last executing test programs: 14.837728813s ago: executing program 0 (id=32): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x5) mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) ptrace$auto(0x4, r3, 0x1, 0x4) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) r4 = prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) getrandom$auto(&(0x7f0000000100)='!#..:+@\x00', 0x1, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r4) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x800, 0xeb1, r2, 0x8000) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x2) socket(0x22, 0x1, 0x84) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) setsockopt$auto(r0, 0x3, 0x1000, &(0x7f0000000140)='\x00\xadz%A\n[\x91\x9en\xe0\r\x85VN[\xf0\xad\x1d\x1d\x18\x19\xb2\x9a\x1c\xb6.8k\xa3=\x05v\xe4\xaa', 0xffffffff) 13.231877945s ago: executing program 2 (id=34): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x101000, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040)="0c74f8da38aaa8546623293681d63142419ae9c80799dec02b94030510b49efd76de99", 0x6, &(0x7f0000000100)={&(0x7f00000000c0)="e334acee2671c6f9cee4ff3d5f9ef4479fa4f78e5d6f68075d8c473b8cc4f9a20ea9c2713d34f3b026eabeb46afd4da54643bf3aeab952fdc6b1", 0x2}, 0x2, &(0x7f0000000140)="d8efc54ece", 0x2, 0x8000}, 0x5}, 0x716f, 0x7) r1 = fcntl$getown(r0, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={"bbb51318f331c54c355ffaac150c10c566cb0c785111199d8c19d31c9a4a8171", 0xfff, 0x2, 0xa, 0x0, 0x0, r1}) semget$auto(0xfffffff8, 0x5, 0x10) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec14\x00', 0x117600, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x602, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffd}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r5 = socket(0x23, 0x3, 0xf0d) write$auto(r0, &(0x7f0000000400)='/dev/qrtr-tun\x00', 0x6f7) mmap$auto(0xd87c, 0x9, 0x4, 0x10, r0, 0x3) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff7ca9}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x12, 0x2, '^)&{+:/$$)--)\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x6008880}, 0x804) semget$auto(0x7, 0x8, 0x7fff) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000001a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f00000005c0)={0x118, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xc1, 0xc5, "7623dd4ac3512287504d61292395baa0add9a5ef34352193b087860ba3988c6db26c489c8f685812404949eaa2aaa11301070d7bd1bba74bd229bcaf1c128b9f7700d4ab79e778abb00b268f817d784763efed64bb2aca0e244024661a8d19ca0c558a348a0e2b46fcff8f8de47949f9734353f5e1a7fdc31e3623a96ee37702acddafa820724dd88b536d448d3c36c3296f8a4ebbfbb4f7e90967e945a91b1ce49fbf4175d10d50c3ead640282a473c55fa90de13cf6496bf5d75a1a8"}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@nested={0x4, 0x144}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x400}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, "9c2624726c05e2f6dafef393263733193bae23cb58e5b308e342a5"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x118}, 0x1, 0x0, 0x0, 0x4010}, 0x4008000) r6 = pipe$auto(&(0x7f0000001a40)=0xffffffffffffffff) r8 = ioctl$auto_TUNSETPERSIST(r7, 0x400454cb, &(0x7f0000001a80)=0x8) r9 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40, 0x0) r10 = ioctl$auto_TUNGETVNETBE2(r9, 0x800454df, &(0x7f0000001b00)=0x1ff) ioctl$auto_FS_IOC_SETFSLABEL3(r10, 0x41009432, &(0x7f0000001b40)="b694c4322f3e0ddbb1751beeab37d1bece410bb69b6a1486d8213cc2a6156c39be1f9313975abc4c31a0e21078d42a9fe99e3a1cb47c652c87265fd0529eace9b579b8dbb2be58f7a9cec9a1ed7e0db88b0741a3b41afde4e6ef2ae9f884471271c2e3c5fd62b297e9e78857107b36917beb0aef94055e5c94a038ede488c8db37e9a1f3f3ef48514792cbd1f86d03743e5367b5f59f4b4ac0aaffcbb0b5964be2eaa02f5de2cd203e4b5a3946cc8fa28108f2071b7423b1615ee01bfdedf5fa35ce045b47040dae734a8f4ecb1e1a26eb181401b09d8103c3fbd0d305c9f116bfa39df8ece4a249b598d7fb83a64e5a0079dc0b8adfe579d5b50f6446bfaf2b") mknod$auto(&(0x7f0000001c40)='./file0\x00', 0x8, 0x9) io_uring_register$auto_IORING_UNREGISTER_FILES(r8, 0x3, &(0x7f0000001c80)="70c7c6acacf825b1fba39fa9b94da684755139832a494d7f1dec76dfac9be8ef", 0x1) r11 = ioctl$auto_NS_GET_OWNER_UID(r6, 0xb704, 0x0) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001d00), r5) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, r12, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xe6a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x54) ioctl$auto_TIOCGPTPEER2(r11, 0x5441, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/sg1\x00', 0x200, 0x0) r13 = getpgrp(r2) sched_setaffinity$auto(r13, 0x5, &(0x7f0000001e40)=0x6) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000001e80)=""/35, 0x23) 12.680889015s ago: executing program 2 (id=35): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) r1 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) unshare$auto(0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) r5 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) fcntl$auto_F_RDLCK(r5, 0x1cb0, 0x0) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000001340)='\x05\x00\x00\x00\x00i\x00\x00\x02\xac\xbc[:U\x8e\x03B\xfbPN\x00\x0e\x01\x00\x00\xfd7\x83\x85\x01\xd1\x86\xd5\xeb8m\xa8\xe7Z\xd0\xf1\x9e\xcc\x89\xbb\xec\x13_\xea/TK\xd9\xa8\xa5\x11\xe7\x98\xe8\x8b\xc4z\v\x85QZ\x84\xac\x00\x00\x03p\x8b\x93ix\x04\xaeK\xafr9\x8dqw\x00\"`M\x05\x9c\xadc\x11\xfa\xba#\xc8CYV\xe4@\xd1\xd8z),\x14B\x8c\xde7\xc1\xc0\x03\xd6\x1fi\x02\xeb\x1b\xac\xf4\xd5\xf6\x9d$zu\x00\xde\x8a*8\xf5iJ\xe7\x80\xb5\xfa\x97L\xd3\x05\xc2\x05B\x11\xb8\xfb\xf2\xaf\xb8\x82j\xb0j[\xe3\xb8M\xacu\x03k\x00\x00\x00\x00\x19\x19\x89\n\x92\xf4\xa8\xb7f