last executing test programs: 10.563720511s ago: executing program 2 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032cb57000fbdbdf250a0000000500eaffffffffff0500010040020000"], 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_OP={0x8, 0xa, 0x2}, @CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x80}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, ':{}[](-@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 8.954088145s ago: executing program 2 (id=662): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x4f) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x80001ff, 0x7c9, 0x26, 0x7fffffffffffffff, 0x1ffe0, 0x8, 0x3, 0x2000000c, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xe26, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) poll$auto(&(0x7f0000000000)={r2, 0x7fff, 0x9}, 0xd, 0x9) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)=@prog_bind_map={r0, r3, 0x8}, 0x7fff) unshare$auto(0x6c000000) mmap$auto(0x8000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) clock_gettime$auto(0x6, 0x0) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x7ff, &(0x7f0000000080)={[0x4, 0x1000003, 0x3ff, 0x3, 0x6, 0x6, 0x6, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0xd]}, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0xb) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000) madvise$auto(0x100000001, 0x8, 0x8) 6.16913372s ago: executing program 1 (id=668): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x19, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x200003, 0xc, 0x400, 0x3, 0x1ffe000, 0xcad, 0x3, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) 5.766571971s ago: executing program 3 (id=671): mmap$auto(0x0, 0x20009, 0x7ff, 0x40000000000eb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x6) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000)={0x10, 0x6, 0x2, 0xfffffffb, 0x2, "05be24060404519dde32fa2add24c2b2"}) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x41, 0x20148, 0x2bd}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400000008, 0x20000000000000da, 0x9b76, 0xffffffffffffffff, 0x20008000) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1a7100, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0xc, 0x4, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0xa, 0x1004, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000200, 0x4000401, 0x0, 0x7, 0xffffffffffffff81, 0xffffffff80000000, 0x0, 0x3f, 0x1, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x668, 0x0, 0x9, 0x0, 0x5, 0x14, 0xffffffffffffffff, 0xfffffe, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0xb457195, 0x6, 0xffffffffffffffff, 0x2]}, 0x800000000001fe, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) read$auto(r2, 0x0, 0x10001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4000, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffffffffffd01, &(0x7f00000001c0)) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0xb72, 0x2020005, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 5.486827649s ago: executing program 3 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032cb57000fbdbdf250a0000000500eaffffffffff0500010040020000"], 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_OP={0x8, 0xa, 0x2}, @CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x80}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, ':{}[](-@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 5.200562156s ago: executing program 1 (id=673): socket(0x11, 0x80003, 0x300) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x400000000001, 0x8) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyz9\x00', 0x40001, 0x0) r2 = getpid() r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/15/node\x00', 0xe100, 0x0) preadv$auto(r3, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) r4 = gettid() write$auto(r1, 0x0, 0x80000000) rt_tgsigqueueinfo$auto(r2, r4, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r2}}}) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) socket(0xa, 0x6, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x16, 0x0, 0x8) 4.890047763s ago: executing program 0 (id=674): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x81, 0x0, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x100000, 0x0) pread64$auto(r1, &(0x7f0000000040)='],{(@&&\x00', 0xa1fb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 4.705510847s ago: executing program 2 (id=675): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(r0, &(0x7f0000000040)='\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), r1) sendmsg$auto_CTRL_CMD_GETFAMILY2(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'macsec\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x1}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '-\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x4}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'netdev\x00'}]}, 0x4c}}, 0xc0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000007c0), 0xffffffffffffffff) unshare$auto(0x40000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r5 = socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r6, 0x40000000113, 0x4, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf2502000000e4000a80cea3b1eb5035f2ad07a6b369d9cae80000ce4557f0a5750e99a779e2b15337c19c29137b08003300ffffffffa2e51c731e48c1c636ffffe1588d1951c13ab2c929acd06187008e8014000500fe8800000000000000000000000000015ff77e4ad204002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac572e354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc720014001c0000000000000000000000ffffe0000001fba8aa74c34db8"], 0xf8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r8 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r8, 0x0, 0x0) open(0x0, 0xc0842, 0x95) 4.427256186s ago: executing program 1 (id=676): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyqd/power/runtime_active_time\x00', 0xca102, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(r0, 0x3, 0x3, 0x0, 0x4) socket(0x72b023b65585996e, 0x5, 0x84) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000ffde3599ec5da7b9e5a2d000ff000500d300060000000800260063000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0xa, 0x3, 0x4) mmap$auto(0x1, 0xffff, 0xbfb, 0x13, 0xffffffffffffffff, 0x1007ffe) clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x9}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2) mmap$auto(0xffffffffffffffff, 0x202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x5) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) pread64$auto(0xffffffffffffffff, &(0x7f0000001e40)='\x00', 0x2, 0x1) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) 3.654301172s ago: executing program 3 (id=677): socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) mmap$auto(0x8, 0xfffffffffffffff7, 0x7, 0xffffffff, 0xffffffffffffffff, 0x66) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x2000c801) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250300000004000800100001800c00108008000b00", @ANYRES32=0x0, @ANYBLOB="6ade33301e39754a76dcb064f58b40d6b4a4a931058f8ad8f64ad141043ed090b98579d321db79b0733307be19"], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x40044) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)='n', 0x1) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)={0xfffffffc, "018000", 0x3, 0xfffffffffffffffb, 0xfffffffffffff000, 0xffffffff, 0x6, 0x0, 0x1, 0x46cca, 0x7fff, 0x5, 0x7, 0x5, 0x1, 0x80000001, 0x1, 0x3, 0x400, "cec3ec4c01d0132df17dbe7378730314ad618988"}) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)={0x5, 0x0, [{0xfffffffa, 0x81, 0x5, 0x81, 0x7f, 0x1, 0xa0000}]}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/fail-nth\x00', 0x10000, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r6, 0x0, 0x100000001, 0x2000006) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) 3.563723333s ago: executing program 0 (id=678): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa1\x00', 0x101041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x41, 0x0) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0x40000, 0x400008, 0xdd, 0x16, 0xffffffffffffffff, 0x7fff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0xfffffff9, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x6, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0xb57, 0x104, 0x8, 0x100000000}}) syz_clone(0x1203000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20000a, 0x8) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKROGET(0xffffffffffffffff, 0x125e, 0x0) madvise$auto(0x0, 0x200007, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x594ec11d, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0x40840}, 0x40000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x5) close_range$auto(r0, 0x8, 0x0) socket(0x2a, 0x2, 0x6) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x3, 0xf3, 0xb0, @raw=0x7000}}) 3.39857636s ago: executing program 3 (id=679): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyqd/power/runtime_active_time\x00', 0xca102, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(r0, 0x3, 0x3, 0x0, 0x4) socket(0x72b023b65585996e, 0x5, 0x84) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000ffde3599ec5da7b9e5a2d000ff000500d300060000000800260063000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket(0xa, 0x3, 0x4) mmap$auto(0x1, 0xffff, 0xbfb, 0x13, 0xffffffffffffffff, 0x1007ffe) clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x9}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2) mmap$auto(0xffffffffffffffff, 0x202000a, 0xf, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x5) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) pread64$auto(0xffffffffffffffff, &(0x7f0000001e40)='\x00', 0x2, 0x1) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) 3.320699508s ago: executing program 2 (id=680): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r1) r2 = setfsuid$auto(0xee00) setfsuid$auto(r2) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x22, 0x800, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_uhid_fops_uhid(r3, 0x0, 0xfccd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.470441007s ago: executing program 0 (id=681): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007580)={0x20, r1, 0xd35, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000380)={0xd4, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0xbc, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0xb8, 0x5, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x513}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/nullb/features\x00', 0x109103, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @random="c18048d40767"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r4, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x329102, 