last executing test programs: 47.165861497s ago: executing program 3 (id=4): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0xa, 0x7fffffffefff, 0x0, 0x0) r0 = pidfd_open$auto(0x1, 0x0) socket(0x2, 0x80002, 0x5) socket(0x1, 0x80000, 0x7fff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0) socketpair$auto(0x1, 0x1, 0x4, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8002) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bind$auto(0xffffffffffffffff, 0x0, 0x7) connect$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x400100000001, 0x1ff) readv$auto(r2, 0x0, 0x4) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x1) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0xb}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r4, &(0x7f0000000100)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~15\x9dv\xb2H', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r4, r0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x7, 0x10004, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1004, 0x7, 0x9, 0x80, 0x8000000000000000, 0x1, 0xc, 0x6, 0x200, 0x1000004, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 45.923612578s ago: executing program 3 (id=5): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x6) r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r1, 0x6a, 0x1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c8c9b00", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250900000008000400bd8c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0xd, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x2, 0x2, 0x1000, 0x42, 0x8001, 0x1, 0x60, 0x648000000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 43.714785615s ago: executing program 3 (id=10): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f00000001c0)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) ioctl$auto_KVM_GET_API_VERSION(r2, 0xae00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x3, 0xfff, 0x1, 0x948b, 0x8, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0x62, 0x10, 0x7, 0x6d43, 0x0, 0x7, 0xfffffffffffffff7]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) r5 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) fanotify_mark$auto(r5, 0x201, 0x9, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r6, &(0x7f000000be80)='batadv0\x00', 0xf) 42.99479143s ago: executing program 32 (id=10): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f00000001c0)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) ioctl$auto_KVM_GET_API_VERSION(r2, 0xae00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x3, 0xfff, 0x1, 0x948b, 0x8, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0x62, 0x10, 0x7, 0x6d43, 0x0, 0x7, 0xfffffffffffffff7]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) r5 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) fanotify_mark$auto(r5, 0x201, 0x9, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r6, &(0x7f000000be80)='batadv0\x00', 0xf) 6.975703509s ago: executing program 4 (id=126): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xa0000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x4041, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x64800000000, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) socket(0xa, 0x801, 0x106) pipe$auto(0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce32a9af15390e93a8760df83859e16320e8d0b1161f13d12a586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700000000000000000000000000000000000000000900", "e600d778e82f9b8db7e27a036e39a8ac08de04036d65be7e3be77e6b64f6a2c7fb08c6f5ce381dfb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfc4f40b0b473c72efd18bf61d000012c5e46c68922aeb00", 0x3}) socket(0x2c, 0x3, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000100)) accept$auto(r2, 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0) 6.670434057s ago: executing program 4 (id=127): mmap$auto(0x0, 0x20009, 0x80000e3, 0x4000000100000eb1, 0x40000000000a1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x8605, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = gettid() capset$auto(&(0x7f0000000000)={0xfffffffb, r0}, &(0x7f0000000140)={0x8, 0x5c, 0x6}) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.246685409s ago: executing program 4 (id=130): mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0xfffffffffffffff7, 0x3, 0x1) semctl$auto(0x3, 0x2, 0x13, 0x9) r1 = socket(0x11, 0x80003, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu8\x00', 0xa0901, 0x0) ioctl$auto_TIOCEXCL2(r2, 0x540c, &(0x7f00000000c0)="c6ec1e613573ef522ecf6f9dc663149a2ca03a7ff3145fa4c5b5339eb2e76960f955c10d022aa0d821c16fbb795c85a85745b138347434e0c0d4f8647fd01e185e76d27c517e9e871a0693c81b13994606ae06a710155fefe0d4ccd00a98b8e48fe1fda3db18e63072c69f8dd7ead6cbf4e61fa2") r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r4, 0x0, 0x39b8) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000080)={0x1f, 0x0, 0x202, 0x9, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0xa7, 0xfd, "ee77f9a7b1e09cfd46ba8f0d29674503d6c2605641007d752c696f07d2722f622dbe1afe48b981c99f84f3ec12ad4e9b803ade66b5005731f8a34e36d36aae1e6120003a54b522bf5a553ca2c9f884c9b25dfe64e6c1faeea70a2a1159b2b23f3d7cf9ebdb0d4146d1b9302b82bdbaadd82a43cfca44f20727913a9fe44098d42e776b9f78d94ed4342a8b4f0622184f28e646b7626848ef6fcd8abe44499a0bba25ea"}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 5.202857953s ago: executing program 1 (id=134): listmount$auto(&(0x7f0000000040)={0x200, @inferred, 0x7f, 0x81, 0x400}, 0x0, 0xf, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x482b01, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r2, 0x9000) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x9, 0x5, 0x6, 0xffffffdffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xf, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x0, 0x0, &(0x7f0000000500)="745564adafe6a295b7242223459ba005d5d72c51044c539ece5ef156e2ac1f0dcc5dd3827b4ad310d74d4ab5f660257e5674af130aeb35586e5ca2d193843aa305ea1a38558751fd8b69758f11d65b70f028de042b04d8d4ece14438d39917841ff01ce5226b5b57c1a04ddd8458195ee425ce222cb6acaf12d7cecaa7c483b90b07f2a4cc4faf38b561ad9a27bf4278171e690018bdc51c9ac7e24c34cfd9fee866cdf9be0aeaf7087e84cd8855d8f03cddcef9441fec3dbc2527322960d9ed2962fe16dfeb630b40115a71", 0x80) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2e, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2822c1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/026/001\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) write$auto(0xffffffffffffffff, 0x0, 0x100) r6 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/options/record-cmd\x00', 0x2802, 0x0) close_range$auto(0x2, r6, 0x800) socket(0x10, 0x2, 0xc) 4.859998484s ago: executing program 4 (id=135): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x715603, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x30200, 0x0) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = socket(0xa, 0x1, 0x100) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) writev$auto(r2, &(0x7f0000000180)={&(0x7f0000000080)="3af6b96a4c1220ad", 0x10}, 0x7) (async) modify_ldt$auto(0xc, 0x0, 0x100000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty61\x00', 0x2, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) r3 = socket(0x9, 0x2, 0x0) setsockopt$auto(r3, 0x0, 0x2, 0x0, 0x5) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) r4 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r4, 0x84, 0x22, 0x0, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop5\x00', 0x58d040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) (async) write$auto_bm_entry_operations_binfmt_misc(r1, &(0x7f0000000500)="b72202b15a374a58daee3b243a7e0bae10e3a251bf530b0f7d3d97432fabaa1964ca4124758436a74012b4c39224c9308cd167d9bf66d83453de0d374120d3b4c2697202461da20ce5048bbdf2ab6b6d614a076a10dfaee4f406fcfcc53b369234cc4a91c521f74351a4322cb986fa92daf918199aa48b5868d4226c6890f5bde000662c5dcbd13106b879f29eadf442d7a6c9b66650386fbaae4d3e4e44fe5143c1bda89bb099ae5696b2587863e54dd4d941cf09f9b785a3d104341ea4a0fffe109263c05a617687d8f8941cdc273e1231c8d207db65dddc38ba3f8c9a7145b107db5331d0ce7535a4b864064d0a9c382389903a51f39100d3e3f7cfbac9264efd44753bab020633b90779ce0916cebabb1e9b1884ec5853b69b57f22cc95059541d31369561b93e3177f1b8a21594159d3e55ae955b8ded9c54aa0c0d91a97fa15621045c426f1b515e9d2e86a5f3fc146e6540ab441419d35d252ca8ddc94992a53f80b75ac112a79db837bc90d5c2230b710cf37451baf26f7afaf7f02c0a9e2c035fe29218fc39e87263482cefe8a6f4a18348c872396a3172096bf6138c1ea262020d6519b7d28d48517b66bfbceed515f62a98593e8a3d509b7fb9841d8ccc4ec466ebdfe4bc9b58794bbb4ad2b284b531a849a4b1af99d390b29fe698776ceab6d62557d7334b0f13e5dbe7d28000b4d2a33de873f57c89b13518296c16a8e580f6e3bcf11ba3fd30de19b351b538d31067503ba8eda3867000133df97fe2adde19b88da4777a23bc821c765d4d2aa47df24962e1b682030c1a51e3299a735ec2b00d8cb2ba0c94f984eb6581b8c50177f145dc0aab114da4a8401f3250d10cea972c20737e75f593239f94eb4b43ff77cb0f34b04ecbd737436ba1b96574cbc41703f28f52369f25a41154f74cc3a2889689d22ab1fc7b962c78b8c04f80b3085b7d1c5147a17292dc20b87dfe20e97fa41a4b1d428f7ff4bde9c70ac458e6f4a40f8c603a86028bd112ee50681d926fbcaa3d8416e855de74de9544eacb1f59bc00b179d41c0263856f7fe6ffa4cab588072c0f5126e9bd0827b28d9b3667050a12f797c033cbcdaf865bea2abf43961aa43952a4731c60152cee8d928541cdc7ecf40cad21c12a11ff124e8ce2a308409040669c0b9700e4c02fa8261f3180e2cf259b9cf50e9d7d5f02eb04eda42e912542306a1f134ec2aa3a63c52d00ad7af778961124e056ba77fadb51ecea91d6ef80d70fd668225c73f9e8087d7a94d8844e65283f837a4cd7813ef8bb22601fa5f08ee4fd43acb74d90f64d6dc8ffca05a424884e2a023c2075cd2eb5c05f4c7097f0af6dcd1b6fa6694a223ea1a1d9662df2bafac63c8592aceb163564da69f6c97fcfb580fa7bfe1d8d7d6b7d7402d4a6766c884c9d0b63c63c388c4f68212f3a1baa46256d5999fc9d8961a6d81ba1beff9d99786423c7e4a163b02d929d645181d410cf4a8733a4e7b77883aa82fa89f6edfced671b60ffa01147b6e9166b9ea3a581b174caf7988abb7699792e986874b1ab1f7cdbcc92afa8daf2d5bdca431b1826a644b5a6cc1994ea6e9b114d175ed4684ff16876fbef9b993d68feb5a065399795e06af87179beffcb044a6493f7513292ea3fd2d14613adfa6cde3b6604e82b4b9ecb30001bb1567ed36dac57ab9a78f7c7981dcf48bb4fe5b944a6104f35d5", 0x4bb) (async) write$auto(r5, &(0x7f00000009c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\xca\xd3\xaa\xcf#\xa1\xcc\x168-\r\x1c\xc7kq\xa7\xc6\xd7Z\b\xf7}u\xd7}\x8be\xd4n-\xb8\xc8\x8ah\x98W\x04\xd5\x1cA\xf7\x8a*W\xc32s\x7f\xc7\x92?>\xadpO\xccBE#\xe5\xdb=\xc9XKg\xa3\xbey\xa1\xbaS\xb6%\xe0\x1fA\xa9\x03\x10\x8e\x8b,\x1f\'\x92.