last executing test programs: 10.691581958s ago: executing program 2 (id=96): connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000) writev$auto(0x3, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socket(0x29, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x2, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x6, 0x1, @relative_id=0x4, 0x9}, 0x8a4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) 7.506022542s ago: executing program 2 (id=105): socket(0xf, 0x3, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) socket(0x2, 0xa, 0xe) (async) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) (async) close_range$auto(0x0, 0x5, 0x0) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x8, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) (rerun: 64) readv$auto(0x3, 0x0, 0x87) (async, rerun: 32) socket(0x2, 0x2, 0x0) (rerun: 32) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0x7, 0x14, &(0x7f0000000100)='nl8021,\x00\x12%\xb0\xe8\xe4\xe7Hl\xc5\xc7\xa4\x8d\xa5\f\xa6`\x92=s\xc1-\xcb$-\xda\x81)\xc2Q\xf3\x1f\xe1\b\x99\xed\xbe1\xcd\x97\xd6td#R\xb9GH#/\x1ahq\xcd\xe6\x04\x190\xbd\xbd?+R\xab2AY\xb8\x1f\x8fIh\xfa\xcd\xc0M\xd6\x17AV\f\xea\xc2\xc7\x1d\xc3\x04\x1d\xd9\x98\xf3\xff&1\xee\x90<\xa9\xbaX\xde\xcc\xfc\xa3>\xef\xfc\xa3', 0xea) (async) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x161242, 0x0) 6.762374844s ago: executing program 2 (id=108): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x1000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x51) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x2, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x21, 0x2, 0x9) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000040)={"24df202c52ce582a0a73bfa704878a246fc33219c75577639801c6106a8e786529a4668e21e8a9b2817530ce1fb4fc2d102c736b89a415c7a183eb07f8030b22835fbd9fdb3fa90ce8da218a0e3e3eb7c4233804196028f833e45ebe85d7e729aa777a271084f6dd7ddc988b016d23da37264de075c0e1abe160d263351db601", "b0b113fa57b34e83551e4e9ee15f25d3144ec0e65d8dcc1e2aa67241fb6ae0ef2da86d63d66eb3398b5d01e0249a4035ac4dfd5b1e904ba0ae329e383366547cee54863a0452c02f7f1fb7a55c8571826b00d951406d96a8338c4a923faa5cbc96e223acd4487267b584deff7d8f2bbc21d84674d5640d74c05686d77aa439f1", 0x5}) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) 6.722864017s ago: executing program 0 (id=109): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2000c004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) waitid$auto_P_ALL(0x0, 0x80, &(0x7f0000000440)={@siginfo_0_0={0x6, 0x88, 0x7f, @_timer={0x0, 0xffff, @sival_ptr=&(0x7f0000000340)="27d347cde727268320f60b131a94ab9310947a6ba70c1ad5f6a0f6b3285328128aa9be6b842cc5b87e99b8dd303bf09e9c11c32753fa45ddc8864a4d11d51061b1533d5a37b67afebc564ef20986f11e493b33873dad361e68c8110a510c3e41cbe265be1f7ced7b5259339ea7df463a825fd81870bd8280f5497cb36c4b4a06328ec0809628d2b5d54d061e2452a788ec5bcede795266c5e01176edd8b0b8f907bc7dabf445950c44a8c8d656da51cd5864d57e2aaab0a41ae259e0e9f8afda05cf51eff6700f13eb71b41e6f33", 0xa840}}}, 0x0, &(0x7f00000004c0)={{0x4, 0x7}, {0x400, 0xc}, 0x3, 0x3, 0x7, 0xf, 0xea14, 0x0, 0x7f, 0x5, 0x2, 0xffffffffffff7d79, 0x4, 0x3, 0x7, 0x81}) process_vm_readv$auto(r1, &(0x7f0000000000)={&(0x7f0000000580)="3866aa5df8fdbb5b769ab5b3f783ae91ac50ff636a34e1ee8d7a55b991672ea0b162a2cc3c6b2cf18e9572259362321775a8d9b6e4d8d7b095264182cc24e8b33cd831bdea519db20277d83d0a69bde1c369c48baa57aefc333f94c7d98b4ed92cc95345ae1cd67ea0310609ef93f8e520457f3eb62a47317787fcba65b27339371934dc9419414fda7dc7ede132b8841a1cdb04d48b4d16f0e4d22b07afd0cd20dd0a0f4517ec0a757aef408f4701dd178fb098cf0a2d2da1d65966395a06", 0x6}, 0x3, &(0x7f0000000700)={&(0x7f0000000640)="6c33b20bdc95f4601e70867d44b09d687ab98b81d22325cc488f3a61b3e1a87a6f47f51cca78029b810c91a058ad6fe068b1990e7f3f7cb7dcede5861b006354cf261aef1cf0c7e8803c389055f6a0c81878b96e5b1c831f2736b201c916b3fd76af9d7b48355cf5b361b7d7d4fea86b68c589155b6a9eba6460a2435cdc5bdfbf1c840219ee2c77ceceae78f0ad4754a1c455b6ceb7d4cb75dee8b2e5b2ae3e501e287e58", 0x9}, 0x7, 0x1) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_BURST_TMR={0x8, 0x9, 0x7}, @ETHTOOL_A_PLCA_NODE_ID={0x8}, @ETHTOOL_A_PLCA_ENABLED={0x5}, @ETHTOOL_A_PLCA_NODE_ID={0x8}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x1ff}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x6}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0xfffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x108002, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.258452905s ago: executing program 0 (id=112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/039/001\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) clock_gettime$auto(0x2, &(0x7f0000000000)={0x7, 0x7}) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) io_uring_register$auto(0xffffffffffffffff, 0xffff5594, 0x0, 0x1) prctl$auto(0x1000000001c, 0x6, 0x0, 0x40000000000c, 0x3fffffffff) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6714bf7f", @ANYBLOB="7d3f2dbd7000fddbdf250b0000009a186fa3009c378575480d377bec17864aaab310d1f023c2a5cb12fdffb0bd4163942b191301bf33e2937efbe29aa7361d3097d3896ad0467eb3002aeda72c84aae892abafeee433c70514752c7ca49580b5075e72ada90a09f94f42dd8d6a8cb4cf2524e80d75c0a00a60c9e8b4f645ea8f87531f22811b6d7e41ef3c3432b3891fce3f71c25ad7bb1e6cc04afe5d75f8789199b6"], 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffc3, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0x2400c804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) 5.376374334s ago: executing program 0 (id=113): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0x400, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0xa0, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x8c, 0x2a, "3684a660bdccd1367bc48d95c45654a7d4ef122b5aaf580986f36c8305d02a0134617098711133f1352d29a8989d6853d2b62e6876842b9141c1f1baed01823c40a15b3a9b06aaa8c7fe2bcb43f0e02ab341b1480fd251e4695746cad00d4417d34c9d41ed33d62e634ac67f4a04ac804817cea529436086a5355b67030a24cc223223926569c0ee"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000008580)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x4238}, 0x1, 0x0, 0x0, 0x4c098}, 0x4048000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0x2, 0x1, 0x84) setsockopt$auto(r4, 0x10000000084, 0x19, 0x0, 0x8) 4.515932016s ago: executing program 1 (id=115): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x0, 0xfffffffffffffffd}, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) r2 = socket(0xa, 0x1, 0x84) semctl$auto(0x8, 0x806, 0x13, 0x46) (async) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x10000) (async) socket$nl_generic(0x10, 0x3, 0x10) timer_gettime$auto(0xfffffff7, &(0x7f00000000c0)={{0x4, 0x400}, {0x7ff, 0xff}}) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) (async) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x60080, 0x0) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) (async) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) 4.30050915s ago: executing program 2 (id=117): openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket(0x3, 0x100001, 0x4) (async) socket(0x3, 0x100001, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) (async) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mmap$auto(0x1ffffffffffffff, 0x40000a, 0x2bb, 0x13, 0x2, 0x7) (async) mmap$auto(0x1ffffffffffffff, 0x40000a, 0x2bb, 0x13, 0x2, 0x7) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/status\x00', 0x40000, 0x0) read$auto_proc_single_file_operations_base(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}, @BATADV_ATTR_MESH_ADDRESS={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, 0x0, 0x4000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x10000, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/async_depth\x00', 0x40800, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/async_depth\x00', 0x40800, 0x0) sendmmsg$auto(0x4, 0x0, 0xffffff01, 0xa) (async) sendmmsg$auto(0x4, 0x0, 0xffffff01, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 4.196531862s ago: executing program 1 (id=118): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x48002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyue\x00', 