last executing test programs: 7.523618333s ago: executing program 0 (id=208): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) write$auto(0x3, 0x0, 0x5c8) (async) write$auto(0x3, 0x0, 0x5c8) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x17, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa155"}, 0x7d) (async) open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x17, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa155"}, 0x7d) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) (async) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) keyctl$auto(0x1e, 0x0, 0x0, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0x20}, 0x1, 0x68, 0x0, 0x24040080}, 0xd0) 6.473035779s ago: executing program 1 (id=212): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x801, 0x100) (async) socket(0x18, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x306}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x306}, 0x54) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a7042, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd11/queue/iosched/front_merges\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xc08) (async) getdents$auto(r3, 0x0, 0xc08) write$auto(0x3, 0x0, 0x5c8) (async) write$auto(0x3, 0x0, 0x5c8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x7) mmap$auto(0x411, 0x0, 0x7, 0xeb1, 0x404, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x400001, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x100000000, 0x40009, 0xdf, 0x9b72, r5, 0xe) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x6a) 6.461983537s ago: executing program 0 (id=213): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe07, 0x8051, r0, 0x0) (async) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe07, 0x8051, r0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/lru_gen_full\x00', 0xc0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x16, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) (async) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) (async) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) (async) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) (async) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) (async) socket(0x22, 0x1, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.113594403s ago: executing program 2 (id=216): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x3, 0x9, 0x17, 0x9) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x80000001, 0x0, [{0x2, 0xfffff3f4, 0x40}, {0x10, 0x800, 0x1}, {0x8, 0x10000}, {0x6, 0x8, 0x3}, {0x3, 0xe, 0x10}, {0x1ff, 0x5, 0x80000001}, {0x5e, 0x0, 0x2}, {0x5, 0x6, 0x2}, {0x766, 0x5, 0x800}]}) set_mempolicy_home_node$auto(0x3, 0x71c, 0x3, 0x7d1) (async) set_mempolicy_home_node$auto(0x3, 0x71c, 0x3, 0x7d1) socket(0xa, 0x801, 0x84) (async) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x10, 0x0, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x20040894) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r5 = fcntl$auto(0x8000000000000001, 0x26, 0x8) statmount$auto(0x0, &(0x7f0000000640)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x6, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x210000, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000], "5c9b582ab22b8c4cfca7d45b2030a0891595aa13ef78136b92d6e52a4250943de6033305ad1c3a8af2ee8a6c09d9aff0e6b327ab16afd80e86aea9eb8d6aaed01451aba49e002ac19db7626c2c318737140b347f76"}, 0x9, 0xc) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1b, 0x5, 0x8000000000000000, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0x2, &(0x7f0000000380)="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") ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r4, 0x80044100, &(0x7f0000000580)=0xffffffff) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd05, &(0x7f00000001c0)) (async) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd05, &(0x7f00000001c0)) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c1f43e50600000000000000001f00ac65d0449d1f543b69a2d036d82904564499000000af0d323f8ba071c3208a3976af1aea5ac3414ada538bb8ed0ef2d074168eb44e4b23fc8e2a036022dbf4", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf25040000000800070006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) write$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000340)="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", 0x199) (async) write$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f0000000340)="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", 0x199) 4.858315422s ago: executing program 0 (id=217): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x60742, 0x0) madvise$auto(0x400, 0x0, 0x1) fstat$auto(r1, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4610, 0x0) socket(0x1d, 0x800, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x1e, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x40000000009, 0x7, 0xffffffffffffffff, 0x3, 0x62, 0x7ffffffe, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) write$auto(r3, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, r2, 0x1) 4.239963839s ago: executing program 1 (id=219): socket(0x11, 0x80003, 0x300) (async, rerun: 32) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/usb/drivers/snd-ua101/remove_id\x00', 0x181842, 0x0) unshare$auto(0x40000080) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20c8c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) (async) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video57\x00', 0xa240, 0x0) ioctl$auto(r1, 0xc058560f, r0) ioctl$auto(0x3, 0xc0585605, 0x38) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x80802, 0x0) (async, rerun: 32) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) 4.094355663s ago: executing program 2 (id=220): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3b, 0xa, 0x1f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/tty/ptyc1/uevent\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000001c0)='y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x2, 0x8fd6, 0x948f, 0x3, 0x15f4da0a, 0x3, 0x7b, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0x32fa, &(0x7f0000000240)={[0x9, 0x5, 0x3, 0x5, 0x800, 0x2, 0x5, 0x1000, 0x9, 0x9, 0x8, 0x47, 0xd, 0x8, 0x5013, 0x1]}, &(0x7f00000003c0)={[0x9, 0xa, 0xfe, 0x2, 0x4, 0x2, 0x8, 0xa, 0x2, 0x69b11ec, 0x62a10e5, 0x9, 0x0, 0x7fffffffffffffff, 0x9, 0x7]}, &(0x7f0000000340)={[0x9, 0x7, 0x6000000000001, 0x3, 0xd6c, 0xc, 0x0, 0x1, 0x3b4, 0x1, 0x6b68, 0xeacb, 0x26, 0x99, 0xd5f, 0x3]}, &(0x7f0000000180)={0x8, 0x51a}) pkey_mprotect$auto(0x80000000, 0x0, 0x7, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x808000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(r3, 0x1, 0x8, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\xb8\xdb2\xd3\x02\x00\x00\x00\xc7k', 0x800007e) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x7ffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf2501000000100007800c00018008000180000000000c00020006000000000000000c000500f7ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket(0x10, 0x2, 0x0) 3.399188165s ago: executing program 0 (id=222): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r1, 0x4b4a) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x7fff, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/blkio.bfq.dequeue\x00', 0x8ad00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4087, 0xff7) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) 3.130415946s ago: executing program 1 (id=223): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x5, 0x7, 0x15) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb5, 0x1272, 0x8002) sysfs$auto(0x2, 0x1f, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) close_range$auto(r3, 0x8000, 0x100) r6 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r5, 0x3, 0x0, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) sysfs$auto(0x8, 0x0, 0x0) brk$auto(0xffffffffffffff66) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.005100021s ago: executing program 3 (id=224): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4004040) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x80200000) sendmmsg$auto(r1, 0x0, 0x200004, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) read$auto(r2, &(0x7f0000000000)='SMC_GEN_NETLINK\x00', 0x45a) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xdc, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, "40dbc5e8cf0bde425a85f0d4334eca515e97563795250d6f10fd1fdcec80b53d9886642721da0eb29b1b7e3026097def72c9428db8e5fba170157d212f68c58672ae3d104c800aa8f9e38cf90995327a224d1857a293c5c72ef5b4cba4e3df959e7eaa2cbf419700d79c8717e30adbd10baffe4d8c7e96bbfd4b60f25d15fb0053917308141d42483b415a94269a71ce9330f8303196c739b7d292b8d7666ac6c96f4990134bdd08e40abd2609059c26e1cf73fb31cb509f539c2b4157fb4f25bedc5ae8af"}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/swradio3\x00', 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) getcwd$auto(0x0, 0xfffffffffffffffb) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) open(0x0, 0x22ac2, 0x5d745cb200ae4d7b) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) socket(0x2, 0x1, 0x0) r5 = socket(0x11, 0x3, 0x6) getsockopt$auto_SO_TIMESTAMPNS_OLD(r5, 0x1, 0x23, 0x0, &(0x7f00000000c0)=0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 2.838694419s ago: executing program 2 (id=225): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9c") r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred, @raw=0x8000, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)="1783a8"}) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x78, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x50, 0x7, 0x0, 0x1, [@nested={0x2c, 0x7e, 0x0, 0x1, [@typed={0x22, 0xbd, 0x0, 0x0, @binary="a7379b928b2fe53f4a96cc49fa078eb62dca03ca1694ea60fe7c14e53bd8"}, @nested={0x4, 0x9a}]}, @nested={0x20, 0x3b, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xf4, 0x0, 0x0, @str='+&+\x00'}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1700000000", @ANYRES16=r4, @ANYBLOB="000228bd7000fedbdf250500000007000a007b5d2d000c00080007000000000000000c0005000100000000000000c0000780bc001500302137a9e1d1f6f465e7b5ea737a141e7d0dffa0ae07279f954c91fed78bf096aec08879b327de084dd01d906c867b790b16d1f55733fd277fa4e762428b7bcf5c031942400d1df0218ab1e61fa8e20320b5f511028f08d9ef3ccbc7005b58d818724409ee013adfd6253eb309d933da1588412e91def926938dfef2b341582487ba2a326dd81877faf5f0e3cdd55cc03aacc012e5e83098c9afba210ccb1ed5223d1562e0033486f411b783a1e20ce3d768a4c9d162e0bd"], 0xf4}}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x121641, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000280)="5fff575a2747b07cd670b8e58610c96d64ba76b6a60cc9bb1796ae711afdd441fab265037d00077ea24bbfc6e776cca12c7aa02bb1ff33618736aa4b3bb525987d076bbb472da95efc") mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, r1, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x4f4, 0x5}, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r6, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) lsm_set_self_attr$auto(0x988, 0x0, 0xe7eb, 0x0) unshare$auto(0x40000080) 2.141500904s ago: executing program 2 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0x1a004}, 0x7, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x8) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r3 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f00000000c0)=0x2) r4 = geteuid() setreuid$auto(r4, 0x0) sendmsg$auto_NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1a64, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINKS={0x1968, 0x138, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x3a7, 0x124, 0x0, 0x1, [@generic="dfedcf0fb3e15e1fba7b5f3640574f293ba61f2344ae66380d91513edf903334e2d715a0531693ecd8afd422c3ec9402cd1600f6c1685e03faa33b8796fdb9740f6fe0fac7f3a6a0f0db5f93b61f4ad14bbf18845ad2b2e5d8e5211f9fb7533af73b021236362f", @generic="934e1ea6db5ebad43b770ffd1721ebf6d2e74e5b1dc8fa2b9de76dea9a9c98c7199d37d6c5a32a6004ee3779c93d10904c72d16bd9d8eedbaa440fb3f7e4e5753b5f1f6faed5ac0158882075ffe2a6d88d77a8decb3a594bbc8e466f6926f3b3f24b7c7c97d38f34906f345d817ef8d78a4eadf81141ba5a4ad84e673a91ff9d76d97b737174f02ac33a890cf980fd8c5f6310847a600dc671e5715c5b1ddac1bcc14152c1ea74922292352914b2060e7e07c0b7589b4456c5a4e3603ba89b273ed4919b288b7709a646aac11865a051d4f5d22dea1a18a95cb2754576921916ba7f357314b21034", @nested={0x253, 0xcc, 0x0, 