\x1f_\xb3l\x84\xadv^\xea\x82S\xa3I\x97m\x83\xe1\xc5\xc7*K\v\xcaJ\xba\x9c\x97\nM\xcc\xee\x9bh\x8d\x8d\xe1\xe6\x1a,\xb9\xdf:x\xd3\x8dn\xb2>\xed\x97\x94:t\xc3X\xfe g\xed\xcc\b\x92\x88\xbc\xa0Z\xd9\xcc@\xf1\xfai\xf9\xb9H\n\xa4J\xfc\x12\xb8\xae0\xd1\x87\xe6kcbJ\x7fK\x9a\\P\xdeV$\xd5\v', 0x81) 4.704120307s ago: executing program 2 (id=136): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socket(0x21, 0x2, 0x7f) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x7d, 0x9, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x2c, 0x1, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) r2 = prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x13, r2, 0x7) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000340)) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r2, 0x0, 0x9a6, 0x7000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ILA_ATTR_IFINDEX={0x0, 0x4, r4}, @ILA_ATTR_IDENT_TYPE]}, 0xfd22}, 0x1, 0x0, 0x0, 0x2600088c}, 0x46085) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/lockdep\x00', 0x2, 0x0) pread64$auto(r5, 0x0, 0xffff, 0x200000000000b2) (async) close_range$auto(0x2, 0xa, 0x0) (async) io_uring_setup$auto(0x6, 0x0) 3.775324285s ago: executing program 4 (id=137): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0xfff, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw, @integer={0x100000000000007, 0x5, 0x1}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(r1, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB="786017f902aee6364570db1067ab32c3d76ab45c684e64b27b"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000640)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r7, @ANYBLOB="01022cbd7000ffdbdf250200000004000180c4010180bd013980ab01eb804540411dc202cca7c3000938b0c18de4cfac1203a8319dc7b96f0e2a79334de3be28009e292ede89fa030800dd00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00-\x00', @ANYRES32, @ANYBLOB="5ecb8698ec000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) 3.705088397s ago: executing program 2 (id=138): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) read$auto(r0, 0x0, 0xf00) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000140)={0x4, [0x6, 0x6, 0x6], [{0x5, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x1}, {0x1, 0x9}, {0x5, 0xfffffff9, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x1ff, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x41, 0x0, 0x1, 0x1}, {0x100, 0x401, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x0, 0x1}, {0x7, 0x6}], 0x9, 0x5, 0x71, 0x1a88, 0x0, 0xf, 0x80, "c60a37acf2dc75255ea3694871ae6ce3226efb963bb06ae9d83a06c03c5893b3ebed21b7ae32217b8753a90220303d754a166cd3432a588f8374923aaa35dd57"}) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x60881, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x3, 0x1ffe1, 0x7, 0x3, 0xf7fffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x82, 0x4, 0xfff00000, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0x0, 0xffffffff, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000005, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x4, 0x0, 0x800000, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) (async) ppoll$auto(&(0x7f0000000140)={r0, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="04b6532b", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) socket(0x26, 0x6, 0x84) (async) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) (async) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x10001, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x4, 0x0, 0x40eb1, 0x401, 0x300020000000) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xf9ef) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r5, 0x110, 0x4, 0x0, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 3.630117423s ago: executing program 0 (id=139): mmap$auto(0x0, 0x45, 0xdb, 0x9b72, 0x2, 0x8003) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, r1, 0x7ffffd) openat2$auto(r1, 0x0, &(0x7f0000000400)={0x4, 0x9, 0x401}, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_setup$auto(0x4, 0x0) lsetxattr$auto(0x0, 0x0, 0x0, 0xd843, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0xffffffffffffffff, 0x14020009, 0x5877fc9e, 0xeb2, 0xffffffffffffffff, 0x5) recvmmsg$auto(0x3, 0x0, 0x5, 0x4000, 0x0) socket(0x10, 0x801, 0x84) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0xfffffddb, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 3.443445486s ago: executing program 2 (id=140): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(r0, 0x5, 0x43b692d5, 0x0, 0x56f) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) socket(0x29, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x76ba30399b6c37, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb2, 0x403, 0x7fff) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r1) sendfile$auto(r1, r1, &(0x7f0000000340)=0x7, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pread64$auto(r3, 0x0, 0x40, 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.413780956s ago: executing program 1 (id=141): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000001380)={{0x7ff, 0x0, 0xee01, 0x5, 0x80, 0x1, 0x4}, 0xb, 0x5, 0x2, 0x6, @raw=0x7, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140)="69967666e3840be117cd536544c791ac", &(0x7f0000000480)="533e48a4757d18494098ebcc609bdc1ede7f"}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)={0x34, 0x0, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x4, 0x0, 0x1, [@nested={0x14, 0x122, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x5ae3693b}, @nested={0x4, 0x8b}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) r0 = socket(0xa, 0x2, 0x3a) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x40}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x5}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x10) geteuid() ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000004c0)={0x9, 0x1, 0x1, 0x0, 0x4, 0x0}) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000500)={"03658c410ea2340aed8aa28f8c5ee6eb02118ee5e1a2653210ce088fa7b9eef1", 0xf8e2, 0xdc1, 0x101, 0x8, 0x4, 0xffffffffffffffff}) shmctl$auto_SHM_INFO(0xffffffff, 0xe, &(0x7f0000001640)={{0xfffffffa, 0x0, 0xee01, 0x4, 0x7, 0xd0}, 0x7, 0xffffffffffffffff, 0x8, 0x100, @inferred, @raw=0x200, 0xa2e1, 0x0, &(0x7f0000000580)="935aa675d031cb0ecf3aab426185efe3fcd836784189372f0c9b814ce07b3a157e482178a275769f6a472d3b9f206e6fe5fd150949122671e5eef21d33713c07b1397583f79db6bdc86dc6ed3bf11f1f8025b0e1b4b0cd25215267709cc4026585f9a2b57e5ce96275a4b4a6a2bd9b8aad4a348ca573399966ca26009c588fb570880424f80a36146310e1fbba6b3c507bac26447262560edbbbb5a8652187f4173ca2214e35e1408b86a5b054388b52e439c6ccd0897ff2beba5f951c7ece9e3021298ec654a4423a3ae067c50e1a4a9b13e786dcdfb651822f9dc0536409a2970cd3df0f8ecd6e0453bdc0c0b3ec2e99115a267c913f6cf6287320dfdf2adddabd9764e59f8ebe254f24e85d37cf1bab4190aa485fecf6605834547ab65991b5d1f97f948b3b5b9837bd1b59b22b063fc5ac6c5653d843c4335b3b399afeaa757a6f508ec0adc16a0925e272388095f6edf903312f5d542b4654d4facf10737324d871283ab2b58a5e71d725853b6c09140fbdd01840f3cba9dd6686f101440c40a9705b37a3689cfd3f91d238a32d1d6a5ee3dbdd91b7289df53fc3fc81b7c4d3b6bd1178c1083c971a8095aa7395b93a16c2aa8833e5a618c8b352884278dd87c8522ab67481044ca0413881b1df6c38b0d048b446d31f3a486fb9e82b807d36c12333c617eaa1e10f0f836f2139c84ec9975088d761688a2508d41f36d0ee0c0c3be11e8ef19918ad6eff89d0c47e57a48ccac5c42df8e672e49dbe109bb0ab7378e130a11277013a7d501bacd9f43e7441c904af1afb321d1c9d0d6bf127acbab97f0543e345c1bd4469d74a127bd2f8ef1800faf7a43d8dda4ce66314ef9d63c935fc3e2c8ed788b55ae9b20c4ba99d1afb5f69be510baa5152609ab9b42a8db23247b7aa3bf8e47c86f561e7422249f38382a888568e1b72030e40556693ee5680919a5924ee8a3131e31b01dd74b56a6edf9ee35ba408b6449710f98e5cef951e94eaa8895bbf6b71ed12efc311136dc66450da4b2a4d3c99c7372167715ca9db7ec9a9e4003503daf639a62ca47b348589d4f2a6578a74310b6338766b7017cd32c962e80d3a7a4160721b09b5d8dcc561104cacf9aecaecce2700e6a7e56ae16f07ff68d84e37f3b708abae973150579782234115c28ee259bd43e5c71d83cf9672b36db9f2ded0893b050282d2364abf713a0cb9e19c2394b524d01336dd8ea7bf1f47c926eb121c010f558047ab2921f39e84c32b036bb37b67dd442832a636bb02f60f2703047e66da7f6097e3050b8b7cdd96331e16859fd662b272d7b3314313927b718daa83a4364260971f85dee6c6a078c3850041568e26b6e5dea420942941cc7b2d3b80041a0e9e19c0ae5f88b55166c2465d72321f2f6c826fa469ccecd88abb20753df4558cc55438876c35f146d940f9ff5cadfd7ae2628cad4791108ac0d7201fa4a01d728d2d1b9f0117707bb1c08d0284d84fa2d207039339e214994d3ae64c9dad943897782d1f28422739b14707201f3886e170bb65166f822405502546fe04938692af5f6e0ba6f8db3e93c1c7fd065929110fbeb454d9b00b52b927e026f459337b74a000a253d5b705b9aec4a922b7b1bbc9f929dbca346ba0bf417b1f188d6fa55185f2365551b634132bc4106f708d86391a16e949efd13d9adb9df660981ba95aa28ad7ad29e8501f56be730e9894d3a52acc1cc30b759e282e1d6fb24da238c3d0e13e0edfe634eb1ece8dd63ab8459b504c076609c4ae36e3483bbe5a7541796006f14cf2237bf3fdbe2fb5925be87a1cd5c921c659dfd10a71dd1a5d8b71304dd16b4c2bedb492771cb8309e2e7962224cb08aa9a1cc3a1c327b15739c61b63fcd67e3142e3fe789d4ad83bf1405954053abe8d127276fb422fe59c6642b5ca541efea61297c8fc55651623c09f202c72da1d509e1e8790d02276f2163deeaeb831565265d04008414af4df43fda60df826faa523d8f54f1a27bb2cd6649ed1a51c05eee7580624d24d5dd5b7337c3d45589a909be7027f1fb4e4b747210596f64d55b83fb8a1e37fe31ab85682edf37313196cd70b1770b69da741eed141b5053ee10629038ca2c9ad1ea192be661f57618fa11d5f55cee224df4b1b919dc7f565793e2e75ae254faceda95bc27b35013373560849fed81a842d3ecd5bc809aa1b4b0e866d2a3570ab234a98441570ff2f100756cb930c0b39dbc4aaccc9322d0ab3840fa078e8079a4ae35a308e425e43734d0ecb9fa08ff12a2d84bda5acdc7c0e1d918006768b47eac5740478de9528980fbebe954b0e5fbf17faf971f1e672eb8458592a907108600bfc336e6ed7fbcf87ac0aa3fe7d0b25ce22cd6528dfeaab2d18ceed75c12c1b439afd6045230c04382f3c5a6a94c286963ed229632e0fc8284475231eeef01a8758682ce0dc43e8666d6b5b2ff5df38ade00dccfdfda84064dd22a603bb58b9225d9b70d442c1e227c024f7a454bb25e5abf7c6c542ccc69b045e92021ff91bd8238f233f3689f47642082357f4a5a66f63f16ca3e28c1601eb1a4f5abf4b6da67c07ae64db765bf25868f00c0c6bd00d6e24712384d01d1e6aa57d7fe4e89d7758f481cdf2a37b5fcee30ebd6bc38fe23761c68ea173129574ce0b6b937b5a5fec1c6f63097e9873bb9ea0bd946cfdc37c871955e559fb46eb07e617168159920f912b96ccef1d75911bfafdb8325fa9c207a75b45562d026baa8341394547171e7c217a639e67cd9f8fba3fa5a6c8718640b7c45411b226cfe838bfcfaae657356f0e9c4d3b506646cc15f34165f230c54706d51222a64e36ad639c6aeabe7cab960bb514f84d744dd271c02b76759f86ec7d15e058a0c98fc659d9e1b290ed2928351c1ded5d528206cdb1c6f4a063092916298c9c32342ee3fba34b1f6e0ce241e4efb70bf8ed1d028af5e8668d5c87cdbcb393cc7c74f5e50bc9a92b1d72bbd433d89504712a7db0646fa4c423a918e6cc77237bd199c57d085e5a497cebb4b2a6d7c214d91adf639615ffc0ba27abb416098e447d2ee0d5c41158c7a7860792080875055142027e03e140e246046ec8c348a170731d2619f402880315b9ea5049f5aeb8933bde0b4b03426372dbc4b428fdf671bc095da6064587806c3c860f2f5cfcfc2160e56523370f7eb2d140a750e50f28cfb8bf716c86fbb161ee7423b5eec0e1aa5248ea9bd0a780b8d14a10ceebafb01566333b5832fc36ba108cf7319021e480dff5ea30ee9c6858dfcf429b631bd60591d7a525bcb1e17c08db2619e27d6502af9f7a13e17273cd4e0abf4fe297f770d61fc306364ea188eae7f8920f8585f43ca9fd996084df10c96a829976955b9f85790fc27458b09c47284c25f2f127e21391f8d50d0400a8d0dd11568953e826b4252ece55515d67363f4a18e17fda36d587d0e1d08d28c505aa88b58ce88213cbe78ffdf8c9de699ef8e096c5fc2cc0320034c76fc617f55d1bb0eeeb78c14e17f9d976ee7eacb36ee83427226c8ee567a7fe539aa27553e8c39f5514a6e8330c68cb7c39b86910b2727c4e1dd42cae60d4ba6f14b95b6b23f61b8efb34fdf415fccc2bd525fea7c75d6b8b228a077da4e5fd6afde9b4b8406144bb95b1d40b50b82e99f09982cf8e3ecdeed8ae7c3c5c6ded987712a412314fd20b3c1513b3394cf3167edc30f078d4067454dae57bbea8918321acc4311fd7551e7258364f740303c77b2315bc39e1af9ea753e2ae119c46c18979092395704e65b29f335c11078d9c202c620d9b22b2010d854cd543b6b024b6bbeea9fef3ec0dbcadec5f3cba93aa9afbaa9b80d9ee515a9159ac918c5bef92bcfd877285c557ca31cdb695bf188311b932f3aa1fc298a10041dc2d7b9fef66af38c45f130e3da576e9adc63d7c1fac624a0b6b7acb97da2a082a458a7cbcbd1bfe6d8f8b35c4ff9e4739c47ad8bcf727df05558430112da3d839c22147df6e38a8ca7c7b765971a43610cb4afc32f28e45f13e4f80a1b881e344e0b5db55a97f4c6400258fb2fdf16e34fbcdca74942874928654f5c0dc1dcf760c23e8d3ce0f95023a89a2f21404e04baee9f0c47f6866d4ce0708f53066e906355e33e263e37be57b8c7d12ba8d698485c6c1f3736af501febb8a20e31791e2eb9b1b7f1ea3f9a0084a6294a904f622f506cce6735844d991f785fb8332a229092a54043f6a1c6406037364f6a630ef25914ed038534944bfbeabc858e223e1589e942587226213d0cb664bec993706014c49e540c4166ef3a93bffad7fadbf35a72f4c9cd5275fb5e43058805c4dd411c57865869b859d667021fbb11c6e893a094238830f2d2c2106632b89eef1e023ab98264e0afc17b2a0a2a8c600899dc8c9ae96e567d23eb4dda4a54890c4ffbdbc32151e12900ed68c73ad871a9fdf09a62cef3def93a88891d3f105ca11d562c84fce09bca75c6f9614c57c2b829531ac54feae3420a73612c2aeb7147239be63f8347bf6b2fa14496b45b136c9b5e2735f3916177d2641d0b6c635f6dadb3feea18a5b4f9462841eceb77f8e70b4cb8689fe93379954a0f7060843b972162c0cf1df2745164645b5a22ac8e954528b6c62c8493176dec4fe245e579c4e34e8e63ab441f92ffd3692dc73d1396e7abcb170f0a13f6e0552efa6e8ad99deea79d951ba484770b839a4458ae9e9f8df506db51b227422f8132bd7ec3d8ec30438529c63f1c602c73be39f143bdbcb1f6bc39afed586df4b3ab0de481fafbe5fdb34d94af92f733da980757ecf50cb0a7a2a68ef310c701f9a0c41633bde546459d26324171cf4e92cc8b30194de03e406aa97bdf6a28713d7d5ff9679b24c5de02def477cf4255ee6c6b47b209a6962ff99c9a1a3c85ac32fa3fc59472f6bb573bce7e3619aba038b47a182d3f57cd6ff18c26f99e051defc2700d2cc5fca2f9ecc5b0956fa1c676bb9fc467f2cbfb7646fef65c2933a91c2c2c86ca8326dda194d6fd6233e43759a5f2f0775f97f39cff46549583b992847a9377588d75c637179a7e458f6090ffce8d", &(0x7f0000001580)="a7b17c3c7eae118a0facb9a5447e91cf6ce292af43514cf253849b663f359505bb344ca5ec47c5fa800cc7dc3f4da7ff4836f86a1fab98ab5726ae4dcffd293354c56665d6716e8f5b5de98b99de4bed8217f6f1825b0ff402430ee218dd56aade87ebc96aad9c93e69079465d6b3a5dd98e25d0478728c2e2c80657c06988696e17e316c593d965096199e27392a4192fa8801efa"}) sendmsg$auto_IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002c80)={&(0x7f00000016c0)={0x1c4, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xd3, 0x1, 0x0, 0x1, [@generic, @nested={0x24, 0x39, 0x0, 0x1, [@generic, @typed={0x4, 0xa5}, @typed={0x8, 0x5e, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x132}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x3e, 0x0, 0x0, @uid=r3}]}, @generic="a5bb4496a15cb66f9de735bbeb63387d54882a3d006e1679ba67e1af32d35838617b956c8e462a507e77bedddffff856164538869706b2cc5c038dd099f161a3e798f5fb453fe6ffa77104d0313953bb57ed7fb5377c6bcc28c0ad87860445b0b36a784831ca96b2efd43ea396f059f30ef255ab702aeb70d59edac30ab40d4f76bebc9f51eaf4e5246c68ac3e4cca6c441b2316026f32fd8c5455fa7abcc7e8de1ecd3acff2870a72b2a0"]}, @IPVS_CMD_ATTR_DEST={0xdc, 0x2, 0x0, 0x1, [@nested={0x3c, 0x8b, 0x0, 0x1, [@generic="a4ca1a6800d5d39ef5d808905ee960e1181839b2dcdab094411038d26b2ca95148ab73c29263af667a92507ee5514a3cb39553b2", @nested={0x4, 0x1e}]}, @nested={0x9b, 0x83, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@remote}, @generic="dac641cf3fcb7a52dc0998c7eec5cdb88b690f6ef7c05f966c1bcc371efdc31e15cade6dbb3e581dfe31491c906e4fe1f9c25b0af02439532b7043208c0e3a059d73bc52d5ea3f29e45f49886084945354b638", @generic="27f431c279d1958e0e25b20815ecf19d4b919ebaf5bfbcdc369b8f4c8aaa13e276d88373", @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x115}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x400c090}, 0x4000) socket(0x10, 0x2, 0x4) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000200)={0x81, 0x7fffff3e, 0x2, 0x0}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001400)='/proc/sys/net/ipv4/conf/bond_slave_0/arp_accept\x00', 0x2800, 0x0) socket(0x25, 0x1, 0x3) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.654336195s ago: executing program 1 (id=142): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x7, 0x8c4c, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x3, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) exit$auto(0x6) poll$auto(&(0x7f0000000040)={0x3, 0x500, 0x5}, 0x5, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x44004) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0xfbe}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = ioctl$auto_TUNSETVNETBE2(r1, 0x400454de, &(0x7f0000000140)=0x2) sendmmsg$auto(r3, &(0x7f0000000480)={{&(0x7f0000000280)="384debd89186e8e525de20398e1da3c9e053b87a95880c39ab7002e1d8cfceb246d8b8ba822b83cfb62730d3293a52adb8b49e261badb4756e234f57b45119c23aba8728c451e6852986a68d76862e53cc15b3d05fe68564ab4d4a7564f1eeb6d4701e71085288c8648b9f53ca23a95964b983b714a1eb3fb5f16e07da977e768e4a37bccad7ad16567c8ecd7bbce1accc1f77e3b2157411a9913a10fd7f645cf86cb00e14fd4784c8b50cd39e44b2ca9ebc", 0xc77, &(0x7f00000001c0)={&(0x7f0000000340)="cf4147a63c14c35792046c8ee6fad4df29af5981faa310a96732e77b695d2449feeafc93a4718a3c0e1b04a3e7c1956d5e4f864c605817f21ac8e5379da371e0e2404f27d9a0efb43783a03ad7c84cc38d6576d8828245d45bb44b03d91197b2638868b9e505cffefdcd2017f09d19bc65079de6f68d09515105f9545b88d5d5dc5a027cee17e7989f1d6ebcdfc98106ae995b0a798b7d4622de0d546a2fa8ea6c27727b9cecfdb0f4f5161ef7c92bd0d1ffa17fe92df18e", 0x8001}, 0xff, &(0x7f0000000400)="dca1375fdea9a9b2bd71463fe7f53f6dcb8f8b386ae6ac1ce9532b0253dbe3b12f3a1211095f7f5d91408c1d10838182a06178db33be67b4071f0412456915b83f58d79d4e1c6d22f62e0bfad9", 0x3, 0x8}, 0x8}, 0x96c5, 0x6) 2.281873895s ago: executing program 2 (id=143): socket(0x29, 0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) setresuid$auto(0xf5, 0x8000, 0x67) (async) close$auto(0xffffffffffffffff) (async) clone$auto(0x0, 0x5, 0x0, 0x0, 0x3ff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) (async) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x5, 0x2, 0xffffffff, 0x7) 2.057239408s ago: executing program 0 (id=144): r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x36000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = socket(0x8, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800001000000fe, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1c, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0x2, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x7d, 0x0, &(0x7f00000000c0)=0x10000) ioctl$auto(0x3, 0xae41, r3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/mcfilter\x00', 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80, 0xdb) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x40, 0x0, 0x110) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000080, 0x2000400, 0xfffffffffffffffd}]}) 1.711625755s ago: executing program 0 (id=145): mmap$auto(0x9, 0xf8, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000000)="a74bf32dc4499a3debb0e97b50dbf7", 0x12, &(0x7f0000000280)={0x0, 0x4b}, 0x39, 0x0, 0x3, 0x800}, 0x7}, 0x8, 0x7fff) 1.627465606s ago: executing program 2 (id=146): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x302, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) madvise$auto(0x0, 0x200007, 0x19) inotify_rm_watch$auto(0xffffffffffffffff, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="0ef9f18c"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) 1.484872456s ago: executing program 1 (id=147): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r1, 0x6, 0x2b, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000800049a8503b015bb806b398546edc3b94b15a0b9c87981430", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf251b000000200001801400020062617461647630000000000000000000080004000100"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r8, 0x4b47, 0x1) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)={0xffff, 0x1, 0x98, @raw=0x4}}) 1.459222556s ago: executing program 0 (id=148): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x82502, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x2000c, 0xde, 0x20eb8, r0, 0x8000) ioctl$auto(0x3, 0x5424, 0x38) bind$auto(r0, &(0x7f0000000040)=@isdn={0x22, 0x4, 0x6, 0x7, 0x5}, 0x1000) 1.192218427s ago: executing program 0 (id=149): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) write$auto(r1, 0x0, 0x800f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'macvlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000003780)={0x2114, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x10, 0x124, 0x0, 0x1, [@nested={0x4, 0x12c}, @typed={0x8, 0x107, 0x0, 0x0, @u32=0x479}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xa9, 0xba, "aa26933c1b8c2c1a422af623814ae3ea58e91cfa329a2d1fc1c4c65a44b92a5ec7c7f38f1338b10346953a8e605b7f40b6f6eb9d640e06402c3de207f1dfefb065ae341bdf15fcf1763ddc07c1da9081024bce4d2d08db77f6d2464c4e6921c7a10c22501a29f6bbb24aaedc885ac9a06596d54b3b43c8b3e6f239d28b226c01b7817b339cbe8d2a814de55c2d39e9f766e3e288aaec1421fcca17b74f6978f0c700000000"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "8e50edae166e5d4bbfbe345d"}, @NL80211_ATTR_WIPHY_NAME={0xffffffffffffffce, 0x2, '!