149154][ T6226] [ 133.149163][ T6226] dump_stack_lvl+0x16c/0x1f0 [ 133.149209][ T6226] should_fail_ex+0x512/0x640 [ 133.149246][ T6226] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 133.149278][ T6226] should_failslab+0xc2/0x120 [ 133.149324][ T6226] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.149381][ T6226] ? is_bad_inode+0xd/0x40 [ 133.149408][ T6226] ? ima_d_path+0xbd/0x2a0 [ 133.149440][ T6226] ima_d_path+0xbd/0x2a0 [ 133.149468][ T6226] ? vfs_getxattr_alloc+0xec/0x340 [ 133.149496][ T6226] ? __pfx_ima_d_path+0x10/0x10 [ 133.149530][ T6226] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 133.149561][ T6226] process_measurement+0x1d86/0x23e0 [ 133.149596][ T6226] ? __pfx_process_measurement+0x10/0x10 [ 133.149627][ T6226] ? __pfx___might_resched+0x10/0x10 [ 133.149655][ T6226] ? trace_contention_end+0xdd/0x130 [ 133.149689][ T6226] ? find_held_lock+0x2b/0x80 [ 133.149713][ T6226] ? tracing_buffers_open+0x27b/0x360 [ 133.149774][ T6226] ? inode_to_bdi+0x9e/0x160 [ 133.149811][ T6226] ima_file_check+0xc5/0x110 [ 133.149841][ T6226] ? __pfx_ima_file_check+0x10/0x10 [ 133.149875][ T6226] security_file_post_open+0x8e/0x210 [ 133.149908][ T6226] path_openat+0x1404/0x2cb0 [ 133.149946][ T6226] ? __pfx_path_openat+0x10/0x10 [ 133.149983][ T6226] do_filp_open+0x20b/0x470 [ 133.150011][ T6226] ? __pfx_do_filp_open+0x10/0x10 [ 133.150061][ T6226] ? alloc_fd+0x471/0x7d0 [ 133.150095][ T6226] do_sys_openat2+0x11b/0x1d0 [ 133.150132][ T6226] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.150181][ T6226] __x64_sys_openat+0x174/0x210 [ 133.150206][ T6226] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.150240][ T6226] do_syscall_64+0xcd/0x4c0 [ 133.150281][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.150306][ T6226] RIP: 0033:0x7efdc3b8eba9 [ 133.150324][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.150347][ T6226] RSP: 002b:00007efdc4992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.150369][ T6226] RAX: ffffffffffffffda RBX: 00007efdc3dd6090 RCX: 00007efdc3b8eba9 [ 133.150385][ T6226] RDX: 0000000000101200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 133.150400][ T6226] RBP: 00007efdc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.150414][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.150428][ T6226] R13: 00007efdc3dd6128 R14: 00007efdc3dd6090 R15: 00007ffc1041f458 [ 133.150460][ T6226] [ 133.415449][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.474059][ T6227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.635874][ T6232] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 133.976074][ T6237] netlink: 504 bytes leftover after parsing attributes in process `syz.1.56'. [ 135.800604][ T6254] zswap: compressor not available [ 135.818388][ T6259] Setting dangerous option i915.mitigations - tainting kernel [ 136.056030][ T6274] netlink: 504 bytes leftover after parsing attributes in process `syz.3.62'. [ 136.395417][ T6281] netlink: 186 bytes leftover after parsing attributes in process `syz.1.64'. [ 137.069528][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 137.365701][ T6294] syz.3.68: vmalloc error: size 20480, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.382447][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.3.68 Tainted: G U syzkaller #0 PREEMPT(full) [ 137.382481][ T6294] Tainted: [U]=USER [ 137.382488][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.382501][ T6294] Call Trace: [ 137.382508][ T6294] [ 137.382516][ T6294] dump_stack_lvl+0x16c/0x1f0 [ 137.382556][ T6294] warn_alloc+0x248/0x3a0 [ 137.382586][ T6294] ? __pfx_warn_alloc+0x10/0x10 [ 137.382615][ T6294] ? alloc_pages_mpol+0x25a/0x550 [ 137.382649][ T6294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.382682][ T6294] ? trace_kmalloc+0x2b/0xd0 [ 137.382724][ T6294] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 137.382757][ T6294] ? __snd_dma_alloc_pages+0x50/0x90 [ 137.382804][ T6294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.382832][ T6294] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 137.382880][ T6294] ? __snd_dma_alloc_pages+0x50/0x90 [ 137.382911][ T6294] __vmalloc_node_noprof+0xad/0xf0 [ 137.382932][ T6294] ? __snd_dma_alloc_pages+0x50/0x90 [ 137.382963][ T6294] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 137.382999][ T6294] __snd_dma_alloc_pages+0x50/0x90 [ 137.383032][ T6294] snd_dma_alloc_dir_pages+0x151/0x240 [ 137.383068][ T6294] do_alloc_pages+0x136/0x2d0 [ 137.383104][ T6294] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 137.383141][ T6294] snd_pcm_hw_params+0x1656/0x1ba0 [ 137.383178][ T6294] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 137.383209][ T6294] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 137.383242][ T6294] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 137.383270][ T6294] ? __asan_memset+0x23/0x50 [ 137.383296][ T6294] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 137.383329][ T6294] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 137.383370][ T6294] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 137.383400][ T6294] ? __pfx___mutex_lock+0x10/0x10 [ 137.383455][ T6294] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 137.383494][ T6294] snd_pcm_oss_get_formats+0x7e/0x340 [ 137.383519][ T6294] ? find_held_lock+0x2b/0x80 [ 137.383543][ T6294] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 137.383569][ T6294] ? __might_fault+0x13b/0x190 [ 137.383603][ T6294] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 137.383631][ T6294] ? find_held_lock+0x2b/0x80 [ 137.383652][ T6294] ? hook_file_ioctl_common+0x145/0x410 [ 137.383684][ T6294] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 137.383717][ T6294] ? __fget_files+0x20e/0x3c0 [ 137.383746][ T6294] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 137.383776][ T6294] __x64_sys_ioctl+0x18e/0x210 [ 137.383814][ T6294] do_syscall_64+0xcd/0x4c0 [ 137.383858][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.383882][ T6294] RIP: 0033:0x7efdc3b8eba9 [ 137.383900][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.383922][ T6294] RSP: 002b:00007efdc49b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.383943][ T6294] RAX: ffffffffffffffda RBX: 00007efdc3dd5fa0 RCX: 00007efdc3b8eba9 [ 137.383958][ T6294] RDX: 0000200000000180 RSI: 00000000c0045005 RDI: 0000000000000007 [ 137.383973][ T6294] RBP: 00007efdc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.383986][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.384000][ T6294] R13: 00007efdc3dd6038 R14: 00007efdc3dd5fa0 R15: 00007ffc1041f458 [ 137.384030][ T6294] [ 137.384038][ T6294] Mem-Info: [ 137.744934][ T6294] active_anon:6568 inactive_anon:0 isolated_anon:0 [ 137.744934][ T6294] active_file:3337 inactive_file:40938 isolated_file:0 [ 137.744934][ T6294] unevictable:768 dirty:607 writeback:0 [ 137.744934][ T6294] slab_reclaimable:11090 slab_unreclaimable:92374 [ 137.744934][ T6294] mapped:24827 shmem:1356 pagetables:1108 [ 137.744934][ T6294] sec_pagetables:0 bounce:0 [ 137.744934][ T6294] kernel_misc_reclaimable:0 [ 137.744934][ T6294] free:1343887 free_pcp:13825 free_cma:0 [ 137.863986][ T6294] Node 0 active_anon:26372kB inactive_anon:0kB active_file:13348kB inactive_file:163552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99308kB dirty:2428kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:11448kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.903816][ T6294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.937405][ T6294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.969098][ T6294] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 137.980520][ T6294] Node 0 DMA32 free:1469484kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26428kB inactive_anon:0kB active_file:13348kB inactive_file:162208kB unevictable:1536kB writepending:2428kB present:3129332kB managed:2539536kB mlocked:0kB bounce:0kB free_pcp:36144kB local_pcp:18716kB free_cma:0kB [ 138.052637][ T6294] lowmem_reserve[]: 0 0 1 1 1 [ 138.061461][ T6294] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1344kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.144479][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 138.223860][ T6294] Node 1 Normal free:3890956kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18304kB local_pcp:11612kB free_cma:0kB [ 138.279426][ T6294] lowmem_reserve[]: 0 0 0 0 0 [ 138.284228][ T6294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.339543][ T6294] Node 0 DMA32: 294*4kB (UE) 450*8kB (UME) 220*16kB (UM) 131*32kB (UM) 96*64kB (UME) 81*128kB (UME) 40*256kB (UM) 20*512kB (UME) 7*1024kB (UME) 1*2048kB (M) 343*4096kB (M) = 1463624kB [ 138.446268][ T6263] ima: policy update failed [ 138.499400][ T30] audit: type=1802 