last executing test programs: 12.849455507s ago: executing program 1 (id=13): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048800}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002900)='/dev/sequencer2\x00', 0x283, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000002940)="00ac91ecb35a1456c11bcf3ad0746bf54ac3d42974d67ccc57f8cfa05c83dbd98b4ddb94") r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r3, 0x4143, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) 11.445927162s ago: executing program 0 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082aca7000fcdbdf2502000000100002800c000100d70b4d9343ea1b1208000100", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) r3 = socket(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x3, 0xa) r6 = getsockopt$auto(r5, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r9, @ANYBLOB="0800060042"], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty38\x00', 0x400, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x4a42, 0x0) fallocate$auto(r0, 0x8, 0x5b6f, 0x40000000004cbc60) ioctl$auto_TIOCSTI2(r10, 0x5412, &(0x7f0000000180)="0f152c389430b535fe0a7901be860df77fcffdf917723750521683cbd815672c5e43a85164690fb8f6db8d879674552ec02447f29d9af2b39a9fb511d5ac673403cde336bf1b40ede46c50bb404a512dc7b561d7a0e09ce1d717a56c7ad03d0a6e333dc3efac79977c70d127314fea27e5db699e7c33cc914a1646f7b390952b1d7aa9ce16d81b1814846d94d029d079b561b140e145348a222ff1e618522c62124b3bd10bc142c2c2329a570cff7af08ac7d14fa4fa37c0f6e44b441d8a0ab710c7708e148a09c2a66111baae9adeb88552d004f505544479cb84d9e34f39deb0435f0645ecc332") socket(0x28, 0x2, 0x0) ioctl$auto_XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000400)={0x4, 0x9}) acct$auto(&(0x7f0000000280)='/dev/ocfs2_control\x00') sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3ba7e72a998a86b3b048a5ad4b2cbe0850000000f8982bc68abca629b2", @ANYRES32=0x0, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x24000880) getsockopt$auto_SO_BUSY_POLL(r3, 0x4, 0x2e, &(0x7f0000000300)='/d_con9H\x99To\x00\x00\x00\x00\x00\x00\x00\x00\xb5\x94 >\x15\x13\xdd\b\xb6#\xfd1\n\x82?\xce[\xd8\x9d\x87\xf8T\x12\xd2D)\x83\xfc\xff\x03\xf8G\x97\x02\x0fHM6p\xc2\'\x01;\a\b\xe6X\x15\xc7p\xb2\x17`A\x1f\xe3 \xb2h\xb6\xd3B\x10\xd1V\xac9\xd9I\xe7h\x83\x8f\x1a\xcc\x8e\x19@\xe6z\x9bYk\xfd\x1eo\xf5X\xac./c;\xbc\x90]\xaa(e\xd3\xe9\xf9xt\xbc\x9f\x87S\xb8\xcf;\x81H\x7f\xc7\xb25\x03\xd3\x10NE\xfe\xfa\x80\xeana\xee\x00\x16\x9a\xb9T\xbe\xb3\x0e\x12\xbc\xf9\xf5\xfa\xeaF\xca\xfb\xf28n\xdd6\x0f\x9dc9\xaf\xd5\x90\xefDZV?\xd9\xff\xe4U\xd5\n2B\x11a\x04\xf2\xb5\xbf\x0e\xae\x1d~\x98\x04LQ\"\x1bK\x9c\xf6\x00Ve\xe3\xbbt\x86\x98n\xf8\x91\xcb\xa0t{+`Rt\xc9\x1c\xf8\x05\xe8}5\xb5n', &(0x7f00000002c0)=0x1) 10.887922528s ago: executing program 3 (id=19): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40000c9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) open(0x0, 0x595002, 0x408) rename$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x29, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x642, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) write$auto(r3, &(0x7f0000000040)='-&\xd0\xdd\xab\xd9=\xc5\'$,e\xc2\xc2\x8d\xb1\xc6&\xe53?\xe7m\xa6\x1bn\xc2\xd2Q\x88d\xda\xa4\xae>', 0xa5e) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) 10.542785519s ago: executing program 1 (id=20): write$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f00000001c0)={&(0x7f0000000100)="18361a55f254dd2b7c594882957598497271959dc53b1f3fdd49d70c975169c3832df2e51e930c90772fcfd4a68824b88b20c6ccd72e432e660e66e1b3cba3d98ecae352fbe2be1b599f199ba1b8f6ce5dec4ae5baf200850539d504eee72bf7d233daf06ebf003de92fb74ceed5ef36e231e2504f161dffe729eaee2cc1543800d264c940a8da0f9ebc651b266156da6e02c78e06e7b8d5dfb16477ac93b1f68a3e27c5f38462791c4a6803d185d5018a", 0x2}, 0x0, &(0x7f0000000280)={&(0x7f0000000200)="41d55a3b34da3a18afc8b9bf73bd64f9418d6c57bc8dbfd6f2d1859328f21b7315457ed08da4add9223951267f06c13c4d51b1cfade4aa2ab036584874ce99de4f2ccc01ee"}, 0x5, 0x0) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x1d9883, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x40) fremovexattr$auto(r2, &(0x7f0000000040)='*($\x00') r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r0, 0xae40, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000500)={0x40, 0x0, [{0x4000000e, 0x42, 0x6}]}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x40eb2, r4, 0x300000000000) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_NS_GET_NSTYPE(r4, 0xb703, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(0x0, 0xffffffffffffbff8, 0x80, 0x6) 10.263957349s ago: executing program 0 (id=21): mmap$auto(0x0, 0x2020009, 0x2000000003, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = fcntl$auto_F_RDLCK(0xffffffffffffffff, 0x7, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000300)="16a14f68cab1f2deccf56c1e2b94319c40265ffd6128b02c1ee09a4445dafdd5eed880abcc386d0a3026619fe2a58fc68f942dd52e5728fc5132c31efac31215b41dbedd21ab53c93df4c7121dc662f6a79c9c4cce5af9151d92e8cc5ed6dbac0300cfe9d9ff501267546d8fb50362a78f46db023a31faf990d6fcf9981080", 0x3) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000008f537e2360fc3c90d5e8ef5ca31ab143a088f61cadb0e7be1dc9ac505efc19f0808d89caaeb6f7ef519b9f9660372e0d9f6745605b141e5618094f4b96aa9d42e2665c39b5bcabf9a706f28eb04814665f2217915485754905d9930971f093dce3b72a8826dcced6c722b9e649332fc09f154733907dce2ca6fbac7c3962b3379edad382d2315b2a348be30f487913cc4759170490518fc3cdde9e41536d213692a7401b642d2a27b1672901df9b2c7d8e22f0e457", @ANYRES16=0x0, @ANYBLOB="00012dbd70000200000088000000070013004d8aec0008001f0100400000040008014800a6801a002f003a00967f9964839a20d39d2b7d353b7a857563556862000008007000", @ANYRES32=0x0, @ANYBLOB="1d005c002f6465a44b5c7fc3da8ba26170746572302f64656d75783000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20}, 0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/7:11/max_ratio_fine\x00', 0x1, 0x0) mmap$auto(0x195, 0x308, 0xde, 0x9b72, r0, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400840, 0x0) socketpair$auto(0x1e, 0x8004, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x410001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) clone$auto(0x20003b45, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x201282, 0x0) 9.39068162s ago: executing program 1 (id=23): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) mmap$auto(0x0, 0x6, 0x400000000003, 0xeb1, 0xffffffffffffffff, 0x2000000000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 9.101746638s ago: executing program 0 (id=24): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0) read$auto(r0, &(0x7f0000001200)='\x00', 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/input/input3/capabilities/sw\x00', 0x0, 0x0) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r3 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x8401, 0x0) readahead$auto(r2, 0x8, 0x1) r4 = ioctl$auto_NS_GET_NSTYPE(r3, 0xb703, 0x0) mmap$auto(0x8000000000000, 0x2020009, 0x1, 0x12, r4, 0x8004) r5 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r5, 0x0, 0x80, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, 0x0, 0x24084005) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x60000, 0x0) pread64$auto(r6, 0x0, 0x200000000006, 0x7) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r7, 0x5607, r7) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/9, 0x9) 8.686103021s ago: executing program 3 (id=25): mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x183040, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000002c0)='./file0\x00', 0x161342, 0x36) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) socket(0x10, 0x2, 0xc) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000009c0)={{@raw=0xb, 0x2, 0xed, 0x5, "23af44e99b39d92c8f7925902e82e274330f614fe788a29d9671e208274eb3003d738d0ced7f8e4ae6a7e31d"}, 0x4, 0x7, 0x65dc, @inferred, @enumerated={0x6, 0x46, "ccf8a22025f886dfa5f5ce5396f3add58174d9e53228434abe8f8017ca440b62f31abb9d0169fadbfa8b73374cc17c08360d32f9536712384d926c4677d3559d", 0x40, 0x1}, "3a1b2e5bfbf619455ff4b80b5092c5bf432fa6c3d158c2b2591103e6fdbf0bb88e707ed93304acc4c076b5b3d92be4e06123de781b632127a86c6ccae54ffb74"}) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0xc, 0x0, 0x0, 0x526) gettid() 8.029298821s ago: executing program 2 (id=26): mmap$auto(0x0, 0x84dd, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getpid() r1 = prctl$auto_PR_SET_MM_ENV_END(0x6, 0xb, r0, 0x5538913b, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x84, 0xe, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf4, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaa}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="434e13df0100"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xf8, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd8d}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x11}, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0xfffffffffffffffe, &(0x7f00000003c0)={&(0x7f0000000280)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177f23ee633451f7", 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 7.492843201s ago: executing program 2 (id=27): r0 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r2 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_RXQ_OVFL(r3, 0x6, 0x28, 0x0, &(0x7f0000000040)=0x8) write$auto(r3, &(0x7f00000000c0)='/dev/ram5\x00', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.kill\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)='\xe9)\x9f%mk\xcd\xec\x13\xdb\xf1\xdc\xc2\xb9', 0x81) fcntl$auto_F_DUPFD_CLOEXEC(r1, 0x406, r2) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = open(0x0, 0x595002, 0x408) process_madvise$auto_MADV_SEQUENTIAL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)="9c3543c5e18eefdb293ad4a70697703e26c9d5f076d9d8b286272acd6480413dee44bbaf83e38984093c3c0ce70834a1ea79c928644bbbf28876988732cd018b2ea2489f29a4277d3eb2bdec830a573a8d00f4e3af0b8e1a915b3c4a59c466339b0581a814707516636240272bdbf914db14a3fefc629b66eb1148ed17b70775dc535d9d40abcb635826783e7b543fa41d2eac6c7641d1a14a3b50c928d66d89ca74c8ba92b7ac7d8672c7bb5397595a31e40bbebaf0778b39cc5a2ce6586a19bf4dd03d1b23137a88efacadc17967e1e08b6eb90362c8d924797539490c02", 0x97}, 0xf, 0x2, 0x8284) write$auto(r5, 0x0, 0xfffffdf1) socket(0x28, 0x1, 0x0) linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r6 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x401, 0x2, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x1, 0x101) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x3}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xc}]}, 0x38}}, 0x40040) mprotect$auto(0x0, 0x8000000000000001, 0x8) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) 7.367528748s ago: executing program 1 (id=28): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x6, 0xfffff0d3, 0x2, 0x6, 0x6, 0x4}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="9d6539c7693da74d7f814a952cdb582a06b35f8f74b4e8147bc95b0104", @ANYRES32, @ANYRES64=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) ioctl$auto(r1, 0x400c4d02, r1) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x7) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(0x0, &(0x7f00000000c0)={0x5, 0x3, 0x1}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) 7.013721506s ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NFC_CMD_GET_SE(r0, 0x0, 0x50) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xfffe, 0xb1, 0x8, 0x0}) timer_settime$auto(0x0, 0x3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0xb, 0x4000b, 0x7, 0x80000000009b72, 0x7, 0x28001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) 5.795446855s ago: executing program 0 (id=30): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40014) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0xd, &(0x7f0000000140)={@buf=&(0x7f00000000c0)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f02292cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x8, 0xffffffffffffff01}, 0x2) getsockopt$auto(r1, 0x11b, 0x8, 0x0, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x5, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r3 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mounts\x00', 0x101080, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x27) mmap$auto(0x8000000000000001, 0x475b, 0xfffffffffffffff8, 0x9b74, r3, 0x28000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) ioctl$auto(0x3, 0xf29a, 0xffffffffffffffff) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) setsockopt$auto_SO_RCVLOWAT(r3, 0x2, 0x12, &(0x7f0000000140)='/dev/tty12\x00', 0x6) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000080)={@siginfo_0_0={0x9, 0x1f53, 0x6, @_sigpoll={0x8, r3}}}) ioctl$auto(r5, 0x4004af5d, 0xe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x40800, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f00000002c0)='\x04>\x01\x01\x00\x02\x00\x00\x01_\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc\xb6a\xb7H?\x0e\b\xa9\xd9\x97%\xeb\x8dQ\xad5P\x11\xf0\x05<\xe5\xf2\xcd\xf0\n\xf9\xd8Y\x82h\xb8.\x8b=MDO\x04g\xa8\xf9\x95\xcc:\x05\xdaj\xbf\x9b\xceO\xeb\xc7\x848\t\xf1KP\xd7er\xf7\xf5\xcd}\xaa\x98!