0x0) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000280), r3) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xa}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xaf}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000408d}, 0x1) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r8 = socketcall$auto(0xa, 0x0) io_uring_register$auto_IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)="ca8ac93f5bd42bcee9a1ee750492fd9870c7befb1d4a97a13f6ee891cc3face41a3caf1da764f92d110abf891d28fc63e37686d1ffe7e225fbb59639f807ffb5b9451f5eb7645c36bea5317f033d47a6a814870510d2449417d784a943d9fac3e2c13755d5d91a50468eb87fccd76e3bf02cbf9ef85ae1e105c42ce9ac7aae1ee4ca55d5adb64eb2ae255f751ae15125724186687ce51619858110b68334fe8c6d434be9d2cb536bf858e219001106", 0x2) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_TIMESTAMPNS_OLD(r0, 0x7fff, 0x23, &(0x7f00000004c0)='-+\x00', 0x6) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r7, 0xae80, 0x0) 2.470268214s ago: executing program 1 (id=682): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x81, 0x0, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x100000, 0x0) pread64$auto(r1, &(0x7f0000000040)='],{(@&&\x00', 0xa1fb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 2.064208605s ago: executing program 3 (id=683): close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0xa, 0x300) timerfd_create$auto(0xac86, 0x1000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x3, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) close_range$auto(0x2, 0x8, 0x0) 2.034025221s ago: executing program 2 (id=684): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x19, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xba8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x200003, 0xc, 0x400, 0x3, 0x1ffe000, 0xcad, 0x3, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) 1.064136678s ago: executing program 0 (id=685): mmap$auto(0x0, 0x20009, 0x7ff, 0x40000000000eb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x6) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000)={0x10, 0x6, 0x2, 0xfffffffb, 0x2, "05be24060404519dde32fa2add24c2b2"}) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x41, 0x20148, 0x2bd}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400000008, 0x20000000000000da, 0x9b76, 0xffffffffffffffff, 0x20008000) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1a7100, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0xc, 0x4, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x7, 0x6, 0x7f, 0x3ff, 0x2, 0xa, 0x1004, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000200, 0x4000401, 0x0, 0x7, 0xffffffffffffff81, 0xffffffff80000000, 0x0, 0x3f, 0x1, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff, 0x668, 0x0, 0x9, 0x0, 0x5, 0x14, 0xffffffffffffffff, 0xfffffe, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0xb457195, 0x6, 0xffffffffffffffff, 0x2]}, 0x800000000001fe, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) read$auto(r2, 0x0, 0x10001) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4000, 0x0) close_range$auto(0x0, 0x5, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd01, &(0x7f00000001c0)) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0xb72, 0x2020005, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 950.901511ms ago: executing program 2 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032cb57000fbdbdf250a0000000500eaffffffffff0500010040020000"], 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_OP={0x8, 0xa, 0x2}, @CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x80}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, ':{}[](-@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 858.855619ms ago: executing program 1 (id=687): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x81, 0x0, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x100000, 0x0) pread64$auto(r1, &(0x7f0000000040)='],{(@&&\x00', 0xa1fb, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 826.734349ms ago: executing program 0 (id=688): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 419.388398ms ago: executing program 3 (id=689): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x8000000000000001) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r1) r3 = setfsuid$auto(0xee00) setfsuid$auto(r3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x22, 0x800, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_uhid_fops_uhid(r4, 0x0, 0xfccd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 269.723666ms ago: executing program 0 (id=690): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x8000000000000001) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r1) r3 = setfsuid$auto(0xee00) setfsuid$auto(r3) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x22, 0x800, 0xa) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_uhid_fops_uhid(r4, 0x0, 0xfccd) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 1 (id=691): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x5, &(0x7f00000001c0)={0x0, 0x200}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x6f41, 0x38) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x2201c3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r2, 0x541c, 0xffffffffffffffff) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x27, 0x0, 0xc) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. [ 73.400127][ T5610] cgroup: Unknown subsys name 'net' [ 73.550624][ T5610] cgroup: Unknown subsys name 'cpuset' [ 73.560649][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.099018][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.810249][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.819084][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.828115][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.838006][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.846932][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.867697][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.885880][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.895773][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.906110][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.913882][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.958969][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.968275][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.977113][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.988506][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.997723][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.065113][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.077039][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.086118][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.097612][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.106098][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.489350][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.496987][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.504293][ T5625] bridge_slave_0: entered allmulticast mode [ 78.511677][ T5625] bridge_slave_0: entered promiscuous mode [ 78.559890][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.568132][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.575350][ T5625] bridge_slave_1: entered allmulticast mode [ 78.582550][ T5625] bridge_slave_1: entered promiscuous mode [ 78.598915][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.606165][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.613367][ T5622] bridge_slave_0: entered allmulticast mode [ 78.620865][ T5622] bridge_slave_0: entered promiscuous mode [ 78.654762][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.661955][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.669367][ T5622] bridge_slave_1: entered allmulticast mode [ 78.676765][ T5622] bridge_slave_1: entered promiscuous mode [ 78.736102][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.754187][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.775914][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.797155][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.806758][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.813952][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.821525][ T5636] bridge_slave_0: entered allmulticast mode [ 78.828849][ T5636] bridge_slave_0: entered promiscuous mode [ 78.867945][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.875216][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.882493][ T5636] bridge_slave_1: entered allmulticast mode [ 78.890038][ T5636] bridge_slave_1: entered promiscuous mode [ 78.896735][ T5623] Bluetooth: hci0: command tx timeout [ 78.919263][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.926598][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.933955][ T5630] bridge_slave_0: entered allmulticast mode [ 78.941240][ T5630] bridge_slave_0: entered promiscuous mode [ 78.965799][ T5623] Bluetooth: hci1: command tx timeout [ 78.973923][ T5625] team0: Port device team_slave_0 added [ 78.979866][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.987300][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.994514][ T5630] bridge_slave_1: entered allmulticast mode [ 79.001741][ T5630] bridge_slave_1: entered promiscuous mode [ 79.019976][ T5622] team0: Port device team_slave_0 added [ 79.028319][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.040100][ T5625] team0: Port device team_slave_1 added [ 79.045815][ T5623] Bluetooth: hci2: command tx timeout [ 79.071231][ T5622] team0: Port device team_slave_1 added [ 79.079133][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.111693][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.125839][ T5623] Bluetooth: hci3: command tx timeout [ 79.141833][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.149129][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.175175][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.189005][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.218330][ T5636] team0: Port device team_slave_0 added [ 79.224688][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.231820][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.257827][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.279924][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.287507][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.314571][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.328601][ T5636] team0: Port device team_slave_1 added [ 79.343979][ T5630] team0: Port device team_slave_0 added [ 79.350314][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.357406][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.383960][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.415357][ T5630] team0: Port device team_slave_1 added [ 