last executing test programs:
2.192266312s ago: executing program 5 (id=92):
linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0)
2.175790342s ago: executing program 5 (id=96):
pipe2(&(0x7f0000000000), 0x0)
2.15941129s ago: executing program 5 (id=104):
socket$l2tp6(0xa, 0x2, 0x73)
2.159240746s ago: executing program 5 (id=106):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
2.146375608s ago: executing program 5 (id=113):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full', 0x800, 0x0)
2.127613767s ago: executing program 5 (id=128):
pause()
1.244399153s ago: executing program 3 (id=592):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot', 0x800, 0x0)
1.244148369s ago: executing program 3 (id=594):
readlinkat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)
1.243997145s ago: executing program 1 (id=595):
socket$inet_tcp(0x2, 0x1, 0x0)
1.233296121s ago: executing program 4 (id=597):
socket$caif_stream(0x25, 0x1, 0x0)
1.233127125s ago: executing program 3 (id=598):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0)
1.23300763s ago: executing program 6 (id=599):
chmod(&(0x7f0000000000), 0x0)
1.209917832s ago: executing program 6 (id=604):
utimes(&(0x7f0000000000), &(0x7f0000000000))
1.209702281s ago: executing program 1 (id=606):
syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x800)
1.20944927s ago: executing program 4 (id=608):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa', 0x800, 0x0)
1.168271954s ago: executing program 1 (id=610):
socket$inet_udplite(0x2, 0x2, 0x88)
1.168031543s ago: executing program 4 (id=611):
io_setup(0x0, &(0x7f0000000000))
1.167769288s ago: executing program 6 (id=612):
times(&(0x7f0000000000))
1.167444483s ago: executing program 6 (id=615):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk', 0x800, 0x0)
1.158536381s ago: executing program 1 (id=618):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/sw_sync', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync', 0x800, 0x0)
1.155146524s ago: executing program 1 (id=620):
syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800)
1.030360015s ago: executing program 3 (id=603):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
904.640415ms ago: executing program 6 (id=616):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
898.584681ms ago: executing program 4 (id=613):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
856.201071ms ago: executing program 3 (id=623):
ioperm(0x0, 0x0, 0x0)
744.388047ms ago: executing program 1 (id=622):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
688.015818ms ago: executing program 2 (id=624):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
687.980958ms ago: executing program 3 (id=627):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
616.675569ms ago: executing program 4 (id=625):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
564.157147ms ago: executing program 6 (id=626):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
530.439382ms ago: executing program 2 (id=629):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog', 0x2, 0x0)
476.201308ms ago: executing program 2 (id=635):
socket$isdn_base(0x22, 0x3, 0x0)
476.086814ms ago: executing program 2 (id=636):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$sndctrl(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$sndctrl(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$sndctrl(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000500), 0x4, 0x800)
475.973708ms ago: executing program 2 (id=637):
syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vcsu(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vcsu(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vcsu(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vcsu(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vcsu(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vcsu(&(0x7f0000000500), 0x4, 0x800)
475.873365ms ago: executing program 4 (id=632):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
407.36138ms ago: executing program 2 (id=638):
expanding glob: /sys/**/*
332.127004ms ago: executing program 0 (id=649):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x3, 0x1)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x3, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000140), 0xd, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0xd, 0x1)
syz_open_dev$sndmidi(&(0x7f00000001c0), 0xd, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000200), 0xd, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x17, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000280), 0x17, 0x1)
syz_open_dev$sndmidi(&(0x7f00000002c0), 0x17, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000300), 0x17, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000340), 0x21, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000380), 0x21, 0x1)
syz_open_dev$sndmidi(&(0x7f00000003c0), 0x21, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000400), 0x21, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000440), 0x2b, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000480), 0x2b, 0x1)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2b, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000500), 0x2b, 0x800)
331.875136ms ago: executing program 0 (id=650):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x3, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0xd, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180), 0xd, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xd, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0xd, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000240), 0x17, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000280), 0x17, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x17, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x17, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x21, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000380), 0x21, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x21, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x21, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2b, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2b, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2b, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2b, 0x800)
248.155835ms ago: executing program 0 (id=651):
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x3, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000140), 0xd, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0xd, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xd, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000200), 0xd, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x17, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000280), 0x17, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x17, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x17, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000340), 0x21, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000380), 0x21, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x21, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000400), 0x21, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000440), 0x2b, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x2b, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2b, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x2b, 0x800)
48.951094ms ago: executing program 0 (id=653):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x4, 0x1)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x4, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000140), 0xe, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0xe, 0x1)
syz_open_dev$sndmidi(&(0x7f00000001c0), 0xe, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000200), 0xe, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x18, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000280), 0x18, 0x1)
syz_open_dev$sndmidi(&(0x7f00000002c0), 0x18, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000300), 0x18, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000340), 0x22, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000380), 0x22, 0x1)
syz_open_dev$sndmidi(&(0x7f00000003c0), 0x22, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000400), 0x22, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000440), 0x2c, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000480), 0x2c, 0x1)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2c, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000500), 0x2c, 0x800)
43.031283ms ago: executing program 0 (id=654):
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x4, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x4, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x4, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000140), 0xe, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xe, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0xe, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000240), 0x18, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000280), 0x18, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x18, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x18, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x22, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000380), 0x22, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x22, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000400), 0x22, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2c, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2c, 0x1)
syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2c, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2c, 0x800)
0s ago: executing program 0 (id=655):
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x4, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x4, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000140), 0xe, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0xe, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xe, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000200), 0xe, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x18, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000280), 0x18, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x18, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x18, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000340), 0x22, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000380), 0x22, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x22, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000400), 0x22, 0x800)
syz_open_dev$sndpcmc(&(0x7f0000000440), 0x2c, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x2c, 0x1)
syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2c, 0x2)
syz_open_dev$sndpcmc(&(0x7f0000000500), 0x2c, 0x800)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts.
