last executing test programs: 11.924268304s ago: executing program 1 (id=63): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x4, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0xffffffff, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 7.260854809s ago: executing program 1 (id=73): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004600)={0x3b8, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3a0, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x395, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8", @nested={0x2d8, 0x122, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x5ae3693d}, @typed={0x4, 0x3b}, @nested={0x2c4, 0x8b, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@local}, @nested={0x2b0, 0xbc, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x4}, @nested={0x282, 0x98, 0x0, 0x1, [@generic, @nested={0x4, 0x142}, @nested={0x1d0, 0x4f, 0x0, 0x1, [@nested={0x1cc, 0xeb, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @uid}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8}, @nested={0x17c, 0xe6, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x13d, 0x0, 0x0, @uid}, @generic, @generic="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"]}, @nested={0x35, 0x4, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd}, @nested={0x4, 0x33}, @generic="60459644219488b0fc8609458320c80a5d6689ba38586d0717f34dd72e6eb9c640", @nested={0x4, 0x13}]}]}]}, @typed={0xf, 0x13b, 0x0, 0x0, @str='/dev/vbi12\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @generic, @generic="548d10ff813c12384a1695503744c2c6e8e73c8917b403c82ae0f73574df954c08528206aceda4aa913194d8234526a356c6010d917ca2a4357ba1b76fc577f94042691e5cfbe9bda43d6ba8fa55eeabb51771b1f047da89442ac8d4b7fa95d66ed58575bbf1dad9167662932fa21515acb7a947eeeae5f968208870aaaa33d39ca7cb284b840f3af0223f47e14316f2045e"]}, @nested={0x10, 0xae, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0xd0}, @nested={0x4, 0x123}]}]}, @generic]}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x251) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x2}]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.461723574s ago: executing program 0 (id=76): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyab\x00', 0x88c80, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000162bf2e0f7c562c691235555567190a8826fcd0cf756dfacd1464155407bf9b3acb701adf4fefbc1e3c225fda9eb", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x31, 0x7f, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x0, 0x800000007ffffffb, 0x5, 0xffffffff80000003, 0x2, 0x60, 0x401}) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 5.572702415s ago: executing program 3 (id=80): pidfd_open$auto(0x1, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) 5.431735331s ago: executing program 1 (id=81): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0xc0384707, 0x0) 4.834213441s ago: executing program 1 (id=83): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0xbff) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'dvmrp0\x00'}) close_range$auto(0x2, 0x8, 0x7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.81964099s ago: executing program 0 (id=84): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0x8) 4.484633793s ago: executing program 2 (id=85): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) fcntl$auto(r0, 0x4, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0x0, 0x5, 0x800009, 0x2, "4941aa833e2fc65b6b3cf7cec56d67c8dd3500f11581916caa0d445300", @raw=0x7}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, r2, 0x5, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x7}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) mmap$auto(0x3, 0x60009, 0xffffffffffff0002, 0x9b72, 0x7, 0x4) close_range$auto(0x2, 0xa, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f00000004c0)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x2) io_uring_setup$auto(0xd, 0x0) io_uring_setup$auto(0x4000006, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0xfffffffc, 0x0, 0x9, 0xffffffffffffffff, 0xf9) mmap$auto(0x0, 0x30008, 0x4000000000e3, 0x4000eb1, 0x401, 0x208000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0xfffffffb, 0x5, 0x8000000000000000, 0x0) 4.296301595s ago: executing program 0 (id=86): setregid$auto(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) r0 = socket(0xa, 0x5, 0x0) ioctl$auto(r0, 0x8941, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0xb2d) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x54, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, "1bc6e7e10bc66696ea9b05d53fcb46cdea5e227f20ea27bbee943b059ee673eb196cbf758915ad0d31d27b34b0e98cd68af9d349f9047fced32270"}]}, 0x54}}, 0x4004010) socket(0x10, 0x2, 0xc) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) 4.249478804s ago: executing program 3 (id=87): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket(0x2, 0x80002, 0x0) setsockopt$auto_SO_MARK(r1, 0x0, 0x24, 0x0, 0x3) write$auto(0x3, 0x0, 0x3f00) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4008ae9c, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x40}, 0x7) sendfile$auto(r0, r0, 0x0, 0x7ffff000) 3.855373417s ago: executing program 3 (id=88): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x800000000801e, 0x3, 0x8004) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mmap$auto(0x235, 0x40000a, 0x20000000000d, 0x208018, 0xffffffffffffffff, 0x200000001) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0x2, 0x0, 0x697, 0x9, 0x5, 0x6}) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f00000002c0)={0x400000, 0x71fae78b53f8a505, 0x20}, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x781a82, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) ioctl$auto(r1, 0x5646, r1) sysfs$auto(0x2, 0x5, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) 3.549009514s ago: executing program 2 (id=89): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2400c081) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x151) setsockopt$auto(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1ad, &(0x7f0000000100)={&(0x7f0000000280)="5585a25d8536db", 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) lseek$auto(0x3, 0x0, 0x1) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x2e00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000180)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(0xffffffffffffffff, 0x40184150, &(0x7f0000000040)={0x80, 0x0, 0x8001}) 3.412165398s ago: executing program 1 (id=90): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x5, 0x6b7d, 0x5) mlockall$auto(0x800000000000005) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x80, 0x9, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) 2.858035532s ago: executing program 2 (id=91): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(r0, &(0x7f0000000100)='\x01\x00\xa8a\xe0a\x1cJ4\x00\xaaN\xc8\xf9\x12\xeb\x00\xab`{U\x04\x88\xa8\x96\x82\x88\xa8\x11_\x89\x06\x06\xa7Y}`@\x1b\x00\x00\x00\x00\x00\x00\x00\x00\xd22z\x14z\xbf\xf94\x92mP\x87[\xa4p\x93\xd4\xe3\xe8Vhpy\xf6\xce\xbb\x8c\xb2\xc9>\xd9Y\x8d\xbe\x90\xbcu*\xc8\xdc\x0e]\x01\xd1\x9e\x0f\x05_\xfc\xb8\xeb\xd9\xb7\xa4\a\xae\xa5I\f7\x17\x91L}m\xea\r+\xecy\xe1\xe0D\x824\xfc[+\x0f\xe0\x11\xe8\x83\xc4\"\xcc&z\x8c@pC\xb2\xf6k\x14~iA?\x90Pnj\x82\xea\xf0\xfa\xe8\xe1\x81Q6\x11\xe4T\xd5\xf0\xb1\xc65tr\x8b\x83^\xa17uX0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030026bd0ecd72913be4837b00000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xa4, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, r6, 0x4) setresgid$auto(0x81, 0x800000a0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000040)={0xc00000}, 0x0, &(0x7f0000000180), 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) shmget$auto(0x8, 0x10563, 0x568d1af2) 810.098053ms ago: executing program 1 (id=96): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 584.498427ms ago: executing program 2 (id=97): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e10600"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0xc) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="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", 0x119) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x1000000072, 0x20009, 0x10000203, 0xeb1, r1, 0x7fff) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x2, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) r2 = epoll_create$auto(0x3e) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000001cc0)={{0x800, 0x10000, 0x5, 0x591, 0x7}, 0x6, 0x2, 0x6, "58e5218f9678796f35bf2803b1e21a54bddb4e340bb83340b899e51485a51568"}) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) 562.989504ms ago: executing program 3 (id=98): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x7) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 342.008797ms ago: executing program 0 (id=99): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc058560f, r1) 28.146667ms ago: executing program 2 (id=100): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) prctl$auto(0x4, 0x828, 0x0, 0x9, 0x7056) syz_clone3(&(0x7f0000000340)={0x2000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0xffffffffffffffff, 0x5, 0x0) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100) socket(0x0, 0x6, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) utime$auto(0x0, 0x0) mprotect$auto(0xc000, 0x8, 0x8) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, 0x0) 0s ago: executing program 3 (id=101): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x2b, 0x1, 0x1) ioctl$auto(r5, 0x8901, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. [ 80.932667][ T5854] cgroup: Unknown subsys name 'net' [ 81.048686][ T5854] cgroup: Unknown subsys name 'cpuset' [ 