last executing test programs: 1m35.129611364s ago: executing program 2 (id=85): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x10, 0x3, 0x9) write$auto(r0, 0x0, 0x5) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = geteuid() setreuid$auto(r1, 0x0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x0, 0x2, 0x8000004, &(0x7f00000000c0)}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x30fe) (async) fcntl$auto(0xffffffffffffffff, 0x40f, 0x0) (async) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2400, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/pci_bus/0000:00/rescan\x00', 0xa001, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/team_slave_0/medium_id\x00', 0x42000, 0x0) read$auto(r5, 0x0, 0x1ff) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 1m34.35924502s ago: executing program 2 (id=89): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000140)='./cgroup\x00', 0x2040, 0xa) kcmp$auto_KCMP_FILE(0x0, 0xffffffffffffffff, 0x0, r0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x6) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30450080342351d48fc5098d5e5efd5eedb46c007003350800a74fd8273420eb737ead589ed3a49a3ca53b113bf5e464c807", @ANYRES16=r2, @ANYBLOB="00002cbd7000fcdbdf251a000000080001000200000006000900ff7f00000c000600ff7f000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r5 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_tracers\x00', 0xa880, 0x0) pread64$auto(r5, &(0x7f0000000280)='/dev/raw-gadget\x00', 0x6, 0x7) write$auto(r4, 0x0, 0xc6) 1m34.315366041s ago: executing program 2 (id=90): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0) r1 = socket(0x18, 0x1, 0x1) io_uring_setup$auto(0x6, &(0x7f0000000000)={0x0, 0xa, 0x1, 0xa, 0x2, 0x5, r1, [0x400, 0x45, 0x3], {0x1, 0x4, 0x1, 0x101, 0x8, 0xc9e, 0x9, 0xfffffffd, 0x80}, {0x9, 0x9, 0x9, 0x0, 0x2, 0xff, 0x3, 0x4, 0x1}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/rx-0/rps_flow_cnt\x00', 0xc0302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) bind$auto(r1, &(0x7f0000000140), 0xd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) connect$auto(0x3, &(0x7f0000000140), 0x55) 1m34.098444807s ago: executing program 2 (id=94): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) 1m33.672513886s ago: executing program 2 (id=96): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000140)='./cgroup\x00', 0x2040, 0xa) kcmp$auto_KCMP_FILE(0x0, 0xffffffffffffffff, 0x0, r0, 0xffffffffffffffff) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) write$auto(r2, 0x0, 0xc6) 1m33.581780234s ago: executing program 2 (id=97): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0xc, "e000265b7222b141ecb9fb5793abe8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae76900"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4000840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) setpriority$auto_PRIO_USER(0x2, 0x0, 0xfffff8b0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m32.227779289s ago: executing program 3 (id=103): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0x18) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x40001) write$auto(0xca, &(0x7f0000000040)='\x04\x03\x00\r\xfb\xff\xb7\x14\x1a\xce\xebx\x83\x02l\xa5', 0x2d8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x80002, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0) socketpair$auto(0x1, 0x1, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 1m32.16960022s ago: executing program 3 (id=104): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="40cc0000", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c0000001400038010000380090005805647f8223100000018000180140002006e657464657673696d30000000000000"], 0x40}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r4}, 0x1) read$auto(0x3, 0x0, 0x80) write$auto(0xffffffffffffffff, 0x0, 0x6) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x9, 0x0, &(0x7f0000000280)=0x2}) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, 0x0, 0x100000002, 0x100000001) socket(0x18, 0x3, 0x2) 1m30.459592299s ago: executing program 3 (id=108): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x26efe254) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x501042, 0x0) 1m30.31970056s ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x2fc) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aqm\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r2) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x190, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x179, 0x3, 0x0, 0x1, [@generic="fce49214ee25027304", @nested={0xd6, 0x42, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="c2a09447d4a5bc8e6c2eeef6b6a83e7cc061a62f7ef9a8e5e5950560bbdae0e4e37412aeef065538befdd2c6758753bfae8d24af08ca2fd2238d579329a343573d6f6189a2cc6420132660b836054576d6377f4bc1dd5dac0dade19cd7d0b461bb20c0b775ec08e26dbf82f1e1e0690e94ea83305dc13103b0befeb627f67bd4e6a3912e5e0c2b4332eb1806a1c3b0e7d9c7461b5f960fe7017fb72b5094416c572ac2c8d7d5b1fb2d9a5643ba46e9eaa1752b5c4780158bca5eff26fc7a558a14f779c716942ef7a76f669aa677"]}, @generic="53804e67ab4ce878b1c4b4c22f6cd7cbcdc419d9bc614eb3756eb9549696687d9b870c9019079d26279d01f1ce6e8207941cbbbb7efdcca23d11cc9af450fc7fd277651d72b7179fd1e5a98c59b4d12dc98a924cedbae65ececd38d70ca505c289ef8d02d336753655d38cc862498f2756a426291de07761a30c181b9fcab474b0417b1a8c6c94528634bced2da9c3c2", @typed={0x4, 0x5e}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xb513c9a255f17c54}, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xffffffe9) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01022cbd7000fddbdf2503000000100002800c0001000a00000000000000080001"], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 1m29.779757251s ago: executing program 0 (id=112): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0xffffff07) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/bond0/bonding/primary\x00', 0x42502, 0x0) read$auto(r0, 0x0, 0x20000000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x9, 0x9, 0x0, 0x4, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) r1 = memfd_secret$auto(0x0) ioctl$auto_FIOQSIZE(r1, 0x5460, 0x3) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty40\x00', 0x501e03, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = clone3$auto(&(0x7f0000000140)={0x3, 0x8, 0xe, 0x3858133, 0x800, 0x0, 0xf, 0x3, 0x2}, 0x1) prctl$auto(0x2, 0x6, 0x0, 0x3, 0x65) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x1, 0x0) r4 = socket(0x2, 0x3, 0xa) get_robust_list$auto(r3, &(0x7f0000000280)=&(0x7f0000000240)={{&(0x7f00000001c0)={&(0x7f0000000040)}}, 0xbc, &(0x7f0000000200)}, &(0x7f0000000340)=0x10000) connect$auto(r4, &(0x7f0000000080)=@llc={0x1a, 0xffff, 0x8, 0x4d, 0xd, 0x10, @broadcast}, 0x6) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) epoll_create$auto(0x8) ioctl$auto(r5, 0x4b4b, r5) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/hci7/force_suspend\x00', 0x90000, 0x0) capget$auto(0x0, 0x0) 1m28.460196275s ago: executing program 0 (id=117): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/15/effective_affinity\x00', 0x323a02, 0x0) pread64$auto(r0, 0x0, 0x400100000001, 0x1ff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) read$auto(r2, 0x0, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x24000802) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x1102, 0x0) write$auto(r3, 0x0, 0x4000000000) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x17c, 0x0, 0x3ff5bccd379a282d, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0x5f, 0x129, "f5c09345a53d5666ddb528c164e468100825280db78adf8180b13a4e2be139a065e3603ae4c630769b594fbebdf4985d4bca59adcf23321f6e1243bc00d2a5fc538e3158bda2a42d8248eb9defe0ce6826a8d91ac962bf50228cd7"}, @NL80211_ATTR_MAC_HINT={0x102, 0xc8, "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"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) open(&(0x7f0000000000)='./file0\x00', 0xc2103, 0x140) 1m28.45534635s ago: executing program 3 (id=118): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) stat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x7, 0x0, 0xea69, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001, 0x6, 0x3, 0x803, 0x1, 0xffffffff, 0x8, 0x0, 0x9, 0x6f}) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) ioctl$auto_EVIOCGEFFECTS(r3, 0x80044584, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x201800}, 0xc, &(0x7f0000000700)={&(0x7f0000000f40)={0x15f4, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY={0x35d, 0x14, 0x0, 0x1, [@nested={0xdc, 0x8, 0x0, 0x1, [@typed={0x43, 0x6c, 0x0, 0x0, @binary="8f14d51a251ded73512578b5813713881ec445c3c5d1376cb388050b211ccf4e4be531ba5e6919db955929b2935fa9bfbb5091f59a96f8c8dd629ba27d35dd"}, @nested={0x4, 0x12c}, @typed={0x8, 0xd7, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x6f}, @typed={0x64, 0x40, 0x0, 0x0, @binary="7e5d3afe68a4b3546d8ac11820cd25a1d3f5c8da9847e17ea89a980c8d5b35aee31878879ec16a08d3f3ba4735aa330aed5835c4fc786e92846dabefaaecb13b936b8c94e40e4a793033612a6142624a50db39bb7efbf51b4848705297004597"}, @typed={0x8, 0xdc, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xa}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xf}]}, @generic="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", @generic="f4f098d82de16b8b0ee86bb2b2f9e48f6ffbafdbce9edb1cea043fec8f7bd1e6d12229152f6292fe022900a3df2b26027f073c1cf1df2a8f50b53dc64a2af2b74a62e4ef999a8e092117ab4510874aade41f5af6f3a1c5ea3fe94b07", @generic="aaeb1c0c6a01ce5ecd9b9cbfe426e05958069b86174714ba1bb10397235347eec30631", @typed={0x8, 0x29, 0x0, 0x0, @fd=r3}, @generic="7d8d54bbe232fb2d8bbb073d2c866e3466c730a1f7a75acaf59462e4ea605d90a752433d3fc1c3270b5f08b287e10a89c18a636240daf7f896cb7f51ee652c9e7da511af8d76490e0c48f58c8724d9d9b69bf5ec8ba483bc230638dc0ec98e4d23094d9bc4ba514368809843383ba98b8b09433cd5ab7b256ee94f4a8e1e0bed5efef9b9fc01f9205b37817e362cff6c03e13713eb94dd30a7436f60af028c5e39271ad724baea7f858893d18cf35928c4eacbb92e94832605dc68a8298e52d49ded91dff37bf2da69279f2f26292e835e2b2c985319c30606fa9ac9af3bd25e7c5f340254c9f4b692da9b9375c3852fdf89f8851feff4"]}, @THERMAL_GENL_ATTR_CDEV={0xcc, 0xe, 0x0, 0x1, [@nested={0xc0, 0x2c, 0x0, 0x1, [@generic="e5ccbdc4caa6b32a4669113e30534cb41cdecda6c46c067857193bf67a3380a5b9d64c2ef2e606970886de25cc44eafa41534240f3ee13f9848d430584877fa6cebc80bd88cbbb2958c045b40578c02a14a3489b0ba0351257433c22b2e401d1bda4f5867e23ed216f60b94858080cb6ae192ffb2ab8e9dca452b53520671c6650ec8c5c3470883907cb2f4cf989756be3b756ade34eb7a8dbf10d2e", @typed={0x8, 0xb2, 0x0, 0x0, @fd}, @typed={0x4, 0x76}, @typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}, @nested={0x8, 0x33, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x5}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x7b3}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_THRESHOLD={0x1183, 0x18, 0x0, 0x1, [@generic="f6ac4eaec0f42c5d749882d9dd9e5470fab9de5991377c0607881cd04c942b786edd763d720bb469a4e77abf98db2ebd85ecfcea45f93b53521e3f2208b47758e286bd5d0cce98480e4dd9e71786b4cc6a3dac369b24363eb133a158864f5f51d6", @nested={0xbb, 0x9, 0x0, 0x1, [@nested={0x4, 0x8b}, @nested={0x4, 0x9a}, @generic="66c23528507246906f48c9fa547094d18573f8940cc57fd8b2f77e4ea0f1172e52133746544d3f5bd545da4cb333744bab0506", @nested={0x4, 0x148}, @nested={0x4, 0x118}, @nested={0x58, 0xcb, 0x0, 0x1, [@nested={0x52, 0x5d, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x38}, @typed={0x9, 0x84, 0x0, 0x0, @str='\\./#\x00'}, @generic="e6af8c1c7f1c0a56cce7a9af920f5bff8ce804fd04f9213b606895613696812352aea1a8c487"]}]}, @nested={0x4, 0x5d}, @nested={0x4, 0x209b}, @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@remote}]}, @nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x9}]}, @generic="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", @nested={0xc, 0x12f, 0x0, 0x1, [@nested={0x4, 0x7d}, @nested={0x4, 0xa4}]}, @generic="cd4ec120a5bd44992d10b342ca8da71a9db72b001426720f73cc08dfc884a00a5b7466dfa706287dac04e65533f8846e246b99ec598d04efd7f2ba64efe8f2345bc3", @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}]}, @THERMAL_GENL_ATTR_TZ_NAME={0x8, 0xa, '\xb9\xf4\x00\x04'}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x5385}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x3c6}]}, 0x15f4}, 0x1, 0x0, 0x0, 0x6165dc44e6e9248b}, 0x4000000) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00366b", @ANYRES16, @ANYBLOB="000025bd7000fcdbdf25090000000800080004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) socket(0x28, 0x5, 0x0) epoll_create$auto(0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = userfaultfd$auto(0x1) statx$auto(r6, 0x0, 0x1000, 0x8, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="040028bd700000000000010000000800080000000000c20002804392802407cd228843c9a6445e69e935f23fdc92af34b96d3836070a7573688027900201cf02d5dad6c385d6c25ed12fef73edafa2ccd20676f3558f9603dd5283a90cb4f7abf5ac26a780c580c2536596d3983fdbf7ed7c7d79d40a11d78e68603040b03f7a20e405ed2cfa47b307944252b6e59c9f0cdc6be84278cba06331afa36a43f9f3f284dc21183cd4249a21d7adbfa6ac76e659e20ee36502737d4884a4353e32171a6769ed8dc3f66f883934f46bf99b4be47145dbf6b9bf13000004000600040006000800070002000000080001003686b7d8edbe5b3f58aff3c0dda1f956e74e8991b2242205d8d5570dc2555d205f2b2ce4cee910369efb20cb479ff788e358c105b413cd1bc60b902787ca35cc87cc190061e2948455625b8eb3398b0eaf6084517d1fb78fcd5d117c9be23f32890a69a8c7927de060cc5f9c8bd8dfffe546c4d68fd3b5f772973a880e30a55c4f05724d8723f2e72195415f0b84306a541f9e0c088790aaed06e54eb4c8517b41f50e26559a9370168d363485f6c14160b75f95135e4d268cc8939bf54579299334e7ccb0ccf9a512daa62e85201daf70ae283d1cb1c8211f39a6ff49e675db24ecadb5ab994f738397", @ANYRES32=0x0, @ANYBLOB="080007000a00000008000100", @ANYRES32=0x0, @ANYBLOB="0800040007000000"], 0x110}, 0x1, 0x0, 0x0, 0x4000020}, 0x40004) mmap$auto(0xfb, 0x2020009, 0x4, 0x19, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0xffffffffffffffff, 0x8000000800008400) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x1000000003, 0x41) lsm_list_modules$auto(0x0, 0x0, 0x7) epoll_ctl$auto(0x5, 0x3, r5, 0x0) 1m28.207665245s ago: executing program 0 (id=119): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000040)="6f116a76b0d697a75ace4d5d869d353e154aa6882f8be1c8dd8d51a004ca1df5940914fc868a9f3f9cb92b439e38e3d5ffe37f928316ca816bb37f64bee9d2", 0x3f) r1 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x74, 0xadb, 0x3}, 0x80) read$auto_dfs_global_fops_debug(r1, &(0x7f0000000100)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001c80), r2) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'NLBL_MGMT\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x22008044) 1m28.127578138s ago: executing program 0 (id=121): socket(0x80000000000000a, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x2, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getgroups$auto(0xeda, 0x0) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2=0xe000000d}, 0x19) shutdown$auto(0x200000003, 0x2) pidfd_open$auto(0xffffffffffffffff, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) ptrace$auto(0x10, 0x0, 0x4, 0x7) 1m27.905568345s ago: executing program 3 (id=122): mmap$auto(0x0, 0x20009, 0xdf, 0xeb0, 0x401, 0x8000) socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, 0x0, 0x1d) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x170, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MLD_ADDR={0x66, 0x13a, "9bd0253fe0a85f6df369d6bdc4b87ac70f8ef587f7ab2b10982f2c84ee816a1accde3002a5c13f4907d978aae6adf4044d8a15c778e7668d3276504c4aca2d7f4c7c55c02ddacc63c55273cf058ed5cb63bc1c53a0951e96642dda9af42bb5dce0e8"}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_PMKR0_NAME={0xe3, 0x102, "be8ff661707f0784309dbf5ae1f485c34127da340b5577aecf6f79e6f5da0269dce279e47d8058a895c7256c3da245dac2decdd43798c9afdb684521ea5ae576bc8f6353b84be4bddbc66a1fa5eb739e06bf19f88fc561d125539c2fcc053d7c9c8d9ae0f7dfac9e360c3ca48a0d9c4c8c12415262c3fddcbbdd19409fb3841d08f95f1de419d3e5d69fe2c14d7da97883bfb8b6935350653313792e54f7933184bfb63ddce692bd00f22b39bd895c3988a7feb00f0398eded2faf213b80af0188585349ee2690f799aeed70ab59bf9973d815b5a0177f988d50170708c448"}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) write$auto(r5, 0x0, 0x5) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto(0x3, 0x4020565a, 0x38) 1m27.567817359s ago: executing program 0 (id=123): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, 0x0, 0x341, 0x0) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000000100)="8a6a535cb3741c546c24eb03a1c43bd52166dc3b4f846c845d098d0bd5ea2f2b83b3cbfe304948ed6bb22638761c90f27664c0bfeb963018f4ef21d02e32418a5a3d5514d042ba662a2e1fe367763c91ec8f1565c8a3594f323091b2f4aa604e778ba9642cd41d2036c839b4208464be2a3110652e2b797b26918c95175744b14abd18a51a1b8f0691dd088129e64bf3f1b2295c9fd2d865a95979cc6dd34e5e7fff00f90b4023bdcb74fdc973fe64180fafcca83d7dafaa0ebe6217", 0xbc) 1m27.384606615s ago: executing program 0 (id=124): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x700, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') setns(r1, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x7, 0x12, 0x7c, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) 1m23.267810065s ago: executing program 1 (id=129): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$auto_rfkill_fops_core(r0, &(0x7f0000000040)="6f116a76b0d697a75ace4d5d869d353e154aa6882f8be1c8dd8d51a004ca1df5940914fc868a9f3f9cb92b439e38e3d5ffe37f928316ca816bb37f64bee9d2", 0x3f) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x74, 0xadb, 0x3}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001c80), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'NLBL_MGMT\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x22008044) 1m23.253689185s ago: executing program 1 (id=130): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd13/queue/scheduler\x00', 0x6ac22, 0x0) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7gOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\x17x*\x85\xde\xab\xb0\xac\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\fb\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfb\x00\x00\x00\x00\x00\x00\x00\t[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe6u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02hrg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc531\x8b\xf2J\xd8\xe3\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa\x00\x00\x00\x00\x00\x00\x00\f$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7G\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb5\xf1\xf8q\xb4B\xf6\xbd\f\xb7\b%}\xc2\x89.P?