last executing test programs: 8.484090415s ago: executing program 3 (id=211): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x910b}, @IEEE802154_ATTR_PHY_NAME={0xf, 0x1f, '/dev/ptyaf\x00'}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x48}}, 0x1) prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b33, 0x1) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 8.01952678s ago: executing program 3 (id=212): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x910b}, @IEEE802154_ATTR_PHY_NAME={0xf, 0x1f, '/dev/ptyaf\x00'}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x48}}, 0x1) prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b33, 0x1) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 7.53820907s ago: executing program 3 (id=214): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x80000, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004081) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0xffff) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4) r2 = socket(0x2a, 0x2, 0x800009) sendto$auto(r2, 0x0, 0x402, 0x0, &(0x7f0000000700)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x1c) r3 = socket(0x10, 0x2, 0x6) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x2c, 0x1e, 0x0, 0x1, [@nested={0x28, 0x5e, 0x0, 0x1, [@nested={0x8, 0x46, 0x0, 0x1, [@nested={0x4, 0xf7}]}, @nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0x127, 0x0, 0x1, [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) syz_clone3(&(0x7f0000000380)={0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140), {0x16}, &(0x7f0000000180)=""/174, 0xae, &(0x7f0000000240)=""/249, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0xa, {r1}}, 0x58) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000840)={"8b3a011c1affce6feb9dfa1d0e63fd87c9e83f243832636a617e78d28c0ae574", 0x3, 0x2, 0x2, 0x6, 0x2f9b7092, r5}) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000bc0)={0x2ec, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xb5f}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY_NAME={0xd, 0x2, '/dev/sda\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_SEC_KEY={0x292, 0x30, 0x0, 0x1, [@nested={0x28, 0x138, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xa4}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x104, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0x34bd}]}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r6}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @generic="38c33be7910e4384c2c42987e303bd01488baed7b1ed3faf8517c1cbd9b871bce0a8a2829fae114355b7ffffbd7fea3e028869edf7868fdd649147873df18596b4d920f39a3725ad8affed8e41dae51fb82c117457368c52a6c4cea15642195f42ba6392eded3052882a23202d30bd2347007c1c173d18551e2dd90109ecf4e4ab5f191e0ad767a7842e229650c79cb66fab3d28d83e4194c12f34ee89b44caafb270aa07cad9e9710e4bdb3f1f8e4d0bbb087ad4e7825052717cd55b8f41cbdbabc6e", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@loopback}, @generic="9b8c6a12568d7b953ce7a9cc19172dec72d6b4f267f91559ca51182cf8c47f09ceaea423c25ad453f7d9ef4de94e9d19dec10609d9aab8795a9d78795a5e292cf5de37709079b4f19451ac58273b368bf7d80a8416f24e708b74fad6761a9c2136cfaffd521e21095370ab1b2d66a3d7f699369e21b6c9456db810faaa194755ca31336dbe6093e34df89b539a07d61c51e084742c9427e4253fdfec59", @nested={0x8, 0x5c, 0x0, 0x1, [@nested={0x4, 0x73}]}, @generic="1367cc9993aa9638c2c3fa00", @typed={0x4, 0xf1}, @generic="6e2e2ccf7be7c179d9efdda5da3fc96b220dfa190d4c33a476c89f1500c89c2e62f1c4f529d63f5f450608cddf60698d34b648aa089bf39d2302362d6c305653d8f0865505275d3d85d83443a4d38c410a44e07b2717b5aa1ca1717b0f79331c6c24354edd971866417e9f69c60e7944726641937bd156cd468230d629b28a90e816d865014ff05a163c30b1dad7e4c90523e74d8bf6e35eea29b6f500eb73239248300a5c3dd5eae7c7098965fad6e4f1b0d67bfc95bc6e42ce39cdee34b54a0e6b953b384bd8b2c8a1f50a514154d536aa84d45122"]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x1}, 0xc008004) dup2$auto(r2, r1) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r7, 0xe, 0x7fffffffffffffff, 0x5) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 7.201224594s ago: executing program 0 (id=215): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0xc, 0xf1, "82a0d48cb31f0af600000004"}, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, 0x8, 0x3) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) read$auto(r1, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$auto(0x3, 0x0, 0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) 6.654227447s ago: executing program 1 (id=218): unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) mkdir$auto(0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x1, 0x62, 0x8, 0x7, 0x6d3f, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0) 5.444484571s ago: executing program 3 (id=220): io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x3fe, 0x9, 0x7, 0x8000, 0x7f}}) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x5, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) 4.686811069s ago: executing program 1 (id=223): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000680)={{r0, &(0x7f0000000240)="9041b236b3c28f17181f99440054dbdfc6bfd5dbcd36562a7c23861c1e17a8f07788cc85fc3f3ef049ff5a8f962f8ff1cbfcd7901fea16f5d32a48de75d2364ef597c88f0014fb6e05f2918498f5edb2eb2386db7843c373df420283c740ac6a8979eba11e4777d3c82aad95eb5e9b873eab27031cf5269e18a7a950f77c6934b2dd067c7721c0bb69f97378fcdeb27c484ca1f420ecc08a75e22c18510feb6453d893e627b8e74622ab", 0x8, &(0x7f0000000300)="1c24dafa610fa9a7150be62d1212761a8052e9df014eedabb21b98a5667d6ed41599f90986fc4af41490e325ac39a17fefd236a64eeb48974b780bdbd67262aeebbb6799ec7ee1190aad1400d9d38866a46929fe19e565a9eaa5f0bd324f7fe2011d6a800e022b0194169ec1", 0x7a, 0x0, 0x0}, 0x4, &(0x7f0000000640)={0xde38, 0x4, 0x0, &(0x7f0000000880), 0x9, 0xa}}) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r1) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) write$auto(0x3, 0x0, 0x1) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5}, 0x12) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r2 = socket(0x29, 0x6, 0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x800) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00042dbd70f0fedbdf251900000005002600060000000fd1cd35b40436b9b8b9c7c8be5da4efba134e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000851}, 0x4840) socket(0x11, 0x3, 0x9) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 4.685641856s ago: executing program 2 (id=224): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x910b}, @IEEE802154_ATTR_PHY_NAME={0xf, 0x1f, '/dev/ptyaf\x00'}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x48}}, 0x1) prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b33, 0x1) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 4.459101712s ago: executing program 2 (id=225): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x2, 0x6) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/006/001\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x402, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyd8\x00', 