I\x06$\xf5\xd3\xbfF\xca\x8f\x7f\xb0u?c\xea\xd3\x01\xf6\x1a\x13\xbd-\xdf\x06t\xd9\x97\x8f\x81Sd\xe5\xdc\x81\x91\x8e\xdc\xcb\xfd\xfd\x90\xf6\xcd\xca\xf6BD$\t\xfd\xbd\x058\xe7\xdb\xe0\xbda\x05+\xf0Qk<\xbfx\xf7\xacL\x9dJ\xa1E\xabZ\xba\xc5\x8e\xca\bx^fn\xd3\xc6\"\f\x90\x95~j\xb4\xdb\xf6\xe1r4, 0xee00, 0x0, 0x891a, 0x4, 0x9}, 0x6, 0x8000000000000000, 0x4, 0x0, @raw=0x9, @raw=0x1e, 0x2, 0x0, &(0x7f00000001c0)="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", &(0x7f00000011c0)="bb638f3699281ae4417da248e78fd623db2fbca508971eb13490925bb39a076da4a756a44c575cff6f10a6087fdbee8501a881a8dcabf206dc7ba4d8e4f50fd948d7fe1ea0ef1c56f5d26e196377f5b2becb1913b07eb8039a599b66313e9142a7b05e06aa59f9a631462f345bfff5c31a620f2c6741381c9d8aba18d9cbe5046c443a10633eb019386c38e49aa5ddacdbaffa9df1e4980b4c8d7acea33866931d9933ad492e978774b4bbf7d3"}) setresuid$auto(r2, r5, r3) madvise$auto(0x3fe, 0x7, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) 11.196578502s ago: executing program 2 (id=40): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x2) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x200}, 0x3}, 0x7, 0x4008) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x200400, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r2 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r2, &(0x7f0000000040)={{&(0x7f0000000140), 0xff, &(0x7f0000000280)={0x0, 0x5ee}, 0x7, 0x0, 0x0, 0x1}, 0x5}, 0x9, 0x8000) mmap$auto(0x0, 0x810005, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0xb, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff031}}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) 9.887776578s ago: executing program 2 (id=43): mmap$auto(0x0, 0xd, 0x2, 0x40ebe, 0xffffffffffffffff, 0x308000000000) r0 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/video55/power/control\x00', 0x5d1500, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/dev/cdrom/info\x00', 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) ioctl$auto_TIOCMGET(r1, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2bdd73929a3210e1f216ce5179acff73330045a851373ef9915a21c09ce72ec04c574ca") openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r6) sendmsg$auto_OVS_VPORT_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x80, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x5, 0x7f, 0x0, 0x6, 0x7fffffff, 0x7, 0x2cf6, 0x7}}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x10}, @OVS_VPORT_ATTR_NAME={0xe, 0x3, '/#,\\\\/:!\xf2\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x6}]}, 0x80}}, 0x10) ioctl$auto(0x3, 0x541b, 0x10000000000402) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r8, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x6, 0x1, 0x3ad2dd5) 9.504269682s ago: executing program 3 (id=45): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/projid_map\x00', 0x181000, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r2, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r1, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) getsockopt$auto(r3, 0x8, 0x0, 0xfffffffffffffffc, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000300)=0xfffffffffffffffc, 0x7) getsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x78, 0xe, &(0x7f00000000c0)='/sys/bus/netdevsim/del_device\x00', &(0x7f0000000100)=0xff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x40, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x9) socket(0x2d, 0x2, 0x0) prctl$auto_PR_SET_MM_BRK(0x80, 0x7, 0x0, 0xde3, 0xd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x41403, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000200), 0xd270934b9b27fbf7, 0x0) mmap$auto(0x3, 0x46a, 0x3, 0x7c, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 9.360480638s ago: executing program 0 (id=46): madvise$auto(0x101, 0x7, 0x9) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x400001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffa, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(0x0, 0x0) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) madvise$auto(0x0, 0x2003f2, 0x40015) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/mem\x00', 0x4883c2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x3, 0x0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1004) r4 = open(&(0x7f0000000040)='&&\x00', 0x40202, 0x79) mmap$auto(0x9, 0x5, 0x4, 0xef1, r4, 0x8001) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1c60, 0x0) r6 = socket(0x2, 0x2, 0x100) r7 = getsockopt$auto(r6, 0x0, 0x50, 0x0, &(0x7f0000000240)=0x1e) sendmsg$auto_VDPA_CMD_DEV_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffebdf250500000008001100f4ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40400b4}, 0x4090) ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000280)={{0x6, 0x8, 0x3e, 0x5}, "07ba9457024f6409abedb6e5282b3b72cbf50d990cfce4ce27dbcba6914fd5d22e97183a56611d3dd46f4ebd7ecc891f9de1624339a80c2b764214a6476f6ff73abe43c2f3587da6beab19d083eb636e", 0x4}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/system/cpu/cpu0/topology/package_cpus_list\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000003c0)=""/20, 0xfffffcc4) read$auto_tracing_fops_trace(r5, &(0x7f0000000040)=""/142, 0x8e) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 8.48843443s ago: executing program 3 (id=47): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) io_setup$auto(0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x29, 0x5, 0x0) write$auto(r3, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) 7.941090841s ago: executing program 1 (id=48): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "00000100", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080"]}) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x2, 0x803) ioctl$auto(r3, 0x89a0, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 7.143445914s ago: executing program 1 (id=49): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) 5.903308044s ago: executing program 2 (id=50): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x9, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x10000, 0x8402, 0x3, 0x9b70, 0x2, 0x2) 4.939771891s ago: executing program 0 (id=51): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000040)='./file0\x00', 0x105242, 0xe1d2b27bdc14aa7c) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyac\x00', 0x410080, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) read$auto_userio_fops_userio(r2, 0x0, 0x0) ptrace$auto(0x10, r1, 0x100000001, 0x7ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = socket(0xa, 0x2, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x1000006, &(0x7f00000002c0)={0x0, 0xfdef}, 0x2, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001700)=""/4082, 0xff2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xffffffffffffffff, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x206, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x1, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0xcd60, 0x15, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 4.939550329s ago: executing program 1 (id=52): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/1:1/uevent\x00', 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r0, &(0x7f00000001c0)={0x0, 0x4}, 0x3611) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, r1, 0xac4) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) lseek$auto(r2, 0x4, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r3, 0x0, 0x39b8) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x6, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x6, 0x101) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) 4.401322651s ago: executing program 3 (id=53): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x8004) socket(0x2, 0x3, 0xa) mmap$auto(0x546, 0x0, 0x6, 0x2000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040004) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fc, 0x3, 0xff, 0x200fffd, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20c03, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x400000000000000, 0x9, 0x0, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0) prctl$auto(0x21, 0x3fd, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r4, 0x410, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000006a40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r5, &(0x7f00000071c0)={0x0, 0x0, &(0x7f0000007180)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20004000) 3.111540886s ago: executing program 3 (id=54): mmap$auto(0xffffffffeffffffd, 0x5, 0xffffffffffffffff, 0x40eb2, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x7fff, 0x9, 0x2, 0x1b, 0xffffffffffffffff, 0x7ffe) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0xa, 0x46c8f346) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x7def, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x0, 0x2, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x4010000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10001}, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) 2.379212345s ago: executing program 1 (id=55): mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x8, 0x0) connect$auto(0x3, 0x0, 0x58) bind$auto(0x3, 0x0, 0x6a) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) r0 = pidfd_open$auto(0x1, 0x0) ftruncate$auto(r0, 0x2000000700) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='n', 0x1) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r2, 0x0, 0x100000001, 0x2000006) ioctl$auto(r0, 0x89ed, 0xffffffffffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x5607, r3) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '#'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 1.012607731s ago: executing program 2 (id=56): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r0, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x80002, 0x73) getsockopt$auto(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000000)={0x1f, 0x0, 0x202, 0x9, 0x1}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) write$auto(0xffffffffffffffff, &(0x7f0000000040)='#[-#\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x3) r6 = pidfd_open$auto(0x1, 0x0) signalfd4$auto(r2, &(0x7f00000019c0)={0x795e}, 0x9, 0x6) setns(r6, 0x4000000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000001980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x44000) close_range$auto(0x2, 0x8, 0x0) 1.012333663s ago: executing program 3 (id=57): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x20000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) mmap$auto(0xffffffffffffff88, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x0, 0x5, 0x0) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) ioctl$auto(0x3, 0x5415, r0) unshare$auto(0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mount$auto(&(0x7f0000000000)='macvlan0\x00', &(0x7f0000000200)=':,\x00', &(0x7f0000000240)='.