last executing test programs: 7.614520931s ago: executing program 1 (id=269): mmap$auto(0x4, 0x200, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="000229bd70001cdddf250200020008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000c011) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b6f0df4f0f1549c4bd712f6fd54a7a952f93af5de497bd07eeb893648e4cc4cd52faf37c8be75c643f6430cf2eeb64118411caf55ca132ebca62becd7c65f2012851d2c56b582a4320f0ad0e87186625c569558eb9c25d3aed3fcdcb", @ANYBLOB="1a00"], 0x1ac}}, 0x4048815) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="19"], 0x1ac}}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/nfsfs/volumes\x00', 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pci_hotplug/parameters/debug_acpi\x00', 0x80800, 0x0) sendfile$auto(0x1, r4, 0x0, 0x400007ffff000) write$auto(r0, 0x0, 0x9) 6.493019815s ago: executing program 1 (id=273): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = socket(0x2, 0x1, 0x0) r3 = getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x20000080) unshare$auto(0x40000080) (async) io_uring_setup$auto(0x8, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYBLOB='=', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) (async) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x6d4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6800}, @NL80211_ATTR_VIF_RADIO_MASK={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x401}, @NL80211_ATTR_STA_WME={0x1c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_IE={0x5a2, 0x2a, "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"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xd8, 0xe8, "e80a032c72839dd891b8b49def3820424902efc14b2b59c79db68c391d80dce381f2512d6c5c3b4e65b0933a20cc6eabd31eb011e5eb3ca0905b211354bba4fed1763614501de2e1bc8cee4bc261737d4d0924744efd5234d28a66475bd6a557031d023db366e24796207f0c17ca65cf93f4cc03cafcf719b029db7e8079885cb17866901b75f717e4097966cd491c6cc253cfbee6fa575ab29e77686fedb2a182c63d19db1d0c542a54ccff4412d10e7c0d9cf5c622cd3826708cc9ee7de55b92a2fd323bc48a8770f422b9d326a1b373990285"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x2400c001}, 0x0) (async) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x8}) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r4, 0x0, 0x1, 0x27) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) splice$auto(r6, 0x0, r6, 0xfffffffffffffffe, 0x5, 0x1) statmount$auto(0x0, &(0x7f0000000380)={0xa, 0x801, 0x1ff, 0x7, 0x1f, 0xfffffffffffffff2, 0x1ffde, 0x8001, 0x0, 0x9, 0x7fff, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x9, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x8000000000000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc], "0d35b8667d65f6268731cbe05a27ea298da30a28e19f916ff16ebd2c28381855a79642792ebff97548ee41e0c5a025d9b06ed36107db0825dd494e69ba9c80fe72b8960d32f92ea549cabc60411038264ad0f44b172a36d58ec44d9654dedd12a3ab2360ffdbcec881d3fb48b9a8ec534362b5dd54d3efa09b3b16ea8c0c4705ec0792697ff02fad45a4902976463b683bcd99895d7e958e"}, 0x1fe, 0xd) 5.907726369s ago: executing program 3 (id=274): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) r5 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000000200000000000000010009000000000001000400000000000200070000fff000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r7, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x8002) sendmsg$auto_NL80211_CMD_GET_KEY(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r3, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) read$auto_state_fops_(r0, &(0x7f0000000300)=""/2, 0x2) read$auto_ext4_dir_operations_ext4(r2, &(0x7f00000003c0)=""/6, 0x6) 5.759288984s ago: executing program 0 (id=276): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040), 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x10000, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6c) r1 = socket(0x1f, 0x80000, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xffffffffffffffff, 0x3, 0xdf, 0x9b72, 0x2, 0x7ffd) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyab\x00', 0x40af01, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_gettime$auto(0x80000000, 0x0) socket(0x1e, 0x5, 0x0) ioctl$auto(0xc8, 0x54e3, 0x5c8d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000540), r1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000001f80), 0x141100, 0x0) read$auto_objects_fops_(r4, &(0x7f0000001fc0)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) 4.927521694s ago: executing program 1 (id=277): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) r1 = socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r3 = socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x100, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x8, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000440)=@link_create={@prog_fd=r3, @target_fd=r2, 0xfff, 0x5, @uprobe_multi={0x3, 0x84d, 0x101, 0x3, 0x6}}, 0xff) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x2, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0xc0000022, 0x4, 0x6d3e, 0x7fff, 0x8, 0x6215298d]}, 0x0) listen$auto(r0, 0xffffffff) ioctl$auto(0x3, 0x5411, 0x10000000000402) settimeofday$auto(&(0x7f0000000380)={0x7fffffff, 0x3}, &(0x7f00000003c0)={0x1, 0xb}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r1) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000001f80)=ANY=[], 0x10b4}, 0x1, 0x0, 0x0, 0x800}, 0x10040000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0x7, 0x4) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.679010289s ago: executing program 2 (id=278): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYBLOB="0c00290084660000000000008d1083b7312d58c5ebaf487bb998f3418a8151bb07f2443548e4f835120dabebd9cfacb4df6c09d5c51d5a796dcd884b3e930a755c3e6e9a8bf602ba954dddf50ba937da8e0eb88ee25349d036733e829ade17deaae15e1e9298ffa9cd09d12467d4b27c2248f3edabe64261dd558c1b9e518a", @ANYRES32, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) 4.002781032s ago: executing program 0 (id=279): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r4, 0x0, 0x20) ftruncate$auto(0x3, 0x700) io_cancel$auto(0x64, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x1, 0x409691, 0x5a43, 0x0, 0x5, 0x10, 0x7f, 0x4}, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x403, 0x101, &(0x7f0000000000)=@generic={0xa}, 0x1c) socketpair$auto(0x1e, 0x6, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) 3.178575665s ago: executing program 2 (id=280): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xffffffffffffffff, 0x4) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x242a82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x100000001, 0xeb1, 0x401, 0x8000) r1 = open(0x0, 0x80842, 0x91) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(r0, &(0x7f0000000700)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x7, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925a872857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c200"}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) timerfd_create$auto(0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x6, 0xd759) 3.025528053s ago: executing program 0 (id=281): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0x200, 0x0) close_range$auto(r0, r0, 0x7ff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYBLOB="010027bd24aa5854129748ead78f9c7000fedbdf250d00983a5af6348feeefc5000008000100", @ANYRES32, @ANYBLOB="00010000", @ANYBLOB="a3e80af0cb2f986d1acd216cc51596d4409de5cb7db9bc9e58d5ec64196990a184ceea266b76dbe00fc3b50d74c7c932c6f2adcf0505df361e59d2fbe6fe497a7ba095308cbf49ede279ad8ae2f5e302d0d63e70cff6331815bf48f392a8d08227200fa34fd8833d12bf7a710a063d74a7bfbe84c22715151d32d88b9dced0679cc391a72bfb38f8214e643e5abfe9daad1eb7259699ddffee4f86bc63d31f4c35aed3590d9f9a9e92762d", @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.927581752s ago: executing program 3 (id=282): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r3, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xf0, 0x4000004}, 0x40844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'caif0\x00'}) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYBLOB="000127bd7000fcdbdf25010000000c0003000200000000", @ANYBLOB="0c000100ff070000008000000c00030000000000000000000c000100fcffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) 