last executing test programs: 5.857578429s ago: executing program 3 (id=223): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x2000000009b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x2a, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x5, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000003980)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xd2\x00y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x5, &(0x7f0000000180)={@_si_pad}, 0x40) close_range$auto(r0, 0x8, 0xfffffff5) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x12601, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r1, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000006) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.957327552s ago: executing program 3 (id=228): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x1f}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x41) ioctl$auto_TIOCGDEV2(r1, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r4, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x5, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0xe99, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 3.883904469s ago: executing program 2 (id=230): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, 0x0, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 3.439050197s ago: executing program 2 (id=231): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x8000, 0x0) ioctl$auto_MEMWRITEOOB(r1, 0xc0104d03, 0x0) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lseek$auto(0x3, 0x8, 0x3) 2.917085809s ago: executing program 3 (id=232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x20040001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffa474, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x0, 0xa}, 0x9}, 0x2, 0x800) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000000200)={0x1540, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_PROBE_RESP={0x512, 0x91, "d9e09bae669d28e3791032ac76d7136dd068d9ef46c4f3469767be6eb0ce39d077b0f94a7218056d49d9cfaed6d9156eb2a7c3731f0fd6bdd16ed56a737927b50a54ea2384fa2ffc62e38c76f040512f9b3f94f7b8168bf70e541b421339b94dd32dca40f857076c236c5f4cb39f816ef64111bd2f6fda9d68c85c101b0e7f65193363a193d4d3ebabff4f813ad4a5c32c9a8455629245f775751cd75b60f98d9fba06add3b0eb0f03a23fd074e5dd194ccae7b3e2ff0be7c491b8c5010c3e974c2fc5b7fdaee3d56e7c3031c98be31c9c6a244bf7197bd56f56adb4a310224f67855a178b06a4c2e4ec7cb5baaabc2c9fee928a2c74be9829ba7f93f663a987902ad29e4c57942f05d3011abc35ee14dfaf703ce6dc729f2d5d630bf324acbf61012fb88cffe4f2ba2b3c6792b9d2d4e59649d5438709aa0b59b7d998d90644c32439066bde4350ce9ab9626ccf350ea87f34c6133a7e97defda9b021e5f42cd68bfbab723b67f3d7362ce73daf3fcc13fe2e0f8150d5b57d9a1b7b8fc814f7c55765934f5512eb9344faa61c78d6e3f80bf066234e26879d206def5015c98b22509fd831e18f9b752eceea4c3611926e6e9e8256cebaf07ceda476fd67b01274125e1fa998ba1e3df67fa4e1c80271e43370847151dd28b1da1e8daa065ccb7d8c3029c856426328d9219c43e0ba4c8f8152926886f24f7409af89d09b97d606de27c774d98d2394760a577fdae5a1e1754c3e3bf34d0fa7420906ab3548cc8cc564c3359f1324444d87a862c841ca00998b9bca8dc8657d04cc9e5bbbc600bf84c10adba1304833c2f8b7ea2e9cce0c01e7a6def2a70cec9e4550fae3130eef442d9b643b1df7a810aa20873553c495b07b416f6581ff5a96a5ddb5767fb67d0d48a02886bd1e8e4d48f254a437c69e88cb84a22612e35969ae6e20432ee138e32f7461524a896b2a965d30a24564cab64857efbdd99ef09170e1230684e4bf39af96da5e3bde5ddb3957157ed6a65386d08e8e833523e799079ab3612d1ba447d50459453d8827005c58614fc9886601e192bc0e4eb8d944b17cfd3c6d5a07952e26425395f5f1b4da236fadb4e4a0ed920ac67fc152b44d3c0b64be7132d1a62c4aec1fc9bc8bd873d3928f52e537b1105cddb174837af1012ab98517a84f5bb017a26e4fad52fab9874817e866ef510eee7e9a395902b256ef1b93b52df9df9f34fd7321acdfeeb80185e8f7f3be60801477d7db4a540b1b9e4433f4b4c6c569074154573b2b97fd3796874a644cc6e28c273231c9784527e1cb5ae9fbebd88f3663e677e17e12cb1a3d5552d7616caa42aedfea288715dab84324cf1cf0c662ba9256b0b1d51d78ad9162d398e3ed4930e7af13b8787956c8202a769bfeb81920e3a06fc967e24023138945262794adf95380cddaa895f0ac6e2bdbebd905d913744caac3e6a82efdb20ecfdcc9a51885f5fc4412e2962ad78b1fc029f6ff0d3ba3819efe4933f11dd466305565422b9e9cca487a96aa651ed9ee5bcf7168dbd9b31f159c5d9c8e450b74d2a62aa2ed199e94bdc4b701838a22e0eeee44171983c80cbdced00c0ad6c9013596a2451dda284b82c8eee9f46437ceb584b82323b6b38bfb1f98dcb47e6685fdf54e516033940ab9d540f73558f35d880ae80dd0be2d577a648c70fd110f6828f5fcd37e6d290af2637fc462c5fd5063421b8f070e7eccd79239313561ee97e864cc6b07d21f14560b477afa2e24101850a52c8e71b7a4cea206c06bab6d57f11524ca3dbc46f684c83216506067416b7d0957090f4c9e0938053ff2214fb3"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x5}, @NL80211_ATTR_AUTH_DATA={0x1004, 0x9c, "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"}]}, 0x1540}, 0x1, 0x0, 0x0, 0x10}, 0x40404) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x20, r0, 0x13, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x3f}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0480c0}, 0x48050) 2.685917214s ago: executing program 2 (id=234): mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 2.55160135s ago: executing program 3 (id=235): mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) (async) timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x4}}, 0x0) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) capset$auto(0x0, 0x0) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = io_uring_setup$auto(0x6, 0x0) (rerun: 64) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) (async) connect$auto(r0, &(0x7f0000000080)=@isdn={0x22, 0x8, 0x40, 0xde, 0x4}, 0x3) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3b, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) (async) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, &(0x7f0000001580)) socket(0x2, 0x801, 0x84) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 2.340118213s ago: executing program 1 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy$auto(0x0, &(0x7f00000001c0)=0x100000000400fb, 0x400000000002, 0xfff, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) (async) madvise$auto(0x400, 0xfffffffffffeffff, 0x3ff) (async) gettid() mmap$auto(0xfffffffffffffffc, 0x400, 0xdf, 0x80eb1, 0x1272, 0x20000008000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8840, 0x0) r2 = io_uring_setup$auto(0x9, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x5523, r2) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x3, 0x6) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) (async) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) (async, rerun: 32) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x100200002) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/neigh/wg2/retrans_time\x00', 0x400042, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) shutdown$auto(r3, 0x2) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) 2.279133989s ago: executing program 2 (id=238): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x321a01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r0, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x60000040) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x2400003e, 0x400000001, r2, 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sda1\x00', 0x44003, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010a27bd7000fddbdf250100000008000200", @ANYRES32=r5, @ANYBLOB="a1dc9743198537eb11"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) madvise$auto(0x7fffffff, 0x8, 0x9) ioctl$auto_BLKPG(r4, 0x1269, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) r8 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000002080)='/dev/mixer1\x00', 0x301d83, 0x0) fcntl$auto_F_GETFD(r8, 0x1, 0x200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r9, 0xc0109207, 0x0) r10 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r10, 0x90009427, &(0x7f0000004480)={@raw=0x7, "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"}) getsockopt$auto_SO_RCVTIMEO_NEW(r3, 0x7, 0x42, &(0x7f0000000100)='/dev/usbmon33\x00', &(0x7f0000000140)=0xf8000000) ioctl$auto_MON_IOCX_MFETCH(r9, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x92081, 0x0) 2.18977481s ago: executing program 0 (id=239): mmap$auto(0x1, 0x8000000000000001, 0x2, 0xeb1, 0xffffffffffffffff, 0x8007) r0 = pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x3) pwrite64$auto(r1, &(0x7f00000000c0)='%\x00', 0xb, 0xff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/virt_wifi0/base_reachable_time_ms\x00', 0x104000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r3, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/dma_mask_bits\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/255, 0xff) fspick$auto(r0, &(0x7f0000000140)='./file0\x00', 0x6) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r5, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) 2.112357046s ago: executing program 1 (id=240): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x48342, 