last executing test programs: 11.10992618s ago: executing program 2 (id=17): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x3, 0x3a) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000010c0)=""/22, 0x16) 8.283336s ago: executing program 2 (id=24): mmap$auto(0x4, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x48b568da) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8842, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) ioctl$auto(0xffffffffffffffff, 0x890c, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x848000000015, 0x805, 0x0) unshare$auto(0x40000080) 7.641686214s ago: executing program 3 (id=25): socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0x20400, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/offline\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0xe602, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x506a72de, 0xa1d8, 0x1, 0xfffffffffffffffe]}, 0x0) 7.409949279s ago: executing program 0 (id=26): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 7.084660967s ago: executing program 0 (id=28): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) 6.849380682s ago: executing program 3 (id=30): r0 = memfd_create$auto(0x0, 0x4) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) read$auto_component_list_fops_(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000)="e58177b04e45273a1f9bc1b3fb914486547572a0523fb0e7c8f42f5b5acbdd6f22c8ec2450d5483dd3f26bb5626260af840b5903f0b52d46253d69d401054bde5a266728a4e70fc19c3db9da602f863858ecdb8e1fe0679b714d4ffc033791bc6ddb8bcebc8f6cefccb56e8aaa628903", 0xcd4e, &(0x7f0000000140)={&(0x7f0000000100)="ef5cd3fb49de4f6ce501933cd3", 0x8000}, 0xffff, &(0x7f00000002c0)="344a556200756e669914443c5983f58ef2cef3fb522be99c31c4b81b1378f54ddb1fc3e79cc9dcf9f4179e5799e7a8522261757a46a0b344a4f292abfa4ce0f6122addefbb443eba781102adfc3961adbdca503f3abe1b4dd161e4fbe775d54843bc9ac57d118e69b57c6b684a162ec99b77cdd2ba175cfc257bc8b05477b65d06954c31848a7b7a1cbe7e485b75e92d74868de48fb355369e617183f742830a23ffc3adad7de679ef5f60eb07cc10", 0x7, 0x8}, 0x1}, 0xf78d, 0x5) unshare$auto(0x40000080) socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8010aebc, r1) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r3, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) 6.56675246s ago: executing program 1 (id=31): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0x4f, 0x5, 0x1, 0x40, 0x4, 0x7, 0x100000004}}) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, 0x0, 0x7) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r1, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/028/001\x00', 0x290001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xd618, 0x40000000000a5, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto(0x3, 0x540a, r2) 5.806042898s ago: executing program 0 (id=32): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x5, 0xfffffffffffffffc, 0x5, 0x13, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064be, 0x1e6) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(r1, 0x40045569, &(0x7f00000003c0)=0x698d) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x3, 0x1, 0x5) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) socket(0x21, 0x2, 0x2) socket(0x26, 0x3, 0x1) getpriority$auto_PRIO_USER(0x2, 0x0) 5.794377829s ago: executing program 2 (id=33): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x400002, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r0, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, 0x0, 0x4000000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x18a65f3b, 0x6, 0xffffffffffffffff, 0xbaa}, &(0x7f0000000100)={0xf5, 0x4, 0x7, 0x4c}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) 5.28537422s ago: executing program 3 (id=34): r0 = socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e1, 0x2000000000000093) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') capset$auto(0x0, &(0x7f0000000000)={0x1, 0x5, 0x48}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a3245789589707", 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) r2 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) fsconfig$auto_SHMEM_HUGE_DENY(r0, 0x9, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x14, r5, 0x301, 0x70b52c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000180)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) ioctl$auto_I2C_RDWR(r6, 0x707, 0x0) 5.164703837s ago: executing program 1 (id=35): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x4000040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf25880000000800260006000000050089000a00000008006100000000000800c900c20700000400ae00"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) rt_sigqueueinfo$auto(0x0, 0x0, &(0x7f00000002c0)={@_si_pad}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0xee01, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100105}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 4.290353943s ago: executing program 3 (id=36): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) gettid() write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) io_uring_setup$auto(0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) semctl$auto_GETPID(0xb3fb, 0x1, 0xb, 0x400) 4.281125898s ago: executing program 0 (id=37): socket(0x2, 0x3, 0xe3) unshare$auto(0x40000080) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 4.179495657s ago: executing program 2 (id=38): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xb, 0x4, 0x100) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x6, 0x3fd6, 0x0, 0x1ffffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680), 0x0) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 4.004602975s ago: executing program 1 (id=39): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0xfffffffffffffffc, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x2001, 