0x480, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x404c4701, r0) 4.400469388s ago: executing program 0 (id=226): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) write$auto(r1, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) 4.141841453s ago: executing program 2 (id=227): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto(0x3, 0x40605346, 0x38) write$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3.517510337s ago: executing program 1 (id=228): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x6f7250c4) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x128100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) 3.435490919s ago: executing program 3 (id=229): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IEEE802154_START_REQ(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0xa}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x910b}, @IEEE802154_ATTR_PHY_NAME={0xf, 0x1f, '/dev/ptyaf\x00'}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0xf}]}, 0x48}}, 0x1) prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b33, 0x1) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 3.15374092s ago: executing program 1 (id=230): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) sendto$auto(0x3, 0x0, 0x2, 0xf035, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) bpf$auto(0x1, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x7}, 0x100000cf) mlockall$auto(0x4) 3.079882887s ago: executing program 3 (id=231): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f00000002c0)="06a1f7bb16f81b18c75bba10364b2b43efade5a9fef65e8cba91629684e24e9012362e6f7621dda06775d495247bffd802edbe6936a3d60d7197486748a7ca1dbba3263ecc6f5d767c247ba51887180a1ea82a0ba08e579f51b654b5807d910c2cc2b9a2e30234d92ffc6c2dc1fc6c4308f9fa311915ede69fe215eaaccba42e3cbbd8ed8daf77928b11be75e2e7b0f1b21045546b66d819903a254c168adfa0d50bf32a0d86c6274a618b346c5a9f63f5d5b0401c51c88ef282b5d8195626fe0749013c32a20163e61e6c5bc2bffb8ab5adda9eabfa9d55f0406788cacc20867c02743abb7b0ef7fe7871b91661642558035c211261ec", 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0xd00, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x206200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002dbd5f00eddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x6af970bd8aeafe47, 0x0) ioctl$auto_HDIO_GETGEO(r2, 0x301, &(0x7f00000003c0)="a097ac3a533408960b39941b04e7d20c2897ecd48b6c61586266259f4e1617d478e0b24ecc4eed27ee2fb710b1352bbb8c0858c499cca02f1e6d5370e397b95d0ce2f8e855ce0dd8a06f5abf90241e5105d0f7a6f69169fa834c77e62141a1556ee63ce29e9a0844e9134fe77149d5009c7419c2bd4245f65c77c92555fecb6b1e918269d62a7c67ec1902d52fb89c4cc4589acc7dd2c2b86aa5d7bff0958b3ae909a1d5433345216c505bd124e7ed0a175cf02fd8fbc0c79dcc3f7891be51e978184870e62c023dd403e59c8a6be122fdc688ccf1b28be08eb2424d778d7c56e738e6ca425063ded6a40cbfcdf2") fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000000240)="4a0200000000040000000000000000000700924d1b3c5d2e00000000fdd2adc245a4fe3a61af156016d2e122228118b035ab6f7e46cbe922896e7e796fec3370fd6cf2d037d9f213d48b743bd7804490341927d618b20f562edf1261d0", 0x5d) 2.902004252s ago: executing program 0 (id=232): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x280, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxc\x00', 0x800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67c1, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7fc) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 2.520974448s ago: executing program 0 (id=233): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) removexattr$auto(0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b33, 0x1) 2.278938895s ago: executing program 2 (id=234): mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x5, 0xfffffffffffffffc, 0x0) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) socket(0x2a, 0x2, 0x1) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8802, 0x0) ioctl$auto_BLKTRACESTART2(r2, 0x1274, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) 2.230924188s ago: executing program 0 (id=235): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r1) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd0500ffdb2725000000009471bcab64ce96c25f25eea2f6c6946b6e7b085a7d87a457abbf7e48ab50dd8a02c4dc23dd33a4ca4bf7a0ffc695665f2d785ca5"], 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0x4008884) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f00000000c0)=0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r0, 0xc0085504, &(0x7f0000000280)={0x0, 0x10, 0x8}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) ioctl$auto_NVRAM_SETCKS(r3, 0x7041, 0x0) bpf$auto(0x1, &(0x7f0000000340)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r4 = socket(0x10, 0x2, 0x0) madvise$auto(0xfff, 0x7ac1, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) semctl$auto_SETALL(0x0, 0x8, 0x11, 0x58c2f7b2) setfsuid$auto(0xee00) 1.233890794s ago: executing program 0 (id=236): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 1.233553012s ago: executing program 1 (id=237): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@batch={0xe96, 0x7, 0x5, 0x5, 0x9, 0xffffffffffffffff, 0x1}, 0xfffffff9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x40, r2, 0x419, 0x2070bd22, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0xd, 0x1, '&#$@\\]\\-\x00'}, @OVS_DP_ATTR_NAME={0xc, 0x1, '@*%!@,@\x00'}]}, 0x40}, 0x1, 0x300, 0x0, 0x2004c011}, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250200000008002700040000000a001800aa"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) r3 = bpf$auto(0x12, &(0x7f0000000040)=@enable_stats={0x1}, 0x26) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') socket(0x2c, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) write$auto(r5, &(0x7f0000000000)='-\x00', 0x1d30) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000180)="1a651c238dcc3779d59864e0dc4e7bca239b9ff2b4c6e0ecd8b022d5578c8ec92a1ed4eb3f41382db678be29289eb35b63a052986eb5d881b104af3667cf4fc725828c5313d60a83bacb0f5f0d39629a43", 0x51) 622.271262ms ago: executing program 1 (id=238): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x0, 0x9, 0x4000000000dd, 0xeb1, r0, 0x89) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r1 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x9, 0x5, 0xeb1, r1, 0x8002) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvme-wq/affinity_scope\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000b40)=""/4096, 0x1000) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7fff) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x7) socket(0x10, 0x2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000051c0)=""/103, 0x67) execve$auto(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00/\xc4T\x1f\xe5\x89\x8diM\x1fQ\xcc\x11\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3*\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\aW\n\x11U\x8d\xe3\'\x19Fep\x86y\xb5\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xbc\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xd4\xe4\xd2\xbd\"o3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000180)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x8080) 