0x1c0) pwrite64$auto(r0, &(0x7f00000000c0)='ethtgp\x96l\x00\x06\xbf\xedwZ\xa6\xb3\xadG\xe0a~\x85G\"\x89\xb0\x02\xc9\x9f\xdd\xcf\x1e\xe7E\'J/n\xce\x9c\xd5G\xec\xe9 \xe6\n\xa0\b\x17\xf5\x1e\xfar5\x8d\x01\x87\x00\x00\x00\x00\x00\x00\x00\x8aU\x94,\xd6V\xf1\x8dS\xb3\x9b\x93\x96\xe1\xf3\xa7\x9cY5\xca,\x94\xf1\xb6\x9dA\x9a\x02\x040x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c040000", @ANYRES16=r2, @ANYBLOB="040329bd0008000300000020000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x1854) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3b, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42802, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x8}) 1.885786165s ago: executing program 1 (id=242): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x6c}}, 0x2004c090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0xa, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r1 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) (async) setsockopt$auto_SO_BSDCOMPAT(r1, 0x6, 0xe, &(0x7f0000000000), 0x80001) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x50, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x20, 0x3, 0x0, 0x1, [@nested={0x1c, 0xc, 0x0, 0x1, [@nested={0x16, 0x6, 0x0, 0x1, [@generic="005170b106019c7e01000000000000009cc6"]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 1.752989251s ago: executing program 1 (id=243): openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=&(0x7f00000001c0)='/dev/hwrng\x00\xf9\xd9\xd7~4\x12\x03\x18Jxz\xce<\x86F\xa3\x9cc\xba_\xa7\xcb\x83\xc3\x06\xcc\b\x98\x0f\x80\x03\xc7\x87\'$\x17\v\xf4n\x03V\xa9~\xf8\x8e9\xea\xca\xf4Y\x91i\x15\xde/\xad\x8b\x99\x15\x8f\xb12,O,\xa5)\xa7\xd7\xeb9<\xf7\x1e\xc7\xbd\x11\xf8\xd2\xeaju\xd7\xd9\x99\x01\x19\xe1\xf8.\x7fcYp\xb46\xf3\x16w? W\b\xe4\fx4l\t\x16\xf2\r\xc4\x91{n\x89\x8dTl\x82\x91\xed\x9e98\xb9\x1d\xec\x85`\xfb\x9e\xf87\x95b\xd5\x96\xca\xd6l\xccS\xd35G\xec\xe5\xb9\x11\xd85\x83|\x85l\b\xb7\x1f\x96\x12Z\xcf\xa7WL\xf5\xf7\xcc\x8fYW&=F\xd84\xb4\x87\xaa\xd2\xaa\xe8\xa6\x9d\x97\xc5cE_\xca.\xd5\xf9L\xb6\xd1\xd4\x11\x96NU\xeb\xca\x9es\x932\xb2\x7f\xc3\xf9\xb4\xd8\xc8:\x05\xaa\xde\x95\x16Z', &(0x7f0000000140)=&(0x7f00000002c0)='3\xffIlv\x1d\x01\xdd.\')\xf9\xc62\x8d \xf7\xcd~\xc7v)\xf20\xbe\xdc\xad[\x9c\xa8\xce\t\x91vg\x1e\v\x9e\x83\xc5P\x9e\xcf_\x9b\xf1>C~\x95\xd0\xfe\xa6d\x88W\a\xa1\xae1\x027\x92O\xf7F|4\x15\x88\xc0\xdf9T\xaf\xaf\xe6=\xa0\x1eu\xbd`\x84fc\xcd=\x9d\\\x8e\xe7\xc1\x8f2\x96\xceVR\xdd\x9a5\x87\xa0\x84i%\xa9\x95\x19\xb2y\xb1\xe1\x8as\xf5\xa1\xf4~\xea\x81`\x9ch\xce\xcb_\xd9\xbb\xdfzl\xe1\xc6RVe\xe8\x8b\xad\x80`\xc9Gz\nN>\x17E\x8b\xf3`\xc5\xf4u\xa1I\xcc\x8f') ioperm$auto(0x4, 0xbc6, 0x81) quotactl$auto(0x2, 0x0, 0x62a0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x260d82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="3d5e8132", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x22, 0x3, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) 1.744716473s ago: executing program 0 (id=244): write$auto(0xffffffffffffffff, 0x0, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x840, 0x0) lseek$auto(r0, 0x48f, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) ioctl$auto(0x3, 0x8905, 0x38) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000000)={0x3, r2, 0x9, "2883fd84c8350f0c69446d1c968f9afa"}) 1.585705266s ago: executing program 0 (id=245): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/per_cpu\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) (async) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x37, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x1000000009, 0x10001, 0x6, 0x400, 0x7ffffffb, 0x80005, 0xdd79, 0x10000, 0x3, 0x104}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x23, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x1, 0x0, 0xe) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x1, 0x0, 0x80000000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x4, 0x10000040400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) rename$auto(0x0, &(0x7f0000000140)='./file0\x00') (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xffffff00, 0xfffffffe, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x7fffffff, 0x3], {0x106, 0x8, 0xf, 0x1, 0x5, 0x8, 0x8, 0x17f, 0x400000000002}, {0x5, 0xfffffff7, 0x29, 0x5, 0x1, 0x40, 0x3, 0x8, 0x100000003}}) (async) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) 1.107840959s ago: executing program 2 (id=246): mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) mlock$auto(0xfff, 0xde7f) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x6, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 592.488364ms ago: executing program 1 (id=247): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) (async) socket(0x11, 0x80003, 0x300) select$auto(0xb, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0x100000001, 0x15, 0x6, 0x1, 0x5, 0x9, 0xe, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x8001]}, &(0x7f0000000040)={0x8000000000, 0x5}) (async) close_range$auto(0x2, 0x8000, 0x0) (async) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setuid$auto(0x800000000008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='*', 0x1) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff6813", 0x1b) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="c98681e4", @ANYRES16=r5, @ANYRES32, @ANYBLOB], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) (async) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/cgroup.max.descendants\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) (async) mlockall$auto(0x7) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ioctl$auto_TIOCSBRK2(r1, 0x5427, &(0x7f0000000040)) (async) ptrace$auto(0x10, r0, 0x2, 0x1007ff) 425.031035ms ago: executing program 0 (id=248): setfsuid$auto(0xee00) (async) r0 = setfsuid$auto(0xee00) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) r2 = syz_clone(0x10000000, &(0x7f0000000280)="b4ac7e48b835ef2aa172906e0000e4bd269a613cd02aeeb5c9ed0f949d14729da5bb619589f7f619e8f80f4503938abee5e09fd97adff60d1c829b84048f86b96b2ed92ffe8515b52c87ff55ee8219918252eb43c3c92602dd5713f8962665961fccd5a0b7c9bea7a4519df4aa34894ea6addb3f", 0x74, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="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") fcntl$auto(r1, 0x1, r2) setreuid$auto(r0, 0x0) (async) setreuid$auto(r0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r3, 0x3, 0x81, @kprobe_multi={0x9, 0x40, 0x9, 0x8, 0x10}}, 0x96) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000001440)={0x400, 0x10002, 0x10007f, 0x7, 0x6, 0x5, r4, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0xa, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0x8}}) 323.2997ms ago: executing program 0 (id=249): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) socket(0xa, 0x2, 0x88) (async) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000140)={&(0x7f0000000340)="8e5dc0fe0552552b2911bd34fcacae883b0eef55e12fccc0a8f849fa4bb90f68dfde6386992bf80b491e2baa1db9eb3d4f0fc4034fbaa578bcea4022bebcadeb00bfa449b4e9a700ac679eb793aa8832b55ead11da71fc5535d7f0b26f94c763b2e73b21d43544fb4bda4492", 0x12}, 0x5, &(0x7f00000000c0)="94c924edc5493a5b7a5433b561584f6852e5d719e655c86a797f8c7c27f3f54c1a3dc3184113e3f83c1d4fa6e628999f4cd19dc5828491278a6224c3b029", 0x5, 0xe}, 0x5}, 0x2, 0x108) 239.117949ms ago: executing program 2 (id=250): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3, 0x1, 0xeb0, r0, 0x8) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000003c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xe, @raw=0x3b09434b}}) r2 = io_uring_setup$auto(0x86, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto(r3, 0xc0205647, r2) write$auto_tracing_err_log_fops_trace(r2, 0x0, 0x0) read$auto_nvmf_dev_fops_fabrics(r2, &(0x7f00000000c0)=""/157, 0x9d) 89.535067ms ago: executing program 0 (id=251): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x29, 0x5, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)=@test={r0, 0x5, 0x200000, 0x0, 0x90e5, 0x3, 0x80, 0x0, 0xfff, 0xc0, 0x8, 0x8, 0xfffffffa, 0x9}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = clone3$auto(0x0, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) prctl$auto(0x4003e, 0x1, r2, 0x4, 0x9) ioctl$auto_SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) pidfd_open$auto(0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='5', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r4, 0x40045564, r4) r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x101000, 0x0) read$auto_configfs_file_operations_configfs_internal(r5, &(0x7f0000000080)=""/62, 0x3e) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2b, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r7 = pidfd_open$auto(0x1, 0x0) setns(r7, 0x60020000) syz_clone3(&(0x7f0000000300)={0x1341a4480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x57) ioctl$auto(r6, 0x89a0, r6) 10.210576ms ago: executing program 1 (id=252): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/max_nr_regions\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200e1, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000003", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf253d0000001900210064b6698fa876c13434397b82dd574e5da012ca661800000020001b80040003000400030004000300040002000400020004000200040002"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x48080) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) socket(0xa, 0x3, 0x3a) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x828c3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) select$auto(0x33d62d7c, 0x0, &(0x7f00000002c0)={[0x2, 0x80, 0x9, 0xc860000000000000, 0x5, 0x6, 0xf73, 0x8000000000000004, 0x5, 0x0, 0xe17, 0x0, 0x3, 0x200, 0x100000001, 0x4]}, &(0x7f0000000380)={[0x7, 0x6, 0x6, 0x8, 0xe07e, 0x7a7, 0x5, 0x6, 0x4, 0x51f2, 0x7fff, 0x25, 0x0, 0x3, 0x9, 0x9]}, &(0x7f0000000400)={0x3, 0x7fffffffffffffff}) readv$auto(r5, &(0x7f0000000680)={0x0, 0x40200}, 0x3) setresuid$auto(r3, r4, r3) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="0c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 3 (id=253): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x121041, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) write$auto(r0, &(0x7f0000000080)='/sys/kernel/security\xf9\x1cntegrity/evm/evm_xat\x99rs\x00B\b\xbd\x9f\x15\x81\x15\xb6h\xae', 0x1000000006) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x2306, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/013/001\x00', 0x2c880, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x503981, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 93.706778][ T5814] cgroup: Unknown subsys name 'net' [ 93.816783][ T5814] cgroup: Unknown subsys name 'cpuset' [ 93.826854][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.722226][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.245122][ T24] cfg80211: failed to load regulatory.db [ 97.676992][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.690407][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.698491][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.706896][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.723082][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.784969][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.797212][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.805180][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.813884][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.821633][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.907293][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.923184][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.931501][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.939753][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.948506][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.983087][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.993381][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.001365][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.010866][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.027067][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.446021][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 98.619098][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 98.732923][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 98.747491][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 98.767951][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.776066][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.783401][ T5826] bridge_slave_0: entered allmulticast mode [ 98.790964][ T5826] bridge_slave_0: entered promiscuous mode [ 98.828543][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.835840][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.843371][ T5826] bridge_slave_1: entered allmulticast mode [ 98.851142][ T5826] bridge_slave_1: entered promiscuous mode [ 98.989028][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.996433][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.003811][ T5830] bridge_slave_0: entered allmulticast mode [ 99.011198][ T5830] bridge_slave_0: entered promiscuous mode [ 99.022630][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.046210][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.053669][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.060854][ T5830] bridge_slave_1: entered allmulticast mode [ 99.073340][ T5830] bridge_slave_1: entered promiscuous mode [ 99.099144][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.181726][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.202545][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.210006][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.217770][ T5834] bridge_slave_0: entered allmulticast mode [ 99.225486][ T5834] bridge_slave_0: entered promiscuous mode [ 99.233412][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.240649][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.249194][ T5832] bridge_slave_0: entered allmulticast mode [ 99.256866][ T5832] bridge_slave_0: entered promiscuous mode [ 99.266823][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.279299][ T5826] team0: Port device team_slave_0 added [ 99.286547][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.293910][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.301153][ T5834] bridge_slave_1: entered allmulticast mode [ 99.309099][ T5834] bridge_slave_1: entered promiscuous mode [ 99.316506][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.323925][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.331151][ T5832] bridge_slave_1: entered allmulticast mode [ 99.338881][ T5832] bridge_slave_1: entered promiscuous mode [ 99.360005][ T5826] team0: Port device team_slave_1 added [ 99.423088][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.430115][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.456122][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.496590][ T5830] team0: Port device team_slave_0 added [ 99.505415][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.515223][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.522207][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.549925][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.565541][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.576800][ T5830] team0: Port device team_slave_1 added [ 99.585244][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.607161][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.658846][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.665989][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.692822][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.741541][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.748988][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.775347][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.801829][ T5832] team0: Port device team_slave_0 added [ 99.813455][ T5147] Bluetooth: hci0: command tx timeout [ 99.839785][ T5834] team0: Port device team_slave_0 added [ 99.850915][ T5832] team0: Port device team_slave_1 added [ 99.881409][ T5826] hsr_slave_0: entered promiscuous mode [ 99.889393][ T5826] hsr_slave_1: entered promiscuous mode [ 99.895205][ T5147] Bluetooth: hci1: command tx timeout [ 99.908204][ T5834] team0: Port device team_slave_1 added [ 99.927214][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.936294][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.962514][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.009302][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.016412][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.042481][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.042485][ T5147] Bluetooth: hci2: command tx timeout [ 100.105805][ T5830] hsr_slave_0: entered promiscuous mode [ 100.112777][ T5830] hsr_slave_1: entered promiscuous mode [ 100.119021][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 100.125197][ T5830] Cannot create hsr debugfs directory [ 100.132410][ T5147] Bluetooth: hci3: command tx timeout [ 100.148850][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.156125][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.182716][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.216061][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.223299][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.249646][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.307212][ T5832] hsr_slave_0: entered promiscuous mode [ 100.314574][ T5832] hsr_slave_1: entered promiscuous mode [ 100.320874][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 100.327181][ T5832] Cannot create hsr debugfs directory [ 100.480926][ T5834] hsr_slave_0: entered promiscuous mode [ 100.487604][ T5834] hsr_slave_1: entered promiscuous mode [ 100.494112][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 100.499873][ T5834] Cannot