last executing test programs: 9.441427267s ago: executing program 0 (id=81): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) setitimer$auto(0x2, &(0x7f0000000040)={{0x432, 0x5}, {0x0, 0x3}}, 0x0) r1 = socket(0xa, 0x1, 0x6) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000080)={0x1, &(0x7f0000000000)={0x0, 0xf5, 0x95, @inferred=r0}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r2, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) socket(0x2b, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) r4 = socket(0x2b, 0x1, 0x1) io_submit$auto(0x3a55, 0x10, &(0x7f0000000280)=&(0x7f0000000240)={0x0, 0x7, 0x7, 0x6, 0x7, r4, 0xffffffffffffffff, 0x100, 0x8, 0x0, 0x0, r1}) getsockopt$auto(r4, 0x0, 0x80, 0x0, &(0x7f0000000040)=0x5) prctl$auto_PR_SET_IO_FLUSHER(0x39, 0xd, 0x8, 0x4, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, 0x0, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) sendfile$auto(r6, r6, 0x0, 0x8) ioctl$auto_CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000140)={0x1, 0x3, 0x3ff, 0xd, 0x6, 0x6, "0f63065eb6ca3735dccd35ab3387db2a", 0x5, 0x2, 0x0, 0x2, 0x75, 0xb, 0x8e}) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x6, 0x37db}, 0x1, 0x0) 8.656334096s ago: executing program 0 (id=84): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) 7.86462041s ago: executing program 1 (id=87): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) timer_create$auto(0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x10, &(0x7f0000000180)={0x7, 0x1, 0xb9, 0xd, 0x18da, 0x3, r0, [0x6, 0x7, 0x2], {0xff, 0x1ffe00, 0x75, 0x6, 0x2, 0x800, 0xf, 0x7db, 0x8}, {0x7, 0x80000000, 0xa99, 0x8001, 0x4, 0x7, 0x3, 0x9, 0x6}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 7.70699532s ago: executing program 0 (id=88): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xe, 0x8000000008011, r0, 0x4) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_uinput_fops_uinput(r1, &(0x7f0000000140)=""/252, 0xfc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x50040, 0x0) mremap$auto(0x0, 0xbfffffffffffffff, 0x401, 0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x20, r3, 0xb01, 0x70bd24, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000080) preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000100)='1\x00'/11, 0xb) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x6, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) 5.787528359s ago: executing program 1 (id=93): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x15, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) r1 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) ioctl$auto_BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000080)=0x13de4f86) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) read$auto(0x3, 0x0, 0x7) move_pages$auto(0x0, 0x7, &(0x7f00000004c0)=&(0x7f0000000400), &(0x7f0000000500)=0x1, &(0x7f0000000540)=0x8, 0x2) 5.341406578s ago: executing program 1 (id=94): close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x80000, 0xfffffffe) rt_sigsuspend$auto(0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) 5.335578438s ago: executing program 3 (id=95): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x3ffff) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/softirqs\x00', 0x682, 0x0) 4.761607737s ago: executing program 0 (id=96): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x81085520, r4) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 4.745638499s ago: executing program 2 (id=97): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x11, 0x80003, 0x300) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x20, 0x5}, 0x7) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x225aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/trigger_fs_error\x00', 0xa801, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f@W\x9d\xf4 \xd3di\x84\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j;!\xa4+{\xe6\x02\xb8\x88\xea66$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^d$\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf8\xf2\xe3\xb7\x85\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xf5m\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\'\xf2\x8c\x1a\xd00Z\x06\xf2\xacL\xe0\xab\x1d\x1e\x94?', 0x84) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) ioctl$auto(r3, 0x80885659, r3) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x2) 4.583131212s ago: executing program 3 (id=98): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050) ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) bpf$auto(0x401, &(0x7f0000000180)=@raw_tracepoint={0x4, r0, 0x0, 0x400}, 0x4) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 4.179665842s ago: executing program 2 (id=99): shmctl$auto_IPC_STAT(0x7e, 0x2, &(0x7f0000000100)={{0x926, 0xffffffffffffffff, 0xee01, 0x3, 0xff, 0x3, 0xfffb}, 0xfffffff9, 0x5335, 0x8, 0xfff, @raw=0xa, @raw=0x4, 0x5, 0x0, 0x0, &(0x7f00000000c0)}) shmctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000380)={{0x0, 0xee01, 0xee00, 0xffffffff, 0xdb58, 0x2, 0xd9ea}, 0xff, 0x8, 0x7, 0x7, @raw=0x7, @raw=0xbbf, 0xb68, 0x0, &(0x7f0000000180)="97285db387612e6ccdfe165d9f2d7f16af9c95d60750fb7ab5136a988850fac4b363ecb5962085b2afe92472ff289b9179d604be29c1d33736365da1dda45ca5ec7f632dae46ad17dd501decc0adaefe9352b15e5dfedfe22dc5271d2b0294cd136c7f96e3fb91b6ae3f5f6781766308950ae12dec547a63dac5d0eb79b8ee1a87e111e082d34e602b96525cced98d834ec752d21b48d5124b7761e6d743a02da6e83ba419df5102ef39fe201fc53ac2661b4e6b9760a43a439cbe18f7b96eb8eda04f94b183f895c63d747ed1e227e21ffc886be5aed3c177cbbf5cb61c94", &(0x7f0000000280)}) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) shmctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000002480)={{0x401, r0, r1, 0x3ff, 0x6, 0x9, 0x7e9}, 0x63, 0xe, 0xa, 0xfffffffffffffff3, @inferred, @raw=0x9, 0x8000, 0x0, &(0x7f0000000480)="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", 0x0}) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x6, 0x21, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4044090) lseek$auto(0xffffffffffffffff, 0x7, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) io_submit$auto(0x8000000000000001, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x803ffff, 0x0, 0x3, 0x7069, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8, 0x0, 0x2, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.667602171s ago: executing program 3 (id=100): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(&(0x7f0000000040)='IPVS\x00', 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfffffffe, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) 3.275267909s ago: executing program 2 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x4, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xfdf31875370e1716) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r0}, 0xa3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x1, 0x3968, 0x1, 0x1, 0x1}, "654c6dbc7a4d30983899a7e1325bc5d82b3f184410ba9f74e82a3fa6c3ccf1bf"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x68) listen$auto(0x3, 0x81) r5 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r6 = socket(0x2, 0x5, 0x0) getsockopt$auto(r6, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x800, 0x2070bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x60000844) pread64$auto(r5, 0x0, 0xffffffffffffff8c, 0x800) flock$auto(r1, 0x75f) keyctl$auto(0x1c, 0x1, 0x6, 0x0, 0x2) 3.081879759s ago: executing program 1 (id=102): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f0, r0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r3, 0x40a85321, 0x38) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80002, 0x73) socket(0x2b, 0x1, 0x0) r5 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/30s\x00', 0x0, 0x0) read$auto_mon_fops_stat_usb_mon(r5, 0x0, 0x0) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x10001) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x46, 0x115, "81d3691f3953c51848baec7d359a2c428184943a1c1138ed7379b778f8b412a8798c78d8a3a4238b851040b2e700380df9bdac498c7a553902389887ac40a69d7529"}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x400}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xb0, 0x131, 0x0, 0x1, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_PMKR0_NAME={0x8b, 