last executing test programs: 10.403314128s ago: executing program 3 (id=191): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x2000818, r1, 0xfffffffffffffffc) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x60800, 0x0) ioctl$auto(r3, 0x901064ac, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) pread64$auto(r6, &(0x7f00000008c0)='\x00', 0x10001, 0x3) ioctl$auto(r5, 0x81085520, r5) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) ioctl$auto(0xffffffffffffffff, 0x5523, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x10000008, 0x0, 0x0, 0x5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0x501983, 0x0) mincore$auto(0x1000, 0x8001, 0x0) 7.89288955s ago: executing program 3 (id=199): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x40000b, 0xdf, 0x19, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xba8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x5, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x200003, 0xc, 0x400, 0x3, 0x1ffe000, 0xcad, 0x3, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x6}, 0x1, 0x0, 0x3, 0xa}, 0x8}, 0x5, 0xffb) 6.829992328s ago: executing program 3 (id=201): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005"], 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x6, 0x400004, 0x1, 0x19, 0xffffffffffffffff, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x60800, 0x0) ioctl$auto(r3, 0x901064ac, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r6, 0x4b68, 0xffffffffffffffff) pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10001, 0x3) ioctl$auto(r5, 0x81085520, r5) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2001, 0x9, 0x0, 0x16, r3, 0x80) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.485616946s ago: executing program 0 (id=205): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) fsopen$auto(&(0x7f0000000040)='\x00', 0x80000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x1049, 0x0, 0x4) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffff9, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x7, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0x1, 0x5, 0x8001, 0x4}) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(r2, &(0x7f0000000180)={0x0, 0x10000005}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x0, &(0x7f0000000200)=@link_update={r3, @new_map_fd=r4, 0x5, @old_map_fd=r2}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)=""/10, 0xa) r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r6, &(0x7f0000000040)="a5cac73806f9a7", 0x7) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0x0, 0x320) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub0/hw_params\x00', 0x140080, 0x0) pread64$auto(r7, 0x0, 0x566, 0x80000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 6.265324827s ago: executing program 2 (id=206): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x185040, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r0, 0x50009404, &(0x7f0000000080)={@inferred=r1, "4d3a31658c50519f67cf7f566f4a3f95c9a512302591c026f9e50e88c144ff77484f3786697338d41a4719a3b32ffbaf9ff991a24bfe717de638e92a76f201fd8f75dc4df4ada310242836b2b92cff26215d3b13342ae3ac8463ffd0dfad810ba581376b0fd58b8e5754ab989928a291e0048f399465384f8d3d0d13ba489b5a3f2533ff6d879e966c898e6a14cdb7368c84aaf0fb3687a5944ee2a5698833d56306b6d8e619e13e1488ccc9d7618873a8568aacfe76e390c36754ef3a1e06add8ea6dbd20f2b00f4d2a6b832fe328397a49312a0a27987f6481c5232ec1f8c96569373196780dd887e1597867f23e2c99226b7319dec6498639b6cfe4c87727602d27cc5829495c88f1aa770ccac2a034af8f3f2a942a6150dc10cca22bd0581d44b2f06b0259a105d3515a074b93a24a33e6ebfaaf9c8af8bda222f3d3607c247161e0784407c8f68296d6cb4b7b391b2f97ef012fe92b9387102798cacba53d50232b4f592f23ff700b8698224ec5b15e19e7d5dd32eff437b03ca7d05aac4eebafcd44999545bbc359f60c2784452dd92082a52239ce353f827ed2ac16cfc4314deb2c8a80e2ebcbbd7cbc3d9a952b70ef6d0b1e3d512d427fe9d6893dd228fbf9dd8d85e43ca271fc9abc71aaa0d94874ad4a438f5484b139565061c758d73b94bbb14c6ff79f534f7d1c8f7d2ed9be4158503fa4c6cf4413965c03f38e164c1c97d1ee90707bb03ba98193543d8098739558b26fda02f434e2579e6a542a1ebd9aeed475d6d59c25aa9349f2e4ee23e55333e7ea8f3bf42a5f3c1b314c147d75d16ea88da36e017cbfad89c8c7c27f46139cbd24a0f727616503eaadc8744c95234053ce51fa13dd7f72d75f954a508049bc0f7f29080df8cccb98999615e8e5835b0eb24c360edb636ba380f9a6e08dfbccb6167c7da4eecfe90e2413ba0927142f48325ef66bf13baad2d3372c0045821510360446eb9c9d293e48401662dbfe4397ac95a5d8db1912791a1ed6b7348d42c5d47279af85b7e258cceac50d47e235e8dafcde121b4e24079854dd822c90f139f1034582f8b8064f64e0348f972871317db84f9c0eeaf7e5779ce4a0f81a0eb47f54d8cfa076c887412c28ee55948808c1bd056d7764c580d7e59e5b48c7c18754da589abf546c8c12574d26547ccc41bf7270946d92517a48cb6f7ff08faf35f213dc25d1618725b028f5e94b9e3ce619ac91a29e6e2fc68ae178048cc0b86ab41f2d0adf80ab432f7cd9fd41ec4c16b085fc5a68ff185e3be4cafbd4df33f798ab09d930ce36cc1fa56b07c00640d47e0dfe147bba1b6448404252f929431974c6e50693890576771088502c94db44333674517235bf7703f99f304ab1dc7586a1cc551482e96c25690985857927d80b9035d2a691de669df9c4e690ec046fb60f3b6090eefb3ad65d852a6d581a721cddcf02feb5f6a0e4905024fca346af83aafbcf86e57435b79f97de7d869ff3f122c6d5695ce873271b749d9c9fd7175d466f3ec4c8c58dd9ae213216fa13317ef42da818dce3e9bbeb168f7ea4bb70078fb6842bca9645085e188b16c17d40a66dc418cf52f5dc6331c0697fa351acc11ca0c684f50c9a1ab400369e7a942d418abb53b573c99e271e9fbf5174d336a5ec7927b9a51b4aab4f613fcc4388c09b07ac8699de58ff94e124b11a5cc36475763460797ea4c92dbc8dd876397c126a6edac3860660650bc261099ae8a45b6e3c436d1e3dcd590e19e285b3a5bf8ec1bdb0a8b980266a66cb49978151303e54883524a28f9f037a5802ebfbc03537cdad7a2c9c3bc1ce72035ecbad8269517762c86ba028f33ee1fbf22c223f3af3452982d6e8985e8f538d57cc6cc04b74656ad14b8d4cb4b45ded29bc7fd288b2143b598a8ce9cf5ee1b6304dc208330534c47625611e2b48caf07aaeb7f0d53929572cc56e22af0de1edfe10a52576fd957f3d648e97da36088c1f16fd07ac1369c689182a4a76e480b81048fd6002e9079a257aa72200dbf57544f33c1db593a81681e7b90b1f63161ace52ce7c787ad4772c7de8200308278acb70505742dd110619d2cfa8442faaa6c019992ea430319879ba43324990e2e5c0a2f5e6ff55e06a96ac6c379b093dd814b764e69d5839cb96e177ef4d450fd1d2099ec226af4b539cb0debef4e743bdaafb143ed9a9feb2b40db5a2b139dffa548a6088c79d87ecb43aa15fa0f738802b3cdeffb4c095127f9759d20483f95d13dd45939856059a3d78dd6cb352ad21d4b9a984413fc14f9ce9798823a6bb67e19ea6dd7b50e303c775da57be10d81b147751fda058e32427b2aae35867ac78cb7c964518671f5b54a6c1760b02527d29bbb6d51f0a59d9044ee1f0d74f93a1eb2743119180dd35423d578b0bbbc70c04c398f88ebd225f9aacb14f5028c22ea5e5144cbc1ee7988ffcd0ddfd6739e8f34a14a10303f9b2cd9ec8dc435fe4aadc5f942d5ce6baeceb2f2d0cd070af82a41116c81ca5425a915051888146589f18e1faeda73860e6522fbfcfefe1273483ed6661269b257fb4162f828722a4d095203591514318d8763a141607bcfc4004ee7304e335dacb59d2776eb9ae101b05dfe29e8e767e45ba38187f3c6b4e42f4952e76d1eddf3abee0087c6f2daaaf0dcf79debc0eec3c7b38243a5696aa19328e21102ff2b2ab6f679dcd96a00ccb4737b68bf1e58166fa104b0873abf40344383ce2ba7dd2f1a7e2f3752a68f07c3aa88d3e873345b2639137b14fb905c4eeae2f7717c645535aa35b83d3d5ab41babcb46d31b8154e2409cf605c3116c13f4b0a8a49529d25fc1e93ab1406f358fff152c0b56dc983cbf8e83ec0c318f4f3d9bf96176480df6793512ee8c6e6f376e02fcc5bc4bcc4414b5b71ec986027f1e65e72677baf8c643a50c3d7166bf2a4d444a83f38a23e5283bf74b132c864ea2e4edac182db9192ba6d5da7e9a1bce2f9d4725ac4a07177c60a1378f68725d26ac57ff6c8411426312865c44c3c214c925754251d417cea9d9efc64b3ea54ab220e5388bac1a04a31dad6743591fea39216e8adb7de66e610c73dc4cf21370826366b4c86f701fe53e24f8c6c0808e18acbd539bf171069844ea7c7d88ac436e42dce7d4982e19cdd195b570a20e662958baac7fac90cc834fb1a93acf0c0b90bba54c614dc3c01cfed27c809aae23dd69122f269adf2ccbe949ead66831c14b5c771ca0e46ced2ace9c08d5465031b36eb5017f499c31dbe1f5deaafd2eab70ed8be897e235771f39aac9aaec6060c06331b914f133f8834174e2a11ff5f3db87548ac39eb6fdc1b5f02d396dca4c37f5cabc07c6ec7c1c0c63dce566c46cdf9c2f0189d1f32c1c94e8c5ad0969f06cc576db756ae9344e6001746ec81c00fb2f47ef04b9df5921a1f261e08848074e1b35f96a09338db5e48e292707695ed1697fa1e888237395e7f80ecd4ea2616eac4c4e1caccb13916d31fbbdbaffd9d0f009dc219f9d6f07101bed472879894afc3e9dd6a85fe1ac11870f10224527583a5bb9c79a53973660191baa07838f76f97ab3a487bd74c4cd860d3bc0def1a7ab94b9fc55a54d4bf33bf079ee3bec5a1f34fa510c1aa600a5d3879931854b14bad02165c48f3667841f33396f18ca66b7c0a769ecd48604054f7ddb06f065216917c6d2e74105d1ce02b541e6afe5190792bb676bdb668c55920c6eb8ad07e8316730f405cd55b13efaf03b44ae227fcc51eb5d461617d1d3a3a24bbf78886653fbfe867e312ce95aad82eb2df2594535b33b6928aef79518ed158e76d6fafc3bb75e1723226f248bbf0cc342c598fc189f1bfbff9fafd4371f77773f9bc91dc6abb8c23dff3e3617b976cf7fcfc90f56426ba0495e4738f6e6572bfc633baa2034ba39e0bd030f4978ca68201c8e48c6c53727be08c4a3aa3c660dbd7805f2ddae4323149792b2f9c64cddbc5ee79e64ff20bb7d5c4d92366fb97926319a2f270719827f15e887965b5439a7a7be93df675fce06811276292d59f2356aa9860c0421e52dbce174e681c018893acdce33883e61a2140cef2bb8e92d83a7eb41802443afd458f635186e7752befa6076ad32d68a90379947a70d95fd69f02f0ffba4f9cd92bd35417c9d4e8ebc1048eb980d00efca66c47e5e3d5e92d121dde0a9c086da101670ad9546167348b31ee0c6f7bf2503af4e6b9868a47387bfa5251b2a18fdff1bbc44ccfccc80d120089e94921123bb724d9e378c284edb80baf8473547158f928ff93b58d6ef63f3b146e0199eb37d7e62e79d72afd1c17eedf7b878bdbf5b21aeac9bb8f9a4a02ee6a24f2bcaffee3828ffe4e573f7dd962fe7a83120b058dc536dae23b6e1f2af7c965dc4ddc1e260c1fa0ea56b768ecefff8ef893eea21adc7729f34d75185c4d1a300cfa8b992a271aefaf3bd90e77ae26952fd849416ff50002b1c32c75960020a868a754fca8a599c08aff7a8d7fa0f1b56cea8ab09c6af2d56ea4705162466d6c0930ee6a218c13a80fa78558f1141a1f36edff830d0489271138f3542c63ad5835527f2a58692c64f91a4df2040ab404807fbb4e269507d668893e921aa2f618706875f1406ed9fe87f387c0969866c9a83288f64d85ba83bca67563134c5f0bb82ae7fb4772798d640d74dc65efffd0e3e30c1d5dc92fea6aa35f2975a7b0686d464ad5f0b05d5cc13202940794cbd4df7edf8ef1c6e30b96bb4f3c79695763a13e16a1ea0155a54054fa3452e599ccb07fece7ee5700b72d90d9b930d17b6ce26b0ecf2e64171aef54294d98bb7bf5143e2bd4135556b7547c179efdf19476883b8f1e06481966fe49558f8f38f3901900cf465a301fff76ce99f40968dee82a69cbf3c1c4cc85aa0ec7c6fcfba72eaf2883c93839da7cc4102f1904cdf753a31c0820c4dbf645b5a4102ed2e17caf9c6f50c4babbbbb24c6f463c980c748832e828bfc8ba1078afc85fdd940ba2b1670c41a1c49486a2d370de49c42451e699b72e2f63956b9e58a6d48780f256fc1326cce862524bceefcc42000d54fb6e4bd53346114482b574b1dcda23c8f8630afd263b91b4fc2d2889401595917d14f6f2ba96b3caaa5cce1aa9074828edcbb8129610c9e9940a32ae4a3a7067549b669cb7c3cd1cd0d8e12aadf1a7104c02f7be60c1e9192ed2aa8a9f2b3c03df6db1c33c0f57a253a50e94faf001fb6b188894401de43c22fba16c688087589ecfdef51ff5527ad109562d3686e408f7d77b180ce6cf38eec0d220262414162bb3283ac2adf153298ab79d1fa6c72b63272bec5d7716c4dea808e21aa62ef389e456f16bf869547c46b2c6fcc5dd8ac1e173bc98c429ba8f7e1c2019c2230178ace25677632dd83d954a59c8d05dde4487d3983b3b33edbd7cd64cfa01eb2e4a8c4f925024528fb645e83cbe470ac2587bee072459dc191aeb3fb243f77d1ae069cc7fee66a96ab38321b049d6adfb5a26477fe9071c6e4e6602437ebc53a833a6f59f0ede824376f917a68bb0297037377f72ba148dfd073a7c415423985878ba49419350714775ef04ad1fa6c007d7bfec91522ed53baee9615dd17359585f0c579f352a1f39e1624f9ca1bb6621244e4fcadd0d4c5331fe9a2fe767575f74da4289e83b4be653de14fb6dbee0900c40f1540fd502480a7d07ce3b1c975ba2ec62bb0b63bf2f2bddf15d72a9df2183a3e52538c6298953f2144cbb062ebc72eb4a3fb05989f63f3a8ce4e715beca2f27d5661faf9d08"}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) arch_prctl$auto(0x4, 