create hsr debugfs directory [ 100.844002][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.878062][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.906782][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.924646][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.986475][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.997924][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.017631][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.039908][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.108328][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.147148][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.159545][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.170923][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.295125][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.314863][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.333701][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.346029][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.384870][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.464438][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.478018][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.505371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.513087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.545713][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.553120][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.566856][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.616804][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.624212][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.669702][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.677008][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.697732][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.770287][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.826997][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.843554][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.850868][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.883625][ T5147] Bluetooth: hci0: command tx timeout [ 101.895840][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.903093][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.931685][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.962859][ T5147] Bluetooth: hci1: command tx timeout [ 101.981773][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.025432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.032712][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.071445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.078738][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.113644][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.134336][ T5147] Bluetooth: hci2: command tx timeout [ 102.205169][ T5147] Bluetooth: hci3: command tx timeout [ 102.282003][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.430530][ T5826] veth0_vlan: entered promiscuous mode [ 102.468747][ T5826] veth1_vlan: entered promiscuous mode [ 102.480604][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.596353][ T5826] veth0_macvtap: entered promiscuous mode [ 102.636953][ T5826] veth1_macvtap: entered promiscuous mode [ 102.668236][ T5830] veth0_vlan: entered promiscuous mode [ 102.714261][ T5830] veth1_vlan: entered promiscuous mode [ 102.731716][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.743235][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.779962][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.806491][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.821010][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.831290][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.841340][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.865990][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.915000][ T5830] veth0_macvtap: entered promiscuous mode [ 102.953201][ T5830] veth1_macvtap: entered promiscuous mode [ 103.020941][ T5832] veth0_vlan: entered promiscuous mode [ 103.041942][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.056938][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.096650][ T5834] veth0_vlan: entered promiscuous mode [ 103.109543][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.133614][ T5832] veth1_vlan: entered promiscuous mode [ 103.154192][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.161205][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.169908][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.183322][ T5834] veth1_vlan: entered promiscuous mode [ 103.221952][ T3009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.235704][ T3009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.268021][ T3009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.277777][ T3009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.314784][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.363427][ T5832] veth0_macvtap: entered promiscuous mode [ 103.442044][ T5834] veth0_macvtap: entered promiscuous mode [ 103.472060][ T5832] veth1_macvtap: entered promiscuous mode [ 103.511751][ T5834] veth1_macvtap: entered promiscuous mode [ 103.579383][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.609844][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.620448][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.632545][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.715581][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.741969][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.763705][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.794937][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.819351][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.829627][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.837650][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.853878][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.914524][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.939654][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.963951][ T5147] Bluetooth: hci0: command tx timeout [ 103.969829][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.022644][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.042520][ T5147] Bluetooth: hci1: command tx timeout [ 104.174792][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.187517][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.202574][ T5147] Bluetooth: hci2: command tx timeout [ 104.274194][ T5918] FAULT_INJECTION: forcing a failure. [ 104.274194][ T5918] name failslab, interval 1, probability 0, space 0, times 1 [ 104.289691][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 104.289733][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.289761][ T5918] Call Trace: [ 104.289772][ T5918] [ 104.289789][ T5918] dump_stack_lvl+0x100/0x190 [ 104.289853][ T5918] should_fail_ex.cold+0x5/0xa [ 104.289901][ T5918] ? tomoyo_realpath_from_path+0xb6/0x690 [ 104.289955][ T5918] should_failslab+0xc2/0x120 [ 104.289993][ T5918] __kmalloc_noprof+0xe0/0x850 [ 104.290056][ T5918] tomoyo_realpath_from_path+0xb6/0x690 [ 104.290118][ T5918] tomoyo_path_number_perm+0x23c/0x580 [ 104.290160][ T5918] ? tomoyo_path_number_perm+0x22e/0x580 [ 104.290207][ T5918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.290264][ T5918] ? d_splice_alias_ops+0x5be/0x1320 [ 104.290316][ T5918] ? d_splice_alias_ops+0x5be/0x1320 [ 104.290391][ T5918] ? kernfs_iop_lookup+0x234/0x2d0 [ 104.290443][ T5918] ? kernfs_iop_lookup+0x234/0x2d0 [ 104.290494][ T5918] ? current_check_access_path+0x281/0x460 [ 104.290545][ T5918] ? __pfx_current_check_access_path+0x10/0x10 [ 104.290592][ T5918] ? kernfs_iop_lookup+0x247/0x2d0 [ 104.290654][ T5918] ? lookup_one_qstr_excl+0xb3/0x250 [ 104.290706][ T5918] tomoyo_path_mkdir+0x9b/0xe0 [ 104.290737][ T5918] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 104.290781][ T5918] security_path_mkdir+0x154/0x2e0 [ 104.290834][ T5918] filename_mkdirat+0x168/0x5e0 [ 104.290884][ T5918] ? __pfx_filename_mkdirat+0x10/0x10 [ 104.290924][ T5918] ? strncpy_from_user+0x19d/0x2d0 [ 104.290972][ T5918] ? do_getname+0x191/0x390 [ 104.291021][ T5918] __x64_sys_mkdir+0x6b/0x90 [ 104.291061][ T5918] do_syscall_64+0x106/0xf80 [ 104.291095][ T5918] ? clear_bhb_loop+0x40/0x90 [ 104.291136][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.291176][ T5918] RIP: 0033:0x7fe193b9c819 [ 104.291210][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.291243][ T5918] RSP: 002b:00007fe194b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 104.291280][ T5918] RAX: ffffffffffffffda RBX: 00007fe193e15fa0 RCX: 00007fe193b9c819 [ 104.291302][ T5918] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 104.291322][ T5918] RBP: 00007fe193c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 104.291342][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.291361][ T5918] R13: 00007fe193e16038 R14: 00007fe193e15fa0 