0x0) mmap$auto(0x1, 0x400005, 0x800000000000df, 0x8000000000000014, 0x2, 0x4000000008000) unshare$auto(0x400) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x29, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffda, 0x0, 0xa, 0x2, 0x9, 0x9, 0x9, 0x4, 0xfffffffffffffff8, 0x9, 0x2, 0x10000, 0x7c, 0x7, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0xe9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd]}, 0x1ff, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.883144236s ago: executing program 1 (id=40): setgid$auto(0x7ff) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) ioctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/amidi2\x00', 0x20141, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) unshare$auto(0x40000080) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0xfff) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/hotplug/target\x00', 0x201, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, r2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d39, 0x5, 0x2, 0x1]}, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 2.379059582s ago: executing program 2 (id=41): socket(0x2, 0x1, 0x120) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) 1.889299538s ago: executing program 0 (id=42): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x3, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3d, 0x9, 0xffffffffffffffff, 0xfffffffffffffffd]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF1_AGE={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.771213548s ago: executing program 1 (id=43): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0xffffffffffff7fff, 0x2020009, 0x7, 0xeb1, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) recvmsg$auto(0xffffffffffffffff, 0x0, 0xe) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000120, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 1.164603216s ago: executing program 2 (id=44): socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x80000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000540)={0x2, &(0x7f0000000500)={0xa7, 0xf3, 0x1, @raw=0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf25030000001c00018008000100000200000800010001000000080001000500000044000180080001000000000008000200818100000800020001f8ffff080001004f0e00bfea1800419e08bdfe8b89d2000800010001000000502fe021ee08"], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x5, 0xd, 0xfffffffffffff4d6, 0x948b, 0x3, 0x15f4da0e, 0x3, 0x0, 0x9, 0x80000001, 0x1000, 0x1, 0x9, 0x3, 0x1]}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0x80002, 0x0) write$auto(r3, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r4, 0x0, 0xfffffdef) 1.162637357s ago: executing program 3 (id=45): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, "1bc6e7e10bc66696ea9b05d53fcb46cdea5e227f20ea27bbee943b059ee673eb196cbf758915ad0d31d27b34b0e98cd68af9d349f9047fced322702974"}]}, 0x58}}, 0x4004010) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) write$auto(r2, 0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x800454dd, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/virt_wifi0/interval_probe_time_ms\x00', 0x382, 0x0) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x244000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r3) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x1, 0x70bd29, 0xa, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0xffffffffbfffffc0}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r0) r7 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'geneve1\x00', 0x0}) sendto$auto(0x3, 0x0, 0x11, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xa888, r8, 0x10}, 0x22) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2080) ioctl$auto_BLKDISCARDZEROES(r5, 0x127c, 0x0) r9 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x3, 0x3, 0x0, 0x3, 0x1621) sendfile$auto(r9, r9, 0x0, 0x5) 354.784794ms ago: executing program 3 (id=46): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)=""/1, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) read$auto(0xffffffffffffffff, 0x0, 0x18) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) setgroups$auto(0xe32, 0x0) 225.3601ms ago: executing program 0 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x8f4d, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x703, 0x70bd27, 0x25dfd9fc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4c848) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, 0x0, 0x14) r6 = pipe$auto(0x0) write$auto(r6, 0x0, 0x109) unshare$auto(0x40000080) read$auto_tracing_iter_fops_trace(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) 0s ago: executing program 1 (id=48): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) unshare$auto(0x20000) unshare$auto(0x20000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) getxattrat$auto(r1, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) r2 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r2, &(0x7f0000000080)=""/228, 0xe4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 101.608016][ T5824] cgroup: Unknown subsys name 'net' [ 101.738787][ T5824] cgroup: Unknown subsys name 'cpuset' [ 101.748460][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.618810][ T10] cfg80211: failed to load regulatory.db [ 