audit(1758105365.955:2): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.61" res=0 errno=0 [ 138.504900][ T6294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.628275][ T6309] netlink: 252 bytes leftover after parsing attributes in process `syz.0.71'. [ 138.725155][ T6294] Node 1 Normal: 163*4kB (UME) 36*8kB (UME) 40*16kB (UME) 77*32kB (UME) 27*64kB (UME) 11*128kB (UME) 5*256kB (UME) 1*512kB (U) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3890956kB [ 138.774670][ T6294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.850358][ T6294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.892356][ T6294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.937462][ T6294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.978889][ T6294] 45688 total pagecache pages [ 139.012433][ T6294] 7 pages in swap cache [ 139.016631][ T6294] Free swap = 122564kB [ 139.043062][ T6294] Total swap = 124996kB [ 139.047287][ T6294] 2097051 pages RAM [ 139.107047][ T6294] 0 pages HighMem/MovableOnly [ 139.138988][ T6294] 430205 pages reserved [ 139.167814][ T6294] 0 pages cma reserved [ 140.141437][ T6329] netlink: 504 bytes leftover after parsing attributes in process `syz.1.77'. [ 140.194221][ T6329] netlink: 504 bytes leftover after parsing attributes in process `syz.1.77'. [ 140.540576][ T6331] netlink: 504 bytes leftover after parsing attributes in process `syz.1.78'. [ 140.583015][ T6333] netlink: 504 bytes leftover after parsing attributes in process `syz.0.87'. [ 140.634862][ T6334] netlink: 504 bytes leftover after parsing attributes in process `syz.0.87'. [ 140.718899][ T6336] netlink: 186 bytes leftover after parsing attributes in process `syz.2.79'. [ 140.907849][ T6341] netlink: 252 bytes leftover after parsing attributes in process `syz.0.81'. [ 141.387537][ T6355] netlink: 252 bytes leftover after parsing attributes in process `syz.0.93'. [ 141.592823][ T6360] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 142.754155][ T6372] netlink: 504 bytes leftover after parsing attributes in process `syz.3.90'. [ 142.952247][ T6379] netlink: 186 bytes leftover after parsing attributes in process `syz.0.92'. [ 143.206067][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.212753][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.737873][ T6337] ima: policy update failed [ 143.743774][ T30] audit: type=1802 audit(1758105371.235:3): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.80" res=0 errno=0 [ 144.088534][ T6400] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 145.192072][ T6419] __nla_validate_parse: 2 callbacks suppressed [ 145.192092][ T6419] netlink: 186 bytes leftover after parsing attributes in process `syz.3.104'. [ 145.208526][ T6419] netlink: 186 bytes leftover after parsing attributes in process `syz.3.104'. [ 145.292518][ T6421] netlink: 252 bytes leftover after parsing attributes in process `syz.3.105'. [ 146.165300][ T6436] netlink: 504 bytes leftover after parsing attributes in process `syz.1.111'. [ 147.041816][ T6448] netlink: 186 bytes leftover after parsing attributes in process `syz.2.114'. [ 147.064002][ T6448] netlink: 186 bytes leftover after parsing attributes in process `syz.2.114'. [ 147.268456][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.116'. [ 148.256669][ T6474] netlink: 504 bytes leftover after parsing attributes in process `syz.1.122'. [ 149.584317][ T6491] netlink: 186 bytes leftover after parsing attributes in process `syz.3.127'. [ 149.630752][ T6491] netlink: 186 bytes leftover after parsing attributes in process `syz.3.127'. [ 150.323729][ T6501] netlink: 504 bytes leftover after parsing attributes in process `syz.0.132'. [ 152.394982][ T6526] netlink: 186 bytes leftover after parsing attributes in process `syz.3.138'. [ 152.688059][ T6536] netlink: 504 bytes leftover after parsing attributes in process `syz.1.142'. [ 155.563266][ T6572] netlink: 186 bytes leftover after parsing attributes in process `syz.0.149'. [ 156.549713][ T6579] netlink: 504 bytes leftover after parsing attributes in process `syz.2.151'. [ 156.933598][ T6588] netlink: 504 bytes leftover after parsing attributes in process `syz.2.165'. [ 157.048612][ T6589] FAULT_INJECTION: forcing a failure. [ 157.048612][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 157.068097][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.3.156 Tainted: G U syzkaller #0 PREEMPT(full) [ 157.068146][ T6589] Tainted: [U]=USER [ 157.068156][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.068173][ T6589] Call Trace: [ 157.068183][ T6589] [ 157.068195][ T6589] dump_stack_lvl+0x16c/0x1f0 [ 157.068249][ T6589] should_fail_ex+0x512/0x640 [ 157.068303][ T6589] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.068348][ T6589] should_failslab+0xc2/0x120 [ 157.068392][ T6589] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.068433][ T6589] ? __kernfs_new_node+0xd2/0x8e0 [ 157.068480][ T6589] __kernfs_new_node+0xd2/0x8e0 [ 157.068527][ T6589] ? __pfx___kernfs_new_node+0x10/0x10 [ 157.068581][ T6589] ? find_held_lock+0x2b/0x80 [ 157.068616][ T6589] ? kernfs_root+0xee/0x2a0 [ 157.068666][ T6589] kernfs_new_node+0x13c/0x1e0 [ 157.068733][ T6589] __kernfs_create_file+0x53/0x350 [ 157.068774][ T6589] sysfs_add_file_mode_ns+0x207/0x3c0 [ 157.068827][ T6589] sysfs_merge_group+0x1aa/0x340 [ 157.068875][ T6589] ? __pfx_sysfs_merge_group+0x10/0x10 [ 157.068931][ T6589] ? __pfx_dev_add_physical_location+0x10/0x10 [ 157.068968][ T6589] ? bus_to_subsys+0x131/0x160 [ 157.069015][ T6589] dpm_sysfs_add+0x237/0x280 [ 157.069058][ T6589] device_add+0x9a6/0x1aa0 [ 157.069099][ T6589] ? __pfx_device_add+0x10/0x10 [ 157.069134][ T6589] ? lockdep_init_map_type+0x5c/0x280 [ 157.069183][ T6589] ? __init_waitqueue_head+0xca/0x150 [ 157.069246][ T6589] netdev_register_kobject+0x1a9/0x3d0 [ 157.069288][ T6589] register_netdevice+0x13dc/0x2270 [ 157.069329][ T6589] ? __pfx_register_netdevice+0x10/0x10 [ 157.069390][ T6589] __ip_tunnel_create+0x540/0x6e0 [ 157.069427][ T6589] ? __pfx___ip_tunnel_create+0x10/0x10 [ 157.069473][ T6589] ip_tunnel_init_net+0x22f/0x7d0 [ 157.069512][ T6589] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 157.069553][ T6589] ? trace_kmalloc+0x2b/0xd0 [ 157.069599][ T6589] ? __kmalloc_noprof+0x242/0x510 [ 157.069637][ T6589] ? lockdep_init_map_type+0x5c/0x280 [ 157.069689][ T6589] ? __pfx_erspan_init_net+0x10/0x10 [ 157.069744][ T6589] ops_init+0x1e2/0x5f0 [ 157.069780][ T6589] setup_net+0x10f/0x380 [ 157.069807][ T6589] ? lockdep_init_map_type+0x5c/0x280 [ 157.069856][ T6589] ? __pfx_setup_net+0x10/0x10 [ 157.069889][ T6589] ? debug_mutex_init+0x37/0x70 [ 157.069928][ T6589] copy_net_ns+0x2a6/0x5f0 [ 157.069967][ T6589] create_new_namespaces+0x3ea/0xa90 [ 157.070017][ T6589] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 157.070061][ T6589] ksys_unshare+0x45b/0xa40 [ 157.070109][ T6589] ? __pfx_ksys_unshare+0x10/0x10 [ 157.070156][ T6589] ? xfd_validate_state+0x61/0x180 [ 157.070217][ T6589] __x64_sys_unshare+0x31/0x40 [ 157.070262][ T6589] do_syscall_64+0xcd/0x4c0 [ 157.070318][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.070351][ T6589] RIP: 0033:0x7efdc3b8eba9 [ 157.070378][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.070410][ T6589] RSP: 002b:00007efdc49b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.070439][ T6589] RAX: ffffffffffffffda RBX: 00007efdc3dd5fa0 RCX: 00007efdc3b8eba9 [ 157.070459][ T6589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.070476][ T6589] RBP: 00007efdc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.070495][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.070513][ T6589] R13: 00007efdc3dd6038 R14: 00007efdc3dd5fa0 R15: 00007ffc1041f458 [ 157.070553][ T6589] [ 157.514306][ T6594] mkiss: ax0: crc mode is auto. [ 157.919117][ T6604] netlink: 186 bytes leftover after parsing attributes in process `syz.3.162'. [ 158.461297][ T6618] netlink: 302 bytes leftover after parsing attributes in process `syz.1.167'. [ 158.567091][ T6621] netlink: 504 bytes leftover after parsing attributes in process `syz.2.168'. [ 159.239270][ T6634] FAULT_INJECTION: forcing a failure. [ 159.239270][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 159.254589][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.0.172 Tainted: G U syzkaller #0 PREEMPT(full) [ 159.254641][ T6634] Tainted: [U]=USER [ 159.254652][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.254673][ T6634] Call Trace: [ 159.254682][ T6634] [ 159.254691][ T6634] dump_stack_lvl+0x16c/0x1f0 [ 159.254732][ T6634] should_fail_ex+0x512/0x640 [ 159.254770][ T6634] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 159.254803][ T6634] should_failslab+0xc2/0x120 [ 159.254836][ T6634] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 