0x3) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r2, &(0x7f0000000180)="c4484027d828120f57cd8cc438c2c390b1d5a62b57628e7351b768d6d679b450b53bd7c6fe7d4570dd878bc4bae003b2890fb024fa61c185091a73ec191acb51f29b119d2cdae76e7b3e9c07b57ddc6273a7c4d76ef780291aa3a0b2a20f7fc3b9566c962c5b059cf5ea9f7275582241979237a8509b68e26da85316283195e116c782d2545fa237e55f372445dc0a06cdde2007ede89233ad41191e32474ed0aa42ba6e834946b1964147f6cab2fed68ed88f987a7f3ded11cc41fa9952474419", 0x10, &(0x7f0000000280)="90701379519bd363c698f989c2034762c2a07a532a2bf33b71531967fdf9a333db0496aa2a38676043c682742d5a1d68a220122eb630e671f37b995641f7a6b807b8b171a981c705847893c8c35346a46f5d317069d7be12832c8442dbeb9d0a463456728de74f6f935a785ca54aa61159f0b55da2959e43e087b9915193c11f346b5ce3b8508f27ef77f7d5666ae3d222d0b424ede927a80918933a239166bf8620bbc790f57cd182d29c980410aebb10c799ebc52d42c7fbff719bed5ce7581a2e458203b4cfab704425e73a3935c55ef0533615f7d3be4809606e2caf8ec0417985edfe42aac465105b7acef71eb80419c5567b4feb", 0x3, 0x0, &(0x7f0000000400)=0xff}, {[0x400, 0x2, 0x100, 0x7ff]}, 0x5, 0x0, &(0x7f0000000440)="ce965c9a701746305497814fe209e1983a80cba79c9e4f3df2ebf5603221f6775a44334911d3f650e0489d1e0d56b577d1cd136d2f98889e9796b701e19847522f73e38804b1b89917"}) unshare$auto(0x40000080) unshare$auto(0xffffffffffffffbd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67be, 0x7ff) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x67c1, 0x7ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getpriority$auto_PRIO_USER(0x2, 0x0) 5.075697756s ago: executing program 3 (id=207): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000580)=0x6) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000100), r0) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000340), r0) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24) lstat$auto(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000001fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401040}, 0xc, &(0x7f0000001f80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r1, @ANYBLOB="100028bd7000fedbdf25030000008d01018008001d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2794}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x20048884) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty55\x00', 0x210000, 0x0) ioctl$auto_TCFLSH2(r4, 0x540b, &(0x7f0000000440)="ee26f8f0807f84a6f47aae5262509d3363804b8d3a768220c70d3168fe98a4a927badceaf8f3f8da4461b15e7000e3fcb995894c0bac84749649f29e4b8e208edad08368dd153b09da9333a49c527303ac1630daf333346e9bdb6f8861d74fc32ab16c4bab9e12f05227d5ee3d6903c4fa33aea3bf317a35b1883ff3bff8c8f782813c9ec2a3ffc4a4cd135a4ad7932d9fe178a0b1ef023f31af683d105edc47ce878cd0ec4d22772afcdd10ac173d7f4fdd") io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8001, 0x3, 0x3, 0x5, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xe, 0x5, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x5, 0x3, 0xfffffffffffffffc, 0x7, 0x80000000, 0x8000, 0xffffdfffffffff81, 0x4]}, 0x0) syz_clone(0x52000080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)) fcntl$auto_F_CREATED_QUERY(r4, 0x404, 0x4000000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4.470008636s ago: executing program 1 (id=208): mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x18, r0, 0x400) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000500)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(r2, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r0, &(0x7f0000000200)='/Ka\x1f\xf0\xbb\x87ev\x98\xb6\x03~\xd4\xbfr\xa4?$\x01v\xbbu\xe4io\x00\t\x8e!\xf2\x95\xe7\xf9\x00\x00\x00\x00\x00\x00\x00\x00zF\xe1h\xcf\xf0W\xa7 \xcc\xb1\x15 \xc6\xe5kW', 0x80000000) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000002c0)="e7411fe072ec68f438b5fb775cfd4678f111aa9b9c429001f9f6c99237258c607ad20d20d12d66cff64ce1e6f69d800c6acff0c8217272fd24bbdc3e9d0d08eee4260c94cb62d9") read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x3, 0xdf, 0xdb70, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x4008004) write$auto(0xffffffffffffffff, 0x0, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 4.112134128s ago: executing program 0 (id=209): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x0, 0x0, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x47, 0x0) r1 = fsopen$auto(0x0, 0x1) (async) get_mempolicy$auto(0x0, 0x0, 0xdf95, 0x800, 0x80000000) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount$auto(0x4, 0x0, 0x11) close_range$auto(0x2, r0, 0x0) (async, rerun: 32) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000010c0)={0xfff, [{0x7ee6, 0x28000}, {0x40, 0x400}, {0x10, 0xba}, {0x3ff, 0x7}, {0x5, 0xf1}, {0x2, 0x6}, {0x7, 0xb}, {0x8, 0x4f401075}, {0x8, 0xfffffffffffff801}, {0x5, 0xfffffffffffff551}, {0x8001, 0x6f}, {0x3, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0x0, 0x8}, {0x6}, {0x1}, {0x4, 0x4}, {0x2, 0x5}, {0xffffffffffffaee3, 0x6b8}, {0x3, 0x5}, {0xff, 0x1ff}, {0x100000000, 0x8a}, {0x5, 0x7}, {0x0, 0x7ff}, {0xffffffffffffffff, 0x100000000}, {0x6, 0x39}, {0xc, 0x8}, {0x2, 0x10001}, {0x0, 0x2}, {0x9, 0x7fff}, {0xff, 0x80000001}, {0x7, 0xc6d9}, {0xffffffffffffffff, 0x2}, {0x3, 0x80}, {0x7, 0x9}, {0xf6, 0xa}, {0x81, 0x4}, {0x0, 0x2}, {0x7, 0x400}, {0x5800000000000000, 0x401}, {0x4, 0x7ff}, {0x4b, 0x9}, {0x8, 0x2}, {0x1}, {0x100, 0x6}, {0x100000001, 0x7ff}, {0x80, 0x8}, {0xffff, 0x6}, {0x72, 0x800}, {0x9, 0xfffffffffffffffc}, {0x67dc, 0x3}, {0x8, 0x5}, {0x8, 0x4}, {0x4, 0x100000001}, {0x8, 0x9}, {0xd0, 0x1}, {0x0, 0x2}, {0x3, 0x7}, {0x3}, {0x7, 0x5}, {0x7, 0x3}, {0x82ac, 0x2c9a09bd}, {0x3}, {0x8000000000000000, 0xff}, {0x5, 0x100}, {0x436, 0x4b99}, {0xc, 0x5}, {0x7f, 0x1}, {0x8, 0x9}, {0x6bc7, 0xffffffffffffffff}, {0xfc29, 0x7fffffffffffffff}, {0x5, 0x7}, {0xd, 0xffffffffffffffcc}, {0x6, 0xa}, {0x9, 0x6}, {0x7ff, 0xffffffffffffffff}, {0x1, 0x3ff}, {0xc4, 0x89}, {0x0, 0x3}, {0x9, 0xee96}, {0x1, 0x6}, {0x7fff}, {0x0, 0x10}, {0x2, 0x2}, {0x7fffffff, 0xfffffffffffffffd}, {0xc338, 0x6}, {0xa97d}, {0x4, 0xfffffffffffffffc}, {0xa572, 0x235}, {0x1, 0xfe8}, {0x7, 0x8}, {0x1000, 0x72f}, {0x8, 0xa}, {0x7dd6e8f9, 0x7fff}, {0xfffffffffffffff1, 0x6}, {0x4, 0x7}, {0x9, 0x3}, {0x43, 0xc3}, {0x8, 0x5}, {0x15d9, 0x800}, {0x5, 0x78}, {0x3, 0x5}, {0xfffffffffffffffc, 0x83}, {0x1, 0x1ff}, {0xab3, 0x5}, {0x0, 0x40}, {0x2, 0x7}, {0x1, 0x9c}, {0x3, 0x2}, {0x9, 0x401}, {0x1, 0x5}, {0x464, 0xff}, {0x3fb5bb12, 0x8}, {0x4, 0x6}, {0x6, 0xe}, {0x3, 0x6}, {0x9, 0x2}, {0x2, 0x3}, {0x3, 0x8}, {0xfffffffffffffffa, 0x81}, {0x7, 0x7f}, {0x4, 0x8}, {0xa4, 0x4}, {0x80, 0x8000000000000000}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x9}, {0xfffffffffffffffe, 0x3}, {0x8, 0xffff}, {0x9, 0x101}, {0x4}, {0x2, 0x5}, {0x80000001, 0x3}, {0x2a6, 0xfffffffffffffffb}, {0x1, 0x7}, {0x7fffffffffffffff, 0x790e}, {0x1}, {0x8, 0x6}, {0x8, 0xffffffff80000001}, {0x9, 0x300000000000}, {0x3, 0x6}, {0x8, 0x1000}, {0x3, 0xffffffffffffff94}, {0x2, 0x4}, {0x9, 0x80000001}, {0xc, 0xffffffffffffec87}, {0xf8fd, 0x40}, {0x98, 0x3}, {0x2bebd921, 0x40}, {0xe, 0x3}, {0x5, 0x3}, {0x4}, {0x2, 0x1}, {0x100, 0x2}, {0x7f, 0x8000}, {0x9, 0x31f}, {0x6, 0x3}, {0x5, 0x100000001}, {0x3, 0x4}, {0x122a, 0x8}, {0x5, 0x7}, {0x7}, {0x1, 0x8}, {0x4a, 0x9}, {0xfffffffffffffe01}, {0x8, 0x6}, {0x4, 0x8000000000000001}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x6}, {0x1b, 0x7}, {0x8f68}, {0x1, 0x7}, {0x5, 0xb}, {0x6, 0x38000000000000}, {0x1}, {0x46, 0x5e4}, {0xa, 0xc}, {0x9, 0xb}, {0x3ff, 0x9}, {0x0, 0x80000000}, {0x6, 0xffffffff}, {0xc, 0x3}, {0x7, 0x9c3}, {0x8, 0x401}, {0xffffffff, 0x3}, {0x0, 0x8}, {0x96, 0x4}, {0x401}, {0x7}, {0x7, 0x7}, {0xe0f, 0x1}, {0x65, 0x2f3}, {0xf, 0x1}, {0x0, 0x5}, {0x9, 0xfffffffffffffff7}, {0x0, 0x6}, {0xd499, 0xd}, {0x2feb4a3, 0x7}, {0x0, 0x8001}, {0x0, 0x9}, {0x10001, 0x2}, {0x6, 0x9}, {0x7fff, 0xd}, {0x7, 0xa}, {0x6, 0x8000000000000000}, {0x5, 0x4}, {0x3294, 0xfff}, {0x7fff, 0x4}, {0xffffffffffff6099, 0x1}, {0x200, 0x1}, {0x7f, 0x5}, {0xa9, 0xffffffffffffff66}, {0xffffffffffff0000, 0x8}, {0x3, 0x319b}, {0xffffffffffffff4a, 0x6}, {0x3, 0x2e}, {0x80000000, 0x7}, {0x10001, 0x7f}, {0x0, 0x80000001}, {0xbd7, 0x2}, {0x0, 0x1}, {0xfffffffffffffffd, 0x181}, {0x8, 0x40}, {0x7, 0x6}, {0x7, 0x3}, {0x40, 0x200}, {0x5, 0x9}, {0xc9d, 0x5}, {0x80000000, 0x4be}, {0xcb, 0x1}, {0x7fff, 0xd10f}, {0x3, 0x7}, {0x5, 0x3}, {0x2, 0x9}, {0x1, 0x8000000000000000}, {0xfffffffffffffff7, 0x1}, {0xf, 0x2}, {0xf, 0xc}, {0x4ce43834, 0x9165}, {0x7ff, 0x7}, {0x1, 0x8001}, {0x0, 0x5}, {0x2, 0x5}, {0x9, 0x100000001}, {0x3, 0x9}, {0x6, 0x7}, {0x82b, 0x3}, {0x0, 0x3}, {0x40, 0x48b9}, {0x1, 0x2e4}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x7f}], 0x1, "d4f9084b845245"}) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) getrlimit$auto(0x2, &(0x7f00000002c0)={0x4, 0x3}) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) socket(0xb, 0x0, 0x1) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_shared\x00', 0x20b42, 0x0) sendfile$auto(r3, r3, 0x0, 0x4f64a1d2) (async) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/version\x00', 0x483901, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000000040)=""/4080, 0x1036) (async) sysfs$auto(0x200, 0x65b8, 0x7) (async) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x40002, 0x0) (async) sendto$auto(0x3, 0x0, 0xffee, 0xe, &(0x7f0000000080)=@in={0x2, 0x4e22, @multicast2}, 0x19) 3.926356925s ago: executing program 2 (id=210): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0x7, 0x8000) r1 = getsockopt$auto(r0, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) fstatfs$auto(r1, &(0x7f0000000140)={0x4000000000001, 0x2, 0xffffffff, 0x6d, 0x4, 0xc7, 0x7, {[0x1ffff, 0x5]}, 0x3, 0x0, 0x6, [0x4, 0xffffffff, 0x3ff, 0x5]}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_map_fd=r0, 0x4, @old_map_fd=r3}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) write$auto(r1, 0x0, 0x47ffffdf2) r4 = semctl$auto(0x3, 0x7, 0x0, 0x2) sched_setaffinity$auto(r4, 0x2, &(0x7f0000000040)=0x1) 3.444174636s ago: executing program 1 (id=211): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x1d, 0x2, 0x7) (async, rerun: 32) setsockopt$auto(0x3, 0x6b, 0x0, 0xffffffffffffffff, 0x200) (async, rerun: 32) r0 = socket(0xa, 0x5, 0x84) (async, rerun: 32) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) (async, rerun: 32) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (rerun: 32) preadv2$auto(r1, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) (async) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x10, 0x20009, 0x7, 0xeb1, 0x401, 0x8020) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3a, 0x9, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x3, 0x20b2, 0xa, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x10200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0xffffffffffffffef, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x10, 0x200, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x100000]}, 0x202, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xb, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x9) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082d36b0e5e2530185d42c94b6"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf2507000000060036000000000005008a001c000000b5f025521ffdfa887dd1311a42e9057dbd19523f91047c043ee688857dc9c110c0"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x3, 