0x1, [@generic="51c6acd19af7e0cfbb6308c3b36aa0ba1023d3241d9d4595e4086c0e374a7e8ff72cb595ecccc2962a7f312e2c10f7f9b53d5ea6f946f51537b6d3760b2c4c45ab306f", @generic="bc7e94f6f9ed4fa622dea8289360725fa16f97b0f932679bb3cf39c11de3cf25c1abd25d9bc9cd530722b1fbf5b59def80ea3f5735533838f802ff90980b9b3b74cecc4f89f71793eeaf17e6477790268cbdbb5665677b06befb05306c2b3936006f45e1d76727", @typed={0xc, 0x73, 0x0, 0x0, @u64=0x3ff}, @generic="8158bd201ae2c4408e60f8024e92cdee3faa586c3e3b6c67612009d97f0476a03e18629e08570e73", @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@remote}, @generic="f269fddbf4a0e0430bb33563d52c97efc8ff4c5086d163740a5a37d3057121fa4298f6e84c78d0b076eab70a75f56907cc59a23a189490eeee1df3efc766d1b2162ee8a12066daaf04524d9a37d074cb6cf3c0dc77", @typed={0x4, 0x75}, @generic="e1ba5fc990235b8902e5cf9f0dc555870bb0d11bfbf110b87db9acf6e7964e32c09869df4f3a874803dd8e0b19db635906eec812d5d94b051b3e21f4d0ef81c9595bf5fa6f740b01f81b76d51650b3c0538e51e12b1cdcd9fdbd89b53361", @generic="67e0d229c95aa86757fce14d325a37f398b5b53f9f12ba4f8f3c580a4308ec18c68e1293fe3ed9e341dd947a4e6f2e3adbc8245c1f05e46dd7b372bdc8008fb6f5f0c72c51883122e996442ae84f87c3727835c8e76ae4ab9eb08057e795dc9608576a96e06e2db0f58bddc08160561e175b38031caac6c95fdaf943bc53c2f1426333948608de2151e88a439ab154bfac85496efed1f0581bc8933eea20c9d20a002539cde8fc05a8774a1ae145ae82b5de"]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffb}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@typed={0xc, 0x11f, 0x0, 0x0, @u64=0x6b4f}, @typed={0x8, 0xe, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x9d, 0x0, 0x0, @u32=0x6}]}]}, {0x12c0, 0x0, 0x0, 0x1, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_PMKR0_NAME={0x2b, 0x102, "33b2bc24a914f7585e3155015f4bcf5715ed52f511831f76fb5ad976c47b340c59c783dc2b76cd"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1278, 0x2c, 0x0, 0x1, [@nested={0xc, 0x77, 0x0, 0x1, [@typed={0x6, 0xdc, 0x0, 0x0, @str='\\\x00'}]}, @nested={0x1126, 0x21, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @fd=r0}, @generic="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", @generic="b93147dc028efc44eedf1ed2be75759908292da841d2177d3144f2076a7a3dfecfb7422c545940de83621df3912c68d06e25664564c349790a5ed21cab14f0d26fe11ce0924261343e343db92ce6b2f390aa3000b04c4371f5e763becbf8e58bda2a556151bcb8d0f3370bcbba11211c58e4947e9cdf4e097f69d27606273e6368a5ba5efbcf1c56460ab3ec13175275b35b7773c645fb207e18b3152addcfae9944dd13400ec1c263e9cb810844c49461a4e5fa46c842eca632f27590482d39d0156fc9fb3bfbd85d53", @generic="19dd80621b84c8bb99d76d23a1ba32b5dc7795729ac87b6ff7ccd6750b73e36b08adc60ca862dec3eb19813c79c28929c4b418dc3a2ad31f1b552e7cc43d0af8", @nested={0x4, 0x103}, @typed={0xc, 0x13e, 0x0, 0x0, @u64=0x1ff}]}, @generic="79e5f136764a899578683e56a662b38bac964f44d90cfe1a096912cccedd5076250b0c6f8f063ef935846a3f933269b001e744ae66face02bae67de3dda69f0affa24bdabff35c529a011c1437d7dcaeeaf70843932fcc2410825ad4e2153b6cb2a570ee8c5a26f4650c5c7f1dd36b36937605ed4c9d47b5c61bdfec8ae66ff9d83eab743f77c3ca7443f38f4035b921745215845657ebdeb45e2a2cec6d8c90d9c609c21ee9bc34c6fa12e6e5f6996fd181b775323bc5d18243f099bf93e2c030d511e109da30c9c7dccc9c2e38b2", @generic="9ddaeb9446129f61499a24eb68e3adbb5b3b7af5f7575bff490585ea5becbdea9a70fc35fc0bdffd5ac25f5d97a30258e10cacaab74b7855eea820e9359a2938ba6da3534f947f63e35f8a1747e1c136aaf0518e0641b2f5f5ab1291a809a76de80efe8b4b2cd9545629b409cb71da2f8f"]}, @NL80211_ATTR_EPCS={0x4}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_ATTR_PREV_BSSID={0xa4, 0x4f, "34ffd1e0b4b7f5ad419fa74ad4513c6c07dda8d682e39e06e9d2e8aa4ece850331ed8f6529a3c58966cfc7fce1c376b6398f0e3c9c2adaabe570714a242d9ffc30f747b7027f0eada06151120509d0b263a4606a4887d530532ad1f435942404913b3f023e7ae626fd386c4dca48f57eba2e5c44ea36591b778e417c040de952efca9d93b3925dd5e1f2cc136aa36ce3a22d80ed4492d6dae3512538f91c8456"}, @NL80211_ATTR_KEY={0xff, 0x50, 0x0, 0x1, [@generic="1e626abd0742b35509d4a31fac9a30109ed6f2093dcad4510479812d57ec3859b0ceb041428b167e59bdd58b0e41ed0c233f30231ceb09c90ca6bd8205efffee3a8931cb2d1da044a4415300d89f48cbb0651ffce5b6a42e531d84145b0b653f04fdea1e53b37946eabe954a48f30e9b10f42b54e12495167905f7b13f95af6de439480db65a3e140a", @nested={0x29, 0x21, 0x0, 0x1, [@generic="71ddb10792c9231a0db852847b71ec70085ff08d4ae2b81f9445857d103c090e4d64e130c9"]}, @generic="8f978399a683b05fb82fa50f9bf903f9696effc3d035411c02e3225fca23e401e6881abab08129c9b29412d7a6229e0a9a1441668027c23a8d0c354c6ebec2476fe1fffe03df"]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x53, 0xbd, "bd67a67fb8d13b3fbeb7e691cfa525639d34efa3819622df4fabdd2c344248092489679263946db2df660212a0cf74ed57dc11f88b23dddf772784bf03fe18824ef584d89675efb6c78d9c79a04c33"}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_ATTR_MLO_LINKS={0x8, 0x138, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0x12, 0x1a, "211d993a5314ae2c5299b257d6ed"}, @NL80211_ATTR_MAC_HINT={0x83, 0xc8, "47a9a73540c2fe8c43f07b9e693ca0559bc0193fbd976287415af872abf25a2808d97711026cd2f7f23db4bc103d5ec26dff99adcdd5e52cc7e48d467b544189064b558ba9458a2e39e6511fa9b49eee1d5949d42560d3c06550c33a876fd12b3f804c397508547330ad475aacb220116a9791e654c3ff5cad1a4b37328b66"}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x4}]}]}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x7}, @NL80211_ATTR_EHT_CAPABILITY={0xab, 0x136, "c9c8f5db67f96a595f76ff101fc2082f928d1306c432bf631dc41cfa64cd9dfa8d57a99a42d713e742537c31691d97711cc0f9ce2e42007d1a5146ec2918c7ca5a38c0e9a2a46553d97ada9f6d8c7ada6fc661569b3976d8e37bf2d89455208e62024d99a6247b4b3058700e1be20d7df456745f610b6efc828427109ca1ff10df3d63e5dc500669bd1646f02e02fbfcf40db6f2a849ddca1081a908225cf55a383b46e105f88d"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x25}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x4}, @NL80211_ATTR_WIPHY_NAME={0xb, 0x2, ',}#\'-]\x00'}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x36}]}, 0x1a64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4008000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7008fedbdf4121d8d500180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 2.138872283s ago: executing program 3 (id=234): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) ioctl$auto_TUNSETLINK(r0, 0x400454cd, &(0x7f0000000000)=0xe) 1.889674918s ago: executing program 2 (id=227): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r1, 0x0, 0x400007ffff000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) select$auto(0x4, &(0x7f0000000000)={[0x60ad, 0x3, 0x2, 0x7, 0x8, 0x3, 0x7, 0xce, 0x2, 0xc87, 0x2, 0x4, 0x9, 0x2, 0xffff, 0x5]}, &(0x7f0000000100)={[0x5, 0x1, 0x8, 0x8, 0x6, 0x9, 0x0, 0x5, 0xf8, 0xffffffffffff402e, 0x800, 0x60000000, 0x40, 0x4, 0x87, 0x4]}, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 1.81235099s ago: executing program 1 (id=228): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x2, 0x73) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto_IOC_PR_CLEAR(r0, 0x401070cd, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) (async, rerun: 32) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) (rerun: 32) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x2) (async) sendfile$auto(r3, r4, 0x0, 0x3) acct$auto(&(0x7f00000000c0)='/dev/vcs1\x00') r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) (async) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x0, r7, 0x2) (async) io_uring_setup$auto(0x7, 0x0) (async, rerun: 32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file1/file0\x00') (async) io_uring_register$auto(0x2, 0x1e, &(0x7f00000001c0)="8138034e72ac", 0x1) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 1.639255781s ago: executing program 3 (id=229): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x8c00, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xaece, 0xffffffffffffffff) fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r0) close_range$auto(0x2, 0x8, 0x0) 1.385511283s ago: executing program 3 (id=230): mmap$auto(0x4, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram14\x00', 0x28201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0xd34, 0x9) write$auto(0x6, 0x0, 0x100000000) 1.145145557s ago: executing program 3 (id=231): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) (async, rerun: 32) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/oops_limit\x00', 0xf22437c73014b776, 0x0) write$auto_console_fops_tty_io(r2, 0x0, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) (async) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) (async) r6 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) setsockopt$auto(r6, 0x29, 0x3, 0x0, 0x3) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) (async) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x14) (async, rerun: 32) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000340)="6123acd61ce9bb413778ff6c49e6d46a3cab95ae752d419d1c771de8a273734e8fc1e722160ea3c2d41e4c2e15cf8ede75ba9a1da6789b2d3832e39567c7ce957ff84adaa3a32cc97cb2426496d8f2cdc8d63cf308e84f7dd6335b90817550b8f685cd49c926f60f2111fd9cdefb516ed2769c10f32f6ba7c2645667b294db585338e25f48269ae3ac224d6b1aef3aae19829af86b33c49fff88bab99380c3b1c938ccb9e4f08ace0882c7a2c77ff914bba77a9e8d8d69ba4f9e", 0x9489) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) 598.704639ms ago: executing program 1 (id=232): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cmdline\x00', 0x1, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f00000003c0), 0x7ff0bdbe, 0xeb90, 0x2, @stream_id=0x400, 0x5, 0x4, 0x0}) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x5, &(0x7f00000000c0)={0x8000000000000000, 0x7ff}) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r2, &(0x7f0000000100)={0x0, 0x3}, 0x1) 463.495849ms ago: executing program 2 (id=233): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nbd6\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100009) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_setup$auto(0x2, &(0x7f0000000140)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x8a, 0x8, r0, [0xaa, 0x4, 0x6], {0x8, 0x7ff, 0x9, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x477, 0xe, 0x5, 0x6, 0x3, 0x3, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d02f2a4a15079a0895c4f98056deff5e1efabb24d73bfa2b3", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x800001000, 0x8001, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRESHEX, @ANYBLOB="383f15060553487c8344f3bb6207436050b65846047b87ad7a831cf9650d069f482c4ef959f28c27df3f1faa4bba3626b2"], 0x18}, 0x1, 0x0, 0x0, 0x10001}, 0x400c005) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x100000001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x1, 0x0, 0x100000, 0x266, 0x7, 0x5, 0x8, 0xbff, 0x2c, 0x9, 0x7, 0xfffffffffffffffe}) socket(0x2, 0xa, 0xe57a) 278.604941ms ago: executing program 3 (id=235): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio1\x00', 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x11, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r4 = socket(0x2, 0x800, 0x4) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r4, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0xfffffffffffffffa, 0x80000001, 0x7440, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x81004, 0x0) preadv$auto(r5, &(0x7f0000003340)={0x0, 0x40}, 0x9, 0x1000000005, 0x100000001) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x0, 0x12d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x800, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffff}, 0x203) 261.819239ms ago: executing program 0 (id=236): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto(0xffffffffffffffff, 0x7, r0) r1 = socketpair$auto(0x0, 0x7ff, 0x0, &(0x7f0000000040)) write$auto_proc_mem_operations_base(r1, &(0x7f0000000080)="802eaabd809a5806b8873d5188787d457e265c58ff2dd853ec822cedd2346737dea3c65759ce53efc561f49554c837d0ea24acf126417149038c4acdeebce63fa7a34627a5df874ae5ebabaa569198c195aee5e46d0845dc170e4232fe60d770e631f6bd399fda33992ea7b534f33fa3ab5798d6296f6086f70f8116a042729cebbb30f61c1a1bf88dc6fc65fb940c91c510ecf32825c86e2585b0d5520d11831f4f599a1c08d474b2b15040f58790", 0xaf) r2 = ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000140)=0x2) r3 = ioctl$auto_TUNGETFILTER(r2, 0x801054db, &(0x7f00000001c0)={0x2, &(0x7f0000000180)={0x9, 0x3, 0x9, @inferred=r1}}) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = getsockopt$auto(r4, 0xe, 0x9, &(0x7f0000000200)='.\\.