\x1b\xbc\xe8Z|\xe3\xb1\xc1\xa2\xb1\x02P\xc9T\x9c\f\xda9\xfe\x9dy|7\xc6\xe3\xef\r\x81\x94\xfe\xfau\xd88}\xec\xe5\xa8\x96K)V\xbf\x822W\xdc\xafat\x93\x83kR!\xf0\xfb\xa3\x04\x8e\x03*e\x05V\xb2\xcd\xf6lH\x88\xacyi8\xf4\xb1\x9b\xb9D\xc6\xf7\xe2\xc3\x19\x1d\xb5\x03M\x19\xb9v\xab\x1d\x14IF\xdd\n\xce\'n\x92-I\xfa\xe9\x10\xaa\xda=>+\b#o\xc0\xb8\xd3\xad\x05\xe0Qe\'\xe5\x9f\xe4\x804H\x12>\xf5\xfa\xa3Wa1T{\b\x87\f\x9f\xf8\x88\x1ax\x13`\xa0\xce\xac\xfb$\xe0T\x91\x167=\xd3\x9b\xbf\xfc\x10\xc5S\xed\x1b*\xf3\x8f\xe6\xae\x8c^\x8a\xc1E\xd6', 0x7f) 5.382865437s ago: executing program 3 (id=31): r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r1, 0x24000000, r1}, 0x210) landlock_restrict_self$auto(r0, 0x3) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x407114}, 0x8) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x2, &(0x7f0000000380)) 5.327945376s ago: executing program 2 (id=32): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xffd8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x8a, 0x0, 0x14) io_uring_setup$auto(0x1, 0x0) open(0x0, 0x161342, 0x100) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0xfffffffb, 0x7, 0x4, &(0x7f0000000200)=0x4) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r3 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000003300), 0x80880, 0x0) read$auto_stat_fops_(r3, &(0x7f0000003340)=""/132, 0x84) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x20, 0xffffffffffffffff, 0xffffffff}, 0x10) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) clone$auto(0x7, 0x1, 0x0, 0x0, 0xe) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 4.939235446s ago: executing program 1 (id=33): mmap$auto(0x3, 0x4, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177f", 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x101a81, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE_JOURNAL(r1, 0x4018bc0f, &(0x7f0000000080)={0x268e, 0x0, 0xfffffffffffffffc, 0x5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop9\x00', 0x14de42, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r2 = socket(0xa, 0x3, 0xfffff129) close$auto(r2) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x282101, 0x439) r3 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) mmap$auto(0x80fffffffd, 0x1, 0x100001000000004, 0xfa31, 0x400, 0x80) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x403, 0xa2, @_sigchld={0x0, 0x0, 0x2, 0x2d, 0xc00}}}, 0x5, &(0x7f0000000240)={{0xc4a, 0xffffffffffffff37}, {0x34, 0x5}, 0x5, 0x4, 0x9, 0x6, 0x4, 0x1, 0xf, 0x6, 0xf, 0x7f, 0x6, 0x7fffffffffffffff, 0x3, 0x5}) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x80003, 0x1) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) 4.671791303s ago: executing program 0 (id=34): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r0 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r1 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r2) sendmsg$auto_TASKSTATS_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000", @ANYRES16=r3, @ANYBLOB="010a27bd7000fddbdf250100000008000100", @ANYRES32=r0, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x3fd082, 0x0) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000080)={@_si_pad}, 0x200, &(0x7f0000000340)={{0x9, 0x400}, {0xe0c1, 0x3}, 0x4, 0x1, 0x7, 0x3, 0x5, 0x4, 0x7, 0x4, 0x6, 0x6, 0x2, 0x9, 0x5, 0x1}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x1, 0x7ff) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x2, 0x27dd) r7 = prctl$auto(0x3e, 0xd2, r6, 0x1, 0x8000000000000000) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r5, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x10000040000b, 0x1000000000000df, 0x4000009b73, r7, 0x8003) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) ioctl$auto(r8, 0x901064ac, 0x5) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x20000003c2a19d5, 0x8000000000000000, 0x3, 0x62, 0x8, 0x2007, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 4.219847964s ago: executing program 2 (id=35): socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$auto(r0, 0x4b67, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000001c0)) 3.636847526s ago: executing program 3 (id=36): unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3fffff, 0x9, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) ioctl$auto(0x3, 0x40605346, 0x38) 2.728828975s ago: executing program 2 (id=37): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) mmap$auto(0x200000000000, 0x5, 0x4, 0x40eb2, 0x401, 0x300000000000) mq_getsetattr$auto(0x3, &(0x7f00000000c0)={0x0, 0xf, 0x80000000002, 0x4}, 0x0) pread64$auto(r0, 0x0, 0xc, 0xffff) 1.919111465s ago: executing program 0 (id=38): mmap$auto(0x0, 0x9, 0xdf, 0x100000011, 0x2, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x35}, 0x6a) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x1, 0x10d3, 0x3ff) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000003f40)=""/156, 0x9c) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xfff, r0, 0x8000) r1 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xfffffffffffffffc, 0xc}, 0x7}, 0x3, 0xe6a) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x408d4) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8919, 0x24) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x55) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x2}, 0x7) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x808, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) socket(0x2, 0x1, 0x106) 1.595605351s ago: executing program 2 (id=39): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, 0x0, 0x6051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 741.540998ms ago: executing program 1 (id=40): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x7020000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 3 (id=41): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c80d1b5d399b3b4d90a2", 0xa) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x400000000001, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x20a201, 0x0) r4 = set_tid_address$auto(&(0x7f0000000180)=0xf0) waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x4000008, 0xf8, @_rt={r4, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0xfffffffffffffffd, 0x82}, {0x5f, 0xd}, 0x0, 0x10, 0x80000001, 0x8, 0x1ff, 0x22, 0x5, 0x501, 0xfff, 0x3, 0x3, 0x9, 0xc, 0x9}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) r6 = fsopen$auto(&(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff) mmap$auto(0x4, 0x0, 0x4000000000df, 0x3a, r6, 