0x102, "453d542ca0eeb1f87928d15e77261f9b3aa21c9e7a81aa2b8642e4c900e1e7173bc5f0291a4f8f95eef2ddde4d51b4eba43fb54e85e810134fa689b7d70642addc7f6fa4e084fc949b7c0293743cc010e8418ffc030c4d31a219dfcdadc787d70d20fee4b1e7942c3077b72bc336064d481bbb7d2e33e9405288db209f6c5ad3fbcd868cca6f25"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xe5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xff}]}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.960388095s ago: executing program 0 (id=103): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) 2.955768787s ago: executing program 2 (id=104): bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0xffffffffffffffff, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(r0, 0x1ddbdde1, 0x0, 0x0, 0x0, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1000}, 0x3) ioctl$auto_TCSBRK(r1, 0x5409, &(0x7f00000001c0)="d2a631ee5ecd92fefb1e2aadbc32418c4ccccab18ee2ce8b79a2ef929af93f987a2250d84cca34792cc86dbbaffcaa0441e811884996ba59cc0648b52210bbf89a969f8710ba7ae5") read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af14, 0xe) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x7ffc) connect$auto(0x3, &(0x7f0000000140)=@rc={0x1f, @none}, 0x3) socketpair$auto(0x1, 0xffffffff, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) shutdown$auto(0xffffffffffffffff, 0x400002) prctl$auto(0x43, 0x1, r0, 0x0, 0x0) mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) 2.216671151s ago: executing program 1 (id=105): mmap$auto(0x2000000000, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x28974783) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup2$auto(r0, r0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r1 = io_uring_setup$auto(0x59, 0x0) listen$auto(0x3, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000b80), r2) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80080}, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ff, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x20000080) madvise$auto(0x0, 0x0, 0x248) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) 2.147150746s ago: executing program 3 (id=106): open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x59, 0x7fffffff, "3cea78bbd758cc121c581bc4c34b778b53274dd220fe6dadb45fe020f3be3d2e79c069b233944f35c120f164c27d3057d18c302fe379637b00842281b276f22890203104a4c1ec01ac85f377f26ecc304b72e04409dccb4e5f"}, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000019c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000009180)='ns/time\x00') mlockall$auto(0x7) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 1.26542715s ago: executing program 1 (id=107): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cgroup\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000ac0)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) r6 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r6, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000100", @ANYRES16=r5, @ANYBLOB="0b1726bd7000fddbdf25150000001800018014000200767863616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) r7 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/lapb3/testing\x00', 0xa880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000300)=""/102, 0x66) read$auto_ptdump_curusr_fops_(r7, &(0x7f0000000180)=""/226, 0xe2) 935.772674ms ago: executing program 2 (id=108): socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/tracing/options/test_nop_refuse\x00', 0x0, 0x0) read$auto_trace_options_fops_trace(r1, 0x0, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r3 = socket(0x2, 0x3, 0x100) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) kexec_load$auto(0x6, 0x0, &(0x7f00000002c0)={@kbuf=&(0x7f0000000240)="5eb9c94f3a2d4d2740e6fa2df79a92a5f5868bd7bb945ecdb22db99eca0bee4fc061f5ce5093a4d417829546b3f6d4a3f02c90c52fa42a62a5813c2d276563432e74b8cf32c77660d2e1fd09563fea00e34a5729894fbcf424e010b0efda3c8e", 0xd3c9, 0x800, 0x200}, 0x3) unshare$auto(0x6) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040005) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r7, 0x4c80, 0xfffffffffffffffd) 768.499157ms ago: executing program 0 (id=109): mmap$auto(0x5c, 0x2000d, 0x4000000000df, 0xeb0, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0xf610, 0x2, 0x8003) unshare$auto(0x40000080) bpf$auto(0x5, &(0x7f0000001180)=@link_update={0xffffffffffffffff, @new_prog_fd=0xffffffffffffffff, 0xf, @old_map_fd}, 0x80000007) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0x200, 0x9, 0x3, 0x6, 0x4, 0x7, 0x9, 0x8000009, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2080, 0x203, 0x0, 0x20e9d181, 0x400300000000000, 0xdb, 0x3, 0x6, 0xf04, [0xfffffffffffffffe, 0x4, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x2, 0x6, 0x66, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x8f, 0x10000, 0x8000000, 0x7, 0x0, 0x1, 0xfffffffefffffffd, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x1, 0x100000001, 0x0, 0x0, 0xfffffffffffffffb, 0x10, 0x0, 0x0, 0x20000, 0x0, 0x1, 0xff, 0x80, 0x8c]}, 0x2, 0x800000d) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x147) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x9, 0x15f4da07, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=&(0x7f0000000180)="709bc6c9e3065f04b9f1373c3ffc3684426368a039f3aa960ab8176bf0542ba2368fcc0de90ea2d923fa424a9c5a32666043048c5591dee593e4d0f4e7303491eb4c8c0c70d5d17fef73ac", 0x0, 0x8000, 0x403000}, 0x4) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000100)='\x00', &(0x7f00000001c0)="3b4ec31ec0f99f7204157cf35a18ec5deee46d8199213352d586fa8f5221aba1444d24903f49bc1dae1d817f5dcd6aa4ecd33b62cc5abe6ef526851713c0cffa477ac0f9c3a30e7adf8bcbbfb8c0b164dfc1c5c35a14dce07e769daa726b15cbfbefc1c4a262de7b4141b435c73f4b47ede2e0369ce0edab9f7d3b2e1c35b8f3eff4e58144bdfb99e2956f8b262b81bce85d444857ba046847ea751e661795273ce6e1d428f028647118e3f94cdc3c3e8cc3db83a9362f6551e64476b7ae65cc1aab7b59e5206a", 0x0) r2 = semctl$auto_GETPID(0x5, 0x80000001, 0xb, 0x5) msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f00000013c0)={{0x1ff, 0x0, 0x0, 0x6, 0x9, 0x1, 0x7}, &(0x7f0000001340)=0x9, &(0x7f0000001380)=0x40, 0x8, 0x1, 0x5, 0x7, 0xb, 0x101, 0x7ff, 0x2, @raw=0x5, @inferred=r2}) 493.1042ms ago: executing program 2 (id=110): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x6a) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) rt_sigpending$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, 0x0, 0x40) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x100000}) 287.078653ms ago: executing program 3 (id=111): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x4, 0x9c07, 0x9b72, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) creat$auto(&(0x7f0000000040)='./file0\x00', 0x6) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/queues\x00', 0x82, 0x0) read$auto(r1, 0x0, 0x84) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x119401, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf251f000000080021005f00000008002c00c100000023eb02002f7379732f6b65726e656c2f64656275672f626c7565746f6f74682f73636f000c001700000800000000000005001a00040000000500290001000000"], 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x804) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f0000000440)=@bpf_attr_7={@link_id=0x1, 0xffff, 0x9, 0xffffffffffffffff}, 0xb9f) r5 = setfsuid$auto(0xffffffffffffffff) setpriority$auto_PRIO_USER(0x2, r5, 0x81) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000000780)={{0x4, r5, 0xffffffffffffffff, 0x7e7, 0x0, 0x7}, 0xffff5049, 0x81, 0x200, 0x81, @raw=0x8, @raw=0x5, 0x6, 0x0, &(0x7f0000000680), &(0x7f0000000700)="702cd3d6f4c7d12ece89d98d5bb588d457c6d3becbf886ea2af0f2245775ae0a5e5272fd8dbaf28b475e82dc4c9507811297cfcbcb9af20224c9b1703826cc64002fb13e71aa2ef2287e1cb0b98207032bfa8a9fe87a7ac9dbabfdddbbe058903a7d0d00242bed00db4081a1cc258f"}) setpriority$auto_PRIO_USER(0x2, r6, 0x2) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000940)={{0x0, r5, r7, 0x3cc0b025, 0x8, 0x7f, 0x4}, 0x4d, 0x6, 0x5, 0xb1e2, @raw, @raw=0x4, 0x5, 0x0, &(0x7f0000000800)="b44ccefec0ae3d7ecfffaf638d451d3aa7fdcd3f59dfe8031542aadb800a861d0cb9869fe6b956e87f6c96f05239bab1fe5ba0e5d1af574290b79aa04bde4ca78d660b3faec5da3b1bc191ce720176577762351875ebb6fe918361da3e87de19b7653d2e5fd4c9e63f3bdd83edcc5690ac6a1d4c186d6b4366f2dc0265cfac5450c4da851603c57927d0d16684380abb0bfca8c6ab920db85673ea3460ad2059053c2ed59627dacbc190abac48ded6bbf3336d91ead92a3462824e2d46cfc6ebe3542f07e58c1e7d3e3536716c782db32f6d7a7db55f54a1f1743ee3b5ab2aba6760aee142723169249e19476fe601b19b6ee47590", &(0x7f0000000900)="6cc3cb0a2ece5c00"}) ioprio_get$auto_IOPRIO_WHO_USER(0x3, r8) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r2, 