2.897702684s ago: executing program 1 (id=283): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x840000, 0xa) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$auto(r2, 0x400454d0, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 2.785818871s ago: executing program 3 (id=284): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mmap$auto(0x0, 0x10000, 0x7, 0x14, r0, 0x8000) r1 = socket(0xa, 0x2, 0x0) getsockopt$auto(r1, 0x1, 0x49, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r4, 0xb81, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) write$auto(r2, 0x0, 0xc3) 2.752464633s ago: executing program 1 (id=285): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x400, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x10000008000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2c0880, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/yev/\xa0\x82\xaa=audi\x11h.Z\xd8\xdf\xb7o\'\xbd', 0x101) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x22, 0x5, 0x2) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000002c0)={@sival_ptr=&(0x7f0000000180)="11c338f477d997656d7d7566b51afc1eb74a4c715b599a4eb57c824899afa790e77ec9fb5d9b89a3f5de4c286769e96377c891dfd8c95e8b093e67350ac6c82718461887bc67b68145c09fb44e8dcae70c2a3acb858a40ddc6e18f39bc927a889f90e6f9086a1cda574482c1bad3c61901db4d416dad8db8df3277", @inferred=r3, 0x79, @_sigev_thread={&(0x7f0000000200)=&(0x7f0000000100)=0x6, &(0x7f0000000240)="309b57483462fbcfcbb86d7de10c86468c41e7b523e6426ab28d4a8f679c966fb9c1d6bd84fbc0db32ce6cf9965223f227b25fa99069cc3c4e9c3875f9d298aeffa036d3150baa25a401e848849dccd746d731167a8972d3466924907c6a7a90911ed7c9ac6dcc2e032fa180d41a234762a01039aa245b81a21743b93e07"}}, &(0x7f0000000300)=0x5) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x3, 0x4, 0x17, r2, 0x6) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) r4 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 2.478650416s ago: executing program 3 (id=286): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x6, 0x3) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) fanotify_init$auto(0x5, 0x2000000000002) 2.317254796s ago: executing program 0 (id=287): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x3f1, 0x400, 0x2}]}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x4, 0x8, 0xfffffffffffffff7, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x20a200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/68, 0x44) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da09, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x18b803, 0x0) ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f0000000000)=0x1) ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={"52129837e10d7392ab2c29c41beb6e1d91a8e7bd9c2030e540e67c626e15fb33", 0x1c2, 0x8, 0x0, 0x4, 0x887c, 0xffffffffffffffff}) process_vm_writev$auto(r5, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x2}, 0x5, &(0x7f0000001440)={&(0x7f00000003c0)="ba8e05f9", 0x100000001}, 0x6, 0x80000000) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) 2.254051114s ago: executing program 2 (id=288): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper\x00', 0x20681, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r3, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040085}, 0x2800c88c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'caif0\x00'}) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYBLOB="000127bd7000fcdbdf25010000000c0003000200000000", @ANYBLOB="0c000100ff070000008000000c00030000000000000000000c000100fcffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) 1.508609731s ago: executing program 2 (id=289): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r4, 0x0, 0x20) ftruncate$auto(0x3, 0x700) io_cancel$auto(0x64, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x1, 0x409691, 0x5a43, 0x0, 0x5, 0x10, 0x7f, 0x4}, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x403, 0x101, &(0x7f0000000000)=@generic={0xa}, 0x1c) socketpair$auto(0x1e, 0x6, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) 1.227175124s ago: executing program 0 (id=290): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0x6028c1, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000580)='g', 0x6}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_clone3(&(0x7f0000000880)={0x0, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=0x0, {0x8}, &(0x7f0000000700)=""/231, 0xe7, &(0x7f0000000800)=""/40, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58) waitid$auto_P_PIDFD(0x3, r4, &(0x7f0000000380)={@siginfo_0_0={0x6, 0x7f, 0x0, @_timer={0x0, 0xffff, @sival_ptr=&(0x7f0000000a40)="0e059a7b2dcea0d641c887b1b334313346bc00193b8e4a75b40968002f313c89ec2e3ecc0e099d96f4f252edc0bce6f04bfdcf71bcfc35bbb2acd4a2a3eb87489b928be9ab128d3729b61743910241f1bdadbece38986f09c0099716c7af5d71f2b5cb05968d1cfe22c945829072d97e29c8a3e563d85f2927e5c4484715f5c8114282fbb81f7c3dbb027ca7811316ae426a32afa41c4163f2937ce60a318e7531770fe349e6abd3da28b9e97959e4b0812911fe8371429462e598d3768a258de55db6f60281fb37d5a89188f233aaf9a27f28922abf", 0x5}}}, 0xbf2b, &(0x7f0000000440)={{0xfffffffffffffffd, 0x401}, {0x8000000000000000, 0x4}, 0x2511, 0xfffffffffffffffb, 0x1, 0x3, 0x7, 0xc, 0x4, 0x3, 0x9, 0x7fffffff, 0x80, 0x6072, 0x3, 0x6}) waitid$auto(0x3ff, r2, &(0x7f0000000500)={@siginfo_0_0={0x9b61, 0x7, 0x3, @_kill={r5}}}, 0x54a9, &(0x7f0000000980)={{0xa, 0x2}, {0xb, 0x5}, 0xe5b5, 0x4, 0x2, 0x3, 0x28f42a7d, 0x7, 0x2, 0x8, 0x3a4b2cca, 0x5, 0x4, 0xff, 0x1, 0x4}) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)='~-,}\x00', &(0x7f0000000140)=0xc0000000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(r6, 0x125f, 0x700000000000000) open(0x0, 0x163342, 0x0) open(0x0, 0xeee00, 0x31) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f602, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000340)=@bpf_attr_0={0x0, 0x1, 0x1, 0x5, 0x4, 0xffffffffffffffff, 0x9, "38b7bbd1f7965a807264335b76c22027", 0x0, 0xffffffffffffffff, 0x22, 0x10, 0x7, 0x748, 0xffffffffffffffff, r0}, 0x400) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x4007, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0xffff, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x6, 0x0, 0x0, 0x7f, 0x0, [0x82, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 852.218259ms ago: executing program 1 (id=291): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x2282, r0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x1, 0x0, 0x0, &(0x7f0000000200)={[0xf, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x2, 0x8000000010000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fefa465158fbbeb89451043553ff869189cf3250b65c544ccd3988b29f3cdb20660e616d3daa3e36b174c5661e383221287595a7e873202add9b0f11733de4ec2cd9c5b0480", 0x52) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r3, 0x0, 0x10) 571.758811ms ago: executing program 3 (id=292): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) r0 = pipe2$auto(&(0x7f0000000000)=0xffffffffffffffff, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=&(0x7f0000000100)="91ff661a4eb85e5a08e1f6ad7de2cf56f6c80fb4b8e08913239b0a7265ccff77eea52259299fce535b1da20a89a3030b8ec89a90464bcd45bf4e1883481a756681e677ef0bcf0f", 0x6}) (async) mmap$auto(0x0, 0x5, 0x10000, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) timerfd_create$auto(0x9, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) (async) r4 = socket(0x1e, 0x4, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async) close_range$auto(0x2, 0xa, 0x0) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r5, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r5, 0x4, 0x6, 0x101, 0x1, r5, 0xffffffffffffffff}, 0x6f3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0xb8, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES16=r1, @ANYBLOB="1ae939234b95face58cee78a39d66f1bf1f7a099c34cde024c74d6992a073a1470831270dceb646c77ae7b2839691c96abdf11386ec57d6b0ea164b52248b823649ccc138cce", @ANYRESDEC=r3, @ANYRES8=r6, @ANYBLOB="ca3db26c29ce6c25107c26b2c359a0e16fe39c3f038c66efed6447ecff07bf688eda6f934a8a4d8e00db5a8cfb2c4711c5e59a72545c07900900587bedf20c4d1d9eb1ab8426aee0da8bb8cfb20c8453a2ccc0c1b233b2adaab6207de811959060a1a61fba89f33cb53b42edbff996107aeca8a83a94aa785aff1731183be5020b2c1cb8801651bc782947671381633e76503f2cd24165d08733b7e7fa048911103537e99b3f403b6fa875cc1344aa6ae87874db", @ANYBLOB="ec5a03dd54295ad70921fe3a22dd8b90", @ANYRESHEX], 