434.649942ms ago: executing program 2 (id=239): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x6f7250c4) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptytc\x00', 0x128100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) 0s ago: executing program 2 (id=240): socket(0x2, 0x1, 0x106) setfsuid$auto(0xee00) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)={0x20, r2, 0x1, 0x74bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r4, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 74.860748][ T5620] cgroup: Unknown subsys name 'net' [ 74.995994][ T5620] cgroup: Unknown subsys name 'cpuset' [ 75.005119][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.446340][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.341244][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.364456][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.383869][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.389545][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.393109][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.410848][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.411902][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.418672][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.426337][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.442420][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.443805][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.450602][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.458818][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.466105][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.473856][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.479678][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.492468][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.511201][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.518801][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.526857][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.987092][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.995944][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.003262][ T5636] bridge_slave_0: entered allmulticast mode [ 80.010400][ T5636] bridge_slave_0: entered promiscuous mode [ 80.029661][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.037262][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.044910][ T5636] bridge_slave_1: entered allmulticast mode [ 80.051961][ T5636] bridge_slave_1: entered promiscuous mode [ 80.120295][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.127563][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.135008][ T5634] bridge_slave_0: entered allmulticast mode [ 80.142041][ T5634] bridge_slave_0: entered promiscuous mode [ 80.171696][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.181419][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.189979][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.197295][ T5634] bridge_slave_1: entered allmulticast mode [ 80.204478][ T5634] bridge_slave_1: entered promiscuous mode [ 80.230220][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.266862][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.274208][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.281355][ T5635] bridge_slave_0: entered allmulticast mode [ 80.288641][ T5635] bridge_slave_0: entered promiscuous mode [ 80.297611][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.304862][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.312081][ T5635] bridge_slave_1: entered allmulticast mode [ 80.319973][ T5635] bridge_slave_1: entered promiscuous mode [ 80.361535][ T5636] team0: Port device team_slave_0 added [ 80.369896][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.381668][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.411385][ T5636] team0: Port device team_slave_1 added [ 80.439467][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.468868][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.476223][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.483619][ T5631] bridge_slave_0: entered allmulticast mode [ 80.490648][ T5631] bridge_slave_0: entered promiscuous mode [ 80.500651][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.530491][ T5634] team0: Port device team_slave_0 added [ 80.536572][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.543771][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.551008][ T5631] bridge_slave_1: entered allmulticast mode [ 80.558347][ T5631] bridge_slave_1: entered promiscuous mode [ 80.573637][ T5632] Bluetooth: hci1: command tx timeout [ 80.573640][ T5651] Bluetooth: hci3: command tx timeout [ 80.573912][ T5651] Bluetooth: hci0: command tx timeout [ 80.587676][ T5635] team0: Port device team_slave_0 added [ 80.591482][ T4949] Bluetooth: hci2: command tx timeout [ 80.603969][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.611287][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.638053][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.651520][ T5634] team0: Port device team_slave_1 added [ 80.673762][ T5635] team0: Port device team_slave_1 added [ 80.680064][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.687241][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.713568][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.776988][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.796883][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.804293][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.832712][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.846063][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.856967][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.864173][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.890455][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.902310][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.909317][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.935313][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.968574][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.975718][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.002817][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.054701][ T5636] hsr_slave_0: entered promiscuous mode [ 81.061257][ T5636] hsr_slave_1: entered promiscuous mode [ 81.073096][ T5631] team0: Port device team_slave_0 added [ 81.081762][ T5631] team0: Port device team_slave_1 added [ 81.107501][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.114525][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.140848][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.185643][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.193094][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.219452][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.271120][ T5634] hsr_slave_0: entered promiscuous mode [ 81.277897][ T5634] hsr_slave_1: entered promiscuous mode [ 81.285121][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 81.292335][ T5634] Cannot create hsr debugfs directory [ 81.314070][ T5635] hsr_slave_0: entered promiscuous mode [ 81.320627][ T5635] hsr_slave_1: entered promiscuous mode [ 81.327004][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 81.333290][ T5635] Cannot create hsr debugfs directory [ 81.451584][ T5631] hsr_slave_0: entered promiscuous mode [ 81.458769][ T5631] hsr_slave_1: entered promiscuous mode [ 81.465167][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 81.471089][ T5631] Cannot create hsr debugfs directory [ 81.822559][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.840371][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.848646][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.862032][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.871089][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.881212][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.889161][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.899933][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.981326][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.994510][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.006872][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.021129][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.029528][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.040293][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.053462][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.066281][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.165583][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.175649][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.184287][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.195283][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.203374][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.212996][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.220891][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.230955][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.339115][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.348993][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.357231][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.367149][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.378990][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.389082][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.401373][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.416472][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.426732][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.475479][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.516357][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.523944][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.555726][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.562901][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.591563][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.652624][ T5651] Bluetooth: hci3: command tx timeout [ 82.658812][ T4949] Bluetooth: hci1: command tx timeout [ 82.665166][ T5647] Bluetooth: hci2: command tx timeout [ 82.665187][ T5632] Bluetooth: hci0: command tx timeout [ 82.682952][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.719850][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.727147][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.750825][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.772772][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.779983][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.831087][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.857996][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.919629][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.926767][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.956526][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.964054][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.992893][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.040388][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.047665][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.078170][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.085381][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.690347][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.829660][ T5636] veth0_vlan: entered promiscuous mode [ 83.875085][ T5636] veth1_vlan: entered promiscuous mode [ 83.945844][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.008309][ T5636] veth0_macvtap: entered promiscuous mode [ 84.046768][ T5636] veth1_macvtap: entered promiscuous mode [ 84.117967][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.143997][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.161103][ T5635] veth0_vlan: entered promiscuous mode [ 84.188440][ T33] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.200633][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.236923][ T5635] veth1_vlan: entered promiscuous mode [ 84.248369][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.261395][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.287622][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.323336][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.441122][ T3303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.454008][ T3303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.464491][ T5635] veth0_macvtap: entered promiscuous mode [ 84.509105][ T5635] veth1_macvtap: entered promiscuous mode [ 84.526389][ T5634] veth0_vlan: entered promiscuous mode [ 84.541252][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.551366][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569139][ T5634] veth1_vlan: entered promiscuous mode [ 84.581276][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.614213][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.631369][ T5631] veth0_vlan: entered promiscuous mode [ 84.651551][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.668904][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.687965][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.689197][ T5636] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.698104][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.723893][ T5631] veth1_vlan: entered promiscuous mode [ 84.735454][ T5632] Bluetooth: hci0: command tx timeout [ 84.735501][ T5647] Bluetooth: hci2: command tx timeout [ 84.746455][ T5651] Bluetooth: hci3: command tx timeout [ 84.753263][ T4949] Bluetooth: hci1: command tx timeout [ 84.815234][ T5634] veth0_macvtap: entered promiscuous mode [ 84.888891][ T5634] veth1_macvtap: entered promiscuous mode [ 84.975126][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.977883][ T5631] veth0_macvtap: entered promiscuous mode [ 