last executing test programs: 7.782670306s ago: executing program 2 (id=96): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r0, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) mmap$auto(0x20000, 0x4020009, 0x100000000df, 0x50, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x7, 0x9dfe, 0x80000001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r2, 0x300000000000) socket(0x1d, 0x3, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 6.911307256s ago: executing program 0 (id=101): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2a6300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) r0 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio27/dev_debug\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20002, 0x0) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) swapon$auto(&(0x7f0000000000)='/dev/ram5\x00', 0x0) 6.069654723s ago: executing program 0 (id=102): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffc, 0x8000000000000001, 0x200000000007, 0x14, 0xffffffffffffffff, 0xbf47) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdb6b250300000014000100ff02000000000000000000ff09000001fa1df82d0958f6116b73958554b44e52a0dec6e220a12329c189f100"], 0x28}}, 0x20000040) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket(0x2b, 0x1, 0x10) mmap$auto(0x0, 0x2020006, 0x4, 0x17, 0xffffffffffffffff, 0x8000) ioctl$auto(r3, 0x8936, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x400008, 0x6, 0x9b73, r1, 0x2) socket(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r3) sendmsg$auto_NFC_CMD_START_POLL(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000f23eb57e3682fba3adb250944d7186ccbb9fdd54631fe2968a80d4b360c13863393b4b46449ae8a2f2de68bec3c74aee1541e39a7afd8fe80d17133d30e4795f3fc8c51659e1b6f52512cb18ca50df81eded3ddbe884755bf9c639c345ca5c8651d66529bf05873da8ff716af0001265da4c37354b3c83cce2af6df664bcf86dbb4db7f83e96703ef66610c113f36750a936da80304a04824b06a0f46a2e95c530e3c49390832b85901e11ce2208a7e231e046d6b0d01600fd154155376d096ada843697404a22c35dc174cb76577986a52aa37c9472270d4d", @ANYRES16=r5, @ANYBLOB="000428bd7000fbdbdf250600000005000c00070000000800010008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008054}, 0x4000000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), 0xffffffffffffffff) 6.018012037s ago: executing program 1 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000300), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xa9b, 0x9b72, 0x2, 0x5) close_range$auto(0x2, r0, 0x7) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(r1, 0x40045543, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x103101, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, r2) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.856391861s ago: executing program 1 (id=104): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf2503000000040008000400080014000180100010800c000b00080001"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x6, 0x0, 0x100000001) r2 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/live_regions\x00', 0x400, 0x0) mmap$auto(0x8000000000000000, 0x2, 0x8, 0x18, r2, 0x1) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) 5.668200614s ago: executing program 3 (id=105): sysfs$auto(0x2, 0x3c, 0x0) r0 = fsopen$auto(0x0, 0xb2) semget$auto(0x0, 0x2e4a, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd15\x00', 0x20eb81, 0x0) mmap$auto(0x0, 0x9, 0x7, 0x8000000008011, 0x3, 0x8000) semget$auto(0x6, 0x3b0b09d0, 0x200) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) read$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x40100, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0xfffffff8, &(0x7f0000000040)='*-$#\x00', &(0x7f0000000080)="e926b258728fd90cddd47dc7b3baaecd2a6b70a5a57ea7aeb7fe84f6131cfa946a57a738109beb891c6d22b4470a00bbad519735ac7eb393956f61950e812a1ad023392646155ffff176161832389ce589135a17fec64268694013833b44dea74fb5261051d74104e898c1564c827db0543315de852b0bcc2bf064a64d7f66ff0ff985b93679a852bb0ed9e75e68ee991c550b73dbbefaa036a2", 0x0) read$auto_proc_pagemap_operations_internal(r1, &(0x7f0000001540)=""/196, 0xc4) close_range$auto(0x2, 0x8, 0xfffffffb) sysfs$auto(0x2, 0x3c, 0x0) (async) fsopen$auto(0x0, 0xb2) (async) semget$auto(0x0, 0x2e4a, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd15\x00', 0x20eb81, 0x0) (async) mmap$auto(0x0, 0x9, 0x7, 0x8000000008011, 0x3, 0x8000) (async) semget$auto(0x6, 0x3b0b09d0, 0x200) (async) mprotect$auto(0x200000000000, 0x806122, 0xc) (async) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) (async) read$auto(0x3, 0x0, 0xfffffdef) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x40100, 0x0) (async) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0xfffffff8, &(0x7f0000000040)='*-$#\x00', &(0x7f0000000080)="e926b258728fd90cddd47dc7b3baaecd2a6b70a5a57ea7aeb7fe84f6131cfa946a57a738109beb891c6d22b4470a00bbad519735ac7eb393956f61950e812a1ad023392646155ffff176161832389ce589135a17fec64268694013833b44dea74fb5261051d74104e898c1564c827db0543315de852b0bcc2bf064a64d7f66ff0ff985b93679a852bb0ed9e75e68ee991c550b73dbbefaa036a2", 0x0) (async) read$auto_proc_pagemap_operations_internal(r1, &(0x7f0000001540)=""/196, 0xc4) (async) close_range$auto(0x2, 0x8, 0xfffffffb) (async) 5.36155036s ago: executing program 3 (id=106): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1d, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x100000000) mq_getsetattr$auto(r1, &(0x7f0000000080)={0x10000, 0x6, 0x2c, 0x2}, &(0x7f00000000c0)={0x1, 0xed, 0x10001, 0xfffffffffffffffa}) r2 = setfsuid$auto(0xee01) setresuid$auto(0x0, r2, 0x0) shmctl$auto_SHM_STAT_ANY(0x5e74eff5, 0xf, &(0x7f0000000200)={{0x89a, 0xffffffffffffffff, 0xee00, 0x4, 0x2, 0x7, 0x1200}, 0x2, 0x8001, 0xffff, 0x6, @raw=0x1, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000180)="7f9eb274b6efd69f00943001337774a3170d0a92ab3d200170033fb2a261dbcacc3e16cb", &(0x7f00000001c0)="e0fd7fee1e9a3e7b827976a8d48fb386010a2d9d9c7ed4b285172f85963a42d89fcb34ba278e52c6e896693d43897370"}) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0xffffffff7fffffff, 0x6, 0xfffffffffffffff8, 0x9, r2, r3, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x2, 0xfcf, 0x0, 0x7fffffffffffffff, 0x3}) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) 5.281949626s ago: executing program 0 (id=107): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x60b01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r1 = open(0x0, 0x20000, 0x1f8) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x80008000) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 4.868266746s ago: executing program 1 (id=108): socket(0x28, 0x5, 0x0) shutdown$auto(0x200000003, 0x5) syz_clone3(&(0x7f0000000180)={0x108000, 0x0, 0x0, 0x0, {0x40015}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffea5) futex$auto(&(0x7f0000000080)=0x294b, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x109100, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0xffffffffffffffff, 0x10082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x80000, 0xfffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysa\x00', 0x101801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0xa, 0x801, 0x106) getsockopt$auto(r1, 0x6, 0x5, 0x0, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x20a001, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket(0xa, 0x3, 0x73) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x2}, 0xed7138c}, 0x2, 0x9) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) writev$auto(r2, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0x0, 0x8}, 0x0, 0x7ffffffff000, 0x0) 4.7020675s ago: executing program 3 (id=109): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x7, &(0x7f0000000040)="023b8829afee0f9e18cde2ff58df8494cbbde0acb819dfe8") r0 = socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) clock_getres$auto(0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) statmount$auto(0x0, 0x0, 0x6, 0x7fffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, 0x0, 0x4004806) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r2 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8#\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacUfog<\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5\x00\x00', &(0x7f0000000000)={0x0, 0x6}, 0x0, 0x1005) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x10) write$auto(0x3, 0x0, 0xfdef) r4 = socket(0x10, 0x1, 0x80400001) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$auto(r4, 0xda, r4) recvmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) 4.192854076s ago: executing program 2 (id=110): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) socket(0x2, 0x2, 0x88) (rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8000, 0x2, 0xffffffffffffffff, @relative_id=0x13, 0x6}, 