0x1ac}}, 0x40000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x129542, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r8) read$auto(0x3, 0x0, 0x7) (async) writev$auto(0x3, &(0x7f0000000140)={0x0, 0x84}, 0x8) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4048890}, 0x808) 377.666592ms ago: executing program 2 (id=293): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fdbcdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r3, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xf000, 0x4000004}, 0x40844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'caif0\x00'}) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYBLOB="000127bd7000fcdbdf25010000000c0003000200000000", @ANYBLOB="0c000100ff070000008000000c00030000000000000000000c000100fcffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) 303.552735ms ago: executing program 3 (id=294): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) bind$auto(r1, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x1}}, 0x4) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)="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", 0x5, &(0x7f0000000080)={&(0x7f0000001440)="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", 0x4}, 0x98a, 0x0, 0x9, 0x3}, 0x5b1) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}}) (async) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x1, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r4 = socket(0x2, 0x1, 0x106) getsockopt$auto(r4, 0x29, 0x4e, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf250400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) (async) sendmsg$auto_HWSIM_CMD_FRAME(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000a80)={0x78, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_CHANNELS={0x8}, @HWSIM_ATTR_CIPHER_SUPPORT={0xd, 0x18, "0e02cba603b724573e"}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x20000000}, @HWSIM_ATTR_RADIO_NAME={0x24, 0x11, '/proc/sys/kernel/random/boot_id\x00'}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x30a549bc}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x98}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0xc0}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) (async) socket(0x2, 0x5, 0x0) (async) write$auto(0x3, 0x0, 0x100085) (async) unshare$auto(0x40000080) 17.671126ms ago: executing program 0 (id=295): mmap$auto(0x4, 0x200, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="000229bd70001cdddf250200020008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000c011) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b6f0df4f0f1549c4bd712f6fd54a7a952f93af5de497bd07eeb893648e4cc4cd52faf37c8be75c643f6430cf2eeb64118411caf55ca132ebca62becd7c65f2012851d2c56b582a4320f0ad0e87186625c569558eb9c25d3aed3fcdcb", @ANYBLOB="1a00"], 0x1ac}}, 0x4048815) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="19"], 0x1ac}}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/nfsfs/volumes\x00', 0x0, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x4}, 0xb, 0x7) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pci_hotplug/parameters/debug_acpi\x00', 0x80800, 0x0) sendfile$auto(0x1, r4, 0x0, 0x400007ffff000) write$auto(r0, 0x0, 0x9) 0s ago: executing program 2 (id=296): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_pid\x00', 0x200, 0x0) close_range$auto(r0, r0, 0x7ff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYBLOB="010027bd24aa5854129748ead78f9c7000fedbdf250d00983a5af6348feeefc5000008000100", @ANYRES32, @ANYBLOB="00010000", @ANYBLOB="a3e80af0cb2f986d1acd216cc51596d4409de5cb7db9bc9e58d5ec64196990a184ceea266b76dbe00fc3b50d74c7c932c6f2adcf0505df361e59d2fbe6fe497a7ba095308cbf49ede279ad8ae2f5e302d0d63e70cff6331815bf48f392a8d08227200fa34fd8833d12bf7a710a063d74a7bfbe84c22715151d32d88b9dced0679cc391a72bfb38f8214e643e5abfe9daad1eb7259699ddffee4f86bc63d31f4c35aed3590d9f9a9e92762d", @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. syzkaller login: [ 87.179378][ T5853] cgroup: Unknown subsys name 'net' [ 87.317828][ T5853] cgroup: Unknown subsys name 'cpuset' [ 87.327582][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.076592][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.322783][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.333257][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.354167][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.374942][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.380530][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.390320][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.397527][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.398187][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.414428][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.422198][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.425891][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.429783][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.437107][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.444358][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.452928][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.458289][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.466077][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.471906][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.480390][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.494373][ T5186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.123279][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.271386][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.308933][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.384140][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 92.487195][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.494443][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.501829][ T5865] bridge_slave_0: entered allmulticast mode [ 92.511870][ T5865] bridge_slave_0: entered promiscuous mode [ 92.535677][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.542790][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.551083][ T5862] bridge_slave_0: entered allmulticast mode [ 92.559019][ T5862] bridge_slave_0: entered promiscuous mode [ 92.584638][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.591744][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.599191][ T5865] bridge_slave_1: entered allmulticast mode [ 92.606732][ T5865] bridge_slave_1: entered promiscuous mode [ 92.627926][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.635145][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.642252][ T5862] bridge_slave_1: entered allmulticast mode [ 92.649725][ T5862] bridge_slave_1: entered promiscuous mode [ 92.719380][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.745489][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.752659][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.760172][ T5863] bridge_slave_0: entered allmulticast mode [ 92.768585][ T5863] bridge_slave_0: entered promiscuous mode [ 92.792179][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.805215][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.825565][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.833103][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.840642][ T5863] bridge_slave_1: entered allmulticast mode [ 92.848301][ T5863] bridge_slave_1: entered promiscuous mode [ 92.870086][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.917259][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.924614][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.931781][ T5864] bridge_slave_0: entered allmulticast mode [ 92.940989][ T5864] bridge_slave_0: entered promiscuous mode [ 92.963032][ T5862] team0: Port device team_slave_0 added [ 92.971974][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.981693][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.989155][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.997200][ T5864] bridge_slave_1: entered allmulticast mode [ 93.004822][ T5864] bridge_slave_1: entered promiscuous mode [ 93.040891][ T5862] team0: Port device team_slave_1 added [ 93.049279][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.108984][ T5865] team0: Port device team_slave_0 added [ 93.117110][ T5865] team0: Port device team_slave_1 added [ 93.137928][ T5863] team0: Port device team_slave_0 added [ 93.147430][ T5863] team0: Port device team_slave_1 added [ 93.156479][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.221108][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.232059][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.239281][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.265283][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.278011][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.285096][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.311427][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.324185][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.331159][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.357159][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.393168][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.400167][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.426840][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.450273][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.457265][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.483319][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.531951][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.538928][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.564985][ T5877] Bluetooth: hci1: command tx timeout [ 93.565234][ T5877] Bluetooth: hci2: command tx timeout [ 93.565398][ T5877] Bluetooth: hci0: command tx timeout [ 93.571338][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.576810][ T5870] Bluetooth: hci3: command tx timeout [ 93.593212][ T5864] team0: Port device team_slave_0 added [ 93.607391][ T5864] team0: Port device team_slave_1 added [ 93.645699][ T5865] hsr_slave_0: entered promiscuous mode [ 93.652152][ T5865] hsr_slave_1: entered promiscuous mode [ 93.729212][ T5862] hsr_slave_0: entered promiscuous mode [ 93.735950][ T5862] hsr_slave_1: entered promiscuous mode [ 93.742086][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 93.748116][ T5862] Cannot create hsr debugfs directory [ 93.773895][ T5863] hsr_slave_0: entered promiscuous mode [ 93.780184][ T5863] hsr_slave_1: entered promiscuous mode [ 93.786673][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 93.792440][ T5863] Cannot create hsr debugfs directory [ 93.798701][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.806379][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.832398][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.846478][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.853572][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.879676][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.062197][ T5864] hsr_slave_0: entered promiscuous mode [ 94.069768][ T5864] hsr_slave_1: entered promiscuous mode [ 94.076238][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 94.081986][ T5864] Cannot create hsr debugfs directory [ 94.416943][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.430337][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.450720][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.470236][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.526869][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.540415][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.565541][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.581454][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.659068][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.671136][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.684770][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.703215][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.802528][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.819476][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.831000][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.854905][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.949876][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.989740][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.023369][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.040347][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.063220][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.070562][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.099768][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.106909][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.136369][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.143572][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.153337][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.160456][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.189224][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.263042][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.273087][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.288859][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.296046][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.321877][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.329014][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.365895][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.387424][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.394589][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.422764][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.429914][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.648903][ T5877] Bluetooth: hci0: command tx timeout [ 95.648939][ T51] Bluetooth: hci1: command tx timeout [ 95.654792][ T5186] Bluetooth: hci3: command tx timeout [ 95.665950][ T5870] Bluetooth: hci2: command tx timeout [ 96.078020][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.102810][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.175560][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.191960][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.248832][ T5864] veth0_vlan: entered promiscuous mode [ 96.280435][ T5863] veth0_vlan: entered promiscuous mode [ 96.298989][ T5864] veth1_vlan: entered promiscuous mode [ 96.312757][ T5863] veth1_vlan: entered promiscuous mode [ 96.401638][ T5862] veth0_vlan: entered promiscuous mode [ 96.409556][ T5863] veth0_macvtap: entered promiscuous mode [ 96.418354][ T5864] veth0_macvtap: entered promiscuous mode [ 96.429467][ T5865] veth0_vlan: entered promiscuous mode [ 96.441587][ T5863] veth1_macvtap: entered promiscuous mode [ 96.451633][ T5864] veth1_macvtap: entered promiscuous mode [ 96.474671][ T5862] veth1_vlan: entered promiscuous mode [ 96.496831][ T5865] veth1_vlan: entered promiscuous mode [ 96.512927][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.526199][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.556216][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.582663][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.593846][ T5862] veth0_macvtap: entered promiscuous mode [ 96.600849][ T3080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.610892][ T3080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638603][ T3077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.647517][ T3077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.667549][ T3077] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.689580][ T5862] veth1_macvtap: entered promiscuous mode [ 96.697246][ T3077] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.706465][ T3077] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.725187][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.743782][ T5865] veth0_macvtap: entered promiscuous mode [ 96.782610][ T5865] veth1_macvtap: entered promiscuous mode [ 