0x6) socket(0xa, 0x4, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8d8fffff", @ANYRES8=r6, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRESOCT=r4], 0xf0}, 0x1, 0x0, 0x0, 0x20040084}, 0x2400c090) madvise$auto(0x0, 0xffffffffffff0005, 0x118) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 70.505538][ T5616] cgroup: Unknown subsys name 'net' [ 70.637705][ T5616] cgroup: Unknown subsys name 'cpuset' [ 70.646577][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.446813][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.453308][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.098350][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.057716][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.058748][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.067892][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.076470][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.081471][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.097145][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.097729][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.105978][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.114649][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.120750][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.134228][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.136682][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.143299][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.149434][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.156101][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.167284][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.170476][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.177121][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.191050][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.200436][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.706124][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.713837][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.721120][ T5630] bridge_slave_0: entered allmulticast mode [ 75.728400][ T5630] bridge_slave_0: entered promiscuous mode [ 75.762748][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.769968][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.777201][ T5630] bridge_slave_1: entered allmulticast mode [ 75.784369][ T5630] bridge_slave_1: entered promiscuous mode [ 75.801922][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.809104][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.816328][ T5628] bridge_slave_0: entered allmulticast mode [ 75.823305][ T5628] bridge_slave_0: entered promiscuous mode [ 75.854811][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.862086][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.869762][ T5628] bridge_slave_1: entered allmulticast mode [ 75.877073][ T5628] bridge_slave_1: entered promiscuous mode [ 75.919830][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.939603][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.946837][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.954239][ T5627] bridge_slave_0: entered allmulticast mode [ 75.961162][ T5627] bridge_slave_0: entered promiscuous mode [ 75.980065][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.998559][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.006357][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.013508][ T5627] bridge_slave_1: entered allmulticast mode [ 76.021256][ T5627] bridge_slave_1: entered promiscuous mode [ 76.030955][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.062453][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.069726][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.077095][ T5631] bridge_slave_0: entered allmulticast mode [ 76.084191][ T5631] bridge_slave_0: entered promiscuous mode [ 76.103689][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.115234][ T5630] team0: Port device team_slave_0 added [ 76.121077][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.128331][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.135770][ T5631] bridge_slave_1: entered allmulticast mode [ 76.142749][ T5631] bridge_slave_1: entered promiscuous mode [ 76.168683][ T5630] team0: Port device team_slave_1 added [ 76.207340][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.226050][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.233067][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.245145][ T5640] Bluetooth: hci2: command tx timeout [ 76.259152][ T5632] Bluetooth: hci1: command tx timeout [ 76.265377][ T5635] Bluetooth: hci0: command tx timeout [ 76.271038][ T5632] Bluetooth: hci3: command tx timeout [ 76.276861][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.304661][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.315863][ T5628] team0: Port device team_slave_0 added [ 76.323658][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.331099][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.357031][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.370485][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.390753][ T5628] team0: Port device team_slave_1 added [ 76.409474][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.467264][ T5627] team0: Port device team_slave_0 added [ 76.482558][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.489916][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.515865][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.528682][ T5631] team0: Port device team_slave_0 added [ 76.536706][ T5627] team0: Port device team_slave_1 added [ 76.551906][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.558916][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.585314][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.598494][ T5631] team0: Port device team_slave_1 added [ 76.618110][ T5630] hsr_slave_0: entered promiscuous mode [ 76.624688][ T5630] hsr_slave_1: entered promiscuous mode [ 76.661524][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.668633][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.694638][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.707565][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.714571][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.741428][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.763788][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.770831][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.796821][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.836852][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.843912][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.870220][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.942047][ T5628] hsr_slave_0: entered promiscuous mode [ 76.948421][ T5628] hsr_slave_1: entered promiscuous mode [ 76.954720][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 76.960535][ T5628] Cannot create hsr debugfs directory [ 77.043391][ T5627] hsr_slave_0: entered promiscuous mode [ 77.049773][ T5627] hsr_slave_1: entered promiscuous mode [ 77.056200][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 77.062394][ T5627] Cannot create hsr debugfs directory [ 77.072399][ T5631] hsr_slave_0: entered promiscuous mode [ 77.078888][ T5631] hsr_slave_1: entered promiscuous mode [ 77.085376][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 77.091137][ T5631] Cannot create hsr debugfs directory [ 77.483549][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.497198][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.505328][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.515396][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.533072][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.542570][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.550558][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.560039][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.622564][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.632761][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.648100][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.657311][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.666183][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.676632][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.690567][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.701120][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.790085][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.800956][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.816419][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.827524][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.835940][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.847553][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.855524][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.866532][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.968096][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.978032][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.986607][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.997706][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.006516][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.016702][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.031592][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.041502][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.056408][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.129099][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.163101][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.170753][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192015][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.210037][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.217185][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.278434][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.291054][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.316027][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.323138][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.325474][ T5632] Bluetooth: hci2: command tx timeout [ 78.330851][ T50] Bluetooth: hci0: command tx timeout [ 78.335917][ T5640] Bluetooth: hci1: command tx timeout [ 78.341153][ T50] Bluetooth: hci3: command tx timeout [ 78.368063][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.375238][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.403471][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.438564][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.445744][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.472825][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.479967][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.529952][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.597497][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.643929][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.651208][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.691117][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.698342][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.498428][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.625162][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.691621][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.712951][ T5630] veth0_vlan: entered promiscuous mode [ 79.753656][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.780641][ T5630] veth1_vlan: entered promiscuous mode [ 79.826937][ T5628] veth0_vlan: entered promiscuous mode [ 79.859012][ T5628] veth1_vlan: entered promiscuous mode [ 79.871935][ T5631] veth0_vlan: entered promiscuous mode [ 79.909949][ T5630] veth0_macvtap: entered promiscuous mode [ 79.918104][ T5631] veth1_vlan: entered promiscuous mode [ 79.947150][ T5630] veth1_macvtap: entered promiscuous mode [ 79.958597][ T5627] veth0_vlan: entered promiscuous mode [ 79.979190][ T5627] veth1_vlan: entered promiscuous mode [ 80.011771][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.029221][ T5628] veth0_macvtap: entered promiscuous mode [ 80.042753][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.060995][ T5631] veth0_macvtap: entered promiscuous mode [ 80.077397][ T5628] veth1_macvtap: entered promiscuous mode [ 80.088377][ T5631] veth1_macvtap: entered promiscuous mode [ 80.097443][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.107487][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.125334][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.134562][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.162299][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.171188][ T5627] veth0_macvtap: entered promiscuous mode [ 80.187822][ T5627] veth1_macvtap: entered promiscuous mode [ 