81.057575][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.525398][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.812812][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.821622][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.830400][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.838897][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.848310][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.856840][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.866012][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.871864][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.873311][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.896314][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.908771][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.916173][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.924422][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.932154][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.934418][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.941402][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.947554][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.954576][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.964646][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.969788][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.578130][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 85.592683][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 85.657998][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 85.718905][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.858829][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.866323][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.873949][ T5865] bridge_slave_0: entered allmulticast mode [ 85.881256][ T5865] bridge_slave_0: entered promiscuous mode [ 85.893507][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.900886][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.908544][ T5864] bridge_slave_0: entered allmulticast mode [ 85.916489][ T5864] bridge_slave_0: entered promiscuous mode [ 85.951366][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.958627][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.965958][ T5865] bridge_slave_1: entered allmulticast mode [ 85.972888][ T5865] bridge_slave_1: entered promiscuous mode [ 85.984541][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.991936][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.999434][ T5864] bridge_slave_1: entered allmulticast mode [ 86.007310][ T5864] bridge_slave_1: entered promiscuous mode [ 86.027932][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.035833][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.043018][ T5863] bridge_slave_0: entered allmulticast mode [ 86.050279][ T5863] bridge_slave_0: entered promiscuous mode [ 86.103181][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.110762][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.118566][ T5863] bridge_slave_1: entered allmulticast mode [ 86.126496][ T5863] bridge_slave_1: entered promiscuous mode [ 86.156362][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.163510][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.170726][ T5866] bridge_slave_0: entered allmulticast mode [ 86.178890][ T5866] bridge_slave_0: entered promiscuous mode [ 86.188986][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.213384][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.226678][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.236178][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.243310][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.250731][ T5866] bridge_slave_1: entered allmulticast mode [ 86.257789][ T5866] bridge_slave_1: entered promiscuous mode [ 86.267376][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.325976][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.338470][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.393768][ T5865] team0: Port device team_slave_0 added [ 86.402832][ T5865] team0: Port device team_slave_1 added [ 86.412168][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.427625][ T5864] team0: Port device team_slave_0 added [ 86.456561][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.468793][ T5864] team0: Port device team_slave_1 added [ 86.476734][ T5863] team0: Port device team_slave_0 added [ 86.508072][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.515733][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.541709][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.565324][ T5863] team0: Port device team_slave_1 added [ 86.583067][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.590128][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.616941][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.652012][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.659110][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.685719][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.708252][ T5866] team0: Port device team_slave_0 added [ 86.727272][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.734252][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.760576][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.774060][ T5866] team0: Port device team_slave_1 added [ 86.791191][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.806005][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.832566][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.889305][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.897455][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.924387][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.965126][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.972104][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.998873][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.015779][ T5873] Bluetooth: hci2: command tx timeout [ 87.017661][ T5870] Bluetooth: hci0: command tx timeout [ 87.021491][ T5873] Bluetooth: hci1: command tx timeout [ 87.066536][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.073511][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.100880][ T5873] Bluetooth: hci3: command tx timeout [ 87.107741][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.142309][ T5865] hsr_slave_0: entered promiscuous mode [ 87.148884][ T5865] hsr_slave_1: entered promiscuous mode [ 87.209154][ T5864] hsr_slave_0: entered promiscuous mode [ 87.216101][ T5864] hsr_slave_1: entered promiscuous mode [ 87.222352][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 87.228340][ T5864] Cannot create hsr debugfs directory [ 87.239885][ T5863] hsr_slave_0: entered promiscuous mode [ 87.247464][ T5863] hsr_slave_1: entered promiscuous mode [ 87.253810][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 87.260627][ T5863] Cannot create hsr debugfs directory [ 87.305857][ T5866] hsr_slave_0: entered promiscuous mode [ 87.312176][ T5866] hsr_slave_1: entered promiscuous mode [ 87.318402][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 87.324159][ T5866] Cannot create hsr debugfs directory [ 87.782068][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.795346][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.806745][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.818207][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.893580][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.906693][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.918101][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.939828][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.018632][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.029272][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.040996][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.063158][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.144005][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.156261][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.179248][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.190740][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.292007][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.329177][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.373054][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.410136][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.421740][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.429067][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.453256][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.469197][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.476360][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.521801][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.528942][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.547990][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.555180][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.575935][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.589241][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.596449][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.638603][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.645783][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.697999][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.743971][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.791965][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.799170][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.838997][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.846216][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.095229][ T5873] Bluetooth: hci0: command tx timeout [ 89.095449][ T5870] Bluetooth: hci2: command tx timeout [ 89.100663][ T5873] Bluetooth: hci1: command tx timeout [ 89.175590][ T5873] Bluetooth: hci3: command tx timeout [ 89.280042][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.321076][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.459554][ T5865] veth0_vlan: entered promiscuous mode [ 89.474055][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.492354][ T5866] veth0_vlan: entered promiscuous mode [ 89.507664][ T5865] veth1_vlan: entered promiscuous mode [ 89.528715][ T5866] veth1_vlan: entered promiscuous mode [ 89.568598][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.610445][ T5866] veth0_macvtap: entered promiscuous mode [ 89.622812][ T5866] veth1_macvtap: entered promiscuous mode [ 89.642051][ T5863] veth0_vlan: entered promiscuous mode [ 89.671891][ T5865] veth0_macvtap: entered promiscuous mode [ 89.708995][ T5863] veth1_vlan: entered promiscuous mode [ 89.720852][ T5865] veth1_macvtap: entered promiscuous mode [ 89.732349][ T5864] veth0_vlan: entered promiscuous mode [ 89.752664][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.778074][ T5864] veth1_vlan: entered promiscuous mode [ 89.789440][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.798939][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.831580][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.839444][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.849711][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870987][ T5863] veth0_macvtap: entered promiscuous mode [ 89.879331][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.889912][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.916638][ T5863] veth1_macvtap: entered promiscuous mode [ 89.938335][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.948403][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962962][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.972517][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.018198][ T5864] veth0_macvtap: entered promiscuous mode [ 90.036013][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.050886][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.084375][ T5864] veth1_macvtap: entered promiscuous mode [ 90.141732][ T2942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.151509][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.180283][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.190758][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.191965][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.202927][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.221060][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232184][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.253398][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.292962][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.331121][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.339351][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.353344][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.357316][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.391472][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.410656][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.434535][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.449689][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.497447][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.556800][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.576462][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.688108][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.724269][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.768130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.776967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.805591][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.899865][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.075405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.101147][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.110396][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.176403][ T5873] Bluetooth: hci1: command tx timeout [ 91.185029][ T5873] Bluetooth: hci2: command tx timeout [ 91.189675][ T5870] Bluetooth: hci0: command tx timeout [ 91.255653][ T5870] Bluetooth: hci3: command tx timeout [ 91.316473][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.902214][ T9] cfg80211: failed to load regulatory.db [ 91.914446][ T5980] FAULT_INJECTION: forcing a failure. [ 91.914446][ T5980] name failslab, interval 1, probability 0, space 0, times 1 [ 91.930214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.046699][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 92.046734][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.046753][ T5980] Call Trace: [ 92.046762][ T5980] [ 92.046772][ T5980] dump_stack_lvl+0x16c/0x1f0 [ 92.046822][ T5980] should_fail_ex+0x512/0x640 [ 92.046861][ T5980] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 92.046896][ T5980] should_failslab+0xc2/0x120 [ 92.046930][ T5980] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 92.046960][ T5980] ? __might_fault+0xe3/0x190 [ 92.046987][ T5980] ? __might_fault+0x13b/0x190 [ 92.047015][ T5980] ? getname_flags.part.0+0x4c/0x550 [ 92.047059][ T5980] getname_flags.part.0+0x4c/0x550 [ 92.047102][ T5980] getname_flags+0x93/0xf0 [ 92.047129][ T5980] user_path_at+0x24/0x60 [ 92.047159][ T5980] __x64_sys_mount+0x1fc/0x310 [ 92.047193][ T5980] ? __pfx___x64_sys_mount+0x10/0x10 [ 92.047236][ T5980] do_syscall_64+0xcd/0x4c0 [ 92.047262][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.047288][ T5980] RIP: 0033:0x7f8725d8eec9 [ 92.047312][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.047343][ T5980] RSP: 002b:00007f8726c63038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.047368][ T5980] RAX: ffffffffffffffda RBX: 00007f8725fe6090 RCX: 00007f8725d8eec9 [ 92.047386][ T5980] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 92.047403][ T5980] RBP: 00007f8725e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.047419][ T5980] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 92.047434][ T5980] R13: 00007f8725fe6128 R14: 00007f8725fe6090 R15: 00007ffdfb2db408 [ 92.047464][ T5980] [ 92.332610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.542619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.564979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.565980][ T5978] Zero length message leads to an empty skb [ 