159.254866][ T6634] ? __kernfs_new_node+0xd2/0x8e0 [ 159.254901][ T6634] __kernfs_new_node+0xd2/0x8e0 [ 159.254935][ T6634] ? __pfx___kernfs_new_node+0x10/0x10 [ 159.254974][ T6634] ? find_held_lock+0x2b/0x80 [ 159.254999][ T6634] ? kernfs_root+0xee/0x2a0 [ 159.255035][ T6634] kernfs_new_node+0x13c/0x1e0 [ 159.255076][ T6634] __kernfs_create_file+0x53/0x350 [ 159.255103][ T6634] sysfs_add_file_mode_ns+0x207/0x3c0 [ 159.255140][ T6634] internal_create_group+0x578/0xf30 [ 159.255180][ T6634] ? __pfx_internal_create_group+0x10/0x10 [ 159.255217][ T6634] ? kernfs_create_link+0x1bd/0x240 [ 159.255246][ T6634] internal_create_groups+0x9d/0x150 [ 159.255281][ T6634] device_add+0x6d1/0x1aa0 [ 159.255311][ T6634] ? __pfx_device_add+0x10/0x10 [ 159.255336][ T6634] ? lockdep_init_map_type+0x5c/0x280 [ 159.255370][ T6634] ? __init_waitqueue_head+0xca/0x150 [ 159.255423][ T6634] netdev_register_kobject+0x1a9/0x3d0 [ 159.255454][ T6634] register_netdevice+0x13dc/0x2270 [ 159.255484][ T6634] ? __pfx_register_netdevice+0x10/0x10 [ 159.255516][ T6634] __ip_tunnel_create+0x540/0x6e0 [ 159.255548][ T6634] ? __pfx___ip_tunnel_create+0x10/0x10 [ 159.255594][ T6634] ip_tunnel_init_net+0x22f/0x7d0 [ 159.255636][ T6634] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 159.255680][ T6634] ? rcu_is_watching+0x12/0xc0 [ 159.255709][ T6634] ? trace_kmalloc+0x2b/0xd0 [ 159.255741][ T6634] ? __kmalloc_noprof+0x242/0x510 [ 159.255770][ T6634] ? __pfx_vti_init_net+0x10/0x10 [ 159.255797][ T6634] vti_init_net+0x2e/0x140 [ 159.255823][ T6634] ops_init+0x1e2/0x5f0 [ 159.255848][ T6634] setup_net+0x10f/0x380 [ 159.255867][ T6634] ? lockdep_init_map_type+0x5c/0x280 [ 159.255902][ T6634] ? __pfx_setup_net+0x10/0x10 [ 159.255924][ T6634] ? debug_mutex_init+0x37/0x70 [ 159.255951][ T6634] copy_net_ns+0x2a6/0x5f0 [ 159.255979][ T6634] create_new_namespaces+0x3ea/0xa90 [ 159.256014][ T6634] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 159.256045][ T6634] ksys_unshare+0x45b/0xa40 [ 159.256080][ T6634] ? __pfx_ksys_unshare+0x10/0x10 [ 159.256115][ T6634] ? xfd_validate_state+0x61/0x180 [ 159.256159][ T6634] __x64_sys_unshare+0x31/0x40 [ 159.256192][ T6634] do_syscall_64+0xcd/0x4c0 [ 159.256233][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.256257][ T6634] RIP: 0033:0x7f184718eba9 [ 159.256276][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.256299][ T6634] RSP: 002b:00007f18453f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 159.256321][ T6634] RAX: ffffffffffffffda RBX: 00007f18473d5fa0 RCX: 00007f184718eba9 [ 159.256337][ T6634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 159.256351][ T6634] RBP: 00007f1847211e19 R08: 0000000000000000 R09: 0000000000000000 [ 159.256366][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.256380][ T6634] R13: 00007f18473d6038 R14: 00007f18473d5fa0 R15: 00007ffc006e1e18 [ 159.256410][ T6634] [ 160.264628][ T6649] netlink: 504 bytes leftover after parsing attributes in process `syz.2.178'. [ 160.562809][ T6657] netlink: 302 bytes leftover after parsing attributes in process `syz.2.180'. [ 162.337652][ T6685] netlink: 504 bytes leftover after parsing attributes in process `syz.2.190'. [ 162.625953][ T6693] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 163.004162][ T6696] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 166.959915][ T6740] netlink: 504 bytes leftover after parsing attributes in process `syz.2.200'. [ 168.942072][ T6769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 170.879653][ T6771] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 171.268479][ T6783] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 171.396985][ C1] ================================================================== [ 171.405111][ C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x9e5/0xa30 [ 171.413293][ C1] Write of size 8 at addr ffff8880780348b0 by task syz.3.209/6785 [ 171.421104][ C1] [ 171.423440][ C1] CPU: 1 UID: 0 PID: 6785 Comm: syz.3.209 Tainted: G U syzkaller #0 PREEMPT(full) [ 171.423474][ C1] Tainted: [U]=USER [ 171.423482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.423496][ C1] Call Trace: [ 171.423505][ C1] [ 171.423515][ C1] dump_stack_lvl+0x116/0x1f0 [ 171.423556][ C1] print_report+0xcd/0x630 [ 171.423587][ C1] ? __virt_addr_valid+0x81/0x610 [ 171.423617][ C1] ? __phys_addr+0xe8/0x180 [ 171.423648][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 171.423680][ C1] kasan_report+0xe0/0x110 [ 171.423712][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 171.423748][ C1] __xfrm_state_delete+0x9e5/0xa30 [ 171.423782][ C1] xfrm_timer_handler+0x86c/0xf10 [ 171.423815][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 171.423854][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 171.423887][ C1] ? find_held_lock+0x2b/0x80 [ 171.423913][ C1] ? rcu_is_watching+0x12/0xc0 [ 171.423937][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 171.423973][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 171.424005][ C1] __hrtimer_run_queues+0x202/0xad0 [ 171.424033][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 171.424055][ C1] ? read_tsc+0x9/0x20 [ 171.424088][ C1] hrtimer_run_softirq+0x17d/0x350 [ 171.424112][ C1] handle_softirqs+0x216/0x8e0 [ 171.424148][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 171.424179][ C1] __irq_exit_rcu+0x109/0x170 [ 171.424205][ C1] irq_exit_rcu+0x9/0x30 [ 171.424235][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 171.424271][ C1] [ 171.424278][ C1] [ 171.424286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.424314][ C1] RIP: 0010:__timer_delete_sync+0x7c/0x1b0 [ 171.424347][ C1] Code: fb ef ff 48 89 de 4c 89 ef e8 00 f5 ef ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 4e 9e 13 00 58 48 85 db 0f 85 09 01 00 00 cf a2 13 00 31 ff 65 8b 1d 16 f9 2e 12 81 e3 00 00 0f 00 89 de [ 171.424370][ C1] RSP: 0018:ffffc90003547ad8 EFLAGS: 00000283 [ 171.424389][ C1] RAX: 0000000000042e01 RBX: 0000000000000000 RCX: ffffc9000ca7c000 [ 171.424405][ C1] RDX: 0000000000080000 RSI: ffffffff81a7680f RDI: 0000000000000007 [ 171.424420][ C1] RBP: ffffc90003547b20 R08: 0000000000000007 R09: 0000000000000000 [ 171.424435][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 171.424448][ C1] R13: ffffc90003547b48 R14: 1ffffffff1c42240 R15: ffff88806de82e00 [ 171.424469][ C1] ? __timer_delete_sync+0x17f/0x1b0 [ 171.424506][ C1] ? __timer_delete_sync+0x17f/0x1b0 [ 171.424538][ C1] schedule_timeout+0x12b/0x290 [ 171.424567][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 171.424596][ C1] ? __pfx_process_timeout+0x10/0x10 [ 171.424625][ C1] ? rcu_is_watching+0x12/0xc0 [ 171.424648][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.424682][ C1] snd_rawmidi_write+0x496/0xc10 [ 171.424718][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 171.424750][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 171.424776][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 171.424813][ C1] ? security_file_permission+0x71/0x210 [ 171.424852][ C1] ? rw_verify_area+0xcf/0x6c0 [ 171.424877][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 171.424908][ C1] vfs_write+0x2a0/0x11d0 [ 171.424938][ C1] ? __pfx_vfs_write+0x10/0x10 [ 171.424965][ C1] ? find_held_lock+0x2b/0x80 [ 171.424988][ C1] ? __fget_files+0x204/0x3c0 [ 171.425017][ C1] ? __fget_files+0x20e/0x3c0 [ 171.425046][ C1] ksys_write+0x1f8/0x250 [ 171.425074][ C1] ? __pfx_ksys_write+0x10/0x10 [ 171.425106][ C1] do_syscall_64+0xcd/0x4c0 [ 171.425146][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.425170][ C1] RIP: 0033:0x7efdc3b8eba9 [ 171.425188][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.425211][ C1] RSP: 002b:00007efdc4992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.425231][ C1] RAX: ffffffffffffffda RBX: 00007efdc3dd6090 RCX: 00007efdc3b8eba9 [ 171.425247][ C1] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 171.425262][ C1] RBP: 00007efdc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.425277][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.425291][ C1] R13: 00007efdc3dd6128 R14: 00007efdc3dd6090 R15: 00007ffc1041f458 [ 171.425314][ C1] [ 171.425321][ C1] [ 171.853559][ C1] Allocated by task 6333: [ 171.857899][ C1] kasan_save_stack+0x33/0x60 [ 171.862631][ C1] kasan_save_track+0x14/0x30 [ 171.867349][ C1] __kasan_slab_alloc+0x89/0x90 [ 171.872218][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 171.877693][ C1] xfrm_state_alloc+0x23/0x5c0 [ 171.882475][ C1] __find_acq_core+0xb59/0x2900 [ 171.887359][ C1] xfrm_find_acq+0x7b/0xa0 [ 171.891813][ C1] xfrm_alloc_userspi+0x58e/0xbb0 [ 171.896869][ C1] xfrm_user_rcv_msg+0x4fe/0xb60 [ 171.901844][ C1] netlink_rcv_skb+0x158/0x420 [ 171.906643][ C1] xfrm_netlink_rcv+0x71/0x90 [ 171.911339][ C1] netlink_unicast+0x5a7/0x870 [ 171.916135][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 171.920951][ C1] ____sys_sendmsg+0xa98/0xc70 [ 171.925739][ C1] ___sys_sendmsg+0x134/0x1d0 [ 171.930450][ C1] __sys_sendmsg+0x16d/0x220 [ 171.935073][ C1] do_syscall_64+0xcd/0x4c0 [ 171.939612][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.945522][ C1] [ 171.947854][ C1] Freed by task 9: [ 171.951581][ C1] kasan_save_stack+0x33/0x60 [ 171.956457][ C1] kasan_save_track+0x14/0x30 [ 171.961247][ C1] kasan_save_free_info+0x3b/0x60 [ 171.966285][ C1] __kasan_slab_free+0x60/0x70 [ 171.971073][ C1] kmem_cache_free+0x2d1/0x4d0 [ 171.975872][ C1] xfrm_state_gc_task+0x50a/0x770 [ 171.981013][ C1] process_one_work+0x9cf/0x1b70 [ 171.985975][ C1] worker_thread+0x6c8/0xf10 [ 171.990590][ C1] kthread+0x3c5/0x780 [ 171.994692][ C1] ret_from_fork+0x56d/0x730 [ 171.999320][ C1] ret_from_fork_asm+0x1a/0x30 [ 172.004223][ C1] [ 172.006557][ C1] The buggy address belongs to the object at ffff888078034880 [ 172.006557][ C1] which belongs to the cache xfrm_state of size 928 [ 172.020541][ C1] The buggy address is located 48 bytes inside of [ 172.020541][ C1] freed 928-byte region [ffff888078034880, ffff888078034c20) [ 172.034269][ C1] [ 172.036611][ C1] The buggy address belongs to the physical page: [ 172.043038][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78034 [ 172.051808][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 172.060320][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 172.067872][ C1] page_type: f5(slab) [ 172.071867][ C1] raw: 00fff00000000040 ffff88801c752140 dead000000000122 0000000000000000 [ 172.080459][ C1] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 172.089094][ C1] head: 00fff00000000040 ffff88801c752140 dead000000000122 0000000000000000 [ 172.097788][ C1] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 172.106565][ C1] head: 00fff00000000002 ffffea0001e00d01 00000000ffffffff 00000000ffffffff [ 172.115250][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 172.123929][ C1] page dumped because: kasan: bad access detected [ 172.130372][ C1] page_owner tracks the page as allocated [ 172.136088][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6329, tgid 6328 (syz.1.77), ts 140193424939, free_ts 115720364339 [ 172.155217][ C1] post_alloc_hook+0x1c0/0x230 [ 172.160002][ C1] get_page_from_freelist+0x132b/0x38e0 [ 172.165570][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 172.171484][ C1] alloc_pages_mpol+0x1fb/0x550 [ 172.176380][ C1] new_slab+0x247/0x330 [ 172.180549][ C1] ___slab_alloc+0xcf2/0x1750 [ 172.185238][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 172.190626][ C1] kmem_cache_alloc_noprof+0xef/0x3b0 [ 172.196021][ C1] xfrm_state_alloc+0x23/0x5c0 [ 172.200807][ C1] __find_acq_core+0xb59/0x2900 [ 172.205705][ C1] xfrm_find_acq+0x7b/0xa0 [ 172.210161][ C1] xfrm_alloc_userspi+0x58e/0xbb0 [ 172.215216][ C1] xfrm_user_rcv_msg+0x4fe/0xb60 [ 172.220177][ C1] netlink_rcv_skb+0x158/0x420 [ 172.224973][ C1] xfrm_netlink_rcv+0x71/0x90 [ 172.229669][ C1] netlink_unicast+0x5a7/0x870 [ 172.234467][ C1] page last free pid 23 tgid 23 stack trace: [ 172.240456][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 172.245672][ C1] rcu_core+0x799/0x1530 [ 172.249947][ C1] handle_softirqs+0x216/0x8e0 [ 172.254745][ C1] run_ksoftirqd+0x3a/0x60 [ 172.259274][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 172.264242][ C1] kthread+0x3c5/0x780 [ 172.268345][ C1] ret_from_fork+0x56d/0x730 [ 172.272965][ C1] ret_from_fork_asm+0x1a/0x30 [ 172.277751][ C1] [ 172.280089][ C1] Memory state around the buggy address: [ 172.285898][ C1] ffff888078034780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 172.293969][ C1] ffff888078034800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 172.302131][ C1] >ffff888078034880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.310208][ C1] ^ [ 172.315848][ C1] ffff888078034900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.323922][ C1] ffff888078034980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.331993][ C1] ================================================================== [ 172.340153][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.347385][ C1] CPU: 1 UID: 0 PID: 6785 Comm: syz.3.209 Tainted: G U syzkaller #0 PREEMPT(full) [ 172.358208][ C1] Tainted: [U]=USER [ 172.362043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.372130][ C1] Call Trace: [ 172.375419][ C1] [ 172.378278][ C1] dump_stack_lvl+0x3d/0x1f0 [ 172.382909][ C1] vpanic+0x6e8/0x7a0 [ 172.386960][ C1] ? __pfx_vpanic+0x10/0x10 [ 172.391498][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 172.396829][ C1] panic+0xca/0xd0 [ 172.400592][ C1] ? __pfx_panic+0x10/0x10 [ 172.405087][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 172.410266][ C1] check_panic_on_warn+0xab/0xb0 [ 172.415266][ C1] end_report+0x107/0x170 [ 172.419654][ C1] kasan_report+0xee/0x110 [ 172.424149][ C1] ? __xfrm_state_delete+0x9e5/0xa30 [ 172.429507][ C1] __xfrm_state_delete+0x9e5/0xa30 [ 172.434681][ C1] xfrm_timer_handler+0x86c/0xf10 [ 172.439775][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 172.445806][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 172.451378][ C1] ? find_held_lock+0x2b/0x80 [ 172.456082][ C1] ? rcu_is_watching+0x12/0xc0 [ 172.460871][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 172.466905][ C1] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 172.472468][ C1] __hrtimer_run_queues+0x202/0xad0 [ 172.477694][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 172.483456][ C1] ? read_tsc+0x9/0x20 [ 172.487554][ C1] hrtimer_run_softirq+0x17d/0x350 [ 172.492677][ C1] handle_softirqs+0x216/0x8e0 [ 172.497476][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 172.502792][ C1] __irq_exit_rcu+0x109/0x170 [ 172.507523][ C1] irq_exit_rcu+0x9/0x30 [ 172.511811][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 172.517520][ C1] [ 172.520507][ C1] [ 172.523465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 172.529509][ C1] RIP: 0010:__timer_delete_sync+0x7c/0x1b0 [ 172.535389][ C1] Code: fb ef ff 48 89 de 4c 89 ef e8 00 f5 ef ff 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 4e 9e 13 00 58 48 85 db 0f 85 09 01 00 00 cf a2 13 00 31 ff 65 8b 1d 16 f9 2e 12 81 e3 00 00 0f 00 89 de [ 172.555231][ C1] RSP: 0018:ffffc90003547ad8 EFLAGS: 00000283 [ 172.561311][ C1] RAX: 0000000000042e01 RBX: 0000000000000000 RCX: ffffc9000ca7c000 [ 172.569295][ C1] RDX: 0000000000080000 RSI: ffffffff81a7680f RDI: 0000000000000007 [ 172.577305][ C1] RBP: ffffc90003547b20 R08: 0000000000000007 R09: 0000000000000000 [ 172.585280][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 172.593274][ C1] R13: ffffc90003547b48 R14: 1ffffffff1c42240 R15: ffff88806de82e00 [ 172.601272][ C1] ? __timer_delete_sync+0x17f/0x1b0 [ 172.606583][ C1] ? __timer_delete_sync+0x17f/0x1b0 [ 172.611887][ C1] schedule_timeout+0x12b/0x290 [ 172.617279][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 172.622685][ C1] ? __pfx_process_timeout+0x10/0x10 [ 172.627997][ C1] ? rcu_is_watching+0x12/0xc0 [ 172.632775][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.637995][ C1] snd_rawmidi_write+0x496/0xc10 [ 172.642978][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 172.648458][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 172.654294][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 172.659699][ C1] ? security_file_permission+0x71/0x210 [ 172.665378][ C1] ? rw_verify_area+0xcf/0x6c0 [ 172.670153][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 172.675624][ C1] vfs_write+0x2a0/0x11d0 [ 172.679985][ C1] ? __pfx_vfs_write+0x10/0x10 [ 172.684761][ C1] ? find_held_lock+0x2b/0x80 [ 172.689449][ C1] ? __fget_files+0x204/0x3c0 [ 172.694165][ C1] ? __fget_files+0x20e/0x3c0 [ 172.698851][ C1] ksys_write+0x1f8/0x250 [ 172.703195][ C1] ? __pfx_ksys_write+0x10/0x10 [ 172.708068][ C1] do_syscall_64+0xcd/0x4c0 [ 172.712604][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.718524][ C1] RIP: 0033:0x7efdc3b8eba9 [ 172.722943][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.742557][ C1] RSP: 002b:00007efdc4992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.750980][ C1] RAX: ffffffffffffffda RBX: 00007efdc3dd6090 RCX: 00007efdc3b8eba9 [ 172.758954][ C1] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 172.766940][ C1] RBP: 00007efdc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.774916][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.782893][ C1] R13: 00007efdc3dd6128 R14: 00007efdc3dd6090 R15: 00007ffc1041f458 [ 172.790886][ C1] [ 172.794254][ C1] Kernel Offset: disabled [ 172.798589][ C1] Rebooting in 86400 seconds..