0x10, &(0x7f00000009c0)={@_si_pad}, 0x1) io_submit$auto(0x100000000, 0x1000, &(0x7f0000000a80)=&(0x7f0000000a40)={0x4f, 0x8, 0xfffffff9, 0x5, 0xff, r4, 0x4, 0x1, 0x0, 0x0, 0x10000, r2}) acct$auto(&(0x7f0000000ac0)='\xea$#%T\x00') getsockopt$auto_SO_PEERCRED(r4, 0x81, 0x11, &(0x7f0000000b40)='/dev/snd/controlC2\x00', &(0x7f0000000b80)=0x9) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7a3e}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=112): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r1, r1, 0x0, 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f0000000080)) close_range$auto(0x2, 0xa, 0x0) read$auto(r0, 0x0, 0x9a28) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x2400, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000200)=""/225, 0xe1) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime$auto(0x10, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 75.532356][ T5619] cgroup: Unknown subsys name 'net' [ 75.663323][ T5619] cgroup: Unknown subsys name 'cpuset' [ 75.672171][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.135783][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.986383][ T4949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.008787][ T4949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.017650][ T4949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.028971][ T4949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.036832][ T4949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.089017][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.098353][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.106826][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.114929][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.123211][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.146006][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.157464][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.177396][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.185978][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.194930][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.202096][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.211177][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.218945][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.229644][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.239189][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.668986][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.676233][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.683706][ T5630] bridge_slave_0: entered allmulticast mode [ 80.690912][ T5630] bridge_slave_0: entered promiscuous mode [ 80.735430][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.742668][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.750056][ T5630] bridge_slave_1: entered allmulticast mode [ 80.757243][ T5630] bridge_slave_1: entered promiscuous mode [ 80.772850][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.780171][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.787374][ T5639] bridge_slave_0: entered allmulticast mode [ 80.794707][ T5639] bridge_slave_0: entered promiscuous mode [ 80.802792][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.810820][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.818020][ T5639] bridge_slave_1: entered allmulticast mode [ 80.825073][ T5639] bridge_slave_1: entered promiscuous mode [ 80.864754][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.872028][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.879551][ T5634] bridge_slave_0: entered allmulticast mode [ 80.886526][ T5634] bridge_slave_0: entered promiscuous mode [ 80.918638][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925827][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.933245][ T5634] bridge_slave_1: entered allmulticast mode [ 80.941373][ T5634] bridge_slave_1: entered promiscuous mode [ 80.951166][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.968098][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.989007][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.009472][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.057535][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.076006][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.083282][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.090705][ T5638] bridge_slave_0: entered allmulticast mode [ 81.097668][ T5638] bridge_slave_0: entered promiscuous mode [ 81.104093][ T5640] Bluetooth: hci0: command tx timeout [ 81.119271][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.130456][ T5630] team0: Port device team_slave_0 added [ 81.136352][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.143630][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.150888][ T5638] bridge_slave_1: entered allmulticast mode [ 81.157868][ T5638] bridge_slave_1: entered promiscuous mode [ 81.167438][ T5639] team0: Port device team_slave_0 added [ 81.178592][ T5640] Bluetooth: hci1: command tx timeout [ 81.187303][ T5630] team0: Port device team_slave_1 added [ 81.203672][ T5639] team0: Port device team_slave_1 added [ 81.251054][ T5634] team0: Port device team_slave_0 added [ 81.258999][ T5640] Bluetooth: hci2: command tx timeout [ 81.271677][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.296025][ T5634] team0: Port device team_slave_1 added [ 81.302686][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.309985][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.336215][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.347557][ T5640] Bluetooth: hci3: command tx timeout [ 81.356185][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.366193][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.373424][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.399387][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.419672][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.426724][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.452905][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.474738][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.481879][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.508733][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.552807][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.559878][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.587209][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.601424][ T5638] team0: Port device team_slave_0 added [ 81.610418][ T5638] team0: Port device team_slave_1 added [ 81.618203][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.625214][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.651550][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.738780][ T5630] hsr_slave_0: entered promiscuous mode [ 81.745818][ T5630] hsr_slave_1: entered promiscuous mode [ 81.758175][ T5639] hsr_slave_0: entered promiscuous mode [ 81.764521][ T5639] hsr_slave_1: entered promiscuous mode [ 81.771304][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 81.777132][ T5639] Cannot create hsr debugfs directory [ 81.783853][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.791263][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.817565][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.850542][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.857605][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.883653][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.908982][ T5634] hsr_slave_0: entered promiscuous mode [ 81.915215][ T5634] hsr_slave_1: entered promiscuous mode [ 81.921598][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 81.927332][ T5634] Cannot create hsr debugfs directory [ 82.051434][ T5638] hsr_slave_0: entered promiscuous mode [ 82.057692][ T5638] hsr_slave_1: entered promiscuous mode [ 82.064190][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 82.070249][ T5638] Cannot create hsr debugfs directory [ 