R15: 00007fff72b228f8 [ 104.291406][ T5918] [ 104.291498][ T5918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.368011][ T5147] Bluetooth: hci3: command tx timeout [ 104.599927][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.639685][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.715154][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.768066][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.911645][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.927958][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.354028][ T5925] Zero length message leads to an empty skb [ 105.503783][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'. [ 106.044314][ T5147] Bluetooth: hci0: command tx timeout [ 106.123083][ T5147] Bluetooth: hci1: command tx timeout [ 106.284367][ T5147] Bluetooth: hci2: command tx timeout [ 106.607079][ T5147] Bluetooth: hci3: command tx timeout [ 107.171609][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.304790][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 108.336694][ T5976] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1213a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 108.352482][ T5976] Call Trace: [ 108.355801][ T5976] [ 108.358787][ T5976] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 108.365556][ T5976] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 108.372215][ T5976] mce_cpu_restart+0xd5/0x1f0 [ 108.377009][ T5976] ? __pfx_mce_cpu_restart+0x10/0x10 [ 108.382464][ T5976] smp_call_function_many_cond+0x11fc/0x1500 [ 108.388523][ T5976] ? __pfx_mce_cpu_restart+0x10/0x10 [ 108.393995][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 108.399904][ T5976] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 108.406356][ T5976] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 108.412492][ T5976] ? __timer_delete_sync+0x151/0x1c0 [ 108.417734][ T5961] HfR: entered promiscuous mode [ 108.422832][ T5976] ? __pfx_mce_cpu_restart+0x10/0x10 [ 108.428492][ T5976] on_each_cpu_cond_mask+0x40/0x90 [ 108.433708][ T5976] set_bank+0x240/0x3a0 [ 108.438043][ T5976] ? __pfx_set_bank+0x10/0x10 [ 108.442806][ T5976] ? find_held_lock+0x2b/0x80 [ 108.447548][ T5976] ? sysfs_file_kobj+0xe4/0x290 [ 108.452454][ T5976] ? sysfs_file_kobj+0xe4/0x290 [ 108.457398][ T5976] ? __pfx_set_bank+0x10/0x10 [ 108.462126][ T5976] dev_attr_store+0x58/0x80 [ 108.466683][ T5976] ? __pfx_dev_attr_store+0x10/0x10 [ 108.471930][ T5976] sysfs_kf_write+0xf2/0x150 [ 108.476599][ T5976] kernfs_fop_write_iter+0x3e0/0x5f0 [ 108.482036][ T5976] ? __pfx_sysfs_kf_write+0x10/0x10 [ 108.487396][ T5976] vfs_write+0x6ac/0x1070 [ 108.491805][ T5976] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 108.497661][ T5976] ? __pfx_vfs_write+0x10/0x10 [ 108.502503][ T5976] ksys_write+0x12a/0x250 [ 108.506898][ T5976] ? __pfx_ksys_write+0x10/0x10 [ 108.511914][ T5976] do_syscall_64+0x106/0xf80 [ 108.516657][ T5976] ? clear_bhb_loop+0x40/0x90 [ 108.521453][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.527581][ T5976] RIP: 0033:0x7f127379c819 [ 108.532710][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.553094][ T5976] RSP: 002b:00007f1274630028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.561589][ T5976] RAX: ffffffffffffffda RBX: 00007f1273a15fa0 RCX: 00007f127379c819 [ 108.569625][ T5976] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 108.577839][ T5976] RBP: 00007f1273832c91 R08: 0000000000000000 R09: 0000000000000000 [ 108.585883][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.593928][ T5976] R13: 00007f1273a16038 R14: 00007f1273a15fa0 R15: 00007fffb21ecc48 [ 108.601995][ T5976] [ 109.351885][ T5991] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 109.838084][ T5996] process 'syz.3.22' launched ':,' with NULL argv: empty string added [ 110.348310][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.664646][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 112.065301][ T6044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 112.349322][ T6057] sd 0:0:1:0: PR command failed: 1026 [ 112.382979][ T6057] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 112.389930][ T6057] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 113.492447][ T6080] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.672476][ T6104] FAULT_INJECTION: forcing a failure. [ 114.672476][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 114.711074][ T6095] FAULT_INJECTION: forcing a failure. [ 114.711074][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.733861][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(full) [ 114.733893][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.733908][ T6104] Call Trace: [ 114.733916][ T6104] [ 114.733925][ T6104] dump_stack_lvl+0x100/0x190 [ 114.733980][ T6104] should_fail_ex.cold+0x5/0xa [ 114.734010][ T6104] should_failslab+0xc2/0x120 [ 114.734038][ T6104] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 114.734076][ T6104] ? seq_open+0x55/0x170 [ 114.734109][ T6104] ? lockdep_init_map_type+0x5c/0x250 [ 114.734147][ T6104] seq_open+0x55/0x170 [ 114.734182][ T6104] kernfs_fop_open+0x590/0xd50 [ 114.734218][ T6104] do_dentry_open+0x6d8/0x1660 [ 114.734243][ T6104] ? __pfx_kernfs_fop_open+0x10/0x10 [ 114.734279][ T6104] vfs_open+0x82/0x3f0 [ 114.734314][ T6104] path_openat+0x208c/0x31a0 [ 114.734350][ T6104] ? __pfx_path_openat+0x10/0x10 [ 114.734388][ T6104] do_file_open+0x20e/0x430 [ 114.734417][ T6104] ? __pfx_do_file_open+0x10/0x10 [ 114.734464][ T6104] ? alloc_fd+0x476/0x790 [ 114.734497][ T6104] ? do_getname+0x191/0x390 [ 114.734532][ T6104] do_sys_openat2+0x10d/0x1e0 [ 114.734566][ T6104] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.734602][ T6104] ? __fget_files+0x21f/0x3d0 [ 114.734632][ T6104] __x64_sys_openat+0x12d/0x210 [ 114.734667][ T6104] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.734713][ T6104] do_syscall_64+0x106/0xf80 [ 114.734749][ T6104] ? clear_bhb_loop+0x40/0x90 [ 114.734779][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.734804][ T6104] RIP: 0033:0x7fe193b9c819 [ 114.734826][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.734849][ T6104] RSP: 002b:00007fe194b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.734871][ T6104] RAX: ffffffffffffffda RBX: 00007fe193e15fa0 RCX: 00007fe193b9c819 [ 114.734887][ T6104] RDX: 0000000000080000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 114.734901][ T6104] RBP: 00007fe193c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 114.734915][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.734929][ T6104] R13: 00007fe193e16038 R14: 00007fe193e15fa0 R15: 00007fff72b228f8 [ 114.734960][ T6104] [ 115.029535][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 115.029576][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 115.029595][ T6095] Call Trace: [ 115.029607][ T6095] [ 115.029619][ T6095] dump_stack_lvl+0x100/0x190 [ 115.029683][ T6095] should_fail_ex.cold+0x5/0xa [ 115.029719][ T6095] _copy_to_user+0x32/0xd0 [ 115.029763][ T6095] do_pages_stat+0x559/0x7f0 [ 115.029817][ T6095] ? __pfx_do_pages_stat+0x10/0x10 [ 115.029861][ T6095] ? get_task_cred+0x17f/0x360 [ 115.029938][ T6095] ? do_raw_spin_unlock+0x145/0x1e0 [ 115.029998][ T6095] kernel_move_pages+0xecf/0x13f0 [ 115.030046][ T6095] ? do_futex+0x192/0x350 [ 115.030092][ T6095] ? __pfx_do_futex+0x10/0x10 [ 115.030139][ T6095] ? __pfx_kernel_move_pages+0x10/0x10 [ 115.030189][ T6095] ? __x64_sys_futex+0x34f/0x4d0 [ 115.030231][ T6095] ? __x64_sys_futex+0x358/0x4d0 [ 115.030276][ T6095] ? __sys_socket+0xac/0x260 [ 115.030321][ T6095] ? xfd_validate_state+0x129/0x190 [ 115.030378][ T6095] __x64_sys_move_pages+0xe0/0x1c0 [ 115.030420][ T6095] ? do_syscall_64+0x95/0xf80 [ 115.030455][ T6095] ? lockdep_hardirqs_on+0x78/0x100 [ 115.030491][ T6095] do_syscall_64+0x106/0xf80 [ 115.030523][ T6095] ? clear_bhb_loop+0x40/0x90 [ 115.030564][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.030597][ T6095] RIP: 0033:0x7fc72979c819 [ 115.030623][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.030661][ T6095] RSP: 002b:00007fc72a6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 115.030692][ T6095] RAX: ffffffffffffffda RBX: 00007fc729a16180 RCX: 00007fc72979c819 [ 115.030712][ T6095] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 115.030730][ T6095] RBP: 00007fc729832c91 R08: 0000000000000000 R09: 8000000000000000 [ 115.030750][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.030769][ T6095] R13: 00007fc729a16218 R14: 00007fc729a16180 R15: 00007ffe448ae3e8 [ 115.030811][ T6095] [ 115.324508][ T6093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.625400][ T6131] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.631713][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.717249][ T6131] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.873557][ T6131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.880017][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.912719][ T6131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.941264][ T6131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.947689][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.006313][ T6131] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.030408][ T6131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.030589][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.063764][ T6131] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.192983][ T6176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 118.692473][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.922432][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.963026][ T6192] random: crng reseeded on system resumption [ 119.007851][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.082510][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.588923][ T6224] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.762844][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.002408][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.084177][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.162556][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.229646][ T6235] NFSD: Failed to start, no listeners configured. [ 122.657010][ T6268] random: crng reseeded on system resumption [ 122.854236][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.092454][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.162875][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.252346][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.318067][ T6301] nvme_fabrics: missing parameter 'transport=%s' [ 124.324795][ T6301] nvme_fabrics: missing parameter 'nqn=%s' [ 124.330886][ T6303] nvme_fabrics: unknown parameter or missing value '”' in ctrl creation request [ 125.362481][ T30] audit: type=1800 audit(1775791284.866:2): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="sr0" dev="devtmpfs" ino=2806 res=0 errno=0 [ 128.316499][ T6391] netlink: 338 bytes leftover after parsing attributes in process `syz.3.108'. [ 129.025796][ T6397] NFSD: Failed to start, no listeners configured. [ 131.099071][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 131.173465][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 131.315780][ T6448] random: crng reseeded on system resumption [ 131.386517][ T6448] netlink: 330 bytes leftover after parsing attributes in process `syz.2.120'. [ 131.411830][ T6448] mac80211_hwsim hwsim8 ›: renamed from wlan0 (while UP) [ 131.500483][ T6455] FAULT_INJECTION: forcing a failure. [ 131.500483][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 131.522488][ T6455] CPU: 1 UID: 0 PID: 6455 Comm: syz.1.122 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.522543][ T6455] Tainted: [L]=SOFTLOCKUP [ 131.522554][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.522573][ T6455] Call Trace: [ 131.522584][ T6455] [ 131.522597][ T6455] dump_stack_lvl+0x100/0x190 [ 131.522656][ T6455] should_fail_ex.cold+0x5/0xa [ 131.522696][ T6455] ? lsm_blob_alloc+0x68/0x90 [ 131.522749][ T6455] should_failslab+0xc2/0x120 [ 131.522789][ T6455] __kmalloc_noprof+0xe0/0x850 [ 131.522844][ T6455] ? trace_kmem_cache_alloc+0xf3/0x120 [ 131.522890][ T6455] lsm_blob_alloc+0x68/0x90 [ 131.522944][ T6455] security_sk_alloc+0x2d/0x290 [ 131.522984][ T6455] sk_prot_alloc+0x1d1/0x2a0 [ 131.523030][ T6455] sk_alloc+0x36/0xe80 [ 131.523084][ T6455] qrtr_create+0x84/0x1d0 [ 131.523121][ T6455] __sock_create+0x339/0x860 [ 131.523174][ T6455] __sys_socket+0x14d/0x260 [ 131.523221][ T6455] ? __pfx___sys_socket+0x10/0x10 [ 131.523279][ T6455] __x64_sys_socket+0x72/0xb0 [ 131.523323][ T6455] ? lockdep_hardirqs_on+0x78/0x100 [ 131.523359][ T6455] do_syscall_64+0x106/0xf80 [ 131.523393][ T6455] ? clear_bhb_loop+0x40/0x90 [ 131.523435][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.523470][ T6455] RIP: 0033:0x7fe193b9c819 [ 131.523506][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.523538][ T6455] RSP: 002b:00007fe194ae9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 131.523570][ T6455] RAX: ffffffffffffffda RBX: 00007fe193e16090 RCX: 00007fe193b9c819 [ 131.523591][ T6455] RDX: 0000000000000077 RSI: 0000000000080002 RDI: 000000000000002a [ 131.523611][ T6455] RBP: 00007fe193c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 131.523630][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.523648][ T6455] R13: 00007fe193e16128 R14: 00007fe193e16090 R15: 00007fff72b228f8 [ 131.523687][ T6455] [ 132.034466][ T6469] futex_wake_op: ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ tries to shift op by -2048; fix this program [ 132.087033][ T6469] futex_wake_op: ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ tries to shift op by -2048; fix this program [ 132.232837][ T6469] 0x000000000001-0x000000020000 : "" [ 132.322930][ T6469] ftl_cs: FTL header corrupt! [ 132.649058][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.710688][ T6487] bond0: (slave bond_slave_0): Releasing backup interface [ 132.729357][ T6489] ubi3: attaching mtd1 [ 133.101305][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109173][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.178023][ T6495] mkiss: ax0: crc mode is auto. [ 133.872167][ T6515] random: crng reseeded on system resumption [ 134.109960][ T6525] futex_wake_op: syz.2.139 tries to shift op by -2048; fix this program [ 134.118706][ T6525] futex_wake_op: syz.2.139 tries to shift op by -2048; fix this program [ 136.184040][ T6549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.200731][ T6549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.209070][ T6549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.215721][ T6549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.330286][ T6595] vivid-007: ================= START STATUS ================= [ 137.347738][ T6595] vivid-007: Generate PTS: true [ 137.362823][ T6595] vivid-007: Generate SCR: true [ 137.372397][ T6595] tpg source WxH: 320x240 (Y'CbCr) [ 137.382369][ T6595] tpg field: 1 [ 137.387789][ T6595] tpg crop: (0,0)/320x240 [ 137.392367][ T6595] tpg compose: (0,0)/320x240 [ 137.397340][ T6595] tpg colorspace: 8 [ 137.403381][ T6595] tpg transfer function: 0/0 [ 137.408921][ T6595] tpg Y'CbCr encoding: 0/0 [ 137.429643][ T6595] tpg quantization: 0/0 [ 137.435709][ T6595] tpg RGB range: 0/2 [ 137.452335][ T6595] vivid-007: ================== END STATUS ================== [ 137.482850][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.765168][ T6614] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[6614] [ 137.804380][ T6615] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 138.202905][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.295615][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.299626][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.509438][ T6646] netlink: 3 bytes leftover after parsing attributes in process `syz.0.167'. [ 139.559506][ T6664] mmap: syz.2.172 (6664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.804899][ T6677] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.890900][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 140.270053][ T6679] team0: Port device team_slave_1 removed [ 140.300127][ T6680] ima: policy update failed [ 140.357166][ T30] audit: type=1802 audit(1775791299.866:3): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.174" res=0 errno=0 [ 141.035366][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 141.211077][ T6714] usb usb36: usbfs: interface 0 claimed by hub while 'syz.0.181' sets config #7 [ 142.266819][ T6744] FAULT_INJECTION: forcing a failure. [ 142.266819][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 142.279862][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.0.