85.002479][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.029206][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.060703][ T5631] veth1_macvtap: entered promiscuous mode [ 85.073627][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.106593][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.118220][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.131120][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.148115][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.159763][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.189417][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.220487][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.245627][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.331140][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.391131][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.415032][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452047][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485908][ T5787] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.507444][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.530475][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.649107][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.684956][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.718189][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.745720][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.829896][ T5791] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.5'. [ 85.841639][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.869419][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.147171][ T5797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 86.813593][ T4949] Bluetooth: hci0: command tx timeout [ 86.813868][ T5651] Bluetooth: hci1: command tx timeout [ 86.819160][ T4949] Bluetooth: hci3: command tx timeout [ 86.819189][ T4949] Bluetooth: hci2: command tx timeout [ 89.499804][ T5839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.037200][ T9] cfg80211: failed to load regulatory.db [ 92.619072][ T5900] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 92.639536][ T5900] netlink: 9 bytes leftover after parsing attributes in process `syz.1.20'. [ 92.858504][ T5908] netlink: 25 bytes leftover after parsing attributes in process `syz.1.22'. [ 93.289542][ T5911] FAULT_INJECTION: forcing a failure. [ 93.289542][ T5911] name failslab, interval 1, probability 0, space 0, times 1 [ 93.335532][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 93.335573][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.335594][ T5911] Call Trace: [ 93.335604][ T5911] [ 93.335615][ T5911] dump_stack_lvl+0x100/0x190 [ 93.335674][ T5911] should_fail_ex.cold+0x5/0xa [ 93.335711][ T5911] should_failslab+0xc2/0x120 [ 93.335747][ T5911] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 93.335792][ T5911] ? __proc_create+0x2cb/0x8c0 [ 93.335835][ T5911] __proc_create+0x2cb/0x8c0 [ 93.335873][ T5911] ? __pfx___proc_create+0x10/0x10 [ 93.335915][ T5911] ? _raw_write_unlock+0x28/0x50 [ 93.335953][ T5911] ? proc_register+0x559/0x8a0 [ 93.335993][ T5911] proc_create_reg+0x75/0x170 [ 93.336033][ T5911] proc_create_net_data+0x8e/0x1c0 [ 93.336068][ T5911] ? __pfx_proc_create_net_data+0x10/0x10 [ 93.336094][ T5911] tcp6_proc_init+0x57/0x80 [ 93.336114][ T5911] inet6_net_init+0x78f/0xa20 [ 93.336133][ T5911] ? __pfx_inet6_net_init+0x10/0x10 [ 93.336152][ T5911] ops_init+0x1e2/0x5f0 [ 93.336170][ T5911] setup_net+0x118/0x3a0 [ 93.336186][ T5911] ? __pfx_setup_net+0x10/0x10 [ 93.336202][ T5911] ? mutex_init_lockdep+0xf1/0x120 [ 93.336220][ T5911] copy_net_ns+0x46f/0x7c0 [ 93.336239][ T5911] create_new_namespaces+0x3ea/0xac0 [ 93.336262][ T5911] unshare_nsproxy_namespaces+0xf2/0x220 [ 93.336282][ T5911] ksys_unshare+0x438/0xab0 [ 93.336303][ T5911] ? __pfx_ksys_unshare+0x10/0x10 [ 93.336323][ T5911] ? xfd_validate_state+0x129/0x190 [ 93.336337][ T5911] ? exit_to_user_mode_loop+0xf3/0x670 [ 93.336365][ T5911] __x64_sys_unshare+0x31/0x40 [ 93.336385][ T5911] do_syscall_64+0x115/0x840 [ 93.336413][ T5911] ? clear_bhb_loop+0x40/0x90 [ 93.336431][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.336446][ T5911] RIP: 0033:0x7fa3b7f9ce59 [ 93.336460][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.336474][ T5911] RSP: 002b:00007fa3b8dd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.336493][ T5911] RAX: ffffffffffffffda RBX: 00007fa3b8215fa0 RCX: 00007fa3b7f9ce59 [ 93.336504][ T5911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 93.336513][ T5911] RBP: 00007fa3b8032d6f R08: 0000000000000000 R09: 0000000000000000 [ 93.336521][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.336530][ T5911] R13: 00007fa3b8216038 R14: 00007fa3b8215fa0 R15: 00007ffe83c190b8 [ 93.336549][ T5911] [ 94.080992][ T5922] netlink: 25 bytes leftover after parsing attributes in process `syz.1.26'. [ 94.320400][ T29] audit: type=1800 audit(1780054445.285:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 94.539457][ T5933] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use) [ 98.850374][ T5991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 98.857720][ T5991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 98.899423][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.39'. [ 98.994295][ T5991] hsr_slave_0: left promiscuous mode [ 99.019049][ T5991] hsr_slave_1: left promiscuous mode [ 99.364168][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 99.406198][ T6000] netlink: 354 bytes leftover after parsing attributes in process `syz.3.41'. [ 99.432339][ T6000] Zero length message leads to an empty skb [ 99.572746][ T5984] mmap: syz.1.38 (5984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.156007][ T5985] Process accounting resumed [ 100.495796][ T6016] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 100.691837][ T6015] NFSD: Failed to start, no listeners configured. [ 100.877575][ T5995] Process accounting resumed [ 101.041064][ T6025] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.302332][ T6034] netlink: 330 bytes leftover after parsing attributes in process `syz.3.49'. [ 101.424363][ T6034] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 101.681618][ T6041] process 'syz.3.50' launched ':,' with NULL argv: empty string added [ 102.124526][ T6041] syz.3.50 (6041) used greatest stack depth: 16920 bytes left [ 102.323155][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 102.477959][ T6056] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.515331][ T6059] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.835564][ T6052] ipvlan1: entered promiscuous mode [ 102.845056][ T6052] ipvlan1: entered allmulticast mode [ 102.854074][ T6052] veth0_vlan: entered allmulticast mode [ 103.263785][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 103.276231][ T6074] veth1_macvtap: left promiscuous mode [ 103.281775][ T6074] macsec0: entered promiscuous mode [ 103.293181][ T6074] macsec0: entered