82.435343][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.450779][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.460117][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.470970][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.478859][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.489041][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.496879][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.506201][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.581275][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.593958][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.607518][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.617994][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.627063][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.639671][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.647911][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.657689][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.755028][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.770749][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.789244][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.800220][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.808854][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.818230][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.826380][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.835578][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.930324][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.942322][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.955816][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.965544][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.975647][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.988806][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.998171][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.006264][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.015820][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.084662][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.114610][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.122223][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.154814][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.165836][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.172985][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.180455][ T5640] Bluetooth: hci0: command tx timeout [ 83.255413][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.269455][ T5640] Bluetooth: hci1: command tx timeout [ 83.289797][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.296925][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.317537][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.339037][ T5640] Bluetooth: hci2: command tx timeout [ 83.349769][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.356909][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.420103][ T5640] Bluetooth: hci3: command tx timeout [ 83.432825][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.446565][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.489426][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.496581][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.514679][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.521821][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.547185][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.601154][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.608367][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.647454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.654723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.391997][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.545123][ T5639] veth0_vlan: entered promiscuous mode [ 84.566938][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.611377][ T5639] veth1_vlan: entered promiscuous mode [ 84.754052][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.802337][ T5639] veth0_macvtap: entered promiscuous mode [ 84.821576][ T5630] veth0_vlan: entered promiscuous mode [ 84.831686][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.847216][ T5639] veth1_macvtap: entered promiscuous mode [ 84.867570][ T5630] veth1_vlan: entered promiscuous mode [ 84.943490][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.963159][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.980486][ T5634] veth0_vlan: entered promiscuous mode [ 84.992756][ T5638] veth0_vlan: entered promiscuous mode [ 85.012660][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.023052][ T1173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.033451][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.052038][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062396][ T5634] veth1_vlan: entered promiscuous mode [ 85.071699][ T5630] veth0_macvtap: entered promiscuous mode [ 85.080924][ T5638] veth1_vlan: entered promiscuous mode [ 85.098466][ T5630] veth1_macvtap: entered promiscuous mode [ 85.208023][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.237351][ T5638] veth0_macvtap: entered promiscuous mode [ 85.256519][ T5634] veth0_macvtap: entered promiscuous mode [ 85.263654][ T5640] Bluetooth: hci0: command tx timeout [ 85.273834][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.284063][ T5638] veth1_macvtap: entered promiscuous mode [ 85.294559][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.307534][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.312952][ T5634] veth1_macvtap: entered promiscuous mode [ 85.338754][ T5640] Bluetooth: hci1: command tx timeout [ 85.349647][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.361151][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.391242][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.400202][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417264][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.427120][ T5640] Bluetooth: hci2: command tx timeout [ 85.435466][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.461529][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.482969][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.499131][ T5640] Bluetooth: hci3: command tx timeout [ 85.513136][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.526335][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.553179][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.592490][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601827][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.614714][ T1173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.635715][ T1173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.665629][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680111][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.717292][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.757863][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787893][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.824172][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.907441][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.920418][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.010229][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.031799][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.116778][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.132341][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.147793][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.165282][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.263098][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.263137][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.444737][ T5786] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.665211][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.847977][ T5791] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.257321][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.321429][ T5806] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 87.343838][ T5640] Bluetooth: hci0: command tx timeout [ 87.344619][ T5806] netlink: 36629 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.419730][ T5640] Bluetooth: hci1: command tx timeout [ 87.498527][ T5640] Bluetooth: hci2: command tx timeout [ 87.579465][ T5640] Bluetooth: hci3: command tx timeout [ 87.634748][ T5802] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 88.356647][ T5821] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "3DƎ-k| ;w3|Dn9\x0db/6+-LH^֠cVt*9fL0=E\x1bG9Rnm+*ًY~{yo޳3n<2p>KGf*R(k[`ePVq{\x0aP\x22\x093+PhZb9:Xwd?14?a5\x22-ZՏP{3/P{V$@[dk3BHO-6B\x09Ľ8̀!dhQ/dpaޖ,@\x09Q\x0a9\x1bOv|+MC)A\x0d48\x5cyW$6o#I|\x09؃D\x0c\x0b$MQ|s((OaEpN4fv!