96.840390][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.873378][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.888337][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.897457][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.904571][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.928110][ T93] cfg80211: failed to load regulatory.db [ 96.947998][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.958134][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.971511][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.987340][ T3080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.002019][ T3080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.028988][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.038910][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.048101][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.060681][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078237][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.091407][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.099929][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.112339][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.188540][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.201654][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.255257][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.323280][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.362165][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.496116][ T3077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.525100][ T3077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544424][ T5956] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 97.676513][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.689048][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.694135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.730551][ T51] Bluetooth: hci1: command tx timeout [ 97.734454][ T5877] Bluetooth: hci0: command tx timeout [ 97.736242][ T5870] Bluetooth: hci2: command tx timeout [ 97.741445][ T5186] Bluetooth: hci3: command tx timeout [ 98.003949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.027963][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.053681][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.788834][ T5967] zswap: compressor  not available [ 99.018020][ T5985] sp0: Synchronizing with TNC [ 99.163830][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.754146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.763252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.813645][ T5186] Bluetooth: hci2: command tx timeout [ 99.819051][ T5186] Bluetooth: hci1: command tx timeout [ 99.824785][ T5186] Bluetooth: hci3: command tx timeout [ 99.830176][ T5186] Bluetooth: hci0: command tx timeout [ 100.061997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.464467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.476648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.525532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.729342][ T6007] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.284871][ T6007] Zero length message leads to an empty skb [ 101.598003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.805197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.066491][ T6026] Console: switching to colour VGA+ 80x25 [ 102.237783][ T6023] zswap: compressor not available [ 102.726520][ T6031] ubi0: attaching mtd0 [ 102.753916][ T6031] ubi0: scanning is finished [ 102.777934][ T6031] ubi0: empty MTD device detected [ 103.327396][ T6031] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 103.335122][ T6031] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 103.376544][ T6031] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 103.386941][ T6031] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 103.395368][ T6031] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 103.405539][ T6031] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 103.418477][ T6031] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1513719227 [ 103.433432][ T6031] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.434998][ T6044] ubi0: background thread "ubi_bgt0d" started, PID 6044 [ 103.892238][ T6050] Console: switching to colour frame buffer device 128x48 [ 104.868916][ T6070] Console: switching to colour VGA+ 80x25 [ 105.248392][ T6050] zswap: compressor not available [ 106.533311][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 107.521087][ T6112] Console: switching to colour frame buffer device 128x48 [ 108.197932][ T6125] tty tty17: ldisc open failed (-12), clearing slot 16 [ 108.210687][ T6112] Console: switching to colour VGA+ 80x25 [ 108.219081][ T6130] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.475493][ T6115] zswap: compressor not available [ 109.250931][ T6143] zswap: compressor not available [ 110.269778][ T6178] snd_virmidi snd_virmidi.0: control 5:9:1:IA>?[k [ 111.847088][ T6205] dump_stack_lvl+0x16c/0x1f0 [ 111.847174][ T6205] should_fail_ex+0x512/0x640 [ 111.847230][ T6205] ? fs_reclaim_acquire+0xae/0x150 [ 111.847280][ T6205] should_failslab+0xc2/0x120 [ 111.847337][ T6205] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 111.847372][ T6205] ? security_inode_alloc+0x3b/0x2b0 [ 111.847408][ T6205] security_inode_alloc+0x3b/0x2b0 [ 111.847442][ T6205] inode_init_always_gfp+0xce4/0x1030 [ 111.847480][ T6205] alloc_inode+0x86/0x240 [ 111.847520][ T6205] new_inode+0x22/0x1c0 [ 111.847562][ T6205] proc_pid_make_inode+0x22/0x160 [ 111.847600][ T6205] proc_ns_dir_lookup+0x25b/0x3a0 [ 111.847638][ T6205] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 111.847667][ T6205] lookup_open.isra.0+0x4d7/0x1580 [ 111.847697][ T6205] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 111.847736][ T6205] ? mnt_get_write_access+0x20c/0x300 [ 111.847775][ T6205] path_openat+0x893/0x2cb0 [ 111.847811][ T6205] ? __pfx_path_openat+0x10/0x10 [ 111.847846][ T6205] do_filp_open+0x20b/0x470 [ 111.847874][ T6205] ? __pfx_do_filp_open+0x10/0x10 [ 111.847911][ T6205] ? __pfx_kfree_link+0x10/0x10 [ 111.847955][ T6205] ? alloc_fd+0x471/0x7d0 [ 111.847987][ T6205] do_sys_openat2+0x11b/0x1d0 [ 111.848024][ T6205] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.848070][ T6205] __x64_sys_openat+0x174/0x210 [ 111.848122][ T6205] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.848172][ T6205] do_syscall_64+0xcd/0x490 [ 111.848208][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.848232][ T6205] RIP: 0033:0x7f8144f8d550 [ 111.848259][ T6205] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 111.848283][ T6205] RSP: 002b:00007f8145e03f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 111.848305][ T6205] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8144f8d550 [ 111.848320][ T6205] RDX: 0000000000000002 RSI: 00007f8145e03fa0 RDI: 00000000ffffff9c [ 111.848335][ T6205] RBP: 00007f8145e03fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.848349][ T6205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.848362][ T6205] R13: 00007f81451c6128 R14: 00007f81451c6090 R15: 00007ffff6e20328 [ 111.848392][ T6205] [ 112.014491][ T6208] __vm_enough_memory: pid: 6208, comm: syz.1.37, bytes: 4398046511104 not enough memory for the allocation [ 113.126454][ T30] audit: type=1326 audit(6051653143.701:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f874978ebe9 code=0x0 [ 113.479882][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 114.275247][ T6230] netlink: 268 bytes leftover after parsing attributes in process `syz.3.40'. [ 115.102083][ T6264] ubi: mtd0 is already attached to ubi0 [ 115.246308][ T6230] syz.3.40 (6230) used greatest stack depth: 19752 bytes left [ 116.678926][ T30] audit: type=1326 audit(6051653147.261:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e8d18ebe9 code=0x0 [ 117.068987][ T6298] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 117.884856][ T6297] ima: policy update failed [ 117.934127][ T30] audit: type=1802 audit(6051653148.511:4): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.54" res=0 errno=0 [ 119.472755][ T30] audit: type=1326 audit(6051653150.051:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8144f8ebe9 code=0x0 [ 119.867729][ T6322] kexec: Could not allocate control_code_buffer [ 120.409407][ T6348] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 122.247102][ T6372] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 122.952363][ T6367] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 124.870038][ T6413] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.991193][ T6393] kexec: Could not allocate control_code_buffer [ 126.921775][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 127.233643][ T30] audit: type=1326 audit(6051653157.801:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8144f8ebe9 code=0x0 [ 129.760472][ T6482] process 'syz.2.84' launched './file0' with NULL argv: empty string added [ 130.916005][ T6494] Console: switching to colour frame buffer device 128x48 [ 131.179002][ T6498] snd_virmidi snd_virmidi.0: control 5:9:1:IA>?