-}\xcf,\'&/\x00', &(0x7f0000000240)=0x401) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xa4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048c4}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), r4) sendmsg$auto_NL802154_CMD_ASSOCIATE(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x80000001}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13d4870c30fbfd0a}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000805) r11 = prctl$auto_SIGCONT(0xffffffd7, 0x12, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000740), r4) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r11, &(0x7f00000008c0)={&(0x7f0000000700), 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, r12, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_LLC_SDP={0xbc, 0x13, 0x0, 0x1, [@generic="806207a790e2337238837c2d79fa3dd70cf48005b34743b91eebdc646b76583994db03ca7b60e147d049d71a25e3fd480be10719cf92c2d87f82ca83221f241d4d09c524660e13ecf63498b88ce55842c1a0b3fcf7b66dc64da7a07c008bd6a1267e86947fe588bd6bd1de06bec4a8af86b0d07aeafcd56cecb99ba20d1c8a4b89ae787764248555d79e82450f1cf0aea5457dfb2803063f96b5cb02bd0064af051f2c2d730819332c9b0afd14e26b78a63dc012feff9d9f"]}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, ')C[]%:'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x41}, 0x48800) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x28a000, 0x0) read$auto(r1, &(0x7f0000000940)=')C[]%:', 0x5) fadvise64$auto(r1, 0x7fffffffffffffff, 0x5, 0xf) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x400, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000009c0)={0x8, "e6d19f952f755748bcb14ec33e36ff7b27cc58c5925af2bac2dfc1b11b271eb0", @inferred=r2}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/thread-self/fail-nth\x00', 0xc40, 0x0) getsockopt$auto_SO_PEERCRED(0xffffffffffffffff, 0xa00000, 0x11, &(0x7f0000000a40)='+(/*\xf6\xb6\\{+[\x00', &(0x7f0000000a80)=0xe597) getsockopt$auto(r4, 0x80, 0x0, &(0x7f0000000ac0)='veth1_to_bond\x00', &(0x7f0000000b00)=0x7) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), r13) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, r14, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000084}, 0x2000c004) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/debug/ieee80211/phy18/force_tx_status\x00', 0x280000, 0x0) 30.141825ms ago: executing program 0 (id=237): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x10080, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x36c, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x4, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syz_clone(0x2000, &(0x7f00000002c0)="3e83ef2ee40b45e8b883f35b3d070b94098e2a816e9f7ace73295e0619", 0x1d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000600)="96548d6ccefd9d27be1f67637a6f1dd56c2ba01bb1821c6a22b9de8427151edaf0826e31feb5a1906543d9e0a3ad586de5b209582527020f37e7ce5e0c1b6c738d7ef68985a32febf9e06dc59e1d27dcf16b438fc0d053e8a178b751e7ad95b1a3e2b537566dd16baa078ebd2932cd2cb4a7ae2a7d60e4a6735c21ed7607c78809cd2a1916b8a87903da20c426c2ec3f3c0fd995da7a90252eda66adc89540d5c3d38bd7aed6f916a9605750338f23ce7d02d134e5a69d721e312b68e69753ff8ec25d62bb9968cb53ae19af33192e06a9a7c802d7607b840aee6a45a77be7f3f2a13f1eb9f4db681c3454dc89724d7e00a7f5565b61ed2fd9628b253ee9e08a7af3c2fc9442e1c7c1fd0d206b1a867bdd02a9b5a0091934fb0d75d8c108ecf4f3fcac86dee9a5b92d551d4902ff7eafdaa1ce8b40b31b6e327d8793fe2b3c5781cd71885ce22cde9a91e6c1ee493d9d9bf282efbf83f48cb5fceca2b1cada29348a24ba819ace52a6f66f7178e165b6a71eff245123f8c8c46ef300bfe97bb5044bf3d810ba589cc1b0ff2143005281f7eae95a55a60770e829173e35375fab5cf08bdf20fc7c65c66e87815a186aec0c60becbe5e99cddd9a52d498ccb67e4367509b13342018aef87f0bb70ea3f34e3ad86047672bdfd26b7547c7876f7baa763ce1dba6a927148b611a7317136f7a7af2ec5222a87899ed515b94c24abf46acb95aca589094250236a51e15829a4ef1684982d1f649b6389a2f4d63edbc73ad0a754dbfcaa5c4b70d1ace7231c2cafb2ceb4de3aea5c6c1832e36641836ddebead1373f9370eca6f84932807b966d9f06dec56cf0c8be5b4e97a9fb4b5d3f2285f51ec5cabb2ac1c606611cfa04755d5a5d53d9e05f10b857b978696bc56391550fddaf3b35d0c9d4f96ad185660680ea4180012ca8f84900e0b3db074dfffee746efd8591015155efb65b5c145117a07f4caf74e41edd7dbf6f2fefca0dcec2971538b65546e56763577c5af71c8be49f871217e874e6117467c3377249010ec79dbc1febc1d8467c7b3e64b634c980f9a8984b90c14cae64d93d7146facb3387dc9b1b4130eaf625494970f328f73c007a5243fc28747b8b51e83458b7674c783f3296ebb74a7d38d60d0444846f03d27eb45780b54bb6b57928cf170eceeed187a9baa20691c1f4bc55b4bf8314d4150974602910715595c37c0892335a9bec012f3897cd88f2d55594263092d69bddff5a0691a6c021f4216ffec39343025c84bfe258334729cf7d96054696f707a091b1f562e6da93304dc1e96fd82eda9600fa2df165216a51fd557a4d0fd282de33f2f21147fe3df8a081368649db3b5a01e77ec78b144def385095a5712ccee6e938317f19b5d8682341f70ffc687fbdb0416bb4a925e633b86715b96a33ea681c43c48fd3eaf085b2b39d10122555601aa514b1572fd330bef1a75e525a89ff6cc637f91ad6173fb214b1552a9e00ee34bd54ceecb06437fc3b27683b65ed51efb2ef94126f9ff9b14d05beece83d218de946c8c96c5c5de6ea5ec6bebefcb3f3b2304341dba67a41e101a92a4faa80ba937ea37933dca6761ba5ac8149de341a2194d3fa572ae7ab9370ed6a637defb9fc0562dc1792cedc458b2b724611b63abea93fc54b7a0d36be19722455a51a138ae9042d555f2658557b5048c89bc6edd007b8d6190ae5f1b10a4e403731d3cb909ea5bd645ea40a6f217ddb1f801097a0ec70d2118fe475ce0debde877ccbc1ddec8e8bb7046e153b9758780a0c97bdc20bfb393934f27068dbf5b858a85965a2d5c5e029daa7e10ec7ef27b2a4a1108f8a328ed4ef425fadbbb52c14f29f38231c7dde823a6fbc0c0ccde10f3e87004ba5c8b5fe25cbfa34ad706a492d8b0d0e9db06c59ec1a3716033a886ce1e6b9d97a081478d0359b58315891f245d94e0ff3602d3701f0c4b1d52aa0675025d3fe8fa717f5bf2d8fab745d13cec21e66b00d4c1e778f01f5b0d8f55c6d36fca3107cbbad93cc0cf6ab5c9af96017995ff561afd086403763eb7e9d87f96aae8f74b3f97682eb22a360e7aeaae4b59df52567d440c9ee5f7a17e19d24db15312ed1214565df5980130833b5c1dd7c05d07af820b8fce00d7a7b15a4e3e6280e7db640d2691fe75130ffab708752a10d92eab4701ca48b3147eab6ebc73b36db4c57b31cc41e217b28179511ca630da6888f561547dcc32793f4532de2fbfadbd869a23632b6ea5db0b41c093660ccefc96b004fee9c31dd330fed18a455b24acfd29d719b5dde9fcdd527165fddcdfb8bce8ad137e8a98e2642b683b31bf2b1a085080d374577b3047506ffc9a15584e227cc7b587c2cbc68b614b0c3011fb1d056441fbbbd71414efa6fc4dd998ec4e5ead8462709f1b3f754721b58f6130b4b8f38a38b770182186494a8ec317925410e172d2d5229613e490d69f88918cfbe89f9612b6bb09af3ea044c01a1cbce2e3433fe5cf8ae35c69e33a5fbd394b7c379babd6c320917cb94ed3af988013b9866ba6d28c94640a7ab4ff43922198fdd99a28b8a27897ce35239f623f90e026ceafc718122c22beb4a9470304b74a54675002826d7c039f6a0e032b45fc6bbb9c4f82eed37250099480c941442f889b2d5663988228ea1450f04a6714dae17eca4987e9b7504bfad95c44ec8047fde8a150119a6262a093be2f8e397a5bb2ad5bc03e68f71b434c01142e70e082955d087f082797d4826f016277efaf18c2dc06e07b178a8d7a9575235f731be80489d60f2edbff73e8c0b28ad040e9dcf621a3ff066da8d67c534ee8e350f3c574d23d1b62f22ed80b80db3a72137baa77f80cbd618d9bb6ca54acbdf60ba389d6fdfaaefe1922904a4e122382d06136cf4ac25298b44ac696c0249317433633791b04c6031f013eceaa18e5afad8eec00eb5446ee35479860393c4f05dd2382b3dd38d306251daa3d5341eff564ead5044203f95b82507e43bb40b44c418dc6d4472f997624ed58955ff45b894e6b5508b74664583dd1453d68cfbfbcce1a828fb6fa0c15c9dbcf12dd742a78fb2d6aa086de02b48f5694dbefe8e0fdade9280939378f3369d7acf65e8dc1b7948dbf7f2c1d0d7de1eab5a7c36de2fccd4ac3b5cff5ee0a20e5647a57e7e6895d4ffba0b1628312ad5688565cec2ab6020004f6fe8224c27ab52406c3a3bed58d664c13974f04d0eac4ea9e96f21636b22576c78d5c5eb91d54afcbba0b990bcfa49fc835ab8f116ea83dcfbf9543e91231a1eb884e4c8b403452f82d197f21ea6ad89799fc8798e8319752a34aff85283f1be7f98aea69a4e05137aee9711f2ff9d075971078c8c5aff10697468c4fb29e36414bddafc01eb2f1eafcfa2463e4c191805aa2d66bf2b951530004f3af1b700452d2417f1d0aa67903629c5f21ec6f0aa94e66c11427f5fe8dc786cb3d8db267bf17d6d09521fb6a3445fdec0c439a54e3a578ca6e16ec27a68adf5712fbc4065a9c7280a6001ac4ca08b3b84a01983c4270098dd7b181216f53b43cd319953dd44201742d8500072c047c7a64305db2b242cec09dc996086007e7d23fc60ffba91c16572c68bf4759aff97a05d5caf842de6dd76633aadf4540dd6b1c17b7a919ae34ca5b00d290fe823a6584c2ef27c39f7744aa3416a0a637060cc025bfdfaac4a56f79c7b03d282dddcd02f0d2b703e4a6ec68056bbaa5e45cdf8cb2a9d0ce60460e81eb55fa4f18bad95ca0f95d7103ae66640ae549b21f9011679a284aac9520a5e57d3177fb7bf5a4a13e0770efa7293fa4649316a24fb1a23c456f12e7d2216ce631d22351dfa78c202852b6a9c3013262f5903f1584fa4a2d8a1a7e9c133eeeef5b6f7177aae658958e40ccbd90f0dace8745583d99b86076648427e33c8c2f47a380940ed38e2d37f07445b4a254c6037419ebf704f57a185d5866ebf9c2022a65668c56fdd99f66bd758f27c6298449071e670ab782f64740a980b848bc68084ba825372d3756b86c03586a8c315767b19928eddabcf07784d7d62645b449cf6f682d7459e5eb8a3661c376f9d9764a3eb25ec42a44147f3867aa3460435009ccb53764b18d58af3142720669ef677d3a1925a9d46ca3eb9e42d4e5bf4039b6986ddd76db8ec1fbd262bfd4a91cb98e2704842b466b7adcd049ff6a7a9192e494b5dab58bc0c0c22615d4b9f85afa329632d8baa85be73ebe5e94028772d15115e78b3c1fa95e2eff2baad94ee9aae1a8acc2718c9e85740582939f0f001dd564f058cac9e8ea5ce57f2d7649fda0573da20e6b859ecbaaea68335d9b82f9e80ede5e21e4f0f1cdb2b24c0c64b43019168d1d172644ec8b2ab3c01b9a56df8453dbe86fce7fdcf7ef8cec00c1c68429897d1788eb6a1a705d99e7aa7c005edc77b8b53d6a551120c5478a28f51652036567c8356c2c15a19a321adf8d4105ef09860bfecda449fa4a20aa78a247a993b4abfa78421c997056ea6c204b344a784fcb07a7e449e166dac616645cf3fa6ddd4904147cd84ee7aba20d848a0896814e643cb209036e6baf875de411670998405f5bbf126b5d837bf6e444f006dce5888071f17581b898281bcf97a0fdd6ec366fa9aadc2110f85739c83ff9e4df181310984e67313fb38b76724ac84eb472788ba2988c7c152fbbf8570fa7b6e3d2296103de0301cee3fd9112065edde5ef783df3d32c2f1e8bd8214e5f4b53a38b888804b7fd8eea6adbf771511c651556d9bc1972283ee6417c1760188cf10e37aa2d8beb0708a21af4935e9a0f3203c2f663afca22e46d7e892c2373eaf740b779e1beb60efb92c3171959e0f9119a1d0d6090c381c3eb9a93cae8f3351a4ff54be9d327bfa8c4f583bf44e851a2abfc0178b8e254d4b1764eb0fc6c28a6c369d60acd5dfa586285496f19076df042c5339d3866f61d7296d359cbce277170c64d77c40d4c7b1a8ec5fe0d5e34677416febe3a565e196d46eb0cf17ee7dab46f4a13d675299e2ce36b071e714cb372f62ca73beea9e20e100d7ae0fcdc6b23593843313e594d3e4b4590b25f5aa1e98a04f21bac39fa407d4281a3a979202efbc7037a138c8a5e1db772fa8d48f6354c284af981567302effd7f9670613a4a8a572276d36b028bcbb0a98dba162d484bd9a8890189d2b38c7337f0fa1cf91a02a1548594bb24a22020c53898281b10573486f8e50afb86cd86d724e437d8a5fde8f5d06f335ebbdb278fcbbab9b933d9625362be81ca19129f7b69b0e8b08f23b4c6a6233775f586cdc8d9e1727aaa28c19e30298a1009fcb7644ea64863ef5c5b3f9c060b4017bcc78dc26e05c105356247f00629d5fb7169321e58927edfc3d206561ea04f80481cf1715e72e24891b84e38535d7875c895789b9879d334c16a695934e2184dbda75b6ef263d5f373a8840243a9a6d0ba4229e5b2563787721a86e3912de292789902294497400c656b60ae46449d72a5578fb2f472180e585cc08960b296269e666fca5ebf25bcb30609caf35f802247c417a9356109ff61acdd869c1348b6a12d953e4fc802e89240a537b1b3d9b08a517f2473ebcb9698df394ee673e56662b4f83841594d2f7faa0267f89e299037e2879848abc7f0ddf6ee3e69c733d50da5fe0568e2fc8385876480d907a4f48eb2e14cb4e8b332241a80544f151ce31116015547b7d270ecccec031dc9e6eaab87b070f78845b6411f456fafaeeedb7f20be2a700b3e7ae13c9af8baf351c5cef9095da9f5464c1e9c759c32bbbffdcf37a") syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r6, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x9, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 0s ago: executing program 1 (id=238): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r0, &(0x7f0000000340)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>0Q!\x8dIY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\xf8\x82\xe9\x8d\x86\x15\xa4B\xd3\x1e\xbd\x81\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfap\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)xo\xa3\x92\xa0=?