[ 32.799885][ T5804] cgroup: Unknown subsys name 'net'
[ 32.884226][ T5804] cgroup: Unknown subsys name 'cpuset'
[ 32.890832][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 40.720014][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 42.296358][ T6005] mmap: syz.4.172 (6005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 42.341066][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 43.134228][ T6450] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 43.255106][ T6444] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 43.407734][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 43.425889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 43.441373][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 43.456036][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 43.522572][ T6495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 43.530123][ T6495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 43.537406][ T6495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 43.548603][ T6495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 43.565417][ T6495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 43.977602][ T1053] ------------[ cut here ]------------
[ 43.983118][ T1053] WARNING: CPU: 0 PID: 1053 at lib/ref_tracker.c:228 ref_tracker_free+0x24a/0x330
[ 43.992370][ T1053] Modules linked in:
[ 43.996310][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:5 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full)
[ 44.008527][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 44.018734][ T1053] Workqueue: netns cleanup_net
[ 44.023549][ T1053] RIP: 0010:ref_tracker_free+0x24a/0x330
[ 44.029374][ T1053] Code: ec 2d a1 fe 83 fd 01 0f 8f 4d ff ff ff e8 6e 35 a1 fe be 04 00 00 00 4c 89 e7 e8 e1 62 ec ff e9 36 ff ff ff e8 57 35 a1 fe 90 <0f> 0b 90 e9 08 fe ff ff e8 49 35 a1 fe 48 c7 c7 80 e1 6d 86 e8 3d
[ 44.049003][ C0] vkms_vblank_simulate: vblank timer overrun
[ 44.055094][ T1053] RSP: 0018:ffffc9000270fad8 EFLAGS: 00010293
[ 44.061376][ T1053] RAX: 0000000000000000 RBX: ffff88810e252a98 RCX: ffffffff82c07771
[ 44.069513][ T1053] RDX: ffff88810341d640 RSI: ffffffff82c07969 RDI: 0000000000000001
[ 44.077528][ T1053] RBP: ffff888122718850 R08: 0000000000000001 R09: 0000000000000000
[ 44.085557][ T1053] R10: 00000000000000a0 R11: ffff88811372a000 R12: ffffc9000270fad8
[ 44.093580][ T1053] R13: 00000000000000a0 R14: ffff88811372f800 R15: 0000000000000000
[ 44.101595][ T1053] FS: 0000000000000000(0000) GS:ffff8881b2597000(0000) knlGS:0000000000000000
[ 44.110719][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.117632][ T1053] CR2: 00007ffc9bae6a18 CR3: 0000000109f74000 CR4: 00000000003526f0
[ 44.125756][ T1053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.133892][ T1053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.141883][ T1053] Call Trace:
[ 44.145504][ T1053]
[ 44.148490][ T1053] neigh_parms_release+0xc0/0x120
[ 44.153601][ T1053] addrconf_ifdown.isra.0+0xb50/0xc60
[ 44.158996][ T1053] ? lock_timer_base+0xe3/0x100
[ 44.163932][ T1053] addrconf_notify+0x155/0xcc0
[ 44.168815][ T1053] ? tee_netdev_event+0x100/0x1c0
[ 44.173906][ T1053] ? ip6mr_device_event+0xcf/0xe0