\x9a+L\xb6/t\x83\xa3\x99\xc1\xc9$\xcb\xf9m\xf0\tG5\xa1v\a[Y\xef\xbd\xc3\x8ax`', 0x2000098c4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x3, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x6, 0xd, 0xfffffffe, 0x9, 0x7bff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0xfffffffd, 0x1, 0x15fbe, 0x6, 0x6}, {0x800, 0xe8, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7ffffffffffffff8}}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyd4\x00', 0x519023, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x0, 0x0) r2 = prctl$auto(0x3e, 0x100000000001, 0x0, 0x1, 0xcfb) write$auto(r1, 0x0, 0x100000a3d9) io_uring_register$auto(r2, 0x800000e, 0x0, 0x20) shmctl$auto(0x0, 0xd, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/bus/hid/drivers/waltop/bind\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000008724d4186bcfa339fc289856f2960c228f30c4e7ae375ac1dff8939847aa1403f19788c66260439c2c52f2445becc576d597917485f579581759493ce0bd45be8617f14ebddadf34817d6bfb177b0388444027ee86888211599352988cdcda42b30bd007255f0d8fb12999c2d0925d231c8a9f781c805a2e64128d987d223a8045c1ea9478181d151472dca96a2c9164891858dfe7d142bf26c984527a6c01f4c738fe4cfdc5f5ab04ef04b6f79d85fec8aac66cf0a8466cb8eacad6bd01e515b59d2b4a45c0aa32", @ANYRES16=0x0, @ANYBLOB="40022dbd7000fedbdf259c00000006003600080000000800dc008200000005001901800000000500590001000000"], 0x34}, 0x1, 0x0, 0x0, 0x440}, 0x41) mmap$auto(0x4000000000000007, 0x0, 0x2, 0x1c, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x12, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r3, 0x2, &(0x7f00000000c0)=',/-%,\x00', &(0x7f0000000080), 0x3) madvise$auto(0x12, 0x1, 0x8) munmap$auto(0x4, 0x800005fb3) 1m22.384118909s ago: executing program 1 (id=131): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) fchmod$auto(r0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/config/target/dbroot\x00', 0x40180, 0x0) (async) setfsuid$auto(0xee00) (async) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x2) (async) fchmod$auto(r0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) open(0x0, 0x14927f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) (async) 1m22.271377776s ago: executing program 1 (id=132): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) write$auto_tracing_mark_fops_trace(r0, 0x0, 0x0) 1m22.269149842s ago: executing program 1 (id=133): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x5, 0x2, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r1) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf250400000008000100", @ANYRES32=r1, @ANYBLOB="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"], 0x1c}}, 0x20000004) (async) setsockopt$auto(r0, 0x119, 0xfffffffe, 0x0, 0x8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x1d, 0x2, 0x6) (async) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r6 = eventfd$auto(0x200) setsockopt$auto_SO_RESERVE_MEM(r6, 0x5, 0x49, &(0x7f0000000000)='/sys/kernel/debug/o2net/connected_nodes\x00', 0x8001) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) sysfs$auto(0x2, 0x10000000000002a, 0x0) (async) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) (async) write$auto(0x3, 0x0, 0xfdef) 1m21.941357303s ago: executing program 1 (id=134): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x8400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0xffffffff, 0x10000) mmap$auto(0x400000, 0x1000000400008, 0xdf, 0x9b76, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x86022, 0x0) write$auto(r0, &(0x7f0000000740)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x9b\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x04\x00:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\t\x00UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x03a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a 3b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\xd6\xbc\xf3f\x1eG\x95p\xebD\x84\xc83\xfd\x8b\xc4\x17\x13^v\xa4\xb0\x02OK \nS\xcb\xd1\xd5*\xd2\xd3J\xce\xb7\x12\x87$w\xc5#_Z\xc5^\xb9\x17\x1f*\x91\x0e\a\x1e\x8deO\x1bYG\n\xd64\xaf\x99\x1c\\\xd9j\"\bo\x1f\x99\xf1\r\xe90x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x170, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MLD_ADDR={0x66, 0x13a, "9bd0253fe0a85f6df369d6bdc4b87ac70f8ef587f7ab2b10982f2c84ee816a1accde3002a5c13f4907d978aae6adf4044d8a15c778e7668d3276504c4aca2d7f4c7c55c02ddacc63c55273cf058ed5cb63bc1c53a0951e96642dda9af42bb5dce0e8"}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_PMKR0_NAME={0xe3, 0x102, "be8ff661707f0784309dbf5ae1f485c34127da340b5577aecf6f79e6f5da0269dce279e47d8058a895c7256c3da245dac2decdd43798c9afdb684521ea5ae576bc8f6353b84be4bddbc66a1fa5eb739e06bf19f88fc561d125539c2fcc053d7c9c8d9ae0f7dfac9e360c3ca48a0d9c4c8c12415262c3fddcbbdd19409fb3841d08f95f1de419d3e5d69fe2c14d7da97883bfb8b6935350653313792e54f7933184bfb63ddce692bd00f22b39bd895c3988a7feb00f0398eded2faf213b80af0188585349ee2690f799aeed70ab59bf9973d815b5a0177f988d50170708c448"}]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) write$auto(r5, 0x0, 0x5) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto(0x3, 0x4020565a, 0x38) 1m6.673242931s ago: executing program 35 (id=134): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x8400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0xffffffff, 0x10000) mmap$auto(0x400000, 0x1000000400008, 0xdf, 0x9b76, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x86022, 0x0) write$auto(r0, &(0x7f0000000740)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x9b\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x04\x00:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\t\x00UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x03a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a 3b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\xd6\xbc\xf3f\x1eG\x95p\xebD\x84\xc83\xfd\x8b\xc4\x17\x13^v\xa4\xb0\x02OK \nS\xcb\xd1\xd5*\xd2\xd3J\xce\xb7\x12\x87$w\xc5#_Z\xc5^\xb9\x17\x1f*\x91\x0e\a\x1e\x8deO\x1bYG\n\xd64\xaf\x99\x1c\\\xd9j\"\bo\x1f\x99\xf1\r\xe9f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) r2 = socket(0xa, 0x1, 0x84) connect$auto(r2, 0x0, 0x54) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x40047452, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) 55.717351048s ago: executing program 6 (id=163): r0 = syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket(0x28, 0x80006, 0x5) r3 = epoll_create$auto(0x9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES16=r3], 0x1c}}, 0x40840) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea\x03*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xff\x9e],Az^\xc8\xe6\f\x15?\x84\xd1\x7f', 0x100000a3d9) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x6, @raw, 0x7ffffffe, 0xffffffffffbffff7, 0x1000000003}, 0x0, 0xf4243, 0x1) socket(0x2c, 0x1, 0x8) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r2, 0x8000) mlock$auto(0x112, 0x9) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x0, 0x74}, 0x82, 0x7) r6 = socket(0xa, 0x1, 0x84) connect$auto(r6, 0x0, 0x54) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0x40, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='4', 0x1) kill$auto(0x0, 0x11) mmap$auto(0x100000001, 0x9, 0x67, 0x16, r1, 0xa491) 54.559163806s ago: executing program 6 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x2fc) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aqm\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r2) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x190, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x179, 0x3, 0x0, 0x1, [@generic="fce49214ee25027304", @nested={0xd6, 0x42, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="c2a09447d4a5bc8e6c2eeef6b6a83e7cc061a62f7ef9a8e5e5950560bbdae0e4e37412aeef065538befdd2c6758753bfae8d24af08ca2fd2238d579329a343573d6f6189a2cc6420132660b836054576d6377f4bc1dd5dac0dade19cd7d0b461bb20c0b775ec08e26dbf82f1e1e0690e94ea83305dc13103b0befeb627f67bd4e6a3912e5e0c2b4332eb1806a1c3b0e7d9c7461b5f960fe7017fb72b5094416c572ac2c8d7d5b1fb2d9a5643ba46e9eaa1752b5c4780158bca5eff26fc7a558a14f779c716942ef7a76f669aa677"]}, @generic="53804e67ab4ce878b1c4b4c22f6cd7cbcdc419d9bc614eb3756eb9549696687d9b870c9019079d26279d01f1ce6e8207941cbbbb7efdcca23d11cc9af450fc7fd277651d72b7179fd1e5a98c59b4d12dc98a924cedbae65ececd38d70ca505c289ef8d02d336753655d38cc862498f2756a426291de07761a30c181b9fcab474b0417b1a8c6c94528634bced2da9c3c2", @typed={0x4, 0x5e}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xb513c9a255f17c54}, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xffffffe9) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) (fail_nth: 2) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022cbd7000fddbdf2503000000100002800c0001000a00000000000000080001"], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 51.697579323s ago: executing program 7 (id=173): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2, 0x2000de, 0x14, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)="de7c82aab0b8290c317dfc90067ddf65a343f363269afbbf204e2578438e0266c68fb178133f8c372011cec09136917abb7fbe2c751e37527343b01b8d91") futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) socket(0xa, 0x5, 0x0) 51.539763718s ago: executing program 6 (id=174): mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_getoverrun$auto(0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x800, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) close_range$auto(0x0, r0, 0x2) socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x10002, &(0x7f0000000140)=@batch={0xc0000000, 0x7, 0x10000, 0x24, 0xa000000, r1, 0x0, 0xdc23}, 0x800) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) io_cancel$auto(0x5, 0x0, 0x0) socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x3) socket(0xa, 0x1, 0x106) bind$auto(0x3, 0x0, 0x69) connect$auto(0xffffffffffffffff, 0x0, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "1200a9800300"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = memfd_secret$auto(0x0) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 50.564576842s ago: executing program 7 (id=177): openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x28, r1, 0x13, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x3f}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0480c0}, 0x48050) rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') 50.271840828s ago: executing program 7 (id=178): msgsnd$auto(0x58f6, &(0x7f0000000380)={0x6, 0x8}, 0x8, 0x6) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(r0, 0x921064a5, r1) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) getsockopt$auto_SO_LINGER(r2, 0x6, 0xd, &(0x7f00000002c0)='/dev/dsp\x00', &(0x7f0000000340)=0x3) r4 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@raw_tracepoint={0x0, r2, 0x0, 0x10}, 0xff93) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000140)={0x3, 0x0, "8527f02489e38b9fbcb04f67675dc20d", "d92ed2c7391379d3dde51a08a285d447", "09dde858d8d5a2beb74406befec7ea0513b8c493f0257f43d14cd24d67be504b", "8edf9e6600b32c113f6602279f01f45858ff278657b55a461a425d005dc1d9d13e42b1d0c341cc54e2d17f5b5cb2c2b67a7fac5a3ee84bda0ed2387398ae819f08aa2dd4654d8b6ad0219a17ca1b92e8", "56857f1f749b295844b7c7e9a97e0fbb", "d4031249ebe8631601f601553539654bac7239780c1915457e3d4569253fb4d652f6e3136aec1d0941e934f154573b3a0ba719a1a50bce4073472fdb7e87bba6ccc9a85bbdbbe58a977025a3b5a163ef", "0d84211482efead21674c8e5e7f5f46cb96c10d5676e074cbe906f424546efdd95b3578d50c323e8d45b67f9eabb8ed235e0e938b3f3150c1f68d75e883e532cbc52d4dce7f00c617d288be344455f2a0ae4e5d46b0eac932406677a0bc94fc92f3b08d7e3ab09a57b86c1d4ba59e884fc610d97ab3ffc44eb685ebc4ac172c5"}) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x89b41, 0x0) mount$auto(0x0, 0x0, 0x0, 0x5ccb2303, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x800, 0xfffffffffffbfff9, 0x9, 0x8000000008013, 0x3, 0x101) write$auto(0x3, 0x0, 0x5c8) 50.048211336s ago: executing program 7 (id=179): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000000100)="8a6a535cb3741c546c24eb03a1c43bd52166dc3b4f846c84", 0x18) 49.780778524s ago: executing program 7 (id=180): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x28, 0x80006, 0x5) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2b, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) r2 = socket(0xa, 0x1, 0x84) connect$auto(r2, 0x0, 0x54) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x40047452, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) 49.749493425s ago: executing program 6 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x2fc) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aqm\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r2) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x190, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x179, 0x3, 0x0, 0x1, [@generic="fce49214ee25027304", @nested={0xd6, 0x42, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="c2a09447d4a5bc8e6c2eeef6b6a83e7cc061a62f7ef9a8e5e5950560bbdae0e4e37412aeef065538befdd2c6758753bfae8d24af08ca2fd2238d579329a343573d6f6189a2cc6420132660b836054576d6377f4bc1dd5dac0dade19cd7d0b461bb20c0b775ec08e26dbf82f1e1e0690e94ea83305dc13103b0befeb627f67bd4e6a3912e5e0c2b4332eb1806a1c3b0e7d9c7461b5f960fe7017fb72b5094416c572ac2c8d7d5b1fb2d9a5643ba46e9eaa1752b5c4780158bca5eff26fc7a558a14f779c716942ef7a76f669aa677"]}, @generic="53804e67ab4ce878b1c4b4c22f6cd7cbcdc419d9bc614eb3756eb9549696687d9b870c9019079d26279d01f1ce6e8207941cbbbb7efdcca23d11cc9af450fc7fd277651d72b7179fd1e5a98c59b4d12dc98a924cedbae65ececd38d70ca505c289ef8d02d336753655d38cc862498f2756a426291de07761a30c181b9fcab474b0417b1a8c6c94528634bced2da9c3c2", @typed={0x4, 0x5e}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xb513c9a255f17c54}, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xffffffe9) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) (fail_nth: 3) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022cbd7000fddbdf2503000000100002800c0001000a00000000000000080001"], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 48.272368718s ago: executing program 7 (id=183): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) unshare$auto(0x40000080) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0x2a0a02, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) madvise$auto(0x0, 0x3, 0x66) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x121180, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r2, 0x0, 0x0) 36.332970128s ago: executing program 8 (id=230): mmap$auto(0x3, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xffff, r1, 0x80000000000005, 0x7) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0x1, 0x7bfffffff000) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="180229bd7000fcdbdf257c000000060010009d0000000400d100e601458014003e00fe80000000000000000000000000003c1400ff0020010000000000000000000000000002a136500d4912fe7e055252c7803ebad3bf24134aea9da8e04b6bc34f243f32a61e6f6dd2dc731fa6c3d154f85cee260ed93752db7de261c3ed74d57d4114339ee9d3f54fb44fc4ea9d717c2c34976b3864b5dabb7ae6dd1c235c57a00c168290b0d278bf979f7a05b88d397444b4eae325323b89525f04751d09ae6cb48973fd8c623238c6109713ac059a62fffacbdba9ed27f3cf1400610000000000000000000000ffffac14141614001200fe8000000000000000000000000000aa0400a600b5a0032d25f82f7b747c8754f15e8e6d48d11ddd9e93089039b6f05c188bbcd4704be18da20093d602cc0acc9d7b8fde37ac0bd756c801913a31ba4cce11da82a63cea531c66891a0ec5660d82183b627cb98a82223ef85f4f37442d52fcb6cea1a0b7fcdf8001640604256119d76768aea42ee6e125580491c17a96a305cff29ec2ba15f30e0f95918e20b3ce57f44c3d9a20a35ddee8bb8630003a35786fc7749112cea69ec4a499116ac3845e2d065a1218e7391466d68669de8158f99fcc70fc7720ebbbda3a9a834da6b5029601ff95c74b022afd7894a515f411e4955bbb428f079ab313c1fc6eac238c311c08af0e2e0bc8714a1a6d0000b3010e00f4e22a6708207b7b8ffdd18404c2748abe6295183eeaecc59bad2b03cc3bf345f6027fdb9a762171a2f2c328cc88c7e78d7bcfe267a67637ac2d066d990d111a34aba8fb61f78ad60f70145d0e24f5a1bcc285703b265f71b4c9c918d29c51269749fe221e356e8c7f8bfbc06956872355af44055c1673eb11ebe00f7cd86dfb8149a02776192bba76874f979edbf13bbeb2464a6b53e1217378d4096a31d36a7c54de77430dff2ad0f26604df03b22b3e4d9c5641ae20a2e2eb609e104496909cc6e6ec15abd6be5fde3bc3a8fbbc588411343578a1468312f94ba4cc2f8819219dfb85ac3ec3046ea06346592a03879648a03e2a151365a9ae1dbae816b5d46180894e84d2147518e9c7136448c1c4cee96896392851fd4f36a79a307b0d4facd338f69e75e01a5edbc071a407f42bdcde84af95b34978a5fb6841000a0143dad889838637e626d9a8ec9f0cc1d73875918e88b95942f9d6684116e5a51daa41bfefab686ba1d4ee3b1dba77600a99f8b5279cb526c6a74370e8144c262af86e373de705f0ec75b71cb77e8b0bb7a4a88c20f7ef77aa65eb30d31ea8795d9877a80562b1f56defe6d9855721a6940006004301140c00000500d30003000000"], 0x3cc}, 0x1, 0x0, 0x0, 0x11}, 0x4b7ac0aca59c61d1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/lo/use_tempaddr\x00', 0x702, 0x0) sendfile$auto(r2, r3, 0x0, 0x800048) close_range$auto(r3, 0x8, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x1f, 0x7, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x9, &(0x7f00000002c0)={0x0, 0x8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0xfff, 0x0) socketpair$auto(0x8, 0x3, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 35.632007451s ago: executing program 8 (id=232): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x10be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000340)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x1000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) r1 = socket(0x22, 0x2, 0x24) getsockopt$auto(r1, 0x3, 0x1, 0x0, 0x0) r2 = socket(0x2, 0x0, 0xffff) bind$auto(r2, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250f0000000c0007800800020012545e047cbf7caee591ff7b3caf77776860d1492ea0a50f5ab32ed2d578be98e47c9cd26d50b79ff6bfe6129305ad86c9db00245d5353e35b30399c2fc46da54396b36ea766cc27fc57ff893ce48714af7c009c89d0255833c9024daaa4468d9d3847d044d0fcfa67b5b7ca9b6b8ff8e95e4d16ed0eae084e00000000000db8cd306d50b6f199bbb1b27d1ea8688af4316d0340111d6e9862", @ANYRES32=0xee00, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80802, 0x5) socket(0x2b, 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r6, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) madvise$auto(0x0, 0xf663, 0x15) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x0, 0x400053, 0x9) 35.031061592s ago: executing program 8 (id=235): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x28, 0x80006, 0x5) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) r1 = socket(0xa, 0x1, 0x84) connect$auto(r1, 0x0, 0x54) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x40047452, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) 34.389536262s ago: executing program 8 (id=237): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) init_module$auto(0x0, 0xffff9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) write$auto(r4, &(0x7f0000000100)='/sys/kernel/debug\xd4\x00\x00\x00/vkms/Writeback-1/edid_override\x00&\x9c\xabdj\xaa\x87\xe6[J!y\x80r', 0x80) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000600060004000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000000000a000100aaaaaaaaaabb00000a0001000000000000000000060006000300000008000200", @ANYRES32=0x0, @ANYBLOB="000200", @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3040, 0x6, 0x6ed, 0x400a, 0xffffffffffffffff, [], {0x6, 0x3, 0x8c48, 0x6, 0x3, 0x3, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0xfffffffe, 0x1a7b870a, 0x76c1, 0x8, 0x100000000}}) (async) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfffffffffffffffd, 0x4, 0xb0, 0x7, 0xa, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4ef3, 0x0, 0x3]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 34.310411695s ago: executing program 37 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x2fc) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aqm\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r2) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x190, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x179, 0x3, 0x0, 0x1, [@generic="fce49214ee25027304", @nested={0xd6, 0x42, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="c2a09447d4a5bc8e6c2eeef6b6a83e7cc061a62f7ef9a8e5e5950560bbdae0e4e37412aeef065538befdd2c6758753bfae8d24af08ca2fd2238d579329a343573d6f6189a2cc6420132660b836054576d6377f4bc1dd5dac0dade19cd7d0b461bb20c0b775ec08e26dbf82f1e1e0690e94ea83305dc13103b0befeb627f67bd4e6a3912e5e0c2b4332eb1806a1c3b0e7d9c7461b5f960fe7017fb72b5094416c572ac2c8d7d5b1fb2d9a5643ba46e9eaa1752b5c4780158bca5eff26fc7a558a14f779c716942ef7a76f669aa677"]}, @generic="53804e67ab4ce878b1c4b4c22f6cd7cbcdc419d9bc614eb3756eb9549696687d9b870c9019079d26279d01f1ce6e8207941cbbbb7efdcca23d11cc9af450fc7fd277651d72b7179fd1e5a98c59b4d12dc98a924cedbae65ececd38d70ca505c289ef8d02d336753655d38cc862498f2756a426291de07761a30c181b9fcab474b0417b1a8c6c94528634bced2da9c3c2", @typed={0x4, 0x5e}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xb513c9a255f17c54}, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xffffffe9) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) (fail_nth: 3) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022cbd7000fddbdf2503000000100002800c0001000a00000000000000080001"], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 34.199741321s ago: executing program 8 (id=239): r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) r1 = socket(0x23, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0xff, r2, @relative_fd, 0xe600}, 0xf) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x30c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}, @MACSEC_ATTR_OFFLOAD={0x2e8, 0x9, 0x0, 0x1, [@generic="ab51d8cd3b5d2d6b1b15a3fff792ab74593a64eb18238baff18efb917d18d6b662d325aef4ffe52607cfa87b64aeda81450ef7e3373ab78c84005c735623950b8e55b1e37f0c30c3c0b8fbf06de56b6364f1254d300aecd8d7bdc8227429c74eda78af8e46faac744b4fc8fd1cbaf53c91bb8af4255614f578ba9c403e9eedd41d0fddaecb", @nested={0x44, 0x56, 0x0, 0x1, [@typed={0x2b, 0xd6, 0x0, 0x0, @str='/sys/kernel/debug/tracing/trace_marker\x00'}, @typed={0x4, 0x7}, @typed={0x5, 0x5c, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@remote}]}, @generic="a9dfbf9a6d8d14ad7f0b37086d5e07f22b5ac2b204fa6bf6ff1bf249514d4eed03cf034a396b3ac8eb14eeb267d20c04bc90405d995329860011036ba8ff38de4aef094272478d4e862101e0b85ffb8ddbc3c009ed9ac4531db8f56fd630e9c12edf313bdf3e4f", @nested={0x1b3, 0xa5, 0x0, 0x1, [@generic="6b468cb3cde9da1a683f9681042b4a092d4c7a2da5242023553d406ce7a9db68c5a0b2a57ba984629a27b080815ce9283186355c41b3627ce3e422b51bf1fa9c95fdcae62ec9eb450c0cdc1c257ab3b5bdf827abe6a77f64b95a30571b7a90e11b1691510962e5350b67289cb35da8bef413c67d725f390fd85830811f0f074d92e88a84fdba84b45bc9362773807e01cffad8c0d13f7b123409c03ed0d3a2421ebdba61984dc8f5860ae3a910e20df5cbfa91ea11d2d4c13666ce5158e90c3edf2130709fd71092e33b6fb9d5282e1c8e0ec737c514c42cfc17dbf69a84c460d03585", @generic="099e2af03c337c3823738bf31937647816b3aef61a01a1258efcf93ecf6f5bc4481e5aae60382de46f095fa8e1a016b85c4c2dc2a36707b07d22d768aaa799c139c3234dd0ebe041e33f53dec33e546c3780f4173f8736e3300fd626851b8349830bf84892fd366000f27fcd378272b2ca48b863307127b3cf64993d05576fa75f7a5526409bba806bb52e4b217d29e020ae578091efea8dd5574d3b0e72f1bdaf020df41225bdb1cb9242b83e9f79757520f5996823fb91905caf9b4f034e1861d52430b73069d48fabf891"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x30c}, 