80.208541][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.218395][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.242666][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.279480][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.287292][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.297464][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.327334][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.338167][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.356317][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.365838][ T812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.405512][ T50] Bluetooth: hci2: command tx timeout [ 80.406068][ T5635] Bluetooth: hci3: command tx timeout [ 80.410957][ T5632] Bluetooth: hci1: command tx timeout [ 80.416447][ T5640] Bluetooth: hci0: command tx timeout [ 80.429302][ T812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.438925][ T812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.469034][ T812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.478024][ T812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.502872][ T1356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.514630][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.522124][ T1356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.531488][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.553811][ T1356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.619212][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.629373][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.682665][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.691431][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.743687][ T812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.756815][ T812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.828131][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.840000][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.856674][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.927667][ T812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.956388][ T812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.061020][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.089638][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.097513][ T5781] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 81.159839][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.191350][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.375756][ T5787] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.392876][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.407236][ T5787] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.469807][ T5789] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.470137][ T5789] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.577251][ T5787] syz.1.2: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.577847][ T5787] CPU: 0 UID: 0 PID: 5787 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 81.577881][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.577905][ T5787] Call Trace: [ 81.577914][ T5787] [ 81.577924][ T5787] dump_stack_lvl+0x100/0x190 [ 81.577964][ T5787] warn_alloc.cold+0x95/0x1c1 [ 81.577994][ T5787] ? __pfx_warn_alloc+0x10/0x10 [ 81.578046][ T5787] ? check_irq_usage+0xe5/0x810 [ 81.578094][ T5787] ? __bfs+0x150/0x2a0 [ 81.578131][ T5787] ? stack_trace_save+0x8e/0xc0 [ 81.578186][ T5787] __vmalloc_node_range_noprof+0x136c/0x1630 [ 81.578226][ T5787] ? add_lock_to_list+0x99/0x110 [ 81.578270][ T5787] ? lockdep_unlock+0x5a/0xc0 [ 81.578312][ T5787] ? disksize_store+0x11a/0x4e0 [ 81.578352][ T5787] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.578397][ T5787] ? __pfx___might_resched+0x10/0x10 [ 81.578450][ T5787] ? disksize_store+0x11a/0x4e0 [ 81.578477][ T5787] __vmalloc_node_noprof+0xad/0xf0 [ 81.578517][ T5787] ? disksize_store+0x11a/0x4e0 [ 81.578549][ T5787] disksize_store+0x11a/0x4e0 [ 81.578579][ T5787] ? sysfs_file_kobj+0xe4/0x290 [ 81.578627][ T5787] ? __pfx_disksize_store+0x10/0x10 [ 81.578654][ T5787] dev_attr_store+0x58/0x80 [ 81.578691][ T5787] ? __pfx_dev_attr_store+0x10/0x10 [ 81.578728][ T5787] sysfs_kf_write+0xf2/0x150 [ 81.578759][ T5787] kernfs_fop_write_iter+0x3e0/0x5f0 [ 81.578799][ T5787] ? __pfx_sysfs_kf_write+0x10/0x10 [ 81.578830][ T5787] vfs_write+0x6ac/0x1070 [ 81.578865][ T5787] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 81.578911][ T5787] ? __pfx_vfs_write+0x10/0x10 [ 81.578970][ T5787] ksys_write+0x12a/0x250 [ 81.579003][ T5787] ? __pfx_ksys_write+0x10/0x10 [ 81.579040][ T5787] ? rcu_is_watching+0x12/0xc0 [ 81.579078][ T5787] do_syscall_64+0x10b/0xf80 [ 81.579118][ T5787] ? clear_bhb_loop+0x40/0x90 [ 81.579153][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.579183][ T5787] RIP: 0033:0x7f4ece79ce59 [ 81.579207][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.579233][ T5787] RSP: 002b:00007f4ecc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.579266][ T5787] RAX: ffffffffffffffda RBX: 00007f4ecea15fa0 RCX: 00007f4ece79ce59 [ 81.579285][ T5787] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000007 [ 81.579303][ T5787] RBP: 00007f4ece832d6f R08: 0000000000000000 R09: 0000000000000000 [ 81.579320][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.579337][ T5787] R13: 00007f4ecea16038 R14: 00007f4ecea15fa0 R15: 00007fff6949b2c8 [ 81.579377][ T5787] [ 81.591430][ T5787] Mem-Info: [ 81.940441][ T5787] active_anon:7479 inactive_anon:0 isolated_anon:0 [ 81.940441][ T5787] active_file:2164 inactive_file:39943 isolated_file:0 [ 81.940441][ T5787] unevictable:768 dirty:1774 writeback:0 [ 81.940441][ T5787] slab_reclaimable:9699 slab_unreclaimable:88674 [ 81.940441][ T5787] mapped:26263 shmem:1801 pagetables:1078 [ 81.940441][ T5787] sec_pagetables:0 bounce:0 [ 81.940441][ T5787] kernel_misc_reclaimable:0 [ 81.940441][ T5787] free:1351375 free_pcp:8676 free_cma:0 [ 81.940534][ T5787] Node 0 active_anon:29916kB inactive_anon:0kB active_file:8656kB inactive_file:159564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105052kB dirty:7088kB writeback:0kB shmem:5668kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.940617][ T5787] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.940696][ T5787] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.940784][ T5787] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 81.940844][ T5787] Node 0 DMA32 free:1449400kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29916kB inactive_anon:0kB active_file:8656kB inactive_file:159564kB unevictable:1536kB writepending:7088kB zspages:0kB present:3129332kB managed:2537288kB mlocked:0kB bounce:0kB free_pcp:34640kB local_pcp:6368kB free_cma:0kB [ 81.940934][ T5787] lowmem_reserve[]: 0 0 1 1 1 [ 81.940988][ T5787] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1096kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 81.941064][ T5787] lowmem_reserve[]: 0 0 0 0 0 [ 81.941120][ T5787] Node 1 Normal free:3940740kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 81.941202][ T5787] lowmem_reserve[]: 0 0 0 0 0 [ 81.941256][ T5787] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.941503][ T5787] Node 0 DMA32: 2*4kB (UE) 2*8kB (ME) 2*16kB (UM) 2*32kB (UM) 1*64kB (E) 2*128kB (ME) 2*256kB (UM) 1*512kB (U) 2*1024kB (ME) 0*2048kB 353*4096kB (M) = 1449400kB [ 81.941756][ T5787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 81.941919][ T5787] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940740kB [ 81.942179][ T5787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.942198][ T5787] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.942219][ T5787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.942239][ T5787] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.942261][ T5787] 43929 total pagecache pages [ 81.942274][ T5787] 0 pages in swap cache [ 81.942283][ T5787] Free swap = 124996kB [ 81.942292][ T5787] Total swap = 124996kB [ 81.942302][ T5787] 2097051 pages RAM [ 81.942311][ T5787] 0 pages HighMem/MovableOnly [ 81.942320][ T5787] 430840 pages reserved [ 81.942328][ T5787] 0 pages cma reserved [ 81.953135][ T5782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.487630][ T5640] Bluetooth: hci1: command tx timeout [ 82.487670][ T5640] Bluetooth: hci2: command tx timeout [ 82.487699][ T5640] Bluetooth: hci0: command tx timeout [ 82.487726][ T5640] Bluetooth: hci3: command tx timeout [ 82.868818][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'. [ 83.650875][ T5807] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.493543][ T5834] Zero length message leads to an empty skb [ 85.815923][ T5841] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 86.817009][ T876] cfg80211: failed to load regulatory.db [ 86.969558][ T5855] bonding: unable to delete non-existent &ݫ='$,e [ 88.265310][ T5884] mmap: syz.1.23 (5884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.709770][ T5893] smpboot: CPU 1 is now offline [ 89.177929][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 89.347823][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'. [ 90.258837][ T5913] FAULT_INJECTION: forcing a failure. [ 90.258837][ T5913] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.290876][ T5910] MTRR 1 not used [ 90.316218][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.3.29 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.316243][ T5913] Tainted: [L]=SOFTLOCKUP [ 90.316249][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.316259][ T5913] Call Trace: [ 90.316264][ T5913] [ 90.316270][ T5913] dump_stack_lvl+0x100/0x190 [ 90.316292][ T5913] should_fail_ex.cold+0x5/0xa [ 90.316309][ T5913] ? css_rstat_updated+0x1ce/0x5a0 [ 90.316335][ T5913] get_futex_key+0x1d2/0x1510 [ 90.316353][ T5913] ? __pfx_get_futex_key+0x10/0x10 [ 90.316371][ T5913] ? pick_eevdf+0x4d3/0x860 [ 90.316394][ T5913] futex_wait_setup+0x83/0x510 [ 90.316418][ T5913] __futex_wait+0x19f/0x300 [ 90.316439][ T5913] ? __pfx___futex_wait+0x10/0x10 [ 90.316457][ T5913] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.316481][ T5913] ? __pfx_futex_wake_mark+0x10/0x10 [ 90.316503][ T5913] ? find_held_lock+0x2b/0x80 [ 90.316522][ T5913] ? futex_wake+0x456/0x530 [ 90.316544][ T5913] futex_wait+0xe6/0x370 [ 90.316563][ T5913] ? __pfx_futex_wait+0x10/0x10 [ 90.316593][ T5913] do_futex+0x1ef/0x350 [ 90.316610][ T5913] ? __pfx_do_futex+0x10/0x10 [ 90.316625][ T5913] ? __pfx___might_resched+0x10/0x10 [ 90.316642][ T5913] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 90.316660][ T5913] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.316682][ T5913] __x64_sys_futex+0x34f/0x4d0 [ 90.316701][ T5913] ? __pfx___x64_sys_futex+0x10/0x10 [ 90.316716][ T5913] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 90.316734][ T5913] ? rcu_is_watching+0x12/0xc0 [ 90.316763][ T5913] do_syscall_64+0x10b/0xf80 [ 90.316786][ T5913] ? clear_bhb_loop+0x40/0x90 [ 90.316804][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.316819][ T5913] RIP: 0033:0x7fe90399ce59 [ 90.316833][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.316847][ T5913] RSP: 002b:00007fe90487a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.316862][ T5913] RAX: ffffffffffffffda RBX: 00007fe903c15fa8 RCX: 00007fe90399ce59 [ 90.316872][ T5913] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe903c15fa8 [ 90.316880][ T5913] RBP: 00007fe903c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 90.316889][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.316898][ T5913] R13: 00007fe903c16038 R14: 00007ffcc5a1f880 R15: 00007ffcc5a1f968 [ 90.316917][ T5913] [ 92.013209][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 94.084558][ T5635] Bluetooth: hci0: command 0x2016 tx timeout [ 95.848227][ T5969] netlink: 338 bytes leftover after parsing attributes in process `syz.2.39'. [ 96.062168][ T5969] netlink: 338 bytes leftover after parsing attributes in process `syz.2.39'. [ 96.166234][ T5640] Bluetooth: hci0: command 0x2016 tx timeout [ 96.451400][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 97.214972][ T5982] ================================================================== [ 97.214985][ T5982] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 97.215015][ T5982] Write of size 8 at addr ffffc90004c71000 by task syz.3.41/5982 [ 97.215028][ T5982] [ 97.215038][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.3.41 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.215058][ T5982] Tainted: [L]=SOFTLOCKUP [ 97.215064][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.215073][ T5982] Call Trace: [ 97.215078][ T5982] [ 97.215084][ T5982] dump_stack_lvl+0x100/0x190 [ 97.215101][ T5982] print_report+0x13d/0x4b0 [ 97.215122][ T5982] ? _raw_spin_lock_irqsave+0x52/0x60 [ 97.215145][ T5982] ? sys_fillrect+0x174a/0x1910 [ 97.215165][ T5982] kasan_report+0xdf/0x1d0 [ 97.215183][ T5982] ? sys_fillrect+0x174a/0x1910 [ 97.215205][ T5982] sys_fillrect+0x174a/0x1910 [ 97.215229][ T5982] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 97.215248][ T5982] bit_clear+0x17d/0x220 [ 97.215266][ T5982] ? __pfx_bit_clear+0x10/0x10 [ 97.215284][ T5982] ? fb_get_color_depth+0x120/0x250 [ 97.215301][ T5982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.215324][ T5982] __fbcon_clear+0x633/0x760 [ 97.215340][ T5982] ? __pfx_bit_clear+0x10/0x10 [ 97.215358][ T5982] fbcon_scroll+0x48b/0x650 [ 97.215383][ T5982] con_scroll+0x464/0x690 [ 97.215405][ T5982] ? lockdep_hardirqs_on+0x78/0x100 [ 97.215429][ T5982] csi_ECMA.constprop.0+0x1238/0x3b60 [ 97.215453][ T5982] ? find_held_lock+0x2b/0x80 [ 97.215472][ T5982] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 97.215497][ T5982] do_con_write+0x3946/0x4a10 [ 97.215509][ T5982] ? trace_contention_end+0x122/0x170 [ 97.215529][ T5982] ? __pfx_do_con_write+0x10/0x10 [ 97.215546][ T5982] con_write+0x23/0xb0 [ 97.215558][ T5982] n_tty_write+0x431/0x11c0 [ 97.215577][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 97.215593][ T5982] ? trace_kmalloc+0xe3/0x110 [ 97.215609][ T5982] ? __pfx_woken_wake_function+0x10/0x10 [ 97.215627][ T5982] ? rcu_is_watching+0x12/0xc0 [ 97.215644][ T5982] ? file_tty_write.isra.0+0x694/0x890 [ 97.215665][ T5982] ? kfree+0x1dd/0x6c0 [ 97.215684][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 97.215699][ T5982] file_tty_write.isra.0+0x4d2/0x890 [ 97.215723][ T5982] redirected_tty_write+0xd4/0x120 [ 97.215744][ T5982] vfs_write+0x6ac/0x1070 [ 97.215761][ T5982] ? __pfx_redirected_tty_write+0x10/0x10 [ 97.215784][ T5982] ? __pfx_vfs_write+0x10/0x10 [ 97.215799][ T5982] ? find_held_lock+0x2b/0x80 [ 97.215822][ T5982] ksys_write+0x12a/0x250 [ 97.215838][ T5982] ? __pfx_ksys_write+0x10/0x10 [ 97.215855][ T5982] ? rcu_is_watching+0x12/0xc0 [ 97.215873][ T5982] do_syscall_64+0x10b/0xf80 [ 97.215893][ T5982] ? clear_bhb_loop+0x40/0x90 [ 97.215910][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.215925][ T5982] RIP: 0033:0x7fe90399ce59 [ 97.215938][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.215952][ T5982] RSP: 002b:00007fe90487a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.215968][ T5982] RAX: ffffffffffffffda RBX: 00007fe903c15fa0 RCX: 00007fe90399ce59 [ 97.215978][ T5982] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000003 [ 97.215987][ T5982] RBP: 00007fe903a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 97.215996][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.216005][ T5982] R13: 00007fe903c16038 R14: 00007fe903c15fa0 R15: 00007ffcc5a1f968 [ 97.216019][ T5982] [ 97.216025][ T5982] [ 97.216029][ T5982] The buggy address belongs to a vmalloc virtual mapping [ 97.216047][ T5982] Memory state around the buggy address: [ 97.216055][ T5982] ffffc90004c70f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 97.216069][ T5982] ffffc90004c70f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 97.216080][ T5982] >ffffc90004c71000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 97.216088][ T5982] ^ [ 97.216096][ T5982] ffffc90004c71080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 97.216106][ T5982] ffffc90004c71100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 97.216114][ T5982] ================================================================== [ 97.216124][ T5982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.216138][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.3.41 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.216160][ T5982] Tainted: [L]=SOFTLOCKUP [ 97.216165][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.216174][ T5982] Call Trace: [ 97.216179][ T5982] [ 97.216185][ T5982] dump_stack_lvl+0x100/0x190 [ 97.216201][ T5982] vpanic+0x552/0x970 [ 97.216214][ T5982] ? __pfx_vpanic+0x10/0x10 [ 97.216229][ T5982] ? __pfx_vprintk_emit+0x10/0x10 [ 97.216255][ T5982] ? sys_fillrect+0x174a/0x1910 [ 97.216277][ T5982] panic+0xd1/0xe0 [ 97.216294][ T5982] ? __pfx_panic+0x10/0x10 [ 97.216310][ T5982] ? sys_fillrect+0x174a/0x1910 [ 97.216332][ T5982] check_panic_on_warn.cold+0x19/0x34 [ 97.216347][ T5982] end_report.part.0+0x3a/0x90 [ 97.216367][ T5982] kasan_report.cold+0xe/0x18 [ 97.216396][ T5982] ? sys_fillrect+0x174a/0x1910 [ 97.216419][ T5982] sys_fillrect+0x174a/0x1910 [ 97.216445][ T5982] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 97.216465][ T5982] bit_clear+0x17d/0x220 [ 97.216483][ T5982] ? __pfx_bit_clear+0x10/0x10 [ 97.216501][ T5982] ? fb_get_color_depth+0x120/0x250 [ 97.216517][ T5982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.216540][ T5982] __fbcon_clear+0x633/0x760 [ 97.216556][ T5982] ? __pfx_bit_clear+0x10/0x10 [ 97.216575][ T5982] fbcon_scroll+0x48b/0x650 [ 97.216592][ T5982] con_scroll+0x464/0x690 [ 97.216623][ T5982] ? lockdep_hardirqs_on+0x78/0x100 [ 97.216646][ T5982] csi_ECMA.constprop.0+0x1238/0x3b60 [ 97.216670][ T5982] ? find_held_lock+0x2b/0x80 [ 97.216694][ T5982] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 97.216719][ T5982] do_con_write+0x3946/0x4a10 [ 97.216732][ T5982] ? trace_contention_end+0x122/0x170 [ 97.216752][ T5982] ? __pfx_do_con_write+0x10/0x10 [ 97.216769][ T5982] con_write+0x23/0xb0 [ 97.216782][ T5982] n_tty_write+0x431/0x11c0 [ 97.216801][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 97.216816][ T5982] ? trace_kmalloc+0xe3/0x110 [ 97.216833][ T5982] ? __pfx_woken_wake_function+0x10/0x10 [ 97.216851][ T5982] ? rcu_is_watching+0x12/0xc0 [ 97.216868][ T5982] ? file_tty_write.isra.0+0x694/0x890 [ 97.216889][ T5982] ? kfree+0x1dd/0x6c0 [ 97.216908][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 97.216924][ T5982] file_tty_write.isra.0+0x4d2/0x890 [ 97.216948][ T5982] redirected_tty_write+0xd4/0x120 [ 97.216969][ T5982] vfs_write+0x6ac/0x1070 [ 97.216986][ T5982] ? __pfx_redirected_tty_write+0x10/0x10 [ 97.217009][ T5982] ? __pfx_vfs_write+0x10/0x10 [ 97.217024][ T5982] ? find_held_lock+0x2b/0x80 [ 97.217047][ T5982] ksys_write+0x12a/0x250 [ 97.217063][ T5982] ? __pfx_ksys_write+0x10/0x10 [ 97.217080][ T5982] ? rcu_is_watching+0x12/0xc0 [ 97.217098][ T5982] do_syscall_64+0x10b/0xf80 [ 97.217119][ T5982] ? clear_bhb_loop+0x40/0x90 [ 97.217135][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.217150][ T5982] RIP: 0033:0x7fe90399ce59 [ 97.217161][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.217175][ T5982] RSP: 002b:00007fe90487a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.217189][ T5982] RAX: ffffffffffffffda RBX: 00007fe903c15fa0 RCX: 00007fe90399ce59 [ 97.217199][ T5982] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000003 [ 97.217208][ T5982] RBP: 00007fe903a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 97.217217][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.217226][ T5982] R13: 00007fe903c16038 R14: 00007fe903c15fa0 R15: 00007ffcc5a1f968 [ 97.217241][ T5982] [ 97.217301][ T5982] Kernel Offset: disabled