79.440113][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.447213][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.473471][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.514380][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.521461][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.548227][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.560604][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.568648][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.594902][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.612756][ T5625] hsr_slave_0: entered promiscuous mode [ 79.619588][ T5625] hsr_slave_1: entered promiscuous mode [ 79.643154][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.650565][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.676552][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.729854][ T5622] hsr_slave_0: entered promiscuous mode [ 79.736422][ T5622] hsr_slave_1: entered promiscuous mode [ 79.742574][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 79.748467][ T5622] Cannot create hsr debugfs directory [ 79.828649][ T5630] hsr_slave_0: entered promiscuous mode [ 79.835019][ T5630] hsr_slave_1: entered promiscuous mode [ 79.841547][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 79.847365][ T5630] Cannot create hsr debugfs directory [ 79.858427][ T5636] hsr_slave_0: entered promiscuous mode [ 79.864696][ T5636] hsr_slave_1: entered promiscuous mode [ 79.871656][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 79.877611][ T5636] Cannot create hsr debugfs directory [ 80.295957][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.313017][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.321079][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.331211][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.339474][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.349593][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.357847][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.368772][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.450593][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.461327][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.469581][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.480324][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.492102][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.502625][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.511849][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.523184][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.597872][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.609946][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.618253][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.629882][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.650026][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.661842][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.673381][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.684005][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.762579][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.772824][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.788441][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.799093][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.808763][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.819718][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.831075][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.841864][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.940129][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.966388][ T5623] Bluetooth: hci0: command tx timeout [ 81.015288][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.028948][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.045849][ T5623] Bluetooth: hci1: command tx timeout [ 81.065970][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.073274][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.099729][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.106898][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.125804][ T5623] Bluetooth: hci2: command tx timeout [ 81.137480][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.151343][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.194791][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.201978][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.216729][ T5623] Bluetooth: hci3: command tx timeout [ 81.233459][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.240623][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.254264][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.283979][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.291224][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.313877][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.327835][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.334990][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.428082][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.494252][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.501590][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.538361][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.545779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.269195][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.444972][ T5625] veth0_vlan: entered promiscuous mode [ 82.488013][ T5625] veth1_vlan: entered promiscuous mode [ 82.561604][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.602023][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.642420][ T5625] veth0_macvtap: entered promiscuous mode [ 82.679756][ T5625] veth1_macvtap: entered promiscuous mode [ 82.724450][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.753289][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.782211][ T5636] veth0_vlan: entered promiscuous mode [ 82.796333][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.811026][ T5630] veth0_vlan: entered promiscuous mode [ 82.828562][ T5636] veth1_vlan: entered promiscuous mode [ 82.851526][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.861589][ T32] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.880308][ T32] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.889507][ T32] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905998][ T5630] veth1_vlan: entered promiscuous mode [ 83.000360][ T5622] veth0_vlan: entered promiscuous mode [ 83.027410][ T5636] veth0_macvtap: entered promiscuous mode [ 83.055992][ T5623] Bluetooth: hci0: command tx timeout [ 83.067021][ T5622] veth1_vlan: entered promiscuous mode [ 83.074257][ T5636] veth1_macvtap: entered promiscuous mode [ 83.100175][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.110033][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.126160][ T5623] Bluetooth: hci1: command tx timeout [ 83.129204][ T5630] veth0_macvtap: entered promiscuous mode [ 83.174471][ T5630] veth1_macvtap: entered promiscuous mode [ 83.190409][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.202810][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.216047][ T5623] Bluetooth: hci2: command tx timeout [ 83.220057][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.237674][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240897][ T5622] veth0_macvtap: entered promiscuous mode [ 83.263190][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280690][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.298051][ T5623] Bluetooth: hci3: command tx timeout [ 83.299524][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.312982][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.332709][ T5622] veth1_macvtap: entered promiscuous mode [ 83.339174][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.360135][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375640][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.450119][ T32] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.462524][ T32] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.499423][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.514340][ T32] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.523933][ T32] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.540903][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.584872][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.594607][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.618009][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.618032][ T3385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.618087][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.640835][ T3385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.748794][ T3385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775201][ T3385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.047001][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.068306][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.128844][ T5770] input: jJǸ-9%vJ86 as /devices/virtual/input/input5 [ 84.501432][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.518568][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.645251][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.676056][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.922219][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.955589][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.126179][ T5623] Bluetooth: hci0: command tx timeout [ 85.205692][ T5623] Bluetooth: hci1: command tx timeout [ 85.285792][ T5623] Bluetooth: hci2: command tx timeout [ 85.365889][ T5623] Bluetooth: hci3: command tx timeout [ 85.497377][ T5779] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 85.543234][ T5780] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 85.548583][ T5776] Zero length message leads to an empty skb [ 85.579251][ T5779] FAULT_INJECTION: forcing a failure. [ 85.579251][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 85.652203][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.1.2 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.652248][ T5779] Tainted: [L]=SOFTLOCKUP [ 85.652258][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.652283][ T5779] Call Trace: [ 85.652291][ T5779] [ 85.652297][ T5779] dump_stack_lvl+0x100/0x190 [ 85.652320][ T5779] should_fail_ex.cold+0x5/0xa [ 85.652338][ T5779] should_failslab+0xc2/0x120 [ 85.652358][ T5779] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.652375][ T5779] ? __proc_create+0xc1/0x8f0 [ 85.652389][ T5779] ? __proc_create+0xc1/0x8f0 [ 85.652401][ T5779] ? __proc_create+0x247/0x8f0 [ 85.652418][ T5779] __proc_create+0x247/0x8f0 [ 85.652433][ T5779] ? __pfx___proc_create+0x10/0x10 [ 85.652449][ T5779] ? _raw_write_unlock+0x28/0x50 [ 85.652463][ T5779] ? proc_register+0x56d/0x910 [ 85.652479][ T5779] proc_create_reg+0x75/0x170 [ 85.652496][ T5779] proc_create_data+0x86/0x110 [ 85.652510][ T5779] ? __pfx_proc_create_data+0x10/0x10 [ 85.652525][ T5779] ? cache_register_net+0x137/0x5e0 [ 85.652545][ T5779] ? cache_register_net+0x137/0x5e0 [ 85.652569][ T5779] cache_register_net+0x25a/0x5e0 [ 85.652590][ T5779] nfsd_idmap_init+0xb6/0x250 [ 85.652607][ T5779] ? __pfx_nfsd_net_init+0x10/0x10 [ 85.652625][ T5779] nfsd_net_init+0x85/0x3e0 [ 85.652652][ T5779] ? __pfx_nfsd_net_init+0x10/0x10 [ 85.652670][ T5779] ops_init+0x1e2/0x5f0 [ 85.652705][ T5779] setup_net+0x118/0x3a0 [ 85.652729][ T5779] ? __pfx_setup_net+0x10/0x10 [ 85.652747][ T5779] ? mutex_init_lockdep+0xf1/0x120 [ 85.652773][ T5779] copy_net_ns+0x46f/0x7c0 [ 85.652795][ T5779] create_new_namespaces+0x3ea/0xac0 [ 85.652814][ T5779] unshare_nsproxy_namespaces+0xf2/0x220 [ 85.652831][ T5779] ksys_unshare+0x438/0xab0 [ 85.652849][ T5779] ? __pfx_ksys_unshare+0x10/0x10 [ 85.652874][ T5779] __x64_sys_unshare+0x31/0x40 [ 85.652890][ T5779] do_syscall_64+0x115/0x840 [ 85.652905][ T5779] ? clear_bhb_loop+0x40/0x90 [ 85.652924][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.652939][ T5779] RIP: 0033:0x7f6ade59de99 [ 85.652958][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.652976][ T5779] RSP: 002b:00007f6adf50e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 85.652994][ T5779] RAX: ffffffffffffffda RBX: 00007f6ade825fa0 RCX: 00007f6ade59de99 [ 85.653004][ T5779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 85.653013][ T5779] RBP: 00007f6ade633eaf R08: 0000000000000000 R09: 0000000000000000 [ 85.653022][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.653031][ T5779] R13: 00007f6ade826038 R14: 00007f6ade825fa0 R15: 00007ffd6a64e148 [ 85.653051][ T5779] [ 86.551468][ T5794] ALSA: mixer_oss: invalid OSS volume '\' [ 86.600584][ T5788] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.266151][ T5796] FAULT_INJECTION: forcing a failure. [ 87.266151][ T5796] name failslab, interval 1, probability 0, space 0, times 0 [ 87.292267][ T5803] ovs_: entered promiscuous mode [ 87.307275][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.0.7 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.307314][ T5796] Tainted: [L]=SOFTLOCKUP [ 87.307322][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.307335][ T5796] Call Trace: [ 87.307343][ T5796] [ 87.307352][ T5796] dump_stack_lvl+0x100/0x190 [ 87.307385][ T5796] should_fail_ex.cold+0x5/0xa [ 87.307421][ T5796] should_failslab+0xc2/0x120 [ 87.307454][ T5796] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 87.307484][ T5796] ? lockdep_init_map_type+0x5c/0x250 [ 87.307521][ T5796] ? nf_ct_net_init+0x11c/0x370 [ 87.307554][ T5796] kmemdup_noprof+0x29/0x60 [ 87.307580][ T5796] nf_ct_net_init+0x11c/0x370 [ 87.307612][ T5796] ? __pfx_nf_ct_net_init+0x10/0x10 [ 87.307643][ T5796] ops_init+0x1e2/0x5f0 [ 87.307680][ T5796] setup_net+0x118/0x3a0 [ 87.307720][ T5796] ? __pfx_setup_net+0x10/0x10 [ 87.307752][ T5796] ? mutex_init_lockdep+0xf1/0x120 [ 87.307794][ T5796] copy_net_ns+0x46f/0x7c0 [ 87.307831][ T5796] create_new_namespaces+0x3ea/0xac0 [ 87.307864][ T5796] unshare_nsproxy_namespaces+0xf2/0x220 [ 87.307895][ T5796] ksys_unshare+0x438/0xab0 [ 87.307929][ T5796] ? __pfx_ksys_unshare+0x10/0x10 [ 87.307972][ T5796] __x64_sys_unshare+0x31/0x40 [ 87.308002][ T5796] do_syscall_64+0x115/0x840 [ 87.308032][ T5796] ? clear_bhb_loop+0x40/0x90 [ 87.308064][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.308090][ T5796] RIP: 0033:0x7ff16499de99 [ 87.308110][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.308134][ T5796] RSP: 002b:00007ff16586b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.308158][ T5796] RAX: ffffffffffffffda RBX: 00007ff164c26090 RCX: 00007ff16499de99 [ 87.308179][ T5796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 87.308194][ T5796] RBP: 00007ff164a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 87.308208][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.308225][ T5796] R13: 00007ff164c26128 R14: 00007ff164c26090 R15: 00007ffd07dddc08 [ 87.308259][ T5796] [ 88.589053][ T5811] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.795292][ T5820] Process accounting resumed [ 89.993054][ T187] cfg80211: failed to load regulatory.db [ 90.284375][ T5841] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.464359][ T5844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'. [ 90.706161][ T5851] process 'syz.3.19' launched ':,' with NULL argv: empty string added [ 93.423717][ T5879] bond0: invalid ARP target specified [ 93.479417][ T5881] nbd: socks must be embedded in a SOCK_ITEM attr [ 93.563998][ T5881] block nbd0: shutting down sockets [ 93.598651][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 93.733659][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 93.777597][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 95.944431][ T5945] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.801492][ T5982] random: crng reseeded on system resumption [ 98.026746][ T5989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.285165][ T5991] hub 1-0:1.0: USB hub found [ 98.317206][ T5991] hub 1-0:1.0: 1 port detected [ 98.854902][ T5989] syz.2.32 (5989) used greatest stack depth: 18216 bytes left [ 99.651295][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 99.797983][ T6022] ipvlan1: entered promiscuous mode [ 99.807211][ T6022] ipvlan1: entered allmulticast mode [ 99.846697][ T6022] veth0_vlan: entered allmulticast mode [ 100.025728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 101.280602][ T6044] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure [ 103.427363][ T6060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.139313][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 105.283199][ T6084] futex_wake_op: syz.0.44 tries to shift op by -2048; fix this program [ 109.424858][ T6148] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 109.467554][ T6148] pci 0000:00:01.3: PCI INT A: no GSI [ 110.039533][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 110.364708][ T6160] mmap: syz.2.58 (6160) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.905930][ T6179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.929385][ T6179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.977984][ T6179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.019600][ T6179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.053972][ T6179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.216696][ T6179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.232517][ T6179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.243823][ T6179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.267752][ T6179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.331761][ T6179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.362506][ T6179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.440574][ T6179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.779093][ T6199] nvme_fabrics: missing parameter 'transport=%s' [ 112.822336][ T6199] nvme_fabrics: missing parameter 'nqn=%s' [ 112.828501][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 113.446150][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.085664][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.245699][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.416015][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.546336][ T6221] FAULT_INJECTION: forcing a failure. [ 114.546336][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 114.594526][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.68 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.594571][ T6221] Tainted: [L]=SOFTLOCKUP [ 114.594581][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.594597][ T6221] Call Trace: [ 114.594607][ T6221] [ 114.594617][ T6221] dump_stack_lvl+0x100/0x190 [ 114.594665][ T6221] should_fail_ex.cold+0x5/0xa [ 114.594698][ T6221] should_failslab+0xc2/0x120 [ 114.594735][ T6221] __kmalloc_cache_noprof+0x91/0x6c0 [ 114.594778][ T6221] ? kernfs_root+0xee/0x2a0 [ 114.594809][ T6221] ? kernfs_fop_open+0x23d/0xd50 [ 114.594845][ T6221] kernfs_fop_open+0x23d/0xd50 [ 114.594884][ T6221] do_dentry_open+0x6ab/0x14d0 [ 114.594938][ T6221] ? __pfx_kernfs_fop_open+0x10/0x10 [ 114.594977][ T6221] vfs_open+0x82/0x3f0 [ 114.595015][ T6221] path_openat+0x2873/0x4280 [ 114.595057][ T6221] ? __pfx_path_openat+0x10/0x10 [ 114.595094][ T6221] do_file_open+0x20e/0x430 [ 114.595123][ T6221] ? __pfx_do_file_open+0x10/0x10 [ 114.595176][ T6221] ? alloc_fd+0x471/0x7a0 [ 114.595222][ T6221] ? do_getname+0x191/0x390 [ 114.595257][ T6221] do_sys_openat2+0x10f/0x1e0 [ 114.595291][ T6221] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.595328][ T6221] ? __fget_files+0x21f/0x3d0 [ 114.595377][ T6221] __x64_sys_openat+0x12d/0x210 [ 114.595411][ T6221] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.595458][ T6221] do_syscall_64+0x115/0x840 [ 114.595488][ T6221] ? clear_bhb_loop+0x40/0x90 [ 114.595523][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.595551][ T6221] RIP: 0033:0x7fab0599de99 [ 114.595579][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.595606][ T6221] RSP: 002b:00007fab0680e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.595631][ T6221] RAX: ffffffffffffffda RBX: 00007fab05c26180 RCX: 00007fab0599de99 [ 114.595650][ T6221] RDX: 0000000000129882 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 114.595668][ T6221] RBP: 00007fab05a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 114.595684][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.595701][ T6221] R13: 00007fab05c26218 R14: 00007fab05c26180 R15: 00007ffe7a477ef8 [ 114.595740][ T6221] [ 115.526039][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.166448][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.327339][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.490033][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.605593][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.635067][ T6237] kexec: Could not allocate control_code_buffer [ 118.245799][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.406302][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.565667][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.369545][ T5623] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3 [ 120.656036][ T6284] Process accounting paused [ 125.102404][ T6356] binder: 6351:6356 ioctl c00c620f 200000000c40 returned -22 [ 126.982012][ T6378] random: crng reseeded on system resumption [ 127.477788][ T6378] smpboot: CPU 1 is now offline [ 130.326109][ T6430] netlink: 342 bytes leftover after parsing attributes in process `syz.3.104'. [ 130.636687][ T6430] FAULT_INJECTION: forcing a failure. [ 130.636687][ T6430] name failslab, interval 1, probability 0, space 0, times 0 [ 130.737953][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.3.104 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.738033][ T6430] Tainted: [L]=SOFTLOCKUP [ 130.738038][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.738047][ T6430] Call Trace: [ 130.738053][ T6430] [ 130.738059][ T6430] dump_stack_lvl+0x100/0x190 [ 130.738082][ T6430] should_fail_ex.cold+0x5/0xa [ 130.738100][ T6430] should_failslab+0xc2/0x120 [ 130.738121][ T6430] kmem_cache_alloc_noprof+0x91/0x6a0 [ 130.738140][ T6430] ? fib_insert_alias+0x43e/0xe30 [ 130.738164][ T6430] fib_insert_alias+0x43e/0xe30 [ 130.738185][ T6430] ? lockdep_rtnl_is_held+0x26/0x40 [ 130.738200][ T6430] ? fib_find_node+0x209/0x280 [ 130.738220][ T6430] fib_trie_unmerge+0x289/0xbd0 [ 130.738246][ T6430] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 130.738267][ T6430] ? __pfx___mutex_lock+0x10/0x10 [ 130.738289][ T6430] fib_unmerge+0xee/0x510 [ 130.738302][ T6430] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 130.738327][ T6430] fib4_rule_configure+0x383/0x10c0 [ 130.738349][ T6430] fib_newrule+0x356/0x1ed0 [ 130.738373][ T6430] ? rcu_is_watching+0x12/0xc0 [ 130.738393][ T6430] ? __pfx_fib_newrule+0x10/0x10 [ 130.738415][ T6430] ? kfree_skbmem+0x130/0x210 [ 130.738436][ T6430] ? kmem_cache_free+0x127/0x6b0 [ 130.738450][ T6430] ? skb_release_data+0x6ca/0x8e0 [ 130.738483][ T6430] ? find_held_lock+0x2b/0x80 [ 130.738499][ T6430] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 130.738517][ T6430] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 130.738537][ T6430] ? __pfx_fib_nl_newrule+0x10/0x10 [ 130.738560][ T6430] rtnetlink_rcv_msg+0x95e/0xe90 [ 130.738580][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.738605][ T6430] ? ref_tracker_free+0x37e/0x6c0 [ 130.738630][ T6430] netlink_rcv_skb+0x159/0x420 [ 130.738645][ T6430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.738666][ T6430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.738687][ T6430] ? netlink_deliver_tap+0x1ae/0xcc0 [ 130.738714][ T6430] netlink_unicast+0x585/0x850 [ 130.738739][ T6430] ? __pfx_netlink_unicast+0x10/0x10 [ 130.738767][ T6430] netlink_sendmsg+0x8b0/0xda0 [ 130.738793][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.738819][ T6430] ? apparmor_socket_sendmsg+0x15b/0x270 [ 130.738845][ T6430] ____sys_sendmsg+0xa4d/0xbe0 [ 130.738866][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.738890][ T6430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.738917][ T6430] ? rcu_is_watching+0x12/0xc0 [ 130.738933][ T6430] ? ___sys_sendmsg+0x19d/0x1e0 [ 130.738953][ T6430] ? kfree+0x1e5/0x6c0 [ 130.738977][ T6430] ___sys_sendmsg+0x190/0x1e0 [ 130.739006][ T6430] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.739030][ T6430] ? futex_hash+0x311/0x400 [ 130.739069][ T6430] ? __pfx___might_resched+0x10/0x10 [ 130.739094][ T6430] __sys_sendmmsg+0x20c/0x440 [ 130.739115][ T6430] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.739131][ T6430] ? __fget_files+0x215/0x3d0 [ 130.739157][ T6430] ? __pfx_do_futex+0x10/0x10 [ 130.739181][ T6430] ? xfd_validate_state+0x129/0x190 [ 130.739202][ T6430] __x64_sys_sendmmsg+0x9c/0x100 [ 130.739220][ T6430] ? lockdep_hardirqs_on+0x78/0x100 [ 130.739235][ T6430] do_syscall_64+0x115/0x840 [ 130.739250][ T6430] ? clear_bhb_loop+0x40/0x90 [ 130.739268][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.739283][ T6430] RIP: 0033:0x7fab0599de99 [ 130.739297][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.739310][ T6430] RSP: 002b:00007fab0682f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.739326][ T6430] RAX: ffffffffffffffda RBX: 00007fab05c26090 RCX: 00007fab0599de99 [ 130.739337][ T6430] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 130.739346][ T6430] RBP: 00007fab05a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 130.739355][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.739364][ T6430] R13: 00007fab05c26128 R14: 00007fab05c26090 R15: 00007ffe7a477ef8 [ 130.739384][ T6430] [ 132.890769][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899283][ T6440] netlink: zone id is out of range [ 132.905234][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.926257][ T6440] netlink: zone id is out of range [ 132.944063][ T6440] netlink: zone id is out of range [ 132.967327][ T6440] netlink: zone id is out of range [ 133.007959][ T6440] netlink: zone id is out of range [ 133.041838][ T6440] netlink: zone id is out of range [ 133.080610][ T6440] netlink: zone id is out of range [ 133.118156][ T6440] netlink: zone id is out of range [ 133.158795][ T6440] netlink: zone id is out of range [ 133.196781][ T6440] netlink: zone id is out of range [ 134.746411][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.790245][ T6492] netlink: 342 bytes leftover after parsing attributes in process `syz.1.115'. [ 135.979972][ T6492] FAULT_INJECTION: forcing a failure. [ 135.979972][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 136.028738][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.1.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.028770][ T6492] Tainted: [L]=SOFTLOCKUP [ 136.028775][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.028784][ T6492] Call Trace: [ 136.028789][ T6492] [ 136.028796][ T6492] dump_stack_lvl+0x100/0x190 [ 136.028818][ T6492] should_fail_ex.cold+0x5/0xa [ 136.028836][ T6492] should_failslab+0xc2/0x120 [ 136.028856][ T6492] kmem_cache_alloc_noprof+0x91/0x6a0 [ 136.028875][ T6492] ? fib_insert_alias+0x43e/0xe30 [ 136.028899][ T6492] fib_insert_alias+0x43e/0xe30 [ 136.028920][ T6492] ? lockdep_rtnl_is_held+0x26/0x40 [ 136.028935][ T6492] ? fib_find_node+0x209/0x280 [ 136.028956][ T6492] fib_trie_unmerge+0x289/0xbd0 [ 136.028981][ T6492] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 136.029002][ T6492] ? __pfx___mutex_lock+0x10/0x10 [ 136.029024][ T6492] fib_unmerge+0xee/0x510 [ 136.029038][ T6492] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 136.029062][ T6492] fib4_rule_configure+0x383/0x10c0 [ 136.029084][ T6492] fib_newrule+0x356/0x1ed0 [ 136.029108][ T6492] ? rcu_is_watching+0x12/0xc0 [ 136.029127][ T6492] ? __pfx_fib_newrule+0x10/0x10 [ 136.029149][ T6492] ? kfree_skbmem+0x130/0x210 [ 136.029169][ T6492] ? kmem_cache_free+0x127/0x6b0 [ 136.029183][ T6492] ? skb_release_data+0x6ca/0x8e0 [ 136.029217][ T6492] ? find_held_lock+0x2b/0x80 [ 136.029233][ T6492] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.029251][ T6492] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 136.029271][ T6492] ? __pfx_fib_nl_newrule+0x10/0x10 [ 136.029293][ T6492] rtnetlink_rcv_msg+0x95e/0xe90 [ 136.029315][ T6492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.029339][ T6492] ? ref_tracker_free+0x37e/0x6c0 [ 136.029363][ T6492] netlink_rcv_skb+0x159/0x420 [ 136.029378][ T6492] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.029399][ T6492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.029420][ T6492] ? netlink_deliver_tap+0x1ae/0xcc0 [ 136.029447][ T6492] netlink_unicast+0x585/0x850 [ 136.029473][ T6492] ? __pfx_netlink_unicast+0x10/0x10 [ 136.029500][ T6492] netlink_sendmsg+0x8b0/0xda0 [ 136.029526][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.029551][ T6492] ? apparmor_socket_sendmsg+0x15b/0x270 [ 136.029578][ T6492] ____sys_sendmsg+0xa4d/0xbe0 [ 136.029599][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.029623][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.029648][ T6492] ? rcu_is_watching+0x12/0xc0 [ 136.029663][ T6492] ? ___sys_sendmsg+0x19d/0x1e0 [ 136.029683][ T6492] ? kfree+0x1e5/0x6c0 [ 136.029708][ T6492] ___sys_sendmsg+0x190/0x1e0 [ 136.029731][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.029754][ T6492] ? futex_hash+0x311/0x400 [ 136.029800][ T6492] ? __pfx___might_resched+0x10/0x10 [ 136.029826][ T6492] __sys_sendmmsg+0x20c/0x440 [ 136.029848][ T6492] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.029865][ T6492] ? __fget_files+0x215/0x3d0 [ 136.029891][ T6492] ? __pfx_do_futex+0x10/0x10 [ 136.029915][ T6492] ? xfd_validate_state+0x129/0x190 [ 136.029935][ T6492] __x64_sys_sendmmsg+0x9c/0x100 [ 136.029953][ T6492] ? lockdep_hardirqs_on+0x78/0x100 [ 136.029969][ T6492] do_syscall_64+0x115/0x840 [ 136.029986][ T6492] ? clear_bhb_loop+0x40/0x90 [ 136.030005][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.030020][ T6492] RIP: 0033:0x7f6ade59de99 [ 136.030034][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.030047][ T6492] RSP: 002b:00007f6adf4ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.030062][ T6492] RAX: ffffffffffffffda RBX: 00007f6ade826090 RCX: 00007f6ade59de99 [ 136.030072][ T6492] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 136.030081][ T6492] RBP: 00007f6ade633eaf R08: 0000000000000000 R09: 0000000000000000 [ 136.030089][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.030098][ T6492] R13: 00007f6ade826128 R14: 00007f6ade826090 R15: 00007ffd6a64e148 [ 136.030118][ T6492] [ 139.177950][ T6530] UHID_CREATE from different security context by process 139 (syz.1.130), this is not allowed. [ 140.107173][ T6540] ALSA: mixer_oss: invalid OSS volume '\' [ 140.393993][ T6544] FAULT_INJECTION: forcing a failure. [ 140.393993][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 140.486810][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.1.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.486837][ T6544] Tainted: [L]=SOFTLOCKUP [ 140.486842][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.486857][ T6544] Call Trace: [ 140.486863][ T6544] [ 140.486868][ T6544] dump_stack_lvl+0x100/0x190 [ 140.486891][ T6544] should_fail_ex.cold+0x5/0xa [ 140.486909][ T6544] should_failslab+0xc2/0x120 [ 140.486929][ T6544] __kmalloc_noprof+0xfc/0x820 [ 140.486945][ T6544] ? __register_sysctl_table+0x889/0x1650 [ 140.486969][ T6544] ? __register_sysctl_table+0xac/0x1650 [ 140.486995][ T6544] __register_sysctl_table+0xac/0x1650 [ 140.487017][ T6544] ? is_module_address+0x5f/0xf0 [ 140.487043][ T6544] ? __pfx___register_sysctl_table+0x10/0x10 [ 140.487067][ T6544] ? is_module_address+0x69/0xf0 [ 140.487088][ T6544] ? register_net_sysctl_sz+0x222/0x430 [ 140.487107][ T6544] ? __pfx___asan_memcpy+0x10/0x10 [ 140.487122][ T6544] ? kmemdup_noprof+0x49/0x60 [ 140.487139][ T6544] ipv6_sysctl_net_init+0x136/0x2b0 [ 140.487156][ T6544] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 140.487172][ T6544] ops_init+0x1e2/0x5f0 [ 140.487193][ T6544] setup_net+0x118/0x3a0 [ 140.487212][ T6544] ? __pfx_setup_net+0x10/0x10 [ 140.487230][ T6544] ? mutex_init_lockdep+0xf1/0x120 [ 140.487256][ T6544] copy_net_ns+0x46f/0x7c0 [ 140.487278][ T6544] create_new_namespaces+0x3ea/0xac0 [ 140.487297][ T6544] unshare_nsproxy_namespaces+0xf2/0x220 [ 140.487313][ T6544] ksys_unshare+0x438/0xab0 [ 140.487332][ T6544] ? __pfx_ksys_unshare+0x10/0x10 [ 140.487356][ T6544] __x64_sys_unshare+0x31/0x40 [ 140.487372][ T6544] do_syscall_64+0x115/0x840 [ 140.487387][ T6544] ? clear_bhb_loop+0x40/0x90 [ 140.487404][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.487419][ T6544] RIP: 0033:0x7f6ade59de99 [ 140.487432][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.487446][ T6544] RSP: 