\x07ekI煌C$=B:$~TYkMuQyPӊ!%Ʋ!)\x0c t\x0c+h&݂t[JFa5@ex7ֱ\x0aE}5y0p]%jp[UY+xۭwJ#)Ik7~AvgꏭzDs~L2)7-#8_mdJc^T'Aotm\x093$~ںW#z_\x07f>V8ykЛI\x09A\x074.Hϲ'\x0b4 0ML Y%'(Z8+Pjkp/Vϓ_Q#g$13\x22lw$7Fd'剟WE\ [ 89.039769][ T1173] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.229467][ T1173] netdevsim netdevsim1335 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.277127][ T1173] netdevsim netdevsim1335 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.358551][ T1173] netdevsim netdevsim1335 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.385972][ T1173] netdevsim netdevsim1335 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.447231][ T1173] netdevsim netdevsim1335 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726172][ T1173] netdevsim netdevsim1335 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.828229][ T4345] netdevsim netdevsim1335 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.927522][ T5815] Process accounting resumed [ 89.962174][ T4345] netdevsim netdevsim1335 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337412][ T5833] Zero length message leads to an empty skb [ 90.488165][ T5847] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.615013][ T5847] process 'syz.1.16' launched ':,' with NULL argv: empty string added [ 90.810656][ T5856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 90.883948][ T5856] ipvlan1: entered promiscuous mode [ 90.920518][ T5856] ipvlan1: entered allmulticast mode [ 90.926364][ T5856] veth0_vlan: entered allmulticast mode [ 91.231822][ T5859] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.265164][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.290860][ T5859] netlink: 354 bytes leftover after parsing attributes in process `syz.0.19'. [ 91.375142][ T997] cfg80211: failed to load regulatory.db [ 91.532830][ T5861] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 91.540251][ T5861] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 91.594938][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 91.621034][ T5861] hsr_slave_0: left promiscuous mode [ 91.638117][ T5861] hsr_slave_1: left promiscuous mode [ 91.997814][ T5854] kexec: Could not allocate control_code_buffer [ 92.282643][ T5876] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 92.306419][ T5876] netlink: 9 bytes leftover after parsing attributes in process `syz.3.26'. [ 92.710682][ T5885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.743571][ T5885] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.797728][ T5885] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 92.826575][ T5885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.848407][ T5885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.879437][ T5885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.914643][ T5885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.935596][ T5885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 92.963727][ T5885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.011683][ T5885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.042932][ T5885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.068524][ T5885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.425009][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 93.440880][ T5893] netlink: 25 bytes leftover after parsing attributes in process `syz.3.29'. [ 94.130406][ T5906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.663614][ T5917] tipc: Started in network mode [ 94.685584][ T5917] tipc: Node identity ee00, cluster identity 4711 [ 94.704348][ T5917] tipc: Node number set to 60928 [ 94.778936][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.859034][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.911668][ T5640] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 94.939918][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.018626][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.791189][ T5912] mmap: syz.0.33 (5912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.939801][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.018900][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.103635][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.487966][ T5955] FAULT_INJECTION: forcing a failure. [ 97.487966][ T5955] name failslab, interval 1, probability 0, space 0, times 1 [ 97.527659][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(full) [ 97.527697][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.527718][ T5955] Call Trace: [ 97.527727][ T5955] [ 97.527737][ T5955] dump_stack_lvl+0x100/0x190 [ 97.527790][ T5955] should_fail_ex.cold+0x5/0xa [ 97.527824][ T5955] should_failslab+0xc2/0x120 [ 97.527860][ T5955] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 97.527915][ T5955] ? copy_process+0x2c51/0x7ed0 [ 97.527948][ T5955] ? rcu_is_watching+0x12/0xc0 [ 97.527982][ T5955] copy_process+0x2c51/0x7ed0 [ 97.528015][ T5955] ? __futex_wait+0x256/0x300 [ 97.528064][ T5955] ? __pfx_copy_process+0x10/0x10 [ 97.528107][ T5955] ? futex_hash+0x141/0x370 [ 97.528159][ T5955] kernel_clone+0x176/0x9e0 [ 97.528195][ T5955] ? __pfx_futex_wait+0x10/0x10 [ 97.528228][ T5955] ? kernel_wait4+0x1d6/0x280 [ 97.528274][ T5955] ? __pfx_kernel_clone+0x10/0x10 [ 97.528331][ T5955] __do_sys_clone+0xd9/0x120 [ 97.528370][ T5955] ? __pfx___do_sys_clone+0x10/0x10 [ 97.528431][ T5955] ? rcu_is_watching+0x12/0xc0 [ 97.528464][ T5955] do_syscall_64+0x115/0x840 [ 97.528501][ T5955] ? clear_bhb_loop+0x40/0x90 [ 97.528535][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.528563][ T5955] RIP: 0033:0x7f59ac39ce59 [ 97.528585][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.528612][ T5955] RSP: 002b:00007f59ad23d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 97.528641][ T5955] RAX: ffffffffffffffda RBX: 00007f59ac616090 RCX: 00007f59ac39ce59 [ 97.528660][ T5955] RDX: 0000200000000380 RSI: fffffffffffffc4d RDI: 0000000000000002 [ 97.528678][ T5955] RBP: 00007f59ac432d6f R08: 0000000000000000 R09: 0000000000000000 [ 97.528695][ T5955] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.528711][ T5955] R13: 00007f59ac616128 R14: 00007f59ac616090 R15: 00007fff75e5ec58 [ 97.528748][ T5955] [ 99.021692][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.098647][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.178620][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.465117][ T29] audit: type=1800 audit(1780190736.652:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.45" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 101.827263][ T6014] FAULT_INJECTION: forcing a failure. [ 101.827263][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 101.855608][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 101.855647][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.855664][ T6014] Call Trace: [ 101.855673][ T6014] [ 101.855684][ T6014] dump_stack_lvl+0x100/0x190 [ 101.855739][ T6014] should_fail_ex.cold+0x5/0xa [ 101.855777][ T6014] should_failslab+0xc2/0x120 [ 101.855812][ T6014] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 101.855857][ T6014] ? ptlock_alloc+0x1f/0x70 [ 101.855904][ T6014] ptlock_alloc+0x1f/0x70 [ 101.855945][ T6014] pte_alloc_one+0x82/0x3d0 [ 101.855986][ T6014] __pte_alloc+0x6d/0x380 [ 101.856020][ T6014] ? __pfx___pte_alloc+0x10/0x10 [ 101.856053][ T6014] ? _raw_spin_unlock+0x28/0x50 [ 101.856084][ T6014] ? __pmd_alloc+0x3fb/0x950 [ 101.856120][ T6014] copy_page_range+0x3dd8/0x5b20 [ 101.856178][ T6014] ? find_held_lock+0x2b/0x80 [ 101.856234][ T6014] ? mas_wr_store_entry+0xa1/0x1e80 [ 101.856282][ T6014] ? __pfx_copy_page_range+0x10/0x10 [ 101.856333][ T6014] ? mas_store+0x666/0xac0 [ 101.856389][ T6014] ? __pfx_mas_store+0x10/0x10 [ 101.856445][ T6014] ? __pfx___vma_start_write+0x10/0x10 [ 101.856494][ T6014] dup_mmap+0xd44/0x21b0 [ 101.856548][ T6014] ? __pfx_dup_mmap+0x10/0x10 [ 101.856584][ T6014] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.856622][ T6014] ? __lock_acquire+0x4a5/0x2630 [ 101.856661][ T6014] ? find_held_lock+0x2b/0x80 [ 101.856693][ T6014] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 101.856766][ T6014] copy_process+0x6c78/0x7ed0 [ 101.856824][ T6014] ? __pfx_copy_process+0x10/0x10 [ 101.856861][ T6014] ? find_held_lock+0x2b/0x80 [ 101.856900][ T6014] ? futex_private_hash_put+0x107/0x1c0 [ 101.856952][ T6014] kernel_clone+0x176/0x9e0 [ 101.856993][ T6014] ? __pfx_kernel_clone+0x10/0x10 [ 101.857052][ T6014] __do_sys_clone+0xd9/0x120 [ 101.857094][ T6014] ? __pfx___do_sys_clone+0x10/0x10 [ 101.857132][ T6014] ? fd_install+0x24f/0x580 [ 101.857186][ T6014] ? rcu_is_watching+0x12/0xc0 [ 101.857222][ T6014] do_syscall_64+0x115/0x840 [ 101.857258][ T6014] ? clear_bhb_loop+0x40/0x90 [ 101.857293][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.857321][ T6014] RIP: 0033:0x7f4ed9f9ce59 [ 101.857344][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.857388][ T6014] RSP: 002b:00007f4edadcbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 101.857415][ T6014] RAX: ffffffffffffffda RBX: 00007f4eda216180 RCX: 00007f4ed9f9ce59 [ 101.857434][ T6014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 101.857450][ T6014] RBP: 00007f4eda032d6f R08: 0000000000000000 R09: 0000000000000000 [ 101.857466][ T6014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.857482][ T6014] R13: 00007f4eda216218 R14: 00007f4eda216180 R15: 00007ffc5b3f4c08 [ 101.857520][ T6014] [ 103.153608][ T6023] FAULT_INJECTION: forcing a failure. [ 103.153608][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 103.179191][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT(full) [ 103.179232][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.179249][ T6023] Call Trace: [ 103.179258][ T6023] [ 103.179269][ T6023] dump_stack_lvl+0x100/0x190 [ 103.179322][ T6023] should_fail_ex.cold+0x5/0xa [ 103.179361][ T6023] should_failslab+0xc2/0x120 [ 103.179395][ T6023] __kvmalloc_node_noprof+0xfa/0xa00 [ 103.179423][ T6023] ? bucket_table_alloc.isra.0+0x88/0x460 [ 103.179469][ T6023] bucket_table_alloc.isra.0+0x88/0x460 [ 103.179506][ T6023] rhashtable_init_noprof+0x43b/0x890 [ 103.179544][ T6023] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 103.179587][ T6023] rhltable_init_noprof+0x20/0x60 [ 103.179621][ T6023] mr_table_alloc+0x121/0x3e0 [ 103.179657][ T6023] ? __pfx_ipmr_expire_process+0x10/0x10 [ 103.179704][ T6023] ip6mr_net_init+0x341/0x4d0 [ 103.179730][ T6023] ? __pfx_ip6mr_net_init+0x10/0x10 [ 103.179754][ T6023] ops_init+0x1e2/0x5f0 [ 103.179787][ T6023] setup_net+0x118/0x3a0 [ 103.179819][ T6023] ? __pfx_setup_net+0x10/0x10 [ 103.179858][ T6023] ? mutex_init_lockdep+0xf1/0x120 [ 103.179895][ T6023] copy_net_ns+0x46f/0x7c0 [ 103.179933][ T6023] create_new_namespaces+0x3ea/0xac0 [ 103.179977][ T6023] unshare_nsproxy_namespaces+0xf2/0x220 [ 103.180016][ T6023] ksys_unshare+0x438/0xab0 [ 103.180056][ T6023] ? __pfx_ksys_unshare+0x10/0x10 [ 103.180093][ T6023] ? xfd_validate_state+0x129/0x190 [ 103.180120][ T6023] ? exit_to_user_mode_loop+0xf3/0x670 [ 103.180177][ T6023] __x64_sys_unshare+0x31/0x40 [ 103.180217][ T6023] do_syscall_64+0x115/0x840 [ 103.180260][ T6023] ? clear_bhb_loop+0x40/0x90 [ 103.180296][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.180324][ T6023] RIP: 0033:0x7fef79f9ce59 [ 103.180347][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.180373][ T6023] RSP: 002b:00007fef7ade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.180402][ T6023] RAX: ffffffffffffffda RBX: 00007fef7a215fa0 RCX: 00007fef79f9ce59 [ 103.180420][ T6023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 103.180437][ T6023] RBP: 00007fef7a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 103.180454][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.180470][ T6023] R13: 00007fef7a216038 R14: 00007fef7a215fa0 R15: 00007ffc3a361f98 [ 103.180508][ T6023] [ 103.854179][ T6029] kafs: addr_prefs: Invalid Command [ 104.034629][ T6042] vivid-008: ================= START STATUS ================= [ 104.057480][ T6042] vivid-008: ================== END STATUS ================== [ 106.134534][ T29] audit: type=1400 audit(1780190743.322:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6067 comm="syz.3.65" [ 107.449741][ T6093] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 107.682220][ T6095] FAULT_INJECTION: forcing a failure. [ 107.682220][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 107.728331][ T6092] NFSD: Failed to start, no listeners configured. [ 107.755683][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 107.755722][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.755738][ T6095] Call Trace: [ 107.755747][ T6095] [ 107.755756][ T6095] dump_stack_lvl+0x100/0x190 [ 107.755806][ T6095] should_fail_ex.cold+0x5/0xa [ 107.755841][ T6095] should_failslab+0xc2/0x120 [ 107.755886][ T6095] __kmalloc_cache_noprof+0x7a/0x6f0 [ 107.755927][ T6095] ? ima_add_digest_entry+0x52/0x520 [ 107.755982][ T6095] ima_add_digest_entry+0x52/0x520 [ 107.756032][ T6095] ima_add_template_entry+0x442/0x800 [ 107.756084][ T6095] ? __pfx_ima_add_template_entry+0x10/0x10 [ 107.756130][ T6095] ? ima_calc_field_array_hash+0x378/0x440 [ 107.756163][ T6095] ima_store_template+0xda/0x150 [ 107.756196][ T6095] ima_store_measurement+0x21c/0x5b0 [ 107.756230][ T6095] ? __pfx_ima_store_measurement+0x10/0x10 [ 107.756276][ T6095] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 107.756341][ T6095] process_measurement+0x19cc/0x2350 [ 107.756379][ T6095] ? lock_acquire+0x1b1/0x370 [ 107.756419][ T6095] ? __pfx_process_measurement+0x10/0x10 [ 107.756449][ T6095] ? rcu_is_watching+0x12/0xc0 [ 107.756484][ T6095] ? __mutex_lock+0x26d/0x1b10 [ 107.756522][ T6095] ? trace_array_get+0x10c/0x140 [ 107.756588][ T6095] ? trace_array_get+0x10c/0x140 [ 107.756627][ T6095] ima_file_check+0xcc/0x120 [ 107.756655][ T6095] ? __pfx_ima_file_check+0x10/0x10 [ 107.756692][ T6095] security_file_post_open+0xc4/0x210 [ 107.756725][ T6095] path_openat+0x1418/0x31a0 [ 107.756769][ T6095] ? __pfx_path_openat+0x10/0x10 [ 107.756813][ T6095] do_file_open+0x20e/0x430 [ 107.756848][ T6095] ? __pfx_do_file_open+0x10/0x10 [ 107.756912][ T6095] ? alloc_fd+0x476/0x790 [ 107.756948][ T6095] ? do_getname+0x191/0x390 [ 107.756989][ T6095] do_sys_openat2+0x10d/0x1e0 [ 107.757029][ T6095] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.757069][ T6095] ? find_held_lock+0x2b/0x80 [ 107.757108][ T6095] __x64_sys_openat+0x12d/0x210 [ 107.757147][ T6095] ? __pfx___x64_sys_openat+0x10/0x10 [ 107.757192][ T6095] ? rcu_is_watching+0x12/0xc0 [ 107.757225][ T6095] do_syscall_64+0x115/0x840 [ 107.757259][ T6095] ? clear_bhb_loop+0x40/0x90 [ 107.757290][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.757316][ T6095] RIP: 0033:0x7fef79f9ce59 [ 107.757338][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.757361][ T6095] RSP: 002b:00007fef7ade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.757386][ T6095] RAX: ffffffffffffffda RBX: 00007fef7a215fa0 RCX: 00007fef79f9ce59 [ 107.757404][ T6095] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 107.757421][ T6095] RBP: 00007fef7a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 107.757436][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.757452][ T6095] R13: 00007fef7a216038 R14: 00007fef7a215fa0 R15: 00007ffc3a361f98 [ 107.757486][ T6095] [ 108.092597][ T6095] ima: OUT OF MEMORY ERROR creating queue entry [ 108.209008][ T29] audit: type=1804 audit(1780190745.292:4): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.70" name="/newroot/sys/kernel/debug/tracing/trace_marker" dev="tracefs" ino=232 res=0 errno=0 [ 108.832216][ T6098] FAULT_INJECTION: forcing a failure. [ 108.832216][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 108.880344][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) [ 108.880382][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.880399][ T6098] Call Trace: [ 108.880408][ T6098] [ 108.880418][ T6098] dump_stack_lvl+0x100/0x190 [ 108.880473][ T6098] should_fail_ex.cold+0x5/0xa [ 108.880510][ T6098] should_failslab+0xc2/0x120 [ 108.880545][ T6098] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 108.880589][ T6098] ? __proc_create+0x2cb/0x8c0 [ 108.880633][ T6098] __proc_create+0x2cb/0x8c0 [ 108.880670][ T6098] ? __pfx___proc_create+0x10/0x10 [ 108.880703][ T6098] ? __lock_acquire+0x4a5/0x2630 [ 108.880761][ T6098] proc_mkdir+0x81/0x170 [ 108.880797][ T6098] ? __pfx_proc_mkdir+0x10/0x10 [ 108.880834][ T6098] ? find_held_lock+0x2b/0x80 [ 108.880867][ T6098] ? bond_net_init+0xfa/0x360 [ 108.880908][ T6098] ? bond_net_init+0xfa/0x360 [ 108.880952][ T6098] bond_create_proc_dir+0xa2/0x110 [ 108.880998][ T6098] bond_net_init+0x170/0x360 [ 108.881040][ T6098] ? __pfx_bond_net_init+0x10/0x10 [ 108.881077][ T6098] ops_init+0x1e2/0x5f0 [ 108.881112][ T6098] setup_net+0x118/0x3a0 [ 108.881144][ T6098] ? __pfx_setup_net+0x10/0x10 [ 108.881174][ T6098] ? mutex_init_lockdep+0xf1/0x120 [ 108.881208][ T6098] copy_net_ns+0x46f/0x7c0 [ 108.881245][ T6098] create_new_namespaces+0x3ea/0xac0 [ 108.881288][ T6098] unshare_nsproxy_namespaces+0xf2/0x220 [ 108.881334][ T6098] ksys_unshare+0x438/0xab0 [ 108.881377][ T6098] ? __pfx_ksys_unshare+0x10/0x10 [ 108.881416][ T6098] ? xfd_validate_state+0x129/0x190 [ 108.881458][ T6098] __x64_sys_unshare+0x31/0x40 [ 108.881496][ T6098] do_syscall_64+0x115/0x840 [ 108.881534][ T6098] ? clear_bhb_loop+0x40/0x90 [ 108.881567][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.881595][ T6098] RIP: 0033:0x7fef79f9ce59 [ 108.881617][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.881643][ T6098] RSP: 002b:00007fef7ade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.881669][ T6098] RAX: ffffffffffffffda RBX: 00007fef7a215fa0 RCX: 00007fef79f9ce59 [ 108.881688][ T6098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 108.881708][ T6098] RBP: 00007fef7a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 108.881723][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.881739][ T6098] R13: 00007fef7a216038 R14: 00007fef7a215fa0 R15: 00007ffc3a361f98 [ 108.881776][ T6098] [ 109.148472][ T6098] Warning: Cannot create /proc/net/bonding [ 109.265403][ T6076] Process accounting resumed [ 110.715594][ T6131] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 110.828387][ T6129] FAULT_INJECTION: forcing a failure. [ 110.828387][ T6129] name failslab, interval 1, probability 0, space 0, times 0 [ 110.911291][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.1.76 Not tainted syzkaller #0 PREEMPT(full) [ 110.911334][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.911348][ T6129] Call Trace: [ 110.911357][ T6129] [ 110.911368][ T6129] dump_stack_lvl+0x100/0x190 [ 110.911423][ T6129] should_fail_ex.cold+0x5/0xa [ 110.911458][ T6129] ? __list_lru_init+0xd9/0x4b0 [ 110.911502][ T6129] should_failslab+0xc2/0x120 [ 110.911544][ T6129] __kmalloc_noprof+0xe0/0x850 [ 110.911587][ T6129] ? lockdep_init_map_type+0x5c/0x250 [ 110.911639][ T6129] __list_lru_init+0xd9/0x4b0 [ 110.911687][ T6129] alloc_super+0x8d8/0xd20 [ 110.911722][ T6129] ? __pfx_mqueue_fill_super+0x10/0x10 [ 110.911767][ T6129] sget_fc+0x117/0xc70 [ 110.911797][ T6129] ? __pfx_set_anon_super_fc+0x10/0x10 [ 110.911828][ T6129] ? __pfx_mqueue_fill_super+0x10/0x10 [ 110.911871][ T6129] get_tree_nodev+0x28/0x190 [ 110.911904][ T6129] mqueue_get_tree+0xf1/0x130 [ 110.911948][ T6129] vfs_get_tree+0x92/0x320 [ 110.911976][ T6129] fc_mount_longterm+0x1a/0x270 [ 110.912007][ T6129] mq_init_ns+0x482/0x820 [ 110.912041][ T6129] copy_ipcs+0x3dd/0x7e0 [ 110.912075][ T6129] create_new_namespaces+0x20a/0xac0 [ 110.912110][ T6129] ? security_capable+0x80/0x260 [ 110.912143][ T6129] unshare_nsproxy_namespaces+0xf2/0x220 [ 110.912182][ T6129] ksys_unshare+0x438/0xab0 [ 110.912224][ T6129] ? __pfx_ksys_unshare+0x10/0x10 [ 110.912262][ T6129] ? xfd_validate_state+0x129/0x190 [ 110.912303][ T6129] __x64_sys_unshare+0x31/0x40 [ 110.912343][ T6129] do_syscall_64+0x115/0x840 [ 110.912382][ T6129] ? clear_bhb_loop+0x40/0x90 [ 110.912417][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.912446][ T6129] RIP: 0033:0x7fef79f9ce59 [ 110.912470][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.912496][ T6129] RSP: 002b:00007fef7ade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.912522][ T6129] RAX: ffffffffffffffda RBX: 00007fef7a215fa0 RCX: 00007fef79f9ce59 [ 110.912548][ T6129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 110.912565][ T6129] RBP: 00007fef7a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 110.912582][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.912599][ T6129] R13: 00007fef7a216038 R14: 00007fef7a215fa0 R15: 00007ffc3a361f98 [ 110.912638][ T6129] [ 112.110443][ T5640] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 113.033959][ T6145] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 113.075106][ T6145] random: crng reseeded on system resumption [ 113.208519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.558059][ T6170] FAULT_INJECTION: forcing a failure. [ 113.558059][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 113.591281][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(full) [ 113.591324][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.591342][ T6170] Call Trace: [ 113.591352][ T6170] [ 113.591363][ T6170] dump_stack_lvl+0x100/0x190 [ 113.591419][ T6170] should_fail_ex.cold+0x5/0xa [ 113.591457][ T6170] should_failslab+0xc2/0x120 [ 113.591492][ T6170] __kvmalloc_node_noprof+0xfa/0xa00 [ 113.591521][ T6170] ? alloc_shrinker_info+0xf0/0x470 [ 113.591559][ T6170] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 113.591607][ T6170] alloc_shrinker_info+0xf0/0x470 [ 113.591645][ T6170] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 113.591692][ T6170] mem_cgroup_css_online+0xa4/0xbf0 [ 113.591743][ T6170] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 113.591790][ T6170] online_css+0xb2/0x350 [ 113.591824][ T6170] cgroup_apply_control_enable+0xa8d/0xdd0 [ 113.591877][ T6170] cgroup_mkdir+0x59c/0x1310 [ 113.591925][ T6170] ? __pfx_cgroup_mkdir+0x10/0x10 [ 113.591961][ T6170] kernfs_iop_mkdir+0x111/0x190 [ 113.591991][ T6170] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 113.592030][ T6170] vfs_mkdir+0x361/0x850 [ 113.592078][ T6170] filename_mkdirat+0x48b/0x5e0 [ 113.592118][ T6170] ? __pfx_filename_mkdirat+0x10/0x10 [ 113.592155][ T6170] ? strncpy_from_user+0x19d/0x2d0 [ 113.592200][ T6170] ? do_getname+0x191/0x390 [ 113.592244][ T6170] __x64_sys_mkdir+0x6b/0x90 [ 113.592291][ T6170] do_syscall_64+0x115/0x840 [ 113.592331][ T6170] ? clear_bhb_loop+0x40/0x90 [ 113.592366][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.592396][ T6170] RIP: 0033:0x7fef79f9ce59 [ 113.592421][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.592449][ T6170] RSP: 002b:00007fef7ade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 113.592477][ T6170] RAX: ffffffffffffffda RBX: 00007fef7a215fa0 RCX: 00007fef79f9ce59 [ 113.592496][ T6170] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 113.592514][ T6170] RBP: 00007fef7a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 113.592531][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.592547][ T6170] R13: 00007fef7a216038 R14: 00007fef7a215fa0 R15: 00007ffc3a361f98 [ 113.592588][ T6170] [ 113.959904][ T6177] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.86'. [ 114.068722][ T6180] random: crng reseeded on system resumption [ 114.140198][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.621632][ T6189] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 114.634199][ T6189] File: /dev/nullb0 PID: 6189 Comm: syz.3.89 [ 115.889625][ T6208] bond0: invalid ARP target specified [ 116.015529][ T6208] nbd: socks must be embedded in a SOCK_ITEM attr [ 116.089399][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'. [ 116.102614][ T6208] block nbd0: shutting down sockets [ 116.183846][ T6209] team0 (unregistering): Port device team_slave_0 removed [ 116.218766][ T4949] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.237146][ T6209] team0 (unregistering): Port device team_slave_1 removed [ 117.010451][ T6200] Process accounting resumed [ 117.315171][ T6226] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.2.97: 7 [ 117.485779][ T6233] netlink: 334 bytes leftover after parsing attributes in process `syz.3.98'. [ 117.853606][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 117.888913][ T6240] bond0: (slave bond_slave_1): Releasing backup interface [ 118.505761][ T6248] ubi0: attaching mtd0 [ 118.515936][ T6248] ubi0: scanning is finished [ 118.521990][ T6248] ubi0: empty MTD device detected [ 119.216152][ T6248] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 119.245161][ T6248] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 119.253927][ T6248] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 119.266188][ T6248] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 119.285403][ T6248] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 119.294823][ T6248] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 119.303636][ T6248] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3832139162 [ 119.321510][ T6248] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 119.334108][ T6268] ubi0: background thread "ubi_bgt0d" started, PID 6268 [ 119.342815][ T6250] ubi0: detaching mtd0 [ 119.516738][ T6250] ubi0: mtd0 is detached [ 122.015605][ T6324] ================================================================== [ 122.015623][ T6324] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 122.015699][ T6324] Write of size 8 at addr ffffc90004af17e0 by task syz.3.112/6324 [ 122.015723][ T6324] [ 122.015736][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 122.015770][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.015790][ T6324] Call Trace: [ 122.015798][ T6324] [ 122.015807][ T6324] dump_stack_lvl+0x100/0x190 [ 122.015853][ T6324] print_report+0x13d/0x4b0 [ 122.015889][ T6324] ? _raw_spin_lock_irqsave+0x52/0x60 [ 122.015929][ T6324] ? sys_imageblit+0x19fb/0x1d60 [ 122.015968][ T6324] kasan_report+0xdf/0x1d0 [ 122.016001][ T6324] ? sys_imageblit+0x19fb/0x1d60 [ 122.016054][ T6324] sys_imageblit+0x19fb/0x1d60 [ 122.016094][ T6324] ? __pfx_sys_imageblit+0x10/0x10 [ 122.016136][ T6324] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 122.016184][ T6324] soft_cursor+0x524/0xa10 [ 122.016220][ T6324] bit_cursor+0xca1/0x1490 [ 122.016253][ T6324] ? __pfx_bit_cursor+0x10/0x10 [ 122.016287][ T6324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.016329][ T6324] ? get_color+0x1da/0x450 [ 122.016369][ T6324] ? __pfx_bit_cursor+0x10/0x10 [ 122.016395][ T6324] fbcon_cursor+0x43c/0x5e0 [ 122.016442][ T6324] ? __pfx_mark_held_locks+0x10/0x10 [ 122.016487][ T6324] hide_cursor+0x87/0x230 [ 122.016518][ T6324] do_con_write+0x2270/0x4a10 [ 122.016560][ T6324] ? irqentry_exit+0x24d/0x970 [ 122.016596][ T6324] ? lockdep_hardirqs_on+0x78/0x100 [ 122.016631][ T6324] ? irqentry_exit+0x24d/0x970 [ 122.016669][ T6324] ? __pfx_do_con_write+0x10/0x10 [ 122.016706][ T6324] ? n_tty_write+0x5eb/0x11c0 [ 122.016746][ T6324] con_write+0x23/0xb0 [ 122.016781][ T6324] n_tty_write+0x431/0x11c0 [ 122.016830][ T6324] ? __pfx_n_tty_write+0x10/0x10 [ 122.016872][ T6324] ? __pfx_woken_wake_function+0x10/0x10 [ 122.016906][ T6324] ? __pfx___might_resched+0x10/0x10 [ 122.016935][ T6324] ? kfree+0x1dd/0x6c0 [ 122.016979][ T6324] ? __pfx_n_tty_write+0x10/0x10 [ 122.017022][ T6324] file_tty_write.isra.0+0x4d2/0x890 [ 122.017059][ T6324] redirected_tty_write+0xd4/0x120 [ 122.017096][ T6324] vfs_write+0x6ac/0x1070 [ 122.017130][ T6324] ? __pfx_redirected_tty_write+0x10/0x10 [ 122.017164][ T6324] ? __pfx_vfs_write+0x10/0x10 [ 122.017191][ T6324] ? find_held_lock+0x2b/0x80 [ 122.017234][ T6324] ksys_write+0x12a/0x250 [ 122.017263][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 122.017294][ T6324] ? rcu_is_watching+0x12/0xc0 [ 122.017328][ T6324] do_syscall_64+0x115/0x840 [ 122.017367][ T6324] ? clear_bhb_loop+0x40/0x90 [ 122.017400][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.017439][ T6324] RIP: 0033:0x7f4ed9f9ce59 [ 122.017470][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.017500][ T6324] RSP: 002b:00007f4edae0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.017532][ T6324] RAX: ffffffffffffffda RBX: 00007f4eda215fa0 RCX: 00007f4ed9f9ce59 [ 122.017553][ T6324] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 122.017572][ T6324] RBP: 00007f4eda032d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.017590][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.017606][ T6324] R13: 00007f4eda216038 R14: 00007f4eda215fa0 R15: 00007ffc5b3f4c08 [ 122.017633][ T6324] [ 122.017642][ T6324] [ 122.017650][ T6324] The buggy address belongs to a vmalloc virtual mapping [ 122.017668][ T6324] Memory state around the buggy address: [ 122.017681][ T6324] ffffc90004af1680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.017705][ T6324] ffffc90004af1700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.017725][ T6324] >ffffc90004af1780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.017740][ T6324] ^ [ 122.017755][ T6324] ffffc90004af1800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.017773][ T6324] ffffc90004af1880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.017792][ T6324] ================================================================== [ 122.035536][ T6324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.035561][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.3.112 Not tainted syzkaller #0 PREEMPT(full) [ 122.035598][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.035615][ T6324] Call Trace: [ 122.035625][ T6324] [ 122.035636][ T6324] dump_stack_lvl+0x100/0x190 [ 122.035688][ T6324] vpanic+0x552/0x970 [ 122.035716][ T6324] ? __pfx_vpanic+0x10/0x10 [ 122.035744][ T6324] ? mark_held_locks+0x40/0x70 [ 122.035790][ T6324] ? sys_imageblit+0x19fb/0x1d60 [ 122.035826][ T6324] panic+0xd1/0xe0 [ 122.035853][ T6324] ? __pfx_panic+0x10/0x10 [ 122.035879][ T6324] ? sys_imageblit+0x19fb/0x1d60 [ 122.035914][ T6324] ? preempt_schedule_common+0x42/0xc0 [ 122.035967][ T6324] check_panic_on_warn.cold+0x19/0x34 [ 122.035999][ T6324] end_report.part.0+0x3a/0x90 [ 122.036040][ T6324] kasan_report.cold+0xe/0x18 [ 122.036082][ T6324] ? sys_imageblit+0x19fb/0x1d60 [ 122.036122][ T6324] sys_imageblit+0x19fb/0x1d60 [ 122.036164][ T6324] ? __pfx_sys_imageblit+0x10/0x10 [ 122.036206][ T6324] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 122.036258][ T6324] soft_cursor+0x524/0xa10 [ 122.036295][ T6324] bit_cursor+0xca1/0x1490 [ 122.036329][ T6324] ? __pfx_bit_cursor+0x10/0x10 [ 122.036364][ T6324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.036412][ T6324] ? get_color+0x1da/0x450 [ 122.036454][ T6324] ? __pfx_bit_cursor+0x10/0x10 [ 122.036481][ T6324] fbcon_cursor+0x43c/0x5e0 [ 122.036524][ T6324] ? __pfx_mark_held_locks+0x10/0x10 [ 122.036570][ T6324] hide_cursor+0x87/0x230 [ 122.036602][ T6324] do_con_write+0x2270/0x4a10 [ 122.036641][ T6324] ? irqentry_exit+0x24d/0x970 [ 122.036678][ T6324] ? lockdep_hardirqs_on+0x78/0x100 [ 122.036718][ T6324] ? irqentry_exit+0x24d/0x970 [ 122.036759][ T6324] ? __pfx_do_con_write+0x10/0x10 [ 122.036801][ T6324] ? n_tty_write+0x5eb/0x11c0 [ 122.036847][ T6324] con_write+0x23/0xb0 [ 122.036883][ T6324] n_tty_write+0x431/0x11c0 [ 122.036933][ T6324] ? __pfx_n_tty_write+0x10/0x10 [ 122.036982][ T6324] ? __pfx_woken_wake_function+0x10/0x10 [ 122.037018][ T6324] ? __pfx___might_resched+0x10/0x10 [ 122.037049][ T6324] ? kfree+0x1dd/0x6c0 [ 122.037087][ T6324] ? __pfx_n_tty_write+0x10/0x10 [ 122.037131][ T6324] file_tty_write.isra.0+0x4d2/0x890 [ 122.037173][ T6324] redirected_tty_write+0xd4/0x120 [ 122.037210][ T6324] vfs_write+0x6ac/0x1070 [ 122.037243][ T6324] ? __pfx_redirected_tty_write+0x10/0x10 [ 122.037291][ T6324] ? __pfx_vfs_write+0x10/0x10 [ 122.037322][ T6324] ? find_held_lock+0x2b/0x80 [ 122.037368][ T6324] ksys_write+0x12a/0x250 [ 122.037401][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 122.037435][ T6324] ? rcu_is_watching+0x12/0xc0 [ 122.037470][ T6324] do_syscall_64+0x115/0x840 [ 122.037509][ T6324] ? clear_bhb_loop+0x40/0x90 [ 122.037542][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.037572][ T6324] RIP: 0033:0x7f4ed9f9ce59 [ 122.037596][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.037624][ T6324] RSP: 002b:00007f4edae0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.037653][ T6324] RAX: ffffffffffffffda RBX: 00007f4eda215fa0 RCX: 00007f4ed9f9ce59 [ 122.037672][ T6324] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 122.037689][ T6324] RBP: 00007f4eda032d6f R08: 0000000000000000 R09: 0000000000000000 [ 122.037707][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.037725][ T6324] R13: 00007f4eda216038 R14: 00007f4eda215fa0 R15: 00007ffc5b3f4c08 [ 122.037754][ T6324] [ 122.038019][ T6324] Kernel Offset: disabled