\xde@\xb1\b8\xe1D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfaD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x99e\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x3) writev$auto(0xca, &(0x7f0000000080)={0x0, 0x1}, 0x6) setsockopt$auto(r0, 0x5, 0x0, &(0x7f0000000040)='\x96{)\'%', 0x6c2d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 74.540867][ T5855] cgroup: Unknown subsys name 'net' [ 74.711429][ T5855] cgroup: Unknown subsys name 'cpuset' [ 74.720516][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.222261][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.183469][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.192042][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.199924][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.218766][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.226545][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.330088][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.340228][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.352624][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.406444][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.414149][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.423270][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.431837][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.439192][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.450157][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.458639][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.512948][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.521636][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.530152][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.538922][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.546945][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.592909][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 78.771138][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.779153][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.786453][ T5865] bridge_slave_0: entered allmulticast mode [ 78.794065][ T5865] bridge_slave_0: entered promiscuous mode [ 78.806897][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.814103][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.821376][ T5865] bridge_slave_1: entered allmulticast mode [ 78.829057][ T5865] bridge_slave_1: entered promiscuous mode [ 78.919584][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.936701][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.998064][ T5865] team0: Port device team_slave_0 added [ 79.008603][ T5865] team0: Port device team_slave_1 added [ 79.085344][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.092866][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.119189][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.150552][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.157637][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.183839][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.254886][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 79.419473][ T5865] hsr_slave_0: entered promiscuous mode [ 79.426313][ T5865] hsr_slave_1: entered promiscuous mode [ 79.462274][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 79.473541][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 79.568880][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.576036][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.583359][ T5872] bridge_slave_0: entered allmulticast mode [ 79.590606][ T5872] bridge_slave_0: entered promiscuous mode [ 79.599197][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.606350][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.613679][ T5872] bridge_slave_1: entered allmulticast mode [ 79.620783][ T5872] bridge_slave_1: entered promiscuous mode [ 79.719185][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.740943][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.834393][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.841651][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.848908][ T5875] bridge_slave_0: entered allmulticast mode [ 79.855905][ T5875] bridge_slave_0: entered promiscuous mode [ 79.876037][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.883883][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.891613][ T5870] bridge_slave_0: entered allmulticast mode [ 79.898663][ T5870] bridge_slave_0: entered promiscuous mode [ 79.907148][ T5872] team0: Port device team_slave_0 added [ 79.913748][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.920980][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.928662][ T5875] bridge_slave_1: entered allmulticast mode [ 79.935605][ T5875] bridge_slave_1: entered promiscuous mode [ 79.949248][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.956396][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.963910][ T5870] bridge_slave_1: entered allmulticast mode [ 79.970994][ T5870] bridge_slave_1: entered promiscuous mode [ 79.993836][ T5872] team0: Port device team_slave_1 added [ 80.032959][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.074132][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.085539][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.126773][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.165983][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.173055][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.199536][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.211948][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.219043][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.245908][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.271084][ T5870] team0: Port device team_slave_0 added [ 80.280557][ T5870] team0: Port device team_slave_1 added [ 80.302092][ T5875] team0: Port device team_slave_0 added [ 80.318676][ T5874] Bluetooth: hci0: command tx timeout [ 80.338900][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.345887][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.372056][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.385574][ T5875] team0: Port device team_slave_1 added [ 80.416158][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.423175][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.449189][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.527725][ T5872] hsr_slave_0: entered promiscuous mode [ 80.534007][ T5872] hsr_slave_1: entered promiscuous mode [ 80.540419][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 80.546213][ T5872] Cannot create hsr debugfs directory [ 80.552942][ T5874] Bluetooth: hci1: command tx timeout [ 80.552949][ T5188] Bluetooth: hci2: command tx timeout [ 80.571953][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.579103][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.605453][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.616859][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.627588][ T5874] Bluetooth: hci3: command tx timeout [ 80.659284][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.666235][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.692759][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.704348][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.716465][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.748566][ T5870] hsr_slave_0: entered promiscuous mode [ 80.754828][ T5870] hsr_slave_1: entered promiscuous mode [ 80.761399][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 80.767148][ T5870] Cannot create hsr debugfs directory [ 80.782830][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.902007][ T5875] hsr_slave_0: entered promiscuous mode [ 80.908900][ T5875] hsr_slave_1: entered promiscuous mode [ 80.914915][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 80.921263][ T5875] Cannot create hsr debugfs directory [ 81.234682][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.253959][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.274488][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.294847][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.362098][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.376073][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.415793][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.426778][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.511626][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.521534][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.534036][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.545105][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.557249][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.636112][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.681215][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.691284][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.698924][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.715602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.722785][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.799289][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.817529][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.824680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.862135][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.880127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.887236][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.941668][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.992791][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.000021][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.023657][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.030871][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.052875][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.089784][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.105468][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.112763][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.142994][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.150213][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.390458][ T5874] Bluetooth: hci0: command tx timeout [ 82.463142][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.563610][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.632163][ T5874] Bluetooth: hci2: command tx timeout [ 82.632172][ T5188] Bluetooth: hci1: command tx timeout [ 82.639225][ T5865] veth0_vlan: entered promiscuous mode [ 82.700716][ T5872] veth0_vlan: entered promiscuous mode [ 82.709650][ T5874] Bluetooth: hci3: command tx timeout [ 82.716001][ T5865] veth1_vlan: entered promiscuous mode [ 82.762315][ T5872] veth1_vlan: entered promiscuous mode [ 82.831342][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.856690][ T5865] veth0_macvtap: entered promiscuous mode [ 82.866261][ T5872] veth0_macvtap: entered promiscuous mode [ 82.878154][ T5872] veth1_macvtap: entered promiscuous mode [ 82.892528][ T5865] veth1_macvtap: entered promiscuous mode [ 82.926647][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.942232][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.970717][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.985392][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.999573][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.031300][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.042278][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.059059][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.068023][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.089680][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.100972][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.111472][ T5875] veth0_vlan: entered promiscuous mode [ 83.121894][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130956][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.195610][ T5875] veth1_vlan: entered promiscuous mode [ 83.269535][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.278320][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.335855][ T5870] veth0_vlan: entered promiscuous mode [ 83.351874][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.357204][ T5870] veth1_vlan: entered promiscuous mode [ 83.369417][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.422903][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.423305][ T5875] veth0_macvtap: entered promiscuous mode [ 83.440238][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.446700][ T5875] veth1_macvtap: entered promiscuous mode [ 83.489537][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.499054][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.513298][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.563086][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.588767][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.610378][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.619744][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.638301][ T5870] veth0_macvtap: entered promiscuous mode [ 83.673597][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.701303][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.736397][ T5870] veth1_macvtap: entered promiscuous mode [ 83.853179][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.911851][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.924892][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.940540][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.975747][ T3606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.009388][ T3606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.021047][ T3606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.070358][ T3606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.134752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.144075][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.400931][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.400974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.434202][ T5966] Invalid ELF header magic: != ELF [ 84.468733][ T5874] Bluetooth: hci0: command tx timeout [ 84.521523][ T5970] vivid-003: ================= START STATUS ================= [ 84.529549][ T5970] vivid-003: Radio HW Seek Mode: Bounded [ 84.535345][ T5970] vivid-003: Radio Programmable HW Seek: false [ 84.550325][ T5970] vivid-003: RDS Rx I/O Mode: Block I/O [ 84.566131][ T5970] vivid-003: Generate RBDS Instead of RDS: false [ 84.580568][ T5970] vivid-003: RDS Reception: true [ 84.590569][ T5970] vivid-003: RDS Program Type: 0 inactive [ 84.607314][ T5970] vivid-003: RDS PS Name: inactive [ 84.615055][ T5970] vivid-003: RDS Radio Text: inactive [ 84.650644][ T5970] vivid-003: RDS Traffic Announcement: false inactive [ 84.680778][ T5970] vivid-003: RDS Traffic Program: false inactive [ 84.695164][ T5970] vivid-003: RDS Music: false inactive [ 84.702998][ T5970] vivid-003: ================== END STATUS ================== [ 84.711101][ T5874] Bluetooth: hci1: command tx timeout [ 84.720927][ T5874] Bluetooth: hci2: command tx timeout [ 84.732389][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.743094][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.798024][ T5874] Bluetooth: hci3: command tx timeout [ 85.170754][ T5986] Setting dangerous option i915.mitigations - tainting kernel [ 85.301195][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.328109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.394216][ T5976] ima: policy update failed [ 85.417059][ T30] audit: type=1802 audit(1756799829.326:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.8" res=0 errno=0 [ 85.770635][ T5999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.101826][ T5998] bond0: option arp_interval: invalid value () [ 86.114263][ T5998] bond0: option arp_interval: allowed values 0 - 2147483647 [ 86.549712][ T5874] Bluetooth: hci0: command tx timeout [ 86.797781][ T5874] Bluetooth: hci2: command tx timeout [ 86.803228][ T5188] Bluetooth: hci1: command tx timeout [ 86.867897][ T5874] Bluetooth: hci3: command tx timeout [ 86.877817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.886395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.894834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.049711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.358300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.468563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.589480][ T6003] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 87.627948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.638370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.646812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.899561][ T6060] FAULT_INJECTION: forcing a failure. [ 88.899561][ T6060] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.899610][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.3.20 Tainted: G U syzkaller #0 PREEMPT(full) [ 88.899631][ T6060] Tainted: [U]=USER [ 88.899636][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.899648][ T6060] Call Trace: [ 88.899653][ T6060] [ 88.899659][ T6060] dump_stack_lvl+0x16c/0x1f0 [ 88.899686][ T6060] should_fail_ex+0x512/0x640 [ 88.899710][ T6060] should_fail_alloc_page+0xe7/0x130 [ 88.899731][ T6060] prepare_alloc_pages+0x3c2/0x610 [ 88.899750][ T6060] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 88.899769][ T6060] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 88.899787][ T6060] ? arch_stack_walk+0xa6/0x100 [ 88.899812][ T6060] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.899828][ T6060] ? stack_trace_save+0x8e/0xc0 [ 88.899856][ T6060] ? fb_var_to_videomode+0x4c9/0x690 [ 88.899875][ T6060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.899896][ T6060] ? policy_nodemask+0xea/0x4e0 [ 88.899915][ T6060] alloc_pages_mpol+0x1fb/0x550 [ 88.899933][ T6060] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.899951][ T6060] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.899971][ T6060] ? vc_allocate+0x489/0x880 [ 88.899987][ T6060] ___kmalloc_large_node+0xed/0x160 [ 88.900006][ T6060] ? con_is_visible+0x65/0x150 [ 88.900020][ T6060] ? vc_allocate+0x489/0x880 [ 88.900036][ T6060] __kmalloc_large_node_noprof+0x1c/0x70 [ 88.900057][ T6060] __kmalloc_noprof.cold+0xc/0x61 [ 88.900082][ T6060] vc_allocate+0x489/0x880 [ 88.900106][ T6060] ? __pfx_vc_allocate+0x10/0x10 [ 88.900129][ T6060] con_install+0xa1/0x600 [ 88.900148][ T6060] ? __pfx_con_install+0x10/0x10 [ 88.900169][ T6060] ? __pfx_con_install+0x10/0x10 [ 88.900188][ T6060] tty_init_dev.part.0+0x99/0x500 [ 88.900210][ T6060] tty_open+0xa50/0xf90 [ 88.900233][ T6060] ? __pfx_tty_open+0x10/0x10 [ 88.900251][ T6060] ? chrdev_open+0x58c/0x6a0 [ 88.900271][ T6060] ? __pfx_tty_open+0x10/0x10 [ 88.900289][ T6060] chrdev_open+0x231/0x6a0 [ 88.900307][ T6060] ? __pfx_chrdev_open+0x10/0x10 [ 88.900325][ T6060] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 88.900344][ T6060] do_dentry_open+0x97f/0x1530 [ 88.900361][ T6060] ? __pfx_chrdev_open+0x10/0x10 [ 88.900381][ T6060] vfs_open+0x82/0x3f0 [ 88.900403][ T6060] path_openat+0x1de4/0x2cb0 [ 88.900425][ T6060] ? __pfx_path_openat+0x10/0x10 [ 88.900446][ T6060] do_filp_open+0x20b/0x470 [ 88.900462][ T6060] ? __pfx_do_filp_open+0x10/0x10 [ 88.900495][ T6060] ? do_sys_openat2+0x102/0x1d0 [ 88.900518][ T6060] do_sys_openat2+0x11b/0x1d0 [ 88.900537][ T6060] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.900564][ T6060] __x64_sys_openat+0x174/0x210 [ 88.900584][ T6060] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.900612][ T6060] do_syscall_64+0xcd/0x490 [ 88.900632][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.900646][ T6060] RIP: 0033:0x7f84fc58ebe9 [ 88.900664][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.900681][ T6060] RSP: 002b:00007f84fd3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.900695][ T6060] RAX: ffffffffffffffda RBX: 00007f84fc7c6270 RCX: 00007f84fc58ebe9 [ 88.900705][ T6060] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 88.900714][ T6060] RBP: 00007f84fc611e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.900722][ T6060] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 88.900730][ T6060] R13: 00007f84fc7c6308 R14: 00007f84fc7c6270 R15: 00007ffdf104c5a8 [ 88.900750][ T6060] [ 89.753696][ T6070] nbd: couldn't find device at index 137 [ 89.885882][ T6070] program syz.1.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.100688][ T9] cfg80211: failed to load regulatory.db [ 93.330458][ T6128] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.471589][ T6117] bond0: option arp_interval: invalid value () [ 93.527028][ T6117] bond0: option arp_interval: allowed values 0 - 2147483647 [ 93.849721][ T6150] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 94.688105][ T6168] ima: policy update failed [ 94.713530][ T30] audit: type=1802 audit(1756799838.626:3): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.38" res=0 errno=0 [ 94.982825][ T6180] netlink: 342 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.009506][ T6176] netlink: 274 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.368484][ T6189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 95.864968][ T6193] Zero length message leads to an empty skb [ 95.933342][ T6192] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 96.830934][ T6212] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 96.850356][ T6212] process 'syz.1.45' launched './file0' with NULL argv: empty string added [ 97.188176][ T6211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 98.534557][ T6228] bond0: option arp_interval: invalid value () [ 98.579258][ T6228] bond0: option arp_interval: allowed values 0 - 2147483647 [ 99.040828][ T5874] Bluetooth: hci0: unexpected event 0x3e length: 0 < 1 [ 100.026291][ T6269] binder: 6262:6269 unknown command 4294967282 [ 100.156708][ T6269] binder: 6262:6269 ioctl c0306201 2000000000c0 returned -22 [ 100.420294][ T6286] FAULT_INJECTION: forcing a failure. [ 100.420294][ T6286] name fail_futex, interval 1, probability 0, space 0, times 1 [ 100.434284][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.3.62 Tainted: G U syzkaller #0 PREEMPT(full) [ 100.434321][ T6286] Tainted: [U]=USER [ 100.434327][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.434340][ T6286] Call Trace: [ 100.434348][ T6286] [ 100.434356][ T6286] dump_stack_lvl+0x16c/0x1f0 [ 100.434390][ T6286] should_fail_ex+0x512/0x640 [ 100.434427][ T6286] get_futex_key+0x293/0x1560 [ 100.434463][ T6286] ? __pfx_get_futex_key+0x10/0x10 [ 100.434492][ T6286] ? __mutex_trylock_common+0xe9/0x250 [ 100.434532][ T6286] futex_wake+0xea/0x530 [ 100.434570][ T6286] ? __pfx_futex_wake+0x10/0x10 [ 100.434614][ T6286] do_futex+0x1e3/0x350 [ 100.434643][ T6286] ? __pfx_do_futex+0x10/0x10 [ 100.434670][ T6286] ? __might_fault+0xe3/0x190 [ 100.434707][ T6286] mm_release+0x24e/0x300 [ 100.434736][ T6286] do_exit+0x68e/0x2bf0 [ 100.434773][ T6286] ? __pfx_do_exit+0x10/0x10 [ 100.434805][ T6286] ? do_raw_spin_lock+0x12c/0x2b0 [ 100.434839][ T6286] ? find_held_lock+0x2b/0x80 [ 100.434870][ T6286] do_group_exit+0xd3/0x2a0 [ 100.434904][ T6286] get_signal+0x2673/0x26d0 [ 100.434946][ T6286] ? __pfx_get_signal+0x10/0x10 [ 100.434972][ T6286] ? do_futex+0x122/0x350 [ 100.434998][ T6286] ? __pfx_do_futex+0x10/0x10 [ 100.435036][ T6286] arch_do_signal_or_restart+0x8f/0x790 [ 100.435069][ T6286] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.435122][ T6286] exit_to_user_mode_loop+0x84/0x110 [ 100.435159][ T6286] do_syscall_64+0x3f6/0x490 [ 100.435195][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.435221][ T6286] RIP: 0033:0x7f84fc58ebe9 [ 100.435240][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.435263][ T6286] RSP: 002b:00007f84fd4130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 100.435287][ T6286] RAX: fffffffffffffe00 RBX: 00007f84fc7c5fa8 RCX: 00007f84fc58ebe9 [ 100.435305][ T6286] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f84fc7c5fa8 [ 100.435320][ T6286] RBP: 00007f84fc7c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 100.435335][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.435349][ T6286] R13: 00007f84fc7c6038 R14: 00007ffdf104c4c0 R15: 00007ffdf104c5a8 [ 100.435383][ T6286] [ 100.514433][ T6280] could not allocate digest TFM handle [ 100.874301][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.61'. [ 101.070431][ T6302] FAULT_INJECTION: forcing a failure. [ 101.070431][ T6302] name failslab, interval 1, probability 0, space 0, times 1 [ 101.098184][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.66 Tainted: G U syzkaller #0 PREEMPT(full) [ 101.098225][ T6302] Tainted: [U]=USER [ 101.098235][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.098248][ T6302] Call Trace: [ 101.098256][ T6302] [ 101.098266][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 101.098304][ T6302] should_fail_ex+0x512/0x640 [ 101.098338][ T6302] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 101.098376][ T6302] should_failslab+0xc2/0x120 [ 101.098410][ T6302] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 101.098444][ T6302] ? virtual_ncidev_open+0x6f/0x220 [ 101.098471][ T6302] ? kvasprintf_const+0x66/0x1a0 [ 101.098502][ T6302] kvasprintf+0xbc/0x160 [ 101.098527][ T6302] ? __pfx_kvasprintf+0x10/0x10 [ 101.098553][ T6302] ? rcu_is_watching+0x12/0xc0 [ 101.098580][ T6302] ? kfree+0x24f/0x4d0 [ 101.098602][ T6302] ? mark_held_locks+0x49/0x80 [ 101.098639][ T6302] kvasprintf_const+0x66/0x1a0 [ 101.098667][ T6302] kobject_set_name_vargs+0x5a/0x140 [ 101.098717][ T6302] dev_set_name+0xc7/0x100 [ 101.098746][ T6302] ? __pfx_dev_set_name+0x10/0x10 [ 101.098793][ T6302] nfc_allocate_device+0x206/0x5e0 [ 101.098834][ T6302] nci_allocate_device+0x23b/0x430 [ 101.098866][ T6302] virtual_ncidev_open+0x6f/0x220 [ 101.098895][ T6302] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 101.098923][ T6302] misc_open+0x35d/0x420 [ 101.098951][ T6302] ? __pfx_misc_open+0x10/0x10 [ 101.098977][ T6302] chrdev_open+0x231/0x6a0 [ 101.099009][ T6302] ? __pfx_apparmor_file_open+0x10/0x10 [ 101.099038][ T6302] ? __pfx_chrdev_open+0x10/0x10 [ 101.099073][ T6302] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.099110][ T6302] do_dentry_open+0x97f/0x1530 [ 101.099143][ T6302] ? __pfx_chrdev_open+0x10/0x10 [ 101.099182][ T6302] vfs_open+0x82/0x3f0 [ 101.099223][ T6302] path_openat+0x1de4/0x2cb0 [ 101.099266][ T6302] ? __pfx_path_openat+0x10/0x10 [ 101.099307][ T6302] do_filp_open+0x20b/0x470 [ 101.099338][ T6302] ? __pfx_do_filp_open+0x10/0x10 [ 101.099395][ T6302] ? alloc_fd+0x471/0x7d0 [ 101.099424][ T6302] do_sys_openat2+0x11b/0x1d0 [ 101.099459][ T6302] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.099521][ T6302] __x64_sys_openat+0x174/0x210 [ 101.099561][ T6302] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.099616][ T6302] do_syscall_64+0xcd/0x490 [ 101.099654][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.099680][ T6302] RIP: 0033:0x7f1d5678ebe9 [ 101.099709][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.099733][ T6302] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.099756][ T6302] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 101.099774][ T6302] RDX: 0000000000020100 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 101.099791][ T6302] RBP: 00007f1d56811e19 R08: 0000000000000000 R09: 0000000000000000 [ 101.099807][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.099823][ T6302] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 101.099858][ T6302] [ 101.557640][ T6298] bond0: option arp_interval: invalid value () [ 101.563863][ T6298] bond0: option arp_interval: allowed values 0 - 2147483647 [ 102.602726][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 102.628046][ T6321] nbd: must specify a size in bytes for the device [ 103.033870][ T6334] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 103.505689][ T6345] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 103.696337][ T6342] bond0: option arp_interval: invalid value () [ 103.739752][ T6342] bond0: option arp_interval: allowed values 0 - 2147483647 [ 104.208552][ T6364] sp0: Synchronizing with TNC [ 104.246540][ T6364] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.280248][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 104.421078][ T6370] input: f as /devices/virtual/input/input8 [ 104.617209][ T6375] FAULT_INJECTION: forcing a failure. [ 104.617209][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.666699][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.3.84 Tainted: G U syzkaller #0 PREEMPT(full) [ 104.666739][ T6375] Tainted: [U]=USER [ 104.666747][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.666760][ T6375] Call Trace: [ 104.666768][ T6375] [ 104.666778][ T6375] dump_stack_lvl+0x16c/0x1f0 [ 104.666815][ T6375] should_fail_ex+0x512/0x640 [ 104.666854][ T6375] _copy_from_user+0x2e/0xd0 [ 104.666892][ T6375] copy_msghdr_from_user+0x98/0x160 [ 104.666924][ T6375] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.666974][ T6375] ___sys_sendmsg+0xfe/0x1d0 [ 104.667009][ T6375] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.667085][ T6375] __sys_sendmsg+0x16d/0x220 [ 104.667118][ T6375] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.667172][ T6375] do_syscall_64+0xcd/0x490 [ 104.667208][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.667234][ T6375] RIP: 0033:0x7f84fc58ebe9 [ 104.667254][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.667277][ T6375] RSP: 002b:00007f84fd413038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.667300][ T6375] RAX: ffffffffffffffda RBX: 00007f84fc7c5fa0 RCX: 00007f84fc58ebe9 [ 104.667317][ T6375] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 104.667333][ T6375] RBP: 00007f84fd413090 R08: 0000000000000000 R09: 0000000000000000 [ 104.667348][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.667370][ T6375] R13: 00007f84fc7c6038 R14: 00007f84fc7c5fa0 R15: 00007ffdf104c5a8 [ 104.667404][ T6375] [ 105.694381][ T5874] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 106.552316][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 106.845122][ T6430] FAULT_INJECTION: forcing a failure. [ 106.845122][ T6430] name failslab, interval 1, probability 0, space 0, times 0 [ 106.883757][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.1.95 Tainted: G U syzkaller #0 PREEMPT(full) [ 106.883800][ T6430] Tainted: [U]=USER [ 106.883807][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.883821][ T6430] Call Trace: [ 106.883829][ T6430] [ 106.883839][ T6430] dump_stack_lvl+0x16c/0x1f0 [ 106.883877][ T6430] should_fail_ex+0x512/0x640 [ 106.883909][ T6430] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 106.883943][ T6430] should_failslab+0xc2/0x120 [ 106.883971][ T6430] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 106.883997][ T6430] ? __alloc_skb+0x2b2/0x380 [ 106.884030][ T6430] __alloc_skb+0x2b2/0x380 [ 106.884058][ T6430] ? __pfx___alloc_skb+0x10/0x10 [ 106.884091][ T6430] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 106.884122][ T6430] ? __lock_acquire+0xb97/0x1ce0 [ 106.884159][ T6430] netlink_alloc_large_skb+0x69/0x130 [ 106.884206][ T6430] netlink_sendmsg+0x6a1/0xdd0 [ 106.884246][ T6430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.884283][ T6430] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 106.884316][ T6430] ____sys_sendmsg+0xa98/0xc70 [ 106.884338][ T6430] ? copy_msghdr_from_user+0x10a/0x160 [ 106.884366][ T6430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.884405][ T6430] ___sys_sendmsg+0x134/0x1d0 [ 106.884437][ T6430] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.884510][ T6430] __sys_sendmsg+0x16d/0x220 [ 106.884539][ T6430] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.884588][ T6430] do_syscall_64+0xcd/0x490 [ 106.884621][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.884643][ T6430] RIP: 0033:0x7f1d5678ebe9 [ 106.884662][ T6430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.884685][ T6430] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.884706][ T6430] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 106.884721][ T6430] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 106.884736][ T6430] RBP: 00007f1d575eb090 R08: 0000000000000000 R09: 0000000000000000 [ 106.884750][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.884764][ T6430] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 106.884798][ T6430] [ 108.161498][ T6465] vivid-003: ================= START STATUS ================= [ 108.169617][ T6465] vivid-003: Radio HW Seek Mode: Bounded [ 108.175298][ T6465] vivid-003: Radio Programmable HW Seek: false [ 108.190472][ T6465] vivid-003: RDS Rx I/O Mode: Block I/O [ 108.196159][ T6465] vivid-003: Generate RBDS Instead of RDS: false [ 108.207517][ T6465] vivid-003: RDS Reception: true [ 108.213460][ T6465] vivid-003: RDS Program Type: 0 inactive [ 108.239640][ T6465] vivid-003: RDS PS Name: inactive [ 108.245604][ T6465] vivid-003: RDS Radio Text: inactive [ 108.254224][ T6465] vivid-003: RDS Traffic Announcement: false inactive [ 108.385443][ T6465] vivid-003: RDS Traffic Program: false inactive [ 108.446242][ T6465] vivid-003: RDS Music: false inactive [ 108.489719][ T6465] vivid-003: ================== END STATUS ================== [ 109.846425][ T6493] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.994827][ T6528] FAULT_INJECTION: forcing a failure. [ 109.994827][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.019742][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.1.115 Tainted: G U syzkaller #0 PREEMPT(full) [ 110.019781][ T6528] Tainted: [U]=USER [ 110.019789][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.019803][ T6528] Call Trace: [ 110.019810][ T6528] [ 110.019820][ T6528] dump_stack_lvl+0x16c/0x1f0 [ 110.019858][ T6528] should_fail_ex+0x512/0x640 [ 110.019903][ T6528] _copy_from_iter+0x29f/0x1720 [ 110.019943][ T6528] ? __alloc_skb+0x200/0x380 [ 110.019973][ T6528] ? __pfx__copy_from_iter+0x10/0x10 [ 110.020011][ T6528] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 110.020042][ T6528] ? __lock_acquire+0xb97/0x1ce0 [ 110.020081][ T6528] netlink_sendmsg+0x829/0xdd0 [ 110.020120][ T6528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.020154][ T6528] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 110.020186][ T6528] ____sys_sendmsg+0xa98/0xc70 [ 110.020210][ T6528] ? copy_msghdr_from_user+0x10a/0x160 [ 110.020240][ T6528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.020280][ T6528] ___sys_sendmsg+0x134/0x1d0 [ 110.020312][ T6528] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.020385][ T6528] __sys_sendmsg+0x16d/0x220 [ 110.020417][ T6528] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.020469][ T6528] do_syscall_64+0xcd/0x490 [ 110.020503][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.020529][ T6528] RIP: 0033:0x7f1d5678ebe9 [ 110.020548][ T6528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.020570][ T6528] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.020593][ T6528] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 110.020610][ T6528] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 110.020629][ T6528] RBP: 00007f1d575eb090 R08: 0000000000000000 R09: 0000000000000000 [ 110.020644][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.020658][ T6528] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 110.020690][ T6528] [ 110.662147][ T6534] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.887942][ T6534] zero sized request [ 111.096368][ T6524] bond0: option arp_interval: invalid value () [ 111.114709][ T6524] bond0: option arp_interval: allowed values 0 - 2147483647 [ 112.233055][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 112.243419][ T6560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.318687][ T6560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.571164][ T6571] FAULT_INJECTION: forcing a failure. [ 112.571164][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 112.571207][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.1.125 Tainted: G U syzkaller #0 PREEMPT(full) [ 112.571243][ T6571] Tainted: [U]=USER [ 112.571250][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.571264][ T6571] Call Trace: [ 112.571272][ T6571] [ 112.571281][ T6571] dump_stack_lvl+0x16c/0x1f0 [ 112.571318][ T6571] should_fail_ex+0x512/0x640 [ 112.571357][ T6571] should_failslab+0xc2/0x120 [ 112.571389][ T6571] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 112.571421][ T6571] ? skb_clone+0x190/0x3f0 [ 112.571458][ T6571] skb_clone+0x190/0x3f0 [ 112.571492][ T6571] netlink_deliver_tap+0xabd/0xd30 [ 112.571531][ T6571] netlink_unicast+0x64c/0x870 [ 112.571570][ T6571] ? __pfx_netlink_unicast+0x10/0x10 [ 112.571604][ T6571] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 112.571634][ T6571] ? __lock_acquire+0xb97/0x1ce0 [ 112.571676][ T6571] netlink_sendmsg+0x8d1/0xdd0 [ 112.571714][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.571749][ T6571] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 112.571780][ T6571] ____sys_sendmsg+0xa98/0xc70 [ 112.571803][ T6571] ? copy_msghdr_from_user+0x10a/0x160 [ 112.571831][ T6571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.571870][ T6571] ___sys_sendmsg+0x134/0x1d0 [ 112.571899][ T6571] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.571939][ T6571] __sys_sendmsg+0x16d/0x220 [ 112.571965][ T6571] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.571995][ T6571] do_syscall_64+0xcd/0x490 [ 112.572015][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.572030][ T6571] RIP: 0033:0x7f1d5678ebe9 [ 112.572041][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.572054][ T6571] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.572067][ T6571] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 112.572077][ T6571] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 112.572085][ T6571] RBP: 00007f1d575eb090 R08: 0000000000000000 R09: 0000000000000000 [ 112.572093][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.572100][ T6571] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 112.572118][ T6571] [ 112.633912][ T6565] tty tty7: ldisc open failed (-12), clearing slot 6 [ 113.616638][ T6589] ======================================================= [ 113.616638][ T6589] WARNING: The mand mount option has been deprecated and [ 113.616638][ T6589] and is ignored by this kernel. Remove the mand [ 113.616638][ T6589] option from the mount to silence this warning. [ 113.616638][ T6589] ======================================================= [ 113.795287][ T6591] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 113.998296][ T6590] ima: policy