0xf) socket(0xa, 0x801, 0x84) (async) r3 = semctl$auto(0x7fffffff, 0x10, 0x0, 0x3) kcmp$auto_KCMP_EPOLL_TFD(r3, 0xffffffffffffffff, 0x7, r0, 0xa1) (async) sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) (async) r4 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000500)=0xf2b) ioctl$auto_ep0_operations_inode(r4, 0x6, &(0x7f0000000540)="329ca70d38df189bad4ecc61cfc895973f54e3c03e27132f705638cc1c5dde8aeecfb10f6a03add8ee65f6cb4840dd7c0a5fb7b601e9c91fdcbe89d5c1d16fdc255fe569dbcb0adb16b0d65c694cd824d5b113a2e9d44d2ac470ca1aecd7d7e43f3169ee0ae4434e6e4bd5a3a7ef39a6db40b07cfbb6c84a115314309b149b84f608c344bbf018962cd9644f922d15bfcc380abaf68bfcd97e112a1d8a0c32b3cbac6a49e9fee2a1d8cf5fb6de0a9b45947ea64f7bb7d043e242374de730f2808fd0799090d2f8d9a7101b57bcc7aa885da0827955d7a09731916b5957994518e33dcf2fde458c7ca4196481") (async) madvise$auto(0xfffffffffffffff8, 0x6, 0x2c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) r5 = socket(0x2, 0x1, 0x0) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) (async, rerun: 64) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x412, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x4, 0x20000000) (async, rerun: 64) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendfile$auto(0x3, r6, 0x0, 0xfdef) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) mmap$auto(0x1, 0x9, 0x5, 0x1000810, r1, 0x101) (async, rerun: 64) mkdir$auto(0x0, 0xfffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3.911941591s ago: executing program 3 (id=111): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffff70, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd9\x00', 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0xfea) r2 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x0, 0x10df, 0xebd, r1, 0xa) getsockopt$auto(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x4, 0x1000, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r0, 0x0, 0xb1) rseq$auto(0x0, 0x8000, 0x0, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xc, 0xb, 0x9, 0xeb1, r2, 0x8002) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1p/sub0/info\x00', 0x181e00, 0x0) pread64$auto(r4, 0x0, 0x3, 0x5ef6) msync$auto(0x1ffff000, 0x180000000000101, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-1024kB/stats/anon_fault_fallback\x00', 0x0, 0x0) prctl$auto(0x59616d61, 0xdafffffffffffffd, 0x1, 0x4, 0xfffffffffffffffc) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x88200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000008000) io_uring_setup$auto(0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio28\x00', 0x80000, 0x0) msync$auto(0x100000000, 0x0, 0x4) 3.761130328s ago: executing program 0 (id=112): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r3 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r3, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x660) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) getpid() socket(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.104249312s ago: executing program 1 (id=113): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x4, 0x5) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x80}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bpf$auto(0x4, 0x0, 0xb46) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20b42, 0x0) io_uring_setup$auto(0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x800, &(0x7f0000000240)="c6ffce92928cf32bf5fb760f", 0xc, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000440)="8ba079d8128d1db6e6711102dc9409d1bd2a77b40b30e365748b34a07d23e6c700aa8eb11844a1855c688c0b65fcc160e0d4f9e6dd66b89c2446183acf81e04cdddae9d9caca2d7ad60cd9e0d7b2eebf3019c1d4a70ce865ee21167344c5e33fdccf0a3fd2849befdcf3a1ae7f3f78a40e69655aca3debd0ab8f1904241afd8bb5dab6b6f9ed61848856ae3817387cac1c84d39ba20a4b21090a759827e9e0e14daee53929292a70e8f9f7961caf352cde7039b951d4b73696ed794f1aa583bda0e8238544dc98b8e998476d8f76b8bf223ac3c4") r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="23f157ce", @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r4 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000540)={@_si_pad}, 0x7, &(0x7f00000005c0)={{0xb}, {0x4, 0x8000000000000000}, 0x2, 0x754e, 0x1, 0x200, 0x101, 0x6, 0xe, 0x3, 0xff, 0xffffffff, 0x100000001, 0x4, 0x300000001, 0x5}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x400}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r4}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x719a83, 0x0) 2.887812932s ago: executing program 2 (id=114): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x24040000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) r1 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r1, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0xa7) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/pressure/cpu\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/41, 0x29) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) 1.883277839s ago: executing program 2 (id=115): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x6, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x9, 0x0, 0x4, 0x0, 0x0, 0xd12) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r2 = epoll_create$auto(0x8800001) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(r2, 0x1, r1, 0x0) 1.066371153s ago: executing program 0 (id=116): r0 = gettid() kexec_load$auto(0x4, 0xffffffffffffffff, &(0x7f0000000040)={@kbuf=&(0x7f0000000080)="a6720b54612601a088a38b696a5c37f73ec36100", 0x8000, 0x6, 0xfffffffffffffff8}, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r1, 0x4008556c, 0x81) r2 = socket(0x5, 0x4, 0x0) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x11) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8000000000000001}, @NL80211_ATTR_EHT_CAPABILITY={0x4f, 0x136, "153117cdb7be0fa3319b0bc1fcc55faa587019c5d61504d515ab833ffd533888734dbfb3fa5f1fe45ce9e2899c93aa5e2589cacfdcc456f9193638c3e54db485b39deb41c4903e5aecb730"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EPCS={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008885}, 0x804) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) r5 = setfsuid$auto(0xee00) r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583}) setreuid$auto(r5, 0x0) statx$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000440)={0x0, 0x77, 0xd, 0x3ff, 0xee01, 0xee00, 0x7, 0x80, 0x200, 0x1, 0x3f7b, 0x2, {0x7, 0x80000001}, {0x80, 0x8}, {0x2, 0x5}, {0x2d, 0x2}, 0x4800000, 0x0, 0x0, 0x2, 0x243, 0x5, 0x0, 0x0, 0x6, 0xaece, 0x3, 0x9, [0x4, 0x8001, 0x3, 0x8, 0x7ff, 0x1, 0x8000000000000001, 0xffffffff80000001, 0x6]}) r8 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000580)={0x554, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_BSS_SELECT={0x2d8, 0xe3, 0x0, 0x1, [@nested={0xaa, 0xc9, 0x0, 0x1, [@generic="6cbfe96135a9ee3d6f3e16e888fc16e725761205043afb8cc65a1ac1c9fc2e1eda502fdc0e2fa0db5bc2d5825fccdb05580536e8b7884ba6edde9bec087614edde15de5cbe5cabce40920ffe71ad93cd0490b80047a7e6c296496bf4ba265fcd22d1c0051540b0310a26fc4f0811e9fc614148b18f0c50ae3b41f3d33ac327926aab70e98454", @nested={0x4, 0xd5}, @nested={0x4, 0x91}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x5f}]}, @typed={0x8, 0xec, 0x0, 0x0, @pid=r0}, @nested={0xc, 0xc1, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @uid=r5}]}, @nested={0x1f1, 0x59, 0x0, 0x1, [@nested={0x4, 0x3}, @nested={0x4, 0x128}, @generic="4c9926e50c4b1bf9ffd34db66b91a47691d7f7659e8e60386bbf0d0271ab7bd04a3d42a3e7c2c690c0287bb594337d308aa79e53765b657fceae518286fafbf32e903d1edecb424244ce6f16bcdc5af53a92e2b24f198c7e21ae12b696bd4de65d51f13ad0ec4c2d74641f7bd7611d7157439e45724f6ccf5cc21af93c1856bd0ac7ef1753e09ff0c4922aeff1b7dfa14e56cf8c25c671ce6c4a466a29b612d4ee089a0775daaf2d1bda6d252e503660701be6df28cd5d166af6c8433bc91e3c93a6853f07c146bea1bfa5a86ece2c48c5dbf2a6d3e8bd4a340341b6a93f1d1bf613740c17bbe9df4e2df616a0a1e43b", @nested={0x4, 0x71}, @nested={0x4, 0x1f}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x7ff}, @generic="0a89cefa2e52c6f889bd7a550ce34d5499b86012f315393551a1b92358caa5b6ba34c37761ceb45272cd3a7822b00f37e6b6aac07341241624516261257684038c6c95b1f1ddb7d387d7c0b9f93c4d7d4aea505e4a9cbba3eee896e5f6f396c8235c97b84094d7181e866b19b9fc6c1ce8be48d559e69b237087139546fe2d8e87755bd73b7079104a25fbf1f3ca6232547fb5491933d018294f9f07c6ecc364a6456ed35ef2afcc30cd1e19ea3e57a2b4517627ddf496e7a5927a5608256ad3f4caa79269f00a4ec7934aaa82b1cf9a4a134f03d8dc3b9ecf1d43393b5875f21ecc83c489"]}, @nested={0x20, 0x6a, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x76}, @nested={0x4, 0xbd}, @nested={0x4, 0x28}, @nested={0x4, 0x128}, @nested={0x4, 0xa9}, @nested={0x4, 0x23}]}]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_CQM={0x237, 0x5e, 0x0, 0x1, [@generic="60f8c43a6e1e100c42c9d41d711537f825b94a4feff66620a888de5f8ab0af26a51f6f4c5d56dac843e7322a8e7aebeae8674deea2e2ba3b04ea23b9023cca55da146d434a63cf5011cd532c5f63b27912a2dd19c812cd9ba76a24", @nested={0x9c, 0x2f, 0x0, 0x1, [@generic="63df2ba190f53f", @typed={0x8, 0x43, 0x0, 0x0, @u32=0xff}, @generic="9a5059c4aba949e0bfc097738e041817cdf83ac3002624f1e17742", @generic, @typed={0x11, 0xbb, 0x0, 0x0, @str='/!