0x6) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003ec, 0x14) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x42000, 0x0) ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0xffffffffffffff95}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) 3.364010811s ago: executing program 3 (id=212): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000000140)=0x1, 0x0, 0x2) r0 = epoll_create$auto(0x1) r1 = socket(0xa, 0xa, 0x4) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x40000, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x210002, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) statmount$auto(0x0, &(0x7f0000000800)={0x0, 0x1, 0x9, 0x7352, 0x10000, 0x65f, 0x2, 0x7, 0xf0, 0x1, 0xffffff00, 0x3, 0x5, 0x101, 0xc7c, 0x2cd5000000000000, 0x4, 0x3, 0x84, 0x4, 0x0, 0x7, 0x22000, 0x203, 0x0, 0xf, 0x2, 0x8, 0x1, 0x0, 0xfffffff9, [0xb, 0x9, 0x801, 0xfffffffffffffffe, 0x3, 0x7, 0x0, 0x1c00000000, 0xfffffffffffffffe, 0x4, 0x0, 0x7ffffffffffff, 0x800, 0x100000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0x7fffffffffffffff, 0x920, 0x0, 0x108001, 0x0, 0x2, 0x0, 0x200000000, 0x1000000000000, 0x567, 0x5fa5, 0x0, 0x80000001, 0x0, 0xffffffffffffff92, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x800000000000000, 0x8], "d199c5c6a715bafdfdaf85bcea4107762a83d763e8a70d9dca3151a870dd4926422ba039054b79e1eaf8e610d287fc2c463937d354775d0a9f45e15927b988757359c40c42cacb8549c2fe19faa153e0d0000000001c553817"}, 0xa, 0xf) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) mmap$auto(0x7, 0x7, 0x80db, 0x9b72, r4, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x7, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) fdatasync$auto(r3) madvise$auto(0x0, 0x400053, 0x9) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) unshare$auto(0x40000080) 3.287065666s ago: executing program 2 (id=213): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000240), r0) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x9c, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast1}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast2}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x43}}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @loopback}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @multicast1}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setresuid$auto(r1, r2, r1) stat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x100000000, 0x7ff, 0xffffffff, 0x1, 0xee00, 0xee00, 0x0, 0x5, 0xcd90, 0x8000000000000000, 0x2, 0xffffffffffffff80, 0x2, 0xd, 0x7, 0x8, 0x65}) setreuid$auto(r2, r7) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) lsm_list_modules$auto(&(0x7f0000000040)=0xd, &(0x7f00000000c0)=0x2, 0x2) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 3.189388914s ago: executing program 1 (id=214): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) r1 = io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x181742, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/README\x00', 0x88081, 0x0) write$auto(0x3, 0x0, 0xb6bd) ioctl$auto(0xc8, 0x401054d5, 0xffffffffffffffff) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10003, 0x7, 0x3, 0x7ffff7fd, r2, [], {0x9, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x1, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0x9}}) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) bpf$auto(0x0, 0x0, 0x6f4) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/9p/caches\x00', 0x103280, 0x0) read$auto(0x3, 0x0, 0xfffffdef) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', 0x0, 0x3, 0x0) mmap$auto(0x7, 0x8000000000000000, 0xa, 0x80000010, r5, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xfffffc00, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784a16678f1c5f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6ca1294d63a4f1b4285d54c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051bd98e56621a94ff3794e5311121c760cb9611c78e6947a99807bcc1"}) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.036895433s ago: executing program 0 (id=215): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ALGO_NAME={0x7, 0x2, '&[&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x400003, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1000000000252) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6d, 0xcd63, 0xfffffffffffffffe, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) madvise$auto(0x8, 0x6, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r4 = memfd_create$auto(0x0, 0x4) statx$auto(r4, 0x0, 0x1000, 0xbdfc, 0x0) r5 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_FIONBIO(r0, 0x5421, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x5293, r6) 2.351255024s ago: executing program 2 (id=216): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x3000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x1d, 0x2, 0x6557f484) socket(0x2, 0x1, 0x0) mmap$auto(0x4, 0x6, 0xffff, 0x10, 0xffffffffffffffff, 0x10000400) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) write$auto(r1, &(0x7f0000000480)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_r\xac\x98\xa2k\x9bu=>\xce\x8d\xa2\fZ\xfa\x0f\x87R\xf7\x05OA\xfak\xba0\xab\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xda\xb7\xe5\x1fb~8\xf2q\x0e\x98A[\xbb\xa9\xdc[8\xfc\xc6\x9f\xa3\xb5\xdf\x1a', 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0163d4ec82b73f3658deb2f0370b27bd7000fac3d5347e5d70dd57b12f523da99889c88104ff24745b0dbe0e41867f52a32ec302250c8a8329361097f4e8215a99c9313868733e4c201bc63b4704e85621ebc557c18157770052d2d7c6a8857ae62edba35f", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r5 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, 0x0, 0x181000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) read$auto(r5, 0x0, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0x5, [0x53, 0xf, 0x659], [{0x7, 0xffffff01, 0x1, 0x1}, {0xab6, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x6}, {0x4, 0x10, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x1, 0x1}, {0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0x5, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x401, 0x1, 0x0, 0x1, 0x1}], 0x5, 0x9, 0x10, 0x9b1, 0x0, 0x1, 0x9, "3d60f1799d5517614cb5db232a171fe794feb32c6fa42fb100e50cfc95618db7f4466f2e7d6b4e383e01de0564711212835f5ea4b55685c9784003f654a77a10"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x440c0, 0x0) unshare$auto(0x40000080) 1.962572183s ago: executing program 0 (id=217): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$auto_VHOST_SET_VRING_BASE2(r0, 0x4008af12, &(0x7f0000000040)={0xa, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040440}, 0x800) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfffffffe, 0x802, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20f01, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x100000000008, 0x8000) 1.383517771s ago: executing program 1 (id=218): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x4, 0x0, 0x0, 0x1, 0xb) ioctl$auto(r0, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x3a8b800, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) pselect6$auto(0x2, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa) ioctl$auto(r1, 0x4b65, r1) 1.227010911s ago: executing program 2 (id=219): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401016, 0x4015, 0x0) write$auto_tracing_free_buffer_fops_trace(r1, &(0x7f0000000000)="42f0d86f4ee457c13496af64d85e949877d01efddf228977ffa3fdc944d2411fb67a2d3a3909686bb3bf0ef8a74058b96bb4f45afa426f883248c5640b228d224c126811542a8f7c3d50da556ec70f6f8eb91ac0f8e768fe9c16ac90111fb0fe0d2abe3c64f5e9cf381bfdfb0782f7d161858cb166ed0303f86a2f9b0a91faf0fce429ee257a48e04937b9e88c3d92632da478ff6abacaf4bb0c279b7f7898ad0e60187dce7321424947f9babe10080405d273711ca8204d4e0eb62c47008bfa4f15bb1c56e7eb526f03df95e3a57a85a6ce276fccc9bb422861c592eba6e17207cf6c2c36", 0xe5) 1.093325662s ago: executing program 3 (id=220): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2000d, 0x5b, 0xeb1, 0x404, 0x8000) mremap$auto(0x8000000000000001, 0x8, 0x0, 0x153, 0x40) unshare$auto(0x40000080) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r1, 0x0, 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82801, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, 0x0) r3 = ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000340)) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = prctl$auto(0xb, 0x17000000, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) futimesat$auto(r4, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x5, 0xffff}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a00000600070000800000", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) socket(0x2, 0x3, 0x100) r5 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff80}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000000) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(r3, 0x40044102, &(0x7f0000000040)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) 1.036624566s ago: executing program 2 (id=221): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x86b8, 0xffffffffffffffff, 0x40000008000) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x3ff, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1, 0x2800], {0x6, 0x41e, 0xe, 0x2de, 0x504, 0x3, 0x101, 0x9, 0x1}, {0xfff80002, 0x2, 0x53, 0x5, 0x10001, 0x400, 0x76c5, 0x8, 0x8000000000000000}}) (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f00000001c0)={0x0, 0x100fff}, 0x3, &(0x7f0000000180)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x56b) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x11, 0xa, 0xf) socket(0xa, 0x5, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'nr0\x00'}) (async) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x43, 0x4, 0x0, 0x407fffffff, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r5, 0x65, 0x7, 0x0, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, r1) 459.106646ms ago: executing program 1 (id=222): mmap$auto(0x0, 0x83, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) socket(0xa, 0x801, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x80a00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rt6_stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket(0x2, 0x801, 0x106) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2, 0x3, 0xa) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0102, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) setfsuid$auto(0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x5, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket(0x2, 0x80000, 0xfffffffe) socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x2d, 0x0) write$auto(0x3, 0x0, 0x81) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r1, 0x40204706, r1) 403.057075ms ago: executing program 0 (id=223): r0 = socket(0x22, 0x3, 0x0) r1 = getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) mmap$auto(0x800, 0x4, 0x3, 0x19, r0, 0x739) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r3, 0x9, 0x0) setsockopt$auto_SO_MARK(r1, 0xea00000, 0x24, &(0x7f0000000140)='\x00', 0xffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x6, 0x14, 0x0, &(0x7f0000000080)=0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty46\x00', 0x88a42, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x222c0, 