update failed [ 114.082844][ T30] audit: type=1802 audit(1756799857.976:4): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.130" res=0 errno=0 [ 114.495098][ T6599] bond0: option arp_interval: invalid value () [ 114.544775][ T6599] bond0: option arp_interval: allowed values 0 - 2147483647 [ 114.914223][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 114.993821][ T6612] team0: Port device team_slave_0 removed [ 115.271500][ T6615] sp0: Synchronizing with TNC [ 115.340568][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 115.497910][ T6625] ACPI: Can not change Invalid GPE/Fixed Event status [ 115.793954][ T6609] netlink: 268 bytes leftover after parsing attributes in process `syz.3.132'. [ 116.283988][ T6639] mmap: syz.0.141 (6639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.390411][ T6609] syz.3.132 (6609) used greatest stack depth: 17768 bytes left [ 116.398811][ T6644] XFS: Clearing xfsstats [ 117.040797][ T6653] FAULT_INJECTION: forcing a failure. [ 117.040797][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 117.158665][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.1.143 Tainted: G U syzkaller #0 PREEMPT(full) [ 117.158707][ T6653] Tainted: [U]=USER [ 117.158716][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.158735][ T6653] Call Trace: [ 117.158744][ T6653] [ 117.158755][ T6653] dump_stack_lvl+0x16c/0x1f0 [ 117.158795][ T6653] should_fail_ex+0x512/0x640 [ 117.158831][ T6653] ? __kmalloc_noprof+0xbf/0x510 [ 117.158864][ T6653] ? lsm_blob_alloc+0x68/0x90 [ 117.158886][ T6653] should_failslab+0xc2/0x120 [ 117.158921][ T6653] __kmalloc_noprof+0xd2/0x510 [ 117.158959][ T6653] lsm_blob_alloc+0x68/0x90 [ 117.158984][ T6653] security_sk_alloc+0x30/0x270 [ 117.159015][ T6653] sk_prot_alloc+0xfb/0x2a0 [ 117.159043][ T6653] sk_alloc+0x36/0xc20 [ 117.159076][ T6653] tipc_sk_create+0xcf/0x21a0 [ 117.159112][ T6653] ? find_held_lock+0x2b/0x80 [ 117.159140][ T6653] ? __sock_create+0x2f2/0x8d0 [ 117.159171][ T6653] __sock_create+0x335/0x8d0 [ 117.159205][ T6653] __sys_socket+0x14d/0x260 [ 117.159239][ T6653] ? __pfx___sys_socket+0x10/0x10 [ 117.159267][ T6653] ? xfd_validate_state+0x61/0x180 [ 117.159316][ T6653] __x64_sys_socket+0x72/0xb0 [ 117.159342][ T6653] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.159376][ T6653] do_syscall_64+0xcd/0x490 [ 117.159414][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.159441][ T6653] RIP: 0033:0x7f1d5678ebe9 [ 117.159462][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.159487][ T6653] RSP: 002b:00007f1d575a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 117.159513][ T6653] RAX: ffffffffffffffda RBX: 00007f1d569c6180 RCX: 00007f1d5678ebe9 [ 117.159531][ T6653] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 117.159547][ T6653] RBP: 00007f1d56811e19 R08: 0000000000000000 R09: 0000000000000000 [ 117.159563][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.159579][ T6653] R13: 00007f1d569c6218 R14: 00007f1d569c6180 R15: 00007ffca4eaedb8 [ 117.159616][ T6653] [ 117.411707][ T6655] hub 8-0:1.0: USB hub found [ 117.439158][ T983] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 117.445505][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.483964][ T6655] hub 8-0:1.0: 1 port detected [ 117.950966][ T6675] binder: 6663:6675 ioctl c00c620f 200000000180 returned -22 [ 118.552108][ T6693] FAULT_INJECTION: forcing a failure. [ 118.552108][ T6693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.566200][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.1.151 Tainted: G U syzkaller #0 PREEMPT(full) [ 118.566224][ T6693] Tainted: [U]=USER [ 118.566228][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.566237][ T6693] Call Trace: [ 118.566242][ T6693] [ 118.566247][ T6693] dump_stack_lvl+0x16c/0x1f0 [ 118.566271][ T6693] should_fail_ex+0x512/0x640 [ 118.566293][ T6693] strncpy_from_user+0x3b/0x2e0 [ 118.566313][ T6693] getname_flags.part.0+0x8f/0x550 [ 118.566336][ T6693] getname_flags+0x93/0xf0 [ 118.566351][ T6693] do_sys_openat2+0xb8/0x1d0 [ 118.566371][ T6693] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.566399][ T6693] __x64_sys_openat+0x174/0x210 [ 118.566427][ T6693] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.566456][ T6693] do_syscall_64+0xcd/0x490 [ 118.566477][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.566491][ T6693] RIP: 0033:0x7f1d5678ebe9 [ 118.566503][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.566516][ T6693] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.566529][ T6693] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 118.566538][ T6693] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 118.566546][ T6693] RBP: 00007f1d56811e19 R08: 0000000000000000 R09: 0000000000000000 [ 118.566554][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.566562][ T6693] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 118.566580][ T6693] [ 118.727115][ C0] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 119.516006][ T983] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 119.522409][ T5874] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.720070][ T6711] FAULT_INJECTION: forcing a failure. [ 119.720070][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 119.737287][ T6704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.744410][ T6704] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.751357][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.3.154 Tainted: G U syzkaller #0 PREEMPT(full) [ 119.751400][ T6711] Tainted: [U]=USER [ 119.751409][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.751424][ T6711] Call Trace: [ 119.751433][ T6711] [ 119.751443][ T6711] dump_stack_lvl+0x16c/0x1f0 [ 119.751484][ T6711] should_fail_ex+0x512/0x640 [ 119.751520][ T6711] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 119.751551][ T6711] should_failslab+0xc2/0x120 [ 119.751581][ T6711] __kmalloc_cache_noprof+0x6a/0x3e0 [ 119.751604][ T6711] ? tty_alloc_file+0x3f/0xa0 [ 119.751637][ T6711] ? __pfx_ptmx_open+0x10/0x10 [ 119.751662][ T6711] tty_alloc_file+0x3f/0xa0 [ 119.751689][ T6711] ptmx_open+0x61/0x360 [ 119.751713][ T6711] ? __pfx_ptmx_open+0x10/0x10 [ 119.751736][ T6711] chrdev_open+0x231/0x6a0 [ 119.751767][ T6711] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.751794][ T6711] ? __pfx_chrdev_open+0x10/0x10 [ 119.751826][ T6711] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 119.751858][ T6711] do_dentry_open+0x97f/0x1530 [ 119.751886][ T6711] ? __pfx_chrdev_open+0x10/0x10 [ 119.751922][ T6711] vfs_open+0x82/0x3f0 [ 119.751960][ T6711] path_openat+0x1de4/0x2cb0 [ 119.752000][ T6711] ? __pfx_path_openat+0x10/0x10 [ 119.752038][ T6711] do_filp_open+0x20b/0x470 [ 119.752068][ T6711] ? __pfx_do_filp_open+0x10/0x10 [ 119.752119][ T6711] ? alloc_fd+0x471/0x7d0 [ 119.752155][ T6711] do_sys_openat2+0x11b/0x1d0 [ 119.752191][ T6711] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.752246][ T6711] __x64_sys_openat+0x174/0x210 [ 119.752285][ T6711] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.752333][ T6711] do_syscall_64+0xcd/0x490 [ 119.752370][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.752396][ T6711] RIP: 0033:0x7f84fc58ebe9 [ 119.752416][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.752441][ T6711] RSP: 002b:00007f84fd413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.752471][ T6711] RAX: ffffffffffffffda RBX: 00007f84fc7c5fa0 RCX: 00007f84fc58ebe9 [ 119.752488][ T6711] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 119.752505][ T6711] RBP: 00007f84fc611e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.752520][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.752535][ T6711] R13: 00007f84fc7c6038 R14: 00007f84fc7c5fa0 R15: 00007ffdf104c5a8 [ 119.752569][ T6711] [ 119.998920][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.376373][ T6704] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.503681][ T6704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.536265][ T6704] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.689506][ T6725] capability: warning: `syz.3.157' uses 32-bit capabilities (legacy support in use) [ 120.735970][ T6704] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.800747][ T983] Bluetooth: hci2: Opcode 0x0406 failed: -112 [ 120.905202][ T6704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.913902][ T6704] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.001883][ T6704] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.228348][ T6707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 121.816378][ T6742] zswap: compressor not available [ 121.838508][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.550424][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.635390][ T6749] netlink: 268 bytes leftover after parsing attributes in process `syz.1.160'. [ 122.673102][ T6765] random: crng reseeded on system resumption [ 122.954497][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.223354][ T6771] ubi0: attaching mtd0 [ 123.269379][ T6771] ubi0: scanning is finished [ 123.326696][ T6771] ubi0: empty MTD device detected [ 123.616693][ T6771] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 123.634238][ T6758] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 123.653405][ T6771] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3521 bytes [ 123.672060][ T6771] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 123.682956][ T6771] ubi0: VID header offset: 511 (aligned 511), data offset: 575 [ 123.703590][ T6771] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 123.799895][ T6771] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 123.853951][ T6771] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2471178511 [ 123.907518][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.993461][ T6771] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.088929][ T6778] ubi0: background thread "ubi_bgt0d" started, PID 6778 [ 124.158304][ T6789] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.627521][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.835331][ T5188] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 124.835367][ T5188] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 124.852947][ T5188] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 124.853008][ T5188] Bluetooth: hci0: adv larger than maximum supported [ 124.860419][ T5188] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 124.868029][ T5188] Bluetooth: hci0: Malformed LE Event: 0x0d [ 124.906237][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 125.027572][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.207046][ T6821] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.396550][ T6821] netlink: 142 bytes leftover after parsing attributes in process `syz.1.172'. [ 125.488238][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 125.840325][ T6842] QAT: failed to copy from user cfg_data. [ 125.987667][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.232232][ T6839] bond0: option arp_interval: invalid value () [ 126.251844][ T6839] bond0: option arp_interval: allowed values 0 - 2147483647 [ 126.718095][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.098753][ T6848] ptrace attach of "./syz-executor exec"[5865] was attempted by "./syz-executor exec"[6848] [ 127.109055][ T5188] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.203115][ T6949] sg_write: data in/out 2359516/96 bytes for SCSI command 0x0-- guessing data in; [ 132.203115][ T6949] program syz.1.204 not setting count and/or reply_len properly [ 132.954183][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.964310][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.689244][ T6991] netlink: 5825 bytes leftover after parsing attributes in process `syz.0.206'. [ 134.713028][ T6990] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 135.509833][ T6989] ima: policy update failed [ 135.568123][ T30] audit: type=1802 audit(1756800902.444:5): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.205" res=0 errno=0 [ 135.925879][ T7019] Invalid ELF header magic: != ELF [ 136.133080][ T7024] FAULT_INJECTION: forcing a failure. [ 136.133080][ T7024] name fail_futex, interval 1, probability 0, space 0, times 0 [ 136.161586][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.1.212 Tainted: G U syzkaller #0 PREEMPT(full) [ 136.161625][ T7024] Tainted: [U]=USER [ 136.161633][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.161646][ T7024] Call