0x20a40, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x80047456, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r1, 0x402, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x84180, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) 4.064652799s ago: executing program 3 (id=119): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = waitid$auto_P_ALL(0x0, 0x9, &(0x7f0000000340)={@_si_pad}, 0xb73, &(0x7f00000001c0)={{0xffffffffffff8001, 0xfffffffffffffffe}, {0xffffffffffffbffa, 0x2}, 0xfffffffffffffffc, 0x8000000000000000, 0xf, 0x9d02, 0x8, 0x6, 0x6, 0x7, 0x6, 0xffffffffffffffff, 0xfffffffffffffffb, 0x4, 0x401, 0x76}) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)=@task_fd_query={r3, r1, 0x4, 0x2, 0x8714, 0x3, r4, 0xe, 0x7}, 0xfffffe01) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x80000000fffffff9, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x7, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0x38) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd7000fcdbdf1e74abff0008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 3.888063882s ago: executing program 3 (id=120): r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0x85}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c814) r1 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x0, 0x0) read$auto_ubifs_dir_operations_ubifs(r1, &(0x7f0000000180)=""/44, 0x2c) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0x22, 0x6, "85bc1fbb133e35d1b4503654a2bab078969e2e620d30bd23512e864d447c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40900, 0x0) r4 = ioctl$auto_TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r6 = ioctl$auto_TUNSETPERSIST(r5, 0x400454cb, &(0x7f0000000400)=0x9) r7 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000480), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, r7, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ={0x11f, 0x1, 0x0, 0x1, [@generic="d25ca770ada7f6b0d1a12e1a40f80ddca371179ae66f6c85de6daa6130d4da6f2627fbd815861da74fec641bb86549e697cee0fa4bc53c543d4c650f739e4dfac97076f67a60c7b49f3f93037405d37d799077e4c7e5d94ed42e3a00f7d3e483a0cabf88d11a3a9fea71e9c58902c9121181985d2409e624c5398dde3d8a5696ec335c018f725fd5c43dfb5c745ca0c5412f1212b1fa6bbba2820d0ac1d1da60e4ec905ce0ed071d28f52b3b4e5ed254c2b8206c74e21a1dee19c8a5e1c732c09fa3aaaf5b0704a9f16380b61c11007e874ef6b7cb226c98452117", @generic="a7f79aa1a4170458f0f2a91f10edeb8553d7bc80cfea347e5b789ffc10be71475688eb953d931dad2b2e07b121f8b35e1af7eaa53b4d023c79a8ef3c6b59fb8b"]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4040014) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/midiC2D2\x00', 0x240, 0x0) ioctl$auto(r4, 0x6, r6) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r4, 0xc0884123, &(0x7f00000006c0)={0x9937, 0x0, @status={0x48000000, 0x0, {}, 0x3, {}, {0x8, 0x3ff}, 0x1, 0x0, {0x2}}, @reserved="dc97b1c333d0b4d4df62e711d8e77090bcbf2106df56977f9fffce92b1a257537c97e6ebc6f5718324c65029973349a33c5e441bf7140fb0bca9eb0940a1812f"}) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000780)={"4597fed33e1c4adb9f703052bb09759be668511b08114efd2e2b3bc9a9236724", 0x3, 0x101, 0x52, 0x100000001, 0x3, 0x0}) tkill$auto(r8, 0x8) ioctl$auto(r3, 0x3, r5) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000840), r6) sendmsg$auto_IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x110, r9, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xd6, 0x3, 0x0, 0x1, [@generic="a06b862a53b98d5438bc3d3b415de932e00bb696b14a454bc329cceb26bc9fcbbcb6f4ea62f6613f27d0e9cd518cc93c4221e8b5d906f31b82eb5910bcf983301a9bce728e01420dbd385d691565", @typed={0x55, 0x119, 0x0, 0x0, @binary="b8bebb841f0c6efff53ac5949492edf86c6e8c290f8c7b1d2f622851be30ec8fb9d4821ac1e9d981bdcecee679052b6ccd351560ee77a3b1ebf46536885fd6710eea1ac7ebccc431fcce026b98854acf16"}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x10001}, @typed={0x4, 0x42}, @typed={0x9, 0x6, 0x0, 0x0, @str='\xa2L[-\x00'}, @typed={0x4, 0x10e}, @typed={0x8, 0xf, 0x0, 0x0, @pid=r8}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) socket(0x3f, 0x1, 0x4) ioctl$auto_XFS_IOC_ALLOCSP64(r6, 0x40305824, &(0x7f0000000a40)={0xa, 0xfff, 0x1f, 0xe7, 0x100, r8}) prctl$auto(0x7f, 0xd, r10, 0xc, 0x10000) select$auto(0x2, &(0x7f0000000a80)={[0x0, 0x8, 0x225d, 0x0, 0x0, 0x5, 0x2, 0x4, 0x5ca3015, 0xfffffffffffff801, 0x7, 0x6, 0x8, 0xfffffffffffffffb, 0x4, 0x800]}, &(0x7f0000000b00)={[0x3, 0x5, 0x6c621096, 0x8, 0x2, 0x4, 0xff6, 0x9, 0x4, 0x401, 0x0, 0x4, 0xfffffffffffffffd, 0x68fd, 0x5aae, 0x100000001]}, &(0x7f0000000b80)={[0x1, 0x15f0000000, 0x2ef1, 0x6, 0xfffffffffffffffb, 0xb, 0x4, 0x4, 0x80000001, 0x5, 0x6, 0x5, 0x8001, 0x101, 0x2, 0x1]}, &(0x7f0000000c00)={0x9, 0x5}) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000c40)=""/86, 0x56) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), r4) setsockopt$auto(r1, 0xb, 0x6, &(0x7f0000000d00)='\x00', 0x732) mprotect$auto(0xcb51, 0x80, 0x2) write$auto(r1, &(0x7f0000000d40)='thermal\x00', 0xc) 3.099789894s ago: executing program 0 (id=121): r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/features/extended_error\x00', 0x105400, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, r0, 0x300000000000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000400)={0x6, 0x5, 0x4, 0x9, 0x8000, 0xffffffffffffffff}) r2 = semctl$auto_GETPID(0x0, 0x1, 0xb, 0x228d) r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000004c0)={@siginfo_0_0={0x0, 0x7, 0x8, @_sigsys={&(0x7f0000000440)="b36663a8a16f4a9bf6dbbd4e753db80b9c329863b61475356016b1bf71c9f9754bfcd0c48ef08beece65111faad68c063fc51a0df218003bd7769546c815b6bbd4fbc6e2073545bdf448278bdfa5f68dd1ff8a47bdf2cff84a440d97f139e9cd199704240ac97dc20cb8a2e893a063e15d", 0x9, 0x9}}}, 0x4, &(0x7f0000000540)={{0x53c9, 0xf5a}, {0x4, 0x6}, 0x10, 0x4, 0xf0, 0xb, 0x81, 0x8, 0x6f, 0x0, 0x4, 0x0, 0x8, 0x80, 0x3, 0x6}) r4 = gettid() process_vm_readv$auto(r4, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000600)={0xa, 0x9, 0x7ff, 0xb, 0x8, 0xffffffffffffffff}) r6 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0xff) openat2$auto(r6, 0x0, &(0x7f0000000080)={0x2, 0x100, 0x494b}, 0x40000b0b) syz_clone3(&(0x7f0000000680)={0x10002100, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x14}, &(0x7f0000000200)=""/215, 0xd7, &(0x7f0000000300)=""/231, &(0x7f0000000640)=[r1, r2, r3, r4, r5], 0x5, {r6}}, 0x58) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r7, 0xffffffffffffffff, 0x0) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r8, 0xc058560f, r8) 3.093161077s ago: executing program 3 (id=122): mmap$auto(0xfffffffffffffffd, 0x4, 0x1, 0xeb2, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x3, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = open(0x0, 0x5db443, 0x180) fcntl$auto(r0, 0x5, 0x40003f) mmap$auto(0x0, 0x4, 0x800, 0x14, 0x2, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) write$auto(r1, 0x0, 0x9) mmap$auto(0x0, 0xe983, 0x7, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x69e200, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xdcf01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xa0b, 0x4}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(0x3, 0x4008af03, 0x0) capset$auto(0x0, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x103002, 0x0) 2.847750017s ago: executing program 0 (id=123): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x80703, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket(0x2c, 0x3, 0xe00000) select$auto(0x2, &(0x7f0000000340)={[0x2, 0x363, 0x4a2, 0x1ff, 0x7, 0x897, 0xfffffffffffffebb, 0x3, 0x3, 0x8, 0x4, 0x6, 0x7, 0x3, 0x9, 0x7]}, &(0x7f00000003c0)={[0x7f, 0x65a9, 0x300, 0x100, 0x9, 0x7fffffffffffffff, 0x9, 0x4, 0x2, 0x7fffffff, 0xd, 0xfffffffffffffffb, 0xe32, 0x10001, 0x100000001, 0x7fff]}, &(0x7f0000000440)={[0x26c4, 0x1, 0x4, 0x5f, 0x1, 0x81, 0x9, 0x3, 0x2a4, 0x67e, 0xee2a, 0x9, 0x3, 0x0, 0x1, 0x3ff]}, &(0x7f0000000240)={0x6b56, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) rename$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000040)=0x1, 0x10001, 0x0, &(0x7f0000000280)=0x2}) io_uring_setup$auto(0x2, 