0x1, 0x0, 0x0, 0x48854}, 0xc000) poll$auto(&(0x7f0000000000)={r1, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r6, 0x113, 0x3, 0x0, 0x79ad226b) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000000100)="8a6a535cb3", 0x5) 33.191206501s ago: executing program 38 (id=183): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) unshare$auto(0x40000080) socket(0x11, 0x3, 0x400) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0x2a0a02, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) madvise$auto(0x0, 0x3, 0x66) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x121180, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r2, 0x0, 0x0) 33.185637613s ago: executing program 8 (id=242): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) seccomp$auto(0x401, 0x10, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x3, 0xa) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x8004) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x89, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0x1, 0x10) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) 21.195467039s ago: executing program 9 (id=277): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x2, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, r1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) open(0x0, 0x6001, 0x8) process_vm_readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040)="0e5165", 0x1}, 0x2, &(0x7f00000001c0)={0x0, 0x7}, 0x2, 0x0) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000240)={"f63073df8058c302b0d3672f446ffae0e2e72cce81bb817c6c1737b5f32b9d13", 0xaf, 0x2, 0xda, 0xffffffffffffffff, 0x7}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) 20.18582355s ago: executing program 9 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001c80), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'NLBL_MGMT\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x22008044) (fail_nth: 4) 19.811764786s ago: executing program 9 (id=280): mmap$auto(0x0, 0x2020009, 0x7, 0x13, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r1, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090329bd7000fddbdf2517"], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044840) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) futex_waitv$auto(0x0, 0x6, 0x5, &(0x7f0000000100)={0xa4, 0x4}, 0x9) mmap$auto(0x0, 0x2024009, 0x1500000, 0xeb1, 0xffffffffffffffff, 0x8000) 19.061771839s ago: executing program 9 (id=283): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r0, 0x80a86f3d, 0x38) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xc, 0x2, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) write$auto(0x4, 0x0, 0x100082) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0x6, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x49, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) shutdown$auto(r1, 0x463) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x77) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000001c0)=0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) 18.107287133s ago: executing program 39 (id=242): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) seccomp$auto(0x401, 0x10, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x2, 0x3, 0xa) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async, rerun: 32) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x8004) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x89, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0x1, 0x10) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) 18.091216901s ago: executing program 9 (id=286): socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000100), 0x6b) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x400c014) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x400280, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) 17.097863071s ago: executing program 9 (id=290): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0xc0304d18, 0x8) r1 = socket(0x2a, 0x2, 0x8001) close_range$auto(0xffffffffffffffff, r1, 0xb) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket(0x1a, 0x80805, 0x0) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/247, 0xf7) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x2a1, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, 0x0, 0x0) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x101501, 0x0) socket(0x10, 0x2, 0x0) move_mount$auto(r7, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x80000001) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) 13.928401483s ago: executing program 5 (id=300): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x100000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = clone3$auto(&(0x7f0000000000)={0x4, 0x8, 0x8, 0x4, 0xffffffff, 0xac, 0x1, 0x8, 0x3, 0x0, 0x6}, 0x8000000000000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)=@task_fd_query={r1, r0, 0xffffffff, 0x9, 0x4999, 0x2, r0, 0x7, 0x7fff}, 0x2) read$auto(0x3, 0x0, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x100000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) (async) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) clone3$auto(&(0x7f0000000000)={0x4, 0x8, 0x8, 0x4, 0xffffffff, 0xac, 0x1, 0x8, 0x3, 0x0, 0x6}, 0x8000000000000000) (async) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)=@task_fd_query={r1, r0, 0xffffffff, 0x9, 0x4999, 0x2, r0, 0x7, 0x7fff}, 0x2) (async) read$auto(0x3, 0x0, 0x80) (async) 13.775310506s ago: executing program 5 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x2fc) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/aqm\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r2) sendmsg$auto_IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x17c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x167, 0x3, 0x0, 0x1, [@generic="fce49214ee25027304", @nested={0xd6, 0x42, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="c2a09447d4a5bc8e6c2eeef6b6a83e7cc061a62f7ef9a8e5e5950560bbdae0e4e37412aeef065538befdd2c6758753bfae8d24af08ca2fd2238d579329a343573d6f6189a2cc6420132660b836054576d6377f4bc1dd5dac0dade19cd7d0b461bb20c0b775ec08e26dbf82f1e1e0690e94ea83305dc13103b0befeb627f67bd4e6a3912e5e0c2b4332eb1806a1c3b0e7d9c7461b5f960fe7017fb72b5094416c572ac2c8d7d5b1fb2d9a5643ba46e9eaa1752b5c4780158bca5eff26fc7a558a14f779c716942ef7a76f669aa677"]}, @generic="53804e67ab4ce878b1c4b4c22f6cd7cbcdc419d9bc614eb3756eb9549696687d9b870c9019079d26279d01f1ce6e8207941cbbbb7efdcca23d11cc9af450fc7fd277651d72b7179fd1e5a98c59b4d12dc98a924cedbae65ececd38d70ca505c289ef8d02d336753655d38cc862498f2756a426291de07761a30c181b9fca", @typed={0x4, 0x5e}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xb513c9a255f17c54}, 0x8000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) read$auto_vcs_fops_vc_screen(0xffffffffffffffff, &(0x7f0000000080)=""/238, 0xffffffe9) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x1000000, 0x0, 0x20004054}, 0x480b0) 13.528140545s ago: executing program 5 (id=302): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x80002, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0) socketpair$auto(0x1, 0x1, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 13.475279073s ago: executing program 5 (id=303): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x4, 0x3d, 0x8000001, 0x5530, 0x400, 0x100}, {0x3, 0x23, 0x5, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) poll$auto(0x0, 0x0, 0x9f) r2 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r3 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x8) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)={0xd3c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x99, 0x19, "a8997049ab7b55e3a35359d1a7e2b58fa458e9a95585bc0308df47aa9eedc055f1104f3bd20af107dc755e42866ee74c5517b772316a406eaea1bc1b626ca052b5ce30680c2aa65ff8aebe90bc2394cb0f9a74c7d8ec860d24f28065f44804ebc4a2c4725373d57fdeca467683c9774cd6604d74448a6e815f6900a4626c3833d3e4b8f72345068889edf881f2b4d530fc0c6df682"}, @NFC_ATTR_SE_APDU={0xe1, 0x19, "3f112a330f3ea376df9cd0e822f8754cfa8df7dfdeed761e6860ba1addc42f48c5435449ad5e8d90289c8df144039f8a08a8acc12d127d907f4327ef032884760ea92447287ade826ccac811b78ec9d077effdd277ec038e07006179d68e90b06a1d21320fdafea8b1e05732079176e2b43f6411d781dca5d42a95bd868d115fb9245409e10265dc331eeef7a91155dfdba2fc0a0a4f0097d01845eeea3c0ead3660d1edad893c7f1f1dae5cd50a848f5f81e79146d258056ba233541b81323a0ba06a0b28c46e4f89462073d549a8d3ab8f0e4cc78f7c9ae6cfeab46c"}, @NFC_ATTR_FIRMWARE_NAME={0x0, 0x14, 'nfc\x00'}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0xe}]}, 0xd3c}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x214, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x801) sendmsg$auto_NFC_CMD_START_POLL(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1080006}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7fffffff}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x94e}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44810}, 0x20000000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) fanotify_mark$auto(0x0, 0x451, 0xa, r2, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f0000000040)=""/162, 0xa2) fanotify_mark$auto(r0, 0x451, 0x800000a, r2, 0x0) 1.149132224s ago: executing program 40 (id=290): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0xc0304d18, 0x8) r1 = socket(0x2a, 0x2, 0x8001) close_range$auto(0xffffffffffffffff, r1, 0xb) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket(0x1a, 0x80805, 0x0) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/247, 0xf7) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x2a1, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, 0x0, 0x0) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x101501, 0x0) socket(0x10, 0x2, 0x0) move_mount$auto(r7, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x80000001) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) 99.574925ms ago: executing program 5 (id=305): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty61\x00', 0x40381, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) (async) r2 = prctl$auto_PR_SET_MM_END_DATA(0xd, 0x4, 0x0, 0x3, 0x9) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r2, 0x80044100, &(0x7f00000000c0)=0x1) (async) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_FEATURES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000e4ff", @ANYRES16=r3, @ANYBLOB="00042bbd7000fbdbdf25010000000c0005000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 0s ago: executing program 5 (id=306): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, &(0x7f0000000080)=0x3) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_rt={0xffffffffffffffff, 0xee00, @sival_ptr=&(0x7f0000000200)="d6d36a9264dc4e5dc34083c1e1737f8d450996c3"}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0xf0}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0xa000, 0xffffffffffffffff, 0x3, 0xf8c5, 0x1000, 0x81, 0x9, 0xd}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) setsockopt$auto(r0, 0x1, 0x4, &(0x7f0000000240)='/dev/sda1\x00', 0x3) syslog$auto(0x3, 0x0, 0x1013) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x80202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x4, 0x0, 0x2, 0x8000004, &(0x7f00000000c0)}) pwrite64$auto(0xc8, &(0x7f0000000380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\t\x00\x00\x00X\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\xa2\x01\x88\v\xae\xa9\xe98W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*6\x9b\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbb\x9e\x93H\xdan\x1d\x00\xeb]B\xa0\x99\xb0R\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1uO\x8fL\"\xact\xee\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4_\x85\xf0k\xe0\"*^o\x83-\xc2\xcc\xa6\x12\x96\xe7\xef3\xcay\xfcl:Du9U\xf6\x1f&F\xa8\xe0\x0f\xd0\x04\xa2*\x17\x81\x85\xf3p7Oq\xd6\x97-\xb7CFKU\xf0\x7f1Qg\xe12\x84\xbfl \x06aq \x04\xd3\x15\x0f\nn\xf3\xf5\xe3\x1a\xad;\x8d\x80\x86\xec6Xm>\xd8,YhS\xf3\xac\xd1)\xa3\x9b\xd4\xd2\x86?\fH\xfaa()\xd1A\x9b\xabZ54i\x95\xac\x1a\xf2\xff\x19\xc7.\xfe\x06i\xcfAy\t)\xf3m\x93_\xe0I\x99\x89\xcb\xb7.\xa2\xd8\x97.\xbfH\x9bP\xaf{\x1c_\xfa6\f\a\x84\xc6\xa0\xe7\x00\x00\x00', 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000580)='1\x01\\\xa0\x03i\xb7\xa9\xc8iA\x04|\x03J\xb6{\xbb\xf9\xf4\x00M^a?\x03\x9c\xce\xf02\x86\xaa,\xe7eH\x9f\xee\x9a\xdf\x9b\x89tt\xe4\xd1\x918$\xfa\xfeT\xa4imqS\x1e\xda\x1aw\x16\x95\xacd', 0x81) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 81.128975][ T5820] cgroup: Unknown subsys name 'net' [ 81.237286][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.246176][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.706305][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.728397][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.736856][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.745956][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.754356][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.774961][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.785075][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.788530][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.793374][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.801754][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.807405][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.815579][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.829128][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.829856][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.843540][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.853058][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.861658][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.869087][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.889058][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.901320][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.915262][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.452466][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.473019][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.545431][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.639487][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.749843][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.757188][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.765229][ T5832] bridge_slave_0: entered allmulticast mode [ 85.772397][ T5832] bridge_slave_0: entered promiscuous mode [ 85.782251][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.789797][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.797036][ T5832] bridge_slave_1: entered allmulticast mode [ 85.804296][ T5832] bridge_slave_1: entered promiscuous mode [ 85.857901][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.865466][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.872623][ T5831] bridge_slave_0: entered allmulticast mode [ 85.879884][ T5831] bridge_slave_0: entered promiscuous mode [ 85.928841][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.936051][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.943296][ T5831] bridge_slave_1: entered allmulticast mode [ 85.950804][ T5831] bridge_slave_1: entered promiscuous mode [ 85.967495][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.974699][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.982094][ T5829] bridge_slave_0: entered allmulticast mode [ 85.989580][ T5829] bridge_slave_0: entered promiscuous mode [ 86.011180][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.024492][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.045376][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.052588][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.060788][ T5829] bridge_slave_1: entered allmulticast mode [ 86.068228][ T5829] bridge_slave_1: entered promiscuous mode [ 86.100106][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.112204][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.131966][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.139632][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.146972][ T5830] bridge_slave_0: entered allmulticast mode [ 86.154206][ T5830] bridge_slave_0: entered promiscuous mode [ 86.198897][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.206265][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.213512][ T5830] bridge_slave_1: entered allmulticast mode [ 86.220878][ T5830] bridge_slave_1: entered promiscuous mode [ 86.229314][ T5832] team0: Port device team_slave_0 added [ 86.249386][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.272095][ T5832] team0: Port device team_slave_1 added [ 86.279928][ T5831] team0: Port device team_slave_0 added [ 86.288354][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.322878][ T5831] team0: Port device team_slave_1 added [ 86.344998][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.394159][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.404593][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.411547][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.438908][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.463001][ T5829] team0: Port device team_slave_0 added [ 86.480972][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.488162][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.515141][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.526859][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.534123][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.560638][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.573423][ T5829] team0: Port device team_slave_1 added [ 86.598558][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.605814][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.631922][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.657600][ T5830] team0: Port device team_slave_0 added [ 86.689036][ T5830] team0: Port device team_slave_1 added [ 86.711879][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.719403][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.746002][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.780949][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.788348][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.814482][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.853502][ T5832] hsr_slave_0: entered promiscuous mode [ 86.859968][ T5832] hsr_slave_1: entered promiscuous mode [ 86.873223][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.880252][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.906959][ T5835] Bluetooth: hci1: command tx timeout [ 86.913974][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.958304][ T5831] hsr_slave_0: entered promiscuous mode [ 86.965388][ T5831] hsr_slave_1: entered promiscuous mode [ 86.971978][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 86.978279][ T5831] Cannot create hsr debugfs directory [ 86.984697][ T5835] Bluetooth: hci3: command tx timeout [ 86.990490][ T5835] Bluetooth: hci2: command tx timeout [ 86.996465][ T5846] Bluetooth: hci0: command tx timeout [ 87.024129][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.031704][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.058616][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.136786][ T5830] hsr_slave_0: entered promiscuous mode [ 87.143577][ T5830] hsr_slave_1: entered promiscuous mode [ 87.151374][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 87.157223][ T5830] Cannot create hsr debugfs directory [ 87.212569][ T5829] hsr_slave_0: entered promiscuous mode [ 87.220068][ T5829] hsr_slave_1: entered promiscuous mode [ 87.226503][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 87.232254][ T5829] Cannot create hsr debugfs directory [ 