-\x9c//+[];9@\x00'}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@private1}, @generic="c92ce7829021a859401b8d13d39999131443b600a9e97b107e0a2ec322e8da59f54f56da65e1d1decec33d183f5e08c25edaec6b44db720de4074f085936e2bd300043d407f1"]}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r7}, @generic="dbb0fe93451e74ee6bd01a1da92eac15f25c224439964865c32f407c894ce8af3ae63323b878bffde890998618c0ed578b02e613f03b17426500af0e1e6a3a19a016c198c3a2a6a1b12f5f5086759b038ba52d48286795815938d16a", @generic="a6ec3e85cb9100a4f58cd68c733b9e7094b20d862e6e6fe8939ac092c85f8714f2aa7ccce2b62d802dbe6a57b674446e6d0266d9b1778ac080ab9b678ecf275af5a0dfcef7fcb2f1fc161f3f5ca2c1b35819ebd82b8eecc18f0b18ea8f109262248c46d3", @generic="0d9e0461626bb00e9a20378d82ea5c93", @nested={0x48, 0xc9, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="d5baa2e9c20baee1e23aaedc06fe548bf1d42c9ba227dc7f41ef944338b91092ab0921792a7bc8af9597c51035aabd0246af067065fb3a40", @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x15a, 0x0, 0x0, @fd=r3}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x128, 0x0, 0x0, @fd=r8}]}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "4e8c1b9ef3bae896e2d0a04c"}]}, 0x554}, 0x1, 0x0, 0x0, 0x4}, 0x2004000) 863.654463ms ago: executing program 2 (id=117): socket(0x2, 0x1, 0x106) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) (async) r2 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x5, 0xdd22, 0xffffffff, r3, 0x800008000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f0000002c40)=0xd0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r5 = socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, 0x0, 0x40000) sendmsg$auto_GTP_CMD_NEWPDP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x800) socket(0x10, 0x2, 0xc) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) (async) r8 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 561.976432ms ago: executing program 3 (id=118): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/default/keep_addr_on_down\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x2004) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10001, 0x0) 514.063142ms ago: executing program 2 (id=119): r0 = gettid() kexec_load$auto(0x4, 0xffffffffffffffff, &(0x7f0000000040)={@kbuf=&(0x7f0000000080)="a6720b54612601a088a38b696a5c37f73ec36100", 0x8000, 0x6, 0xfffffffffffffff8}, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r1, 0x4008556c, 0x81) r2 = socket(0x5, 0x4, 0x0) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x11) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8000000000000001}, @NL80211_ATTR_EHT_CAPABILITY={0x4f, 0x136, "153117cdb7be0fa3319b0bc1fcc55faa587019c5d61504d515ab833ffd533888734dbfb3fa5f1fe45ce9e2899c93aa5e2589cacfdcc456f9193638c3e54db485b39deb41c4903e5aecb730"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EPCS={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008885}, 0x804) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) r5 = setfsuid$auto(0xee00) r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0x80184132, &(0x7f0000000240)={0x9, 0x49f, 0x0, 0xf583}) setreuid$auto(r5, 0x0) statx$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000440)={0x0, 0x77, 0xd, 0x3ff, 0xee01, 0xee00, 0x7, 0x80, 0x200, 0x1, 0x3f7b, 0x2, {0x7, 0x80000001}, {0x80, 0x8}, {0x2, 0x5}, {0x2d, 0x2}, 0x4800000, 0x0, 0x0, 0x2, 0x243, 0x5, 0x0, 0x0, 0x6, 0xaece, 0x3, 0x9, [0x4, 0x8001, 0x3, 0x8, 0x7ff, 0x1, 0x8000000000000001, 0xffffffff80000001, 0x6]}) r8 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000580)={0x554, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_BSS_SELECT={0x2d8, 0xe3, 0x0, 0x1, [@nested={0xaa, 0xc9, 0x0, 0x1, [@generic="6cbfe96135a9ee3d6f3e16e888fc16e725761205043afb8cc65a1ac1c9fc2e1eda502fdc0e2fa0db5bc2d5825fccdb05580536e8b7884ba6edde9bec087614edde15de5cbe5cabce40920ffe71ad93cd0490b80047a7e6c296496bf4ba265fcd22d1c0051540b0310a26fc4f0811e9fc614148b18f0c50ae3b41f3d33ac327926aab70e98454", @nested={0x4, 0xd5}, @nested={0x4, 0x91}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x5f}]}, @typed={0x8, 0xec, 0x0, 0x0, @pid=r0}, @nested={0xc, 0xc1, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @uid=r5}]}, @nested={0x1f1, 0x59, 0x0, 0x1, [@nested={0x4, 0x3}, @nested={0x4, 0x128}, @generic="4c9926e50c4b1bf9ffd34db66b91a47691d7f7659e8e60386bbf0d0271ab7bd04a3d42a3e7c2c690c0287bb594337d308aa79e53765b657fceae518286fafbf32e903d1edecb424244ce6f16bcdc5af53a92e2b24f198c7e21ae12b696bd4de65d51f13ad0ec4c2d74641f7bd7611d7157439e45724f6ccf5cc21af93c1856bd0ac7ef1753e09ff0c4922aeff1b7dfa14e56cf8c25c671ce6c4a466a29b612d4ee089a0775daaf2d1bda6d252e503660701be6df28cd5d166af6c8433bc91e3c93a6853f07c146bea1bfa5a86ece2c48c5dbf2a6d3e8bd4a340341b6a93f1d1bf613740c17bbe9df4e2df616a0a1e43b", @nested={0x4, 0x71}, @nested={0x4, 0x1f}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x7ff}, @generic="0a89cefa2e52c6f889bd7a550ce34d5499b86012f315393551a1b92358caa5b6ba34c37761ceb45272cd3a7822b00f37e6b6aac07341241624516261257684038c6c95b1f1ddb7d387d7c0b9f93c4d7d4aea505e4a9cbba3eee896e5f6f396c8235c97b84094d7181e866b19b9fc6c1ce8be48d559e69b237087139546fe2d8e87755bd73b7079104a25fbf1f3ca6232547fb5491933d018294f9f07c6ecc364a6456ed35ef2afcc30cd1e19ea3e57a2b4517627ddf496e7a5927a5608256ad3f4caa79269f00a4ec7934aaa82b1cf9a4a134f03d8dc3b9ecf1d43393b5875f21ecc83c489"]}, @nested={0x20, 0x6a, 0x0, 0x1, [@nested={0x4, 0xf5}, @nested={0x4, 0x76}, @nested={0x4, 0xbd}, @nested={0x4, 0x28}, @nested={0x4, 0x128}, @nested={0x4, 0xa9}, @nested={0x4, 0x23}]}]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_CQM={0x237, 0x5e, 0x0, 0x1, [@generic="60f8c43a6e1e100c42c9d41d711537f825b94a4feff66620a888de5f8ab0af26a51f6f4c5d56dac843e7322a8e7aebeae8674deea2e2ba3b04ea23b9023cca55da146d434a63cf5011cd532c5f63b27912a2dd19c812cd9ba76a24", @nested={0x9c, 0x2f, 0x0, 0x1, [@generic="63df2ba190f53f", @typed={0x8, 0x43, 0x0, 0x0, @u32=0xff}, @generic="9a5059c4aba949e0bfc097738e041817cdf83ac3002624f1e17742", @generic, @typed={0x11, 0xbb, 0x0, 0x0, @str='/!-\x9c//+[];9@\x00'}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@private1}, @generic="c92ce7829021a859401b8d13d39999131443b600a9e97b107e0a2ec322e8da59f54f56da65e1d1decec33d183f5e08c25edaec6b44db720de4074f085936e2bd300043d407f1"]}, @typed={0x8, 0xec, 0x0, 0x0, @uid=r7}, @generic="dbb0fe93451e74ee6bd01a1da92eac15f25c224439964865c32f407c894ce8af3ae63323b878bffde890998618c0ed578b02e613f03b17426500af0e1e6a3a19a016c198c3a2a6a1b12f5f5086759b038ba52d48286795815938d16a", @generic="a6ec3e85cb9100a4f58cd68c733b9e7094b20d862e6e6fe8939ac092c85f8714f2aa7ccce2b62d802dbe6a57b674446e6d0266d9b1778ac080ab9b678ecf275af5a0dfcef7fcb2f1fc161f3f5ca2c1b35819ebd82b8eecc18f0b18ea8f109262248c46d3", @generic="0d9e0461626bb00e9a20378d82ea5c93", @nested={0x48, 0xc9, 0x0, 0x1, [@nested={0x4, 0x7}, @generic="d5baa2e9c20baee1e23aaedc06fe548bf1d42c9ba227dc7f41ef944338b91092ab0921792a7bc8af9597c51035aabd0246af067065fb3a40", @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x15a, 0x0, 0x0, @fd=r3}, @typed={0xc, 0x15b, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x128, 0x0, 0x0, @fd=r8}]}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "4e8c1b9ef3bae896e2d0a04c"}]}, 0x554}, 0x1, 0x0, 0x0, 0x4}, 0x2004000) 472.357505ms ago: executing program 1 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000300), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xa9b, 0x9b72, 0x2, 0x5) close_range$auto(0x2, r0, 0x7) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) 297.182462ms ago: executing program 1 (id=121): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r3 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r3, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x660) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) getpid() socket(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 182.787433ms ago: executing program 0 (id=122): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x6, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x9, 0x0, 0x4, 0x0, 0x0, 0xd12) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/ip_tables_names\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/39, 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xf, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x42c901, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r2, 0x801c581f, 0xc60) r5 = prctl$auto_SECCOMP_MODE_FILTER(0x1, 0x2, 0xffffffffffffffff, 0x8, 