002b:00007f6adf4ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.487460][ T6544] RAX: ffffffffffffffda RBX: 00007f6ade826090 RCX: 00007f6ade59de99 [ 140.487469][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 140.487477][ T6544] RBP: 00007f6ade633eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.487486][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.487494][ T6544] R13: 00007f6ade826128 R14: 00007f6ade826090 R15: 00007ffd6a64e148 [ 140.487513][ T6544] [ 151.881525][ T6691] Process accounting resumed [ 152.267284][ T6722] netlink: 306 bytes leftover after parsing attributes in process `syz.2.158'. [ 154.322279][ T6756] HfR: entered promiscuous mode [ 154.621607][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 155.159111][ T6769] HfR: entered promiscuous mode [ 155.399306][ T6773] netlink: 306 bytes leftover after parsing attributes in process `syz.0.170'. [ 155.910094][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 156.049830][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 156.360610][ T6779] HfR: left promiscuous mode [ 157.412093][ T6811] HfR: entered promiscuous mode [ 157.882988][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 163.035301][ T6915] openvswitch: HfR: Dropping previously announced user features [ 163.780926][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 164.678408][ T6941] HfR: entered promiscuous mode [ 165.527795][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 165.641872][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 165.972203][ T6950] HfR: left promiscuous mode [ 169.112647][ T7025] HfR: entered promiscuous mode [ 169.774143][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 169.860600][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 169.989960][ T7029] HfR: left promiscuous mode [ 172.666484][ T7073] HfR: entered promiscuous mode [ 173.199714][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 173.342545][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 173.469598][ T7087] HfR: left promiscuous mode [ 175.018051][ T7116] openvswitch: HfR: Dropping previously announced user features [ 175.595175][ T7092] Process accounting resumed [ 175.622194][ T7124] openvswitch: HfR: Dropping previously announced user features [ 175.744559][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 175.865091][ T7116] HfR: left promiscuous mode [ 176.176059][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 176.354079][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 176.505923][ T7124] HfR: left promiscuous mode [ 178.325192][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 180.402925][ T7207] HfR: entered promiscuous mode [ 180.682073][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 180.879241][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 181.098783][ T7219] HfR: left promiscuous mode [ 181.434489][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 181.586706][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 182.699296][ T7251] HfR: entered promiscuous mode [ 182.995542][ T7233] Process accounting paused [ 183.115180][ T7247] random: crng reseeded on system resumption [ 183.279778][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 183.371581][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 183.620073][ T7256] HfR: left promiscuous mode [ 186.237039][ T7309] HfR: entered promiscuous mode [ 187.014417][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 187.101525][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 187.355228][ T7312] HfR: left promiscuous mode [ 188.951074][ T7326] Process accounting resumed [ 191.162360][ T7389] HfR: entered promiscuous mode [ 191.628814][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.977521][ T7391] HfR: left promiscuous mode [ 193.183172][ T7429] HfR: entered promiscuous mode [ 193.803700][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 193.976835][ T7430] HfR: left promiscuous mode [ 194.179815][ T7446] HfR: entered promiscuous mode [ 194.331225][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341387][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794640][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 194.918364][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 195.155206][ T7452] HfR: left promiscuous mode [ 197.197173][ T7491] HfR: entered promiscuous mode [ 198.063035][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 198.195702][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 198.482966][ T7499] HfR: left promiscuous mode [ 199.284862][ T7520] HfR: entered promiscuous mode [ 199.523917][ T7523] HfR: entered promiscuous mode [ 199.722655][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 199.852918][ T7520] HfR: left promiscuous mode [ 199.902150][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 200.021032][ T7523] HfR: left promiscuous mode [ 201.087319][ T7560] HfR: entered promiscuous mode [ 201.450307][ T7566] HfR: entered promiscuous mode [ 201.655769][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 201.810093][ T7560] HfR: left promiscuous mode [ 201.944819][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 202.113736][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 202.273479][ T7566] HfR: left promiscuous mode [ 203.760004][ T7610] HfR: entered promiscuous mode [ 204.090814][ T7616] HfR: entered promiscuous mode [ 204.416189][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 204.545215][ T7610] HfR: left promiscuous mode [ 204.739037][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 204.898497][ T7619] HfR: left promiscuous mode [ 206.643427][ T7662] HfR: entered promiscuous mode [ 207.197829][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 207.301484][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 207.539091][ T7669] HfR: left promiscuous mode [ 207.881782][ T7642] Process accounting paused [ 211.743243][ T7741] HfR: entered promiscuous mode [ 212.033090][ T7746] HfR: entered promiscuous mode [ 212.386421][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 212.483704][ T7743] HfR: left promiscuous mode [ 212.582473][ T5623] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 212.598381][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 212.852224][ T7747] HfR: left promiscuous mode [ 213.489243][ T7756] Process accounting resumed [ 214.202627][ T7780] HfR: entered promiscuous mode [ 214.713200][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 214.828131][ T7784] HfR: left promiscuous mode [ 217.951149][ T7840] HfR: entered promiscuous mode [ 218.195947][ T7846] HfR: entered promiscuous mode [ 218.252858][ T7837] netlink: 808 bytes leftover after parsing attributes in process `syz.3.355'. [ 218.329682][ T7837] net_ratelimit: 30 callbacks suppressed [ 218.329697][ T7837] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 218.529515][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 218.654960][ T7840] HfR: left promiscuous mode [ 218.833076][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 218.997741][ T7853] Process accounting paused [ 219.056265][ T7852] HfR: left promiscuous mode [ 221.678229][ T7888] HfR: entered promiscuous mode [ 221.785202][ T7894] HfR: entered promiscuous mode [ 222.140626][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 222.231789][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 222.329438][ T7888] HfR: left promiscuous mode [ 222.481486][ T7894] HfR: left promiscuous mode [ 222.688593][ T7909] HfR: entered promiscuous mode [ 223.378029][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 223.519120][ T7909] HfR: left promiscuous mode [ 226.586406][ T7966] HfR: entered promiscuous mode [ 227.121460][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 227.233011][ T7966] HfR: left promiscuous mode [ 227.704173][ T7980] HfR: entered promiscuous mode [ 228.521545][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 229.116237][ T8001] random: crng reseeded on system resumption [ 229.435428][ T8006] HfR: entered promiscuous mode [ 230.082272][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 230.735243][ T8027] openvswitch: HfR: Dropping previously announced user features [ 230.920056][ T8029] HfR: entered promiscuous mode [ 231.317062][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 231.402778][ T8027] HfR: left promiscuous mode [ 231.466332][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 231.552524][ T8029] HfR: left promiscuous mode [ 233.048418][ T8070] HfR: entered promiscuous mode [ 233.614127][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 235.096755][ T8086] FAULT_INJECTION: forcing a failure. [ 235.096755][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 235.197938][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.197965][ T8086] Tainted: [L]=SOFTLOCKUP [ 235.197970][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 235.197979][ T8086] Call Trace: [ 235.197985][ T8086] [ 235.197991][ T8086] dump_stack_lvl+0x100/0x190 [ 235.198015][ T8086] should_fail_ex.cold+0x5/0xa [ 235.198032][ T8086] should_failslab+0xc2/0x120 [ 235.198052][ T8086] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 235.198073][ T8086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.198093][ T8086] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 235.198121][ T8086] alloc_unbound_pwq+0x3ff/0xdd0 [ 235.198149][ T8086] apply_wqattrs_prepare+0x3aa/0xbb0 [ 235.198180][ T8086] apply_workqueue_attrs_locked+0x64/0xe0 [ 235.198204][ T8086] __alloc_workqueue+0xf55/0x1940 [ 235.198226][ T8086] alloc_workqueue_noprof+0xc7/0x130 [ 235.198242][ T8086] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 235.198263][ T8086] ? lockdep_init_map_type+0x5c/0x250 [ 235.198286][ T8086] ? lockdep_init_map_type+0x5c/0x250 [ 235.198310][ T8086] __rds_conn_create+0x1234/0x25a0 [ 235.198336][ T8086] ? __pfx___rds_conn_create+0x10/0x10 [ 235.198352][ T8086] ? __kasan_kmalloc+0xaa/0xb0 [ 235.198370][ T8086] ? lockdep_init_map_type+0x5c/0x250 [ 235.198403][ T8086] rds_conn_create_outgoing+0x44/0x60 [ 235.198424][ T8086] rds_sendmsg+0x10da/0x34a0 [ 235.198454][ T8086] ? __pfx_rds_sendmsg+0x10/0x10 [ 235.198477][ T8086] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.198494][ T8086] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 235.198526][ T8086] ? ____sys_sendmsg+0xa4d/0xbe0 [ 235.198547][ T8086] ____sys_sendmsg+0xa4d/0xbe0 [ 235.198568][ T8086] ? __pfx_rds_sendmsg+0x10/0x10 [ 235.198589][ T8086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.198620][ T8086] ___sys_sendmsg+0x190/0x1e0 [ 235.198645][ T8086] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.198666][ T8086] ? __lock_acquire+0x49f/0x1a40 [ 235.198710][ T8086] __sys_sendmsg+0x160/0x210 [ 235.198728][ T8086] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.198756][ T8086] do_syscall_64+0x115/0x840 [ 235.198773][ T8086] ? clear_bhb_loop+0x40/0x90 [ 235.198791][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.198806][ T8086] RIP: 0033:0x7f57af99de99 [ 235.198821][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.198834][ T8086] RSP: 002b:00007f57b07a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.198849][ T8086] RAX: ffffffffffffffda RBX: 00007f57afc25fa0 RCX: 00007f57af99de99 [ 235.198859][ T8086] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 235.198867][ T8086] RBP: 00007f57afa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 235.198876][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.198884][ T8086] R13: 00007f57afc26038 R14: 00007f57afc25fa0 R15: 00007ffc878f9058 [ 235.198904][ T8086] [ 238.252278][ T8127] Process accounting resumed [ 241.068185][ T8187] HfR: entered promiscuous mode [ 241.745931][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 241.835019][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 242.059867][ T8191] HfR: left promiscuous mode [ 244.083409][ T8208] Process accounting paused [ 245.905366][ T8266] openvswitch: HfR: Dropping previously announced user features [ 246.241508][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 246.394527][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 246.441947][ T8271] veth0_macvtap: left promiscuous mode [ 246.460955][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 246.584615][ T8271] macvtap0: entered promiscuous mode [ 246.658778][ T8271] macvtap0: entered allmulticast mode [ 246.958239][ T8275] HfR: left promiscuous mode [ 247.286941][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 247.522885][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 249.989978][ T8336] HfR: entered promiscuous mode [ 250.031828][ T8281] Process accounting resumed [ 250.553210][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 250.651087][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 250.888806][ T8341] HfR: left promiscuous mode [ 252.027909][ T8373] HfR: entered promiscuous mode [ 252.731599][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 253.418271][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 254.335729][ T8410] openvswitch: HfR: Dropping previously announced user features [ 254.983985][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 255.764985][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776205][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.666746][ T8450] futex_wake_op: syz.0.459 tries to shift op by -2048; fix this program [ 256.752648][ T8450] 0x000000000001-0x000000020000 : "" [ 256.817276][ T8452] ubi0: attaching mtd0 [ 257.106907][ T8452] ubi0: scanning is finished [ 257.132932][ T8452] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 257.182906][ T8450] ftl_cs: FTL header corrupt! [ 257.556952][ T8430] Process accounting resumed [ 257.821264][ T8452] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 259.310500][ T8483] WARNING! power/level is deprecated; use power/control instead [ 259.597161][ T8491] HfR: entered promiscuous mode [ 259.727690][ T8492] HfR: entered promiscuous mode [ 260.379947][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 260.526068][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 260.540069][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 260.591905][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 260.767064][ T8503] HfR: left promiscuous mode [ 260.845512][ T8514] veth0_macvtap: left promiscuous mode [ 260.886102][ T8514] macvtap0: entered promiscuous mode [ 260.929462][ T8514] macvtap0: entered allmulticast mode [ 261.053336][ T8501] HfR: left promiscuous mode [ 261.431611][ T8523] HfR: entered promiscuous mode [ 261.700166][ T5623] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12 [ 262.059811][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 262.339941][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 262.632678][ T8547] HfR: left promiscuous mode [ 263.758069][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 264.072280][ T8572] HfR: entered promiscuous mode [ 264.722153][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 264.847573][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 265.085674][ T8583] HfR: left promiscuous mode [ 267.969719][ T8633] warning: `syz.2.488' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 268.138264][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 268.537863][ T8633] bond0: (slave bond_slave_0): Releasing backup interface [ 268.774850][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 268.987337][ T8643] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 269.276710][ T8658] futex_wake_op: syz.3.493 tries to shift op by -2048; fix this program [ 269.478520][ T8658] 0x000000000001-0x000000020000 : "" [ 269.697615][ T8658] ftl_cs: FTL header corrupt! [ 269.984407][ T8660] ubi0: attaching mtd0 [ 270.212493][ T8660] ubi0: scanning is finished [ 270.230839][ T8660] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 270.368392][ T8660] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 270.376766][ T8652] Process accounting paused [ 270.616909][ T8675] HfR: entered promiscuous mode [ 270.690592][ T8677] openvswitch: HfR: Dropping previously announced user features [ 270.832994][ T8683] openvswitch: HfR: Dropping previously announced user features [ 271.337948][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 271.473239][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 271.571239][ T8691] HfR: left promiscuous mode [ 272.194903][ T8702] HfR: entered promiscuous mode [ 272.813807][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 274.306187][ T8740] HfR: entered promiscuous mode [ 274.957441][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 275.009967][ T8711] Process accounting resumed [ 275.083715][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'. [ 275.362892][ T8745] HfR: left promiscuous mode [ 276.139046][ T8769] HfR: entered promiscuous mode [ 276.156949][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'. [ 276.630068][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 276.748993][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 276.909437][ T8777] HfR: left promiscuous mode [ 278.317305][ T8809] openvswitch: HfR: Dropping previously announced user features [ 278.923063][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 279.105698][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 279.356362][ T8809] HfR: left promiscuous mode [ 279.998291][ T8803] Process accounting resumed [ 280.176628][ T8826] vivid-007: ================= START STATUS ================= [ 280.220377][ T8826] vivid-007: Generate PTS: true [ 280.244466][ T8826] vivid-007: Generate SCR: true [ 280.261806][ T8826] tpg source WxH: 320x240 (Y'CbCr) [ 280.281595][ T8826] tpg field: 1 [ 280.293953][ T8826] tpg crop: (0,0)/320x240 [ 280.311668][ T8826] tpg compose: (0,0)/320x240 [ 280.380795][ T8826] tpg colorspace: 8 [ 280.421573][ T8826] tpg transfer function: 0/0 [ 280.473220][ T8826] tpg Y'CbCr encoding: 0/0 [ 280.538909][ T8826] tpg quantization: 0/0 [ 280.579932][ T8826] tpg RGB range: 0/2 [ 280.636376][ T8826] vivid-007: ================== END STATUS ================== [ 283.303688][ T8892] openvswitch: HfR: Dropping previously announced user features [ 283.729111][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 283.863452][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 284.082113][ T8902] HfR: left promiscuous mode [ 284.387250][ T8911] HfR: entered promiscuous mode [ 285.044476][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 285.157505][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 285.304391][ T8928] HfR: left promiscuous mode [ 286.605669][ T8953] openvswitch: HfR: Dropping previously announced user features [ 287.004632][ T8962] HfR: entered promiscuous mode [ 287.024709][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 287.163397][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 287.379383][ T8964] HfR: left promiscuous mode [ 287.590626][ T8968] Process accounting paused [ 287.763361][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 287.942138][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 288.196519][ T8969] HfR: left promiscuous mode [ 290.675064][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 290.898402][ T9018] bond0: (slave bond_slave_0): Releasing backup interface [ 292.208609][ T9050] HfR: entered promiscuous mode [ 293.099050][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 293.219246][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 293.336161][ T9063] HfR: left promiscuous mode [ 293.783132][ T9077] HfR: entered promiscuous mode [ 294.535841][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 294.682311][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 294.896233][ T9095] HfR: left promiscuous mode [ 295.582280][ T9112] HfR: entered promiscuous mode [ 296.235828][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 296.386991][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 296.658770][ T9123] HfR: left promiscuous mode [ 298.153333][ T9141] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 299.921742][ T9191] HfR: entered promiscuous mode [ 300.637769][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 300.663339][ T9196] vivid-007: ================= START STATUS ================= [ 300.663371][ T9196] vivid-007: Generate PTS: true [ 300.663397][ T9196] vivid-007: Generate SCR: true [ 300.663415][ T9196] tpg source WxH: 320x240 (Y'CbCr) [ 300.663425][ T9196] tpg field: 1 [ 300.663431][ T9196] tpg crop: (0,0)/320x240 [ 300.663440][ T9196] tpg compose: (0,0)/320x240 [ 300.663450][ T9196] tpg colorspace: 8 [ 300.663456][ T9196] tpg transfer function: 0/0 [ 300.663462][ T9196] tpg Y'CbCr encoding: 0/0 [ 300.663469][ T9196] tpg quantization: 0/0 [ 300.663476][ T9196] tpg RGB range: 0/2 [ 300.663482][ T9196] vivid-007: ================== END STATUS ================== [ 300.769839][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 300.769912][ T9203] HfR: left promiscuous mode [ 300.920799][ T9188] Process accounting resumed [ 301.087233][ T9213] HfR: entered promiscuous mode [ 301.651894][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 301.787435][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 302.005933][ T9219] HfR: left promiscuous mode [ 303.020413][ T9252] HfR: entered promiscuous mode [ 303.553231][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 303.781636][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 304.042923][ T9268] HfR: left promiscuous mode [ 306.718674][ T9320] HfR: entered promiscuous mode [ 306.968335][ T29] audit: type=1800 audit(1784429017.517:2): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.610" name="features" dev="configfs" ino=29736 res=0 errno=0 [ 307.339154][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 