0x0) 2.668525421s ago: executing program 1 (id=124): socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) socket(0x2, 0x80002, 0x73) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socket(0xb, 0x5, 0x9) unshare$auto(0x40000080) open(0x0, 0x42842, 0x95) write$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000000)='[') msgctl$auto_MSG_INFO(0x3, 0xc, &(0x7f0000000400)={{0x0, 0xee01, 0xee01, 0xd, 0x401, 0xa79b, 0x7}, &(0x7f0000000100)=0x3, &(0x7f0000000280)=0xca, 0x0, 0x5, 0xed09, 0x9, 0x8, 0x8, 0x1d7, 0x4, @inferred=0xffffffffffffffff, @raw=0xc09}) msgctl$auto_MSG_STAT_ANY(0x7, 0xd, &(0x7f0000000500)={{0x3, 0xee01, 0xffffffffffffffff, 0x4, 0x7, 0x5, 0x6}, &(0x7f0000000480)=0x8, &(0x7f00000004c0)=0xb, 0x40, 0x9, 0xf01d, 0x2, 0x1, 0xc09, 0x40, 0x7fff, @raw=0xa4, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1.895276896s ago: executing program 1 (id=125): openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/stations\x00', 0x6108c1, 0x0) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r0, &(0x7f0000000080)="010001", 0x3) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x42201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x18, 0x3, 0x9) r2 = fcntl$auto_F_GETOWN(r1, 0x9, 0x6) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0xc8101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) futimesat$auto(r3, &(0x7f0000000240)='./file0\x00', 0x0) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x103a40, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xaec7, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr7\x00', 0x8002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x200000, 0x0) r6 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r6, 0x11, 0x67, 0x0, 0x8) 1.892837168s ago: executing program 3 (id=126): ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)=0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5877d26b71049496551b9126a98809e6e070bb487a84bb4649dff9a49c80e7277c8bec4c277f9a90964675ae7c7304d8ddf203c8beedb38f852da44f8dc8eb4ccc85d8f72aa6855041d72cbf7394ccda9b57b48dd6e4a5b4ec1e459372048b1697bae0e9c8d61973b4f210c5770c51383384a2178d0f6bfb06568ad7f03ed3114824dd64661f1348b24f423d7f1e8a82ffd213c3d8d9bc8ae2daeb751b81a7a7168b1e5ff56e454b632ecf13bf91748b4e8dbfc3f04593ae0ab717d860401d9e1adce3aa7ead722491ebb67c54ea765e8f1dbc9d10979c9cb1a5049d00ed07df53", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000ffdbdf256d0000008c002a003684a660bdccd1367bc48d95c45654a7d4ef122b5aaf580986f36c8305d02a0134617098711133f1352d29a8989d6853d2b62e687684499141c1f1baed01823c40a15b3a9b06aaa8c7fe2bcb43f0e02ab341b1480fd251e4695746cad00d4417d34c9d41ed33d62e634ac67f4a04ac804817cea529436086a5355b67030a24cc223223926569c0ee"], 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) socket(0x2, 0x3, 0x100) socket(0x2, 0x3, 0x100) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/248, 0xf8) r3 = socketpair$auto(0x800001e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)="618ee8dce498e0712a1035dfbc4e6813911a280f4ec74383e3e00c88800cd0bf463a1dd1c34e4cdddc75474afb35cf40b72556ff2a6b64bc021eb028c16b2b36c3cb76053afe31ee949bf76ef537b0eee1c038b7c0de2f48b0dbe78229cee8338d5d", 0x62) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0xf, 0x3, 0x2) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000001c0), 0x48d00, 0x0) r6 = getpgid$auto(0xffffffffffffffff) fcntl$auto(r5, 0x7, r6) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000080)={@sival_ptr=&(0x7f0000000000)="55601c906186c756139b485d28d22d6e181ad5b1232ccd6e9b0da91329073c35b3ac94dd4c10aad5ce4299a62b7cf7bb8b9aaaf60cffc36839bf65bbaaec67683c619ad12ed6882ebbf5da6057b11d077bf0caffdf14d4c6f73400a08a560e7f144a9e", @inferred=r3, 0xe9, @_tid=r6}, &(0x7f00000000c0)=0x9) socket(0x5, 0x2, 0x7fff) socket(0x11, 0x800, 0x85) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 1.581504891s ago: executing program 2 (id=127): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x3) select$auto(0xdd, &(0x7f00000001c0)={[0x401, 0x0, 0x0, 0x92, 0xffff, 0x10001, 0x415114aa, 0x2, 0xad15, 0x4, 0x74, 0x2, 0xf63, 0xf7, 0x30, 0x9637]}, 0x0, &(0x7f0000000340)={[0x5, 0x8, 0x2, 0x800, 0x7fffffff, 0x7fff, 0xd, 0xf0f6, 0xffff, 0x0, 0x8, 0x2, 0x8, 0x8, 0x8000, 0x16]}, &(0x7f0000000400)={0xd0c, 0x1000}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0x18, 0xa, 0x1) (async) r2 = socket(0x18, 0xa, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) capset$auto(&(0x7f0000000100)={0x10001, 0xffffffffffffffff}, &(0x7f0000000140)={0x6291d0b4, 0xe9e, 0xffff}) close_range$auto(r0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x6, &(0x7f00000000c0)={0x0, 0x1}, 0xea, 0x0, 0x2, 0x5}, 0x8}, 0xd, 0x181) recvmmsg$auto(r4, &(0x7f0000000300)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f0000000100), 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0) (async) recvmmsg$auto(r4, &(0x7f0000000300)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f0000000100), 0x406, 0x8}, 0x5a57}, 0x80000, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r5 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r5, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) (async) r6 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r6, &(0x7f0000000a00)='\n', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0xc, 0xffffffffffffff94, 0x3, 0x7ff, 0x100) (async) mremap$auto(0xc, 0xffffffffffffff94, 0x3, 0x7ff, 0x100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x0, 0x2, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r7, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000005840)={0x34, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) tgkill$auto(r1, r3, 0x0) 979.171292ms ago: executing program 0 (id=128): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="36d78577de43c96b4cc9105323a5d4af5f72e5fa19068e589a08da60d43af6505c38815ab35e350d88277db58310c8bd1a21761e811fe1479c8846a6bce9f051a4e5fd4dd07647cf7202", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf252100000005001100fb00000084001e008fb96e2e8f6438aaf6cee9cb2ef5514c7230525d2e5b9611f3894bbc3fedbaa47bc73cd49a5b35be62be7c6273f01f1403557ab47602b2aba5d91c8e992ef67ac2d26185d937e5e93b50a87205bda3c8502a921d35b874048c3405628068d2080d00bc6add998c7af6fc93712a61abfb0e84a0cbb699651c60c8ac3fe3684c0f"], 0xa0}, 0x1, 0x0, 0x0, 0x24008000}, 0x84) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000040)="78298dc7", 0x1) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto_sco_debugfs_fops_(r2, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r1, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) socket(0x28, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd0"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 958.338394ms ago: executing program 3 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r1 = epoll_create$auto(0x4) ioctl$auto(0x3, 0x80000541b, 0xb551) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="5b1de955497c361bb6b1c09468f479f22890e80c669f34fb518bca74426747e46d57814431a9acea7ffca8c3236b800cca7de492518de31ed531ae46deaee40afc13410bea6f64927d48cfd0cc816d65893d7d836ee29643b1568e000000000000000000488bd0d408b72d293ce7fe3cc45f18e17cb4b76dea86af48ecb2ed37e36221ff72e618593ea1157f92eab783b6c6dd1e2a8266f4f76bb78ff0361ff37ae5c7812e48c3735bf233bda342f9f450825f05548bef678deb5155edc3fa14fe77110b53ad0fd66c9f6b9a04e3baf450", @ANYRES16=r2, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x40804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) fcntl$auto(r3, 0x3fb, r4) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ftruncate$auto(r1, 0x8) mmap$auto(0x800000, 0x2020009, 0x3, 0x31b0, 0xfffffffffffffffa, 0x2000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/4087, 0xff7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_keepalive_probes\x00', 0x40100, 0x0) read$auto(r6, 0x0, 0x1ff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 752.370857ms ago: executing program 1 (id=130): socket(0x10, 0x3, 0x6) (async) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0x4020565b, 0x38) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESDEC=r1], 0x1ac}}, 