[ 44.179014][ T1053] ? __pfx_addrconf_notify+0x10/0x10
[ 44.184382][ T1053] notifier_call_chain+0x90/0x180
[ 44.189438][ T1053] ? netdev_offload_xstats_disable+0xe1/0x180
[ 44.195571][ T1053] call_netdevice_notifiers_info+0x7d/0xe0
[ 44.201598][ T1053] unregister_netdevice_many_notify+0x7a3/0x1050
[ 44.208080][ T1053] ? rtnl_is_locked+0x15/0x20
[ 44.212780][ T1053] ? nexthop_net_exit_batch_rtnl+0x159/0x1d0
[ 44.218928][ T1053] cleanup_net+0x333/0x5a0
[ 44.223470][ T1053] ? __pwq_activate_work+0x5d/0x120
[ 44.228701][ T1053] process_one_work+0x26b/0x620
[ 44.233711][ T1053] worker_thread+0x2c4/0x4f0
[ 44.238410][ T1053] ? __pfx_worker_thread+0x10/0x10
[ 44.243566][ T1053] kthread+0x158/0x310
[ 44.247683][ T1053] ? finish_task_switch.isra.0+0x86/0x280
[ 44.253487][ T1053] ? __pfx_kthread+0x10/0x10
[ 44.258094][ T1053] ret_from_fork+0x45/0x60
[ 44.262624][ T1053] ? __pfx_kthread+0x10/0x10
[ 44.267292][ T1053] ret_from_fork_asm+0x1a/0x30
[ 44.272344][ T1053]
[ 44.275399][ T1053] ---[ end trace 0000000000000000 ]---
[ 44.303481][ T1053] BUG: unable to handle page fault for address: ffffffff0ea64a50
[ 44.311215][ T1053] #PF: supervisor write access in kernel mode
[ 44.317282][ T1053] #PF: error_code(0x0002) - not-present page
[ 44.323349][ T1053] PGD 6c66067 P4D 6c66067 PUD 0
[ 44.328388][ T1053] Oops: Oops: 0002 [#1] SMP PTI
[ 44.333271][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: kworker/u8:5 Tainted: G W 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full)
[ 44.347349][ T1053] Tainted: [W]=WARN
[ 44.351158][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 44.361319][ T1053] Workqueue: netns cleanup_net
[ 44.366100][ T1053] RIP: 0010:__pv_queued_spin_lock_slowpath+0x278/0x380
[ 44.373118][ T1053] Code: ff ff e8 1b f6 c3 fb e9 e1 fd ff ff 83 e0 03 c1 ea 12 48 c1 e0 05 48 8d a8 c0 53 49 89 8d 42 ff 48 98 48 03 2c c5 e0 4c 99 86 <4c> 89 75 00 b8 00 80 00 00 eb 13 84 c0 75 08 0f b6 55 14 84 d2 75
[ 44.392900][ T1053] RSP: 0018:ffffc9000270fa88 EFLAGS: 00010087
[ 44.398962][ T1053] RAX: 0000000000000388 RBX: 0000000000040000 RCX: 0000000000000001
[ 44.406934][ T1053] RDX: 0000000000000389 RSI: 0000000000000000 RDI: ffff88810e252a98
[ 44.414895][ T1053] RBP: ffffffff0ea64a50 R08: ffffffff81202f19 R09: ffffffff87264fd8
[ 44.422858][ T1053] R10: 000000001f7d060b R11: 0000000096496c23 R12: 00000000003c00ed
[ 44.430918][ T1053] R13: ffff88810e252a98 R14: ffff88813ba2c3c0 R15: 0000000000000000
[ 44.439098][ T1053] FS: 0000000000000000(0000) GS:ffff8881b2597000(0000) knlGS:0000000000000000
[ 44.448117][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.454696][ T1053] CR2: ffffffff0ea64a50 CR3: 00000001111ca000 CR4: 00000000003526f0
[ 44.462668][ T1053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.470632][ T1053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.478606][ T1053] Call Trace:
[ 44.481883][ T1053]
[ 44.484830][ T1053] _raw_spin_lock_irqsave+0x36/0x40
[ 44.490038][ T1053] ref_tracker_free+0xab/0x330
[ 44.494802][ T1053] ? neigh_parms_release+0xc0/0x120
[ 44.500095][ T1053] ? addrconf_ifdown.isra.0+0xb50/0xc60
[ 44.505728][ T1053] ? addrconf_notify+0x155/0xcc0
[ 44.510673][ T1053] ? notifier_call_chain+0x90/0x180