92.573278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.575451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.682537][ T5978] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 92.946159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.257495][ T5870] Bluetooth: hci2: command tx timeout [ 93.257535][ T5873] Bluetooth: hci1: command tx timeout [ 93.262957][ T5878] Bluetooth: hci0: command tx timeout [ 93.310637][ T5994] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.335597][ T5878] Bluetooth: hci3: command tx timeout [ 94.679388][ T59] Trying to write to read-only block-device sda1 [ 94.819551][ T59] Trying to write to read-only block-device sda [ 94.971623][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.620758][ T6021] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 95.780345][ T6022] Invalid ELF header magic: != ELF [ 98.698015][ T6059] FAULT_INJECTION: forcing a failure. [ 98.698015][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 98.724963][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT(full) [ 98.724998][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.725012][ T6059] Call Trace: [ 98.725020][ T6059] [ 98.725029][ T6059] dump_stack_lvl+0x16c/0x1f0 [ 98.725070][ T6059] should_fail_ex+0x512/0x640 [ 98.725097][ T6059] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 98.725117][ T6059] should_failslab+0xc2/0x120 [ 98.725135][ T6059] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.725152][ T6059] ? sk_prot_alloc+0x60/0x2a0 [ 98.725177][ T6059] sk_prot_alloc+0x60/0x2a0 [ 98.725194][ T6059] sk_alloc+0x36/0xc20 [ 98.725215][ T6059] __vsock_create.constprop.0+0x3c/0xbb0 [ 98.725235][ T6059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.725257][ T6059] vsock_create+0x139/0x500 [ 98.725279][ T6059] __sock_create+0x335/0x8d0 [ 98.725298][ T6059] __sys_socket+0x14d/0x260 [ 98.725314][ T6059] ? __pfx___sys_socket+0x10/0x10 [ 98.725329][ T6059] ? xfd_validate_state+0x61/0x180 [ 98.725349][ T6059] ? __task_pid_nr_ns+0x17c/0x500 [ 98.725371][ T6059] __x64_sys_socket+0x72/0xb0 [ 98.725386][ T6059] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.725406][ T6059] do_syscall_64+0xcd/0x4c0 [ 98.725419][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.725434][ T6059] RIP: 0033:0x7f580418eec9 [ 98.725447][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.725460][ T6059] RSP: 002b:00007f5805098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.725473][ T6059] RAX: ffffffffffffffda RBX: 00007f58043e5fa0 RCX: 00007f580418eec9 [ 98.725482][ T6059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 98.725490][ T6059] RBP: 00007f5804211f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.725498][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.725506][ T6059] R13: 00007f58043e6038 R14: 00007f58043e5fa0 R15: 00007ffd5bdea7c8 [ 98.725524][ T6059] [ 99.017588][ T6069] Invalid ELF header magic: != ELF [ 99.426572][ T6073] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 99.455973][ T6073] netlink: 'syz.0.25': attribute type 6 has an invalid length. [ 99.942025][ T6079] zswap: compressor û not available [ 100.935560][ T6098] process 'syz.2.31' launched ':,' with NULL argv: empty string added [ 101.527380][ T6110] FAULT_INJECTION: forcing a failure. [ 101.527380][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 101.624070][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 101.624106][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.624122][ T6110] Call Trace: [ 101.624131][ T6110] [ 101.624141][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 101.624186][ T6110] should_fail_ex+0x512/0x640 [ 101.624224][ T6110] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 101.624264][ T6110] should_failslab+0xc2/0x120 [ 101.624298][ T6110] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 101.624334][ T6110] ? __ip_vs_tcp_init+0x37/0xc0 [ 101.624366][ T6110] kmemdup_noprof+0x29/0x60 [ 101.624396][ T6110] ? __pfx___ip_vs_tcp_init+0x10/0x10 [ 101.624421][ T6110] __ip_vs_tcp_init+0x37/0xc0 [ 101.624448][ T6110] ip_vs_protocol_net_init+0x191/0x300 [ 101.624481][ T6110] __ip_vs_init+0x239/0x520 [ 101.624515][ T6110] ? __pfx___ip_vs_init+0x10/0x10 [ 101.624546][ T6110] ops_init+0x1e2/0x5f0 [ 101.624588][ T6110] setup_net+0x10f/0x380 [ 101.624609][ T6110] ? lockdep_init_map_type+0x5c/0x280 [ 101.624645][ T6110] ? __pfx_setup_net+0x10/0x10 [ 101.624670][ T6110] ? debug_mutex_init+0x37/0x70 [ 101.624701][ T6110] copy_net_ns+0x2a6/0x5f0 [ 101.624731][ T6110] create_new_namespaces+0x3ea/0xa90 [ 101.624770][ T6110] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 101.624803][ T6110] ksys_unshare+0x45b/0xa40 [ 101.624832][ T6110] ? __pfx_ksys_unshare+0x10/0x10 [ 101.624877][ T6110] ? xfd_validate_state+0x61/0x180 [ 101.624927][ T6110] __x64_sys_unshare+0x31/0x40 [ 101.624961][ T6110] do_syscall_64+0xcd/0x4c0 [ 101.624989][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.625014][ T6110] RIP: 0033:0x7f233398eec9 [ 101.625036][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.625060][ T6110] RSP: 002b:00007f23348dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 101.625085][ T6110] RAX: ffffffffffffffda RBX: 00007f2333be5fa0 