0x40000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/iosched/front_merges\x00', 0xc0202, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/11, 0xb) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 324.576808ms ago: executing program 1 (id=131): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) close_range$auto(0x2, 0x8, 0x0) creat$auto(0x0, 0x1000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x7f, 0x2020006, 0x3, 0xfb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x13, 0x1, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x22) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop11\x00', 0x202000, 0x0) ioctl$auto(r3, 0xae61, r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index2/shared_cpu_list\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000002980)=""/4075, 0xfeb) ioctl$auto_KVM_CREATE_VM(r1, 0x4068aea3, 0x0) 171.599587ms ago: executing program 3 (id=132): mmap$auto(0xf9b, 0x20000020009, 0x20000000000df, 0xeb1, 0x40000000000a5, 0x8002) (async) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) socket(0x10, 0x2, 0x1) (async) ioctl$auto(0xffffffffffffffff, 0x2282, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r1) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d02, 0x400, 0x9}]}) 0s ago: executing program 2 (id=133): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/devices\x00', 0x0, 0x0) (async) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4d", 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x8200, 0x0) (async) r1 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000040)=0x6e) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000180)={0x2, &(0x7f0000000100)=&(0x7f0000000080)="5756a1348bd03fa7464e5f8c5b0c653286f035b057d7f2c2d7c1127b06cc44f632ff57d1370e15f5775c3506dbdee04ea58f39abf73ac3b33b78c2c7e7f164c8a9590764be2da6cdfca8c7bd2f67386b704f9ef8abf570002d3eeec6765e63b21e3512927acb7eb19a099e1c8240469950", 0x6}) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 98.680285][ T5834] cgroup: Unknown subsys name 'net' [ 98.794927][ T5834] cgroup: Unknown subsys name 'cpuset' [ 98.804712][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.711264][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.192820][ T981] cfg80211: failed to load regulatory.db [ 103.095162][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.110563][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.118056][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.118512][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.130491][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.134649][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.143524][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.147386][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.155091][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.168762][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.205744][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.216173][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.226938][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.235013][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.242248][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.250766][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.259207][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.267752][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.281369][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.281397][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.811195][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 103.966156][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 104.070868][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 104.194800][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.202182][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.211931][ T5848] bridge_slave_0: entered allmulticast mode [ 104.219532][ T5848] bridge_slave_0: entered promiscuous mode [ 104.259192][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 104.278182][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.285796][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.293097][ T5848] bridge_slave_1: entered allmulticast mode [ 104.301230][ T5848] bridge_slave_1: entered promiscuous mode [ 104.342001][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.349181][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.357059][ T5847] bridge_slave_0: entered allmulticast mode [ 104.366870][ T5847] bridge_slave_0: entered promiscuous mode [ 104.394467][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.404045][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.412205][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.419463][ T5847] bridge_slave_1: entered allmulticast mode [ 104.427025][ T5847] bridge_slave_1: entered promiscuous mode [ 104.474088][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.566521][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.582879][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.591278][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.598565][ T5854] bridge_slave_0: entered allmulticast mode [ 104.606429][ T5854] bridge_slave_0: entered promiscuous mode [ 104.617544][ T5848] team0: Port device team_slave_0 added [ 104.626512][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.657127][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.664828][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.672821][ T5854] bridge_slave_1: entered allmulticast mode [ 104.680689][ T5854] bridge_slave_1: entered promiscuous mode [ 104.689983][ T5848] team0: Port device team_slave_1 added [ 104.758552][ T5847] team0: Port device team_slave_0 added [ 104.809119][ T5847] team0: Port device team_slave_1 added [ 104.832326][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.839494][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.846989][ T5855] bridge_slave_0: entered allmulticast mode [ 104.855039][ T5855] bridge_slave_0: entered promiscuous mode [ 104.866031][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.876478][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.883894][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.910039][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.937799][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.945076][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.952734][ T5855] bridge_slave_1: entered allmulticast mode [ 104.960862][ T5855] bridge_slave_1: entered promiscuous mode [ 104.983953][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.008223][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.015278][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.041366][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.062317][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.069304][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.096819][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.138985][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.146202][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.173350][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.195968][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.209503][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.223326][ T5854] team0: Port device team_slave_0 added [ 105.231250][ T51] Bluetooth: hci1: command tx timeout [ 105.231250][ T5167] Bluetooth: hci0: command tx timeout [ 105.297274][ T5854] team0: Port device team_slave_1 added [ 105.326492][ T5848] hsr_slave_0: entered promiscuous mode [ 105.333077][ T5848] hsr_slave_1: entered promiscuous mode [ 105.342785][ T5855] team0: Port device team_slave_0 added [ 105.390709][ T5167] Bluetooth: hci3: command tx timeout [ 105.396616][ T51] Bluetooth: hci2: command tx timeout [ 105.409999][ T5855] team0: Port device team_slave_1 added [ 105.424198][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.431294][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.457787][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.516720][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.523993][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.550305][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.566732][ T5847] hsr_slave_0: entered promiscuous mode [ 105.573639][ T5847] hsr_slave_1: entered promiscuous mode [ 105.579888][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.587712][ T5847] Cannot create hsr debugfs directory [ 105.623761][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.631630][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.658757][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.677720][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.684847][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.711096][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.853234][ T5854] hsr_slave_0: entered promiscuous mode [ 105.859866][ T5854] hsr_slave_1: entered promiscuous mode [ 105.866278][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.873943][ T5854] Cannot create hsr debugfs directory [ 105.920915][ T5855] hsr_slave_0: entered promiscuous mode [ 105.927584][ T5855] hsr_slave_1: entered promiscuous mode [ 105.934513][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.942496][ T5855] Cannot create hsr debugfs directory [ 106.294331][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.337569][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.352568][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.383246][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.459054][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.484068][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.507934][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.548075][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.597781][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.632803][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.676235][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.709828][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.752965][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.782645][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.795827][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.826963][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.909184][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.974793][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.008695][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.016224][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.048288][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.055767][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.074638][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.127559][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.182604][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.189781][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.220739][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.227940][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.271946][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.286269][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.313372][ T5167] Bluetooth: hci1: command tx timeout [ 107.318940][ T51] Bluetooth: hci0: command tx timeout [ 107.396539][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.409599][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.456814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.464073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.475854][ T5167] Bluetooth: hci3: command tx timeout [ 107.476840][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.481853][ T51] Bluetooth: hci2: command tx timeout [ 107.488557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.515126][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.522349][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.540040][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.547861][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.846549][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.984104][ T5848] veth0_vlan: entered promiscuous mode [ 108.008362][ T5848] veth1_vlan: entered promiscuous mode [ 108.123516][ T5848] veth0_macvtap: entered promiscuous mode [ 108.154375][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.186987][ T5848] veth1_macvtap: entered promiscuous mode [ 108.287700][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.345648][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.377638][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.387240][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.396956][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.406261][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.446906][ T5847] veth0_vlan: entered promiscuous mode [ 108.485268][ T5847] veth1_vlan: entered promiscuous mode [ 108.508831][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.552422][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.628531][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.639984][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.676885][ T5847] veth0_macvtap: entered promiscuous mode [ 108.709843][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.713370][ T5847] veth1_macvtap: entered promiscuous mode [ 108.721139][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.765350][ T5854] veth0_vlan: entered promiscuous mode [ 108.836526][ T5854] veth1_vlan: entered promiscuous mode [ 108.845793][ T5855] veth0_vlan: entered promiscuous mode [ 108.861827][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.877328][ T5855] veth1_vlan: entered promiscuous mode [ 108.886891][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.913411][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.957654][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.975407][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.986017][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.000837][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.033439][ T5854] veth0_macvtap: entered promiscuous mode [ 109.051233][ T5936] random: crng reseeded on system resumption [ 109.083307][ T5854] veth1_macvtap: entered promiscuous mode [ 109.114723][ T5855] veth0_macvtap: entered promiscuous mode [ 109.149237][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.196530][ T5855] veth1_macvtap: entered promiscuous mode [ 109.229749][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.296994][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.306025][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.316021][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.325489][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.373591][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.388385][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.392175][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.403344][ T51] Bluetooth: hci0: command tx timeout [ 109.403394][ T51] Bluetooth: hci1: command tx timeout [ 109.467408][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.485165][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495026][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.505948][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.515668][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.553160][ T51] Bluetooth: hci2: command tx timeout [ 109.553169][ T5167] Bluetooth: hci3: command tx timeout [ 109.569221][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.577648][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.777947][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.800320][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.849572][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 109.864004][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.883304][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.054226][ T5941] Zero length message leads to an empty skb [ 110.207833][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.234705][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.296885][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.310354][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.002233][ T5954] FAULT_INJECTION: forcing a failure. [ 111.002233][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 111.080931][ T5954] CPU: 0 UID: 0 PID: 5954 Comm: syz.1.2 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 111.080981][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.081006][ T5954] Call Trace: [ 111.081018][ T5954] [ 111.081035][ T5954] dump_stack_lvl+0x16c/0x1f0 [ 111.081097][ T5954] should_fail_ex+0x512/0x640 [ 111.081146][ T5954] ? fs_reclaim_acquire+0xae/0x150 [ 111.081190][ T5954] should_failslab+0xc2/0x120 [ 111.081222][ T5954] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 111.081284][ T5954] ? ima_alloc_tfm+0x21a/0x2e0 [ 111.081333][ T5954] ? ima_collect_measurement+0x4b5/0xa40 [ 111.081375][ T5954] krealloc_noprof+0x1fc/0x370 [ 111.081432][ T5954] ima_collect_measurement+0x4b5/0xa40 [ 111.081492][ T5954] ? __pfx_ima_collect_measurement+0x10/0x10 [ 111.081555][ T5954] ? __pfx_ext4_xattr_get+0x10/0x10 [ 111.081593][ T5954] ? __mutex_lock+0x1ca/0xb90 [ 111.081644][ T5954] ? xattr_resolve_name+0x27b/0x3f0 [ 111.081698][ T5954] ? vfs_getxattr_alloc+0xec/0x340 [ 111.081753][ T5954] ? ima_get_hash_algo+0x27c/0x400 [ 111.081800][ T5954] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 111.081858][ T5954] ? process_measurement+0x11fa/0x23e0 [ 111.081907][ T5954] process_measurement+0x11fa/0x23e0 [ 111.081972][ T5954] ? __pfx_process_measurement+0x10/0x10 [ 111.082032][ T5954] ? find_held_lock+0x2b/0x80 [ 111.082069][ T5954] ? fscrypt_file_open+0x47c/0x590 [ 111.082160][ T5954] ? __pfx___fsnotify_parent+0x10/0x10 [ 111.082212][ T5954] ima_file_check+0xc5/0x110 [ 111.082263][ T5954] ? __pfx_ima_file_check+0x10/0x10 [ 111.082318][ T5954] ? vfs_open+0x2e3/0x3f0 [ 111.082358][ T5954] security_file_post_open+0x8e/0x210 [ 111.082403][ T5954] path_openat+0x1404/0x2cb0 [ 111.082475][ T5954] ? trace_kmem_cache_alloc+0x28/0xc0 [ 111.082511][ T5954] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 111.082568][ T5954] ? __pfx_path_openat+0x10/0x10 [ 111.082619][ T5954] ? __asan_memcpy+0x3c/0x60 [ 111.082669][ T5954] do_file_open_root+0x322/0x610 [ 111.082723][ T5954] ? __pfx_do_file_open_root+0x10/0x10 [ 111.082814][ T5954] ? vsnprintf+0x318/0x1160 [ 111.082865][ T5954] file_open_root+0x2a7/0x450 [ 111.082918][ T5954] ? __pfx_file_open_root+0x10/0x10 [ 111.082967][ T5954] ? find_held_lock+0x2b/0x80 [ 111.083004][ T5954] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 111.083052][ T5954] kernel_read_file_from_path_initns+0x189/0x260 [ 111.083094][ T5954] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 111.083146][ T5954] _request_firmware+0x744/0x1470 [ 111.083209][ T5954] ? __pfx__request_firmware+0x10/0x10 [ 111.083255][ T5954] ? __pfx_netdev_run_todo+0x10/0x10 [ 111.083308][ T5954] ? __pfx___mutex_lock+0x10/0x10 [ 111.083372][ T5954] request_firmware+0x35/0x50 [ 111.083419][ T5954] reg_reload_regdb+0x89/0x460 [ 111.083460][ T5954] ? __pfx_reg_reload_regdb+0x10/0x10 [ 111.083501][ T5954] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.083549][ T5954] ? nl80211_pre_doit+0x1b0/0xb10 [ 111.083610][ T5954] genl_family_rcv_msg_doit+0x209/0x2f0 [ 111.083656][ T5954] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.083696][ T5954] ? rcu_is_watching+0x12/0xc0 [ 111.083747][ T5954] ? bpf_lsm_capable+0x9/0x10 [ 111.083788][ T5954] ? security_capable+0x7e/0x260 [ 111.083830][ T5954] genl_rcv_msg+0x55c/0x800 [ 111.083876][ T5954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.083916][ T5954] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 111.083962][ T5954] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 111.083998][ T5954] ? __pfx_nl80211_post_doit+0x10/0x10 [ 111.084064][ T5954] netlink_rcv_skb+0x158/0x420 [ 111.084099][ T5954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.084141][ T5954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.084196][ T5954] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.084259][ T5954] genl_rcv+0x28/0x40 [ 111.084293][ T5954] netlink_unicast+0x53a/0x7f0 [ 111.084334][ T5954] ? __pfx_netlink_unicast+0x10/0x10 [ 111.084382][ T5954] netlink_sendmsg+0x8d1/0xdd0 [ 111.084426][ T5954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.084476][ T5954] ____sys_sendmsg+0xa98/0xc70 [ 111.084515][ T5954] ? copy_msghdr_from_user+0x10a/0x160 [ 111.084572][ T5954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.084620][ T5954] ? __pfx_futex_wake_mark+0x10/0x10 [ 111.084675][ T5954] ___sys_sendmsg+0x134/0x1d0 [ 111.084728][ T5954] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.084772][ T5954] ? __lock_acquire+0x622/0x1c90 [ 111.084874][ T5954] __sys_sendmsg+0x16d/0x220 [ 111.084926][ T5954] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.084977][ T5954] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.085048][ T5954] do_syscall_64+0xcd/0x490 [ 111.085102][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.085136][ T5954] RIP: 0033:0x7f39e118e929 [ 111.085164][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.085197][ T5954] RSP: 002b:00007f39e2049038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.085229][ T5954] RAX: ffffffffffffffda RBX: 00007f39e13b5fa0 RCX: 00007f39e118e929 [ 111.085252][ T5954] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 111.085272][ T5954] RBP: 00007f39e1210b39 R08: 0000000000000000 R09: 0000000000000000 [ 111.085292][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.085312][ T5954] R13: 0000000000000000 R14: 00007f39e13b5fa0 R15: 00007ffebbaf0188 [ 111.085356][ T5954] [ 111.100336][ T30] audit: type=1800 audit(1752062430.554:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 111.531055][ T51] Bluetooth: hci1: command tx timeout [ 111.531108][ T51] Bluetooth: hci0: command tx timeout [ 111.631715][ T5167] Bluetooth: hci2: command tx timeout [ 111.648275][ T51] Bluetooth: hci3: command tx timeout [ 111.915829][ T5954] syz.1.2 (5954) used greatest stack depth: 19800 bytes left [ 112.022616][ T5961] FAULT_INJECTION: forcing a failure. [ 112.022616][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 112.053909][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.2.8 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 112.053958][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.053980][ T5961] Call Trace: [ 112.053990][ T5961] [ 112.054003][ T5961] dump_stack_lvl+0x16c/0x1f0 [ 112.054062][ T5961] should_fail_ex+0x512/0x640 [ 112.054112][ T5961] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 112.054163][ T5961] should_failslab+0xc2/0x120 [ 112.054196][ T5961] __kmalloc_cache_noprof+0x6a/0x3e0 [ 112.054253][ T5961] ? x509_cert_parse+0x50/0x900 [ 112.054296][ T5961] ? __pfx_pkcs7_note_OID+0x10/0x10 [ 112.054349][ T5961] x509_cert_parse+0x50/0x900 [ 112.054396][ T5961] ? kasan_save_stack+0x42/0x60 [ 112.054445][ T5961] ? kasan_save_stack+0x33/0x60 [ 112.054492][ T5961] ? kasan_save_track+0x14/0x30 [ 112.054545][ T5961] pkcs7_extract_cert+0xa4/0x320 [ 112.054601][ T5961] asn1_ber_decoder+0xc5f/0x1df0 [ 112.054674][ T5961] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 112.054761][ T5961] pkcs7_parse_message+0x288/0x720 [ 112.054817][ T5961] verify_pkcs7_signature+0x30/0xa0 [ 112.054859][ T5961] valid_regdb+0x215/0x590 [ 112.054894][ T5961] ? __pfx___mutex_lock+0x10/0x10 [ 112.054947][ T5961] ? __pfx_valid_regdb+0x10/0x10 [ 112.054991][ T5961] reg_reload_regdb+0x11e/0x460 [ 112.055032][ T5961] ? __pfx_reg_reload_regdb+0x10/0x10 [ 112.055073][ T5961] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.055121][ T5961] ? nl80211_pre_doit+0x1b0/0xb10 [ 112.055175][ T5961] genl_family_rcv_msg_doit+0x209/0x2f0 [ 112.055253][ T5961] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 112.055294][ T5961] ? rcu_is_watching+0x12/0xc0 [ 112.055346][ T5961] ? bpf_lsm_capable+0x9/0x10 [ 112.055387][ T5961] ? security_capable+0x7e/0x260 [ 112.055429][ T5961] genl_rcv_msg+0x55c/0x800 [ 112.055476][ T5961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.055518][ T5961] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 