[ 44.516218][ T1053] ? call_netdevice_notifiers_info+0x7d/0xe0
[ 44.522297][ T1053] ? unregister_netdevice_many_notify+0x7a3/0x1050
[ 44.528908][ T1053] ? cleanup_net+0x333/0x5a0
[ 44.533580][ T1053] ? process_one_work+0x26b/0x620
[ 44.539045][ T1053] ? worker_thread+0x2c4/0x4f0
[ 44.543889][ T1053] ? kthread+0x158/0x310
[ 44.548131][ T1053] ? ret_from_fork+0x45/0x60
[ 44.552723][ T1053] ? ret_from_fork_asm+0x1a/0x30
[ 44.557682][ T1053] neigh_parms_release+0xc0/0x120
[ 44.562715][ T1053] addrconf_ifdown.isra.0+0xb50/0xc60
[ 44.568194][ T1053] ? lock_timer_base+0xe3/0x100
[ 44.573065][ T1053] addrconf_notify+0x155/0xcc0
[ 44.577828][ T1053] ? tee_netdev_event+0x100/0x1c0
[ 44.582973][ T1053] ? ip6mr_device_event+0xcf/0xe0
[ 44.588073][ T1053] ? __pfx_addrconf_notify+0x10/0x10
[ 44.593358][ T1053] notifier_call_chain+0x90/0x180
[ 44.598468][ T1053] ? netdev_offload_xstats_disable+0xe1/0x180
[ 44.604532][ T1053] call_netdevice_notifiers_info+0x7d/0xe0
[ 44.610431][ T1053] unregister_netdevice_many_notify+0x7a3/0x1050
[ 44.616768][ T1053] ? rtnl_is_locked+0x15/0x20
[ 44.621440][ T1053] ? nexthop_net_exit_batch_rtnl+0x159/0x1d0
[ 44.627437][ T1053] cleanup_net+0x333/0x5a0
[ 44.631851][ T1053] ? __pwq_activate_work+0x5d/0x120
[ 44.637055][ T1053] process_one_work+0x26b/0x620
[ 44.641903][ T1053] worker_thread+0x2c4/0x4f0
[ 44.646489][ T1053] ? __pfx_worker_thread+0x10/0x10
[ 44.651688][ T1053] kthread+0x158/0x310
[ 44.655829][ T1053] ? finish_task_switch.isra.0+0x86/0x280
[ 44.661593][ T1053] ? __pfx_kthread+0x10/0x10
[ 44.666218][ T1053] ret_from_fork+0x45/0x60
[ 44.670688][ T1053] ? __pfx_kthread+0x10/0x10
[ 44.675288][ T1053] ret_from_fork_asm+0x1a/0x30
[ 44.680147][ T1053]
[ 44.683153][ T1053] Modules linked in:
[ 44.687044][ T1053] CR2: ffffffff0ea64a50
[ 44.691197][ T1053] ---[ end trace 0000000000000000 ]---
[ 44.696745][ T1053] RIP: 0010:__pv_queued_spin_lock_slowpath+0x278/0x380
[ 44.703695][ T1053] Code: ff ff e8 1b f6 c3 fb e9 e1 fd ff ff 83 e0 03 c1 ea 12 48 c1 e0 05 48 8d a8 c0 53 49 89 8d 42 ff 48 98 48 03 2c c5 e0 4c 99 86 <4c> 89 75 00 b8 00 80 00 00 eb 13 84 c0 75 08 0f b6 55 14 84 d2 75
[ 44.723302][ T1053] RSP: 0018:ffffc9000270fa88 EFLAGS: 00010087
[ 44.729372][ T1053] RAX: 0000000000000388 RBX: 0000000000040000 RCX: 0000000000000001
[ 44.737433][ T1053] RDX: 0000000000000389 RSI: 0000000000000000 RDI: ffff88810e252a98
[ 44.745393][ T1053] RBP: ffffffff0ea64a50 R08: ffffffff81202f19 R09: ffffffff87264fd8
[ 44.753445][ T1053] R10: 000000001f7d060b R11: 0000000096496c23 R12: 00000000003c00ed
[ 44.761500][ T1053] R13: ffff88810e252a98 R14: ffff88813ba2c3c0 R15: 0000000000000000
[ 44.769570][ T1053] FS: 0000000000000000(0000) GS:ffff8881b2597000(0000) knlGS:0000000000000000
[ 44.778508][ T1053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.785199][ T1053] CR2: ffffffff0ea64a50 CR3: 00000001111ca000 CR4: 00000000003526f0
[ 44.793700][ T1053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.801940][ T1053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.810268][ T1053] Kernel panic - not syncing: Fatal exception
[ 44.816722][ T1053] Kernel Offset: disabled
[ 44.821415][ T1053] Rebooting in 86400 seconds..