0x8002) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r5) close_range$auto(r4, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) copy_file_range$auto(r1, &(0x7f0000000080)=0x9, r3, &(0x7f0000000140)=0x4028, 0x9, 0x10) close_range$auto(r6, r4, 0xbd) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x402, 0xc0}]}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/34, 0x22) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) r8 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r8, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000e40), 0xffffffffffffffff) 0s ago: executing program 3 (id=123): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@generic="4cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x3) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)=""/200, 0x1218cb729c051738) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 82.234264][ T5810] cgroup: Unknown subsys name 'net' [ 82.360804][ T5810] cgroup: Unknown subsys name 'cpuset' [ 82.369583][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.179981][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.269036][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.280531][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.288307][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.296037][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.298271][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.306467][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.318873][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.319225][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.327519][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.334440][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.348474][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.348957][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.357177][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.363505][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.370524][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.377562][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.392425][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.408107][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.423132][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.434160][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.980584][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.064320][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 87.122809][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.218472][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.378891][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.387039][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.394627][ T5824] bridge_slave_0: entered allmulticast mode [ 87.403942][ T5824] bridge_slave_0: entered promiscuous mode [ 87.425213][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.432740][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.440492][ T5824] bridge_slave_1: entered allmulticast mode [ 87.449022][ T5824] bridge_slave_1: entered promiscuous mode [ 87.552295][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.565089][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.617738][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.624934][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.632457][ T5821] bridge_slave_0: entered allmulticast mode [ 87.639763][ T5821] bridge_slave_0: entered promiscuous mode [ 87.657983][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.665148][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.672633][ T5822] bridge_slave_0: entered allmulticast mode [ 87.680229][ T5822] bridge_slave_0: entered promiscuous mode [ 87.698773][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.705974][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.713592][ T5821] bridge_slave_1: entered allmulticast mode [ 87.720801][ T5821] bridge_slave_1: entered promiscuous mode [ 87.728636][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.735769][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.743059][ T5823] bridge_slave_0: entered allmulticast mode [ 87.750169][ T5823] bridge_slave_0: entered promiscuous mode [ 87.757700][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.764841][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.772263][ T5822] bridge_slave_1: entered allmulticast mode [ 87.779546][ T5822] bridge_slave_1: entered promiscuous mode [ 87.801378][ T5824] team0: Port device team_slave_0 added [ 87.820004][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.827192][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.834511][ T5823] bridge_slave_1: entered allmulticast mode [ 87.841953][ T5823] bridge_slave_1: entered promiscuous mode [ 87.861202][ T5824] team0: Port device team_slave_1 added [ 87.891415][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.915212][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.939959][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.951287][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.974399][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.004712][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.011836][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.037908][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.052378][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.082962][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.090002][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.116156][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.139344][ T5822] team0: Port device team_slave_0 added [ 88.147765][ T5821] team0: Port device team_slave_0 added [ 88.175890][ T5822] team0: Port device team_slave_1 added [ 88.183237][ T5821] team0: Port device team_slave_1 added [ 88.216608][ T5823] team0: Port device team_slave_0 added [ 88.243976][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.251238][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.277445][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.290529][ T5823] team0: Port device team_slave_1 added [ 88.309839][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.316914][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.342867][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.354676][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.361846][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.388093][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.422066][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.429140][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.447016][ T51] Bluetooth: hci3: command tx timeout [ 88.455218][ T5145] Bluetooth: hci0: command tx timeout [ 88.466356][ T5827] Bluetooth: hci2: command tx timeout [ 88.466861][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.506590][ T5824] hsr_slave_0: entered promiscuous mode [ 88.512991][ T5824] hsr_slave_1: entered promiscuous mode [ 88.526588][ T5827] Bluetooth: hci1: command tx timeout [ 88.535464][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.542512][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.568568][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.581207][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.588210][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.614374][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.697910][ T5821] hsr_slave_0: entered promiscuous mode [ 88.704342][ T5821] hsr_slave_1: entered promiscuous mode [ 88.710999][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 88.716896][ T5821] Cannot create hsr debugfs directory [ 88.777303][ T5822] hsr_slave_0: entered promiscuous mode [ 88.783564][ T5822] hsr_slave_1: entered promiscuous mode [ 88.789859][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 88.795599][ T5822] Cannot create hsr debugfs directory [ 88.879320][ T5823] hsr_slave_0: entered promiscuous mode [ 88.885787][ T5823] hsr_slave_1: entered promiscuous mode [ 88.892122][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 88.897954][ T5823] Cannot create hsr debugfs directory [ 