[k 7 [ 137.298211][ T6565] netlink: zone id is out of range [ 137.320808][ T6565] netlink: zone id is out of range [ 137.337143][ T6565] netlink: zone id is out of range [ 137.353782][ T6565] netlink: zone id is out of range [ 137.364445][ T6565] netlink: zone id is out of range [ 137.383104][ T6565] netlink: zone id is out of range [ 137.388587][ T6565] netlink: zone id is out of range [ 137.394166][ T6565] netlink: zone id is out of range [ 137.400441][ T6565] netlink: zone id is out of range [ 137.410070][ T6565] netlink: zone id is out of range [ 137.905636][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.922727][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.955756][ T6617] aoe: could not set interface list: too many interfaces [ 140.940798][ T6625] snd_virmidi snd_virmidi.0: control 5:9:1:IA>?[k>uh' [ 156.786698][ T6869] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 159.196535][ T6902] netlink: 268 bytes leftover after parsing attributes in process `syz.2.163'. [ 160.680874][ T6944] Invalid ELF header magic: != ELF [ 162.392959][ T6946] kexec: Could not allocate control_code_buffer [ 163.202224][ T6993] FAULT_INJECTION: forcing a failure. [ 163.202224][ T6993] name fail_futex, interval 1, probability 0, space 0, times 1 [ 163.215174][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 163.215212][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.215228][ T6993] Call Trace: [ 163.215235][ T6993] [ 163.215244][ T6993] dump_stack_lvl+0x16c/0x1f0 [ 163.215281][ T6993] should_fail_ex+0x512/0x640 [ 163.215317][ T6993] get_futex_key+0x1d0/0x1560 [ 163.215348][ T6993] ? __pfx_get_futex_key+0x10/0x10 [ 163.215377][ T6993] ? preempt_schedule_thunk+0x16/0x30 [ 163.215414][ T6993] futex_wake+0xea/0x530 [ 163.215449][ T6993] ? __pfx_futex_wake+0x10/0x10 [ 163.215482][ T6993] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 163.215523][ T6993] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 163.215573][ T6993] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 163.215618][ T6993] do_futex+0x1e3/0x350 [ 163.215647][ T6993] ? __pfx_do_futex+0x10/0x10 [ 163.215677][ T6993] ? kill_proc_info+0xa6/0x1b0 [ 163.215711][ T6993] __x64_sys_futex+0x1e0/0x4c0 [ 163.215744][ T6993] ? __pfx___x64_sys_futex+0x10/0x10 [ 163.215774][ T6993] ? xfd_validate_state+0x61/0x180 [ 163.215819][ T6993] do_syscall_64+0xcd/0x490 [ 163.215853][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.215876][ T6993] RIP: 0033:0x7f919578ebe9 [ 163.215893][ T6993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.215915][ T6993] RSP: 002b:00007f91965600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 163.215936][ T6993] RAX: ffffffffffffffda RBX: 00007f91959c6098 RCX: 00007f919578ebe9 [ 163.215951][ T6993] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91959c609c [ 163.215964][ T6993] RBP: 00007f91959c6090 R08: 00007f9196582000 R09: 0000000000000000 [ 163.215978][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.215994][ T6993] R13: 00007f91959c6128 R14: 00007ffd5d119440 R15: 00007ffd5d119528 [ 163.216022][ T6993] [ 164.417580][ T6982] netlink: 268 bytes leftover after parsing attributes in process `syz.2.176'. [ 165.705920][ T7017] zswap: compressor not available [ 167.029487][ T7026] kexec: Could not allocate control_code_buffer [ 167.479993][ T7047] Console: switching to colour frame buffer device 128x48 [ 167.888909][ T7047] zswap: compressor not available [ 168.078446][ T7047] Console: switching to colour VGA+ 80x36 [ 168.629726][ T7054] zswap: compressor not available [ 169.178904][ T30] audit: type=1326 audit(1029.528:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f874978ebe9 code=0x0 [ 169.335764][ T7080] sp0: Synchronizing with TNC [ 170.551217][ T7106] FAULT_INJECTION: forcing a failure. [ 170.551217][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 170.651989][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(full) [ 170.652031][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.652050][ T7106] Call Trace: [ 170.652061][ T7106] [ 170.652074][ T7106] dump_stack_lvl+0x16c/0x1f0 [ 170.652123][ T7106] should_fail_ex+0x512/0x640 [ 170.652171][ T7106] ? __kmalloc_noprof+0xbf/0x510 [ 170.652203][ T7106] ? xfrm_hash_alloc+0xd1/0x100 [ 170.652234][ T7106] should_failslab+0xc2/0x120 [ 170.652265][ T7106] __kmalloc_noprof+0xd2/0x510 [ 170.652300][ T7106] ? xfrm_state_init+0x377/0x630 [ 170.652332][ T7106] ? xfrm_state_init+0x311/0x630 [ 170.652369][ T7106] xfrm_hash_alloc+0xd1/0x100 [ 170.652403][ T7106] xfrm_net_init+0x35f/0xcc0 [ 170.652445][ T7106] ? __pfx_xfrm_net_init+0x10/0x10 [ 170.652481][ T7106] ops_init+0x1e2/0x5f0 [ 170.652520][ T7106] setup_net+0x10f/0x380 [ 170.652553][ T7106] ? lockdep_init_map_type+0x5c/0x280 [ 170.652588][ T7106] ? __pfx_setup_net+0x10/0x10 [ 170.652625][ T7106] ? debug_mutex_init+0x37/0x70 [ 170.652652][ T7106] copy_net_ns+0x2a6/0x5f0 [ 170.652694][ T7106] create_new_namespaces+0x3ea/0xa90 [ 170.652729][ T7106] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 170.652760][ T7106] ksys_unshare+0x45b/0xa40 [ 170.652794][ T7106] ? __pfx_ksys_unshare+0x10/0x10 [ 170.652830][ T7106] ? xfd_validate_state+0x61/0x180 [ 170.652875][ T7106] __x64_sys_unshare+0x31/0x40 [ 170.652909][ T7106] do_syscall_64+0xcd/0x490 [ 170.652945][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.652970][ T7106] RIP: 0033:0x7f874978ebe9 [ 170.652988][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.653016][ T7106] RSP: 002b:00007f874a5d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 170.653039][ T7106] RAX: ffffffffffffffda RBX: 00007f87499c6090 RCX: 00007f874978ebe9 [ 170.653055][ T7106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 170.653070][ T7106] RBP: 00007f8749811e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.653090][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.653108][ T7106] R13: 00007f87499c6128 R14: 00007f87499c6090 R15: 00007ffccc8b1868 [ 170.653149][ T7106] [ 170.875174][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.549807][ T7112] netlink: 268 bytes leftover after parsing attributes in process `syz.3.200'. [ 172.471421][ T30] audit: type=1326 audit(1032.828:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7130 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8144f8ebe9 code=0x0 [ 172.641082][ T7136] can0: slcan on ptm0. [ 172.910045][ T7139] zswap: compressor not available [ 173.302588][ T30] audit: type=1326 audit(1033.658:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f919578ebe9 code=0x0 [ 173.381306][ T7130] can0 (unregistered): slcan off ptm0. [ 174.461711][ T7178] mkiss: ax0: crc mode is auto. [ 175.391424][ T7193] netlink: 268 bytes leftover after parsing attributes in process `syz.2.210'. [ 177.046570][ T30] audit: type=1326 audit(1037.408:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f874978ebe9 code=0x0 [ 178.270003][ T7254] zswap: compressor not available [ 182.301742][ T7336] zswap: compressor not available [ 185.237388][ T7391] netlink: 268 bytes leftover after parsing attributes in process `syz.0.241'. [ 185.721484][ T7404] netlink: 268 bytes leftover after parsing attributes in process `syz.1.243'. [ 186.490998][ T7400] netlink: 268 bytes leftover after parsing attributes in process `syz.3.244'. [ 187.048466][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 188.216572][ T7442] netlink: 186 bytes leftover after