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.279917][ T6744] Tainted: [L]=SOFTLOCKUP [ 142.279929][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.279955][ T6744] Call Trace: [ 142.279965][ T6744] [ 142.279978][ T6744] dump_stack_lvl+0x100/0x190 [ 142.280042][ T6744] should_fail_ex.cold+0x5/0xa [ 142.280083][ T6744] should_failslab+0xc2/0x120 [ 142.280124][ T6744] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 142.280180][ T6744] ? sk_prot_alloc+0x60/0x2a0 [ 142.280230][ T6744] sk_prot_alloc+0x60/0x2a0 [ 142.280275][ T6744] sk_alloc+0x36/0xe80 [ 142.280334][ T6744] smc_create+0x11a/0x290 [ 142.280393][ T6744] __sock_create+0x339/0x860 [ 142.280454][ T6744] __sys_socket+0x14d/0x260 [ 142.280507][ T6744] ? __pfx___sys_socket+0x10/0x10 [ 142.280571][ T6744] __x64_sys_socket+0x72/0xb0 [ 142.280617][ T6744] ? lockdep_hardirqs_on+0x78/0x100 [ 142.280659][ T6744] do_syscall_64+0x106/0xf80 [ 142.280696][ T6744] ? clear_bhb_loop+0x40/0x90 [ 142.280741][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.280777][ T6744] RIP: 0033:0x7ff46b79c819 [ 142.280810][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.280842][ T6744] RSP: 002b:00007ff46c735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 142.280879][ T6744] RAX: ffffffffffffffda RBX: 00007ff46ba15fa0 RCX: 00007ff46b79c819 [ 142.280901][ T6744] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 142.280920][ T6744] RBP: 00007ff46b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 142.280940][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.280964][ T6744] R13: 00007ff46ba16038 R14: 00007ff46ba15fa0 R15: 00007ffdfb123a88 [ 142.281008][ T6744] [ 142.516802][ T6733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.523432][ T6733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.530353][ T6733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.543929][ T6733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.753514][ T6747] netlink: 342 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.765618][ T6747] netlink: 342 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.775597][ T6747] netlink: 342 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.839005][ T6747] netlink: 302 bytes leftover after parsing attributes in process `syz.0.189'. [ 143.172428][ T6741] random: crng reseeded on system resumption [ 143.722589][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.685038][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.691254][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.697866][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.132118][ T6790] ACPI: Can not change Invalid GPE/Fixed Event status [ 145.184789][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 146.030317][ T6808] block2mtd: error: cannot open device [ 146.322472][ T6806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.351539][ T6806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.738879][ T6806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.922336][ T6806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.355660][ T6830] bridge0: port 3(syz_tun) entered blocking state [ 148.364066][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.383685][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.402589][ T6830] bridge0: port 3(syz_tun) entered disabled state [ 148.409326][ T6830] syz_tun: entered allmulticast mode [ 148.507531][ T6830] syz_tun: entered promiscuous mode [ 148.555733][ T6830] bridge0: port 3(syz_tun) entered blocking state [ 148.562711][ T6830] bridge0: port 3(syz_tun) entered forwarding state [ 148.773473][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.779637][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.847796][ T6876] netlink: 146 bytes leftover after parsing attributes in process `syz.1.216'. [ 151.398911][ T6889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 151.707964][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 151.868906][ T6897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.954095][ T6897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.999416][ T6897] bond0 (unregistering): Released all slaves [ 153.345593][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 153.481679][ T6924] sd 0:0:1:0: PR command failed: 1026 [ 153.519642][ T6924] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 153.532551][ T6924] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 153.877744][ T6933] FAULT_INJECTION: forcing a failure. [ 153.877744][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.902387][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.0.227 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.902452][ T6933] Tainted: [L]=SOFTLOCKUP [ 153.902461][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.902475][ T6933] Call Trace: [ 153.902482][ T6933] [ 153.902492][ T6933] dump_stack_lvl+0x100/0x190 [ 153.902534][ T6933] should_fail_ex.cold+0x5/0xa [ 153.902564][ T6933] _copy_from_iter+0x1f4/0x1690 [ 153.902599][ T6933] ? rcu_is_watching+0x12/0xc0 [ 153.902638][ T6933] ? trace_kmem_cache_alloc+0xf3/0x120 [ 153.902666][ T6933] ? __kasan_slab_alloc+0x89/0x90 [ 153.902719][ T6933] ? __pfx__copy_from_iter+0x10/0x10 [ 153.902751][ T6933] ? __asan_memset+0x23/0x50 [ 153.902786][ T6933] ? __build_skb_around+0x278/0x390 [ 153.902821][ T6933] ? is_vmalloc_addr+0x86/0xa0 [ 153.902860][ T6933] netlink_sendmsg+0x808/0xda0 [ 153.902892][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.902921][ T6933] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 153.902951][ T6933] __sys_sendto+0x468/0x4b0 [ 153.902987][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.903014][ T6933] ? __pfx___sys_sendto+0x10/0x10 [ 153.903059][ T6933] ? __might_fault+0xc5/0x140 [ 153.903106][ T6933] ? xfd_validate_state+0x129/0x190 [ 153.903147][ T6933] __x64_sys_sendto+0xe0/0x1c0 [ 153.903183][ T6933] ? do_syscall_64+0x95/0xf80 [ 153.903208][ T6933] ? lockdep_hardirqs_on+0x78/0x100 [ 153.903233][ T6933] do_syscall_64+0x106/0xf80 [ 153.903257][ T6933] ? clear_bhb_loop+0x40/0x90 [ 153.903286][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.903310][ T6933] RIP: 0033:0x7ff46b79c819 [ 153.903330][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.903353][ T6933] RSP: 002b:00007ff46c735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.903375][ T6933] RAX: ffffffffffffffda RBX: 00007ff46ba15fa0 RCX: 00007ff46b79c819 [ 153.903390][ T6933] RDX: 0000000000020011 RSI: 0000000000000000 RDI: 0000000000000003 [ 153.903404][ T6933] RBP: 00007ff46b832c91 R08: 0000000000000000 R09: 000000000000001c [ 153.903418][ T6933] R10: 0000000000000376 R11: 0000000000000246 R12: 0000000000000000 [ 153.903438][ T6933] R13: 00007ff46ba16038 R14: 00007ff46ba15fa0 R15: 00007ffdfb123a88 [ 153.903468][ T6933] [ 155.451655][ T6959] random: crng reseeded on system resumption [ 155.490238][ T6959] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 155.503706][ T6959] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 155.831317][ T6969] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 156.028103][ T6969] CIFS mount error: No usable UNC path provided in device string! [ 156.028103][ T6969] [ 156.040301][ T6969] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.300768][ T6988] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 156.309462][ T6988] bond0: option packets_per_slave: allowed values 0 - 65535 [ 156.395261][ T7004] netlink: NAT attribute has 18 unknown bytes [ 156.905817][ T7017] FAULT_INJECTION: forcing a failure. [ 156.905817][ T7017] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 157.123836][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.0.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.123895][ T7017] Tainted: [L]=SOFTLOCKUP [ 157.123906][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.123924][ T7017] Call Trace: [ 157.123935][ T7017] [ 157.123947][ T7017] dump_stack_lvl+0x100/0x190 [ 157.124003][ T7017] should_fail_ex.cold+0x5/0xa [ 157.124036][ T7017] ? prepare_alloc_pages+0x16d/0x5f0 [ 157.124079][ T7017] should_fail_alloc_page+0xeb/0x140 [ 157.124119][ T7017] prepare_alloc_pages+0x1f0/0x5f0 [ 157.124166][ T7017] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 157.124223][ T7017] ? __pfx_css_rstat_updated+0x10/0x10 [ 157.124266][ T7017] ? mark_held_locks+0x40/0x70 [ 157.124308][ T7017] ? irqentry_exit+0x180/0x670 [ 157.124348][ T7017] ? rcu_is_watching+0x12/0xc0 [ 157.124407][ T7017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.124469][ T7017] ? lru_gen_add_folio+0x20f/0x13e0 [ 157.124511][ T7017] ? lock_acquire+0x1cf/0x380 [ 157.124555][ T7017] ? find_held_lock+0x2b/0x80 [ 157.124586][ T7017] ? page_table_check_set+0x49a/0xa10 [ 157.124619][ T7017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 157.124655][ T7017] ? policy_nodemask+0xed/0x4f0 [ 157.124695][ T7017] alloc_pages_mpol+0x1fb/0x550 [ 157.124733][ T7017] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 157.124779][ T7017] folio_alloc_mpol_noprof+0x36/0x340 [ 157.124823][ T7017] vma_alloc_folio_noprof+0xed/0x1d0 [ 157.124867][ T7017] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 157.124924][ T7017] do_anonymous_page+0xb3a/0x1fb0 [ 157.124987][ T7017] __handle_mm_fault+0x1d48/0x2b60 [ 157.125045][ T7017] ? __pfx___handle_mm_fault+0x10/0x10 [ 157.125094][ T7017] ? pte_offset_map_lock+0x174/0x320 [ 157.125131][ T7017] ? find_held_lock+0x2b/0x80 [ 157.125177][ T7017] ? follow_page_pte+0x5b3/0x1400 [ 157.125225][ T7017] handle_mm_fault+0x36d/0xa20 [ 157.125280][ T7017] __get_user_pages+0xf9c/0x34d0 [ 157.125335][ T7017] ? __pfx___get_user_pages+0x10/0x10 [ 157.125393][ T7017] populate_vma_page_range+0x267/0x3f0 [ 157.125438][ T7017] ? __pfx_populate_vma_page_range+0x10/0x10 [ 157.125478][ T7017] ? __pfx_find_vma_intersection+0x10/0x10 [ 157.125527][ T7017] __mm_populate+0x107/0x3a0 [ 157.125569][ T7017] ? __pfx___mm_populate+0x10/0x10 [ 157.125614][ T7017] ? up_write+0x290/0x4f0 [ 157.125667][ T7017] vm_mmap_pgoff+0x37f/0x470 [ 157.125711][ T7017] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 157.125752][ T7017] ? do_futex+0x192/0x350 [ 157.125797][ T7017] ? __pfx_do_futex+0x10/0x10 [ 157.125848][ T7017] ksys_mmap_pgoff+0xe1/0x650 [ 157.125885][ T7017] ? __x64_sys_futex+0x34f/0x4d0 [ 157.125927][ T7017] ? __x64_sys_futex+0x358/0x4d0 [ 157.125973][ T7017] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 157.126011][ T7017] ? xfd_validate_state+0x129/0x190 [ 157.126067][ T7017] __x64_sys_mmap+0x125/0x190 [ 157.126122][ T7017] do_syscall_64+0x106/0xf80 [ 157.126154][ T7017] ? clear_bhb_loop+0x40/0x90 [ 157.126194][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.126226][ T7017] RIP: 0033:0x7ff46b79c819 [ 157.126252][ T7017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.126280][ T7017] RSP: 002b:00007ff46c735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 157.126310][ T7017] RAX: ffffffffffffffda RBX: 00007ff46ba15fa0 RCX: 00007ff46b79c819 [ 157.126331][ T7017] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 157.126348][ T7017] RBP: 00007ff46b832c91 R08: ffffffffffffffff R09: 0000000000000000 [ 157.126375][ T7017] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 157.126392][ T7017] R13: 00007ff46ba16038 R14: 00007ff46ba15fa0 R15: 00007ffdfb123a88 [ 157.126434][ T7017] [ 157.272684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 158.330516][ T30] audit: type=1800 audit(1775791317.836:4): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.251" name="lu_gp_id" dev="configfs" ino=13007 res=0 errno=0 [ 158.413567][ T7050] ================================================================== [ 158.413601][ T7050] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 158.413668][ T7050] Write of size 8 at addr ffffc900041f1be0 by task syz.3.253/7050 [ 158.413693][ T7050] [ 158.413710][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.3.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.413753][ T7050] Tainted: [L]=SOFTLOCKUP [ 158.413764][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.413782][ T7050] Call Trace: [ 158.413792][ T7050] [ 158.413804][ T7050] dump_stack_lvl+0x100/0x190 [ 158.413853][ T7050] print_report+0x156/0x4c9 [ 158.413904][ T7050] ? sys_imageblit+0x19fb/0x1d60 [ 158.413953][ T7050] kasan_report+0xdf/0x1e0 [ 158.413989][ T7050] ? sys_imageblit+0x19fb/0x1d60 [ 158.414045][ T7050] sys_imageblit+0x19fb/0x1d60 [ 158.414101][ T7050] ? __pfx_sys_imageblit+0x10/0x10 [ 158.414156][ T7050] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 158.414210][ T7050] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 158.414249][ T7050] soft_cursor+0x524/0xa10 [ 158.414297][ T7050] ? fb_get_color_depth+0x120/0x250 [ 158.414345][ T7050] bit_cursor+0xe58/0x16f0 [ 158.414393][ T7050] ? __pfx_bit_cursor+0x10/0x10 [ 158.414442][ T7050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.414477][ T7050] ? get_color+0x1da/0x450 [ 158.414510][ T7050] ? __pfx_bit_cursor+0x10/0x10 [ 158.414551][ T7050] fbcon_cursor+0x43c/0x5e0 [ 158.414586][ T7050] ? add_softcursor+0x180/0x290 [ 158.414631][ T7050] ? hide_cursor+0xa3/0x230 [ 158.414676][ T7050] set_cursor+0x1db/0x250 [ 158.414721][ T7050] vcs_write+0xba9/0xd60 [ 158.414763][ T7050] ? __bpf_trace_sched_exit_tp+0xa0/0xc0 [ 158.414821][ T7050] ? __pfx_vcs_write+0x10/0x10 [ 158.414862][ T7050] ? apparmor_file_permission+0x13f/0x1c0 [ 158.414904][ T7050] ? bpf_lsm_file_permission+0x9/0x10 [ 158.414936][ T7050] ? security_file_permission+0x76/0x210 [ 158.414982][ T7050] ? rw_verify_area+0xce/0x6d0 [ 158.415033][ T7050] vfs_write+0x2aa/0x1070 [ 158.415065][ T7050] ? __pfx_vcs_write+0x10/0x10 [ 158.415110][ T7050] ? __pfx_vfs_write+0x10/0x10 [ 158.415139][ T7050] ? find_held_lock+0x2b/0x80 [ 158.415171][ T7050] ? __fget_files+0x215/0x3d0 [ 158.415203][ T7050] ? __fget_files+0x215/0x3d0 [ 158.415238][ T7050] ? __fget_files+0x21f/0x3d0 [ 158.415276][ T7050] ksys_write+0x12a/0x250 [ 158.415314][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 158.415352][ T7050] do_syscall_64+0x106/0xf80 [ 158.415387][ T7050] ? clear_bhb_loop+0x40/0x90 [ 158.415425][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.415459][ T7050] RIP: 0033:0x7f127379c819 [ 158.415483][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.415514][ T7050] RSP: 002b:00007f127460f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.415544][ T7050] RAX: ffffffffffffffda RBX: 00007f1273a16090 RCX: 00007f127379c819 [ 158.415566][ T7050] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 158.415586][ T7050] RBP: 00007f1273832c91 R08: 0000000000000000 R09: 0000000000000000 [ 158.415605][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.415624][ T7050] R13: 00007f1273a16128 R14: 00007f1273a16090 R15: 00007fffb21ecc48 [ 158.415656][ T7050] [ 158.415667][ T7050] [ 158.415675][ T7050] The buggy address belongs to a vmalloc virtual mapping [ 158.415698][ T7050] Memory state around the buggy address: [ 158.415715][ T7050] ffffc900041f1a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.415746][ T7050] ffffc900041f1b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.415769][ T7050] >ffffc900041f1b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.415787][ T7050] ^ [ 158.415806][ T7050] ffffc900041f1c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.415828][ T7050] ffffc900041f1c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 158.415846][ T7050] ================================================================== [ 158.415900][ T7050] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.415925][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.3.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.415969][ T7050] Tainted: [L]=SOFTLOCKUP [ 158.415981][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.415999][ T7050] Call Trace: [ 158.416010][ T7050] [ 158.416021][ T7050] dump_stack_lvl+0x100/0x190 [ 158.416072][ T7050] vpanic+0x552/0x970 [ 158.416103][ T7050] ? __pfx_vpanic+0x10/0x10 [ 158.416189][ T7050] ? sys_imageblit+0x19fb/0x1d60 [ 158.416240][ T7050] panic+0xd1/0xe0 [ 158.416270][ T7050] ? __pfx_panic+0x10/0x10 [ 158.416320][ T7050] ? sys_imageblit+0x19fb/0x1d60 [ 158.416370][ T7050] ? preempt_schedule_common+0x42/0xc0 [ 158.416405][ T7050] ? check_panic_on_warn+0x1f/0x90 [ 158.416452][ T7050] check_panic_on_warn.cold+0x19/0x34 [ 158.416488][ T7050] end_report.part.0+0x3a/0x90 [ 158.416533][ T7050] kasan_report.cold+0xe/0x18 [ 158.416579][ T7050] ? sys_imageblit+0x19fb/0x1d60 [ 158.416635][ T7050] sys_imageblit+0x19fb/0x1d60 [ 158.416691][ T7050] ? __pfx_sys_imageblit+0x10/0x10 [ 158.416743][ T7050] ? drm_fb_helper_damage_area+0xb4/0xe0 [ 158.416795][ T7050] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 158.416835][ T7050] soft_cursor+0x524/0xa10 [ 158.416882][ T7050] ? fb_get_color_depth+0x120/0x250 [ 158.416922][ T7050] bit_cursor+0xe58/0x16f0 [ 158.416970][ T7050] ? __pfx_bit_cursor+0x10/0x10 [ 158.417019][ T7050] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.417052][ T7050] ? get_color+0x1da/0x450 [ 158.417086][ T7050] ? __pfx_bit_cursor+0x10/0x10 [ 158.417124][ T7050] fbcon_cursor+0x43c/0x5e0 [ 158.417159][ T7050] ? add_softcursor+0x180/0x290 [ 158.417202][ T7050] ? hide_cursor+0xa3/0x230 [ 158.417246][ T7050] set_cursor+0x1db/0x250 [ 158.417289][ T7050] vcs_write+0xba9/0xd60 [ 158.417340][ T7050] ? __bpf_trace_sched_exit_tp+0xa0/0xc0 [ 158.417395][ T7050] ? __pfx_vcs_write+0x10/0x10 [ 158.417436][ T7050] ? apparmor_file_permission+0x13f/0x1c0 [ 158.417477][ T7050] ? bpf_lsm_file_permission+0x9/0x10 [ 158.417510][ T7050] ? security_file_permission+0x76/0x210 [ 158.417556][ T7050] ? rw_verify_area+0xce/0x6d0 [ 158.417608][ T7050] vfs_write+0x2aa/0x1070 [ 158.417639][ T7050] ? __pfx_vcs_write+0x10/0x10 [ 158.417683][ T7050] ? __pfx_vfs_write+0x10/0x10 [ 158.417712][ T7050] ? find_held_lock+0x2b/0x80 [ 158.417744][ T7050] ? __fget_files+0x215/0x3d0 [ 158.417775][ T7050] ? __fget_files+0x215/0x3d0 [ 158.417811][ T7050] ? __fget_files+0x21f/0x3d0 [ 158.417848][ T7050] ksys_write+0x12a/0x250 [ 158.417879][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 158.417918][ T7050] do_syscall_64+0x106/0xf80 [ 158.417952][ T7050] ? clear_bhb_loop+0x40/0x90 [ 158.417990][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.418023][ T7050] RIP: 0033:0x7f127379c819 [ 158.418047][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.418078][ T7050] RSP: 002b:00007f127460f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.418108][ T7050] RAX: ffffffffffffffda RBX: 00007f1273a16090 RCX: 00007f127379c819 [ 158.418130][ T7050] RDX: 0000001000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 158.418151][ T7050] RBP: 00007f1273832c91 R08: 0000000000000000 R09: 0000000000000000 [ 158.418171][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.418191][ T7050] R13: 00007f1273a16128 R14: 00007f1273a16090 R15: 00007fffb21ecc48 [ 158.418224][ T7050] [ 158.418842][ T7050] Kernel Offset: disabled