-](\x17[[@\x00'}, @NL80211_ATTR_EHT_CAPABILITY={0x1004, 0x136, "d7a8f3d61728fcbb16bee181ac7ae6fe5154a4df79b1360f8195e148ed6dcaad9a01066e128f60e63bd58275c64a8429e9b3dd580817f6ca9b87cec53bec01b5ade25bf995c18b44f8c6214de879b04e0cb649adb2b4fad24b257535f249dc4dce45e049815dc3a809b17c56a3f12f8e8af1a62b3557b7e9cc6ae177f5fd9363a441419f462748c657db5c2c4c14314acf68b66a080bf681f24ca6a1c832590babb894f62def68b2a30dd6091f23f7b133c1911b382006189e1ca3de7ebbe29f6ef1776ea0a0d56f5be724f69cbdff384005150bf300c0e68cbb606d5e7d89aa154c1831272cb61aa99ca64c4143d04fe0a72d4b51a43f3e508f6da2db570d30651101ef038e5914cac1d60c1aeabe2d7e276fe5f21c8701edce8617e8735314ba8e30d613aedee4c7f88ffe3bf1ec8fd2129d96ca1a16b32b5bc90c0309c02bc9d210b417962acfbf295fe11325eaaaf5801b5582efb99853bbad663058684fc184cbc77e5004c2bcd891a50a068542313ff3ce39fdfb66a8d3c8a2dc500e4cd12f9bccbe72724316e7ac0c6d187edd478f9a2abc4159e2f3769c21f2a759ea752e2f7e5e981f2e32f5923bdb5793b48bec6f8ae2ca5376b8e33913ec2615d6a0e426404f54ff1b149092e1bb867cbc2ff0f4c33cedecde4bd2ddf63de80b695a07a6222e441aeadc486eaa1c3b06e374b5b285e62b9e4ceff4d8e914f429c289b3324fb7535bc0b9842c2c3006d95a16c23f3bd8faf43df7536bc2213be788453576d95de2e43ab83051eea2f902a30169a49e335e6e9d18249ffc971b4b54d6ee0c5cc46db2aac515c140141bfe0323aeed2551edd191b377a54990f8acc152e857327d7faad056353c5ae11656b9a466644579b56085579e217f13d5b31f4437ad065d99e3373b2b498fec607af800ae88a3e3b53d0dcbe5ade8f86fce2bbfa2882fec478651a815c3859aa2f665a1bfdbe132596a6a53a82b8485b8a461fa6b35f1e8a6735c28353adc051cb49fc7460f5c97073ecc85f60787de4ee921fe71903aeb85b343b9a8fe2a0b6e33dbd11072af2d24c50c3683e937dd7546b29c08acdf754edd4159c5fef70d0ca55d831bcf6b70bd6bfadc5d63aae812a5484c8d30dfdbae694f241b4907802074288e5b4169d91ec870f5189eb06c2ca417f01a9bcccbe9791739be71e03f676b2bfb03395d0003ab033a32b89c97224b6314259df0b3ab019b528984bf344f262ae9c2ce494f0580979edd4c25cd342a1148d53c77f35899277ee79c5d70ff648532e1cd7821744c0e9204374d99ac8c44ca10639f3a0d85fd372ac7c00de21ac3acdbf80b1ea6e0da0d567cf3dd03f2b7ea6d865932371b2743e54e368a0afbd5a0ee396eeee40c1c30f1d7162d136985cf6313cece0a4b54b3310275a05d2b30b0989b4c7c4467a7ba56c9f1d16459a909008ed0474c52f802c9bec58e702ad29e0b938eaac8c5962593d9eb1d22e34641aa5b1fbf70d9808a6f3f1f3064cfd53840516dcdc88cb521021186f08c8ace30347d70adf408a5b964c3baeb731018cda39f81f76935680c12a885d5692af4df2e53f1b15cc46587665fe8a2717c6126546076eba7e8f9eebe4ba5fb1bd86c605f9c2c2b343f38c8f0ccee1fd0d82c7aec736fd661f6b14c1ee33478bb543b743e3d91e5d41e122454454c6897b0aff2b835b48d0b9f3874dc7458b9b9a46dac030e758ac876370f4ab05d0a34bd971e4fb2000e92bd72c56564610b3e293f0d4ef59708d11b48477a81c377a80b69345706f6840c18163a601afbe46f89ebd339c78894029610bd7edc6394c8cafa68e5e2c129b2b7a6a12d4d437e33d2243dd4fd7c351e25eecb6070de07d2c2ab8d5106f326fd3c5f7691f61e6e1a86cd46c97b3cf2810c465d202c1df524675cdfa3e4ab9473003f28a29ba0303225ac21798214cfd5ab8f2e0b09b5927bc7ad10ae99c3af1d56a1c3eb1147fb48b9c8ef56333c2455f60d1438c6ccc66f4466c8a2c9754af4a4355066a0381bc3e8c94615b93f594f79306fbdff239be4e74f3fad9c3d9591d75845dcf1dc6eb4fbc5d590a9e95f8fa6f2c1f89ca8a7e0e48d2f7a4c5e7b0a5f15155b6f7e923545056c5ac7a559a7b93c5962c2d56070c45c20dac6160b55e0ae4d7ec71a7003ecd67a97f7400409094f40012127defe3235c7cb44e62f74dca3673972b9668780b567ef3f14f945dafa8bef64d84d790973137742eb60413b56dfa3779ef27057920ea020d5fd7252f0907907977c9a4b3666e215f7815a28c69d2612fe824ecd715c6d732cf7e76c0308e76829115a04c4b8b4082ddd956bd02308f627d875c209586bce5833889de010030a41accb1df20941c40004b10a180f26bfb759503e749b46127769539a5d9913218bac2bdcb56ce696b0a88eb885421843d58cc6d9c67d929f4d995af75fbfa4c5944dea15211935069490488895b10d9d98c47f4c45edcba67892ba422805e14a8e4f6b62c0f2e0ca9d074f59055a3d963b90b5ab389a5e6cacea2a67040292cb30b220b2df8eb04c844ba3417d2cb55adbe1826bdf39d541cfaea5aceced18977ced231e9e0419f04da6b6b79f60f0506f1677b816c1080e4abc7b8a82d06066ee46feda8cea1496a4e116888c50aa74eb0605851f702d6aaafa176be644798aa6c64d4936563f2f9ddeaf8d0d31552ae65ce37f4198b5313d4c0283373193e7fef99b204f5a5e5ff45570e713720722785c329963bb857db78110f767383c43b5dbc0ac1d177ff1a7ea6a92c30034b452bdd1d8fd2eeffb6686531ee6914bced5505374e97517564e6beffbbb4ad0ecc1dc07b305784d722be986569cce77d9640808e615e8b641f16d36f0938fa51a65523734a9d6ab1f23ec807fc8c35960321f7705eae5379c023ec283ace1f46f39e4ade6876f3899ac13f2960276c85d01bbc5109b598533bdda0ebbc1475d9629b233298bf9cbbf49f560f2110222c5b1dfdad3d9f1881f199f9c2ad701977bd6f133d55424e2559badea65c98e72d252ea393b4cebb514991fd7bbd21fb632f02d4603b026955328e2b8a919fc952e785f665792b8dba1917f875862daa831d96f512e2eef7a335c67a760788c799f9e12a869ff45d17dfe11aad7948e4b3bc603a932098b8babe98e566d9aaa685ec5acc19690b2371cd9fbf22441ef8772a64a135dcc55436f8ad708d00cbe5412988df9f9bd463c4e77dcf49e66c28d2f32b5467d815bfa2eaa44089489a7b030c6902eeca0906d5cc8b2a506c1e1072eedf8f83e837d8585365c35214250a788bd24faceffbd76cc29f59c88470f13612281080bfd6700fdc5771d36c0a291ece59414f41b6bc369c6984e664d4e985d56678b126e385e350a4406a12d69ccc72df7a41264047066a03eef68917ee84db3d5561874222c84c23fcbc3a9eab63320144ce507ca16e3fadf9a580a0a4d0444f0187c199ac7265e0d090928c3419678d84add1843861f1573ef34b1230165a5a498c7d92db07b77167d901b0d18f102134de08949ba298a981c649ff0d54fbaa82b032e46e37468db7e2955d5d6866b426b62b72ab438c5fabf1c4214e0cd6ecb265cb542c4f3cf88d35cd7a206420af3626395004ca11815d7cb95bd5b03ee98682b1b8f8bd3e21bd18c970dafdc7f416ce2b39ad4d3f02658f16b123d6864c4d7ff464c2fa1b6af4b3856bee978692a681df3b4a8f26bfc67b0c566bcf63f1cc9bdcac68ae7564718172aa6afcb7dce6c76f8a6d46073ccc7b38221d806acdade2c829c9e1d7a93d5f2de5adcea0879e5f272f955ea5ed1fa8c0b0781e0e5543dd7ded3895fd95bd1ac5a2cd0ffe41fc4f26da1b9e1c6fb37e00bc03e1788abad9e01fa9821cdffd8b9c323f5534fdedfe5b28e41499b4fd250b0d240091f4916fd061f9ce30c42413661341e4eae2000bdbc0ae874f3f034e104fe06b0f6bd709952325e119f6d5b37a9bbb37fdf163426a287bfc2057a5f68ea22decc46b4266bee21ab35306f827176fe1c20afb02ef9de52ac64cfd540127b1f7f5627929e3937f7095eaaf8f665b0c025d6f65dbe9546839aa77daa4eb1fae3ee1b2db0a8e978eee253377391f157769783876d09694d37235299fb4dd9f831d59cc4760ceff37e2b0abda9ed090429a9952aa6a9dde9f868c712171b1c01f2bbfe6c1184e35973f71b617b07bb2e9cf36775fa485842a13c50f828c11efbf38a26666f32322acbd7c325cc9c6449d8886c0f2cbe11a372613960bc686a38ab71a928a6f75307df13048966137c3a6605611d6b2e1ec71c0397c3a79b4b41ae39633ec79d195883304682fcfa5da445957f88409a89dcd95173848fa10c5baa20592378de0d54520337d9820b7b750314e0e09394afb5a94a35cd4dd422624c4dd7c9dbb35d40c1c715404dfe96e752a5eb9892f55663eb2fce596915387a908d93a11dba74d70a766a2f510726540026f90f8f133de9c490fb680e3e26afb279851bf09925f8d90a066e6b87e4e6a70d55de3058c089c8511b30169a591c41920d5a02a6f02a199a1f775d4f71dbeb6a2429d42e779802656217c92ccd21eb9332843eb7121fcd8892971040ebc5aabe07f4d2e62bd9fe2c4a90ec801f8622de3446ed5840ad418fdccc36ae46c414967a220e99694d5cc971d584f21e83bc46ebb55a420cf2517bdcf29553f57811ae1e8302b90bbb1164f641badd051de35d1d2a36df9c8374fb1e735c48643051fe7038025d909c959c9e87abd2bb4eb60c3329f7919acf518d57780f833557809afcf8c99870672836bb05752f0394ee029ca8092c4889c2fdce3bb4a1bef32e0f6daad5435dfb97cd7be58eb9f14932cd6dad35fb025f95fac06beb80b524cbd3293549e97777a43edadbae7d030366fe35e87c6990b89327fc14277b4a194117886b1897ec73c5c018cac60e4a55c90798d4d2bea7667b559dd5a8bb8343b86f1ba08da705494320228ee5e9381c9b47827e01c2daa90409eaf47df584492fb709daf0cb42391609a1f3e752b0397f13038ba7f1f2dd45782beddd3f21bb7723bbe5fdb385ae2ea27305b4b34ee90237148eb635e3d792d589c3de1f27dea54f6d4ae848820ee5ad5cdbdbc78010a1fa27173056646faf9a25049a280d225317299e571558b6d2e950fe135bc4e390e4d8c395e2f0f3976fb8b8ffd2d348296d8bdc43920921da35815dddc1fc69148833e588e397affecea7fef10a2ff45d13ad0041e5b0aca9cbc70d3f0de20171a29c04e9a62a393fba7f27d9456555a95196c8ded3cd7ce7628066295ff6dba7d4b9a5268c6ff7ea30ef69d1ec624b7bc21627e80fa76cf676bdab14cf6a36bd3e8a0b3ab2a0df54498f8e15c9d0e02af126b3d7c24ba2fb203a008fd711c5dc3c120b80e0f65bd33680ff42592d9ba4a43cd8ba1f8af542a88ff519aa610d4eaaa7fa9d10d35236c13a83459f79f9a70a2ce774e10ee203dd657543fea549bcda955ba229f5c39dc17a9289228b95a71b1d35b09aa4c139216faaf6b8abc9693fcd84e06407aa32afdbe55209d3d591af67da7ca09d02578db1739505f0b6a64798c1bbdf167e1cf9a9dea642f14e6785c0354219802d4b9d5553d1ac58e501913ca491dcb502390144d7917464639b6d9a659d590e536ffabff457ddd9545745faa0f5265c8f79b69d3508e75324eb147f8fe9838806c465167e23c3369518e9704c22eb6e3d66b7e2a82cc9f33509e674d3f5b12a451e2e243e0b18cd36de60d9a31d677adf"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x24}, @NL80211_ATTR_FILS_NONCES={0x1004, 0xf3, "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"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x2114}, 0x1, 0x0, 0x0, 0x20048091}, 0x10004884) r5 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, r5, 0x8003) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r6 = fanotify_init$auto(0x200, 0x2010000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x101fe, 0xd) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r9 = epoll_create$auto(0xffff) epoll_ctl$auto(r9, 0x1, r8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) 485.698429ms ago: executing program 1 (id=150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (async) ioctl$auto(r1, 0x4b66, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) socket(0xa, 0x3, 0x3b) (async, rerun: 32) connect$auto(0x3, 0x0, 0x58) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket(0xa, 0x3, 0xff) r4 = socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) (async) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x80000005, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x5}, 0x3}, 0x40000204, 0x0) read$auto(r3, 0x0, 0x1) (async) write$auto_evm_key_ops_evm_secfs(r2, 0x0, 0xa) (async) msync$auto(0x200000, 0x2000000005, 0x6) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 270.194164ms ago: executing program 4 (id=151): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x6a102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x14d443, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x10000, 0x0) ioctl$auto(r3, 0xc10c5541, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000bfffff0100", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/reboot/type\x00', 0x180102, 0x0) mmap$auto(0x2, 0x2820009, 0x1, 0xeb9, r3, 0x6b6c) setresuid$auto(0x2, 0x5, 0x200) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x8000, 0x0) ioctl$auto_FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000080)="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") ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) madvise$auto(0x7fffffffffffa, 0x8000005, 0x14) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd0/power/control\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x440c5) 215.321792ms ago: executing program 2 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0xa, 0x0) socket(0x1e, 0x1, 0x0) pipe$auto(0x0) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000140)=0x200000) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 31.444701ms ago: executing