112.055564][ T5961] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 112.055600][ T5961] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.055664][ T5961] netlink_rcv_skb+0x158/0x420 [ 112.055699][ T5961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.055740][ T5961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.055792][ T5961] ? netlink_deliver_tap+0x1ae/0xd30 [ 112.055855][ T5961] genl_rcv+0x28/0x40 [ 112.055889][ T5961] netlink_unicast+0x53a/0x7f0 [ 112.055938][ T5961] ? __pfx_netlink_unicast+0x10/0x10 [ 112.055986][ T5961] netlink_sendmsg+0x8d1/0xdd0 [ 112.056027][ T5961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.056078][ T5961] ____sys_sendmsg+0xa98/0xc70 [ 112.056117][ T5961] ? copy_msghdr_from_user+0x10a/0x160 [ 112.056167][ T5961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.056215][ T5961] ? __pfx_futex_wake_mark+0x10/0x10 [ 112.056279][ T5961] ___sys_sendmsg+0x134/0x1d0 [ 112.056333][ T5961] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.056381][ T5961] ? __lock_acquire+0x622/0x1c90 [ 112.056482][ T5961] __sys_sendmsg+0x16d/0x220 [ 112.056535][ T5961] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.056583][ T5961] ? __x64_sys_futex+0x1e0/0x4c0 [ 112.056651][ T5961] do_syscall_64+0xcd/0x490 [ 112.056707][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.056741][ T5961] RIP: 0033:0x7fd907f8e929 [ 112.056768][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.056800][ T5961] RSP: 002b:00007fd908e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.056832][ T5961] RAX: ffffffffffffffda RBX: 00007fd9081b5fa0 RCX: 00007fd907f8e929 [ 112.056853][ T5961] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 112.056873][ T5961] RBP: 00007fd908010b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.056893][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.056913][ T5961] R13: 0000000000000000 R14: 00007fd9081b5fa0 R15: 00007ffc95083188 [ 112.056958][ T5961] [ 112.488326][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 112.831149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.033848][ T5983] process 'syz.2.11' launched '/dev/fd/9' with NULL argv: empty string added [ 113.444576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.456245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.503675][ T5973] hsr_slave_0 (unregistering): left promiscuous mode [ 114.166956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.272321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 114.473223][ T6006] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.060947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.070119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.081308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.090138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 115.099429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.495710][ T6015] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 115.742007][ T6018] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 116.519016][ T6024] warning: `syz.3.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.410375][ T6050] FAULT_INJECTION: forcing a failure. [ 117.410375][ T6050] name failslab, interval 1, probability 0, space 0, times 0 [ 117.440254][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.1.25 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 117.440305][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.440323][ T6050] Call Trace: [ 117.440333][ T6050] [ 117.440344][ T6050] dump_stack_lvl+0x16c/0x1f0 [ 117.440398][ T6050] should_fail_ex+0x512/0x640 [ 117.440444][ T6050] ? __kmalloc_node_noprof+0xc5/0x500 [ 117.440498][ T6050] should_failslab+0xc2/0x120 [ 117.440527][ T6050] __kmalloc_node_noprof+0xd8/0x500 [ 117.440573][ T6050] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 117.440602][ T6050] ? alloc_slab_obj_exts+0x41/0xa0 [ 117.440650][ T6050] alloc_slab_obj_exts+0x41/0xa0 [ 117.440692][ T6050] new_slab+0x283/0x330 [ 117.440734][ T6050] ___slab_alloc+0xd9c/0x1940 [ 117.440786][ T6050] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.440818][ T6050] ? ___slab_alloc+0x11/0x1940 [ 117.440879][ T6050] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.440909][ T6050] ? __slab_alloc.constprop.0+0x56/0xb0 [ 117.440950][ T6050] __slab_alloc.constprop.0+0x56/0xb0 [ 117.440999][ T6050] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 117.441050][ T6050] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.441087][ T6050] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 117.441117][ T6050] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 117.441155][ T6050] alloc_inode+0x61/0x240 [ 117.441189][ T6050] new_inode+0x22/0x1c0 [ 117.441227][ T6050] hugetlbfs_get_inode+0x354/0x730 [ 117.441266][ T6050] hugetlb_file_setup+0x15b/0x620 [ 117.441316][ T6050] ksys_mmap_pgoff+0x189/0x5c0 [ 117.441361][ T6050] __x64_sys_mmap+0x125/0x190 [ 117.441413][ T6050] do_syscall_64+0xcd/0x490 [ 117.441464][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.441496][ T6050] RIP: 0033:0x7f39e118e929 [ 117.441522][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.441551][ T6050] RSP: 002b:00007f39e2049038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 117.441580][ T6050] RAX: ffffffffffffffda RBX: 00007f39e13b5fa0 RCX: 00007f39e118e929 [ 117.441601][ T6050] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000 [ 117.441618][ T6050] RBP: 00007f39e1210b39 R08: 0000000000000401 R09: 0000300000000000 [ 117.441636][ T6050] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 117.441654][ T6050] R13: 0000000000000000 R14: 00007f39e13b5fa0 R15: 00007ffebbaf0188 [ 117.441694][ T6050] [ 120.419588][ T6085] Process accounting resumed [ 121.071832][ T6108] nbd: must specify at least one socket [ 126.094552][ T6187] mmap: syz.2.48 (6187) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.185077][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 126.573252][ T6185] HfR: entered promiscuous mode [ 126.690135][ T6189] HfR: left promiscuous mode [ 127.024288][ T6190] HfR: entered promiscuous mode [ 128.288268][ T6220] program syz.2.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.414523][ T6224] ovs_ÿþ: entered promiscuous mode [ 128.603006][ T6226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.273868][ T6246] Invalid ELF header magic: != ELF [ 129.518064][ T6249] input: f¬ as /devices/virtual/input/input6 [ 131.760071][ T6295] random: crng reseeded on system resumption [ 132.403992][ T6311] netlink: 326 bytes leftover after parsing attributes in process `syz.1.75'. [ 133.276851][ T6329] Invalid ELF header magic: != ELF [ 133.619273][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 134.585217][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 135.593279][ T6389] netlink: 326 bytes leftover after parsing attributes in process `syz.1.87'. [ 136.376210][ T6403] ptrace attach of "./syz-executor exec"[6410] was attempted by "./syz-executor exec"[6403] [ 139.894173][ T6474] capability: warning: `syz.1.100' uses 32-bit capabilities (legacy support in use) [ 141.558015][ T30] audit: type=1800 audit(1752062461.014:3): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="dbroot" dev="configfs" ino=9093 res=0 errno=0 [ 141.564894][ T5167] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 141.582732][ T5167] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 141.597786][ T5167] Bluetooth: hci1: Dropping invalid advertising data [ 141.598349][ T6500] db_root: not a directory: /dev/audio1 [ 141.605168][ T5167] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 141.788633][ T6498] mmap: syz.0.107 (6498): VmData 37728256 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 142.317826][ T6514] netlink: 338 bytes leftover after parsing attributes in process `syz.0.109'. [ 142.335926][ T6517] netlink: 338 bytes leftover after parsing attributes in process `syz.0.109'. [ 142.372236][ T6516] vivid-007: ================= START STATUS ================= [ 142.447453][ T6517] netlink: 338 bytes leftover after parsing attributes in