parsing attributes in process `syz.3.249'. [ 192.134383][ T7516] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.350187][ T7522] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 192.409919][ T7524] rnbd_client L213: map_device: Parameters missing [ 192.821629][ T7493] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 192.828413][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 193.111022][ T7531] team0: Port device team_slave_1 removed [ 193.763372][ T7538] zswap: compressor not available [ 193.970653][ T7554] ubi: mtd0 is already attached to ubi0 [ 194.336943][ T7557] bridge0: port 3(batadv0) entered blocking state [ 194.404037][ T7557] bridge0: port 3(batadv0) entered disabled state [ 194.451482][ T7557] batadv0: entered allmulticast mode [ 194.485068][ T7557] batadv0: entered promiscuous mode [ 194.491165][ T7557] bridge0: port 3(batadv0) entered blocking state [ 194.497840][ T7557] bridge0: port 3(batadv0) entered forwarding state [ 194.724013][ T7562] random: crng reseeded on system resumption [ 194.771207][ T65] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 194.781849][ T65] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 194.847206][ T5186] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 194.924484][ T7572] FAULT_INJECTION: forcing a failure. [ 194.924484][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 194.937464][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) [ 194.937494][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.937508][ T7572] Call Trace: [ 194.937516][ T7572] [ 194.937524][ T7572] dump_stack_lvl+0x16c/0x1f0 [ 194.937561][ T7572] should_fail_ex+0x512/0x640 [ 194.937601][ T7572] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 194.937633][ T7572] should_failslab+0xc2/0x120 [ 194.937665][ T7572] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 194.937694][ T7572] ? sk_prot_alloc+0x60/0x2a0 [ 194.937718][ T7572] sk_prot_alloc+0x60/0x2a0 [ 194.937740][ T7572] sk_alloc+0x36/0xc20 [ 194.937771][ T7572] tipc_sk_create+0xcf/0x21a0 [ 194.937800][ T7572] ? find_held_lock+0x2b/0x80 [ 194.937824][ T7572] ? __sock_create+0x2f2/0x8d0 [ 194.937851][ T7572] __sock_create+0x335/0x8d0 [ 194.937881][ T7572] __sys_socket+0x14d/0x260 [ 194.937905][ T7572] ? __pfx___sys_socket+0x10/0x10 [ 194.937929][ T7572] ? xfd_validate_state+0x61/0x180 [ 194.937973][ T7572] __x64_sys_socket+0x72/0xb0 [ 194.937996][ T7572] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.938026][ T7572] do_syscall_64+0xcd/0x490 [ 194.938062][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.938085][ T7572] RIP: 0033:0x7f8144f8ebe9 [ 194.938102][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.938124][ T7572] RSP: 002b:00007f8145e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 194.938145][ T7572] RAX: ffffffffffffffda RBX: 00007f81451c5fa0 RCX: 00007f8144f8ebe9 [ 194.938161][ T7572] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 194.938174][ T7572] RBP: 00007f8145011e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.938188][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.938201][ T7572] R13: 00007f81451c6038 R14: 00007f81451c5fa0 R15: 00007ffff6e20328 [ 194.938230][ T7572] [ 196.090653][ T7580] netlink: 268 bytes leftover after parsing attributes in process `syz.3.274'. [ 197.770830][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 197.860245][ T7612] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 7612 comm: syz.3.284) [ 197.892853][ T30] audit: type=1800 audit(2147483648.860:17): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.284" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=14815 res=0 errno=0 [ 198.564938][ T7621] zswap: compressor  not available [ 198.788644][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 199.328512][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.343591][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.629141][ T7618] kexec: Could not allocate control_code_buffer [ 200.380152][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 200.863989][ T7666] ================================================================== [ 200.864009][ T7666] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 200.864054][ T7666] Read of size 126 at addr ffff888034fde118 by task syz.0.295/7666 [ 200.864080][ T7666] [ 200.864094][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 200.864128][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.864144][ T7666] Call Trace: [ 200.864154][ T7666] [ 200.864164][ T7666] dump_stack_lvl+0x116/0x1f0 [ 200.864206][ T7666] print_report+0xcd/0x630 [ 200.864245][ T7666] ? __virt_addr_valid+0x81/0x610 [ 200.864282][ T7666] ? __phys_addr+0xe8/0x180 [ 200.864316][ T7666] ? fbcon_prepare_logo+0xa03/0xc70 [ 200.864354][ T7666] kasan_report+0xe0/0x110 [ 200.864393][ T7666] ? fbcon_prepare_logo+0xa03/0xc70 [ 200.864438][ T7666] kasan_check_range+0x100/0x1b0 [ 200.864484][ T7666] __asan_memcpy+0x23/0x60 [ 200.864514][ T7666] fbcon_prepare_logo+0xa03/0xc70 [ 200.864561][ T7666] fbcon_init+0xd77/0x1900 [ 200.864600][ T7666] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 200.864634][ T7666] visual_init+0x320/0x620 [ 200.864666][ T7666] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 200.864712][ T7666] store_bind+0x61d/0x760 [ 200.864751][ T7666] ? sysfs_file_kobj+0xe4/0x290 [ 200.864783][ T7666] ? __pfx_store_bind+0x10/0x10 [ 200.864818][ T7666] dev_attr_store+0x58/0x80 [ 200.864863][ T7666] ? __pfx_dev_attr_store+0x10/0x10 [ 200.864908][ T7666] sysfs_kf_write+0xf2/0x150 [ 200.864942][ T7666] kernfs_fop_write_iter+0x354/0x510 [ 200.864969][ T7666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 200.865013][ T7666] iter_file_splice_write+0xa24/0x12e0 [ 200.865057][ T7666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 200.865094][ T7666] ? __pfx_copy_splice_read+0x10/0x10 [ 200.865142][ T7666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 200.865174][ T7666] direct_splice_actor+0x192/0x6c0 [ 200.865204][ T7666] splice_direct_to_actor+0x345/0xa30 [ 200.865234][ T7666] ? __pfx_direct_splice_actor+0x10/0x10 [ 200.865267][ T7666] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 200.865302][ T7666] do_splice_direct+0x174/0x240 [ 200.865331][ T7666] ? __pfx_do_splice_direct+0x10/0x10 [ 200.865360][ T7666] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 200.865391][ T7666] ? rw_verify_area+0xcf/0x6c0 [ 200.865421][ T7666] do_sendfile+0xb06/0xe50 [ 200.865454][ T7666] ? __pfx_do_sendfile+0x10/0x10 [ 200.865483][ T7666] ? __sys_sendmsg+0x18c/0x220 [ 200.865523][ T7666] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.865559][ T7666] ? __x64_sys_futex+0x1e9/0x4c0 [ 200.865596][ T7666] __x64_sys_sendfile64+0x1d8/0x220 [ 200.865636][ T7666] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 200.865681][ T7666] do_syscall_64+0xcd/0x490 [ 200.865721][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.865750][ T7666] RIP: 0033:0x7f8144f8ebe9 [ 200.865770][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.865798][ T7666] RSP: 002b:00007f8145e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 200.865824][ T7666] RAX: ffffffffffffffda RBX: 00007f81451c5fa0 RCX: 00007f8144f8ebe9 [ 200.865842][ T7666] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 200.865857][ T7666] RBP: 00007f8145011e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.865873][ T7666] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 200.865888][ T7666] R13: 00007f81451c6038 R14: 00007f81451c5fa0 R15: 00007ffff6e20328 [ 200.865914][ T7666] [ 200.865923][ T7666] [ 200.865930][ T7666] Allocated by task 3080: [ 200.865943][ T7666] kasan_save_stack+0x33/0x60 [ 200.865980][ T7666] kasan_save_track+0x14/0x30 [ 200.866013][ T7666] __kasan_kmalloc+0xaa/0xb0 [ 200.866043][ T7666] __kmalloc_noprof+0x223/0x510 [ 200.866095][ T7666] ieee802_11_parse_elems_full+0x1db/0x3780 [ 200.866128][ T7666] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 200.866183][ T7666] ieee80211_iface_work+0xe2e/0x1360 [ 200.866213][ T7666] cfg80211_wiphy_work+0x2c7/0x580 [ 200.866255][ T7666] process_one_work+0x9cf/0x1b70 [ 200.866303][ T7666] worker_thread+0x6c8/0xf10 [ 200.866328][ T7666] kthread+0x3c5/0x780 [ 200.866370][ T7666] ret_from_fork+0x5d7/0x6f0 [ 200.866416][ T7666] ret_from_fork_asm+0x1a/0x30 [ 200.866452][ T7666] [ 200.866459][ T7666] Freed by task 3080: [ 200.866474][ T7666] kasan_save_stack+0x33/0x60 [ 200.866508][ T7666] kasan_save_track+0x14/0x30 [ 200.866542][ T7666] kasan_save_free_info+0x3b/0x60 [ 200.866592][ T7666] __kasan_slab_free+0x60/0x70 [ 200.866628][ T7666] kfree+0x2b4/0x4d0 [ 200.866654][ T7666] ieee80211_ibss_rx_queued_mgmt+0x1a92/0x2fd0 [ 200.866706][ T7666] ieee80211_iface_work+0xe2e/0x1360 [ 200.866735][ T7666] cfg80211_wiphy_work+0x2c7/0x580 [ 200.866775][ T7666] process_one_work+0x9cf/0x1b70 [ 200.866824][ T7666] worker_thread+0x6c8/0xf10 [ 200.866849][ T7666] kthread+0x3c5/0x780 [ 200.866891][ T7666] ret_from_fork+0x5d7/0x6f0 [ 200.866938][ T7666] ret_from_fork_asm+0x1a/0x30 [ 200.866981][ T7666] [ 200.866988][ T7666] The buggy address belongs to the object at ffff888034fde000 [ 200.866988][ T7666] which belongs to the cache kmalloc-1k of size 1024 [ 200.867014][ T7666] The buggy address is located 280 bytes inside of [ 200.867014][ T7666] freed 1024-byte region [ffff888034fde000, ffff888034fde400) [ 200.867048][ T7666] [ 200.867055][ T7666] The buggy address belongs to the physical page: [ 200.867076][ T7666] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34fd8 [ 200.867103][ T7666] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.867129][ T7666] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 200.867163][ T7666] page_type: f5(slab) [ 200.867207][ T7666] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 200.867236][ T7666] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 200.867276][ T7666] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 200.867312][ T7666] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 200.867337][ T7666] head: 00fff00000000003 ffffea0000d3f601 00000000ffffffff 00000000ffffffff [ 200.867362][ T7666] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 200.867378][ T7666] page dumped because: kasan: bad access detected [ 200.867397][ T7666] page_owner tracks the page as allocated [ 200.867406][ T7666] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 65, tgid 65 (kworker/u8:4), ts 97290008901, free_ts 97239322026 [ 200.867450][ T7666] post_alloc_hook+0x1c0/0x230 [ 200.867478][ T7666] get_page_from_freelist+0x132b/0x38e0 [ 200.867509][ T7666] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 200.867541][ T7666] alloc_pages_mpol+0x1fb/0x550 [ 200.867573][ T7666] new_slab+0x247/0x330 [ 200.867598][ T7666] ___slab_alloc+0xcf2/0x1740 [ 200.867618][ T7666] __slab_alloc.constprop.0+0x56/0xb0 [ 200.867640][ T7666] __kmalloc_noprof+0x2f2/0x510 [ 200.867666][ T7666] ___neigh_create+0x14e6/0x28c0 [ 200.867692][ T7666] ip6_finish_output2+0x1299/0x2020 [ 200.867724][ T7666] __ip6_finish_output+0x3cd/0x1010 [ 200.867754][ T7666] ip6_output+0x1ca/0x3e0 [ 200.867783][ T7666] ndisc_send_skb+0xa66/0x1e30 [ 200.867815][ T7666] ndisc_send_rs+0x129/0x670 [ 200.867847][ T7666] addrconf_dad_completed+0x49d/0x10d0 [ 200.867875][ T7666] addrconf_dad_work+0xcfb/0x14e0 [ 200.867902][ T7666] page last free pid 5236 tgid 5236 stack trace: [ 200.867918][ T7666] __free_frozen_pages+0x7d5/0x10f0 [ 200.867941][ T7666] __put_partials+0x165/0x1c0 [ 200.867967][ T7666] qlist_free_all+0x4d/0x120 [ 200.868004][ T7666] kasan_quarantine_reduce+0x195/0x1e0 [ 200.868034][ T7666] __kasan_slab_alloc+0x69/0x90 [ 200.868066][ T7666] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 200.868096][ T7666] __alloc_skb+0x2b2/0x380 [ 200.868128][ T7666] netlink_alloc_large_skb+0x69/0x130 [ 200.868165][ T7666] netlink_sendmsg+0x6a1/0xdd0 [ 200.868200][ T7666] ____sys_sendmsg+0xa98/0xc70 [ 200.868224][ T7666] ___sys_sendmsg+0x134/0x1d0 [ 200.868251][ T7666] __sys_sendmsg+0x16d/0x220 [ 200.868284][ T7666] do_syscall_64+0xcd/0x490 [ 200.868320][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.868347][ T7666] [ 200.868353][ T7666] Memory state around the buggy address: [ 200.868366][ T7666] ffff888034fde000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.868381][ T7666] ffff888034fde080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.868396][ T7666] >ffff888034fde100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.868407][ T7666] ^ [ 200.868417][ T7666] ffff888034fde180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.868431][ T7666] ffff888034fde200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.868443][ T7666] ================================================================== [ 200.896816][ T7666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.896839][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 200.896875][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.896895][ T7666] Call Trace: [ 200.896905][ T7666] [ 200.896917][ T7666] dump_stack_lvl+0x3d/0x1f0 [ 200.896961][ T7666] vpanic+0x6e8/0x7a0 [ 200.897014][ T7666] ? __pfx_vpanic+0x10/0x10 [ 200.897064][ T7666] ? fbcon_prepare_logo+0xa03/0xc70 [ 200.897104][ T7666] panic+0xca/0xd0 [ 200.897146][ T7666] ? __pfx_panic+0x10/0x10 [ 200.897191][ T7666] ? fbcon_prepare_logo+0xa03/0xc70 [ 200.897242][ T7666] ? preempt_schedule_common+0x44/0xc0 [ 200.897291][ T7666] ? preempt_schedule_thunk+0x16/0x30 [ 200.897334][ T7666] check_panic_on_warn+0xab/0xb0 [ 200.897376][ T7666] end_report+0x107/0x170 [ 200.897411][ T7666] kasan_report+0xee/0x110 [ 200.897449][ T7666] ? fbcon_prepare_logo+0xa03/0xc70 [ 200.897489][ T7666] kasan_check_range+0x100/0x1b0 [ 200.897531][ T7666] __asan_memcpy+0x23/0x60 [ 200.897560][ T7666] fbcon_prepare_logo+0xa03/0xc70 [ 200.897603][ T7666] fbcon_init+0xd77/0x1900 [ 200.897639][ T7666] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 200.897680][ T7666] visual_init+0x320/0x620 [ 200.897709][ T7666] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 200.897748][ T7666] store_bind+0x61d/0x760 [ 200.897801][ T7666] ? sysfs_file_kobj+0xe4/0x290 [ 200.897831][ T7666] ? __pfx_store_bind+0x10/0x10 [ 200.897865][ T7666] dev_attr_store+0x58/0x80 [ 200.897907][ T7666] ? __pfx_dev_attr_store+0x10/0x10 [ 200.897960][ T7666] sysfs_kf_write+0xf2/0x150 [ 200.897995][ T7666] kernfs_fop_write_iter+0x354/0x510 [ 200.898020][ T7666] ? __pfx_sysfs_kf_write+0x10/0x10 [ 200.898050][ T7666] iter_file_splice_write+0xa24/0x12e0 [ 200.898091][ T7666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 200.898125][ T7666] ? __pfx_copy_splice_read+0x10/0x10 [ 200.898161][ T7666] ? __pfx_iter_file_splice_write+0x10/0x10 [ 200.898192][ T7666] direct_splice_actor+0x192/0x6c0 [ 200.898222][ T7666] splice_direct_to_actor+0x345/0xa30 [ 200.898251][ T7666] ? __pfx_direct_splice_actor+0x10/0x10 [ 200.898282][ T7666] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 200.898315][ T7666] do_splice_direct+0x174/0x240 [ 200.898342][ T7666] ? __pfx_do_splice_direct+0x10/0x10 [ 200.898369][ T7666] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 200.898398][ T7666] ? rw_verify_area+0xcf/0x6c0 [ 200.898426][ T7666] do_sendfile+0xb06/0xe50 [ 200.898457][ T7666] ? __pfx_do_sendfile+0x10/0x10 [ 200.898485][ T7666] ? __sys_sendmsg+0x18c/0x220 [ 200.898523][ T7666] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.898556][ T7666] ? __x64_sys_futex+0x1e9/0x4c0 [ 200.898591][ T7666] __x64_sys_sendfile64+0x1d8/0x220 [ 200.898629][ T7666] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 200.898674][ T7666] do_syscall_64+0xcd/0x490 [ 200.898707][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.898729][ T7666] RIP: 0033:0x7f8144f8ebe9 [ 200.898744][ T7666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.898764][ T7666] RSP: 002b:00007f8145e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 200.898783][ T7666] RAX: ffffffffffffffda RBX: 00007f81451c5fa0 RCX: 00007f8144f8ebe9 [ 200.898797][ T7666] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 200.898810][ T7666] RBP: 00007f8145011e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.898822][ T7666] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 200.898835][ T7666] R13: 00007f81451c6038 R14: 00007f81451c5fa0 R15: 00007ffff6e20328 [ 200.898855][ T7666] [ 200.899183][ T7666] Kernel Offset: disabled