\x00', 0x8, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x1) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f00000000c0)=&(0x7f0000001340)='\x05\x00\x00\x00\x00i\x00\x00\x02\xac\xbc[:U\x8e\x03B\xfbPN\x00\x0e\x01\x00\x00\xfd7\x83\x85\x01\xd1\x86\xd5\xeb8m\xa8\xe7Z\xd0\xf1\x9e\xcc\x89\xbb\xec\x13_\xea/TK\xd9\xa8\xa5\x11\xe7\x98\xe8\x8b\xc4z\v\x85QZ\x84\xac\x00\x00\x03p\x8b\x93ix\x04\xaeK\xafr9\x8dqw\x00\"`M\x05\x9c\xadc\x11\xfa\xba#\xc8CYV\xe4@\xd1\xd8z),\x14B\x8c\xde7\xc1\xc0\x03\xd6\x1fi\x02\xeb\x1b\xac\xf4\xd5\xf6\x9d$zu\x00\xde\x8a*8\xf5iJ\xe7\x80\xb5\xfa\x97L\xd3\x05\xc2\x05B\x11\xb8\xfb\xf2\xaf\xb8\x82j\xb0j[\xe3\xb8M\xacu\x03k\x00\x00\x00\x00\x19\x19\x89\n\x92\xf4\xa8\xb7f I\x06$\xf5\xd3\xbfF\xca\x8f\x7f\xb0u?c\xea\xd3\x01\xf6\x1a\x13\xbd-\xdf\x06t\xd9\x97\x8f\x81Sd\xe5\xdc\x81\x91\x8e\xdc\xcb\xfd\xfd\x90\xf6\xcd\xca\xf6BD$\t\xfd\xbd\x058\xe7\xdb\xe0\xbda\x05+\xf0Qk<\xbfx\xf7\xacL\x9dJ\xa1E\xabZ\xba\xc5\x8e\xca\bx^fn\xd3\xc6\"\f\x90\x95~j\xb4\xdb\xf6\xe11\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) mmap$auto(0xffffffffffffff88, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) close_range$auto(0x0, 0x5, 0x0) sysfs$auto(0x2, 0x49, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) ioctl$auto(0x3, 0x5415, r0) unshare$auto(0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x446001, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mount$auto(&(0x7f0000000000)='macvlan0\x00', &(0x7f0000000200)=':,\x00', &(0x7f0000000240)='.\x00', 0x8, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x1) execve$auto(&(0x7f00000002c0)=':,\x00', &(0x7f00000000c0)=&(0x7f0000001340)='\x05\x00\x00\x00\x00i\x00\x00\x02\xac\xbc[:U\x8e\x03B\xfbPN\x00\x0e\x01\x00\x00\xfd7\x83\x85\x01\xd1\x86\xd5\xeb8m\xa8\xe7Z\xd0\xf1\x9e\xcc\x89\xbb\xec\x13_\xea/TK\xd9\xa8\xa5\x11\xe7\x98\xe8\x8b\xc4z\v\x85QZ\x84\xac\x00\x00\x03p\x8b\x93ix\x04\xaeK\xafr9\x8dqw\x00\"`M\x05\x9c\xadc\x11\xfa\xba#\xc8CYV\xe4@\xd1\xd8z),\x14B\x8c\xde7\xc1\xc0\x03\xd6\x1fi\x02\xeb\x1b\xac\xf4\xd5\xf6\x9d$zu\x00\xde\x8a*8\xf5iJ\xe7\x80\xb5\xfa\x97L\xd3\x05\xc2\x05B\x11\xb8\xfb\xf2\xaf\xb8\x82j\xb0j[\xe3\xb8M\xacu\x03k\x00\x00\x00\x00\x19\x19\x89\n\x92\xf4\xa8\xb7f I\x06$\xf5\xd3\xbfF\xca\x8f\x7f\xb0u?c\xea\xd3\x01\xf6\x1a\x13\xbd-\xdf\x06t\xd9\x97\x8f\x81Sd\xe5\xdc\x81\x91\x8e\xdc\xcb\xfd\xfd\x90\xf6\xcd\xca\xf6BD$\t\xfd\xbd\x058\xe7\xdb\xe0\xbda\x05+\xf0Qk<\xbfx\xf7\xacL\x9dJ\xa1E\xabZ\xba\xc5\x8e\xca\bx^fn\xd3\xc6\"\f\x90\x95~j\xb4\xdb\xf6\xe1\xeb\xd1o\xe8*2#\x8f\xdae\xdd\xe7\xe1\x9b\xdfb\xa5{\x7f\xa1\x19\x1e]\x89gv\x0fd\xf3\xa0E\xd4\xe8F\x84\xad\xf1S}\xbc\xa2a\x18\xcd\x95y\xfb\x0f>\xd0\xba\xf8\x93!\xc9\xd0\xc2}U\x9c\x1e\x1e\xcb\x12`\xe90e\x96(\xecC\x1a\xf6\xa3*\xc4:F\xdc_(\x01A_\xa4t\x9a\x18\xe3\xc6\x8e\xb8;I\x04\xb5\xd0b\"\xcfq\xff\x80q\xa9\xaf\x9aq\xbc\x04\xda\x11[\xeb\xe2\xdah\x02\x91\xd5', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x200, 0x6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) close_range$auto(r2, r3, 0x1000) io_uring_setup$auto(0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x2, 0xfff, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) write$auto(r4, 0x0, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) 0s ago: executing program 3 (id=61): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) madvise$auto(0x4, 0x5, 0x9) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) fsetxattr$auto(r4, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1", 0xfffffffffffffffd, 0x91d) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) sendmsg$auto_NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8400}, 0x48044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 88.641070][ T5622] cgroup: Unknown subsys name 'net' [ 88.772257][ T5622] cgroup: Unknown subsys name 'cpuset' [ 88.781665][ T5622] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.552446][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.194862][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.207339][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.217496][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.226099][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.237015][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.361077][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.385246][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.394040][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.403987][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.412951][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.428478][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.441374][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.449465][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.457212][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.465031][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.492227][ T4951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.503184][ T4951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.511348][ T4951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.520753][ T4951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.530597][ T4951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.251236][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.258555][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.265795][ T5633] bridge_slave_0: entered allmulticast mode [ 95.273645][ T5633] bridge_slave_0: entered promiscuous mode [ 95.308696][ T50] Bluetooth: hci0: command tx timeout [ 95.312050][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.321591][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.330113][ T5639] bridge_slave_0: entered allmulticast mode [ 95.338151][ T5639] bridge_slave_0: entered promiscuous mode [ 95.346260][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.353566][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.360895][ T5633] bridge_slave_1: entered allmulticast mode [ 