87.689662][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.709827][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.720479][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.740321][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.807111][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.821345][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.837970][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.849449][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.960414][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.971977][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.990918][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.002877][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.013952][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.099481][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.111805][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.133469][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.145890][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.163099][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.200431][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.207738][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.253690][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.260906][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.299378][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.348701][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.377789][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.385127][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.396767][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.403909][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.466717][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.565534][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.598433][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.620372][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.627643][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.650830][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.658039][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.708821][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.755483][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.762709][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.773678][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.780988][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.903731][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.985016][ T5835] Bluetooth: hci1: command tx timeout [ 89.064599][ T5835] Bluetooth: hci3: command tx timeout [ 89.070062][ T5835] Bluetooth: hci2: command tx timeout [ 89.075653][ T5846] Bluetooth: hci0: command tx timeout [ 89.090561][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.105962][ T5831] veth0_vlan: entered promiscuous mode [ 89.141317][ T5831] veth1_vlan: entered promiscuous mode [ 89.249554][ T5831] veth0_macvtap: entered promiscuous mode [ 89.279832][ T5832] veth0_vlan: entered promiscuous mode [ 89.288083][ T5831] veth1_macvtap: entered promiscuous mode [ 89.347001][ T5832] veth1_vlan: entered promiscuous mode [ 89.364741][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.389391][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.401015][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.412458][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.438288][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.448301][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.470021][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.479109][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.529929][ T5832] veth0_macvtap: entered promiscuous mode [ 89.567238][ T5832] veth1_macvtap: entered promiscuous mode [ 89.598433][ T5830] veth0_vlan: entered promiscuous mode [ 89.650160][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.674994][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.681318][ T5829] veth0_vlan: entered promiscuous mode [ 89.692934][ T5830] veth1_vlan: entered promiscuous mode [ 89.712274][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.743658][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.759263][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.768035][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776431][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793662][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.812431][ T5829] veth1_vlan: entered promiscuous mode [ 89.819207][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.828876][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.915461][ T5829] veth0_macvtap: entered promiscuous mode [ 89.930051][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.968123][ T5829] veth1_macvtap: entered promiscuous mode [ 89.980932][ T5830] veth0_macvtap: entered promiscuous mode [ 90.011258][ T5830] veth1_macvtap: entered promiscuous mode [ 90.039306][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.090392][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.129167][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.150796][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.161994][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.170984][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.197466][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.212915][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.234868][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.263265][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.272857][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.284744][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.307397][ T3540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.317525][ T3540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.363052][ T3540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.400144][ T3540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548195][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.576481][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.704025][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.714856][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.729657][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.748720][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.850300][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.861736][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.075014][ T5835] Bluetooth: hci1: command tx timeout [ 91.146337][ T5835] Bluetooth: hci2: command tx timeout [ 91.151936][ T5835] Bluetooth: hci0: command tx timeout [ 91.158344][ T5846] Bluetooth: hci3: command tx timeout [ 91.179544][ T5935] netlink: 'syz.3.4': attribute type 64 has an invalid length. [ 91.188051][ T5935] netlink: 74 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.204838][ T5935] Zero length message leads to an empty skb [ 91.719167][ T1148] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769023][ T5944] sctp: [Deprecated]: syz.0.1 (pid 5944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.769023][ T5944] Use struct sctp_sack_info instead [ 91.844430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.066108][ T10] cfg80211: failed to load regulatory.db [ 92.164551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.504241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 92.572767][ T5939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.634600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.664804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.834179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.145487][ T5835] Bluetooth: hci1: command tx timeout [ 93.224685][ T5835] Bluetooth: hci2: command tx timeout [ 93.230140][ T5835] Bluetooth: hci0: command tx timeout [ 93.235706][ T5846] Bluetooth: hci3: command tx timeout [ 93.594141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.178638][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.677269][ T5970] process 'syz.0.11' launched ':,' with NULL argv: empty string added [ 95.224211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.875237][ T5985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.105248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 96.712751][ T5995] erspan0: entered allmulticast mode [ 96.967586][ T6002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.035358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.266709][ T6001] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 98.759541][ T6012] syz.0.20 (6012) used greatest stack depth: 19720 bytes left [ 99.067749][ T6027] __vm_enough_memory: pid: 6027, comm: syz.2.23, bytes: 4398046511104 not enough memory for the allocation [ 99.296457][ T6035] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.027518][ T6045] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 100.309370][ T53] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 100.337891][ T6048] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.727846][ T6039] kexec: Could not allocate control_code_buffer [ 100.991742][ T6060] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 102.476999][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 105.485117][ T6105] zswap: compressor not available [ 106.291648][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 108.090774][ T6137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.489938][ T6177] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 115.048463][ T6185] syz.1.58 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 115.060300][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.1.58 Not tainted syzkaller #0 PREEMPT(full) [ 115.060333][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.060347][ T6185] Call Trace: [ 115.060356][ T6185] [ 115.060367][ T6185] dump_stack_lvl+0x16c/0x1f0 [ 115.060414][ T6185] dump_header+0x101/0x930 [ 115.060445][ T6185] oom_kill_process+0x272/0xa40 [ 115.060476][ T6185] out_of_memory+0x350/0x1700 [ 115.060510][ T6185] ? __pfx_out_of_memory+0x10/0x10 [ 115.060545][ T6185] mem_cgroup_out_of_memory+0x118/0x130 [ 115.060582][ T6185] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 115.060628][ T6185] ? do_raw_spin_unlock+0x172/0x230 [ 115.060673][ T6185] try_charge_memcg+0x695/0xd30 [ 115.060712][ T6185] ? __pfx_try_charge_memcg+0x10/0x10 [ 115.060752][ T6185] ? find_held_lock+0x2b/0x80 [ 115.060785][ T6185] charge_memcg+0x8a/0x230 [ 115.060817][ T6185] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 115.060858][ T6185] __read_swap_cache_async+0x397/0x500 [ 115.060891][ T6185] ? __pfx___read_swap_cache_async+0x10/0x10 [ 115.060919][ T6185] ? mlock_drain_local+0x22d/0x4f0 [ 115.060957][ T6185] swap_cluster_readahead+0x528/0x770 [ 115.060994][ T6185] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 115.061044][ T6185] ? __lock_acquire+0x622/0x1c90 [ 115.061077][ T6185] ? get_vma_policy+0x242/0x3c0 [ 115.061115][ T6185] swapin_readahead+0x13a/0xd60 [ 115.061153][ T6185] ? __pfx_swapin_readahead+0x10/0x10 [ 115.061178][ T6185] ? swap_cache_get_folio+0x267/0x8e0 [ 115.061201][ T6185] ? swap_cache_get_folio+0x267/0x8e0 [ 115.061224][ T6185] ? swap_cache_get_folio+0x267/0x8e0 [ 115.061255][ T6185] ? swap_cache_get_folio+0x267/0x8e0 [ 115.061279][ T6185] ? swap_cache_get_folio+0x1f/0x8e0 [ 115.061301][ T6185] ? swap_cache_get_folio+0x293/0x8e0 [ 115.061328][ T6185] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 115.061352][ T6185] ? __pfx_get_swap_device+0x10/0x10 [ 115.061384][ T6185] ? do_swap_page+0x125/0x6340 [ 115.061428][ T6185] do_swap_page+0x86c/0x6340 [ 115.061480][ T6185] ? __pfx_do_swap_page+0x10/0x10 [ 115.061518][ T6185] ? __pfx_default_wake_function+0x10/0x10 [ 115.061547][ T6185] ? __lock_acquire+0x622/0x1c90 [ 115.061585][ T6185] ? rcu_is_watching+0x12/0xc0 [ 115.061612][ T6185] ? ___pte_offset_map+0x2ad/0x4f0 [ 115.061650][ T6185] __handle_mm_fault+0x17d1/0x2aa0 [ 115.061700][ T6185] ? __pfx___handle_mm_fault+0x10/0x10 [ 115.061744][ T6185] ? lock_vma_under_rcu+0x176/0x530 [ 115.061795][ T6185] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 115.061843][ T6185] handle_mm_fault+0x589/0xd10 [ 115.061883][ T6185] ? __pkru_allows_pkey+0x11/0xb0 [ 115.061924][ T6185] do_user_addr_fault+0x60c/0x1370 [ 115.061952][ T6185] ? rcu_is_watching+0x12/0xc0 [ 115.061983][ T6185] exc_page_fault+0x64/0xc0 [ 115.062012][ T6185] asm_exc_page_fault+0x26/0x30 [ 115.062036][ T6185] RIP: 0033:0x7f25ac44da2c [ 115.062057][ T6185] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 115.062080][ T6185] RSP: 002b:00007fff00db5038 EFLAGS: 00010246 [ 115.062101][ T6185] RAX: 0000000000000000 RBX: 00007f25ad315720 RCX: ffffffff8453ff47 [ 115.062117][ T6185] RDX: 0000000000001f47 RSI: ffffffff8453ff47 RDI: 000000000000000e [ 115.062133][ T6185] RBP: ffffffff8453ff47 R08: 00007f25ac7d0000 R09: 00007f25ac7d2000 [ 115.062149][ T6185] R10: 000000008453ff4b R11: 000000000000000e R12: 000000000000000e [ 115.062163][ T6185] R13: 0000000000000000 R14: ffffffff8453f702 R15: 000000000000000b [ 115.062180][ T6185] ? security_mmap_file+0x22/0x990 [ 115.062208][ T6185] ? security_mmap_file+0x867/0x990 [ 115.062238][ T6185] ? security_mmap_file+0x867/0x990 [ 115.062264][ T6185] ? security_mmap_file+0x867/0x990 [ 115.062296][ T6185] [ 115.062392][ T6185] memory: usage 3072kB, limit 3072kB, failcnt 2622 [ 115.525125][ T53] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 115.525282][ T53] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 115.540908][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 115.540980][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 115.549934][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 115.557714][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 115.565097][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x72 [ 115.572171][ T53] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 115.582886][ T53] Bluetooth: hci1: Malformed LE Event: 0x0d [ 115.611427][ T6185] memory+swap: usage 3252kB, limit 9007199254740988kB, failcnt 0 [ 115.661486][ T6185] kmem: usage 2520kB, limit 9007199254740988kB, failcnt 0 [ 115.773962][ T6185] Memory cgroup stats for /syz1: [ 115.774251][ T6185] cache 528384 [ 115.782569][ T6185] rss 0 [ 115.823814][ T6185] rss_huge 0 [ 115.834832][ T6185] shmem 528384 [ 115.838223][ T6185] mapped_file 528384 [ 115.917783][ T6185] dirty 0 [ 115.920740][ T6185] writeback 0 [ 115.934837][ T6185] workingset_refault_anon 262 [ 115.951439][ T6185] workingset_refault_file 220 [ 115.991330][ T6185] swap 184320 [ 116.037308][ T6185] swapcached 36864 [ 116.041057][ T6185] pgpgin 21698 [ 116.077299][ T6185] pgpgout 21560 [ 116.080788][ T6185] pgfault 28492 [ 116.138806][ T6185] pgmajfault 132 [ 116.147883][ T6185] inactive_anon 24576 [ 116.169953][ T6185] active_anon 12288 [ 116.183876][ T6185] inactive_file 0 [ 116.213877][ T6185] active_file 0 [ 116.217492][ T6185] unevictable 528384 [ 116.221363][ T6185] hierarchical_memory_limit 3145728 [ 116.283658][ T6185] hierarchical_memsw_limit 9223372036854771712 [ 116.301528][ T6185] total_cache 528384 [ 116.321814][ T6185] total_rss 0 [ 116.369651][ T6185] total_rss_huge 0 [ 116.394159][ T6185] total_shmem 528384 [ 116.398108][ T6185] total_mapped_file 528384 [ 116.402511][ T6185] total_dirty 0 [ 116.436547][ T6185] total_writeback 0 [ 116.445978][ T6239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 116.464156][ T6185] total_workingset_refault_anon 262 [ 116.605869][ T6185] total_workingset_refault_file 220 [ 116.611104][ T6185] total_swap 184320 [ 116.654144][ T6185] total_swapcached 36864 [ 116.658992][ T6185] total_pgpgin 21698 [ 116.664866][ T6185] total_pgpgout 21560 [ 116.670722][ T6185] total_pgfault 28492 [ 116.674897][ T6185] total_pgmajfault 132 [ 116.679208][ T6185] total_inactive_anon 24576 [ 116.727879][ T6185] total_active_anon 12288 [ 116.732248][ T6185] total_inactive_file 0 [ 116.782336][ T6185] total_active_file 0 [ 116.804335][ T6185] total_unevictable 528384 [ 116.820210][ T6185] anon_cost 0 [ 116.833556][ T6185] file_cost 0 [ 116.843509][ T6185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.58,pid=6185,uid=0 [ 116.906308][ T6185] Memory cgroup out of memory: Killed process 6185 (syz.1.58) total-vm:174164kB, anon-rss:1256kB, file-rss:27016kB, shmem-rss:512kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 117.336901][ T6239] Process accounting resumed [ 117.515047][ T6254] cougar: G6 mapped to space [ 118.077417][ T6263] usb usb37: usbfs: process 6263 (syz.1.67) did not claim interface 0 before use [ 118.166855][ T6269] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 118.298627][ T6252] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 118.721805][ T53] Bluetooth: hci2: unexpected event 0x03 length: 725 > 11 [ 119.184345][ T6300] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 119.254698][ T6306] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 120.259583][ T6328] kernel read not supported for file /æDž (pid: 6328 comm: syz.0.80) [ 120.283608][ T30] audit: type=1800 audit(1761921320.462:2): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.80" name=12E644089E dev="mqueue" ino=10259 res=0 errno=0 [ 120.334670][ T12] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.507666][ T53] Bluetooth: hci1: unexpected event 0x03 length: 725 > 11 [ 120.653506][ T6338] program syz.3.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.857481][ T6343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.872533][ T6343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.926941][ T6343] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.949385][ T6343] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.957810][ T6343] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.972780][ T6343] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.021936][ T6343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.054223][ T6343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.070180][ T6343] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.100759][ T6343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.108737][ T6343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.121595][ T6350] ima: policy update failed [ 121.123844][ T30] audit: type=1807 audit(1761921321.302:3): UNKNOWN=./cgroup res=0 [ 121.156662][ T6343] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.166222][ T30] audit: type=1802 audit(1761921321.302:4): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.87" res=0 errno=0 [ 121.196985][ T30] audit: type=1802 audit(1761921321.312:5): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.87" res=0 errno=0 [ 121.242848][ T6275] syz.1.71 (6275) used greatest stack depth: 18664 bytes left [ 121.343076][ T6356] ima: policy update failed [ 121.350108][ T30] audit: type=1802 audit(1761921321.532:6): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.89" res=0 errno=0 [ 121.655589][ T53] Bluetooth: hci2: unexpected event 0x03 length: 725 > 11 [ 121.778185][ T6368] FAULT_INJECTION: forcing a failure. [ 121.778185][ T6368] name failslab, interval 1, probability 0, space 0, times 1 [ 121.815016][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT(full) [ 121.815053][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.815070][ T6368] Call Trace: [ 121.815078][ T6368] [ 121.815088][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 121.815120][ T6368] should_fail_ex+0x512/0x640 [ 121.815159][ T6368] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 121.815196][ T6368] should_failslab+0xc2/0x120 [ 121.815227][ T6368] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 121.815257][ T6368] ? snd_timer_instance_new+0x65/0x2e0 [ 121.815293][ T6368] ? kstrdup+0x53/0x100 [ 121.815319][ T6368] kstrdup+0x53/0x100 [ 121.815348][ T6368] snd_timer_instance_new+0x65/0x2e0 [ 121.815379][ T6368] __snd_timer_user_ioctl.isra.0+0x1522/0x2520 [ 121.815423][ T6368] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 121.815462][ T6368] ? rcu_is_watching+0x12/0xc0 [ 121.815491][ T6368] ? trace_contention_end+0xdd/0x130 [ 121.815525][ T6368] ? __mutex_lock+0x1c5/0x1060 [ 121.815563][ T6368] ? __pfx___mutex_lock+0x10/0x10 [ 121.815592][ T6368] ? find_held_lock+0x2b/0x80 [ 121.815632][ T6368] snd_timer_user_ioctl+0x76/0xd0 [ 121.815665][ T6368] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 121.815703][ T6368] __x64_sys_ioctl+0x18e/0x210 [ 121.815741][ T6368] do_syscall_64+0xcd/0xfa0 [ 121.815769][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.815796][ T6368] RIP: 0033:0x7f2099b8efc9 [ 121.815815][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.815837][ T6368] RSP: 002b:00007f209a94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.815870][ T6368] RAX: ffffffffffffffda RBX: 00007f2099de5fa0 RCX: 00007f2099b8efc9 [ 121.815887][ T6368] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000004 [ 121.815902][ T6368] RBP: 00007f2099c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.815918][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.815932][ T6368] R13: 00007f2099de6038 R14: 00007f2099de5fa0 R15: 00007ffc34daff98 [ 121.815967][ T6368] [ 122.096077][ T6376] ima: policy update failed [ 122.132585][ T6373] netlink: 338 bytes leftover after parsing attributes in process `syz.3.95'. [ 122.148408][ T30] audit: type=1807 audit(1761921322.282:7): UNKNOWN=./cgroup res=0 [ 122.156450][ T30] audit: type=1802 audit(1761921322.282:8): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.96" res=0 errno=0 [ 122.173956][ T30] audit: type=1802 audit(1761921322.282:9): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.96" res=0 errno=0 [ 122.313024][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 