Trace: [ 136.161654][ T7024] [ 136.161664][ T7024] dump_stack_lvl+0x16c/0x1f0 [ 136.161701][ T7024] should_fail_ex+0x512/0x640 [ 136.161739][ T7024] get_futex_key+0x1d0/0x1560 [ 136.161770][ T7024] ? get_pid_task+0x106/0x250 [ 136.161802][ T7024] ? __pfx_get_futex_key+0x10/0x10 [ 136.161828][ T7024] ? rcu_is_watching+0x12/0xc0 [ 136.161853][ T7024] ? kfree+0x24f/0x4d0 [ 136.161887][ T7024] futex_wake+0xea/0x530 [ 136.161925][ T7024] ? __pfx_futex_wake+0x10/0x10 [ 136.161958][ T7024] ? __pfx_vfs_writev+0x10/0x10 [ 136.161983][ T7024] ? __mutex_lock+0x1c5/0x1060 [ 136.162018][ T7024] ? do_writev+0x218/0x340 [ 136.162051][ T7024] do_futex+0x1e3/0x350 [ 136.162082][ T7024] ? __pfx_do_futex+0x10/0x10 [ 136.162110][ T7024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.162153][ T7024] __x64_sys_futex+0x1e0/0x4c0 [ 136.162188][ T7024] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.162220][ T7024] ? __pfx_do_writev+0x10/0x10 [ 136.162255][ T7024] do_syscall_64+0xcd/0x490 [ 136.162290][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.162315][ T7024] RIP: 0033:0x7f1d5678ebe9 [ 136.162335][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.162358][ T7024] RSP: 002b:00007f1d575ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.162381][ T7024] RAX: ffffffffffffffda RBX: 00007f1d569c6098 RCX: 00007f1d5678ebe9 [ 136.162398][ T7024] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d569c609c [ 136.162413][ T7024] RBP: 00007f1d569c6090 R08: 00007f1d575ec000 R09: 0000000000000000 [ 136.162429][ T7024] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 136.162443][ T7024] R13: 00007f1d569c6128 R14: 00007ffca4eaecd0 R15: 00007ffca4eaedb8 [ 136.162476][ T7024] [ 136.371905][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.641317][ T7044] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.0.1894), cmd(5) [ 137.654549][ T7051] device-mapper: ioctl: Invalid data size in the ioctl structure: 5 [ 138.327297][ T7064] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 138.375553][ T7064] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 139.263334][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 139.557240][ T7086] bridge0: port 3(team0) entered blocking state [ 139.563750][ T7086] bridge0: port 3(team0) entered disabled state [ 139.570351][ T7086] team0: entered allmulticast mode [ 139.575772][ T7086] team_slave_0: entered allmulticast mode [ 139.588571][ T7086] team_slave_1: entered allmulticast mode [ 139.607766][ T7086] team0: entered promiscuous mode [ 139.613316][ T7093] nbd: socks must be embedded in a SOCK_ITEM attr [ 139.653030][ T7086] team_slave_0: entered promiscuous mode [ 139.659512][ T7086] team_slave_1: entered promiscuous mode [ 139.667424][ T7088] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 139.673040][ T7086] bridge0: port 3(team0) entered blocking state [ 139.683654][ T7086] bridge0: port 3(team0) entered forwarding state [ 139.686283][ T7093] FAULT_INJECTION: forcing a failure. [ 139.686283][ T7093] name fail_futex, interval 1, probability 0, space 0, times 0 [ 139.720804][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.2.225 Tainted: G U syzkaller #0 PREEMPT(full) [ 139.720848][ T7093] Tainted: [U]=USER [ 139.720856][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.720871][ T7093] Call Trace: [ 139.720879][ T7093] [ 139.720888][ T7093] dump_stack_lvl+0x16c/0x1f0 [ 139.720925][ T7093] should_fail_ex+0x512/0x640 [ 139.720958][ T7093] ? bpf_token_put+0xe/0x170 [ 139.720985][ T7093] get_futex_key+0x1d0/0x1560 [ 139.721021][ T7093] ? __pfx_get_futex_key+0x10/0x10 [ 139.721052][ T7093] ? __pfx_map_create+0x10/0x10 [ 139.721082][ T7093] ? __might_fault+0xe3/0x190 [ 139.721110][ T7093] ? __might_fault+0xe3/0x190 [ 139.721137][ T7093] ? __might_fault+0x13b/0x190 [ 139.721174][ T7093] futex_wake+0xea/0x530 [ 139.721223][ T7093] ? __pfx_futex_wake+0x10/0x10 [ 139.721277][ T7093] do_futex+0x1e3/0x350 [ 139.721311][ T7093] ? __pfx_do_futex+0x10/0x10 [ 139.721354][ T7093] __x64_sys_futex+0x1e0/0x4c0 [ 139.721389][ T7093] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 139.721422][ T7093] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.721455][ T7093] ? xfd_validate_state+0x61/0x180 [ 139.721503][ T7093] do_syscall_64+0xcd/0x490 [ 139.721540][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.721566][ T7093] RIP: 0033:0x7f5c1cd8ebe9 [ 139.721587][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.721612][ T7093] RSP: 002b:00007f5c1dc370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.721637][ T7093] RAX: ffffffffffffffda RBX: 00007f5c1cfc5fa8 RCX: 00007f5c1cd8ebe9 [ 139.721654][ T7093] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c1cfc5fac [ 139.721670][ T7093] RBP: 00007f5c1cfc5fa0 R08: 00007f5c1dc38000 R09: 0000000000000000 [ 139.721686][ T7093] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 139.721702][ T7093] R13: 00007f5c1cfc6038 R14: 00007ffd07e508b0 R15: 00007ffd07e50998 [ 139.721738][ T7093] [ 139.950845][ T7093] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.479597][ T7130] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 142.062894][ T7138] usb usb36: usbfs: process 7138 (syz.1.232) did not claim interface 0 before use [ 142.518781][ T7166] ================================================================== [ 142.518800][ T7166] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 142.518837][ T7166] Write of size 8 at addr ffffc90003ea9000 by task syz.1.238/7166 [ 142.518860][ T7166] [ 142.518876][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.238 Tainted: G U syzkaller #0 PREEMPT(full) [ 142.518923][ T7166] Tainted: [U]=USER [ 142.518933][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.518949][ T7166] Call Trace: [ 142.518958][ T7166] [ 142.518968][ T7166] dump_stack_lvl+0x116/0x1f0 [ 142.519005][ T7166] print_report+0xcd/0x630 [ 142.519042][ T7166] ? __virt_addr_valid+0x81/0x610 [ 142.519077][ T7166] ? sys_imageblit+0x1a6f/0x1e60 [ 142.519101][ T7166] kasan_report+0xe0/0x110 [ 142.519130][ T7166] ? sys_imageblit+0x1a6f/0x1e60 [ 142.519166][ T7166] sys_imageblit+0x1a6f/0x1e60 [ 142.519193][ T7166] ? __pfx_sys_imageblit+0x10/0x10 [ 142.519217][ T7166] ? do_raw_spin_lock+0x12c/0x2b0 [ 142.519251][ T7166] ? find_held_lock+0x2b/0x80 [ 142.519278][ T7166] ? queue_work_on+0x12a/0x1f0 [ 142.519300][ T7166] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.519332][ T7166] ? queue_work_on+0x8b/0x1f0 [ 142.519356][ T7166] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 142.519389][ T7166] bit_putcs+0x90f/0xde0 [ 142.519425][ T7166] ? __pfx_bit_putcs+0x10/0x10 [ 142.519459][ T7166] ? fb_get_color_depth+0x120/0x250 [ 142.519487][ T7166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.519524][ T7166] ? __pfx_bit_putcs+0x10/0x10 [ 142.519554][ T7166] fbcon_putcs+0x384/0x4a0 [ 142.519583][ T7166] do_update_region+0x2e6/0x3f0 [ 142.519609][ T7166] update_region+0xc1/0x160 [ 142.519638][ T7166] vcs_write+0x7c7/0xdb0 [ 142.519667][ T7166] ? __pfx_vcs_write+0x10/0x10 [ 142.519692][ T7166] ? common_file_perm+0x1a9/0x340 [ 142.519723][ T7166] ? bpf_lsm_file_permission+0x9/0x10 [ 142.519756][ T7166] ? security_file_permission+0x71/0x210 [ 142.519789][ T7166] ? rw_verify_area+0xcf/0x6c0 [ 142.519816][ T7166] ? __pfx_vcs_write+0x10/0x10 [ 142.519843][ T7166] vfs_write+0x29d/0x11d0 [ 142.519875][ T7166] ? __pfx_vfs_write+0x10/0x10 [ 142.519912][ T7166] ? find_held_lock+0x2b/0x80 [ 142.519939][ T7166] ? __fget_files+0x204/0x3c0 [ 142.519970][ T7166] ? __fget_files+0x20e/0x3c0 [ 142.520003][ T7166] __x64_sys_pwrite64+0x1eb/0x250 [ 142.520035][ T7166] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 142.520072][ T7166] do_syscall_64+0xcd/0x490 [ 142.520107][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.520135][ T7166] RIP: 0033:0x7f1d5678ebe9 [ 142.520155][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.520181][ T7166] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 142.520206][ T7166] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 142.520223][ T7166] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000003 [ 142.520238][ T7166] RBP: 00007f1d56811e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.520252][ T7166] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 142.520267][ T7166] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 142.520293][ T7166] [ 142.520302][ T7166] [ 142.520309][ T7166] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003ba9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 142.520345][ T7166] Memory state around the buggy address: [ 142.520361][ T7166] ffffc90003ea8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.520371][ T7166] ffffc90003ea8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.520381][ T7166] >ffffc90003ea9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.520388][ T7166] ^ [ 142.520395][ T7166] ffffc90003ea9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.520404][ T7166] ffffc90003ea9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.520412][ T7166] ================================================================== [ 142.541075][ T7166] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.541100][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.1.238 Tainted: G U syzkaller #0 PREEMPT(full) [ 142.541139][ T7166] Tainted: [U]=USER [ 142.541147][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.541165][ T7166] Call Trace: [ 142.541174][ T7166] [ 142.541183][ T7166] dump_stack_lvl+0x3d/0x1f0 [ 142.541222][ T7166] vpanic+0x6e8/0x7a0 [ 142.541257][ T7166] ? __pfx_vpanic+0x10/0x10 [ 142.541292][ T7166] ? sys_imageblit+0x1a6f/0x1e60 [ 142.541314][ T7166] panic+0xca/0xd0 [ 142.541342][ T7166] ? __pfx_panic+0x10/0x10 [ 142.541373][ T7166] ? sys_imageblit+0x1a6f/0x1e60 [ 142.541394][ T7166] ? preempt_schedule_common+0x44/0xc0 [ 142.541425][ T7166] ? preempt_schedule_thunk+0x16/0x30 [ 142.541460][ T7166] check_panic_on_warn+0xab/0xb0 [ 142.541495][ T7166] end_report+0x107/0x170 [ 142.541526][ T7166] kasan_report+0xee/0x110 [ 142.541557][ T7166] ? sys_imageblit+0x1a6f/0x1e60 [ 142.541584][ T7166] sys_imageblit+0x1a6f/0x1e60 [ 142.541613][ T7166] ? __pfx_sys_imageblit+0x10/0x10 [ 142.541639][ T7166] ? do_raw_spin_lock+0x12c/0x2b0 [ 142.541671][ T7166] ? find_held_lock+0x2b/0x80 [ 142.541697][ T7166] ? queue_work_on+0x12a/0x1f0 [ 142.541720][ T7166] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.541750][ T7166] ? queue_work_on+0x8b/0x1f0 [ 142.541774][ T7166] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 142.541807][ T7166] bit_putcs+0x90f/0xde0 [ 142.541841][ T7166] ? __pfx_bit_putcs+0x10/0x10 [ 142.541872][ T7166] ? fb_get_color_depth+0x120/0x250 [ 142.541897][ T7166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.541946][ T7166] ? __pfx_bit_putcs+0x10/0x10 [ 142.541973][ T7166] fbcon_putcs+0x384/0x4a0 [ 142.541999][ T7166] do_update_region+0x2e6/0x3f0 [ 142.542024][ T7166] update_region+0xc1/0x160 [ 142.542049][ T7166] vcs_write+0x7c7/0xdb0 [ 142.542081][ T7166] ? __pfx_vcs_write+0x10/0x10 [ 142.542105][ T7166] ? common_file_perm+0x1a9/0x340 [ 142.542132][ T7166] ? bpf_lsm_file_permission+0x9/0x10 [ 142.542165][ T7166] ? security_file_permission+0x71/0x210 [ 142.542197][ T7166] ? rw_verify_area+0xcf/0x6c0 [ 142.542220][ T7166] ? __pfx_vcs_write+0x10/0x10 [ 142.542244][ T7166] vfs_write+0x29d/0x11d0 [ 142.542271][ T7166] ? __pfx_vfs_write+0x10/0x10 [ 142.542297][ T7166] ? find_held_lock+0x2b/0x80 [ 142.542323][ T7166] ? __fget_files+0x204/0x3c0 [ 142.542352][ T7166] ? __fget_files+0x20e/0x3c0 [ 142.542379][ T7166] __x64_sys_pwrite64+0x1eb/0x250 [ 142.542407][ T7166] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 142.542444][ T7166] do_syscall_64+0xcd/0x490 [ 142.542478][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.542506][ T7166] RIP: 0033:0x7f1d5678ebe9 [ 142.542528][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.542554][ T7166] RSP: 002b:00007f1d575eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 142.542577][ T7166] RAX: ffffffffffffffda RBX: 00007f1d569c5fa0 RCX: 00007f1d5678ebe9 [ 142.542594][ T7166] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000003 [ 142.542610][ T7166] RBP: 00007f1d56811e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.542625][ T7166] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 142.542640][ T7166] R13: 00007f1d569c6038 R14: 00007f1d569c5fa0 R15: 00007ffca4eaedb8 [ 142.542666][ T7166] [ 142.542932][ T7166] Kernel Offset: disabled