89.265774][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.280052][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.293201][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.312670][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.365107][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.385635][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.396897][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.411499][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.517185][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.529475][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.539817][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.551685][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.668659][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.680751][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.692794][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.703204][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.765028][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.829661][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.841390][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.875912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.883197][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.905039][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.915092][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.922288][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.965172][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.972453][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.014568][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.021800][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.050537][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.123857][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.141041][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.161178][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.168395][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.203197][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.210416][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.363317][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.418369][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.443722][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.450982][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.476576][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.527736][ T5145] Bluetooth: hci2: command tx timeout [ 90.530457][ T51] Bluetooth: hci0: command tx timeout [ 90.533251][ T5827] Bluetooth: hci3: command tx timeout [ 90.595558][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.611413][ T5827] Bluetooth: hci1: command tx timeout [ 90.672749][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.801449][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.858885][ T5824] veth0_vlan: entered promiscuous mode [ 90.910886][ T5824] veth1_vlan: entered promiscuous mode [ 90.983699][ T5823] veth0_vlan: entered promiscuous mode [ 91.020363][ T5823] veth1_vlan: entered promiscuous mode [ 91.032929][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.068705][ T5824] veth0_macvtap: entered promiscuous mode [ 91.092707][ T5824] veth1_macvtap: entered promiscuous mode [ 91.137886][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.149412][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.161232][ T5823] veth0_macvtap: entered promiscuous mode [ 91.182780][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.195008][ T5823] veth1_macvtap: entered promiscuous mode [ 91.235483][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259843][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.268907][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.299609][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.311474][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.344788][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.360150][ T5822] veth0_vlan: entered promiscuous mode [ 91.395100][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.409679][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.444563][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453793][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.468550][ T5822] veth1_vlan: entered promiscuous mode [ 91.505106][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.513461][ T5821] veth0_vlan: entered promiscuous mode [ 91.522081][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.591496][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.604352][ T5821] veth1_vlan: entered promiscuous mode [ 91.604929][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.681073][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.702020][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.725842][ T5822] veth0_macvtap: entered promiscuous mode [ 91.731044][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.765305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.768638][ T5822] veth1_macvtap: entered promiscuous mode [ 91.780723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.791650][ T5821] veth0_macvtap: entered promiscuous mode [ 91.821162][ T5821] veth1_macvtap: entered promiscuous mode [ 91.878697][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.920927][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.950009][ T5917] random: crng reseeded on system resumption [ 91.973549][ T162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.997444][ T162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.015171][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.073184][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.083617][ T162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104645][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.171023][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198399][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.221346][ T980] cfg80211: failed to load regulatory.db [ 92.267842][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282227][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384516][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.412342][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.461965][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.470595][ T5920] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.482415][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.608516][ T5827] Bluetooth: hci0: command tx timeout [ 92.614037][ T51] Bluetooth: hci3: command tx timeout [ 92.620915][ T5827] Bluetooth: hci2: command tx timeout [ 92.687133][ T5827] Bluetooth: hci1: command tx timeout [ 92.710220][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.720553][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.734412][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.745299][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.709744][ T5940] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 93.736193][ T5940] netlink: 226 bytes leftover after parsing attributes in process `syz.0.5'. [ 93.759193][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 93.794623][ T5940] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 93.963391][ T5948] Unable to find swap-space signature [ 94.246992][ T5956] netlink: 226 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.350702][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.365603][ T5962] Unable to find swap-space signature [ 94.397651][ T5956] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 94.564809][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 94.687393][ T5827] Bluetooth: hci0: command tx timeout [ 94.692898][ T5827] Bluetooth: hci2: command tx timeout [ 94.700113][ T51] Bluetooth: hci3: command tx timeout [ 94.768617][ T5827] Bluetooth: hci1: command tx timeout [ 95.867435][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 95.925158][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.007043][ T5986] netlink: 226 bytes leftover after parsing attributes in process `syz.1.12'. [ 96.184471][ T5997] Unable to find swap-space signature [ 96.655964][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.781540][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.271720][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.349592][ T5990] Zero length message leads to an empty skb [ 97.402335][ T5986] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 97.676713][ T6009] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 97.684147][ T6009] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 99.271021][ T6017] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 99.482642][ T6032] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.388292][ T6050] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.497837][ T6050] FAULT_INJECTION: forcing a failure. [ 101.497837][ T6050] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.555851][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 101.555879][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.555889][ T6050] Call Trace: [ 101.555896][ T6050] [ 101.555903][ T6050] dump_stack_lvl+0x100/0x190 [ 101.555936][ T6050] should_fail_ex.cold+0x5/0xa [ 101.555958][ T6050] _copy_from_user+0x2e/0xd0 [ 101.555982][ T6050] do_handle_open+0x60e/0xce0 [ 101.556007][ T6050] ? __pfx_do_handle_open+0x10/0x10 [ 101.556029][ T6050] ? __x64_sys_futex+0x34f/0x4d0 [ 101.556077][ T6050] ? xfd_validate_state+0x129/0x190 [ 101.556123][ T6050] ? do_syscall_64+0x106/0xf80 [ 101.556153][ T6050] do_syscall_64+0x106/0xf80 [ 101.556183][ T6050] ? clear_bhb_loop+0x40/0x90 [ 101.556220][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.556243][ T6050] RIP: 0033:0x7f25cd39c819 [ 101.556260][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.556277][ T6050] RSP: 002b:00007f25ce26a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 101.556294][ T6050] RAX: ffffffffffffffda RBX: 00007f25cd615fa0 RCX: 00007f25cd39c819 [ 101.556306][ T6050] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000006 [ 101.556316][ T6050] RBP: 00007f25cd432c91 R08: 0000000000000000 R09: 0000000000000000 [ 101.556326][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.556336][ T6050] R13: 00007f25cd616038 R14: 00007f25cd615fa0 R15: 00007ffc80e67648 [ 101.556358][ T6050] [ 105.090065][ T6066] random: crng reseeded on system resumption [ 105.197403][ T6066] hub 1-0:1.0: USB hub found [ 105.206848][ T6066] hub 1-0:1.0: 1 port detected [ 105.988005][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 106.755824][ T6087] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 109.169715][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 109.517748][ T6120] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.896388][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.153450][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.697495][ T6160] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 113.730910][ T6163] hub 1-0:1.0: USB hub found [ 113.785620][ T6160] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.802978][ T6163] hub 1-0:1.0: 1 port detected [ 113.821135][ T6160] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.850192][ T6160] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 113.903372][ T6160] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 113.946940][ T6160] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 114.018032][ T6160] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 114.064863][ T6160] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 114.149697][ T6160] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 114.196426][ T6160] page dumped because: unmovable page [ 114.201882][ T6160] page_owner tracks the page as allocated [ 114.240444][ T6160] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 69884042801, free_ts 28444198670 [ 114.351999][ T6160] post_alloc_hook+0x153/0x170 [ 114.375387][ T6160] get_page_from_freelist+0x111d/0x3140 [ 114.426219][ T6160] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 114.434834][ T6160] alloc_pages_mpol+0x1fb/0x550 [ 114.498293][ T6160] alloc_pages_noprof+0x136/0x390 [ 114.503444][ T6160] skb_page_frag_refill+0x365/0x5b0 [ 114.542331][ T6160] try_fill_recv+0x7f1/0x29e0 [ 114.566175][ T6160] virtnet_poll+0x154a/0x3a20 [ 114.572877][ T6160] __napi_poll.constprop.0+0xaf/0x450 [ 114.608288][ T6160] net_rx_action+0xa40/0xf20 [ 114.666224][ T6160] handle_softirqs+0x1eb/0x9e0 [ 114.682228][ T6160] __irq_exit_rcu+0xef/0x150 [ 114.747003][ T6160] irq_exit_rcu+0x9/0x30 [ 114.751315][ T6160] common_interrupt+0xbe/0xe0 [ 114.756008][ T6160] asm_common_interrupt+0x26/0x40 [ 114.831501][ T6160] page last free pid 1 tgid 1 stack trace: [ 114.849436][ T6160] __free_frozen_pages+0x7e1/0x10d0 [ 114.854730][ T6160] free_contig_range+0xde/0x1d0 [ 114.903492][ T6160] destroy_args+0xa8/0x7a0 [ 114.946272][ T6160] debug_vm_pgtable+0x1b66/0x34c0 [ 114.951368][ T6160] do_one_initcall+0x11d/0x760 [ 115.036273][ T6160] kernel_init_freeable+0x6e5/0x7a0 [ 115.058559][ T6160] kernel_init+0x1f/0x1e0 [ 115.062955][ T6160] ret_from_fork+0x754/0xd80 [ 115.106220][ T6160] ret_from_fork_asm+0x1a/0x30 [ 116.801005][ T6217] mkiss: ax0: crc mode is auto. [ 117.073404][ T6210] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 117.461705][ T6225] netlink: zone id is out of range [ 117.478181][ T6225] netlink: zone id is out of range [ 117.496666][ T6225] netlink: zone id is out of range [ 117.532854][ T6225] netlink: zone id is out of range [ 117.568464][ T6225] netlink: zone id is out of range [ 117.573732][ T6225] netlink: zone id is out of range [ 117.605861][ T6225] netlink: zone id is out of range [ 117.616642][ T6225] netlink: zone id is out of range [ 117.625044][ T6225] netlink: zone id is out of range [ 117.635419][ T6225] netlink: zone id is out of range [ 118.362397][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 119.337836][ T6248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.347030][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.441755][ T6248] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.504275][ T6248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.518761][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.625802][ T6248] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.633722][ T6248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.641378][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.668317][ T6248] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.705525][ T6248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.714010][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.807157][ T6248] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.410362][ T51] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 120.646443][ T6258] ubi0: attaching mtd0 [ 120.655944][ T6258] ubi0: scanning is finished [ 120.668978][ T6258] ubi0: empty MTD device detected [ 121.414952][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.455288][ T6258] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 121.463104][ T6258] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 121.470528][ T6258] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 121.477760][ T6258] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 121.485189][ T6258] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 121.494364][ T6258] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 121.506348][ T6258] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1993527222 [ 121.516757][ T6258] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 121.568241][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.599578][ T6266] ubi0: background thread "ubi_bgt0d" started, PID 6266 [ 121.649703][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.671348][ T51] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 121.671391][ T51] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 121.686351][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 121.693429][ T51] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 121.693460][ T51] Bluetooth: hci2: unknown advertising packet type: 0x12 [ 121.702220][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 121.716044][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 121.736613][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.398055][ T6280] NFSD: Failed to start, no listeners configured. [ 123.424808][ T6294] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.499669][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.660916][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.797003][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.816467][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.932654][ T6299] futex_wake_op: syz.0.59 tries to shift op by -2048; fix this program [ 123.955788][ T6294] futex_wake_op: syz.1.57 tries to shift op by -2048; fix this program [ 123.981876][ T6294] futex_wake_op: syz.1.57 tries to shift op by -2048; fix this program [ 124.006828][ T6299] futex_wake_op: syz.0.59 tries to shift op by -2048; fix this program [ 124.039667][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.050160][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.060955][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.077375][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.089810][ T6299] 0x000000000001-0x000000020000 : "" [ 124.104825][ T6295] FAULT_INJECTION: forcing a failure. [ 124.104825][ T6295] name failslab, interval 1, probability 0, space 0, times 1 [ 124.119332][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.2.58 Not tainted syzkaller #0 PREEMPT(full) [ 124.119372][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.119388][ T6295] Call Trace: [ 124.119397][ T6295] [ 124.119408][ T6295] dump_stack_lvl+0x100/0x190 [ 124.119456][ T6295] should_fail_ex.cold+0x5/0xa [ 124.119492][ T6295] should_failslab+0xc2/0x120 [ 124.119523][ T6295] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.119566][ T6295] ? security_inode_alloc+0x3b/0x2c0 [ 124.119600][ T6295] ? lockdep_init_map_type+0x5c/0x250 [ 