103.692987][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.360494][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.374463][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.382712][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.392387][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.400874][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.409074][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.424956][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.445149][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.458508][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.466025][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.472314][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.476395][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.481044][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.489251][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.494754][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.511769][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.519796][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.527953][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.537740][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.546651][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.071245][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 107.192013][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 107.334779][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 107.411259][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.418870][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.428287][ T5835] bridge_slave_0: entered allmulticast mode [ 107.435912][ T5835] bridge_slave_0: entered promiscuous mode [ 107.503743][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.512453][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.522470][ T5835] bridge_slave_1: entered allmulticast mode [ 107.532172][ T5835] bridge_slave_1: entered promiscuous mode [ 107.553168][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.560614][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.568442][ T5834] bridge_slave_0: entered allmulticast mode [ 107.579716][ T5834] bridge_slave_0: entered promiscuous mode [ 107.614827][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.622025][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.630052][ T5834] bridge_slave_1: entered allmulticast mode [ 107.637589][ T5834] bridge_slave_1: entered promiscuous mode [ 107.645102][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 107.702503][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.716009][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.788822][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.802254][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.857470][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.864788][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.872012][ T5838] bridge_slave_0: entered allmulticast mode [ 107.881276][ T5838] bridge_slave_0: entered promiscuous mode [ 107.912352][ T5835] team0: Port device team_slave_0 added [ 107.918943][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.926488][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.935128][ T5838] bridge_slave_1: entered allmulticast mode [ 107.942567][ T5838] bridge_slave_1: entered promiscuous mode [ 107.971992][ T5835] team0: Port device team_slave_1 added [ 107.999775][ T5834] team0: Port device team_slave_0 added [ 108.009493][ T5834] team0: Port device team_slave_1 added [ 108.101297][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.108364][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.134858][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.149751][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.189806][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.196991][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.223408][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.253797][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.265246][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.272254][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.298990][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.312353][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.319449][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.345606][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.358208][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.365816][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.373350][ T5839] bridge_slave_0: entered allmulticast mode [ 108.381062][ T5839] bridge_slave_0: entered promiscuous mode [ 108.389485][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.396823][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.404162][ T5839] bridge_slave_1: entered allmulticast mode [ 108.411592][ T5839] bridge_slave_1: entered promiscuous mode [ 108.491634][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.518973][ T5838] team0: Port device team_slave_0 added [ 108.543133][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.545233][ T5157] Bluetooth: hci1: command tx timeout [ 108.597414][ T5838] team0: Port device team_slave_1 added [ 108.610662][ T5835] hsr_slave_0: entered promiscuous mode [ 108.616766][ T5157] Bluetooth: hci0: command tx timeout [ 108.617005][ T5157] Bluetooth: hci2: command tx timeout [ 108.617163][ T5157] Bluetooth: hci3: command tx timeout [ 108.625799][ T5835] hsr_slave_1: entered promiscuous mode [ 108.700150][ T5839] team0: Port device team_slave_0 added [ 108.712110][ T5834] hsr_slave_0: entered promiscuous mode [ 108.719328][ T5834] hsr_slave_1: entered promiscuous mode [ 108.726595][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 108.732446][ T5834] Cannot create hsr debugfs directory [ 108.754455][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.761454][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.788336][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.801926][ T5839] team0: Port device team_slave_1 added [ 