95.368622][ T5633] bridge_slave_1: entered promiscuous mode [ 95.392624][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.399875][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.407098][ T5639] bridge_slave_1: entered allmulticast mode [ 95.414775][ T5639] bridge_slave_1: entered promiscuous mode [ 95.519196][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.531579][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.548014][ T50] Bluetooth: hci3: command tx timeout [ 95.548075][ T4951] Bluetooth: hci1: command tx timeout [ 95.556912][ T50] Bluetooth: hci2: command tx timeout [ 95.564894][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.572319][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.580651][ T5640] bridge_slave_0: entered allmulticast mode [ 95.588576][ T5640] bridge_slave_0: entered promiscuous mode [ 95.599548][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.611201][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.641025][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.648384][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.655771][ T5640] bridge_slave_1: entered allmulticast mode [ 95.663761][ T5640] bridge_slave_1: entered promiscuous mode [ 95.734978][ T5633] team0: Port device team_slave_0 added [ 95.768370][ T5639] team0: Port device team_slave_0 added [ 95.776151][ T5633] team0: Port device team_slave_1 added [ 95.782295][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.789604][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.796837][ T5645] bridge_slave_0: entered allmulticast mode [ 95.804854][ T5645] bridge_slave_0: entered promiscuous mode [ 95.816971][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.828998][ T5639] team0: Port device team_slave_1 added [ 95.853653][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.861239][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.868604][ T5645] bridge_slave_1: entered allmulticast mode [ 95.876347][ T5645] bridge_slave_1: entered promiscuous mode [ 95.885936][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.919082][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.926106][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.952972][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.998807][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.005852][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.032162][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.076706][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.084040][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.115849][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.132559][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.144110][ T5640] team0: Port device team_slave_0 added [ 96.152964][ T5640] team0: Port device team_slave_1 added [ 96.159395][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.166524][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.192775][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.207073][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.270670][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.277737][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.304655][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.339951][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.346980][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.373403][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.405855][ T5633] hsr_slave_0: entered promiscuous mode [ 96.412765][ T5633] hsr_slave_1: entered promiscuous mode [ 96.433744][ T5645] team0: Port device team_slave_0 added [ 96.444264][ T5645] team0: Port device team_slave_1 added [ 96.482664][ T5639] hsr_slave_0: entered promiscuous mode [ 96.489527][ T5639] hsr_slave_1: entered promiscuous mode [ 96.495945][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 96.501955][ T5639] Cannot create hsr debugfs directory [ 96.544638][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.551699][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.577694][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.624723][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.632080][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.658440][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.675944][ T5640] hsr_slave_0: entered promiscuous mode [ 96.683434][ T5640] hsr_slave_1: entered promiscuous mode [ 96.690409][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 96.696238][ T5640] Cannot create hsr debugfs directory [ 96.869752][ T5645] hsr_slave_0: entered promiscuous mode [ 96.876913][ T5645] hsr_slave_1: entered promiscuous mode [ 96.883596][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 96.889406][ T5645] Cannot create hsr debugfs directory [ 97.301583][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.323858][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.332723][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.346594][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.354890][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.367180][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.377367][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.388844][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.399009][ T50] Bluetooth: hci0: command tx timeout [ 97.498673][ T24] cfg80211: failed to load regulatory.db [ 