RCX: 00007f233398eec9 [ 101.625101][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 101.625116][ T6110] RBP: 00007f2333a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.625132][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.625147][ T6110] R13: 00007f2333be6038 R14: 00007f2333be5fa0 R15: 00007ffc32521c58 [ 101.625183][ T6110] [ 101.854952][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.754788][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 104.769957][ T6133] ipvlan0: entered promiscuous mode [ 104.776862][ T6133] ipvlan0: entered allmulticast mode [ 104.782223][ T6133] veth0_vlan: entered allmulticast mode [ 106.313707][ T6157] binder: 6155:6157 ioctl 400c620e 0 returned -22 [ 109.203086][ T6191] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 109.490026][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 109.499786][ T6198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.696678][ T6196] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.555107][ T6230] can0: slcan on ttyS2. [ 111.687127][ T6228] can0 (unregistered): slcan off ttyS2. [ 112.604200][ T6224] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 112.747110][ T6261] netlink: 326 bytes leftover after parsing attributes in process `syz.2.65'. [ 113.281719][ T6265] netlink: set zone limit has 8 unknown bytes [ 113.370562][ T6265] HfR: entered promiscuous mode [ 113.486448][ T6265] mmap: syz.2.66 (6265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.528762][ T6312] netlink: zone id is out of range [ 116.540193][ T6312] netlink: zone id is out of range [ 116.548786][ T6312] netlink: zone id is out of range [ 116.556815][ T6312] netlink: zone id is out of range [ 116.561981][ T6312] netlink: zone id is out of range [ 116.573018][ T6312] netlink: zone id is out of range [ 116.598261][ T6312] netlink: zone id is out of range [ 116.639289][ T6312] netlink: zone id is out of range [ 116.644441][ T6312] netlink: zone id is out of range [ 116.749923][ T6317] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.612629][ T6370] vivid-007: ================= START STATUS ================= [ 120.623925][ T6370] vivid-007: Enable Output Cropping: true [ 120.637876][ T6370] vivid-007: Enable Output Composing: true [ 120.643752][ T6370] vivid-007: Enable Output Scaler: true [ 120.680424][ T6370] vivid-007: Tx RGB Quantization Range: Automatic [ 120.701434][ T6370] vivid-007: Transmit Mode: HDMI [ 120.717167][ T6370] vivid-007: Hotplug Present: 0x00000000 [ 120.733274][ T6370] vivid-007: RxSense Present: 0x00000000 [ 120.740465][ T6370] vivid-007: EDID Present: 0x00000000 [ 120.754943][ T6370] vivid-007: ================== END STATUS ================== [ 120.885872][ T6382] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(173544298.2314043776.706666779), cmd(6) [ 121.844204][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 121.949953][ T6386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.956580][ T6386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.995993][ T6386] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.022660][ T6386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.064057][ T6386] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.343700][ T6386] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.400636][ T6386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.417383][ T6386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.506813][ T6386] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 122.556042][ T6386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.583231][ T6386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.623317][ T6386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.542218][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.637639][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'. [ 123.720079][ T6427] geneve1: entered promiscuous mode [ 123.734981][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.755023][ T6427] geneve1: entered allmulticast mode [ 123.762002][ T6346] ------------[ cut here ]------------ [ 123.769013][ T6346] WARNING: CPU: 1 PID: 6346 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 123.779669][ T6346] Modules linked in: [ 123.787534][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 123.796724][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.806869][ T6346] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 123.813312][ T6346] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a [ 123.833274][ T6346] RSP: 0018:ffffc9000ee479c0 EFLAGS: 00010293 [ 123.843654][ T6346] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9 [ 123.851785][ T6346] RDX: ffff888030ea3c00 RSI: ffffffff81bfadcc RDI: 0000000000000005 [ 123.859808][ T6346] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000 [ 123.867850][ T6346] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807f29ccc8 [ 123.876664][ T6346] R13: dffffc0000000000 R14: ffffc9000ee47a58 R15: 0000000000000000 [ 123.884657][ T6346] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 123.894318][ T6346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.902935][ T6346] CR2: 00007f7e6a8c0f98 CR3: 000000007ee06000 