108.831241][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.838378][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.864405][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.950137][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.957571][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.983747][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.996838][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.003822][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.030935][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.111245][ T5838] hsr_slave_0: entered promiscuous mode [ 109.118081][ T5838] hsr_slave_1: entered promiscuous mode [ 109.125297][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 109.132236][ T5838] Cannot create hsr debugfs directory [ 109.247416][ T5839] hsr_slave_0: entered promiscuous mode [ 109.254657][ T5839] hsr_slave_1: entered promiscuous mode [ 109.261171][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 109.267679][ T5839] Cannot create hsr debugfs directory [ 109.691463][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.709277][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.732591][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.745660][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.808596][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.821738][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.845607][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.869504][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.945703][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.961723][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.973749][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.992828][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.104984][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.119027][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.131443][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.145878][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.260525][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.349828][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.395937][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.403221][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.415212][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.422390][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.448883][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.509157][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.530674][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.566047][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.573230][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.588082][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.599700][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.614528][ T5157] Bluetooth: hci1: command tx timeout [ 110.631044][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.638378][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.666918][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.674152][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.694256][ T5157] Bluetooth: hci3: command tx timeout [ 110.695053][ T5837] Bluetooth: hci2: command tx timeout [ 110.700332][ T5157] Bluetooth: hci0: command tx timeout [ 110.729620][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.736890][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.817331][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.881261][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.888508][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.952230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.959551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.401484][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.545411][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.591082][ T5835] veth0_vlan: entered promiscuous mode [ 111.614855][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.642482][ T5835] veth1_vlan: entered promiscuous mode [ 111.728251][ T5834] veth0_vlan: entered promiscuous mode [ 111.769206][ T5838] veth0_vlan: entered promiscuous mode [ 111.776169][ T5834] veth1_vlan: entered promiscuous mode [ 111.791589][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.822052][ T5835] veth0_macvtap: entered promiscuous mode [ 111.843749][ T5838] veth1_vlan: entered promiscuous mode [ 111.859063][ T5835] veth1_macvtap: entered promiscuous mode [ 111.911110][ T5834] veth0_macvtap: entered promiscuous mode [ 111.936086][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.955994][ T5834] veth1_macvtap: entered promiscuous mode [ 112.002849][ T5838] veth0_macvtap: entered promiscuous mode [ 112.011535][ T5839] veth0_vlan: entered promiscuous mode [ 112.029533][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.057850][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.067271][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.076854][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.087889][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.100406][ T5838] veth1_macvtap: entered promiscuous mode [ 112.113049][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.132860][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.144874][ T5839] veth1_vlan: entered promiscuous mode [ 112.185536][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.195227][ T797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.227089][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.237293][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.256917][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.287718][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.330934][ T5839] veth0_macvtap: entered promiscuous mode [ 112.359510][ T797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.372476][ T797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.382977][ T5839] veth1_macvtap: entered