124.119650][ T6295] security_inode_alloc+0x3b/0x2c0 [ 124.119689][ T6295] inode_init_always_gfp+0xced/0x1040 [ 124.119731][ T6295] alloc_inode+0x8e/0x250 [ 124.119775][ T6295] new_inode+0x22/0x1c0 [ 124.119834][ T6295] shmem_get_inode+0x212/0x1040 [ 124.119883][ T6295] ? __pfx_shmem_get_inode+0x10/0x10 [ 124.119926][ T6295] ? rcu_is_watching+0x12/0xc0 [ 124.119974][ T6295] ? percpu_counter_add_batch+0xb9/0x230 [ 124.120028][ T6295] __shmem_file_setup+0x3ac/0x490 [ 124.120073][ T6295] ? __pfx___shmem_file_setup+0x10/0x10 [ 124.120125][ T6295] ? vm_area_alloc+0x1f/0x160 [ 124.120173][ T6295] shmem_zero_setup+0x96/0x1b0 [ 124.120207][ T6295] __mmap_region+0x21f6/0x2a50 [ 124.120262][ T6295] ? __pfx___mmap_region+0x10/0x10 [ 124.120304][ T6295] ? process_measurement+0x1f4/0x2350 [ 124.120371][ T6295] ? __lock_acquire+0x4a5/0x2630 [ 124.120433][ T6295] ? find_held_lock+0x2b/0x80 [ 124.120460][ T6295] ? finish_task_switch.isra.0+0x200/0xb80 [ 124.120493][ T6295] ? finish_task_switch.isra.0+0x200/0xb80 [ 124.120540][ T6295] ? trace_sched_exit_tp+0x13a/0x180 [ 124.120578][ T6295] ? __schedule+0x1000/0x6120 [ 124.120661][ T6295] ? rcu_is_watching+0x12/0xc0 [ 124.120710][ T6295] ? cap_capable+0x107/0x460 [ 124.120749][ T6295] mmap_region+0x180/0x3e0 [ 124.120814][ T6295] do_mmap+0xc63/0x12f0 [ 124.120859][ T6295] ? __pfx_do_mmap+0x10/0x10 [ 124.120896][ T6295] ? __pfx_down_write_killable+0x10/0x10 [ 124.120947][ T6295] vm_mmap_pgoff+0x29e/0x470 [ 124.120994][ T6295] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 124.121034][ T6295] ? do_futex+0x192/0x350 [ 124.121076][ T6295] ? __pfx_do_futex+0x10/0x10 [ 124.121125][ T6295] ksys_mmap_pgoff+0xe1/0x650 [ 124.121162][ T6295] ? __x64_sys_futex+0x34f/0x4d0 [ 124.121194][ T6295] ? __x64_sys_futex+0x358/0x4d0 [ 124.121226][ T6295] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 124.121253][ T6295] ? xfd_validate_state+0x129/0x190 [ 124.121293][ T6295] __x64_sys_mmap+0x125/0x190 [ 124.121332][ T6295] do_syscall_64+0x106/0xf80 [ 124.121356][ T6295] ? clear_bhb_loop+0x40/0x90 [ 124.121385][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.121408][ T6295] RIP: 0033:0x7f25cd39c819 [ 124.121429][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.121450][ T6295] RSP: 002b:00007f25ce207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.121474][ T6295] RAX: ffffffffffffffda RBX: 00007f25cd616270 RCX: 00007f25cd39c819 [ 124.121489][ T6295] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 124.121502][ T6295] RBP: 00007f25cd432c91 R08: fffffffffffffffa R09: 0000000000008000 [ 124.121517][ T6295] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 124.121530][ T6295] R13: 00007f25cd616308 R14: 00007f25cd616270 R15: 00007ffc80e67648 [ 124.121562][ T6295] [ 124.129014][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.580129][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.593921][ T6299] ftl_cs: FTL header corrupt! [ 124.617951][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.627377][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.637399][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 124.808355][ T6302] netlink: 78 bytes leftover after parsing attributes in process `syz.3.60'. [ 125.139015][ T6310] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.568306][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.749577][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.806303][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.886920][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.949954][ T6321] nvme_fcloop: unknown parameter or missing value '7' [ 132.880677][ T5961] syz.1.7 (5961) used greatest stack depth: 19088 bytes left [ 133.170869][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186161][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.583275][ T6392] __nla_validate_parse: 27 callbacks suppressed [ 134.583300][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.77'. [ 135.142674][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 135.226985][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.344668][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 135.868414][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.193412][ T6423] FAULT_INJECTION: forcing a failure. [ 137.193412][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 137.207530][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(full) [ 137.207560][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.207571][ T6423] Call Trace: [ 137.207577][ T6423] [ 137.207585][ T6423] dump_stack_lvl+0x100/0x190 [ 137.207618][ T6423] should_fail_ex.cold+0x5/0xa [ 137.207650][ T6423] should_failslab+0xc2/0x120 [ 137.207672][ T6423] __kmalloc_cache_noprof+0x7a/0x6f0 [ 137.207699][ T6423] ? do_getname+0x238/0x390 [ 137.207723][ T6423] ? strncpy_from_user+0x19d/0x2d0 [ 137.207749][ T6423] do_getname+0x238/0x390 [ 137.207775][ T6423] __x64_sys_symlink+0x57/0xb0 [ 137.207799][ T6423] do_syscall_64+0x106/0xf80 [ 137.207818][ T6423] ? clear_bhb_loop+0x40/0x90 [ 137.207840][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.207859][ T6423] RIP: 0033:0x7fe42a39c819 [ 137.207874][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.207891][ T6423] RSP: 002b:00007fe42b2ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 137.207909][ T6423] RAX: ffffffffffffffda RBX: 00007fe42a615fa0 RCX: 00007fe42a39c819 [ 137.207920][ T6423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 137.207930][ T6423] RBP: 00007fe42a432c91 R08: 0000000000000000 R09: 0000000000000000 [ 137.207940][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.207950][ T6423] R13: 00007fe42a616038 R14: 00007fe42a615fa0 R15: 00007ffc45697bc8 [ 137.207972][ T6423] [ 138.770403][ T6449] netlink: 226 bytes leftover after parsing attributes in process `syz.3.88'. [ 138.807386][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 138.866515][ T6449] net_ratelimit: 4 callbacks suppressed [ 138.866532][ T6449] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 139.438432][ T6446] Unable to find swap-space signature [ 140.527313][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 140.950416][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 141.661349][ T6485] netlink: 226 bytes leftover after parsing attributes in process `syz.0.94'. [ 141.827595][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 141.873962][ T6483] Unable to find swap-space signature [ 141.928172][ T6485] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 142.256898][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 142.338030][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.583970][ T6498] kexec: Could not allocate control_code_buffer [ 142.625362][ T6499] netlink: 25 bytes leftover after parsing attributes in process `syz.3.97'. [ 142.699090][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.292112][ T6517] Unable to find swap-space signature [ 143.406242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.843095][ T6513] sp0: Synchronizing with TNC [ 145.558291][ T6548] process 'syz.0.107' launched '/dev/fd/4' with NULL argv: empty string added [ 145.959248][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.876466][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 147.307793][ T6562] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 147.515114][ T6577] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 148.468380][ T6592] FAULT_INJECTION: forcing a failure. [ 148.468380][ T6592] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.557288][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT(full) [ 148.557316][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.557327][ T6592] Call Trace: [ 148.557333][ T6592] [ 148.557340][ T6592] dump_stack_lvl+0x100/0x190 [ 148.557374][ T6592] should_fail_ex.cold+0x5/0xa [ 148.557396][ T6592] get_futex_key+0x1d2/0x1620 [ 148.557423][ T6592] ? __pfx_get_futex_key+0x10/0x10 [ 148.557447][ T6592] ? __mutex_unlock_slowpath+0x15c/0x790 [ 148.557472][ T6592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.557496][ T6592] futex_wake+0xea/0x530 [ 148.557537][ T6592] ? mark_held_locks+0x40/0x70 [ 148.557560][ T6592] ? __pfx_futex_wake+0x10/0x10 [ 148.557599][ T6592] do_futex+0x32b/0x350 [ 148.557624][ T6592] ? __pfx_do_futex+0x10/0x10 [ 148.557650][ T6592] ? __might_fault+0xc5/0x140 [ 148.557676][ T6592] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 148.557699][ T6592] __x64_sys_futex+0x34f/0x4d0 [ 148.557727][ T6592] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.557754][ T6592] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 148.557781][ T6592] do_syscall_64+0x106/0xf80 [ 148.557800][ T6592] ? clear_bhb_loop+0x40/0x90 [ 148.557822][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.557841][ T6592] RIP: 0033:0x7f25cd39c819 [ 148.557856][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.557873][ T6592] RSP: 002b:00007f25ce2490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.557891][ T6592] RAX: ffffffffffffffda RBX: 00007f25cd616098 RCX: 00007f25cd39c819 [ 148.557902][ T6592] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25cd61609c [ 148.557913][ T6592] RBP: 00007f25cd616090 R08: 0000000000000000 R09: 0000000000000000 [ 148.557923][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.557933][ T6592] R13: 00007f25cd616128 R14: 00007ffc80e67560 R15: 00007ffc80e67648 [ 148.557955][ T6592] [ 149.153148][ T6596] netlink: 226 bytes leftover after parsing attributes in process `syz.0.116'. [ 149.196051][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 149.232826][ T6596] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 149.550831][ T6594] Unable to find swap-space signature [ 149.729905][ T6613] netlink: 226 bytes leftover after parsing attributes in process `syz.2.119'. [ 149.773555][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 149.808971][ T6613] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 149.909808][ T6609] Unable to find swap-space signature [ 150.199682][ T6624] ================================================================== [ 150.199703][ T6624] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 150.199760][ T6624] Write of size 8 at addr ffffc90004269000 by task syz.0.122/6624 [ 150.199786][ T6624] [ 150.199800][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) [ 150.199835][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.199852][ T6624] Call Trace: [ 150.199862][ T6624] [ 150.199874][ T6624] dump_stack_lvl+0x100/0x190 [ 150.199917][ T6624] print_report+0x156/0x4c9 [ 150.199957][ T6624] ? _raw_spin_lock_irqsave+0x52/0x60 [ 150.200003][ T6624] ? sys_imageblit+0x19fb/0x1d60 [ 150.200041][ T6624] kasan_report+0xdf/0x1e0 [ 150.200073][ T6624] ? sys_imageblit+0x19fb/0x1d60 [ 150.200120][ T6624] sys_imageblit+0x19fb/0x1d60 [ 150.200172][ T6624] ? __pfx_sys_imageblit+0x10/0x10 [ 150.200220][ T6624] ? prb_read_valid+0x78/0xa0 [ 150.200262][ T6624] ? __pfx_prb_read_valid+0x10/0x10 [ 150.200306][ T6624] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 150.200345][ T6624] soft_cursor+0x524/0xa10 [ 150.200389][ T6624] ? fb_get_color_depth+0x120/0x250 [ 150.200428][ T6624] bit_cursor+0xe58/0x16f0 [ 150.200471][ T6624] ? __pfx_bit_cursor+0x10/0x10 [ 150.200511][ T6624] ? __lock_acquire+0x4a5/0x2630 [ 150.200566][ T6624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.200601][ T6624] ? get_color+0x1da/0x450 [ 150.200634][ T6624] ? __pfx_bit_cursor+0x10/0x10 [ 150.200671][ T6624] fbcon_cursor+0x43c/0x5e0 [ 150.200705][ T6624] ? add_softcursor+0x180/0x290 [ 150.200748][ T6624] set_cursor+0x1db/0x250 [ 150.200788][ T6624] con_write+0x89/0xb0 [ 150.200817][ T6624] do_output_char+0x63b/0x850 [ 150.200852][ T6624] n_tty_write+0x528/0x12d0 [ 150.200896][ T6624] ? __pfx_n_tty_write+0x10/0x10 [ 150.200930][ T6624] ? trace_kmalloc+0x101/0x130 [ 150.200965][ T6624] ? __pfx_woken_wake_function+0x10/0x10 [ 150.201013][ T6624] ? rcu_is_watching+0x12/0xc0 [ 150.201059][ T6624] ? file_tty_write.isra.0+0x694/0x890 [ 150.201107][ T6624] ? kfree+0x2ec/0x6b0 [ 150.201147][ T6624] ? __pfx_n_tty_write+0x10/0x10 [ 150.201184][ T6624] file_tty_write.isra.0+0x4d2/0x890 [ 150.201236][ T6624] redirected_tty_write+0xd4/0x120 [ 150.201285][ T6624] vfs_write+0x6ac/0x1070 [ 150.201316][ T6624] ? __pfx_redirected_tty_write+0x10/0x10 [ 150.201366][ T6624] ? __pfx_vfs_write+0x10/0x10 [ 150.201394][ T6624] ? find_held_lock+0x2b/0x80 [ 150.201434][ T6624] ksys_write+0x12a/0x250 [ 150.201464][ T6624] ? __pfx_ksys_write+0x10/0x10 [ 150.201500][ T6624] do_syscall_64+0x106/0xf80 [ 150.201541][ T6624] ? clear_bhb_loop+0x40/0x90 [ 150.201577][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.201609][ T6624] RIP: 0033:0x7f0b4e99c819 [ 150.201635][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.201664][ T6624] RSP: 002b:00007f0b4f82a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.201696][ T6624] RAX: ffffffffffffffda RBX: 00007f0b4ec16090 RCX: 00007f0b4e99c819 [ 150.201717][ T6624] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000b [ 150.201737][ T6624] RBP: 00007f0b4ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 150.201756][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.201773][ T6624] R13: 00007f0b4ec16128 R14: 00007f0b4ec16090 R15: 00007ffe7c761db8 [ 150.201802][ T6624] [ 150.201813][ T6624] [ 150.201822][ T6624] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003f69000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 150.201877][ T6624] Memory state around the buggy address: [ 150.201893][ T6624] ffffc90004268f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.201915][ T6624] ffffc90004268f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.201936][ T6624] >ffffc90004269000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.201953][ T6624] ^ [ 150.201969][ T6624] ffffc90004269080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.201991][ T6624] ffffc90004269100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 150.202008][ T6624] ================================================================== [ 150.202025][ T6624] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.202045][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) [ 150.202079][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.202097][ T6624] Call Trace: [ 150.202107][ T6624] [ 150.202119][ T6624] dump_stack_lvl+0x100/0x190 [ 150.202164][ T6624] vpanic+0x552/0x970 [ 150.202194][ T6624] ? __pfx_vpanic+0x10/0x10 [ 150.202225][ T6624] ? __pfx_vprintk_emit+0x10/0x10 [ 150.202261][ T6624] ? sys_imageblit+0x19fb/0x1d60 [ 150.202309][ T6624] panic+0xd1/0xe0 [ 150.202339][ T6624] ? __pfx_panic+0x10/0x10 [ 150.202373][ T6624] ? sys_imageblit+0x19fb/0x1d60 [ 150.202423][ T6624] check_panic_on_warn.cold+0x19/0x34 [ 150.202458][ T6624] end_report.part.0+0x3a/0x90 [ 150.202501][ T6624] kasan_report.cold+0xe/0x18 [ 150.202552][ T6624] ? sys_imageblit+0x19fb/0x1d60 [ 150.202602][ T6624] sys_imageblit+0x19fb/0x1d60 [ 150.202655][ T6624] ? __pfx_sys_imageblit+0x10/0x10 [ 150.202704][ T6624] ? prb_read_valid+0x78/0xa0 [ 150.202746][ T6624] ? __pfx_prb_read_valid+0x10/0x10 [ 150.202789][ T6624] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 150.202828][ T6624] soft_cursor+0x524/0xa10 [ 150.202871][ T6624] ? fb_get_color_depth+0x120/0x250 [ 150.202911][ T6624] bit_cursor+0xe58/0x16f0 [ 150.202955][ T6624] ? __pfx_bit_cursor+0x10/0x10 [ 150.202995][ T6624] ? __lock_acquire+0x4a5/0x2630 [ 150.203039][ T6624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.203073][ T6624] ? get_color+0x1da/0x450 [ 150.203106][ T6624] ? __pfx_bit_cursor+0x10/0x10 [ 150.203146][ T6624] fbcon_cursor+0x43c/0x5e0 [ 150.203181][ T6624] ? add_softcursor+0x180/0x290 [ 150.203226][ T6624] set_cursor+0x1db/0x250 [ 150.203269][ T6624] con_write+0x89/0xb0 [ 150.203299][ T6624] do_output_char+0x63b/0x850 [ 150.203333][ T6624] n_tty_write+0x528/0x12d0 [ 150.203376][ T6624] ? __pfx_n_tty_write+0x10/0x10 [ 150.203413][ T6624] ? trace_kmalloc+0x101/0x130 [ 150.203447][ T6624] ? __pfx_woken_wake_function+0x10/0x10 [ 150.203496][ T6624] ? rcu_is_watching+0x12/0xc0 [ 150.203551][ T6624] ? file_tty_write.isra.0+0x694/0x890 [ 150.203599][ T6624] ? kfree+0x2ec/0x6b0 [ 150.203641][ T6624] ? __pfx_n_tty_write+0x10/0x10 [ 150.203678][ T6624] file_tty_write.isra.0+0x4d2/0x890 [ 150.203731][ T6624] redirected_tty_write+0xd4/0x120 [ 150.203779][ T6624] vfs_write+0x6ac/0x1070 [ 150.203810][ T6624] ? __pfx_redirected_tty_write+0x10/0x10 [ 150.203862][ T6624] ? __pfx_vfs_write+0x10/0x10 [ 150.203891][ T6624] ? find_held_lock+0x2b/0x80 [ 150.203931][ T6624] ksys_write+0x12a/0x250 [ 150.203961][ T6624] ? __pfx_ksys_write+0x10/0x10 [ 150.203996][ T6624] do_syscall_64+0x106/0xf80 [ 150.204029][ T6624] ? clear_bhb_loop+0x40/0x90 [ 150.204065][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.204097][ T6624] RIP: 0033:0x7f0b4e99c819 [ 150.204121][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.204151][ T6624] RSP: 002b:00007f0b4f82a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.204179][ T6624] RAX: ffffffffffffffda RBX: 00007f0b4ec16090 RCX: 00007f0b4e99c819 [ 150.204199][ T6624] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000b [ 150.204217][ T6624] RBP: 00007f0b4ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 150.204236][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.204255][ T6624] R13: 00007f0b4ec16128 R14: 00007f0b4ec16090 R15: 00007ffe7c761db8 [ 150.204284][ T6624] [ 150.204643][ T6624] Kernel Offset: disabled