program 1 (id=153): io_setup$auto(0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) getgroups$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyu3\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x296d, 0x4000000000df, 0xeb1, 0x401, 0x8004) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x4020009, 0x10100000006, 0xb4, r0, 0x8002) ioctl$auto(0xffffffffffffffff, 0x4008af04, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r1 = open(&(0x7f0000000080)='./file0\x00', 0x173342, 0x97) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r1, &(0x7f0000000140)=0xffff, r1, 0x0, 0x21c1, 0x0) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto(r2, 0xc0, &(0x7f0000000580)={@_si_pad}, 0x400) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="bdec4b848148d18defdedcc620000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250b0000000a0002009e695f99bb0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r2) 0s ago: executing program 0 (id=154): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0), 0x55) (async) connect$auto(r0, &(0x7f00000000c0), 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004506, r1) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x6, 0xfffffffffffffff3, 0x9b73, 0xffffffffffffffff, 0x8000) futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x12, 0x0, &(0x7f0000002440)=0x7, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000040e2, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x5, 0x4000000040e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x10, 0x4, 0x0) bind$auto(r2, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x1}}, 0x66) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf253f0000000800f800000000000400af001c00e7009822798d3d690e95ae105a7ecf20dc4ad1b56fc1c76154b8050089000400000004148300"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf253f0000000800f800000000000400af001c00e7009822798d3d690e95ae105a7ecf20dc4ad1b56fc1c76154b8050089000400000004148300"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) recvmmsg$auto(r4, &(0x7f0000000380)={{&(0x7f0000000280)="97ef91442d6bc5921ae8428c0a0540800c9d28b2afb741f2f688eee98a950d0c3aaa0ef7b5dae55b29d629b12353cb085049dbd6d78c9f2b4eb31fd0d45fef2f1c6c33042ab8c593262b49f1a3ec4048b16e0867051f516e7bd9e2e138084a1121d996cc4e899fe847cb6adfc7f5dd9c4ff307da2c90a35e07f90e53b2e8e791a1861e99ad2b619c651d123d", 0x700, &(0x7f00000001c0)={0x0, 0xb}, 0x4, 0x0, 0x2, 0x7fffffff}, 0x7}, 0x3, 0x1, 0x0) socket(0x15, 0x3, 0x8000) connect$auto(0x3, &(0x7f0000000240)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) (async) pread64$auto(r5, 0x0, 0x400100000001, 0x1ff) read$auto_fuse_dev_operations_fuse_i(r4, &(0x7f00000004c0)=""/192, 0xc0) kexec_load$auto(0x401, 0xf, &(0x7f0000000480)={@buf=&(0x7f0000000400)="88c3d219f8c354c74416a0fe6cf682572527911fa6ada020bfc070f9d4fb1ebee23c99359f515d0f5b58511a7e90ed08819f45d8ab8b17ee3fe194ffab35a913baa2b1a68f7b0c", 0x8000000000000001, 0x8, 0x6}, 0x2) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) ioctl$auto_MEMERASE64(r6, 0x40104d14, &(0x7f0000000100)={0x4, 0x4}) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 66.020290][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.058138][ T5496] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. syzkaller login: [ 91.667205][ T5818] cgroup: Unknown subsys name 'net' [ 91.774599][ T5818] cgroup: Unknown subsys name 'cpuset' [ 91.783749][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.760346][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.128238][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.136638][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.146048][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.154999][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.163486][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.171474][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.180660][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.189367][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.197399][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.198914][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.213602][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.221774][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.229815][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.238299][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.251824][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.254308][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.269405][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.278144][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.285429][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.286198][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.709139][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 96.917711][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.925146][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.933319][ T5830] bridge_slave_0: entered allmulticast mode [ 96.940850][ T5830] bridge_slave_0: entered promiscuous mode [ 96.955276][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.962627][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.969993][ T5830] bridge_slave_1: entered allmulticast mode [ 96.977434][ T5830] bridge_slave_1: entered promiscuous mode [ 97.132045][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 97.164535][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.178042][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.195692][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 97.225918][ T939] cfg80211: failed to load regulatory.db [ 97.291450][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 97.323939][ T5830] team0: Port device team_slave_0 added [ 97.357728][ T5830] team0: Port device team_slave_1 added [ 97.464621][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.472099][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.479453][ T5829] bridge_slave_0: entered allmulticast mode [ 97.487306][ T5829] bridge_slave_0: entered promiscuous mode [ 97.496016][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.503119][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.529292][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.566069][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.573380][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.580971][ T5829] bridge_slave_1: entered allmulticast mode [ 97.588475][ T5829] bridge_slave_1: entered promiscuous mode [ 97.595801][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.602942][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.630554][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.653905][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.661503][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.668686][ T5831] bridge_slave_0: entered allmulticast mode [ 97.676381][ T5831] bridge_slave_0: entered promiscuous mode [ 97.706754][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.714620][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.722220][ T5828] bridge_slave_0: entered allmulticast mode [ 97.729500][ T5828] bridge_slave_0: entered promiscuous mode [ 97.737527][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.744881][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.752463][ T5831] bridge_slave_1: entered allmulticast mode [ 97.759777][ T5831] bridge_slave_1: entered promiscuous mode [ 97.783000][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.792448][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.799636][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.807499][ T5828] bridge_slave_1: entered allmulticast mode [ 97.815018][ T5828] bridge_slave_1: entered promiscuous mode [ 97.851086][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.886763][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.935769][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.961263][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.977092][ T5830] hsr_slave_0: entered promiscuous mode [ 97.984025][ T5830] hsr_slave_1: entered promiscuous mode [ 98.004644][ T5829] team0: Port device team_slave_0 added [ 98.028499][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.054657][ T5829] team0: Port device team_slave_1 added [ 98.062996][ T5831] team0: Port device team_slave_0 added [ 98.107892][ T5831] team0: Port device team_slave_1 added [ 98.122861][ T5828] team0: Port device team_slave_0 added [ 98.167147][ T5828] team0: Port device team_slave_1 added [ 98.173706][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.181301][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.208146][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.249360][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.256548][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.283479][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.283886][ T5844] Bluetooth: hci2: command tx timeout [ 98.300918][ T5843] Bluetooth: hci0: command tx timeout [ 98.303509][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.314185][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.340380][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.361399][ T5844] Bluetooth: hci3: command tx timeout [ 98.367072][ T5844] Bluetooth: hci1: command tx timeout [ 98.376951][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.384395][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.410962][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.424449][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.432123][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.458651][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.486268][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.493327][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.521332][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.584789][ T5829] hsr_slave_0: entered promiscuous mode [ 98.591998][ T5829] hsr_slave_1: entered promiscuous mode [ 98.598182][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 98.604176][ T5829] Cannot create hsr debugfs directory [ 98.711104][ T5831] hsr_slave_0: entered promiscuous mode [ 98.717465][ T5831] hsr_slave_1: entered promiscuous mode [ 98.723859][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 98.729594][ T5831] Cannot create hsr debugfs directory [ 98.743478][ T5828] hsr_slave_0: entered promiscuous mode [ 98.750087][ T5828] hsr_slave_1: entered promiscuous mode [ 98.756530][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 98.762451][ T5828] Cannot create hsr debugfs directory [ 99.091909][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.129872][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.174647][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.186626][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.336757][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.349248][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.362060][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.385608][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.464902][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.478549][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.490007][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.502087][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.608166][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.629495][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.640359][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.652064][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.697948][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.758702][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.797869][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.805306][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.816827][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.823994][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.906657][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.952484][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.967787][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.003562][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.010857][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.046490][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.060550][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.067727][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.086396][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.127936][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.147162][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.154417][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.165812][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.173047][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.204945][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.212185][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.243109][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.250316][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.344311][ T5843] Bluetooth: hci0: command tx timeout [ 100.349862][ T5844] Bluetooth: hci2: command tx timeout [ 100.414160][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.432882][ T5843] Bluetooth: hci3: command tx timeout [ 100.439200][ T5844] Bluetooth: hci1: command tx timeout [ 100.502591][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.735816][ T5830] veth0_vlan: entered promiscuous mode [ 100.778505][ T5830] veth1_vlan: entered promiscuous mode [ 100.890782][ T5830] veth0_macvtap: entered promiscuous mode [ 100.927077][ T5830] veth1_macvtap: entered promiscuous mode [ 101.005474][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.031955][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.053095][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.075975][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.093251][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.109547][ T1321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.129682][ T1321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.139951][ T1321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.162523][ T1321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.226469][ T5828] veth0_vlan: entered promiscuous mode [ 101.297121][ T5828] veth1_vlan: entered promiscuous mode [ 101.349999][ T5829] veth0_vlan: entered promiscuous mode [ 101.369552][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.378095][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.387527][ T5831] veth0_vlan: entered promiscuous mode [ 101.422570][ T5829] veth1_vlan: entered promiscuous mode [ 101.457804][ T5831] veth1_vlan: entered promiscuous mode [ 101.467954][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.486696][ T5828] veth0_macvtap: entered promiscuous mode [ 101.492798][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.498753][ T5828] veth1_macvtap: entered promiscuous mode [ 101.523528][ T5829] veth0_macvtap: entered promiscuous mode [ 101.546604][ T5829] veth1_macvtap: entered promiscuous mode [ 101.602070][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.607412][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.652450][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.666416][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.698706][ T5831] veth0_macvtap: entered promiscuous mode [ 101.712402][ T5831] veth1_macvtap: entered promiscuous mode [ 101.732733][ T1321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.751641][ T1321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.790246][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.810186][ T1321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.833898][ T1321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.849669][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.873273][ T1326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.913089][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.931947][ T1326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.951338][ T1326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.990824][ T1326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.040872][ T1326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.049774][ T1326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.092384][ T1326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.104309][ T1326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.147216][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.186976][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.272863][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.298272][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.349889][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.363710][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.422368][ T5844] Bluetooth: hci2: command tx timeout [ 102.426523][ T5843] Bluetooth: hci0: command tx timeout [ 102.441572][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.469361][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.503477][ T5843] Bluetooth: hci1: command tx timeout [ 102.511914][ T5843] Bluetooth: hci3: command tx timeout [ 102.533849][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.576515][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.754123][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.804059][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.853593][ T5929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 103.014279][ T5932] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.281309][ T5931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 104.019409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.232066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.503381][ T5843] Bluetooth: hci0: command tx timeout [ 104.508876][ T5843] Bluetooth: hci2: command tx timeout [ 104.582074][ T5844] Bluetooth: hci1: command tx timeout [ 104.587604][ T5843] Bluetooth: hci3: command tx timeout [ 105.081188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.321191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.331200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.350639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 105.371596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.515511][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.758749][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.930886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.968278][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.051263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.104735][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.271925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.586785][ T60] bridge_slave_1: left allmulticast mode [ 106.625143][ T60] bridge_slave_1: left promiscuous mode [ 106.661846][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.728024][ T60] bridge_slave_0: left allmulticast mode [ 106.750592][ T60] bridge_slave_0: left promiscuous mode [ 106.756563][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.908360][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.932567][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.940646][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.984133][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.013259][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.156073][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.471837][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.493964][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.505266][ T60] bond0 (unregistering): Released all slaves [ 109.140793][ T5844] Bluetooth: hci2: command tx timeout [ 109.802926][ T60] hsr_slave_0: left promiscuous mode [ 109.857227][ T60] hsr_slave_1: left promiscuous mode [ 109.869342][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.878145][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.888836][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.906210][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.968628][ T60] veth1_macvtap: left promiscuous mode [ 109.981477][ T60] veth0_macvtap: left promiscuous mode [ 109.987903][ T60] veth1_vlan: left promiscuous mode [ 109.997762][ T60] veth0_vlan: left promiscuous mode [ 110.112994][ T6014] sg_read: process 20 (syz.2.18) changed security contexts after opening file descriptor, this is not allowed. [ 111.220856][ T5844] Bluetooth: hci2: command tx timeout [ 111.521633][ T6027] mmap: syz.2.19 (6027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.988302][ T6040] netlink: zone id is out of range [ 112.995369][ T6040] netlink: zone id is out of range [ 113.005467][ T6040] netlink: zone id is out of range [ 113.010731][ T6040] netlink: zone id is out of range [ 113.016578][ T6040] netlink: zone id is out of range [ 113.030702][ T6040] netlink: zone id is out of range [ 113.118565][ T6040] netlink: zone id is out of range [ 113.128548][ T6040] netlink: zone id is out of range [ 113.148898][ T6040] netlink: zone id is out of range [ 113.158885][ T6040] netlink: zone id is out of range [ 113.312193][ T5844] Bluetooth: hci2: command tx timeout [ 113.751026][ T60] team0 (unregistering): Port device team_slave_1 removed [ 113.927838][ T60] team0 (unregistering): Port device team_slave_0 removed [ 114.133787][ T6050] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.318990][ T6033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.390858][ T5844] Bluetooth: hci2: command tx timeout [ 115.395989][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 115.410930][ T6033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.601447][ T6033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.752060][ T6033] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.805899][ T6033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.041882][ T6033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.156148][ T6033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.175458][ T6033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.330134][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.370969][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.391402][ T6033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.399167][ T5976] bridge_slave_0: entered allmulticast mode [ 116.423989][ T5976] bridge_slave_0: entered promiscuous mode [ 116.455046][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.473295][ T6033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.480830][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.498535][ T5976] bridge_slave_1: entered allmulticast mode [ 116.505604][ T6033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.517494][ T5976] bridge_slave_1: entered promiscuous mode [ 116.588638][ T6033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.893486][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.053406][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.381540][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.486643][ T5976] team0: Port device team_slave_0 added [ 117.526715][ T5976] team0: Port device team_slave_1 added [ 117.781652][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.793589][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.028837][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.040568][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.151957][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.190628][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.314860][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.380623][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.442057][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.501913][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.793011][ T6129] Zero length message leads to an empty skb [ 118.893469][ T5976] hsr_slave_0: entered promiscuous mode [ 118.921825][ T5976] hsr_slave_1: entered promiscuous mode [ 119.460636][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.860982][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.071193][ T6160] pty pty178: ldisc open failed (-12), clearing slot 178 [ 120.274405][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.364639][ T6170] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 120.369334][ T6170] queue_state_write: operation too long [ 120.369391][ T6170] queue_state_write: use 'run', 'start' or 'kick' [ 120.374062][ T6170] process 'syz.0.43' launched ':,' with NULL argv: empty string added [ 120.398312][ T5976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.466986][ T5976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.580701][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.589842][ T30] audit: type=1806 audit(1761656334.608:2): xattr="." res=0 [ 120.612622][ T5976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.960955][ T5976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.471126][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.532809][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.541928][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.592914][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.600248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.684593][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.691885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.868122][ T5976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.950669][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.340885][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.432632][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.665949][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.189065][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 124.067269][ T5976] veth0_vlan: entered promiscuous mode [ 124.113740][ T5976] veth1_vlan: entered promiscuous mode [ 124.254479][ T5976] veth0_macvtap: entered promiscuous mode [ 124.288016][ T5976] veth1_macvtap: entered promiscuous mode [ 124.377999][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.411949][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.473398][ T6254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.551827][ T6254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.573317][ T6254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.590772][ T6254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.840563][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.848621][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.860620][ T30] audit: type=1800 audit(1761656338.888:3): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.57" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 125.017702][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.039564][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.587546][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 125.597010][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.726219][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.065389][ T6311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.367535][ T6311] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.768822][ T30] audit: type=1800 audit(1761656341.788:4): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="dbroot" dev="configfs" ino=10825 res=0 errno=0 [ 128.442364][ T6330] FAULT_INJECTION: forcing a failure. [ 128.442364][ T6330] name fail_futex, interval 1, probability 0, space 0, times 1 [ 128.455407][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 128.455447][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.455462][ T6330] Call Trace: [ 128.455472][ T6330] [ 128.455483][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 128.455519][ T6330] should_fail_ex+0x512/0x640 [ 128.455563][ T6330] should_fail_futex+0x4c/0x60 [ 128.455599][ T6330] futex_lock_pi_atomic+0x148/0xd50 [ 128.455646][ T6330] futex_lock_pi+0x23f/0x7c0 [ 128.455692][ T6330] ? __pfx_futex_lock_pi+0x10/0x10 [ 128.455769][ T6330] ? find_held_lock+0x2b/0x80 [ 128.455811][ T6330] ? futex_private_hash_put+0x18a/0x300 [ 128.455856][ T6330] ? __pfx_futex_wake_mark+0x10/0x10 [ 128.455917][ T6330] ? ksys_write+0x190/0x250 [ 128.455961][ T6330] do_futex+0x11a/0x350 [ 128.456004][ T6330] ? __pfx_do_futex+0x10/0x10 [ 128.456058][ T6330] __x64_sys_futex+0x1e0/0x4c0 [ 128.456102][ T6330] ? fput+0x9b/0xd0 [ 128.456142][ T6330] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.456181][ T6330] ? xfd_validate_state+0x61/0x180 [ 128.456222][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 128.456286][ T6330] do_syscall_64+0xcd/0xfa0 [ 128.456324][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.456354][ T6330] RIP: 0033:0x7f129ed8efc9 [ 128.456380][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.456409][ T6330] RSP: 002b:00007f129fc63038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.456440][ T6330] RAX: ffffffffffffffda RBX: 00007f129efe5fa0 RCX: 00007f129ed8efc9 [ 128.456459][ T6330] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 128.456477][ T6330] RBP: 00007f129ee11f91 R08: 0000000000000000 R09: 000000008000fff5 [ 128.456496][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.456514][ T6330] R13: 00007f129efe6038 R14: 00007f129efe5fa0 R15: 00007ffdf346d7a8 [ 128.456562][ T6330] [ 130.095547][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 130.136863][ T6351] netlink: 350 bytes leftover after parsing attributes in process `syz.0.70'. [ 130.497227][ T6359] netlink: 334 bytes leftover after parsing attributes in process `syz.2.74'. [ 130.642806][ T6360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.650396][ T6360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.662667][ T6360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.676215][ T6360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.695272][ T6367] netlink: 'syz.4.76': attribute type 16 has an invalid length. [ 130.712037][ T6367] netlink: 'syz.4.76': attribute type 17 has an invalid length. [ 130.720961][ T6367] netlink: 'syz.4.76': attribute type 19 has an invalid length. [ 130.760637][ T6367] netlink: 102 bytes leftover after parsing attributes in process `syz.4.76'. [ 131.396673][ T6391] ubi0: attaching mtd0 [ 131.413307][ T6391] ubi0 error: ubi_attach_mtd_dev: bad VID header (262144) or data offsets (262208) [ 131.655559][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 132.673889][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.673890][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.740724][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.746847][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.168859][ T6447] syz.4.91(6447): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 134.600892][ T6469] zswap: compressor not available [ 137.672871][ T6538] FAULT_INJECTION: forcing a failure. [ 137.672871][ T6538] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.091665][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.1.102 Not tainted syzkaller #0 PREEMPT(full) [ 138.091707][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.091724][ T6538] Call Trace: [ 138.091734][ T6538] [ 138.091746][ T6538] dump_stack_lvl+0x16c/0x1f0 [ 138.091785][ T6538] should_fail_ex+0x512/0x640 [ 138.091826][ T6538] ? kasan_save_stack+0x33/0x60 [ 138.091866][ T6538] get_futex_key+0x1d0/0x1560 [ 138.091911][ T6538] ? __pfx_get_futex_key+0x10/0x10 [ 