promiscuous mode [ 112.417709][ T797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.429040][ T797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.466236][ T797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.480910][ T797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.561922][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.572696][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.609836][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.618413][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.637643][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.676216][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.694844][ T5157] Bluetooth: hci1: command tx timeout [ 112.726138][ T797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.746017][ T797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.772707][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.782213][ T51] Bluetooth: hci3: command tx timeout [ 112.788001][ T5837] Bluetooth: hci0: command tx timeout [ 112.789137][ T1090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.793819][ T5157] Bluetooth: hci2: command tx timeout [ 112.816034][ T1090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.828520][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.844161][ T1090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.867878][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.887264][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.059548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.083989][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.177394][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.199042][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.252787][ T5930] capability: warning: `' uses 32-bit capabilities (legacy support in use) [ 113.299916][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.299970][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.624864][ T5935] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4'. [ 113.678542][ T5935] Zero length message leads to an empty skb [ 113.692557][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.707700][ T5929] ICMPv6: process `syz.0.1' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 113.757309][ T5929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.828422][ T5943] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 113.856410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.866013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 113.877089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.904763][ T5944] random: crng reseeded on system resumption [ 113.943666][ T5943] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 114.087198][ T5943] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 114.170164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.334963][ T5943] netlink: 274 bytes leftover after parsing attributes in process `syz.3.4'. [ 114.687042][ T5157] Bluetooth: hci1: unexpected event 0x30 length: 47 > 3 [ 114.784243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.807119][ T5157] Bluetooth: hci1: command tx timeout [ 114.856067][ T5157] Bluetooth: hci0: command tx timeout [ 114.861608][ T5157] Bluetooth: hci2: command tx timeout [ 114.864019][ T51] Bluetooth: hci3: command tx timeout [ 115.000536][ T5959] random: crng reseeded on system resumption [ 115.144385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.355138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.598322][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 115.796145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.938479][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 117.256674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.265525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.550688][ T5986] input: f¬ as /devices/virtual/input/input5 [ 117.649242][ T5990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.506009][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.784759][ T5995] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.973191][ T6030] process 'syz.0.20' launched './file0' with NULL argv: empty string added [ 122.903738][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 122.980824][ T6050] netlink: 354 bytes leftover after parsing attributes in process `syz.0.26'. [ 123.828961][ T6067] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.494829][ T6075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.821989][ T6091] netlink: 186 bytes leftover after parsing attributes in process `syz.1.35'. [ 126.428493][ T6098] Invalid ELF header magic: != ELF [ 126.562514][ T6105] netlink: 338 bytes leftover after parsing attributes in process `syz.1.39'. [ 126.589373][ T6106] netlink: 338 bytes leftover after parsing attributes in process `syz.1.39'. [ 129.362990][ T6125] netlink: 330 bytes leftover after parsing attributes in process `syz.0.42'. [ 129.479698][ T6125] : renamed from vcan0 (while UP) [ 130.317991][ T6024] ------------[ cut here ]------------ [ 130.323758][ T6024] WARNING: CPU: 1 PID: 6024 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 130.334267][ T6024] Modules linked in: [ 130.338382][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 130.347632][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.359661][ T6024] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 130.366418][ T6024] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 130.386257][ T6024] RSP: 0018:ffffc9000454f9c0 EFLAGS: 00010293 [ 130.392483][ T6024] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 130.400675][ T6024] RDX: ffff888030f23c80 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 130.408744][ T6024] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 130.416859][ T6024] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880326a9b88 [ 130.424953][ T6024] R13: dffffc0000000000 R14: ffffc9000454fa58 R15: 0000000000000000 [ 130.433009][ T6024] FS: 0000000000000000(0000) GS:ffff888124f66000(0000) knlGS:0000000000000000 [ 130.442084][ T6024] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.448837][ T6024] CR2: 00007f4659574860 CR3: 000000007eb7c000 CR4: 00000000003526f0 [ 130.458031][ T6024] Call Trace: [ 130.461366][ T6024] [ 130.465532][ T6024] remove_vma+0x88/0x160 [ 130.469944][ T6024] exit_mmap+0x511/0xb90 [ 130.474622][ T6024] ? __pfx_exit_mmap+0x10/0x10 [ 130.479451][ T6024] ? __lock_acquire+0xb97/0x1ce0 [ 130.485029][ T6024] ? arch_uprobe_clear_state+0x16/0x150 [ 130.490691][ T6024] __mmput+0x12a/0x410 [ 130.495388][ T6024] mmput+0x62/0x70 [ 130.499570][ T6024] do_exit+0x7c7/0x2bf0 [ 130.503821][ T6024] ? proc_coredump_connector+0x2d1/0x4f0 [ 130.510052][ T6024] ? __pfx_do_exit+0x10/0x10 [ 130.512072][ T6149] Unable to find swap-space signature [ 130.515062][ T6024] do_group_exit+0xd3/0x2a0 [ 130.525176][ T6024] get_signal+0x2671/0x26d0 [ 130.529779][ T6024] ? force_sig_fault+0xc4/0x100 [ 130.534781][ T6024] ? __pfx_get_signal+0x10/0x10 [ 130.539711][ T6024] arch_do_signal_or_restart+0x8f/0x790 [ 130.545380][ T6024] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 130.551589][ T6024] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.559167][ T6024] irqentry_exit_to_user_mode+0x138/0x290 [ 130.565994][ T6024] asm_exc_page_fault+0x26/0x30 [ 130.570940][ T6024] RIP: 0033:0x40fff [ 130.574863][ T6024] Code: Unable to access opcode bytes at 0x40fd5. [ 130.581429][ T6024] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 130.587717][ T6024] RAX: 0000000000000000 RBX: 00007ff8e6de5fa0 RCX: 00007ff8e6b8eec9 [ 130.595930][ T6024] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 130.604023][ T6024] RBP: 00007ff8e6c11f91 R08: 0000000000000002 R09: 0000000000000000 [ 130.612108][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.620442][ T6024] R13: 00007ff8e6de6038 R14: 00007ff8e6de5fa0 R15: 00007fff7eef2158 [ 130.628570][ T6024] [ 130.631678][ T6024] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.639006][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 130.648245][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.658410][ T6024] Call Trace: [ 130.661703][ T6024] [ 130.664659][ T6024] dump_stack_lvl+0x3d/0x1f0 [ 130.669267][ T6024] vpanic+0x6e8/0x7a0 [ 130.673280][ T6024] ? __pfx_vpanic+0x10/0x10 [ 130.677843][ T6024] ? tracing_buffers_mmap_close+0xdd/0x130 [ 130.684002][ T6024] panic+0xca/0xd0 [ 130.687818][ T6024] ? __pfx_panic+0x10/0x10 [ 130.692371][ T6024] ? check_panic_on_warn+0x1f/0xb0 [ 130.697550][ T6024] check_panic_on_warn+0xab/0xb0 [ 130.702548][ T6024] __warn+0xf6/0x3c0 [ 130.706494][ T6024] ? tracing_buffers_mmap_close+0xdd/0x130 [ 130.712356][ T6024] report_bug+0x3c3/0x580 [ 130.716753][ T6024] ? tracing_buffers_mmap_close+0xdd/0x130 [ 130.722776][ T6024] handle_bug+0x184/0x210 [ 130.727150][ T6024] exc_invalid_op+0x17/0x50 [ 130.731706][ T6024] asm_exc_invalid_op+0x1a/0x20 [ 130.736598][ T6024] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 130.743085][ T6024] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 87 4b fb ff 85 db 75 0a 48 83 c4 08 5b e9 39 50 fb ff e8 34 50 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 26 50 fb ff e8 61 d3 61 00 eb 87 e8 8a [ 130.762986][ T6024] RSP: 0018:ffffc9000454f9c0 EFLAGS: 00010293 [ 130.769134][ T6024] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf3869 [ 130.777443][ T6024] RDX: ffff888030f23c80 RSI: ffffffff81bf387c RDI: 0000000000000005 [ 130.785446][ T6024] RBP: ffffffff81bf37a0 R08: 0000000000000005 R09: 0000000000000000 [ 130.793439][ T6024] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880326a9b88 [ 130.801440][ T6024] R13: dffffc0000000000 R14: ffffc9000454fa58 R15: 0000000000000000 [ 130.809441][ T6024] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 130.815737][ T6024] ? tracing_buffers_mmap_close+0xc9/0x130 [ 130.821583][ T6024] ? tracing_buffers_mmap_close+0xdc/0x130 [ 130.827627][ T6024] remove_vma+0x88/0x160 [ 130.831913][ T6024] exit_mmap+0x511/0xb90 [ 130.836186][ T6024] ? __pfx_exit_mmap+0x10/0x10 [ 130.840981][ T6024] ? __lock_acquire+0xb97/0x1ce0 [ 130.845967][ T6024] ? arch_uprobe_clear_state+0x16/0x150 [ 130.851543][ T6024] __mmput+0x12a/0x410 [ 130.855823][ T6024] mmput+0x62/0x70 [ 130.859754][ T6024] do_exit+0x7c7/0x2bf0 [ 130.863992][ T6024] ? proc_coredump_connector+0x2d1/0x4f0 [ 130.869769][ T6024] ? __pfx_do_exit+0x10/0x10 [ 130.874581][ T6024] do_group_exit+0xd3/0x2a0 [ 130.879128][ T6024] get_signal+0x2671/0x26d0 [ 130.883745][ T6024] ? force_sig_fault+0xc4/0x100 [ 130.888636][ T6024] ? __pfx_get_signal+0x10/0x10 [ 130.893701][ T6024] arch_do_signal_or_restart+0x8f/0x790 [ 130.899275][ T6024] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 130.905583][ T6024] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.911818][ T6024] irqentry_exit_to_user_mode+0x138/0x290 [ 130.917571][ T6024] asm_exc_page_fault+0x26/0x30 [ 130.922457][ T6024] RIP: 0033:0x40fff [ 130.926279][ T6024] Code: Unable to access opcode bytes at 0x40fd5. [ 130.932708][ T6024] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 130.938812][ T6024] RAX: 0000000000000000 RBX: 00007ff8e6de5fa0 RCX: 00007ff8e6b8eec9 [ 130.946889][ T6024] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 130.954888][ T6024] RBP: 00007ff8e6c11f91 R08: 0000000000000002 R09: 0000000000000000 [ 130.962904][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.971019][ T6024] R13: 00007ff8e6de6038 R14: 00007ff8e6de5fa0 R15: 00007fff7eef2158 [ 130.979036][ T6024] [ 130.982411][ T6024] Kernel Offset: disabled [ 130.986759][ T6024] Rebooting in 86400 seconds..