97.516212][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.532741][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.546873][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.558215][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.568816][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.580567][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.608145][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.620241][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.627871][ T50] Bluetooth: hci2: command tx timeout [ 97.627903][ T5644] Bluetooth: hci3: command tx timeout [ 97.640126][ T4951] Bluetooth: hci1: command tx timeout [ 97.716905][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.730022][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.739693][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.750490][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.768388][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.781570][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.790585][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.800912][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.859088][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.931999][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.944873][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.954418][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.964439][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.983311][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.993573][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.001970][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.013183][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.050859][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.074964][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.082788][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.121344][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.128571][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.174131][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.272084][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.301478][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.308705][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.332213][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.339385][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.409122][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.508388][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.524098][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.565833][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.573136][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.620723][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.627998][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.643139][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.682622][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.689890][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.725856][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.733100][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.400652][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.470872][ T4951] Bluetooth: hci0: command tx timeout [ 99.584526][ T5633] veth0_vlan: entered promiscuous mode [ 99.622288][ T5633] veth1_vlan: entered promiscuous mode [ 99.707933][ T4951] Bluetooth: hci1: command tx timeout [ 99.715642][ T5644] Bluetooth: hci3: command tx timeout [ 99.715654][ T50] Bluetooth: hci2: command tx timeout [ 99.751485][ T5633] veth0_macvtap: entered promiscuous mode [ 99.792831][ T5633] veth1_macvtap: entered promiscuous mode [ 99.863035][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.899176][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.949756][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.000841][ T122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.021084][ T122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.051544][ T122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.060833][ T122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.096940][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.119566][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.280302][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.291990][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.315066][ T5640] veth0_vlan: entered promiscuous mode [ 100.363722][ T5640] veth1_vlan: entered promiscuous mode [ 100.391268][ T5639] veth0_vlan: entered promiscuous mode [ 100.402662][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.412995][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.423327][ T5645] veth0_vlan: entered promiscuous mode [ 100.451393][ T5639] veth1_vlan: entered promiscuous mode [ 100.469625][ T5645] veth1_vlan: entered promiscuous mode [ 100.539334][ T5633] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.564353][ T5640] veth0_macvtap: entered promiscuous mode [ 100.603340][ T5640] veth1_macvtap: entered promiscuous mode [ 100.631708][ T5645] veth0_macvtap: entered promiscuous mode [ 100.659171][ T5639] veth0_macvtap: entered promiscuous mode [ 100.705186][ T5645] veth1_macvtap: entered promiscuous mode [ 100.718023][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.749976][ T5639] veth1_macvtap: entered promiscuous mode [ 