allmulticast mode [ 103.875150][ T6086] zswap: compressor not available [ 104.130247][ T6097] netlink: 186 bytes leftover after parsing attributes in process `syz.3.62'. [ 104.645717][ T29] audit: type=1800 audit(1780054455.615:3): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file0" dev="tmpfs" ino=84 res=0 errno=0 [ 105.420452][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 105.436460][ T6118] ipvlan1: entered promiscuous mode [ 105.446545][ T6118] ipvlan1: entered allmulticast mode [ 105.457440][ T6118] veth0_vlan: entered allmulticast mode [ 106.008198][ T6121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.023997][ T6121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.077241][ T6121] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.118241][ T6121] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.130411][ T6121] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.151142][ T6121] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.169805][ T6121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.176673][ T6121] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.195154][ T6121] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.211233][ T6121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.223537][ T6121] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.239407][ T6121] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 106.972435][ T6140] zswap: compressor not available [ 107.240410][ T6156] netlink: 330 bytes leftover after parsing attributes in process `syz.3.75'. [ 108.012382][ T5651] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.135651][ T29] audit: type=1800 audit(1780054459.105:4): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.79" name="file0" dev="tmpfs" ino=127 res=0 errno=0 [ 108.172259][ T5651] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.172382][ T5647] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.252635][ T5647] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.825258][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 108.858423][ T6188] veth1_macvtap: left promiscuous mode [ 108.868881][ T6188] macsec0: entered promiscuous mode [ 108.874257][ T6188] macsec0: entered allmulticast mode [ 109.057417][ T6190] zswap: compressor not available [ 109.824399][ T6208] netlink: 330 bytes leftover after parsing attributes in process `syz.1.87'. [ 109.858268][ T6208] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 110.092281][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.252622][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.252672][ T5651] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.332509][ T5651] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.638036][ T6253] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 111.644554][ T6253] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 111.692862][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 111.798398][ T6253] hsr_slave_0: left promiscuous mode [ 111.834866][ T6253] hsr_slave_1: left promiscuous mode [ 111.987966][ T6258] netlink: 330 bytes leftover after parsing attributes in process `syz.2.100'. [ 112.180192][ T5651] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.250025][ T6258] mac80211_hwsim hwsim2 : renamed from wlan0 (while UP) [ 112.333739][ T5651] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.333742][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.412622][ T5651] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.586228][ T6268] bond0: invalid ARP target specified [ 112.649663][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 114.925837][ T6305] netlink: 330 bytes leftover after parsing attributes in process `syz.3.113'. [ 115.144842][ T6307] zswap: compressor not available [ 115.360296][ T6319] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 116.202897][ T6338] netlink: 330 bytes leftover after parsing attributes in process `syz.0.123'. [ 116.223437][ T6338] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 116.663353][ T6346] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.669925][ T6346] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.906556][ T6349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.932434][ T6349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.948293][ T6349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.961619][ T6349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.055833][ T6351] zswap: compressor not available [ 117.097904][ T6342] Process accounting resumed [ 117.286298][ T6361] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.293610][ T6361] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.448236][ T6364] NFSD: Failed to start, no listeners configured. [ 117.456331][ T6365] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 117.814047][ T29] audit: type=1800 audit(1780054468.785:5): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.129" name="file0" dev="tmpfs" ino=216 res=0 errno=0 [ 118.299136][ T6393] netlink: 330 bytes leftover after parsing attributes in process `syz.2.133'. [ 118.892721][ T5651] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.972259][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.980157][ T4949] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.991027][ T5651] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.259865][ T6403] netlink: 186 bytes leftover after parsing attributes in process `syz.2.135'. [ 119.811781][ T6415] zswap: compressor not available [ 120.085482][ T6428] NFSD: Failed to start, no listeners configured. [ 120.268371][ T6432] netlink: 330 bytes leftover after parsing attributes in process `syz.3.145'. [ 120.723621][ T6442] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.730087][ T6442] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 121.849579][ T6467] netlink: 330 bytes leftover after parsing attributes in process `syz.3.154'. [ 124.307677][ T6486] kexec: Could not allocate control_code_buffer [ 124.604625][ T6534] netlink: 330 bytes leftover after parsing attributes in process `syz.0.167'. [ 124.842992][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 124.929006][ T6541] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 124.996739][ T6541] netlink: 36629 bytes leftover after parsing attributes in process `syz.0.169'. [ 125.285649][ T6548] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.292078][ T6548] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.212841][ T6535] Process accounting resumed [ 126.332751][ T6565] netlink: 330 bytes leftover after parsing attributes in process `syz.3.178'. [ 126.449514][ T6569] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 126.542725][ T6566] NFSD: Failed to start, no listeners configured. [ 126.562361][ T6573] netlink: 330 bytes leftover after parsing attributes in process `syz.3.179'. [ 128.666848][ T6619] netlink: 330 bytes leftover after parsing attributes in process `syz.0.188'. [ 128.980324][ T6628] netlink: 