122.905841][ T6391] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.987209][ T6391] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.063995][ T6391] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.136288][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 123.145863][ T6391] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.275274][ T6410] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 123.502011][ T6391] Bluetooth: hci2: unexpected event 0x03 length: 725 > 11 [ 124.095848][ T6410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.103599][ T6410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.121771][ T6410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.131695][ T6410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.276883][ T6426] random: crng reseeded on system resumption [ 124.590310][ T6432] bond0: option all_slaves_active: invalid value () [ 125.543870][ T6391] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.116011][ T6391] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.202602][ T6391] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.208820][ T6391] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.281662][ T6455] zswap: compressor not available [ 126.524324][ T30] audit: type=1807 audit(1761921326.702:10): UNKNOWN= res=0 [ 126.534907][ T6469] ima: policy update failed [ 126.553804][ T30] audit: type=1802 audit(1761921326.722:11): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.115" res=0 errno=0 [ 126.634570][ T30] audit: type=1802 audit(1761921326.722:12): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.115" res=0 errno=0 [ 127.605920][ T6489] ptrace attach of "./syz-executor exec"[6497] was attempted by "./syz-executor exec"[6489] [ 127.624058][ T6375] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.074497][ T6503] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 128.183869][ T6375] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.197240][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 128.264043][ T6375] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.270867][ T6375] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.510056][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.124'. [ 128.556258][ T6529] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 128.713200][ T6508] syz.1.120 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 128.737077][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 128.737113][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.737127][ T6508] Call Trace: [ 128.737136][ T6508] [ 128.737146][ T6508] dump_stack_lvl+0x16c/0x1f0 [ 128.737180][ T6508] dump_header+0x101/0x930 [ 128.737211][ T6508] oom_kill_process+0x272/0xa40 [ 128.737242][ T6508] out_of_memory+0x350/0x1700 [ 128.737276][ T6508] ? __pfx_out_of_memory+0x10/0x10 [ 128.737312][ T6508] mem_cgroup_out_of_memory+0x118/0x130 [ 128.737351][ T6508] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 128.737399][ T6508] ? do_raw_spin_unlock+0x172/0x230 [ 128.737444][ T6508] try_charge_memcg+0x695/0xd30 [ 128.737483][ T6508] ? __pfx_try_charge_memcg+0x10/0x10 [ 128.737515][ T6508] ? __print_lock_name+0xa1/0xe0 [ 128.737543][ T6508] ? rcu_read_unlock+0x17/0x60 [ 128.737585][ T6508] charge_memcg+0x8a/0x230 [ 128.737617][ T6508] __mem_cgroup_charge+0x2b/0x1e0 [ 128.737653][ T6508] shmem_alloc_and_add_folio+0x514/0xc20 [ 128.737704][ T6508] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 128.737745][ T6508] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 128.737780][ T6508] shmem_get_folio_gfp+0x67f/0x1610 [ 128.737813][ T6508] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 128.737838][ T6508] ? wake_up_q+0xae/0x130 [ 128.737868][ T6508] shmem_fault+0x1fe/0xa30 [ 128.737895][ T6508] ? current_time+0x11d/0x1a0 [ 128.737922][ T6508] ? __pfx_shmem_fault+0x10/0x10 [ 128.737955][ T6508] ? __pfx___up_read+0x10/0x10 [ 128.737991][ T6508] ? inode_to_bdi+0x9e/0x160 [ 128.738029][ T6508] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.738060][ T6508] __do_fault+0x10d/0x490 [ 128.738089][ T6508] ? __pfx_filemap_map_pages+0x10/0x10 [ 128.738110][ T6508] do_pte_missing+0x1a6/0x3ba0 [ 128.738146][ T6508] ? find_held_lock+0x2b/0x80 [ 128.738172][ T6508] ? __handle_mm_fault+0x1529/0x2aa0 [ 128.738215][ T6508] __handle_mm_fault+0x1556/0x2aa0 [ 128.738264][ T6508] ? __pfx___handle_mm_fault+0x10/0x10 [ 128.738303][ T6508] ? __pte_offset_map_lock+0x174/0x310 [ 128.738336][ T6508] ? find_held_lock+0x2b/0x80 [ 128.738374][ T6508] ? follow_page_pte+0x5cf/0x1390 [ 128.738414][ T6508] handle_mm_fault+0x589/0xd10 [ 128.738461][ T6508] __get_user_pages+0x54e/0x3530 [ 128.738507][ T6508] ? down_read_killable+0x220/0x4b0 [ 128.738541][ T6508] ? __pfx___get_user_pages+0x10/0x10 [ 128.738577][ T6508] ? __lock_acquire+0x622/0x1c90 [ 128.738613][ T6508] __gup_longterm_locked+0x2dd/0x17e0 [ 128.738659][ T6508] ? __pfx___gup_longterm_locked+0x10/0x10 [ 128.738697][ T6508] ? try_get_folio+0x255/0x730 [ 128.738727][ T6508] ? find_held_lock+0x2b/0x80 [ 128.738753][ T6508] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 128.738794][ T6508] gup_fast_fallback+0xee2/0x22a0 [ 128.738858][ T6508] ? __pfx_gup_fast_fallback+0x10/0x10 [ 128.738892][ T6508] ? ___kmalloc_large_node+0x114/0x160 [ 128.738926][ T6508] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.738957][ T6508] ? rcu_is_watching+0x12/0xc0 [ 128.738994][ T6508] pin_user_pages_fast+0xa7/0xf0 [ 128.739028][ T6508] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 128.739067][ T6508] ? io_pin_pages+0xc3/0x1e0 [ 128.739111][ T6508] io_pin_pages+0xe6/0x1e0 [ 128.739144][ T6508] io_sqe_buffer_register+0x16f/0x2010 [ 128.739202][ T6508] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 128.739233][ T6508] ? rcu_is_watching+0x12/0xc0 [ 128.739259][ T6508] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 128.739293][ T6508] ? iovec_from_user+0xbb/0x140 [ 128.739321][ T6508] io_sqe_buffers_register+0x1f2/0x860 [ 128.739366][ T6508] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 128.739403][ T6508] ? rcu_is_watching+0x12/0xc0 [ 128.739427][ T6508] ? trace_contention_end+0xdd/0x130 [ 128.739474][ T6508] __io_uring_register+0x1fc0/0x20e0 [ 128.739513][ T6508] ? __pfx___io_uring_register+0x10/0x10 [ 128.739551][ T6508] ? __fget_files+0x20e/0x3c0 [ 128.739589][ T6508] __x64_sys_io_uring_register+0x169/0x280 [ 128.739628][ T6508] do_syscall_64+0xcd/0xfa0 [ 128.739659][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.739685][ T6508] RIP: 0033:0x7f25ac58efc9 [ 128.739706][ T6508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.739729][ T6508] RSP: 002b:00007f25ad4a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 128.739754][ T6508] RAX: ffffffffffffffda RBX: 00007f25ac7e6270 RCX: 00007f25ac58efc9 [ 128.739770][ T6508] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 128.739785][ T6508] RBP: 00007f25ac611f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.739800][ T6508] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 128.739815][ T6508] R13: 00007f25ac7e6308 R14: 00007f25ac7e6270 R15: 00007fff00db5008 [ 128.739854][ T6508] [ 128.742599][ T6508] memory: usage 3072kB, limit 3072kB, failcnt 8281 [ 129.221269][ T6508] memory+swap: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 129.229168][ T6508] kmem: usage 1404kB, limit 9007199254740988kB, failcnt 0 [ 129.236361][ T6508] Memory cgroup stats for /syz1: [ 129.236593][ T6508] cache 1703936 [ 129.245099][ T6508] rss 0 [ 129.247881][ T6508] rss_huge 0 [ 129.251092][ T6508] shmem 1703936 [ 129.254635][ T6508] mapped_file 0 [ 129.258116][ T6508] dirty 0 [ 129.261068][ T6508] writeback 0 [ 129.264565][ T6508] workingset_refault_anon 446 [ 129.271079][ T6508] workingset_refault_file 744 [ 129.275953][ T6508] swap 204800 [ 129.279339][ T6508] swapcached 4096 [ 129.282977][ T6508] pgpgin 32044 [ 129.286512][ T6508] pgpgout 31627 [ 129.289988][ T6508] pgfault 38499 [ 129.293485][ T6508] pgmajfault 250 [ 129.297111][ T6508] inactive_anon 1445888 [ 129.301275][ T6508] active_anon 262144 [ 129.306648][ T6508] inactive_file 0 [ 129.310305][ T6508] active_file 0 [ 129.313826][ T6508] unevictable 0 [ 129.318225][ T6508] hierarchical_memory_limit 3145728 [ 129.323574][ T6508] hierarchical_memsw_limit 9223372036854771712 [ 129.323668][ T6532] bridge_slave_1: left allmulticast mode [ 129.335848][ T6508] total_cache 1703936 [ 129.336722][ T6532] bridge_slave_1: left promiscuous mode [ 129.345903][ T6508] total_rss 0 [ 129.349234][ T6508] total_rss_huge 0 [ 129.350235][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.362411][ T6508] total_shmem 1703936 [ 129.366587][ T6508] total_mapped_file 0 [ 129.372311][ T6508] total_dirty 0 [ 129.375859][ T6508] total_writeback 0 [ 129.379715][ T6508] total_workingset_refault_anon 446 [ 129.380878][ T6532] bridge_slave_0: left allmulticast mode [ 129.384980][ T6508] total_workingset_refault_file 744 [ 129.391696][ T6532] bridge_slave_0: left promiscuous mode [ 129.404089][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.411714][ T6508] total_swap 204800 [ 129.415636][ T6508] total_swapcached 4096 [ 129.419817][ T6508] total_pgpgin 32044 [ 129.423805][ T6508] total_pgpgout 31627 [ 129.428440][ T6508] total_pgfault 38499 [ 129.432460][ T6508] total_pgmajfault 250 [ 129.436738][ T6508] total_inactive_anon 1445888 [ 129.441451][ T6508] total_active_anon 262144 [ 129.449519][ T6508] total_inactive_file 0 [ 129.453696][ T6508] total_active_file 0 [ 129.457799][ T6508] total_unevictable 0 [ 129.461960][ T6508] anon_cost 0 [ 129.465505][ T6508] file_cost 0 [ 129.468888][ T6508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.120,pid=6501,uid=0 [ 129.489717][ T6508] Memory cgroup out of memory: Killed process 6501 (syz.1.120) total-vm:164832kB, anon-rss:1140kB, file-rss:21532kB, shmem-rss:100kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 132.130892][ T6571] syz.1.127 (6571): /proc/6569/oom_adj is deprecated, please use /proc/6569/oom_score_adj instead. [ 132.329090][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.989007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.995576][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351269][ T30] audit: type=1800 audit(1761921333.532:13): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.131" name="dbroot" dev="configfs" ino=11367 res=0 errno=0 [ 134.141766][ T6605] syz.1.134 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 134.154511][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.1.134 Not tainted syzkaller #0 PREEMPT(full) [ 134.154544][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.154558][ T6605] Call Trace: [ 134.154566][ T6605] [ 134.154576][ T6605] dump_stack_lvl+0x16c/0x1f0 [ 134.154608][ T6605] dump_header+0x101/0x930 [ 134.154646][ T6605] oom_kill_process+0x272/0xa40 [ 134.154675][ T6605] out_of_memory+0x350/0x1700 [ 134.154711][ T6605] ? __pfx_out_of_memory+0x10/0x10 [ 134.154748][ T6605] mem_cgroup_out_of_memory+0x118/0x130 [ 134.154789][ T6605] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 134.154838][ T6605] ? do_raw_spin_unlock+0x172/0x230 [ 134.154883][ T6605] try_charge_memcg+0x695/0xd30 [ 134.154919][ T6605] ? __pfx_try_charge_memcg+0x10/0x10 [ 134.154950][ T6605] ? find_held_lock+0x2b/0x80 [ 134.154978][ T6605] ? rcu_read_unlock+0x17/0x60 [ 134.155022][ T6605] obj_cgroup_charge_account+0x292/0x500 [ 134.155061][ T6605] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 134.155102][ T6605] ? kasan_unpoison+0x27/0x60 [ 134.155135][ T6605] __kmalloc_noprof+0x67e/0x880 [ 134.155176][ T6605] ? __register_sysctl_table+0xb3/0x1900 [ 134.155223][ T6605] ? __register_sysctl_table+0xb3/0x1900 [ 134.155260][ T6605] __register_sysctl_table+0xb3/0x1900 [ 134.155300][ T6605] ? is_module_address+0x5f/0xf0 [ 134.155343][ T6605] ? __pfx___register_sysctl_table+0x10/0x10 [ 134.155380][ T6605] ? is_module_address+0x69/0xf0 [ 134.155415][ T6605] ? register_net_sysctl_sz+0x228/0x3e0 [ 134.155460][ T6605] __addrconf_sysctl_register+0x1a2/0x360 [ 134.155497][ T6605] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 134.155533][ T6605] ? lockdep_init_map_type+0x5c/0x280 [ 134.155568][ T6605] ? mld_in_v1_mode+0x2b2/0x3a0 [ 134.155611][ T6605] addrconf_sysctl_register+0x15f/0x1f0 [ 134.155652][ T6605] ipv6_add_dev+0xb31/0x15f0 [ 134.155689][ T6605] addrconf_notify+0x53e/0x19e0 [ 134.155726][ T6605] ? ip6mr_device_event+0x1bc/0x230 [ 134.155772][ T6605] notifier_call_chain+0xbc/0x410 [ 134.155805][ T6605] ? __pfx_addrconf_notify+0x10/0x10 [ 134.155849][ T6605] call_netdevice_notifiers_info+0xbe/0x140 [ 134.155885][ T6605] register_netdevice+0x182e/0x2270 [ 134.155922][ T6605] ? __pfx_register_netdevice+0x10/0x10 [ 134.155955][ T6605] ? alloc_netdev_mqs+0xe17/0x1550 [ 134.155986][ T6605] register_netdev+0x34/0x50 [ 134.156015][ T6605] ip6gre_init_net+0x2bd/0x440 [ 134.156053][ T6605] ? __pfx_ip6gre_init_net+0x10/0x10 [ 134.156088][ T6605] ops_init+0x1e2/0x5f0 [ 134.156121][ T6605] setup_net+0x100/0x390 [ 134.156149][ T6605] ? __pfx_setup_net+0x10/0x10 [ 134.156178][ T6605] ? debug_mutex_init+0x37/0x70 [ 134.156212][ T6605] copy_net_ns+0x2f8/0x690 [ 134.156246][ T6605] create_new_namespaces+0x3ea/0xa90 [ 134.156285][ T6605] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 134.156319][ T6605] ksys_unshare+0x45b/0xa40 [ 134.156355][ T6605] ? __pfx_ksys_unshare+0x10/0x10 [ 134.156394][ T6605] ? fput+0x9b/0xd0 [ 134.156434][ T6605] __x64_sys_unshare+0x31/0x40 [ 134.156467][ T6605] do_syscall_64+0xcd/0xfa0 [ 134.156499][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.156526][ T6605] RIP: 0033:0x7f25ac58efc9 [ 134.156547][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.156571][ T6605] RSP: 002b:00007f25ad50a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.156596][ T6605] RAX: ffffffffffffffda RBX: 00007f25ac7e5fa0 RCX: 00007f25ac58efc9 [ 134.156613][ T6605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 134.156638][ T6605] RBP: 00007f25ac611f91 R08: 0000000000000000 R09: 0000000000000000 [ 134.156654][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.156669][ T6605] R13: 00007f25ac7e6038 R14: 00007f25ac7e5fa0 R15: 00007fff00db5008 [ 134.156708][ T6605] [ 134.156719][ T6605] memory: usage 3072kB, limit 3072kB, failcnt 12744 [ 134.543214][ T6605] memory+swap: usage 3236kB, limit 9007199254740988kB, failcnt 0 [ 134.551084][ T6605] kmem: usage 3036kB, limit 9007199254740988kB, failcnt 0 [ 134.558259][ T6605] Memory cgroup stats for /syz1: [ 134.558493][ T6605] cache 0 [ 134.566460][ T6605] rss 0 [ 134.569230][ T6605] rss_huge 0 [ 134.572436][ T6605] shmem 0 [ 134.575444][ T6605] mapped_file 0 [ 134.578912][ T6605] dirty 0 [ 134.581857][ T6605] writeback 0 [ 134.586038][ T6605] workingset_refault_anon 1140 [ 134.591565][ T6605] workingset_refault_file 1403 [ 134.596558][ T6605] swap 167936 [ 134.599867][ T6605] swapcached 36864 [ 134.603602][ T6605] pgpgin 42911 [ 134.607168][ T6605] pgpgout 42902 [ 134.610640][ T6605] pgfault 61466 [ 134.614449][ T6605] pgmajfault 648 [ 134.618013][ T6605] inactive_anon 0 [ 134.621641][ T6605] active_anon 36864 [ 134.625539][ T6605] inactive_file 0 [ 134.629180][ T6605] active_file 0 [ 134.632641][ T6605] unevictable 0 [ 134.636204][ T6605] hierarchical_memory_limit 3145728 [ 134.641403][ T6605] hierarchical_memsw_limit 9223372036854771712 [ 134.647753][ T6605] total_cache 0 [ 134.651228][ T6605] total_rss 0 [ 134.654583][ T6605] total_rss_huge 0 [ 134.658336][ T6605] total_shmem 0 [ 134.661781][ T6605] total_mapped_file 0 [ 134.666164][ T6605] total_dirty 0 [ 134.669639][ T6605] total_writeback 0 [ 134.673429][ T6605] total_workingset_refault_anon 1140 [ 134.678823][ T6605] total_workingset_refault_file 1403 [ 134.684213][ T6605] total_swap 167936 [ 134.688015][ T6605] total_swapcached 36864 [ 134.692233][ T6605] total_pgpgin 42911 [ 134.696834][ T6605] total_pgpgout 42902 [ 134.700842][ T6605] total_pgfault 61466 [ 134.704942][ T6605] total_pgmajfault 648 [ 134.709026][ T6605] total_inactive_anon 0 [ 134.713186][ T6605] total_active_anon 36864 [ 134.717651][ T6605] total_inactive_file 0 [ 134.721813][ T6605] total_active_file 0 [ 134.725881][ T6605] total_unevictable 0 [ 134.729869][ T6605] anon_cost 0 [ 134.733137][ T6605] file_cost 0 [ 134.736478][ T6605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.134,pid=6604,uid=0 [ 134.752549][ T6605] Memory cgroup out of memory: Killed process 6604 (syz.1.134) total-vm:134980kB, anon-rss:1128kB, file-rss:22804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 136.829497][ T32] oom_reaper: reaped process 6604 (syz.1.134), now anon-rss:0kB, file-rss:21680kB, shmem-rss:0kB [ 138.103023][ T6528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.113186][ T6528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.122643][ T6528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.130589][ T6528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.138458][ T6528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.284465][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 138.352225][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.359839][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.367474][ T6609] bridge_slave_0: entered allmulticast mode [ 138.374879][ T6609] bridge_slave_0: entered promiscuous mode [ 138.383409][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.390834][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.398111][ T6609] bridge_slave_1: entered allmulticast mode [ 138.405315][ T6609] bridge_slave_1: entered promiscuous mode [ 138.434257][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.446632][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.475792][ T6609] team0: Port device team_slave_0 added [ 138.485270][ T6609] team0: Port device team_slave_1 added [ 138.510780][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.517797][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.544424][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.559187][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.566395][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.593214][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.635694][ T6609] hsr_slave_0: entered promiscuous mode [ 138.642096][ T6609] hsr_slave_1: entered promiscuous mode [ 138.648347][ T6609] debugfs: 'hsr0' already exists in 'hsr' [ 138.654120][ T6609] Cannot create hsr debugfs directory [ 138.791736][ T6609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.801488][ T6609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.811868][ T6609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.821742][ T6609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.855413][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.862611][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.870248][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.877378][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.947035][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.962669][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.977414][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.992853][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.013054][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.020230][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.029536][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.036707][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.202108][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.397788][ T6609] veth0_vlan: entered promiscuous mode [ 139.411632][ T6609] veth1_vlan: entered promiscuous mode [ 139.439829][ T6609] veth0_macvtap: entered promiscuous mode [ 139.449541][ T6609] veth1_macvtap: entered promiscuous mode [ 139.470659][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.481298][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.500676][ T6374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.510731][ T6374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.522746][ T6374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.534012][ T6374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.599822][ T6374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.609591][ T6374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.639379][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.648047][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.184005][ T6375] Bluetooth: hci4: command tx timeout [ 140.214627][ T6641] cgroup: fork rejected by pids controller in /syz4 [ 141.372031][ T6778] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 141.403859][ T6778] audit: out of memory in audit_log_start [ 141.409944][ T30] audit: type=1802 