100.764180][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.804273][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.814012][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.832780][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.843732][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.856183][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.875817][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.913276][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.927315][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.951850][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.996482][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.006551][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.045084][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.096547][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.161328][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.207240][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.248438][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.275130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.302763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.456453][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.473833][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.500212][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.527309][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.548255][ T5644] Bluetooth: hci0: command tx timeout [ 101.659154][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.675779][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.780128][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.790824][ T5644] Bluetooth: hci3: command tx timeout [ 101.797259][ T4951] Bluetooth: hci1: command tx timeout [ 101.798396][ T50] Bluetooth: hci2: command tx timeout [ 101.808286][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.955400][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.989826][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.258167][ T5798] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.553663][ T5803] Zero length message leads to an empty skb [ 102.891762][ T5801] netlink: zone id is out of range [ 104.344932][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.939186][ T5848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.632860][ T5853] mmap: syz.3.13 (5853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.591090][ T5928] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.449473][ T5933] netlink: zone id is out of range [ 113.482119][ T5933] netlink: zone id is out of range [ 113.515169][ T5933] netlink: zone id is out of range [ 113.549594][ T5933] netlink: zone id is out of range [ 113.572602][ T5933] netlink: zone id is out of range [ 113.599897][ T5933] netlink: zone id is out of range [ 113.650137][ T5933] netlink: zone id is out of range [ 113.675937][ T5933] netlink: zone id is out of range [ 113.697158][ T5933] netlink: zone id is out of range [ 113.830760][ T5933] netlink: zone id is out of range [ 115.286080][ T5969] sd 0:0:1:0: PR command failed: 1026 [ 115.333288][ T5969] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 115.394690][ T5969] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 115.755978][ T5971] kAFS: unparsable volume name [ 118.144088][ T6012] syz.1.33 (6012) used greatest stack depth: 19720 bytes left [ 118.627070][ T6028] ======================================================= [ 118.627070][ T6028] WARNING: The mand mount option has been deprecated and [ 118.627070][ T6028] and is ignored by this kernel. Remove the mand [ 118.627070][ T6028] option from the mount to silence this warning. [ 118.627070][ T6028] ======================================================= [ 119.114788][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 119.165115][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 119.177167][ T6032] netlink: 17 bytes leftover after parsing attributes in process `syz.0.36'. [ 119.730214][ T6063] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 121.061938][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 124.047928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 129.460865][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 129.951701][ T6235] ubi31: attaching mtd0 [ 130.105429][ T6235] ubi31: scanning is finished [ 130.105489][ T6235] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 130.848891][ T6233] ================================================================== [ 130.848908][ T6233] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 130.848954][ T6233] Write of size 8 at addr ffffc90004b71000 by task syz.2.56/6233 [ 130.848978][ T6233] [ 130.849013][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 130.849047][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.849068][ T6233] Call Trace: [ 130.849076][ T6233] [ 130.849087][ T6233] dump_stack_lvl+0x100/0x190 [ 130.849140][ T6233] print_report+0x13d/0x4b0 [ 130.849179][ T6233] ? _raw_spin_lock_irqsave+0x52/0x60 [ 130.849217][ T6233] ? sys_imageblit+0x19fb/0x1d60 [ 130.849253][ T6233] kasan_report+0xdf/0x1d0 [ 130.849300][ T6233] ? sys_imageblit+0x19fb/0x1d60 [ 130.849338][ T6233] sys_imageblit+0x19fb/0x1d60 [ 130.849378][ T6233] ? __pfx_sys_imageblit+0x10/0x10 [ 130.849420][ T6233] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.849474][ T6233] soft_cursor+0x524/0xa10 [ 130.849512][ T6233] bit_cursor+0xca1/0x1490 [ 130.849548][ T6233] ? __pfx_bit_cursor+0x10/0x10 [ 130.849578][ T6233] ? __lock_acquire+0x4a5/0x2630 [ 130.849634][ T6233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.849682][ T6233] ? get_color+0x1da/0x450 [ 130.849732][ T6233] ? __pfx_bit_cursor+0x10/0x10 [ 130.849763][ T6233] fbcon_cursor+0x43c/0x5e0 [ 130.849815][ T6233] ? add_softcursor+0x190/0x290 [ 130.849855][ T6233] set_cursor+0x1db/0x250 [ 130.849889][ T6233] con_write+0x89/0xb0 [ 130.849933][ T6233] do_output_char+0x63b/0x850 [ 130.849984][ T6233] n_tty_write+0x4e8/0x11c0 [ 130.850044][ T6233] ? __pfx_n_tty_write+0x10/0x10 [ 130.850097][ T6233] ? __pfx_woken_wake_function+0x10/0x10 [ 130.850137][ T6233] ? __pfx___might_resched+0x10/0x10 [ 130.850172][ T6233] ? kfree+0x1dd/0x6c0 [ 130.850220][ T6233] ? __pfx_n_tty_write+0x10/0x10 [ 130.850283][ T6233] file_tty_write.isra.0+0x4d2/0x890 [ 130.850332][ T6233] redirected_tty_write+0xd4/0x120 [ 130.850376][ T6233] vfs_write+0x6ac/0x1070 [ 130.850415][ T6233] ? __pfx_redirected_tty_write+0x10/0x10 [ 130.850462][ T6233] ? __pfx_vfs_write+0x10/0x10 [ 130.850498][ T6233] ? find_held_lock+0x2b/0x80 [ 130.850551][ T6233] ksys_write+0x12a/0x250 [ 130.850589][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 130.850627][ T6233] ? rcu_is_watching+0x12/0xc0 [ 130.850666][ T6233] do_syscall_64+0x115/0x840 [ 130.850712][ T6233] ? clear_bhb_loop+0x40/0x90 [ 130.850751][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.850785][ T6233] RIP: 0033:0x7f0b1079ce59 [ 130.850818][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.850850][ T6233] RSP: 002b:00007f0b116ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.850886][ T6233] RAX: ffffffffffffffda RBX: 00007f0b10a16090 RCX: 00007f0b1079ce59 [ 130.850908][ T6233] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 130.850927][ T6233] RBP: 00007f0b10832d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.850947][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.850966][ T6233] R13: 00007f0b10a16128 R14: 00007f0b10a16090 R15: 00007ffc1858cc18 [ 130.850999][ T6233] [ 130.851010][ T6233] [ 130.851020][ T6233] The buggy address belongs to a vmalloc virtual mapping [ 130.851042][ T6233] Memory state around the buggy address: [ 130.851059][ T6233] ffffc90004b70f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.851088][ T6233] ffffc90004b70f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.851112][ T6233] >ffffc90004b71000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.851131][ T6233] ^ [ 130.851147][ T6233] ffffc90004b71080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.851171][ T6233] ffffc90004b71100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 130.851194][ T6233] ================================================================== [ 130.856078][ T6233] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.856104][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.2.56 Not tainted syzkaller #0 PREEMPT(full) [ 130.856143][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.856162][ T6233] Call Trace: [ 130.856173][ T6233] [ 130.856186][ T6233] dump_stack_lvl+0x100/0x190 [ 130.856247][ T6233] vpanic+0x552/0x970 [ 130.856287][ T6233] ? __pfx_vpanic+0x10/0x10 [ 130.856321][ T6233] ? mark_held_locks+0x40/0x70 [ 130.856378][ T6233] ? sys_imageblit+0x19fb/0x1d60 [ 130.856421][ T6233] panic+0xd1/0xe0 [ 130.856451][ T6233] ? __pfx_panic+0x10/0x10 [ 130.856485][ T6233] ? sys_imageblit+0x19fb/0x1d60 [ 130.856531][ T6233] ? preempt_schedule_common+0x42/0xc0 [ 130.856584][ T6233] check_panic_on_warn.cold+0x19/0x34 [ 130.856620][ T6233] end_report.part.0+0x3a/0x90 [ 130.856668][ T6233] kasan_report.cold+0xe/0x18 [ 130.856717][ T6233] ? sys_imageblit+0x19fb/0x1d60 [ 130.856764][ T6233] sys_imageblit+0x19fb/0x1d60 [ 130.856813][ T6233] ? __pfx_sys_imageblit+0x10/0x10 [ 130.856864][ T6233] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 130.856921][ T6233] soft_cursor+0x524/0xa10 [ 130.856963][ T6233] bit_cursor+0xca1/0x1490 [ 130.857003][ T6233] ? __pfx_bit_cursor+0x10/0x10 [ 130.857036][ T6233] ? __lock_acquire+0x4a5/0x2630 [ 130.857094][ T6233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.857143][ T6233] ? get_color+0x1da/0x450 [ 130.857192][ T6233] ? __pfx_bit_cursor+0x10/0x10 [ 130.857225][ T6233] fbcon_cursor+0x43c/0x5e0 [ 130.857323][ T6233] ? add_softcursor+0x190/0x290 [ 130.857363][ T6233] set_cursor+0x1db/0x250 [ 130.857399][ T6233] con_write+0x89/0xb0 [ 130.857443][ T6233] do_output_char+0x63b/0x850 [ 130.857493][ T6233] n_tty_write+0x4e8/0x11c0 [ 130.857544][ T6233] ? __pfx_n_tty_write+0x10/0x10 [ 130.857586][ T6233] ? __pfx_woken_wake_function+0x10/0x10 [ 130.857618][ T6233] ? __pfx___might_resched+0x10/0x10 [ 130.857646][ T6233] ? kfree+0x1dd/0x6c0 [ 130.857686][ T6233] ? __pfx_n_tty_write+0x10/0x10 [ 130.857728][ T6233] file_tty_write.isra.0+0x4d2/0x890 [ 130.857769][ T6233] redirected_tty_write+0xd4/0x120 [ 130.857808][ T6233] vfs_write+0x6ac/0x1070 [ 130.857843][ T6233] ? __pfx_redirected_tty_write+0x10/0x10 [ 130.857884][ T6233] ? __pfx_vfs_write+0x10/0x10 [ 130.857913][ T6233] ? find_held_lock+0x2b/0x80 [ 130.857960][ T6233] ksys_write+0x12a/0x250 [ 130.857996][ T6233] ? __pfx_ksys_write+0x10/0x10 [ 130.858035][ T6233] ? rcu_is_watching+0x12/0xc0 [ 130.858075][ T6233] do_syscall_64+0x115/0x840 [ 130.858122][ T6233] ? clear_bhb_loop+0x40/0x90 [ 130.858160][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.858195][ T6233] RIP: 0033:0x7f0b1079ce59 [ 130.858220][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.858252][ T6233] RSP: 002b:00007f0b116ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.858294][ T6233] RAX: ffffffffffffffda RBX: 00007f0b10a16090 RCX: 00007f0b1079ce59 [ 130.858316][ T6233] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000008 [ 130.858337][ T6233] RBP: 00007f0b10832d6f R08: 0000000000000000 R09: 0000000000000000 [ 130.858357][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.858376][ T6233] R13: 00007f0b10a16128 R14: 00007f0b10a16090 R15: 00007ffc1858cc18 [ 130.858408][ T6233] [ 130.859024][ T6233] Kernel Offset: disabled