307.522367][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 307.683324][ T9337] HfR: left promiscuous mode [ 310.980630][ T9380] Process accounting paused [ 311.876108][ T9413] HfR: entered promiscuous mode [ 312.510317][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 312.634745][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 313.031074][ T9428] HfR: left promiscuous mode [ 313.896231][ T9453] HfR: entered promiscuous mode [ 314.500846][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 314.623952][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 314.883672][ T9466] HfR: left promiscuous mode [ 315.112290][ T9476] HfR: entered promiscuous mode [ 315.607574][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 315.769165][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 316.040056][ T9485] HfR: left promiscuous mode [ 317.009209][ T9506] HfR: entered promiscuous mode [ 317.173081][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.183134][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.271689][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 317.384432][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 317.498486][ T9509] HfR: left promiscuous mode [ 317.737592][ T9506] Process accounting resumed [ 318.034201][ T9524] HfR: entered promiscuous mode [ 318.933313][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 319.080929][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 319.400939][ T9539] HfR: left promiscuous mode [ 320.254732][ T10] Process accounting resumed [ 322.824387][ T9608] HfR: entered promiscuous mode [ 323.474713][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 323.635061][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 323.783168][ T9614] HfR: left promiscuous mode [ 324.455287][ T9631] HfR: entered promiscuous mode [ 324.893596][ T9636] HfR: entered promiscuous mode [ 324.959073][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 325.274694][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 325.475542][ T9645] HfR: left promiscuous mode [ 325.498750][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 325.641019][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 325.874766][ T9649] HfR: left promiscuous mode [ 326.057739][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 326.330422][ T9654] team0: Port device team_slave_1 removed [ 329.244312][ T5623] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 329.524390][ T9709] HfR: entered promiscuous mode [ 330.432976][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 330.585385][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 330.873850][ T9722] HfR: left promiscuous mode [ 331.317421][ T9740] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 331.898425][ T9736] Process accounting paused [ 332.480248][ T29] audit: type=1800 audit(1784429043.050:3): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.681" name="features" dev="configfs" ino=32387 res=0 errno=0 [ 334.019415][ T9787] HfR: entered promiscuous mode [ 334.533210][ T5623] block nbd0: Receive control failed (result -32) [ 334.782548][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 334.961637][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 335.209792][ T9802] HfR: left promiscuous mode [ 335.368502][ T9822] ================================================================== [ 335.368530][ T9822] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 335.368560][ T9822] Write of size 8 at addr ffffc90004ae1be0 by task syz.1.691/9822 [ 335.368574][ T9822] [ 335.368584][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.1.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.368606][ T9822] Tainted: [L]=SOFTLOCKUP [ 335.368611][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.368623][ T9822] Call Trace: [ 335.368628][ T9822] [ 335.368634][ T9822] dump_stack_lvl+0x100/0x190 [ 335.368651][ T9822] print_report+0x13d/0x4b0 [ 335.368672][ T9822] ? _raw_spin_lock_irqsave+0x52/0x60 [ 335.368696][ T9822] ? sys_imageblit+0x19fb/0x1d60 [ 335.368712][ T9822] kasan_report+0xdf/0x1c0 [ 335.368732][ T9822] ? sys_imageblit+0x19fb/0x1d60 [ 335.368752][ T9822] sys_imageblit+0x19fb/0x1d60 [ 335.368771][ T9822] ? __pfx_sys_imageblit+0x10/0x10 [ 335.368791][ T9822] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 335.368814][ T9822] soft_cursor+0x524/0xa10 [ 335.368831][ T9822] bit_cursor+0xca1/0x1490 [ 335.368847][ T9822] ? __pfx_bit_cursor+0x10/0x10 [ 335.368863][ T9822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.368884][ T9822] ? get_color+0x1da/0x450 [ 335.368903][ T9822] ? __pfx_bit_cursor+0x10/0x10 [ 335.368916][ T9822] fbcon_cursor+0x43c/0x5e0 [ 335.368944][ T9822] hide_cursor+0x87/0x230 [ 335.368960][ T9822] do_con_write+0x224c/0x4a30 [ 335.368979][ T9822] ? __mutex_lock+0x26d/0x1bd0 [ 335.368997][ T9822] ? __pfx___mutex_lock+0x10/0x10 [ 335.369012][ T9822] ? do_raw_spin_lock+0x128/0x260 [ 335.369027][ T9822] ? __pfx_do_con_write+0x10/0x10 [ 335.369049][ T9822] con_write+0x23/0xb0 [ 335.369066][ T9822] n_tty_write+0x431/0x1160 [ 335.369090][ T9822] ? __pfx_n_tty_write+0x10/0x10 [ 335.369109][ T9822] ? __kasan_kmalloc+0xaa/0xb0 [ 335.369125][ T9822] ? __pfx_woken_wake_function+0x10/0x10 [ 335.369140][ T9822] ? rcu_is_watching+0x12/0xc0 [ 335.369155][ T9822] ? file_tty_write.isra.0+0x694/0x890 [ 335.369172][ T9822] ? kfree+0x1e5/0x6c0 [ 335.369192][ T9822] ? __pfx_n_tty_write+0x10/0x10 [ 335.369213][ T9822] file_tty_write.isra.0+0x4d2/0x890 [ 335.369232][ T9822] redirected_tty_write+0xd4/0x120 [ 335.369250][ T9822] vfs_write+0x6ac/0x1050 [ 335.369270][ T9822] ? __pfx_redirected_tty_write+0x10/0x10 [ 335.369289][ T9822] ? __pfx_vfs_write+0x10/0x10 [ 335.369308][ T9822] ? find_held_lock+0x2b/0x80 [ 335.369329][ T9822] ksys_write+0x12a/0x250 [ 335.369350][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 335.369373][ T9822] do_syscall_64+0x115/0x840 [ 335.369387][ T9822] ? clear_bhb_loop+0x40/0x90 [ 335.369403][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.369418][ T9822] RIP: 0033:0x7f6ade59de99 [ 335.369431][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.369445][ T9822] RSP: 002b:00007f6adf4cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.369464][ T9822] RAX: ffffffffffffffda RBX: 00007f6ade826180 RCX: 00007f6ade59de99 [ 335.369473][ T9822] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 335.369482][ T9822] RBP: 00007f6ade633eaf R08: 0000000000000000 R09: 0000000000000000 [ 335.369491][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.369500][ T9822] R13: 00007f6ade826218 R14: 00007f6ade826180 R15: 00007ffd6a64e148 [ 335.369514][ T9822] [ 335.369520][ T9822] [ 335.369524][ T9822] The buggy address belongs to a vmalloc virtual mapping [ 335.369535][ T9822] Memory state around the buggy address: [ 335.369543][ T9822] ffffc90004ae1a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.369556][ T9822] ffffc90004ae1b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.369566][ T9822] >ffffc90004ae1b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.369574][ T9822] ^ [ 335.369583][ T9822] ffffc90004ae1c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.369593][ T9822] ffffc90004ae1c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.369600][ T9822] ================================================================== [ 335.403444][ T9822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 335.403465][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.1.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.403488][ T9822] Tainted: [L]=SOFTLOCKUP [ 335.403494][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.403504][ T9822] Call Trace: [ 335.403509][ T9822] [ 335.403516][ T9822] dump_stack_lvl+0x100/0x190 [ 335.403537][ T9822] vpanic+0x552/0x970 [ 335.403552][ T9822] ? __pfx_vpanic+0x10/0x10 [ 335.403566][ T9822] ? mark_held_locks+0x40/0x70 [ 335.403589][ T9822] ? sys_imageblit+0x19fb/0x1d60 [ 335.403606][ T9822] panic+0xd1/0xe0 [ 335.403618][ T9822] ? __pfx_panic+0x10/0x10 [ 335.403632][ T9822] ? sys_imageblit+0x19fb/0x1d60 [ 335.403649][ T9822] ? preempt_schedule_common+0x42/0xc0 [ 335.403674][ T9822] check_panic_on_warn.cold+0x19/0x34 [ 335.403690][ T9822] end_report.part.0+0x3a/0x90 [ 335.403710][ T9822] kasan_report.cold+0xe/0x18 [ 335.403731][ T9822] ? sys_imageblit+0x19fb/0x1d60 [ 335.403751][ T9822] sys_imageblit+0x19fb/0x1d60 [ 335.403771][ T9822] ? __pfx_sys_imageblit+0x10/0x10 [ 335.403791][ T9822] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 335.403815][ T9822] soft_cursor+0x524/0xa10 [ 335.403831][ T9822] bit_cursor+0xca1/0x1490 [ 335.403851][ T9822] ? __pfx_bit_cursor+0x10/0x10 [ 335.403867][ T9822] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.403887][ T9822] ? get_color+0x1da/0x450 [ 335.403907][ T9822] ? __pfx_bit_cursor+0x10/0x10 [ 335.403926][ T9822] fbcon_cursor+0x43c/0x5e0 [ 335.403949][ T9822] hide_cursor+0x87/0x230 [ 335.403966][ T9822] do_con_write+0x224c/0x4a30 [ 335.403985][ T9822] ? __mutex_lock+0x26d/0x1bd0 [ 335.404003][ T9822] ? __pfx___mutex_lock+0x10/0x10 [ 335.404018][ T9822] ? do_raw_spin_lock+0x128/0x260 [ 335.404033][ T9822] ? __pfx_do_con_write+0x10/0x10 [ 335.404054][ T9822] con_write+0x23/0xb0 [ 335.404072][ T9822] n_tty_write+0x431/0x1160 [ 335.404097][ T9822] ? __pfx_n_tty_write+0x10/0x10 [ 335.404117][ T9822] ? __kasan_kmalloc+0xaa/0xb0 [ 335.404133][ T9822] ? __pfx_woken_wake_function+0x10/0x10 [ 335.404148][ T9822] ? rcu_is_watching+0x12/0xc0 [ 335.404163][ T9822] ? file_tty_write.isra.0+0x694/0x890 [ 335.404181][ T9822] ? kfree+0x1e5/0x6c0 [ 335.404201][ T9822] ? __pfx_n_tty_write+0x10/0x10 [ 335.404222][ T9822] file_tty_write.isra.0+0x4d2/0x890 [ 335.404242][ T9822] redirected_tty_write+0xd4/0x120 [ 335.404260][ T9822] vfs_write+0x6ac/0x1050 [ 335.404281][ T9822] ? __pfx_redirected_tty_write+0x10/0x10 [ 335.404300][ T9822] ? __pfx_vfs_write+0x10/0x10 [ 335.404320][ T9822] ? find_held_lock+0x2b/0x80 [ 335.404342][ T9822] ksys_write+0x12a/0x250 [ 335.404363][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 335.404386][ T9822] do_syscall_64+0x115/0x840 [ 335.404401][ T9822] ? clear_bhb_loop+0x40/0x90 [ 335.404417][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.404432][ T9822] RIP: 0033:0x7f6ade59de99 [ 335.404445][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.404459][ T9822] RSP: 002b:00007f6adf4cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.404474][ T9822] RAX: ffffffffffffffda RBX: 00007f6ade826180 RCX: 00007f6ade59de99 [ 335.404484][ T9822] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000006 [ 335.404494][ T9822] RBP: 00007f6ade633eaf R08: 0000000000000000 R09: 0000000000000000 [ 335.404503][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.404513][ T9822] R13: 00007f6ade826218 R14: 00007f6ade826180 R15: 00007ffd6a64e148 [ 335.404527][ T9822] [ 335.404599][ T9822] Kernel Offset: disabled