process `syz.0.109'. [ 142.460102][ T6516] vivid-007: Generate PTS: true [ 142.467916][ T6516] vivid-007: Generate SCR: true [ 142.533836][ T6516] tpg source WxH: 320x240 (Y'CbCr) [ 142.594776][ T6516] tpg field: 1 [ 142.605931][ T6516] tpg crop: (0,0)/320x240 [ 142.613360][ T6516] tpg compose: (0,0)/320x240 [ 142.673346][ T6516] tpg colorspace: 8 [ 142.691162][ T6516] tpg transfer function: 0/0 [ 142.696533][ T6516] tpg Y'CbCr encoding: 0/0 [ 142.733750][ T6516] tpg quantization: 0/0 [ 142.751553][ T6516] tpg RGB range: 0/2 [ 142.755529][ T6516] vivid-007: ================== END STATUS ================== [ 143.158671][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.165432][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.190436][ T6564] sp0: Synchronizing with TNC [ 148.422434][ T6624] netlink: 146 bytes leftover after parsing attributes in process `syz.0.128'. [ 148.940679][ T6646] ================================================================== [ 148.940700][ T6646] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 148.940746][ T6646] Write of size 8 at addr ffffc90003969000 by task syz.2.133/6646 [ 148.940773][ T6646] [ 148.940790][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.2.133 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 148.940830][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.940848][ T6646] Call Trace: [ 148.940858][ T6646] [ 148.940870][ T6646] dump_stack_lvl+0x116/0x1f0 [ 148.940919][ T6646] print_report+0xcd/0x680 [ 148.940949][ T6646] ? __virt_addr_valid+0x81/0x610 [ 148.940989][ T6646] ? sys_fillrect+0x15d4/0x17b0 [ 148.941026][ T6646] kasan_report+0xe0/0x110 [ 148.941056][ T6646] ? sys_fillrect+0x15d4/0x17b0 [ 148.941099][ T6646] sys_fillrect+0x15d4/0x17b0 [ 148.941143][ T6646] ? __pfx_sys_fillrect+0x10/0x10 [ 148.941189][ T6646] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 148.941235][ T6646] bit_clear+0x17d/0x220 [ 148.941264][ T6646] ? __pfx_bit_clear+0x10/0x10 [ 148.941301][ T6646] ? __pfx___might_resched+0x10/0x10 [ 148.941336][ T6646] ? fb_get_color_depth+0x120/0x250 [ 148.941383][ T6646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.941436][ T6646] ? __pfx_bit_clear+0x10/0x10 [ 148.941463][ T6646] __fbcon_clear+0x603/0x780 [ 148.941518][ T6646] fbcon_scroll+0x48b/0x690 [ 148.941568][ T6646] con_scroll+0x45f/0x690 [ 148.941620][ T6646] do_con_write+0x5560/0x8280 [ 148.941664][ T6646] ? __pfx_do_con_write+0x10/0x10 [ 148.941703][ T6646] con_write+0x23/0xb0 [ 148.941731][ T6646] n_tty_write+0x40f/0x1160 [ 148.941777][ T6646] ? __pfx_n_tty_write+0x10/0x10 [ 148.941812][ T6646] ? rcu_is_watching+0x12/0xc0 [ 148.941847][ T6646] ? __pfx_woken_wake_function+0x10/0x10 [ 148.941881][ T6646] ? kfree+0x24f/0x4d0 [ 148.941926][ T6646] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 148.941980][ T6646] ? __pfx_n_tty_write+0x10/0x10 [ 148.942018][ T6646] file_tty_write.constprop.0+0x501/0x9b0 [ 148.942077][ T6646] redirected_tty_write+0xd4/0x150 [ 148.942129][ T6646] vfs_write+0x6c4/0x1150 [ 148.942176][ T6646] ? __pfx_redirected_tty_write+0x10/0x10 [ 148.942231][ T6646] ? __pfx_vfs_write+0x10/0x10 [ 148.942275][ T6646] ? find_held_lock+0x2b/0x80 [ 148.942328][ T6646] ksys_write+0x12a/0x250 [ 148.942374][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 148.942432][ T6646] do_syscall_64+0xcd/0x490 [ 148.942484][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.942516][ T6646] RIP: 0033:0x7fd907f8e929 [ 148.942541][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.942573][ T6646] RSP: 002b:00007fd908e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.942603][ T6646] RAX: ffffffffffffffda RBX: 00007fd9081b5fa0 RCX: 00007fd907f8e929 [ 148.942624][ T6646] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000004 [ 148.942644][ T6646] RBP: 00007fd908010b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.942663][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.942682][ T6646] R13: 0000000000000000 R14: 00007fd9081b5fa0 R15: 00007ffc95083188 [ 148.942713][ T6646] [ 148.942724][ T6646] [ 148.942737][ T6646] The buggy address ffffc90003969000 belongs to a vmalloc virtual mapping [ 148.942754][ T6646] Memory state around the buggy address: [ 148.942771][ T6646] ffffc90003968f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.942794][ T6646] ffffc90003968f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.942817][ T6646] >ffffc90003969000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.942834][ T6646] ^ [ 148.942850][ T6646] ffffc90003969080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.942873][ T6646] ffffc90003969100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.942891][ T6646] ================================================================== [ 148.943035][ T6646] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.943055][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.2.133 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 148.943095][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.943113][ T6646] Call Trace: [ 148.943124][ T6646] [ 148.943136][ T6646] dump_stack_lvl+0x3d/0x1f0 [ 148.943184][ T6646] panic+0x71c/0x800 [ 148.943230][ T6646] ? __pfx_panic+0x10/0x10 [ 148.943275][ T6646] ? mark_held_locks+0x49/0x80 [ 148.943329][ T6646] ? preempt_schedule_thunk+0x16/0x30 [ 148.943371][ T6646] ? sys_fillrect+0x15d4/0x17b0 [ 148.943408][ T6646] ? preempt_schedule_common+0x44/0xc0 [ 148.943456][ T6646] ? check_panic_on_warn+0x1f/0xb0 [ 148.943506][ T6646] ? sys_fillrect+0x15d4/0x17b0 [ 148.943543][ T6646] check_panic_on_warn+0xab/0xb0 [ 148.943592][ T6646] end_report+0x107/0x170 [ 148.943621][ T6646] kasan_report+0xee/0x110 [ 148.943651][ T6646] ? sys_fillrect+0x15d4/0x17b0 [ 148.943694][ T6646] sys_fillrect+0x15d4/0x17b0 [ 148.943737][ T6646] ? __pfx_sys_fillrect+0x10/0x10 [ 148.943785][ T6646] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 148.943830][ T6646] bit_clear+0x17d/0x220 [ 148.943859][ T6646] ? __pfx_bit_clear+0x10/0x10 [ 148.943888][ T6646] ? __pfx___might_resched+0x10/0x10 [ 148.943923][ T6646] ? fb_get_color_depth+0x120/0x250 [ 148.943972][ T6646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.944024][ T6646] ? __pfx_bit_clear+0x10/0x10 [ 148.944051][ T6646] __fbcon_clear+0x603/0x780 [ 148.944106][ T6646] fbcon_scroll+0x48b/0x690 [ 148.944156][ T6646] con_scroll+0x45f/0x690 [ 148.944208][ T6646] do_con_write+0x5560/0x8280 [ 148.944251][ T6646] ? __pfx_do_con_write+0x10/0x10 [ 148.944296][ T6646] con_write+0x23/0xb0 [ 148.944325][ T6646] n_tty_write+0x40f/0x1160 [ 148.944372][ T6646] ? __pfx_n_tty_write+0x10/0x10 [ 148.944407][ T6646] ? rcu_is_watching+0x12/0xc0 [ 148.944443][ T6646] ? __pfx_woken_wake_function+0x10/0x10 [ 148.944476][ T6646] ? kfree+0x24f/0x4d0 [ 148.944514][ T6646] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 148.944568][ T6646] ? __pfx_n_tty_write+0x10/0x10 [ 148.944606][ T6646] file_tty_write.constprop.0+0x501/0x9b0 [ 148.944664][ T6646] redirected_tty_write+0xd4/0x150 [ 148.944716][ T6646] vfs_write+0x6c4/0x1150 [ 148.944762][ T6646] ? __pfx_redirected_tty_write+0x10/0x10 [ 148.944817][ T6646] ? __pfx_vfs_write+0x10/0x10 [ 148.944861][ T6646] ? find_held_lock+0x2b/0x80 [ 148.944908][ T6646] ksys_write+0x12a/0x250 [ 148.944954][ T6646] ? __pfx_ksys_write+0x10/0x10 [ 148.945007][ T6646] do_syscall_64+0xcd/0x490 [ 148.945057][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.945090][ T6646] RIP: 0033:0x7fd907f8e929 [ 148.945115][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.945146][ T6646] RSP: 002b:00007fd908e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.945176][ T6646] RAX: ffffffffffffffda RBX: 00007fd9081b5fa0 RCX: 00007fd907f8e929 [ 148.945197][ T6646] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000004 [ 148.945217][ T6646] RBP: 00007fd908010b39 R08: 0000000000000000 R09: 0000000000000000 [ 148.945237][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.945256][ T6646] R13: 0000000000000000 R14: 00007fd9081b5fa0 R15: 00007ffc95083188 [ 148.945294][ T6646] [ 148.945606][ T6646] Kernel Offset: disabled