audit(1761921341.592:14): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.139" res=0 errno=0 [ 141.410131][ T6777] ima: policy update failed [ 141.534401][ T30] audit: type=1802 audit(1761921341.722:15): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.139" res=0 errno=0 [ 142.160707][ T6782] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 142.264613][ T6375] Bluetooth: hci4: command tx timeout [ 142.303929][ T6782] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.325076][ T6782] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 142.334087][ T6782] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 142.353900][ T6782] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 142.374577][ T6782] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 142.384484][ T6782] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 142.394222][ T6782] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 142.426529][ T6782] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 142.443966][ T6782] page dumped because: unmovable page [ 142.454072][ T6782] page_owner tracks the page as allocated [ 142.464843][ T6782] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5825, tgid 5825 (syz-executor), ts 83985634064, free_ts 83170263156 [ 142.486292][ T6782] register_dummy_stack+0x89/0xd0 [ 142.494710][ T6782] init_page_owner+0x48/0x7e0 [ 142.499453][ T6782] page_ext_init+0x70c/0xb10 [ 142.504490][ T6782] mm_core_init+0x13c/0x220 [ 142.514102][ T6782] page last free pid 0 tgid 0 stack trace: [ 142.524098][ T6782] __free_frozen_pages+0x7df/0x1160 [ 142.536249][ T6782] __folio_put+0x329/0x450 [ 142.545841][ T6782] page_to_skb+0xa88/0xcc0 [ 142.554062][ T6782] receive_buf+0x789/0x4510 [ 142.564039][ T6782] virtnet_poll+0x153c/0x3e10 [ 142.835914][ T6782] __napi_poll.constprop.0+0xba/0x550 [ 142.841368][ T6782] net_rx_action+0x97f/0xef0 [ 142.887766][ T6782] handle_softirqs+0x219/0x8e0 [ 142.892676][ T6782] __irq_exit_rcu+0x109/0x170 [ 142.934919][ T6782] irq_exit_rcu+0x9/0x30 [ 142.939293][ T6782] common_interrupt+0xbf/0xe0 [ 142.963851][ T6782] asm_common_interrupt+0x26/0x40 [ 144.320869][ T6528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.332262][ T6528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.341044][ T6528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.349090][ T6528] Bluetooth: hci4: command tx timeout [ 144.365003][ T6528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.372842][ T6528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.480692][ T6375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.495639][ T6375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.505935][ T6375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.517835][ T6375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.530794][ T6375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.836403][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 145.231796][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.244275][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.251653][ T6786] bridge_slave_0: entered allmulticast mode [ 145.259972][ T6786] bridge_slave_0: entered promiscuous mode [ 145.350255][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.364039][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.371316][ T6786] bridge_slave_1: entered allmulticast mode [ 145.398563][ T6786] bridge_slave_1: entered promiscuous mode [ 145.512476][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.532008][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.629440][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 145.701354][ T6786] team0: Port device team_slave_0 added [ 145.722710][ T6786] team0: Port device team_slave_1 added [ 145.855257][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.862258][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.924169][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.947464][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.959411][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.047721][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.234515][ T6786] hsr_slave_0: entered promiscuous mode [ 146.241323][ T6786] hsr_slave_1: entered promiscuous mode [ 146.248276][ T6786] debugfs: 'hsr0' already exists in 'hsr' [ 146.254559][ T6786] Cannot create hsr debugfs directory [ 146.275035][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.282210][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.304374][ T6790] bridge_slave_0: entered allmulticast mode [ 146.312211][ T6790] bridge_slave_0: entered promiscuous mode [ 146.372194][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.379653][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.387717][ T6790] bridge_slave_1: entered allmulticast mode [ 146.397693][ T6790] bridge_slave_1: entered promiscuous mode [ 146.439723][ T6528] Bluetooth: hci0: command tx timeout [ 146.445850][ T6528] Bluetooth: hci4: command tx timeout [ 146.499768][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.562893][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.584084][ T6375] Bluetooth: hci5: command tx timeout [ 146.688170][ T6790] team0: Port device team_slave_0 added [ 146.721013][ T6790] team0: Port device team_slave_1 added [ 146.837319][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.844782][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.871129][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.919994][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.934260][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.966737][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.145504][ T6790] hsr_slave_0: entered promiscuous mode [ 147.152279][ T6790] hsr_slave_1: entered promiscuous mode [ 147.158975][ T6790] debugfs: 'hsr0' already exists in 'hsr' [ 147.174514][ T6790] Cannot create hsr debugfs directory [ 147.182753][ T6786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.246788][ T6786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.318616][ T6786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.339677][ T6786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.637760][ T6790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.711508][ T6790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.796895][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.808888][ T6790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.879274][ T6790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.967704][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.002044][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.009362][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.047680][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.054870][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.266525][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.292900][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.326810][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.334027][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.422790][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.430652][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.503941][ T6375] Bluetooth: hci0: command tx timeout [ 148.665068][ T6375] Bluetooth: hci5: command tx timeout [ 148.755145][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.246632][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.695229][ T6786] veth0_vlan: entered promiscuous mode [ 149.727530][ T6786] veth1_vlan: entered promiscuous mode [ 149.761482][ T6528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.783118][ T6528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.799277][ T6786] veth0_macvtap: entered promiscuous mode [ 149.803920][ T6528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.813343][ T6528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.824570][ T6528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.860618][ T6786] veth1_macvtap: entered promiscuous mode [ 149.906426][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.952355][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.009191][ T6544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.065834][ T6544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.074968][ T6544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.110442][ T6544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.161962][ T6790] veth0_vlan: entered promiscuous mode [ 150.173649][ T6790] veth1_vlan: entered promiscuous mode [ 150.584093][ T6375] Bluetooth: hci0: command tx timeout [ 150.629711][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 150.633877][ T6538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.653920][ T6538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.673105][ T6790] veth0_macvtap: entered promiscuous mode [ 150.700218][ T6790] veth1_macvtap: entered promiscuous mode [ 150.744192][ T6375] Bluetooth: hci5: command tx timeout [ 150.772913][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.793818][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.952188][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.000196][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.021319][ T6544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.109601][ T6846] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.299010][ T6544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.311198][ T6544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.365117][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.374835][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.393325][ T6836] bridge_slave_0: entered allmulticast mode [ 151.407910][ T6836] bridge_slave_0: entered promiscuous mode [ 151.420338][ T6668] syz.4.137 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.438127][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.505010][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.518345][ T6836] bridge_slave_1: entered allmulticast mode [ 151.526719][ T6836] bridge_slave_1: entered promiscuous mode [ 151.540117][ T6544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.587893][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 151.587929][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.587944][ T6668] Call Trace: [ 151.587952][ T6668] [ 151.587962][ T6668] dump_stack_lvl+0x16c/0x1f0 [ 151.587992][ T6668] dump_header+0x101/0x930 [ 151.588020][ T6668] oom_kill_process+0x272/0xa40 [ 151.588051][ T6668] out_of_memory+0x350/0x1700 [ 151.588085][ T6668] ? __pfx_out_of_memory+0x10/0x10 [ 151.588121][ T6668] mem_cgroup_out_of_memory+0x118/0x130 [ 151.588159][ T6668] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 151.588207][ T6668] ? do_raw_spin_unlock+0x172/0x230 [ 151.588251][ T6668] try_charge_memcg+0x695/0xd30 [ 151.588287][ T6668] ? __pfx_try_charge_memcg+0x10/0x10 [ 151.588314][ T6668] ? __print_lock_name+0xa1/0xe0 [ 151.588329][ T6668] ? rcu_read_unlock+0x17/0x60 [ 151.588370][ T6668] charge_memcg+0x8a/0x230 [ 151.588399][ T6668] __mem_cgroup_charge+0x2b/0x1e0 [ 151.588432][ T6668] shmem_alloc_and_add_folio+0x514/0xc20 [ 151.588486][ T6668] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 151.588528][ T6668] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 151.588563][ T6668] shmem_get_folio_gfp+0x67f/0x1610 [ 151.588593][ T6668] ? __lock_acquire+0xb8a/0x1c90 [ 151.588626][ T6668] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 151.588664][ T6668] shmem_write_begin+0x160/0x300 [ 151.588694][ T6668] ? __pfx_shmem_write_begin+0x10/0x10 [ 151.588718][ T6668] ? timestamp_truncate+0x21e/0x2d0 [ 151.588745][ T6668] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 151.588782][ T6668] generic_perform_write+0x3c4/0x900 [ 151.588831][ T6668] ? __pfx_generic_perform_write+0x10/0x10 [ 151.588865][ T6668] ? inode_needs_update_time.part.0+0x191/0x270 [ 151.588901][ T6668] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 151.588922][ T6668] shmem_file_write_iter+0x10e/0x140 [ 151.588940][ T6668] __kernel_write_iter+0x31a/0xb10 [ 151.588958][ T6668] ? __pfx___kernel_write_iter+0x10/0x10 [ 151.588972][ T6668] ? __up_read+0x1f8/0x750 [ 151.588995][ T6668] ? dump_user_range+0x756/0xb70 [ 151.589012][ T6668] dump_user_range+0x413/0xb70 [ 151.589030][ T6668] ? __pfx_dump_user_range+0x10/0x10 [ 151.589044][ T6668] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 151.589070][ T6668] ? __pfx_writenote+0x10/0x10 [ 151.589090][ T6668] elf_core_dump+0x29c3/0x3c00 [ 151.589114][ T6668] ? __pfx_elf_core_dump+0x10/0x10 [ 151.589131][ T6668] ? check_preempt_wakeup_fair+0x6a6/0x980 [ 151.589147][ T6668] ? find_held_lock+0x2b/0x80 [ 151.589160][ T6668] ? 0xffffffffff600000 [ 151.589173][ T6668] ? rcu_is_watching+0x12/0xc0 [ 151.589187][ T6668] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 151.589201][ T6668] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.589245][ T6668] ? vfs_coredump+0x2b9f/0x5670 [ 151.589256][ T6668] vfs_coredump+0x2b9f/0x5670 [ 151.589276][ T6668] ? __pfx_vfs_coredump+0x10/0x10 [ 151.589290][ T6668] ? __lock_acquire+0x622/0x1c90 [ 151.589315][ T6668] ? lock_acquire+0x179/0x350 [ 151.589342][ T6668] ? is_bpf_text_address+0x8a/0x1a0 [ 151.589361][ T6668] ? bpf_ksym_find+0x124/0x1c0 [ 151.589381][ T6668] ? unwind_get_return_address+0x59/0xa0 [ 151.589396][ T6668] ? arch_stack_walk+0xa6/0x100 [ 151.589417][ T6668] ? stack_trace_save+0x8e/0xc0 [ 151.589432][ T6668] ? __pfx_stack_trace_save+0x10/0x10 [ 151.589448][ T6668] ? stack_depot_save_flags+0x29/0x9c0 [ 151.589476][ T6668] ? __lock_acquire+0xb8a/0x1c90 [ 151.589527][ T6668] ? proc_coredump_connector+0x2d1/0x4f0 [ 151.589541][ T6668] ? __pfx_proc_coredump_connector+0x10/0x10 [ 151.589560][ T6668] ? rcu_is_watching+0x12/0xc0 [ 151.589576][ T6668] get_signal+0x22e1/0x26d0 [ 151.589600][ T6668] ? __pfx_get_signal+0x10/0x10 [ 151.589621][ T6668] arch_do_signal_or_restart+0x8f/0x790 [ 151.589639][ T6668] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 151.589660][ T6668] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 151.589675][ T6668] ? do_error_trap+0x214/0x240 [ 151.589695][ T6668] irqentry_exit_to_user_mode+0x176/0x310 [ 151.589712][ T6668] asm_exc_invalid_op+0x1a/0x20 [ 151.589725][ T6668] RIP: 0033:0x0 [ 151.589734][ T6668] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 151.589740][ T6668] RSP: 002b:0000000000000ed4 EFLAGS: 00010217 [ 151.589751][ T6668] RAX: 0000000000000000 RBX: 00007f01dcde6090 RCX: 00007f01dcb8efc9 [ 151.589760][ T6668] RDX: 0000000000000000 RSI: 0000000000000ecc RDI: 0000000020003b4a [ 151.589768][ T6668] RBP: 00007f01dcc11f91 R08: 0000000000000002 R09: 0000000000000000 [ 151.589776][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.589784][ T6668] R13: 00007f01dcde6128 R14: 00007f01dcde6090 R15: 00007fff30b7c338 [ 151.589803][ T6668] [ 151.591981][ T6668] memory: usage 307200kB, limit 307200kB, failcnt 21711 [ 152.061587][ T6375] Bluetooth: hci6: command tx timeout [ 152.073154][ T6668] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 152.191944][ T6668] kmem: usage 2540kB, limit 9007199254740988kB, failcnt 0 [ 152.204393][ T6668] Memory cgroup stats for /syz4: [ 152.204633][ T6668] cache 311787520 [ 152.224411][ T6668] rss 184320 [ 152.227682][ T6668] rss_huge 0 [ 152.230903][ T6668] shmem 311783424 [ 152.232280][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.247046][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.268117][ T6668] mapped_file 135168 [ 152.272056][ T6668] dirty 0 [ 152.316919][ T6668] writeback 0 [ 152.320225][ T6668] workingset_refault_anon 14 [ 152.328904][ T6836] team0: Port device team_slave_0 added [ 152.337561][ T6836] team0: Port device team_slave_1 added [ 152.372641][ T6668] workingset_refault_file 0 [ 152.385897][ T6668] swap 127926272 [ 152.399841][ T6668] swapcached 0 [ 152.403260][ T6668] pgpgin 111768 [ 152.424461][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.431433][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.457704][ T6668] pgpgout 35603 [ 152.461830][ T6668] pgfault 7767 [ 152.465817][ T6668] pgmajfault 18 [ 152.479906][ T6668] inactive_anon 127950848 [ 152.484697][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.497881][ T6668] active_anon 184016896 [ 152.502223][ T6668] inactive_file 0 [ 152.508068][ T6668] active_file 4096 [ 152.512921][ T6668] unevictable 0 [ 152.543194][ T6668] hierarchical_memory_limit 314572800 [ 152.550186][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.557544][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.557555][ T6668] hierarchical_memsw_limit 9223372036854771712 [ 152.557575][ T6668] total_cache 311787520 [ 152.622836][ T6668] total_rss 184320 [ 152.633847][ T6668] total_rss_huge 0 [ 152.637582][ T6668] total_shmem 311783424 [ 152.641741][ T6668] total_mapped_file 135168 [ 152.649177][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.660221][ T6668] total_dirty 0 [ 152.663699][ T6668] total_writeback 0 [ 152.668453][ T6375] Bluetooth: hci0: command tx timeout [ 152.696031][ T6668] total_workingset_refault_anon 14 [ 152.701255][ T6668] total_workingset_refault_file 0 [ 152.762979][ T6668] total_swap 127926272 [ 152.775714][ T6668] total_swapcached 0 [ 152.781393][ T6668] total_pgpgin 111768 [ 152.786445][ T6668] total_pgpgout 35603 [ 152.790537][ T6668] total_pgfault 7767 [ 152.795102][ T6668] total_pgmajfault 18 [ 152.799143][ T6668] total_inactive_anon 127950848 [ 152.809564][ T6668] total_active_anon 184016896 [ 152.815466][ T6668] total_inactive_file 0 [ 152.826445][ T6854] random: crng reseeded on system resumption [ 152.835205][ T6375] Bluetooth: hci5: command tx timeout [ 152.841883][ T6668] total_active_file 4096 [ 152.861369][ T6668] total_unevictable 0 [ 152.866958][ T6668] anon_cost 0 [ 152.870289][ T6668] file_cost 0 [ 152.873696][ T6668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.137,pid=6669,uid=0 [ 152.876540][ T6854] Restarting kernel threads ... [ 152.890608][ T6668] Memory cgroup out of memory: Killed process 6669 (syz.4.137) total-vm:102472kB, anon-rss:1172kB, file-rss:58636kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 152.896289][ T6854] Done restarting kernel threads. [ 152.986721][ T6854] FAULT_INJECTION: forcing a failure. [ 152.986721][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 153.012139][ T6836] hsr_slave_0: entered promiscuous mode [ 153.019670][ T6836] hsr_slave_1: entered promiscuous mode [ 153.023982][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.5.145 Not tainted syzkaller #0 PREEMPT(full) [ 153.024019][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.024034][ T6854] Call Trace: [ 153.024042][ T6854] [ 153.024051][ T6854] dump_stack_lvl+0x16c/0x1f0 [ 153.024084][ T6854] should_fail_ex+0x512/0x640 [ 153.024123][ T6854] ? __kmalloc_cache_noprof+0x5f/0x780 [ 153.024187][ T6854] should_failslab+0xc2/0x120 [ 153.024222][ T6854] __kmalloc_cache_noprof+0x72/0x780 [ 153.024265][ T6854] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.024302][ T6854] ? alloc_fdtable+0xbd/0x2d0 [ 153.024347][ T6854] ? alloc_fdtable+0xbd/0x2d0 [ 153.024376][ T6854] alloc_fdtable+0xbd/0x2d0 [ 153.024403][ T6854] dup_fd+0x83b/0xb90 [ 153.024443][ T6854] __do_sys_close_range+0x4ca/0x730 [ 153.024477][ T6854] ? __pfx___do_sys_close_range+0x10/0x10 [ 153.024515][ T6854] do_syscall_64+0xcd/0xfa0 [ 153.024545][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.024572][ T6854] RIP: 0033:0x7f19d158efc9 [ 153.024592][ T6854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.024616][ T6854] RSP: 002b:00007f19d2408038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 153.024640][ T6854] RAX: ffffffffffffffda RBX: 00007f19d17e6090 RCX: 00007f19d158efc9 [ 153.024657][ T6854] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 153.024674][ T6854] RBP: 00007f19d1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.024689][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.024703][ T6854] R13: 00007f19d17e6128 R14: 00007f19d17e6090 R15: 00007ffd05df3888 [ 153.024738][ T6854] [ 153.221794][ T6836] debugfs: 'hsr0' already exists in 'hsr' [ 153.234610][ T6836] Cannot create hsr debugfs directory [ 153.242156][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.250808][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.560097][ T6538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.560123][ T6538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.805060][ T6859] zswap: compressor 000 not available [ 154.064586][ T6836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.109509][ T6375] Bluetooth: hci6: command tx timeout [ 154.140693][ T6863] tipc: Started in network mode [ 154.147844][ T6863] tipc: Node identity 45e5412, cluster identity 4711 [ 154.155334][ T6863] tipc: Node number set to 73290770 [ 154.165851][ T6836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.175614][ T6863] delete_channel: no stack [ 154.420250][ T6836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.649901][ T6836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.986698][ T32] oom_reaper: reaped process 6669 (syz.4.137), now anon-rss:32kB, file-rss:57516kB, shmem-rss:0kB [ 155.090324][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.148072][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.187210][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.194429][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.290464][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.297683][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.195867][ T6375] Bluetooth: hci6: command tx timeout [ 156.317174][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.676519][ T30] audit: type=1807 audit(1761921356.862:16): UNKNOWN=./cgroup res=0 [ 156.677009][ T6899] ima: policy update failed [ 156.701789][ T30] audit: type=1802 audit(1761921356.862:17): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.151" res=0 errno=0 [ 156.774565][ T30] audit: type=1802 audit(1761921356.872:18): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.151" res=0 errno=0 [ 157.456915][ T6836] veth0_vlan: entered promiscuous mode [ 157.522272][ T6836] veth1_vlan: entered promiscuous mode [ 157.794638][ T6836] veth0_macvtap: entered promiscuous mode [ 157.885011][ T6836] veth1_macvtap: entered promiscuous mode [ 157.907683][ T6528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.916351][ T6528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.925452][ T6528] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.933350][ T6528] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.943742][ T6528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.169087][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.263856][ T6528] Bluetooth: hci6: command tx timeout [ 158.273441][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.349908][ T6544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.359110][ T6544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.410786][ T6544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.440260][ T6544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.956490][ T6544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.993784][ T6544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.107279][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 159.140782][ T6544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.182214][ T6544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.024477][ T6528] Bluetooth: hci7: command tx timeout [ 160.093510][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.134117][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.141423][ T6921] bridge_slave_0: entered allmulticast mode [ 160.186275][ T6921] bridge_slave_0: entered promiscuous mode [ 160.219442][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.252762][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.279167][ T6921] bridge_slave_1: entered allmulticast mode [ 160.305841][ T6921] bridge_slave_1: entered promiscuous mode [ 160.326479][ T6966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 160.690101][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.045550][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.380618][ T6980] FAULT_INJECTION: forcing a failure. [ 161.380618][ T6980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.394046][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.6.167 Not tainted syzkaller #0 PREEMPT(full) [ 161.394080][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.394094][ T6980] Call Trace: [ 161.394102][ T6980] [ 161.394111][ T6980] dump_stack_lvl+0x16c/0x1f0 [ 161.394144][ T6980] should_fail_ex+0x512/0x640 [ 161.394180][ T6980] _copy_from_user+0x2e/0xd0 [ 161.394202][ T6980] copy_msghdr_from_user+0x98/0x160 [ 161.394216][ T6980] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.394232][ T6980] ? kfree+0x252/0x6d0 [ 161.394244][ T6980] ? __lock_acquire+0x622/0x1c90 [ 161.394265][ T6980] ___sys_recvmsg+0xdb/0x1a0 [ 161.394278][ T6980] ? __pfx____sys_recvmsg+0x10/0x10 [ 161.394300][ T6980] ? __pfx___might_resched+0x10/0x10 [ 161.394319][ T6980] do_recvmmsg+0x2fe/0x750 [ 161.394334][ T6980] ? __pfx_do_recvmmsg+0x10/0x10 [ 161.394350][ T6980] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 161.394376][ T6980] ? __fget_files+0x20e/0x3c0 [ 161.394393][ T6980] __x64_sys_recvmmsg+0x22a/0x280 [ 161.394408][ T6980] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 161.394430][ T6980] do_syscall_64+0xcd/0xfa0 [ 161.394446][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.394460][ T6980] RIP: 0033:0x7f07e978efc9 [ 161.394471][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.394484][ T6980] RSP: 002b:00007f07ea67d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 161.394498][ T6980] RAX: ffffffffffffffda RBX: 00007f07e99e6180 RCX: 00007f07e978efc9 [ 161.394507][ T6980] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000003 [ 161.394514][ T6980] RBP: 00007f07ea67d090 R08: 0000000000000000 R09: 0000000000000000 [ 161.394522][ T6980] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 161.394530][ T6980] R13: 00007f07e99e6218 R14: 00007f07e99e6180 R15: 00007ffd51a96558 [ 161.394548][ T6980] [ 161.890355][ T6983] delete_channel: no stack [ 162.106939][ T6528] Bluetooth: hci7: command tx timeout [ 162.129807][ T6921] team0: Port device team_slave_0 added [ 162.222667][ T6982] tipc: Started in network mode [ 162.244278][ T6982] tipc: Node identity 45e5412, cluster identity 4711 [ 162.251078][ T6982] tipc: Node number set to 73290770 [ 162.429219][ T6921] team0: Port device team_slave_1 added [ 162.787145][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.804505][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.870502][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.923570][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.947030][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.087366][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.415382][ T6921] hsr_slave_0: entered promiscuous mode [ 163.445695][ T6921] hsr_slave_1: entered promiscuous mode [ 163.462620][ T6921] debugfs: 'hsr0' already exists in 'hsr' [ 163.473824][ T6921] Cannot create hsr debugfs directory [ 163.551207][ T6996] usb usb36: usbfs: process 6996 (syz.7.170) did not claim interface 0 before use [ 163.743856][ T6528] Bluetooth: hci6: unexpected event 0x03 length: 725 > 11 [ 164.214361][ T6528] Bluetooth: hci7: command tx timeout [ 164.494480][ T6921] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 164.602531][ T7010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.653257][ T6921] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 164.708951][ T6921] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 164.795264][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.175'. [ 164.807988][ T6921] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.290768][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.374747][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.407138][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.414403][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.495204][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.502397][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.593421][ T6921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.629584][ T6921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.778093][ T7036] Invalid ELF header magic: != ELF [ 166.270473][ T6528] Bluetooth: hci7: command tx timeout [ 166.349598][ T7051] FAULT_INJECTION: forcing a failure. [ 166.349598][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.364322][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.6.181 Not tainted syzkaller #0 PREEMPT(full) [ 166.364355][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.364367][ T7051] Call Trace: [ 166.364374][ T7051] [ 166.364383][ T7051] dump_stack_lvl+0x16c/0x1f0 [ 166.364413][ T7051] should_fail_ex+0x512/0x640 [ 166.364452][ T7051] _copy_from_user+0x2e/0xd0 [ 166.364491][ T7051] copy_msghdr_from_user+0x98/0x160 [ 166.364515][ T7051] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 166.364543][ T7051] ? kfree+0x252/0x6d0 [ 166.364564][ T7051] ? __lock_acquire+0x622/0x1c90 [ 166.364601][ T7051] ___sys_recvmsg+0xdb/0x1a0 [ 166.364625][ T7051] ? __pfx____sys_recvmsg+0x10/0x10 [ 166.364669][ T7051] ? __pfx___might_resched+0x10/0x10 [ 166.364702][ T7051] do_recvmmsg+0x2fe/0x750 [ 166.364730][ T7051] ? __pfx_do_recvmmsg+0x10/0x10 [ 166.364763][ T7051] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 166.364803][ T7051] ? __fget_files+0x20e/0x3c0 [ 166.364837][ T7051] __x64_sys_recvmmsg+0x22a/0x280 [ 166.364864][ T7051] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 166.364901][ T7051] do_syscall_64+0xcd/0xfa0 [ 166.364932][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.364957][ T7051] RIP: 0033:0x7f07e978efc9 [ 166.364977][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.364996][ T7051] RSP: 002b:00007f07ea67d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 166.365027][ T7051] RAX: ffffffffffffffda RBX: 00007f07e99e6180 RCX: 00007f07e978efc9 [ 166.365043][ T7051] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000003 [ 166.365058][ T7051] RBP: 00007f07ea67d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.365072][ T7051] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 166.365087][ T7051] R13: 00007f07e99e6218 R14: 00007f07e99e6180 R15: 00007ffd51a96558 [ 166.365122][ T7051] [ 166.370232][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.332590][ T6921] veth0_vlan: entered promiscuous mode [ 167.424931][ T6921] veth1_vlan: entered promiscuous mode [ 167.500357][ T6921] veth0_macvtap: entered promiscuous mode [ 167.535908][ T6921] veth1_macvtap: entered promiscuous mode [ 167.582984][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.615044][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.675187][ T6553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.725826][ T7069] FAULT_INJECTION: forcing a failure. [ 167.725826][ T7069] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 167.761071][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.5.184 Not tainted syzkaller #0 PREEMPT(full) [ 167.761105][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.761097][ T6553] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.761122][ T7069] Call Trace: [ 167.761129][ T7069] [ 167.761141][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 167.761172][ T7069] should_fail_ex+0x512/0x640 [ 167.761210][ T7069] should_fail_alloc_page+0xe7/0x130 [ 167.761247][ T7069] prepare_alloc_pages+0x3c2/0x610 [ 167.761282][ T7069] ? rcu_is_watching+0x12/0xc0 [ 167.761311][ T7069] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 167.761343][ T7069] ? rcu_is_watching+0x12/0xc0 [ 167.761369][ T7069] ? trace_mm_page_alloc+0x11f/0x1a0 [ 167.761403][ T7069] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 167.761434][ T7069] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.761466][ T7069] ? is_bpf_text_address+0x8a/0x1a0 [ 167.761500][ T7069] ? bpf_ksym_find+0x124/0x1c0 [ 167.761530][ T7069] ? is_bpf_text_address+0x94/0x1a0 [ 167.761564][ T7069] ? kernel_text_address+0x8d/0x100 [ 167.761603][ T7069] ? __kernel_text_address+0xd/0x40 [ 167.761626][ T7069] ? unwind_get_return_address+0x59/0xa0 [ 167.761664][ T7069] alloc_pages_bulk_noprof+0x71c/0x1410 [ 167.761690][ T7069] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.761733][ T7069] ? policy_nodemask+0xea/0x4e0 [ 167.761769][ T7069] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 167.761797][ T7069] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.761844][ T7069] kasan_populate_vmalloc+0x112/0x2d0 [ 167.761880][ T7069] ? alloc_vmap_area+0x8b5/0x29e0 [ 167.761919][ T7069] alloc_vmap_area+0x960/0x29e0 [ 167.761966][ T7069] ? __pfx_alloc_vmap_area+0x10/0x10 [ 167.762007][ T7069] __get_vm_area_node+0x1ca/0x330 [ 167.762047][ T7069] __vmalloc_node_range_noprof+0x271/0x1480 [ 167.762083][ T7069] ? kernel_clone+0xfc/0x930 [ 167.762123][ T7069] ? kernel_clone+0xfc/0x930 [ 167.762161][ T7069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.762204][ T7069] ? rcu_is_watching+0x12/0xc0 [ 167.762232][ T7069] ? kernel_clone+0xfc/0x930 [ 167.762261][ T7069] __vmalloc_node_noprof+0xad/0xf0 [ 167.762296][ T7069] ? kernel_clone+0xfc/0x930 [ 167.762329][ T7069] copy_process+0x2c77/0x76a0 [ 167.762359][ T7069] ? __pfx___futex_wait+0x10/0x10 [ 167.762410][ T7069] ? __pfx_copy_process+0x10/0x10 [ 167.762439][ T7069] ? futex_private_hash_put+0x176/0x300 [ 167.762475][ T7069] ? futex_private_hash_put+0x18a/0x300 [ 167.762512][ T7069] kernel_clone+0xfc/0x930 [ 167.762545][ T7069] ? __pfx_kernel_clone+0x10/0x10 [ 167.762594][ T7069] __do_sys_clone+0xce/0x120 [ 167.762624][ T7069] ? __pfx___do_sys_clone+0x10/0x10 [ 167.762655][ T7069] ? __sys_sendmsg+0x18c/0x220 [ 167.762692][ T7069] ? xfd_validate_state+0x61/0x180 [ 167.762738][ T7069] do_syscall_64+0xcd/0xfa0 [ 167.762789][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.762816][ T7069] RIP: 0033:0x7f19d158efc9 [ 167.762838][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.762861][ T7069] RSP: 002b:00007f19d2407fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 167.762891][ T7069] RAX: ffffffffffffffda RBX: 00007f19d17e6090 RCX: 00007f19d158efc9 [ 167.762909][ T7069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.762923][ T7069] RBP: 00007f19d1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.762938][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.762953][ T7069] R13: 00007f19d17e6128 R14: 00007f19d17e6090 R15: 00007ffd05df3888 [ 167.762989][ T7069] [ 167.763286][ T7069] syz.5.184: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 167.781564][ T6553] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.875067][ T7069] ,cpuset=/,mems_allowed=0-1 [ 168.151745][ T7069] CPU: 1 UID: 0 PID: 7069 Comm: syz.5.184 Not tainted syzkaller #0 PREEMPT(full) [ 168.151779][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.151792][ T7069] Call Trace: [ 168.151800][ T7069] [ 168.151810][ T7069] dump_stack_lvl+0x16c/0x1f0 [ 168.151840][ T7069] warn_alloc+0x248/0x3a0 [ 168.151864][ T7069] ? __pfx_warn_alloc+0x10/0x10 [ 168.151889][ T7069] ? kfree+0x2b8/0x6d0 [ 168.151906][ T7069] ? __get_vm_area_node+0x2cd/0x330 [ 168.151942][ T7069] ? __get_vm_area_node+0x2cd/0x330 [ 168.151980][ T7069] ? __get_vm_area_node+0x208/0x330 [ 168.152009][ T7069] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 168.152045][ T7069] ? kernel_clone+0xfc/0x930 [ 168.152075][ T7069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.152108][ T7069] ? rcu_is_watching+0x12/0xc0 [ 168.152132][ T7069] ? kernel_clone+0xfc/0x930 [ 168.152154][ T7069] __vmalloc_node_noprof+0xad/0xf0 [ 168.152186][ T7069] ? kernel_clone+0xfc/0x930 [ 168.152213][ T7069] copy_process+0x2c77/0x76a0 [ 168.152241][ T7069] ? __pfx___futex_wait+0x10/0x10 [ 168.152293][ T7069] ? __pfx_copy_process+0x10/0x10 [ 168.152324][ T7069] ? futex_private_hash_put+0x176/0x300 [ 168.152363][ T7069] ? futex_private_hash_put+0x18a/0x300 [ 168.152402][ T7069] kernel_clone+0xfc/0x930 [ 168.152436][ T7069] ? __pfx_kernel_clone+0x10/0x10 [ 168.152481][ T7069] __do_sys_clone+0xce/0x120 [ 168.152511][ T7069] ? __pfx___do_sys_clone+0x10/0x10 [ 168.152540][ T7069] ? __sys_sendmsg+0x18c/0x220 [ 168.152580][ T7069] ? xfd_validate_state+0x61/0x180 [ 168.152630][ T7069] do_syscall_64+0xcd/0xfa0 [ 168.152662][ T7069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.152689][ T7069] RIP: 0033:0x7f19d158efc9 [ 168.152712][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.152736][ T7069] RSP: 002b:00007f19d2407fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 168.152761][ T7069] RAX: ffffffffffffffda RBX: 00007f19d17e6090 RCX: 00007f19d158efc9 [ 168.152779][ T7069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.152794][ T7069] RBP: 00007f19d1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.152810][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.152825][ T7069] R13: 00007f19d17e6128 R14: 00007f19d17e6090 R15: 00007ffd05df3888 [ 168.152863][ T7069] [ 168.152872][ T7069] Mem-Info: [ 168.417105][ T7069] active_anon:18524 inactive_anon:962 isolated_anon:0 [ 168.417105][ T7069] active_file:13826 inactive_file:40892 isolated_file:0 [ 168.417105][ T7069] unevictable:768 dirty:670 writeback:0 [ 168.417105][ T7069] slab_reclaimable:12115 slab_unreclaimable:113114 [ 168.417105][ T7069] mapped:59301 shmem:11090 pagetables:1374 [ 168.417105][ T7069] sec_pagetables:0 bounce:0 [ 168.417105][ T7069] kernel_misc_reclaimable:0 [ 168.417105][ T7069] free:1231794 free_pcp:22421 free_cma:0 [ 168.469397][ T6553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.503351][ T7069] Node 0 active_anon:74096kB inactive_anon:3848kB active_file:55304kB inactive_file:163364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:237204kB dirty:2676kB writeback:0kB shmem:42824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14484kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.535651][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.603743][ T7069] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.633863][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.653759][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.661622][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.664220][ T7069] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.703307][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.760961][ T7069] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 168.769094][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.777027][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.783821][ T7069] Node 0 DMA32 free:1012684kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74096kB inactive_anon:3548kB active_file:55304kB inactive_file:163364kB unevictable:1536kB writepending:2676kB zspages:4320kB present:3129332kB managed:2545104kB mlocked:0kB bounce:0kB free_pcp:72488kB local_pcp:38368kB free_cma:0kB [ 168.818320][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.849788][ T7069] lowmem_reserve[]: 0 0 1 1 1 [ 168.857100][ T7069] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.903134][ T7069] lowmem_reserve[]: 0 0 0 0 0 [ 168.908515][ T7069] Node 1 Normal free:3896804kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18296kB local_pcp:14936kB free_cma:0kB [ 168.941781][ T7069] lowmem_reserve[]: 0 0 0 0 0 [ 168.955877][ T7069] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.969917][ T7069] Node 0 DMA32: 3936*4kB (UM) 1012*8kB (UME) 982*16kB (UME) 855*32kB (UME) 678*64kB (UME) 280*128kB (ME) 130*256kB (ME) 56*512kB (M) 18*1024kB (ME) 4*2048kB (ME) 192*4096kB (M) = 1021152kB [ 168.992059][ T7069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.029254][ T7069] Node 1 Normal: 141*4kB (UME) 54*8kB (UME) 36*16kB (UME) 82*32kB (UME) 24*64kB (UME) 7*128kB (UE) 4*256kB (UME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896804kB [ 169.123319][ T7069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.135023][ T7069] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.147291][ T7069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.158006][ T7069] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.169927][ T7069] 61635 total pagecache pages [ 169.177357][ T7069] 6 pages in swap cache [ 169.181730][ T7074] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 169.193613][ T7069] Free swap = 91864kB [ 169.207423][ T7069] Total swap = 124996kB [ 169.211634][ T7069] 2097051 pages RAM [ 169.215728][ T7069] 0 pages HighMem/MovableOnly [ 169.220421][ T7069] 428685 pages reserved [ 169.228514][ T7069] 0 pages cma reserved [ 169.569572][ T7083] FAULT_INJECTION: forcing a failure. [ 169.569572][ T7083] name fail_futex, interval 1, probability 0, space 0, times 1 [ 169.622061][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.8.188 Not tainted syzkaller #0 PREEMPT(full) [ 169.622092][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.622104][ T7083] Call Trace: [ 169.622111][ T7083] [ 169.622120][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 169.622148][ T7083] should_fail_ex+0x512/0x640 [ 169.622181][ T7083] get_futex_key+0x1d0/0x1560 [ 169.622212][ T7083] ? __pfx_get_futex_key+0x10/0x10 [ 169.622236][ T7083] ? futex_private_hash_put+0x176/0x300 [ 169.622270][ T7083] futex_wake+0xea/0x530 [ 169.622300][ T7083] ? __pfx_futex_wait+0x10/0x10 [ 169.622330][ T7083] ? __pfx_futex_wake+0x10/0x10 [ 169.622365][ T7083] ? find_held_lock+0x2b/0x80 [ 169.622385][ T7083] ? __might_fault+0xe3/0x190 [ 169.622405][ T7083] ? __might_fault+0xe3/0x190 [ 169.622428][ T7083] do_futex+0x1e3/0x350 [ 169.622455][ T7083] ? __pfx_do_futex+0x10/0x10 [ 169.622481][ T7083] ? cap_validate_magic+0xab/0x200 [ 169.622505][ T7083] ? __do_sys_capset+0xf9/0x460 [ 169.622528][ T7083] __x64_sys_futex+0x1e0/0x4c0 [ 169.622559][ T7083] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.622586][ T7083] ? xfd_validate_state+0x61/0x180 [ 169.622637][ T7083] do_syscall_64+0xcd/0xfa0 [ 169.622662][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.622683][ T7083] RIP: 0033:0x7f0e5198efc9 [ 169.622699][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.622718][ T7083] RSP: 002b:00007f0e528a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.622744][ T7083] RAX: ffffffffffffffda RBX: 00007f0e51be5fa8 RCX: 00007f0e5198efc9 [ 169.622757][ T7083] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e51be5fac [ 169.622770][ T7083] RBP: 00007f0e51be5fa0 R08: 00007f0e528a3000 R09: 0000000000000000 [ 169.622782][ T7083] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 169.622795][ T7083] R13: 00007f0e51be6038 R14: 00007ffd549ea260 R15: 00007ffd549ea348 [ 169.622823][ T7083] [ 171.252741][ T7106] Invalid ELF header magic: != ELF [ 172.021842][ T7113] netlink: 18 bytes leftover after parsing attributes in process `syz.8.193'. [ 172.403636][ T7122] random: crng reseeded on system resumption [ 173.546540][ T6528] Bluetooth: hci7: unexpected event 0x03 length: 725 > 11 [ 173.554283][ T7145] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 174.862753][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.8.209'. [ 175.122736][ T7185] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 175.221638][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.8.212'. [ 176.391644][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.5.215'. [ 177.932170][ T6528] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 177.939526][ T7225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.187101][ T7258] tipc: Started in network mode [ 180.199143][ T7258] tipc: Node identity 45e5412, cluster identity 4711 [ 180.217011][ T7258] tipc: Node number set to 73290770 [ 180.235680][ T7258] delete_channel: no stack [ 180.449705][ T6528] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 181.403952][ T7279] Invalid ELF header magic: != ELF [ 181.637731][ T7289] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 181.835325][ T6375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.849493][ T6375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.858103][ T6375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.871748][ T6375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.880639][ T6375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.162034][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 182.273372][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.282247][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.290350][ T7292] bridge_slave_0: entered allmulticast mode [ 182.299226][ T7292] bridge_slave_0: entered promiscuous mode [ 182.308124][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.316479][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.325251][ T7292] bridge_slave_1: entered allmulticast mode [ 182.333094][ T7292] bridge_slave_1: entered promiscuous mode [ 182.373376][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.386974][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.562082][ T7292] team0: Port device team_slave_0 added [ 182.582857][ T7292] team0: Port device team_slave_1 added [ 182.632512][ T30] audit: type=1807 audit(1761921382.812:19): UNKNOWN=./cgroup res=0 [ 182.641464][ T7307] ima: policy update failed [ 182.664146][ T30] audit: type=1802 audit(1761921382.822:20): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.243" res=0 errno=0 [ 182.715402][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.738828][ T30] audit: type=1802 audit(1761921382.882:21): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.243" res=0 errno=0 [ 182.748251][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.836998][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.848784][ T7314] tipc: Started in network mode [ 182.855510][ T7314] tipc: Node identity 45e5412, cluster identity 4711 [ 182.862429][ T7314] tipc: Node number set to 73290770 [ 182.870407][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.878096][ T7314] delete_channel: no stack [ 182.885849][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.912827][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.213465][ T6375] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 183.223654][ T6375] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 183.240030][ T6375] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 183.251532][ T6375] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 183.259961][ T6375] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 183.297070][ T7292] hsr_slave_0: entered promiscuous mode [ 183.306855][ T7292] hsr_slave_1: entered promiscuous mode [ 183.313460][ T7292] debugfs: 'hsr0' already exists in 'hsr' [ 183.319509][ T7292] Cannot create hsr debugfs directory [ 183.944539][ T6528] Bluetooth: hci4: command tx timeout [ 184.018925][ T7292] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 184.058567][ T7292] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 184.069958][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 184.086938][ T7292] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 184.110652][ T7292] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 184.238377][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.246855][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.260340][ T7318] bridge_slave_0: entered allmulticast mode [ 184.269174][ T7318] bridge_slave_0: entered promiscuous mode [ 184.292822][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.301257][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.309240][ T7318] bridge_slave_1: entered allmulticast mode [ 184.317414][ T7318] bridge_slave_1: entered promiscuous mode [ 184.433188][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.456686][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.485852][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.550261][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.566152][ T7318] team0: Port device team_slave_0 added [ 184.583165][ T7318] team0: Port device team_slave_1 added [ 184.628401][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.635713][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.690612][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.697863][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.721416][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.728799][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.762702][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.790978][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.800736][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.834829][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.999650][ T7318] hsr_slave_0: entered promiscuous mode [ 185.012636][ T7318] hsr_slave_1: entered promiscuous mode [ 185.020576][ T7318] debugfs: 'hsr0' already exists in 'hsr' [ 185.026677][ T7318] Cannot create hsr debugfs directory [ 185.258033][ T7318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.296718][ T7292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.304394][ T6528] Bluetooth: hci8: command tx timeout [ 185.623747][ T7292] veth0_vlan: entered promiscuous mode [ 185.639528][ T7292] veth1_vlan: entered promiscuous mode [ 185.676169][ T7292] veth0_macvtap: entered promiscuous mode [ 185.698726][ T7292] veth1_macvtap: entered promiscuous mode [ 185.735370][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.755733][ T7292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.777938][ T6544] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.812379][ T6544] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.825615][ T6544] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.838867][ T6544] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.855331][ T7374] delete_channel: no stack [ 185.987273][ T6544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.000862][ T6544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.024280][ T6528] Bluetooth: hci4: command tx timeout [ 186.065574][ T6544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.073436][ T6544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.386164][ T6528] Bluetooth: hci8: command tx timeout [ 187.550667][ T7399] sg_write: process 207 (syz.5.256) changed security contexts after opening file descriptor, this is not allowed. [ 187.694528][ T6528] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 188.104504][ T6375] Bluetooth: hci4: command tx timeout [ 188.301548][ T7420] delete_channel: no stack [ 189.464766][ T6375] Bluetooth: hci8: command tx timeout [ 190.185330][ T6375] Bluetooth: hci4: command tx timeout [ 190.671953][ T7451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 191.544264][ T6375] Bluetooth: hci8: command tx timeout [ 194.430021][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.437339][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.776754][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.9.277'. [ 195.329907][ T7496] delete_channel: no stack [ 195.571799][ T7501] FAULT_INJECTION: forcing a failure. [ 195.571799][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.598937][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.9.279 Not tainted syzkaller #0 PREEMPT(full) [ 195.598970][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.598984][ T7501] Call Trace: [ 195.598992][ T7501] [ 195.599001][ T7501] dump_stack_lvl+0x16c/0x1f0 [ 195.599033][ T7501] should_fail_ex+0x512/0x640 [ 195.599074][ T7501] _copy_from_iter+0x29f/0x1720 [ 195.599115][ T7501] ? __alloc_skb+0x200/0x380 [ 195.599153][ T7501] ? __pfx__copy_from_iter+0x10/0x10 [ 195.599192][ T7501] ? __pfx___might_resched+0x10/0x10 [ 195.599218][ T7501] ? __lock_acquire+0xb8a/0x1c90 [ 195.599258][ T7501] netlink_sendmsg+0x820/0xdd0 [ 195.599291][ T7501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.599322][ T7501] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 195.599363][ T7501] ____sys_sendmsg+0xa98/0xc70 [ 195.599395][ T7501] ? copy_msghdr_from_user+0x10a/0x160 [ 195.599419][ T7501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.599464][ T7501] ___sys_sendmsg+0x134/0x1d0 [ 195.599492][ T7501] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.599511][ T7501] ? __lock_acquire+0x622/0x1c90 [ 195.599588][ T7501] __sys_sendmsg+0x16d/0x220 [ 195.599611][ T7501] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.599657][ T7501] do_syscall_64+0xcd/0xfa0 [ 195.599688][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.599714][ T7501] RIP: 0033:0x7fa7f2b8efc9 [ 195.599734][ T7501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.599756][ T7501] RSP: 002b:00007fa7f3972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.599786][ T7501] RAX: ffffffffffffffda RBX: 00007fa7f2de5fa0 RCX: 00007fa7f2b8efc9 [ 195.599803][ T7501] RDX: 0000000022008044 RSI: 0000200000001d40 RDI: 0000000000000003 [ 195.599818][ T7501] RBP: 00007fa7f3972090 R08: 0000000000000000 R09: 0000000000000000 [ 195.599833][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.599848][ T7501] R13: 00007fa7f2de6038 R14: 00007fa7f2de5fa0 R15: 00007ffc5109be28 [ 195.599884][ T7501] [ 196.857541][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.9.283'. [ 196.866501][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.9.283'. [ 198.027651][ T6528] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 198.040975][ T6528] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 198.049947][ T6528] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 198.059403][ T6528] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 198.070566][ T6528] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.320856][ T7537] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.459866][ T7543] capability: warning: `syz.5.288' uses 32-bit capabilities (legacy support in use) [ 198.536340][ T7534] chnl_net:caif_netlink_parms(): no params data found [ 198.601848][ T7545] hub 1-0:1.0: USB hub found [ 198.616518][ T7545] hub 1-0:1.0: 1 port detected [ 198.758709][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.774095][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.781654][ T7534] bridge_slave_0: entered allmulticast mode [ 198.790112][ T7534] bridge_slave_0: entered promiscuous mode [ 198.808017][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.815821][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.823154][ T7534] bridge_slave_1: entered allmulticast mode [ 198.833268][ T7534] bridge_slave_1: entered promiscuous mode [ 199.048460][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.078043][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.331491][ T7534] team0: Port device team_slave_0 added [ 199.366467][ T7534] team0: Port device team_slave_1 added [ 199.530401][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.562269][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.594166][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.651258][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.661598][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.694106][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.739152][ T7534] hsr_slave_0: entered promiscuous mode [ 199.745958][ T7534] hsr_slave_1: entered promiscuous mode [ 199.752190][ T7534] debugfs: 'hsr0' already exists in 'hsr' [ 199.758060][ T7534] Cannot create hsr debugfs directory [ 200.104122][ T6375] Bluetooth: hci9: command tx timeout [ 200.827684][ T7582] netlink: 'syz.5.298': attribute type 64 has an invalid length. [ 200.835845][ T7582] netlink: 74 bytes leftover after parsing attributes in process `syz.5.298'. [ 202.186964][ T6375] Bluetooth: hci9: command tx timeout [ 202.200828][ T7600] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 204.264312][ T6375] Bluetooth: hci9: command tx timeout [ 206.344140][ T6375] Bluetooth: hci9: command tx timeout [ 214.767953][ T6528] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 214.781750][ T6528] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 214.796392][ T6528] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 214.805771][ T6528] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 214.813519][ T6528] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 215.004376][ T7606] chnl_net:caif_netlink_parms(): no params data found [ 215.080018][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.087652][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.095245][ T7606] bridge_slave_0: entered allmulticast mode [ 215.102445][ T7606] bridge_slave_0: entered promiscuous mode [ 215.110894][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.118395][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.125782][ T7606] bridge_slave_1: entered allmulticast mode [ 215.132879][ T7606] bridge_slave_1: entered promiscuous mode [ 215.168934][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.182557][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.213122][ T7606] team0: Port device team_slave_0 added [ 215.221703][ T7606] team0: Port device team_slave_1 added [ 215.252679][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.261734][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.295053][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.309600][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.316750][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.343185][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.394086][ T7606] hsr_slave_0: entered promiscuous mode [ 215.400596][ T7606] hsr_slave_1: entered promiscuous mode [ 215.407278][ T7606] debugfs: 'hsr0' already exists in 'hsr' [ 215.413011][ T7606] Cannot create hsr debugfs directory [ 215.796529][ T9] ================================================================== [ 215.796543][ T9] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 215.796566][ T9] Write of size 8 at addr ffffc90003ff9a80 by task kworker/0:0/9 [ 215.796578][ T9] [ 215.796586][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 215.796602][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.796612][ T9] Workqueue: events_power_efficient fb_flashcursor [ 215.796631][ T9] Call Trace: [ 215.796636][ T9] [ 215.796642][ T9] dump_stack_lvl+0x116/0x1f0 [ 215.796659][ T9] print_report+0xcd/0x630 [ 215.796682][ T9] ? __virt_addr_valid+0x81/0x610 [ 215.796701][ T9] ? sys_imageblit+0x1a6f/0x1e60 [ 215.796715][ T9] kasan_report+0xe0/0x110 [ 215.796732][ T9] ? sys_imageblit+0x1a6f/0x1e60 [ 215.796748][ T9] sys_imageblit+0x1a6f/0x1e60 [ 215.796765][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 215.796787][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 215.796803][ T9] soft_cursor+0x524/0xa10 [ 215.796827][ T9] bit_cursor+0xe8c/0x17e0 [ 215.796848][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 215.796873][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.796896][ T9] ? get_color+0x1da/0x450 [ 215.796913][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 215.796932][ T9] fb_flashcursor+0x310/0x400 [ 215.796950][ T9] process_one_work+0x9cf/0x1b70 [ 215.796974][ T9] ? __pfx_process_one_work+0x10/0x10 [ 215.797000][ T9] ? assign_work+0x1a0/0x250 [ 215.797019][ T9] worker_thread+0x6c8/0xf10 [ 215.797043][ T9] ? __pfx_worker_thread+0x10/0x10 [ 215.797063][ T9] kthread+0x3c5/0x780 [ 215.797082][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797101][ T9] ? rcu_is_watching+0x12/0xc0 [ 215.797116][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797134][ T9] ret_from_fork+0x675/0x7d0 [ 215.797154][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797173][ T9] ret_from_fork_asm+0x1a/0x30 [ 215.797195][ T9] [ 215.797200][ T9] [ 215.797204][ T9] The buggy address belongs to a vmalloc virtual mapping [ 215.797215][ T9] Memory state around the buggy address: [ 215.797223][ T9] ffffc90003ff9980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.797232][ T9] ffffc90003ff9a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.797248][ T9] >ffffc90003ff9a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.797256][ T9] ^ [ 215.797275][ T9] ffffc90003ff9b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.797284][ T9] ffffc90003ff9b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 215.797291][ T9] ================================================================== [ 215.797299][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.797308][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 215.797323][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.797332][ T9] Workqueue: events_power_efficient fb_flashcursor [ 215.797350][ T9] Call Trace: [ 215.797355][ T9] [ 215.797360][ T9] dump_stack_lvl+0x3d/0x1f0 [ 215.797374][ T9] vpanic+0x640/0x6f0 [ 215.797393][ T9] panic+0xca/0xd0 [ 215.797411][ T9] ? __pfx_panic+0x10/0x10 [ 215.797432][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 215.797452][ T9] check_panic_on_warn+0xab/0xb0 [ 215.797471][ T9] end_report+0x107/0x170 [ 215.797488][ T9] kasan_report+0xee/0x110 [ 215.797505][ T9] ? sys_imageblit+0x1a6f/0x1e60 [ 215.797522][ T9] sys_imageblit+0x1a6f/0x1e60 [ 215.797539][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 215.797561][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 215.797575][ T9] soft_cursor+0x524/0xa10 [ 215.797598][ T9] bit_cursor+0xe8c/0x17e0 [ 215.797620][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 215.797642][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 215.797664][ T9] ? get_color+0x1da/0x450 [ 215.797681][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 215.797701][ T9] fb_flashcursor+0x310/0x400 [ 215.797719][ T9] process_one_work+0x9cf/0x1b70 [ 215.797742][ T9] ? __pfx_process_one_work+0x10/0x10 [ 215.797765][ T9] ? assign_work+0x1a0/0x250 [ 215.797788][ T9] worker_thread+0x6c8/0xf10 [ 215.797812][ T9] ? __pfx_worker_thread+0x10/0x10 [ 215.797833][ T9] kthread+0x3c5/0x780 [ 215.797852][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797871][ T9] ? rcu_is_watching+0x12/0xc0 [ 215.797885][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797904][ T9] ret_from_fork+0x675/0x7d0 [ 215.797923][ T9] ? __pfx_kthread+0x10/0x10 [ 215.797942][ T9] ret_from_fork_asm+0x1a/0x30 [ 215.797964][ T9] [ 215.798259][ T9] Kernel Offset: disabled