330 bytes leftover after parsing attributes in process `syz.2.190'. [ 129.541910][ T6642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.548442][ T6642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.850924][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 129.884949][ T6648] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 129.911213][ T6648] netlink: 36629 bytes leftover after parsing attributes in process `syz.1.192'. [ 130.189213][ T6644] Process accounting paused [ 130.196860][ T6660] ubi0: attaching mtd0 [ 130.294837][ T6660] ubi0: scanning is finished [ 130.308353][ T6660] ubi0: empty MTD device detected [ 130.767176][ T6660] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 130.791140][ T6660] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 130.821010][ T6660] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 130.832931][ T6660] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 130.889404][ T6660] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 130.950838][ T6660] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 131.071270][ T6660] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4057931589 [ 131.199709][ T6660] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 131.350636][ T6672] ubi0: background thread "ubi_bgt0d" started, PID 6672 [ 131.383648][ T6665] ubi0: detaching mtd0 [ 131.485757][ T6665] ubi0: mtd0 is detached [ 132.168352][ T6688] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "C>*lVSLcQF\x0dZ5\x1b?̇DpZ\x0as)SA.^hJ?_j;DTή;7=:n^=XӔHxEn|'\x1b&}rd /$uLkZk\x07s9}=\x0b8z{X@D-0whUܜ;COy*dB\x090b(k/!Zd򃌦3i[\x22@j#w|'\x0a9~OEN&Tjc`5l Y-u\x0a\x0aT.vAWeez))\x0d\x0c~=\x0b>\x0b⯝Y|\x0b('C*āډ(- z9dl)gڣG9PyKXl߻/q,zx樑OR1ǚME,b43J\x071R6NȬ83,\x09w-0,iWKR\x079UT!DŽw‡,3\x1b#]*f@\x1b1$n7&#Ig2Uy\x09\x0cy@[\x0a,G>*\x5cLܱhs&5տ\x076ɗo;6P0R^ٙKw`Ak^Oz\x5c]u`{O|#:7A2Sq]CB\x22tŲ\x22̆ێIOiEz\x077L?!X~\x22#\x0ad85kE;\x22ڢݚ>7YqqlJ,\x0c(\x22DU8=p\x0dQ8hX Sw\x1bVW4? [ 132.976178][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112538][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.486517][ T33] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.727480][ T6711] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 133.771144][ T6711] FAULT_INJECTION: forcing a failure. [ 133.771144][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 133.808642][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.2.203 Not tainted syzkaller #0 PREEMPT(full) [ 133.808680][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.808698][ T6711] Call Trace: [ 133.808707][ T6711] [ 133.808718][ T6711] dump_stack_lvl+0x100/0x190 [ 133.808771][ T6711] should_fail_ex.cold+0x5/0xa [ 133.808807][ T6711] should_failslab+0xc2/0x120 [ 133.808842][ T6711] __kmalloc_cache_noprof+0x7a/0x6f0 [ 133.808883][ T6711] ? alloc_fs_context+0x57/0xf40 [ 133.808930][ T6711] alloc_fs_context+0x57/0xf40 [ 133.808975][ T6711] mq_init_ns+0x16e/0x820 [ 133.809009][ T6711] copy_ipcs+0x3dd/0x7e0 [ 133.809042][ T6711] create_new_namespaces+0x20a/0xac0 [ 133.809080][ T6711] ? security_capable+0x80/0x260 [ 133.809112][ T6711] unshare_nsproxy_namespaces+0xf2/0x220 [ 133.809147][ T6711] ksys_unshare+0x438/0xab0 [ 133.809184][ T6711] ? __pfx_ksys_unshare+0x10/0x10 [ 133.809216][ T6711] ? xfd_validate_state+0x129/0x190 [ 133.809250][ T6711] __x64_sys_unshare+0x31/0x40 [ 133.809282][ T6711] do_syscall_64+0x115/0x840 [ 133.809314][ T6711] ? clear_bhb_loop+0x40/0x90 [ 133.809348][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.809373][ T6711] RIP: 0033:0x7fb49859ce59 [ 133.809402][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.809428][ T6711] RSP: 002b:00007fb4967f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.809452][ T6711] RAX: ffffffffffffffda RBX: 00007fb498815fa0 RCX: 00007fb49859ce59 [ 133.809468][ T6711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 133.809482][ T6711] RBP: 00007fb498632d6f R08: 0000000000000000 R09: 0000000000000000 [ 133.809495][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.809509][ T6711] R13: 00007fb498816038 R14: 00007fb498815fa0 R15: 00007fff5c4b3088 [ 133.809539][ T6711] [ 134.411319][ T6718] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.417831][ T6718] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.786483][ T5651] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 135.605933][ T6726] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 135.656919][ T6726] random: crng reseeded on system resumption [ 136.226952][ T6751] tipc: Started in network mode [ 136.280116][ T6751] tipc: Node identity ee00, cluster identity 4711 [ 136.298330][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 136.315709][ T6751] tipc: Node number set to 60928 [ 136.720136][ T6721] Process accounting resumed [ 136.812977][ T5651] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.034058][ T6759] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.040845][ T6759] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.280176][ T6767] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 137.558366][ T6774] ubi0: attaching mtd0 [ 137.595498][ T6774] ubi0: scanning is finished [ 138.023976][ T6774] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 138.081787][ T6774] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 138.109033][ T6774] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 138.138239][ T6774] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 138.184292][ T6774] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 138.212705][ T6774] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 138.230834][ T6774] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4057931589 [ 138.243152][ T6774] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 138.259452][ T6785] ubi0: background thread "ubi_bgt0d" started, PID 6785 [ 138.296230][ T6775] ubi0: detaching mtd0 [ 138.362804][ T6775] ubi0: mtd0 is detached [ 138.787918][ T6788] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.794356][ T6788] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 138.892703][ T5647] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.367194][ T6800] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.373849][ T6800] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 141.555835][ T6839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 141.562288][ T6839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.092724][ T6847] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 143.092724][ T6847] program syz.3.231 not setting count and/or reply_len properly [ 144.124212][ T6874] netlink: 330 bytes leftover after parsing attributes in process `syz.2.240'. [ 144.189178][ T6875] ================================================================== [ 144.189197][ T6875] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 144.189245][ T6875] Write of size 8 at addr ffffc90004a09460 by task syz.2.240/6875 [ 144.189269][ T6875] [ 144.189282][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 