CR4: 00000000003526f0 [ 123.912143][ T6346] Call Trace: [ 123.915475][ T6346] [ 123.918430][ T6346] remove_vma+0x85/0x160 [ 123.922704][ T6346] exit_mmap+0x511/0xb90 [ 123.927017][ T6346] ? __pfx_exit_mmap+0x10/0x10 [ 123.931837][ T6346] ? __lock_acquire+0xb97/0x1ce0 [ 123.936913][ T6346] __mmput+0x12a/0x410 [ 123.941017][ T6346] mmput+0x62/0x70 [ 123.944763][ T6346] do_exit+0x7c7/0x2bf0 [ 123.949043][ T6346] ? proc_coredump_connector+0x2d1/0x4f0 [ 123.954697][ T6346] ? __pfx_do_exit+0x10/0x10 [ 123.959403][ T6346] do_group_exit+0xd3/0x2a0 [ 123.963944][ T6346] get_signal+0x2673/0x26d0 [ 123.968596][ T6346] ? force_sig_fault+0xc4/0x100 [ 123.973489][ T6346] ? __pfx_get_signal+0x10/0x10 [ 123.979212][ T6346] arch_do_signal_or_restart+0x8f/0x790 [ 123.985503][ T6346] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 123.991610][ T6346] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.997897][ T6346] irqentry_exit_to_user_mode+0x13e/0x290 [ 124.003659][ T6346] asm_exc_page_fault+0x26/0x30 [ 124.008580][ T6346] RIP: 0033:0x40fff [ 124.012415][ T6346] Code: Unable to access opcode bytes at 0x40fd5. [ 124.018894][ T6346] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 124.025016][ T6346] RAX: 0000000000000000 RBX: 00007f7e69be5fa0 RCX: 00007f7e6998eec9 [ 124.032998][ T6346] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 124.041036][ T6346] RBP: 00007f7e69a11f91 R08: 0000000000000002 R09: 0000000000000000 [ 124.049103][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.056941][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.057203][ T6346] R13: 00007f7e69be6038 R14: 00007f7e69be5fa0 R15: 00007ffda852eed8 [ 124.071258][ T6346] [ 124.074304][ T6346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.081589][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 124.090719][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.100875][ T6346] Call Trace: [ 124.104168][ T6346] [ 124.107111][ T6346] dump_stack_lvl+0x3d/0x1f0 [ 124.111736][ T6346] vpanic+0x6e8/0x7a0 [ 124.115745][ T6346] ? __pfx_vpanic+0x10/0x10 [ 124.120270][ T6346] ? tracing_buffers_mmap_close+0xdd/0x130 [ 124.126078][ T6346] panic+0xca/0xd0 [ 124.129806][ T6346] ? __pfx_panic+0x10/0x10 [ 124.134233][ T6346] ? check_panic_on_warn+0x1f/0xb0 [ 124.139353][ T6346] check_panic_on_warn+0xab/0xb0 [ 124.144294][ T6346] __warn+0xf6/0x3c0 [ 124.148199][ T6346] ? tracing_buffers_mmap_close+0xdd/0x130 [ 124.154008][ T6346] report_bug+0x3c3/0x580 [ 124.158355][ T6346] ? tracing_buffers_mmap_close+0xdd/0x130 [ 124.164162][ T6346] handle_bug+0x184/0x210 [ 124.168487][ T6346] exc_invalid_op+0x17/0x50 [ 124.172990][ T6346] asm_exc_invalid_op+0x1a/0x20 [ 124.177838][ T6346] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 124.184252][ T6346] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 51 cd 60 00 eb 87 e8 7a [ 124.203858][ T6346] RSP: 0018:ffffc9000ee479c0 EFLAGS: 00010293 [ 124.209925][ T6346] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfadb9 [ 124.217892][ T6346] RDX: ffff888030ea3c00 RSI: ffffffff81bfadcc RDI: 0000000000000005 [ 124.226116][ T6346] RBP: ffffffff81bfacf0 R08: 0000000000000005 R09: 0000000000000000 [ 124.234166][ T6346] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88807f29ccc8 [ 124.242139][ T6346] R13: dffffc0000000000 R14: ffffc9000ee47a58 R15: 0000000000000000 [ 124.250131][ T6346] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 124.256430][ T6346] ? tracing_buffers_mmap_close+0xc9/0x130 [ 124.262256][ T6346] ? tracing_buffers_mmap_close+0xdc/0x130 [ 124.268077][ T6346] remove_vma+0x85/0x160 [ 124.272329][ T6346] exit_mmap+0x511/0xb90 [ 124.276593][ T6346] ? __pfx_exit_mmap+0x10/0x10 [ 124.281373][ T6346] ? __lock_acquire+0xb97/0x1ce0 [ 124.286348][ T6346] __mmput+0x12a/0x410 [ 124.290425][ T6346] mmput+0x62/0x70 [ 124.294143][ T6346] do_exit+0x7c7/0x2bf0 [ 124.298308][ T6346] ? proc_coredump_connector+0x2d1/0x4f0 [ 124.303945][ T6346] ? __pfx_do_exit+0x10/0x10 [ 124.308559][ T6346] do_group_exit+0xd3/0x2a0 [ 124.313075][ T6346] get_signal+0x2673/0x26d0 [ 124.317585][ T6346] ? force_sig_fault+0xc4/0x100 [ 124.322437][ T6346] ? __pfx_get_signal+0x10/0x10 [ 124.327293][ T6346] arch_do_signal_or_restart+0x8f/0x790 [ 124.332840][ T6346] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 124.338920][ T6346] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 124.345094][ T6346] irqentry_exit_to_user_mode+0x13e/0x290 [ 124.350824][ T6346] asm_exc_page_fault+0x26/0x30 [ 124.355698][ T6346] RIP: 0033:0x40fff [ 124.359497][ T6346] Code: Unable to access opcode bytes at 0x40fd5. [ 124.365891][ T6346] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 124.371951][ T6346] RAX: 0000000000000000 RBX: 00007f7e69be5fa0 RCX: 00007f7e6998eec9 [ 124.379917][ T6346] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 124.387895][ T6346] RBP: 00007f7e69a11f91 R08: 0000000000000002 R09: 0000000000000000 [ 124.395863][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.403828][ T6346] R13: 00007f7e69be6038 R14: 00007f7e69be5fa0 R15: 00007ffda852eed8 [ 124.411809][ T6346] [ 124.415098][ T6346] Kernel Offset: disabled [ 124.419427][ T6346] Rebooting in 86400 seconds..