138.091964][ T6538] futex_wake+0xea/0x530 [ 138.092014][ T6538] ? __pfx_futex_wake+0x10/0x10 [ 138.092073][ T6538] ? rcu_is_watching+0x12/0xc0 [ 138.092109][ T6538] do_futex+0x1e3/0x350 [ 138.092151][ T6538] ? __pfx_do_futex+0x10/0x10 [ 138.092188][ T6538] ? putname+0x154/0x1a0 [ 138.092237][ T6538] __x64_sys_futex+0x1e0/0x4c0 [ 138.092284][ T6538] ? __pfx___x64_sys_futex+0x10/0x10 [ 138.092330][ T6538] ? getname_flags.part.0+0x1c5/0x550 [ 138.092382][ T6538] do_syscall_64+0xcd/0xfa0 [ 138.092428][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.092458][ T6538] RIP: 0033:0x7f1032d8efc9 [ 138.092482][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.092511][ T6538] RSP: 002b:00007f1033b8c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.092540][ T6538] RAX: ffffffffffffffda RBX: 00007f1032fe6098 RCX: 00007f1032d8efc9 [ 138.092560][ T6538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1032fe609c [ 138.092578][ T6538] RBP: 00007f1032fe6090 R08: 00007f1033bae000 R09: 0000000000000000 [ 138.092596][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.092614][ T6538] R13: 00007f1032fe6128 R14: 00007ffcd0eba510 R15: 00007ffcd0eba5f8 [ 138.092652][ T6538] [ 138.286013][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.292662][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.986649][ T6570] netlink: 25 bytes leftover after parsing attributes in process `syz.0.108'. [ 139.560333][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 140.059035][ T6599] netlink: 'syz.0.114': attribute type 27 has an invalid length. [ 140.100296][ T6599] netlink: 334 bytes leftover after parsing attributes in process `syz.0.114'. [ 140.858166][ T6619] WARNING! power/level is deprecated; use power/control instead [ 141.975050][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.018592][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.046578][ T6669] ubi31: attaching mtd0 [ 143.279531][ T6669] ubi31: scanning is finished [ 143.285911][ T6669] ubi31: empty MTD device detected [ 143.615229][ T6669] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 143.647241][ T6669] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3518 bytes [ 143.715888][ T6669] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 143.793453][ T6669] ubi31: VID header offset: 514 (aligned 514), data offset: 578 [ 143.810575][ T6669] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 143.817493][ T6669] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 143.871010][ T6669] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2055019177 [ 143.881417][ T6669] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 143.909621][ T6680] ubi31: background thread "ubi_bgt31d" started, PID 6680 [ 145.670723][ T6722] usb usb15: usbfs: process 6722 (syz.1.141) did not claim interface 0 before use [ 145.804294][ T6722] netlink: 350 bytes leftover after parsing attributes in process `syz.1.141'. [ 146.614107][ T6731] netlink: 330 bytes leftover after parsing attributes in process `syz.1.142'. [ 146.654608][ T6731] netlink: 330 bytes leftover after parsing attributes in process `syz.1.142'. [ 146.671621][ T6731] netlink: 330 bytes leftover after parsing attributes in process `syz.1.142'. [ 147.210651][ T6742] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 147.298984][ T6743] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 148.864529][ T6770] ================================================================== [ 148.864547][ T6770] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 148.864598][ T6770] Write of size 8 at addr ffffc9000373b000 by task syz.4.151/6770 [ 148.864620][ T6770] [ 148.864632][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.4.151 Not tainted syzkaller #0 PREEMPT(full) [ 148.864664][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.864678][ T6770] Call Trace: [ 148.864687][ T6770] [ 148.864699][ T6770] dump_stack_lvl+0x116/0x1f0 [ 148.864729][ T6770] print_report+0xcd/0x630 [ 148.864767][ T6770] ? __virt_addr_valid+0x81/0x610 [ 148.864809][ T6770] ? sys_imageblit+0x1a6f/0x1e60 [ 148.864839][ T6770] kasan_report+0xe0/0x110 [ 148.864875][ T6770] ? sys_imageblit+0x1a6f/0x1e60 [ 148.864912][ T6770] sys_imageblit+0x1a6f/0x1e60 [ 148.864950][ T6770] ? __pfx_sys_imageblit+0x10/0x10 [ 148.864977][ T6770] ? __pfx__prb_read_valid+0x10/0x10 [ 148.865018][ T6770] ? find_held_lock+0x2b/0x80 [ 148.865048][ T6770] ? up+0xcb/0x140 [ 148.865081][ T6770] ? do_raw_spin_unlock+0x172/0x230 [ 148.865126][ T6770] ? prb_read_valid+0x78/0xa0 [ 148.865169][ T6770] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 148.865201][ T6770] soft_cursor+0x524/0xa10 [ 148.865251][ T6770] ? fb_get_color_depth+0x120/0x250 [ 148.865292][ T6770] bit_cursor+0xe8c/0x17e0 [ 148.865341][ T6770] ? __pfx_bit_cursor+0x10/0x10 [ 148.865389][ T6770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.865436][ T6770] ? get_color+0x1da/0x450 [ 148.865471][ T6770] ? __pfx_bit_cursor+0x10/0x10 [ 148.865511][ T6770] fbcon_cursor+0x40c/0x5a0 [ 148.865549][ T6770] ? add_softcursor+0x1/0x290 [ 148.865605][ T6770] set_cursor+0x1db/0x250 [ 148.865650][ T6770] con_write+0x89/0xb0 [ 148.865681][ T6770] n_tty_write+0x41e/0x11e0 [ 148.865727][ T6770] ? __pfx_n_tty_write+0x10/0x10 [ 148.865764][ T6770] ? trace_kmalloc+0x2b/0xd0 [ 148.865799][ T6770] ? __pfx_woken_wake_function+0x10/0x10 [ 148.865846][ T6770] ? kfree+0x252/0x6d0 [ 148.865872][ T6770] ? __pfx_n_tty_write+0x10/0x10 [ 148.865910][ T6770] file_tty_write.constprop.0+0x503/0x9b0 [ 148.865949][ T6770] redirected_tty_write+0xd4/0x150 [ 148.865981][ T6770] vfs_write+0x7d3/0x11d0 [ 148.866013][ T6770] ? __pfx_redirected_tty_write+0x10/0x10 [ 148.866046][ T6770] ? __pfx_vfs_write+0x10/0x10 [ 148.866075][ T6770] ? find_held_lock+0x2b/0x80 [ 148.866114][ T6770] ksys_write+0x12a/0x250 [ 148.866143][ T6770] ? __pfx_ksys_write+0x10/0x10 [ 148.866181][ T6770] do_syscall_64+0xcd/0xfa0 [ 148.866214][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.866244][ T6770] RIP: 0033:0x7f71ccd8efc9 [ 148.866269][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.866296][ T6770] RSP: 002b:00007f71cdc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.866324][ T6770] RAX: ffffffffffffffda RBX: 00007f71ccfe5fa0 RCX: 00007f71ccd8efc9 [ 148.866342][ T6770] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 148.866361][ T6770] RBP: 00007f71cce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.866378][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.866394][ T6770] R13: 00007f71ccfe6038 R14: 00007f71ccfe5fa0 R15: 00007fff9a0f7ca8 [ 148.866423][ T6770] [ 148.866434][ T6770] [ 148.866442][ T6770] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90003739000 allocated at kcov_ioctl+0x4c/0x730 [ 148.866509][ T6770] Memory state around the buggy address: [ 148.866526][ T6770] ffffc9000373af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.866548][ T6770] ffffc9000373af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.866569][ T6770] >ffffc9000373b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.866592][ T6770] ^ [ 148.866607][ T6770] ffffc9000373b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.866628][ T6770] ffffc9000373b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 148.866644][ T6770] ================================================================== [ 148.866661][ T6770] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.866680][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.4.151 Not tainted syzkaller #0 PREEMPT(full) [ 148.866714][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.866731][ T6770] Call Trace: [ 148.866741][ T6770] [ 148.866753][ T6770] dump_stack_lvl+0x3d/0x1f0 [ 148.866786][ T6770] vpanic+0x640/0x6f0 [ 148.866829][ T6770] panic+0xca/0xd0 [ 148.866868][ T6770] ? __pfx_panic+0x10/0x10 [ 148.866914][ T6770] check_panic_on_warn+0xab/0xb0 [ 148.866956][ T6770] end_report+0x107/0x170 [ 148.866992][ T6770] kasan_report+0xee/0x110 [ 148.867030][ T6770] ? sys_imageblit+0x1a6f/0x1e60 [ 148.867067][ T6770] sys_imageblit+0x1a6f/0x1e60 [ 148.867106][ T6770] ? __pfx_sys_imageblit+0x10/0x10 [ 148.867137][ T6770] ? __pfx__prb_read_valid+0x10/0x10 [ 148.867178][ T6770] ? find_held_lock+0x2b/0x80 [ 148.867207][ T6770] ? up+0xcb/0x140 [ 148.867238][ T6770] ? do_raw_spin_unlock+0x172/0x230 [ 148.867287][ T6770] ? prb_read_valid+0x78/0xa0 [ 148.867327][ T6770] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 148.867358][ T6770] soft_cursor+0x524/0xa10 [ 148.867405][ T6770] ? fb_get_color_depth+0x120/0x250 [ 148.867446][ T6770] bit_cursor+0xe8c/0x17e0 [ 148.867493][ T6770] ? __pfx_bit_cursor+0x10/0x10 [ 148.867538][ T6770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.867594][ T6770] ? get_color+0x1da/0x450 [ 148.867631][ T6770] ? __pfx_bit_cursor+0x10/0x10 [ 148.867671][ T6770] fbcon_cursor+0x40c/0x5a0 [ 148.867711][ T6770] ? add_softcursor+0x1/0x290 [ 148.867753][ T6770] set_cursor+0x1db/0x250 [ 148.867796][ T6770] con_write+0x89/0xb0 [ 148.867827][ T6770] n_tty_write+0x41e/0x11e0 [ 148.867876][ T6770] ? __pfx_n_tty_write+0x10/0x10 [ 148.867913][ T6770] ? trace_kmalloc+0x2b/0xd0 [ 148.867949][ T6770] ? __pfx_woken_wake_function+0x10/0x10 [ 148.867995][ T6770] ? kfree+0x252/0x6d0 [ 148.868020][ T6770] ? __pfx_n_tty_write+0x10/0x10 [ 148.868057][ T6770] file_tty_write.constprop.0+0x503/0x9b0 [ 148.868097][ T6770] redirected_tty_write+0xd4/0x150 [ 148.868129][ T6770] vfs_write+0x7d3/0x11d0 [ 148.868161][ T6770] ? __pfx_redirected_tty_write+0x10/0x10 [ 148.868196][ T6770] ? __pfx_vfs_write+0x10/0x10 [ 148.868226][ T6770] ? find_held_lock+0x2b/0x80 [ 148.868272][ T6770] ksys_write+0x12a/0x250 [ 148.868304][ T6770] ? __pfx_ksys_write+0x10/0x10 [ 148.868343][ T6770] do_syscall_64+0xcd/0xfa0 [ 148.868377][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.868407][ T6770] RIP: 0033:0x7f71ccd8efc9 [ 148.868430][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.868458][ T6770] RSP: 002b:00007f71cdc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.868485][ T6770] RAX: ffffffffffffffda RBX: 00007f71ccfe5fa0 RCX: 00007f71ccd8efc9 [ 148.868503][ T6770] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003 [ 148.868522][ T6770] RBP: 00007f71cce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.868542][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.868561][ T6770] R13: 00007f71ccfe6038 R14: 00007f71ccfe5fa0 R15: 00007fff9a0f7ca8 [ 148.868603][ T6770] [ 148.868764][ T6770] Kernel Offset: disabled