144.189316][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.189334][ T6875] Call Trace: [ 144.189343][ T6875] [ 144.189353][ T6875] dump_stack_lvl+0x100/0x190 [ 144.189402][ T6875] print_report+0x13d/0x4b0 [ 144.189442][ T6875] ? _raw_spin_lock_irqsave+0x52/0x60 [ 144.189482][ T6875] ? sys_imageblit+0x19fb/0x1d60 [ 144.189515][ T6875] kasan_report+0xdf/0x1d0 [ 144.189549][ T6875] ? sys_imageblit+0x19fb/0x1d60 [ 144.189588][ T6875] sys_imageblit+0x19fb/0x1d60 [ 144.189627][ T6875] ? __pfx_sys_imageblit+0x10/0x10 [ 144.189664][ T6875] ? prb_read_valid+0x78/0xa0 [ 144.189693][ T6875] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.189739][ T6875] soft_cursor+0x524/0xa10 [ 144.189770][ T6875] ? atomic_notifier_call_chain+0x50/0x1c0 [ 144.189810][ T6875] ? fb_get_color_depth+0x120/0x250 [ 144.189866][ T6875] bit_cursor+0xca1/0x1490 [ 144.189896][ T6875] ? __pfx_bit_cursor+0x10/0x10 [ 144.189917][ T6875] ? __lock_acquire+0x4a5/0x2630 [ 144.189954][ T6875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.189990][ T6875] ? get_color+0x1da/0x450 [ 144.190031][ T6875] ? __pfx_bit_cursor+0x10/0x10 [ 144.190053][ T6875] fbcon_cursor+0x43c/0x5e0 [ 144.190086][ T6875] ? add_softcursor+0x190/0x290 [ 144.190115][ T6875] set_cursor+0x1db/0x250 [ 144.190141][ T6875] con_write+0x89/0xb0 [ 144.190170][ T6875] n_tty_write+0x431/0x11c0 [ 144.190210][ T6875] ? __pfx_n_tty_write+0x10/0x10 [ 144.190243][ T6875] ? __pfx_woken_wake_function+0x10/0x10 [ 144.190271][ T6875] ? __pfx___might_resched+0x10/0x10 [ 144.190294][ T6875] ? kfree+0x1dd/0x6c0 [ 144.190327][ T6875] ? __pfx_n_tty_write+0x10/0x10 [ 144.190361][ T6875] file_tty_write.isra.0+0x4d2/0x890 [ 144.190395][ T6875] redirected_tty_write+0xd4/0x120 [ 144.190427][ T6875] vfs_write+0x6ac/0x1070 [ 144.190454][ T6875] ? __pfx_redirected_tty_write+0x10/0x10 [ 144.190485][ T6875] ? __pfx_vfs_write+0x10/0x10 [ 144.190512][ T6875] ? find_held_lock+0x2b/0x80 [ 144.190555][ T6875] ksys_write+0x12a/0x250 [ 144.190584][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 144.190614][ T6875] ? rcu_is_watching+0x12/0xc0 [ 144.190640][ T6875] do_syscall_64+0x115/0x840 [ 144.190673][ T6875] ? clear_bhb_loop+0x40/0x90 [ 144.190704][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.190732][ T6875] RIP: 0033:0x7fb49859ce59 [ 144.190756][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.190787][ T6875] RSP: 002b:00007fb4967b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.190815][ T6875] RAX: ffffffffffffffda RBX: 00007fb498816180 RCX: 00007fb49859ce59 [ 144.190835][ T6875] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 144.190853][ T6875] RBP: 00007fb498632d6f R08: 0000000000000000 R09: 0000000000000000 [ 144.190871][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.190887][ T6875] R13: 00007fb498816218 R14: 00007fb498816180 R15: 00007fff5c4b3088 [ 144.190914][ T6875] [ 144.190924][ T6875] [ 144.190931][ T6875] The buggy address belongs to a vmalloc virtual mapping [ 144.190951][ T6875] Memory state around the buggy address: [ 144.190966][ T6875] ffffc90004a09300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.191003][ T6875] ffffc90004a09380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.191025][ T6875] >ffffc90004a09400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.191041][ T6875] ^ [ 144.191058][ T6875] ffffc90004a09480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.191079][ T6875] ffffc90004a09500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.191098][ T6875] ================================================================== [ 144.191275][ T6875] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.191296][ T6875] CPU: 0 UID: 0 PID: 6875 Comm: syz.2.240 Not tainted syzkaller #0 PREEMPT(full) [ 144.191331][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.191346][ T6875] Call Trace: [ 144.191354][ T6875] [ 144.191363][ T6875] dump_stack_lvl+0x100/0x190 [ 144.191406][ T6875] vpanic+0x552/0x970 [ 144.191429][ T6875] ? __pfx_vpanic+0x10/0x10 [ 144.191457][ T6875] ? sys_imageblit+0x19fb/0x1d60 [ 144.191484][ T6875] panic+0xd1/0xe0 [ 144.191507][ T6875] ? __pfx_panic+0x10/0x10 [ 144.191533][ T6875] ? sys_imageblit+0x19fb/0x1d60 [ 144.191562][ T6875] ? preempt_schedule_common+0x42/0xc0 [ 144.191600][ T6875] check_panic_on_warn.cold+0x19/0x34 [ 144.191623][ T6875] end_report.part.0+0x3a/0x90 [ 144.191653][ T6875] kasan_report.cold+0xe/0x18 [ 144.191683][ T6875] ? sys_imageblit+0x19fb/0x1d60 [ 144.191714][ T6875] sys_imageblit+0x19fb/0x1d60 [ 144.191745][ T6875] ? __pfx_sys_imageblit+0x10/0x10 [ 144.191779][ T6875] ? prb_read_valid+0x78/0xa0 [ 144.191804][ T6875] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.191846][ T6875] soft_cursor+0x524/0xa10 [ 144.191875][ T6875] ? atomic_notifier_call_chain+0x50/0x1c0 [ 144.191915][ T6875] ? fb_get_color_depth+0x120/0x250 [ 144.191953][ T6875] bit_cursor+0xca1/0x1490 [ 144.191982][ T6875] ? __pfx_bit_cursor+0x10/0x10 [ 144.192018][ T6875] ? __lock_acquire+0x4a5/0x2630 [ 144.192070][ T6875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.192113][ T6875] ? get_color+0x1da/0x450 [ 144.192159][ T6875] ? __pfx_bit_cursor+0x10/0x10 [ 144.192189][ T6875] fbcon_cursor+0x43c/0x5e0 [ 144.192234][ T6875] ? add_softcursor+0x190/0x290 [ 144.192268][ T6875] set_cursor+0x1db/0x250 [ 144.192297][ T6875] con_write+0x89/0xb0 [ 144.192331][ T6875] n_tty_write+0x431/0x11c0 [ 144.192377][ T6875] ? __pfx_n_tty_write+0x10/0x10 [ 144.192418][ T6875] ? __pfx_woken_wake_function+0x10/0x10 [ 144.192451][ T6875] ? __pfx___might_resched+0x10/0x10 [ 144.192479][ T6875] ? kfree+0x1dd/0x6c0 [ 144.192516][ T6875] ? __pfx_n_tty_write+0x10/0x10 [ 144.192557][ T6875] file_tty_write.isra.0+0x4d2/0x890 [ 144.192597][ T6875] redirected_tty_write+0xd4/0x120 [ 144.192628][ T6875] vfs_write+0x6ac/0x1070 [ 144.192660][ T6875] ? __pfx_redirected_tty_write+0x10/0x10 [ 144.192697][ T6875] ? __pfx_vfs_write+0x10/0x10 [ 144.192726][ T6875] ? find_held_lock+0x2b/0x80 [ 144.192770][ T6875] ksys_write+0x12a/0x250 [ 144.192800][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 144.192831][ T6875] ? rcu_is_watching+0x12/0xc0 [ 144.192860][ T6875] do_syscall_64+0x115/0x840 [ 144.192900][ T6875] ? clear_bhb_loop+0x40/0x90 [ 144.192935][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.192968][ T6875] RIP: 0033:0x7fb49859ce59 [ 144.192990][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.193032][ T6875] RSP: 002b:00007fb4967b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.193062][ T6875] RAX: ffffffffffffffda RBX: 00007fb498816180 RCX: 00007fb49859ce59 [ 144.193083][ T6875] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 144.193103][ T6875] RBP: 00007fb498632d6f R08: 0000000000000000 R09: 0000000000000000 [ 144.193122][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.193140][ T6875] R13: 00007fb498816218 R14: 00007fb498816180 R15: 00007fff5c4b3088 [ 144.193171][ T6875] [ 144.193514][ T6875] Kernel Offset: disabled