0x0) ioctl$auto(0x3, 0x4b48, r5) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) lseek$auto(r6, 0x3, 0xc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 54.261383ms ago: executing program 1 (id=224): unshare$auto(0x40000080) mmap$auto(0x43f022ee8, 0x9, 0x80000001, 0xeb1, 0xfffffffffffffffa, 0x7) mmap$auto(0x0, 0xe42b, 0x4c0, 0x4100eb7, 0x401, 0x8) write$auto(0x3, 0x0, 0xffd8) madvise$auto(0x6, 0x1, 0x19) mmap$auto(0x0, 0x101, 0xdf, 0x9b72, 0x2, 0x8002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/active_slave\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/41, 0x29) mmap$auto(0xd37, 0x5, 0xffffffffffffffff, 0x10, r0, 0x1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x2, 0x23, 0x0) mknod$auto(0x0, 0xf7fd, 0x206) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) preadv$auto(r1, &(0x7f0000000180)={&(0x7f0000000140), 0x5}, 0x2, 0x3, 0xf7) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x2, 0x0) write$auto(r2, 0x0, 0x4) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) 0s ago: executing program 0 (id=225): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(r1, 0x0, 0x40) setsockopt$auto_SO_ERROR(r0, 0x7ff, 0x4, 0x0, 0x7f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x9, 0x0) mmap$auto(0xff, 0x20009, 0x7ffb, 0x10, r2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) r3 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10000, &(0x7f00000010c0)={{0x4, 0x8}, {0xfffffffffffffffe, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/conf/wlan0/igmpv2_unsolicited_report_interval\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x26, 0x6, 0x1) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(r5, &(0x7f0000001040)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYRESDEC, @ANYRES64=r4], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/snd/midiC2D2\x00', 0x4b040, 0x0) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) mprotect$auto(0x200000000000, 0x806120, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x501, 0x9}, 0x46, 0xfffffffd) socket(0xa, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 74.414832][ T5615] cgroup: Unknown subsys name 'net' [ 74.482308][ T5615] cgroup: Unknown subsys name 'cpuset' [ 74.492263][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.990005][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.901731][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.910520][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.918346][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.938978][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.947544][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.969797][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.977177][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.988189][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.996763][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.001799][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.015469][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.016262][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.023569][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.036044][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.039625][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.044818][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.053049][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.060643][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.068902][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.074729][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.594408][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.601901][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.609378][ T5637] bridge_slave_0: entered allmulticast mode [ 79.616514][ T5637] bridge_slave_0: entered promiscuous mode [ 79.654803][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.662060][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.669747][ T5637] bridge_slave_1: entered allmulticast mode [ 79.677145][ T5637] bridge_slave_1: entered promiscuous mode [ 79.739494][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.746709][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.753983][ T5634] bridge_slave_0: entered allmulticast mode [ 79.762091][ T5634] bridge_slave_0: entered promiscuous mode [ 79.794541][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.801771][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.809238][ T5634] bridge_slave_1: entered allmulticast mode [ 79.816183][ T5634] bridge_slave_1: entered promiscuous mode [ 79.826352][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.841497][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.848728][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.855909][ T5626] bridge_slave_0: entered allmulticast mode [ 79.863212][ T5626] bridge_slave_0: entered promiscuous mode [ 79.882109][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.901852][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.909192][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.916372][ T5626] bridge_slave_1: entered allmulticast mode [ 79.923626][ T5626] bridge_slave_1: entered promiscuous mode [ 79.971611][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.983966][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.002153][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.010382][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.017633][ T5630] bridge_slave_0: entered allmulticast mode [ 80.025081][ T5630] bridge_slave_0: entered promiscuous mode [ 80.053245][ T5637] team0: Port device team_slave_0 added [ 80.061689][ T5637] team0: Port device team_slave_1 added [ 80.067518][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.074879][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.082254][ T5630] bridge_slave_1: entered allmulticast mode [ 80.089411][ T5630] bridge_slave_1: entered promiscuous mode [ 80.099610][ T5640] Bluetooth: hci0: command tx timeout [ 80.099615][ T5636] Bluetooth: hci1: command tx timeout [ 80.101190][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.122468][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.172097][ T5634] team0: Port device team_slave_0 added [ 80.178104][ T5636] Bluetooth: hci2: command tx timeout [ 80.178355][ T5640] Bluetooth: hci3: command tx timeout [ 80.220927][ T5634] team0: Port device team_slave_1 added [ 80.227414][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.234780][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.261178][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.275875][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.286911][ T5626] team0: Port device team_slave_0 added [ 80.295199][ T5626] team0: Port device team_slave_1 added [ 80.312151][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.319635][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.345705][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.359233][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.416139][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.423452][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.449585][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.464214][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.471593][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.497750][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.518393][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.525470][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.551506][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.564592][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.571814][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.597771][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.619065][ T5630] team0: Port device team_slave_0 added [ 80.645954][ T5630] team0: Port device team_slave_1 added [ 80.688569][ T5626] hsr_slave_0: entered promiscuous mode [ 80.695514][ T5626] hsr_slave_1: entered promiscuous mode [ 80.718856][ T5637] hsr_slave_0: entered promiscuous mode [ 80.725159][ T5637] hsr_slave_1: entered promiscuous mode [ 80.731830][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 80.737658][ T5637] Cannot create hsr debugfs directory [ 80.781855][ T5634] hsr_slave_0: entered promiscuous mode [ 80.788397][ T5634] hsr_slave_1: entered promiscuous mode [ 80.794540][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 80.800641][ T5634] Cannot create hsr debugfs directory [ 80.808075][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.815094][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.841632][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.874220][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.881274][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.907545][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.079007][ T5630] hsr_slave_0: entered promiscuous mode [ 81.085298][ T5630] hsr_slave_1: entered promiscuous mode [ 81.091827][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 81.097595][ T5630] Cannot create hsr debugfs directory [ 81.419899][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.433282][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.441575][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.452169][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.462448][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.472960][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.490358][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.501758][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.561489][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.572283][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.580567][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.591383][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.601342][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.613196][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.631308][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.643170][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.722665][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.736721][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.745080][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.754687][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.768383][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.780893][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.800852][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.813030][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.921418][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.932369][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.941000][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.953509][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.961453][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.971107][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.984758][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.994764][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.081368][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.133089][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.162358][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.178526][ T5640] Bluetooth: hci1: command tx timeout [ 82.187219][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.188090][ T5640] Bluetooth: hci0: command tx timeout [ 82.198822][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.208303][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.236853][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.244002][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.259668][ T5640] Bluetooth: hci2: command tx timeout [ 82.269192][ T5640] Bluetooth: hci3: command tx timeout [ 82.284441][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.313287][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.323822][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.330984][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.342489][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.349659][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.381410][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.388611][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.424759][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.432041][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.464102][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.569620][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.613101][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.620351][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.648575][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.655787][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.463014][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.636282][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.651261][ T5626] veth0_vlan: entered promiscuous mode [ 83.682221][ T5626] veth1_vlan: entered promiscuous mode [ 83.793232][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.801838][ T5637] veth0_vlan: entered promiscuous mode [ 83.813248][ T5626] veth0_macvtap: entered promiscuous mode [ 83.849800][ T5626] veth1_macvtap: entered promiscuous mode [ 83.858796][ T5637] veth1_vlan: entered promiscuous mode [ 83.879676][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.930760][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.962231][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.990976][ T5637] veth0_macvtap: entered promiscuous mode [ 84.003158][ T5634] veth0_vlan: entered promiscuous mode [ 84.025904][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.042650][ T5637] veth1_macvtap: entered promiscuous mode [ 84.052187][ T5634] veth1_vlan: entered promiscuous mode [ 84.071477][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.080311][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.101162][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.111940][ T5630] veth0_vlan: entered promiscuous mode [ 84.145289][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.172401][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.194328][ T5630] veth1_vlan: entered promiscuous mode [ 84.227228][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.236630][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247686][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.265832][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.274805][ T5636] Bluetooth: hci1: command tx timeout [ 84.274907][ T5640] Bluetooth: hci0: command tx timeout [ 84.292131][ T5634] veth0_macvtap: entered promiscuous mode [ 84.331489][ T5634] veth1_macvtap: entered promiscuous mode [ 84.340782][ T5636] Bluetooth: hci2: command tx timeout [ 84.346243][ T5640] Bluetooth: hci3: command tx timeout [ 84.380326][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.401795][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.421219][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.460610][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.469149][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.483253][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.492998][ T5630] veth0_macvtap: entered promiscuous mode [ 84.543233][ T5630] veth1_macvtap: entered promiscuous mode [ 84.550565][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.565763][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.587045][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.603747][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609453][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.634582][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.653413][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.670744][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.750391][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.764522][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.791830][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.840720][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.866831][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.891984][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904142][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915857][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.935128][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.976305][ T5775] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.064933][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.087258][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.231104][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.276481][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.367844][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.372711][ T5786] FAULT_INJECTION: forcing a failure. [ 85.372711][ T5786] name failslab, interval 1, probability 0, space 0, times 1 [ 85.391152][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.400537][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 85.400577][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 85.400603][ T5786] Call Trace: [ 85.400613][ T5786] [ 85.400623][ T5786] dump_stack_lvl+0x100/0x190 [ 85.400661][ T5786] should_fail_ex.cold+0x5/0xa [ 85.400695][ T5786] should_failslab+0xc2/0x120 [ 85.400733][ T5786] kmem_cache_alloc_noprof+0x91/0x6a0 [ 85.400776][ T5786] ? copy_time_ns+0x3a5/0x790 [ 85.400820][ T5786] ? copy_fs_struct+0x49/0x340 [ 85.400866][ T5786] copy_fs_struct+0x49/0x340 [ 85.400908][ T5786] __do_sys_setns+0x516/0x1f30 [ 85.400941][ T5786] ? __pfx___do_sys_setns+0x10/0x10 [ 85.400982][ T5786] do_syscall_64+0x115/0x840 [ 85.401012][ T5786] ? clear_bhb_loop+0x40/0x90 [ 85.401047][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.401077][ T5786] RIP: 0033:0x7fa62279de99 [ 85.401106][ T5786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.401138][ T5786] RSP: 002b:00007fa623606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 85.401168][ T5786] RAX: ffffffffffffffda RBX: 00007fa622a26090 RCX: 00007fa62279de99 [ 85.401187][ T5786] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000007 [ 85.401204][ T5786] RBP: 00007fa622833eaf R08: 0000000000000000 R09: 0000000000000000 [ 85.401221][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.401238][ T5786] R13: 00007fa622a26128 R14: 00007fa622a26090 R15: 00007ffe2c352338 [ 85.401274][ T5786] [ 86.339298][ T5640] Bluetooth: hci0: command tx timeout [ 86.344744][ T5636] Bluetooth: hci1: command tx timeout [ 86.418491][ T5640] Bluetooth: hci2: command tx timeout [ 86.423972][ T5636] Bluetooth: hci3: command tx timeout [ 86.790746][ T5810] ubi0: attaching mtd0 [ 86.900499][ T5810] ubi0: scanning is finished [ 86.938802][ T5810] ubi0: empty MTD device detected [ 87.899998][ T5810] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.912259][ T5810] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 87.938020][ T5810] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 87.955078][ T5810] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 87.973503][ T5810] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 88.007376][ T5810] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 88.046109][ T5810] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2744715920 [ 88.119726][ T5810] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 88.171052][ T5849] ubi0: background thread "ubi_bgt0d" started, PID 5849 [ 88.222031][ T5815] ubi0: detaching mtd0 [ 88.346067][ T5815] ubi0: mtd0 is detached [ 88.350777][ T5636] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 88.569932][ T5852] Zero length message leads to an empty skb [ 90.207866][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.418256][ T5636] Bluetooth: hci0: command 0x2016 tx timeout [ 91.005516][ T5885] Process accounting resumed [ 91.163981][ T5893] FAULT_INJECTION: forcing a failure. [ 91.163981][ T5893] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.206313][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 91.206338][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.206348][ T5893] Call Trace: [ 91.206354][ T5893] [ 91.206360][ T5893] dump_stack_lvl+0x100/0x190 [ 91.206384][ T5893] should_fail_ex.cold+0x5/0xa [ 91.206403][ T5893] get_futex_key+0x1d2/0x14f0 [ 91.206430][ T5893] ? __pfx_get_futex_key+0x10/0x10 [ 91.206451][ T5893] ? __pfx___resched_curr+0x10/0x10 [ 91.206474][ T5893] futex_wait_setup+0x91/0x540 [ 91.206499][ T5893] __futex_wait+0x19f/0x300 [ 91.206519][ T5893] ? __pfx___futex_wait+0x10/0x10 [ 91.206536][ T5893] ? __pfx_try_to_wake_up+0x10/0x10 [ 91.206550][ T5893] ? futex_hash+0x311/0x400 [ 91.206574][ T5893] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.206595][ T5893] ? find_held_lock+0x2b/0x80 [ 91.206611][ T5893] ? futex_wake+0x4ea/0x5e0 [ 91.206652][ T5893] futex_wait+0xe6/0x370 [ 91.206671][ T5893] ? __pfx_futex_wait+0x10/0x10 [ 91.206699][ T5893] do_futex+0x265/0x440 [ 91.206715][ T5893] ? __pfx_do_futex+0x10/0x10 [ 91.206735][ T5893] __x64_sys_futex+0x34f/0x4d0 [ 91.206753][ T5893] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.206779][ T5893] do_syscall_64+0x115/0x840 [ 91.206795][ T5893] ? clear_bhb_loop+0x40/0x90 [ 91.206813][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.206828][ T5893] RIP: 0033:0x7fa5ef19de99 [ 91.206843][ T5893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.206857][ T5893] RSP: 002b:00007fa5f00a10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.206872][ T5893] RAX: ffffffffffffffda RBX: 00007fa5ef426098 RCX: 00007fa5ef19de99 [ 91.206881][ T5893] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa5ef426098 [ 91.206897][ T5893] RBP: 00007fa5ef426090 R08: 0000000000000000 R09: 0000000000000000 [ 91.206906][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.206915][ T5893] R13: 00007fa5ef426128 R14: 00007fff022b6120 R15: 00007fff022b6208 [ 91.206936][ T5893] [ 91.821389][ T5900] process 'syz.3.23' launched ':,' with NULL argv: empty string added [ 91.949897][ T10] cfg80211: failed to load regulatory.db [ 92.032401][ T5640] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 92.498225][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 92.594204][ T5912] netlink: 334 bytes leftover after parsing attributes in process `syz.0.25'. [ 92.747808][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.494423][ T5929] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.947337][ T5942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.099504][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 94.212134][ T30] audit: type=1804 audit(1784369923.625:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.35" name="/newroot/sys/kernel/debug/tracing/uprobe_profile" dev="tracefs" ino=1071 res=1 errno=0 [ 94.667768][ T5640] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 96.180207][ T5640] Bluetooth: hci2: command 0x2016 tx timeout [ 96.739481][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 98.088472][ T6046] random: crng reseeded on system resumption [ 98.170763][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 98.460645][ T30] audit: type=1800 audit(1784369927.885:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.51" name="discovery_nqn" dev="configfs" ino=9539 res=0 errno=0 [ 98.819977][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 99.431832][ T6089] futex_wake_op: syz.3.57 tries to shift op by -2048; fix this program [ 99.449547][ T6089] 0x000000000001-0x000000020000 : "" [ 99.536202][ T6089] ftl_cs: FTL header corrupt! [ 99.787766][ T6092] ubi0: attaching mtd0 [ 99.821540][ T6092] ubi0: scanning is finished [ 99.946956][ T6087] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 100.013607][ T6092] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 100.037448][ T6092] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 100.079282][ T6092] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 100.124281][ T6092] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 100.177132][ T6092] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 100.211104][ T6092] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 100.268953][ T6092] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2744715920 [ 100.312033][ T6092] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 100.329266][ T6102] ubi0: background thread "ubi_bgt0d" started, PID 6102 [ 100.969566][ T6127] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.239692][ T5636] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 101.766160][ T30] audit: type=1800 audit(1784369931.195:4): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.68" name="dbroot" dev="configfs" ino=9815 res=0 errno=0 [ 101.809791][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 101.871106][ T6146] openvswitch: netlink: Geneve opt len 6 is not a multiple of 4. [ 103.300186][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 103.332402][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.332444][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.349002][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.349037][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.364616][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.364652][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.381902][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.381933][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.397014][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.397041][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.411945][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.411978][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.428372][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.428407][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.443427][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.443469][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.462815][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.462850][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.477812][ T5636] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 103.477845][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.492894][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.501121][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.510178][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.517846][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.525530][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.533449][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.541118][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.550281][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.557980][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.566143][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.573844][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.581568][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.589240][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.597819][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.606493][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.614167][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.621886][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.630074][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.637716][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.645411][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.653100][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.660836][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 103.668846][ T5636] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 104.151198][ T6180] block nbd2: not configured, cannot reconfigure [ 104.340282][ T6205] random: crng reseeded on system resumption [ 105.382692][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 105.869471][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 107.214728][ T6241] No such timeout policy "" [ 107.939283][ T5636] Bluetooth: hci0: command 0x2016 tx timeout [ 108.215097][ T6260] netlink: 342 bytes leftover after parsing attributes in process `syz.0.91'. [ 109.032826][ T6285] FAULT_INJECTION: forcing a failure. [ 109.032826][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 109.075450][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 109.102964][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 109.103006][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.103024][ T6285] Call Trace: [ 109.103034][ T6285] [ 109.103045][ T6285] dump_stack_lvl+0x100/0x190 [ 109.103084][ T6285] should_fail_ex.cold+0x5/0xa [ 109.103119][ T6285] should_failslab+0xc2/0x120 [ 109.103159][ T6285] kmem_cache_alloc_noprof+0x91/0x6a0 [ 109.103192][ T6285] ? stack_trace_save+0x8e/0xc0 [ 109.103234][ T6285] ? alloc_empty_file+0x5b/0x1c0 [ 109.103275][ T6285] alloc_empty_file+0x5b/0x1c0 [ 109.103310][ T6285] path_openat+0xe7/0x4280 [ 109.103336][ T6285] ? __kasan_slab_alloc+0x89/0x90 [ 109.103377][ T6285] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 109.103409][ T6285] ? do_getname+0x35/0x390 [ 109.103441][ T6285] ? do_sys_openat2+0xc7/0x1e0 [ 109.103475][ T6285] ? __x64_sys_openat+0x12d/0x210 [ 109.103510][ T6285] ? do_syscall_64+0x115/0x840 [ 109.103540][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.103582][ T6285] ? __pfx_path_openat+0x10/0x10 [ 109.103620][ T6285] do_file_open+0x20e/0x430 [ 109.103649][ T6285] ? __pfx_do_file_open+0x10/0x10 [ 109.103704][ T6285] ? alloc_fd+0x471/0x7a0 [ 109.103751][ T6285] ? do_getname+0x191/0x390 [ 109.103786][ T6285] do_sys_openat2+0x10f/0x1e0 [ 109.103832][ T6285] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.103871][ T6285] ? find_held_lock+0x2b/0x80 [ 109.103914][ T6285] __x64_sys_openat+0x12d/0x210 [ 109.103951][ T6285] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.104002][ T6285] do_syscall_64+0x115/0x840 [ 109.104030][ T6285] ? clear_bhb_loop+0x40/0x90 [ 109.104066][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.104095][ T6285] RIP: 0033:0x7fca94d5e6ce [ 109.104119][ T6285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.104165][ T6285] RSP: 002b:00007fca95c2eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.104193][ T6285] RAX: ffffffffffffffda RBX: 00007fca95c2f6c0 RCX: 00007fca94d5e6ce [ 109.104213][ T6285] RDX: 0000000000000002 RSI: 00007fca95c2ef90 RDI: ffffffffffffff9c [ 109.104236][ T6285] RBP: 00007fca94e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 109.104254][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.104272][ T6285] R13: 00007fca95026128 R14: 00007fca95026090 R15: 00007ffc755e9868 [ 109.104309][ T6285] [ 109.559477][ T5640] Bluetooth: hci3: unexpected event 0x04 length: 6 < 10 [ 109.761463][ T6300] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.027493][ T5640] Bluetooth: hci0: command 0x2016 tx timeout [ 110.102845][ T6300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.369588][ T6300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.377746][ T6326] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 110.753151][ T6300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.122281][ T6300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.141062][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 111.749911][ T6355] random: crng reseeded on system resumption [ 112.534824][ T6366] FAULT_INJECTION: forcing a failure. [ 112.534824][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.629193][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) [ 112.629235][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.629249][ T6366] Call Trace: [ 112.629258][ T6366] [ 112.629267][ T6366] dump_stack_lvl+0x100/0x190 [ 112.629316][ T6366] should_fail_ex.cold+0x5/0xa [ 112.629348][ T6366] strncpy_from_user+0x3b/0x2d0 [ 112.629386][ T6366] do_getname+0x78/0x390 [ 112.629423][ T6366] vfs_open_tree+0x286/0xae0 [ 112.629453][ T6366] ? _raw_spin_unlock+0x28/0x50 [ 112.629497][ T6366] ? __pfx_vfs_open_tree+0x10/0x10 [ 112.629531][ T6366] __x64_sys_open_tree+0xa3/0x150 [ 112.629562][ T6366] do_syscall_64+0x115/0x840 [ 112.629590][ T6366] ? clear_bhb_loop+0x40/0x90 [ 112.629625][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.629654][ T6366] RIP: 0033:0x7f83d559de99 [ 112.629683][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.629709][ T6366] RSP: 002b:00007f83d64e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 112.629735][ T6366] RAX: ffffffffffffffda RBX: 00007f83d5826090 RCX: 00007f83d559de99 [ 112.629755][ T6366] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 112.629773][ T6366] RBP: 00007f83d5633eaf R08: 0000000000000000 R09: 0000000000000000 [ 112.629791][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.629808][ T6366] R13: 00007f83d5826128 R14: 00007f83d5826090 R15: 00007ffc79f12e08 [ 112.629841][ T6366] [ 113.023140][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 113.218235][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 114.293398][ T6417] FAULT_INJECTION: forcing a failure. [ 114.293398][ T6417] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.321302][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(full) [ 114.321325][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.321335][ T6417] Call Trace: [ 114.321341][ T6417] [ 114.321347][ T6417] dump_stack_lvl+0x100/0x190 [ 114.321372][ T6417] should_fail_ex.cold+0x5/0xa [ 114.321388][ T6417] ? prepare_alloc_pages+0x16d/0x5f0 [ 114.321410][ T6417] should_fail_alloc_page+0xeb/0x140 [ 114.321432][ T6417] prepare_alloc_pages+0x1f0/0x5f0 [ 114.321457][ T6417] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 114.321476][ T6417] ? percpu_counter_add_batch+0xb9/0x230 [ 114.321497][ T6417] ? vma_is_shared_writable+0x173/0x1e0 [ 114.321527][ T6417] ? __pfx_vma_is_shared_writable+0x10/0x10 [ 114.321557][ T6417] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.321574][ T6417] ? vma_wants_writenotify+0xdc/0x2e0 [ 114.321591][ T6417] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 114.321613][ T6417] ? vma_set_page_prot+0xb1/0x120 [ 114.321640][ T6417] ? __mmap_region+0xc73/0x2db0 [ 114.321659][ T6417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.321681][ T6417] ? policy_nodemask+0xed/0x4f0 [ 114.321702][ T6417] alloc_pages_mpol+0x1fb/0x540 [ 114.321723][ T6417] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.321757][ T6417] alloc_pages_noprof+0x1a/0x160 [ 114.321781][ T6417] pte_alloc_one+0x1c/0x3d0 [ 114.321805][ T6417] __pte_alloc+0x6d/0x3e0 [ 114.321822][ T6417] ? __pfx___pte_alloc+0x10/0x10 [ 114.321840][ T6417] ? __lock_acquire+0x49f/0x1a40 [ 114.321865][ T6417] do_anonymous_page+0x13ae/0x2080 [ 114.321890][ T6417] ? __pfx_pgd_none+0x10/0x10 [ 114.321908][ T6417] __handle_mm_fault+0x1d2c/0x2a00 [ 114.321935][ T6417] ? mt_find+0x45e/0x8e0 [ 114.321959][ T6417] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.321981][ T6417] ? __pfx_mt_find+0x10/0x10 [ 114.322015][ T6417] handle_mm_fault+0x37b/0xa30 [ 114.322045][ T6417] __get_user_pages+0x1178/0x32a0 [ 114.322073][ T6417] ? __pfx___get_user_pages+0x10/0x10 [ 114.322099][ T6417] populate_vma_page_range+0x267/0x3f0 [ 114.322121][ T6417] ? __pfx_populate_vma_page_range+0x10/0x10 [ 114.322141][ T6417] ? __pfx_find_vma_intersection+0x10/0x10 [ 114.322167][ T6417] __mm_populate+0x107/0x3a0 [ 114.322203][ T6417] ? __pfx___mm_populate+0x10/0x10 [ 114.322236][ T6417] ? up_write+0x2e5/0x5c0 [ 114.322260][ T6417] vm_mmap_pgoff+0x37f/0x470 [ 114.322299][ T6417] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.322340][ T6417] ? __pfx_do_futex+0x10/0x10 [ 114.322367][ T6417] ksys_mmap_pgoff+0xe4/0x610 [ 114.322387][ T6417] ? __x64_sys_futex+0x358/0x4d0 [ 114.322403][ T6417] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 114.322422][ T6417] ? xfd_validate_state+0x129/0x190 [ 114.322442][ T6417] __x64_sys_mmap+0x125/0x190 [ 114.322461][ T6417] do_syscall_64+0x115/0x840 [ 114.322477][ T6417] ? clear_bhb_loop+0x40/0x90 [ 114.322496][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.322512][ T6417] RIP: 0033:0x7f83d559de99 [ 114.322527][ T6417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.322541][ T6417] RSP: 002b:00007f83d64c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.322556][ T6417] RAX: ffffffffffffffda RBX: 00007f83d5826180 RCX: 00007f83d559de99 [ 114.322566][ T6417] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 114.322576][ T6417] RBP: 00007f83d5633eaf R08: ffffffffffffffff R09: 0000000000000000 [ 114.322586][ T6417] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 114.322595][ T6417] R13: 00007f83d5826218 R14: 00007f83d5826180 R15: 00007ffc79f12e08 [ 114.322616][ T6417] [ 115.063905][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 115.287427][ T50] Bluetooth: hci1: unexpected event 0x04 length: 6 < 10 [ 116.739003][ T6467] FAULT_INJECTION: forcing a failure. [ 116.739003][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.764398][ T6467] CPU: 1 UID: 0 PID: 6467 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 116.764434][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.764449][ T6467] Call Trace: [ 116.764457][ T6467] [ 116.764468][ T6467] dump_stack_lvl+0x100/0x190 [ 116.764504][ T6467] should_fail_ex.cold+0x5/0xa [ 116.764537][ T6467] _copy_from_iter+0x1f4/0x1690 [ 116.764580][ T6467] ? __asan_memset+0x23/0x50 [ 116.764617][ T6467] ? __pfx__copy_from_iter+0x10/0x10 [ 116.764656][ T6467] ? __pfx___alloc_skb+0x10/0x10 [ 116.764702][ T6467] netlink_sendmsg+0x808/0xda0 [ 116.764753][ T6467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.764803][ T6467] ? apparmor_socket_sendmsg+0x15b/0x270 [ 116.764852][ T6467] ____sys_sendmsg+0xa4d/0xbe0 [ 116.764892][ T6467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.764936][ T6467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.764983][ T6467] ___sys_sendmsg+0x190/0x1e0 [ 116.765023][ T6467] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.765063][ T6467] ? __lock_acquire+0x49f/0x1a40 [ 116.765146][ T6467] __sys_sendmsg+0x160/0x210 [ 116.765181][ T6467] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.765231][ T6467] do_syscall_64+0x115/0x840 [ 116.765260][ T6467] ? clear_bhb_loop+0x40/0x90 [ 116.765292][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.765321][ T6467] RIP: 0033:0x7fa62279de99 [ 116.765342][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.765366][ T6467] RSP: 002b:00007fa623627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.765392][ T6467] RAX: ffffffffffffffda RBX: 00007fa622a25fa0 RCX: 00007fa62279de99 [ 116.765409][ T6467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 116.765425][ T6467] RBP: 00007fa622833eaf R08: 0000000000000000 R09: 0000000000000000 [ 116.765440][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.765456][ T6467] R13: 00007fa622a26038 R14: 00007fa622a25fa0 R15: 00007ffe2c352338 [ 116.765492][ T6467] [ 117.138255][ T5636] Bluetooth: hci1: command 0x2016 tx timeout [ 119.218018][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 120.646566][ T6560] FAULT_INJECTION: forcing a failure. [ 120.646566][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 120.688563][ T6560] CPU: 1 UID: 0 PID: 6560 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) [ 120.688602][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.688618][ T6560] Call Trace: [ 120.688628][ T6560] [ 120.688638][ T6560] dump_stack_lvl+0x100/0x190 [ 120.688675][ T6560] should_fail_ex.cold+0x5/0xa [ 120.688707][ T6560] should_failslab+0xc2/0x120 [ 120.688744][ T6560] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 120.688778][ T6560] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 120.688807][ T6560] ? __d_alloc+0x35/0xa50 [ 120.688841][ T6560] __d_alloc+0x35/0xa50 [ 120.688872][ T6560] d_alloc_pseudo+0x1c/0xc0 [ 120.688909][ T6560] alloc_file_pseudo+0x118/0x290 [ 120.688945][ T6560] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.688977][ T6560] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 120.689029][ T6560] create_pipe_files+0x360/0x970 [ 120.689061][ T6560] do_pipe2+0xbd/0x1e0 [ 120.689088][ T6560] ? __pfx_do_pipe2+0x10/0x10 [ 120.689128][ T6560] __x64_sys_pipe+0x33/0x50 [ 120.689155][ T6560] do_syscall_64+0x115/0x840 [ 120.689183][ T6560] ? clear_bhb_loop+0x40/0x90 [ 120.689228][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.689258][ T6560] RIP: 0033:0x7f83d559de99 [ 120.689282][ T6560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.689308][ T6560] RSP: 002b:00007f83d6507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 120.689334][ T6560] RAX: ffffffffffffffda RBX: 00007f83d5825fa0 RCX: 00007f83d559de99 [ 120.689354][ T6560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.689370][ T6560] RBP: 00007f83d5633eaf R08: 0000000000000000 R09: 0000000000000000 [ 120.689389][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.689406][ T6560] R13: 00007f83d5826038 R14: 00007f83d5825fa0 R15: 00007ffc79f12e08 [ 120.689444][ T6560] [ 121.127144][ T6559] Process accounting paused [ 121.294573][ T6560] mmap: syz.2.146 (6560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.920804][ T5636] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 122.285510][ T50] bt_warn_ratelimited: 23 callbacks suppressed [ 122.285536][ T50] Bluetooth: hci3: unexpected event 0x05 length: 6 > 4 [ 123.252528][ T6609] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 123.280737][ T6614] FAULT_INJECTION: forcing a failure. [ 123.280737][ T6614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.338363][ T6609] File: /dev/nullb0 PID: 6609 Comm: syz.2.156 [ 123.344620][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 123.344656][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.344671][ T6614] Call Trace: [ 123.344680][ T6614] [ 123.344690][ T6614] dump_stack_lvl+0x100/0x190 [ 123.344727][ T6614] should_fail_ex.cold+0x5/0xa [ 123.344758][ T6614] strncpy_from_user+0x3b/0x2d0 [ 123.344798][ T6614] do_getname+0x78/0x390 [ 123.344830][ T6614] vfs_open_tree+0x286/0xae0 [ 123.344853][ T6614] ? _raw_spin_unlock+0x28/0x50 [ 123.344892][ T6614] ? __pfx_vfs_open_tree+0x10/0x10 [ 123.344926][ T6614] __x64_sys_open_tree+0xa3/0x150 [ 123.344954][ T6614] do_syscall_64+0x115/0x840 [ 123.344979][ T6614] ? clear_bhb_loop+0x40/0x90 [ 123.345018][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.345046][ T6614] RIP: 0033:0x7fca94d9de99 [ 123.345069][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.345096][ T6614] RSP: 002b:00007fca95c2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 123.345124][ T6614] RAX: ffffffffffffffda RBX: 00007fca95026090 RCX: 00007fca94d9de99 [ 123.345174][ T6614] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 123.345192][ T6614] RBP: 00007fca94e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 123.345209][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.345226][ T6614] R13: 00007fca95026128 R14: 00007fca95026090 R15: 00007ffc755e9868 [ 123.345261][ T6614] [ 123.938862][ T5636] Bluetooth: hci3: command 0x2016 tx timeout [ 124.757492][ T6638] netlink: 6140 bytes leftover after parsing attributes in process `syz.2.161'. [ 124.771593][ T6624] random: crng reseeded on system resumption [ 124.788219][ T6638] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.778683][ T6657] ubi: mtd0 is already attached to ubi0 [ 125.858513][ T6659] ubi0: detaching mtd0 [ 125.955805][ T6659] ubi0: mtd0 is detached [ 127.370545][ T6673] Process accounting resumed [ 128.009889][ T6692] random: crng reseeded on system resumption [ 128.801391][ T6703] syz.1.174 uses obsolete (PF_INET,SOCK_PACKET) [ 129.868319][ T6729] FAULT_INJECTION: forcing a failure. [ 129.868319][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 129.892251][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 129.892288][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.892304][ T6729] Call Trace: [ 129.892313][ T6729] [ 129.892321][ T6729] dump_stack_lvl+0x100/0x190 [ 129.892342][ T6729] should_fail_ex.cold+0x5/0xa [ 129.892359][ T6729] should_failslab+0xc2/0x120 [ 129.892378][ T6729] kmem_cache_alloc_noprof+0x91/0x6a0 [ 129.892395][ T6729] ? __pfx_map_id_range_down+0x10/0x10 [ 129.892414][ T6729] ? security_inode_alloc+0x3b/0x2c0 [ 129.892433][ T6729] security_inode_alloc+0x3b/0x2c0 [ 129.892452][ T6729] inode_init_always_gfp+0xc77/0xfb0 [ 129.892477][ T6729] alloc_inode+0x8e/0x250 [ 129.892494][ T6729] sock_alloc+0x44/0x280 [ 129.892512][ T6729] ? security_socket_create+0x7f/0x250 [ 129.892528][ T6729] __sock_create+0xc2/0x860 [ 129.892552][ T6729] __sys_socketpair+0x261/0x5b0 [ 129.892567][ T6729] ? __pfx___sys_socketpair+0x10/0x10 [ 129.892582][ T6729] ? xfd_validate_state+0x129/0x190 [ 129.892602][ T6729] __x64_sys_socketpair+0x96/0x100 [ 129.892616][ T6729] ? lockdep_hardirqs_on+0x78/0x100 [ 129.892631][ T6729] do_syscall_64+0x115/0x840 [ 129.892645][ T6729] ? clear_bhb_loop+0x40/0x90 [ 129.892663][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.892681][ T6729] RIP: 0033:0x7fca94d9de99 [ 129.892694][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.892707][ T6729] RSP: 002b:00007fca95c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 129.892722][ T6729] RAX: ffffffffffffffda RBX: 00007fca95026090 RCX: 00007fca94d9de99 [ 129.892731][ T6729] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 129.892740][ T6729] RBP: 00007fca94e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 129.892749][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.892757][ T6729] R13: 00007fca95026128 R14: 00007fca95026090 R15: 00007ffc755e9868 [ 129.892775][ T6729] [ 130.106562][ T6729] socket: no more sockets [ 131.080568][ T50] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 131.224416][ T6731] Process accounting resumed [ 131.524832][ T50] Bluetooth: hci2: unexpected event 0x05 length: 6 > 4 [ 132.350248][ T6779] syz.3.188 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 132.505131][ T6783] cougar: G6 mapped to F18 [ 132.641684][ T6783] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 132.914587][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922802][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.139658][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 136.110576][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 137.347201][ T6906] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 137.463040][ T6912] random: crng reseeded on system resumption [ 140.645877][ T6973] FAULT_INJECTION: forcing a failure. [ 140.645877][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 140.702335][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) [ 140.702372][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.702390][ T6973] Call Trace: [ 140.702399][ T6973] [ 140.702411][ T6973] dump_stack_lvl+0x100/0x190 [ 140.702448][ T6973] should_fail_ex.cold+0x5/0xa [ 140.702480][ T6973] should_failslab+0xc2/0x120 [ 140.702515][ T6973] __kmalloc_noprof+0xfc/0x820 [ 140.702545][ T6973] ? rcu_is_watching+0x12/0xc0 [ 140.702573][ T6973] ? tomoyo_realpath_from_path+0xb6/0x690 [ 140.702617][ T6973] tomoyo_realpath_from_path+0xb6/0x690 [ 140.702662][ T6973] tomoyo_check_open_permission+0x2af/0x3c0 [ 140.702698][ T6973] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 140.702732][ T6973] ? __lock_acquire+0x49f/0x1a40 [ 140.702766][ T6973] ? __lock_acquire+0x49f/0x1a40 [ 140.702808][ T6973] ? hook_file_open+0x24f/0x8f0 [ 140.702855][ T6973] ? lock_acquire+0x1b9/0x370 [ 140.702901][ T6973] tomoyo_file_open+0x6b/0x90 [ 140.702943][ T6973] security_file_open+0xb5/0x1e0 [ 140.702976][ T6973] do_dentry_open+0x588/0x14d0 [ 140.703025][ T6973] vfs_open+0x82/0x3f0 [ 140.703060][ T6973] path_openat+0x2873/0x4280 [ 140.703101][ T6973] ? __pfx_path_openat+0x10/0x10 [ 140.703134][ T6973] do_file_open+0x20e/0x430 [ 140.703160][ T6973] ? __pfx_do_file_open+0x10/0x10 [ 140.703202][ T6973] ? alloc_fd+0x471/0x7a0 [ 140.703241][ T6973] ? do_getname+0x191/0x390 [ 140.703287][ T6973] do_sys_openat2+0x10f/0x1e0 [ 140.703324][ T6973] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.703359][ T6973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.703399][ T6973] __x64_sys_openat+0x12d/0x210 [ 140.703433][ T6973] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.703482][ T6973] do_syscall_64+0x115/0x840 [ 140.703509][ T6973] ? clear_bhb_loop+0x40/0x90 [ 140.703543][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.703581][ T6973] RIP: 0033:0x7fa5ef19de99 [ 140.703605][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.703632][ T6973] RSP: 002b:00007fa5f00c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.703659][ T6973] RAX: ffffffffffffffda RBX: 00007fa5ef425fa0 RCX: 00007fa5ef19de99 [ 140.703678][ T6973] RDX: 0000000000088081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 140.703694][ T6973] RBP: 00007fa5ef233eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.703709][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.703723][ T6973] R13: 00007fa5ef426038 R14: 00007fa5ef425fa0 R15: 00007fff022b6208 [ 140.703759][ T6973] [ 140.705480][ T6973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.816133][ T50] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 142.033244][ T5636] Bluetooth: hci0: unexpected event 0x05 length: 6 > 4 [ 142.545431][ T7016] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 142.563936][ T7016] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 142.574380][ T7016] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 142.584381][ T7016] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 142.593542][ T7016] page dumped because: unmovable page [ 142.600364][ T7016] page_owner info is not present (never set?) [ 143.349166][ T7031] ima: policy update failed [ 143.411340][ T30] audit: type=1802 audit(1784369972.845:5): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.220" res=0 errno=0 [ 143.835140][ T7049] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[7049] [ 143.858076][ T5636] Bluetooth: hci0: command 0x2016 tx timeout [ 144.112509][ T7055] ================================================================== [ 144.112545][ T7055] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 144.112593][ T7055] Write of size 8 at addr ffffc90004a695a0 by task syz.0.225/7055 [ 144.112618][ T7055] [ 144.112632][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 144.112667][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.112686][ T7055] Call Trace: [ 144.112695][ T7055] [ 144.112725][ T7055] dump_stack_lvl+0x100/0x190 [ 144.112759][ T7055] print_report+0x13d/0x4b0 [ 144.112797][ T7055] ? _raw_spin_lock_irqsave+0x52/0x60 [ 144.112841][ T7055] ? sys_imageblit+0x19fb/0x1d60 [ 144.112873][ T7055] kasan_report+0xdf/0x1c0 [ 144.112908][ T7055] ? sys_imageblit+0x19fb/0x1d60 [ 144.112943][ T7055] sys_imageblit+0x19fb/0x1d60 [ 144.112987][ T7055] ? __pfx_sys_imageblit+0x10/0x10 [ 144.113025][ T7055] ? prb_read_valid+0x78/0xa0 [ 144.113071][ T7055] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.113119][ T7055] soft_cursor+0x524/0xa10 [ 144.113148][ T7055] ? atomic_notifier_call_chain+0x60/0x1c0 [ 144.113182][ T7055] ? fb_get_color_depth+0x120/0x250 [ 144.113229][ T7055] bit_cursor+0xca1/0x1490 [ 144.113260][ T7055] ? __pfx_bit_cursor+0x10/0x10 [ 144.113294][ T7055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.113336][ T7055] ? get_color+0x1da/0x450 [ 144.113377][ T7055] ? __pfx_bit_cursor+0x10/0x10 [ 144.113404][ T7055] fbcon_cursor+0x43c/0x5e0 [ 144.113449][ T7055] ? add_softcursor+0x180/0x290 [ 144.113480][ T7055] set_cursor+0x1db/0x250 [ 144.113508][ T7055] con_write+0x89/0xb0 [ 144.113545][ T7055] n_tty_write+0x431/0x1160 [ 144.113595][ T7055] ? __pfx_n_tty_write+0x10/0x10 [ 144.113634][ T7055] ? __kasan_kmalloc+0xaa/0xb0 [ 144.113667][ T7055] ? __pfx_woken_wake_function+0x10/0x10 [ 144.113696][ T7055] ? rcu_is_watching+0x12/0xc0 [ 144.113725][ T7055] ? file_tty_write.isra.0+0x694/0x890 [ 144.113760][ T7055] ? kfree+0x1e5/0x6c0 [ 144.113801][ T7055] ? __pfx_n_tty_write+0x10/0x10 [ 144.113848][ T7055] file_tty_write.isra.0+0x4d2/0x890 [ 144.113883][ T7055] redirected_tty_write+0xd4/0x120 [ 144.113915][ T7055] vfs_write+0x6ac/0x1050 [ 144.113959][ T7055] ? __pfx_redirected_tty_write+0x10/0x10 [ 144.113998][ T7055] ? __pfx_vfs_write+0x10/0x10 [ 144.114037][ T7055] ? find_held_lock+0x2b/0x80 [ 144.114077][ T7055] ksys_write+0x12a/0x250 [ 144.114116][ T7055] ? __pfx_ksys_write+0x10/0x10 [ 144.114159][ T7055] do_syscall_64+0x115/0x840 [ 144.114185][ T7055] ? clear_bhb_loop+0x40/0x90 [ 144.114219][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.114260][ T7055] RIP: 0033:0x7fca94d9de99 [ 144.114284][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.114313][ T7055] RSP: 002b:00007fca95bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.114341][ T7055] RAX: ffffffffffffffda RBX: 00007fca95026270 RCX: 00007fca94d9de99 [ 144.114360][ T7055] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 144.114378][ T7055] RBP: 00007fca94e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 144.114396][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.114414][ T7055] R13: 00007fca95026308 R14: 00007fca95026270 R15: 00007ffc755e9868 [ 144.114443][ T7055] [ 144.114454][ T7055] [ 144.114462][ T7055] The buggy address belongs to a vmalloc virtual mapping [ 144.114483][ T7055] Memory state around the buggy address: [ 144.114498][ T7055] ffffc90004a69480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.114520][ T7055] ffffc90004a69500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.114541][ T7055] >ffffc90004a69580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.114557][ T7055] ^ [ 144.114572][ T7055] ffffc90004a69600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.114592][ T7055] ffffc90004a69680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 144.114608][ T7055] ================================================================== [ 144.115726][ T7055] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.115749][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 144.115785][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.115804][ T7055] Call Trace: [ 144.115814][ T7055] [ 144.115825][ T7055] dump_stack_lvl+0x100/0x190 [ 144.115860][ T7055] vpanic+0x552/0x970 [ 144.115889][ T7055] ? __pfx_vpanic+0x10/0x10 [ 144.115927][ T7055] ? sys_imageblit+0x19fb/0x1d60 [ 144.115963][ T7055] panic+0xd1/0xe0 [ 144.115990][ T7055] ? __pfx_panic+0x10/0x10 [ 144.116031][ T7055] ? sys_imageblit+0x19fb/0x1d60 [ 144.116065][ T7055] ? preempt_schedule_common+0x42/0xc0 [ 144.116116][ T7055] check_panic_on_warn.cold+0x19/0x34 [ 144.116147][ T7055] end_report.part.0+0x3a/0x90 [ 144.116191][ T7055] kasan_report.cold+0xe/0x18 [ 144.116237][ T7055] ? sys_imageblit+0x19fb/0x1d60 [ 144.116275][ T7055] sys_imageblit+0x19fb/0x1d60 [ 144.116317][ T7055] ? __pfx_sys_imageblit+0x10/0x10 [ 144.116354][ T7055] ? prb_read_valid+0x78/0xa0 [ 144.116399][ T7055] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 144.116446][ T7055] soft_cursor+0x524/0xa10 [ 144.116477][ T7055] ? atomic_notifier_call_chain+0x60/0x1c0 [ 144.116512][ T7055] ? fb_get_color_depth+0x120/0x250 [ 144.116556][ T7055] bit_cursor+0xca1/0x1490 [ 144.116588][ T7055] ? __pfx_bit_cursor+0x10/0x10 [ 144.116620][ T7055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.116659][ T7055] ? get_color+0x1da/0x450 [ 144.116704][ T7055] ? __pfx_bit_cursor+0x10/0x10 [ 144.116732][ T7055] fbcon_cursor+0x43c/0x5e0 [ 144.116774][ T7055] ? add_softcursor+0x180/0x290 [ 144.116804][ T7055] set_cursor+0x1db/0x250 [ 144.116834][ T7055] con_write+0x89/0xb0 [ 144.116869][ T7055] n_tty_write+0x431/0x1160 [ 144.116919][ T7055] ? __pfx_n_tty_write+0x10/0x10 [ 144.116958][ T7055] ? __kasan_kmalloc+0xaa/0xb0 [ 144.116991][ T7055] ? __pfx_woken_wake_function+0x10/0x10 [ 144.117019][ T7055] ? rcu_is_watching+0x12/0xc0 [ 144.117050][ T7055] ? file_tty_write.isra.0+0x694/0x890 [ 144.117085][ T7055] ? kfree+0x1e5/0x6c0 [ 144.117128][ T7055] ? __pfx_n_tty_write+0x10/0x10 [ 144.117168][ T7055] file_tty_write.isra.0+0x4d2/0x890 [ 144.117208][ T7055] redirected_tty_write+0xd4/0x120 [ 144.117256][ T7055] vfs_write+0x6ac/0x1050 [ 144.117300][ T7055] ? __pfx_redirected_tty_write+0x10/0x10 [ 144.117338][ T7055] ? __pfx_vfs_write+0x10/0x10 [ 144.117377][ T7055] ? find_held_lock+0x2b/0x80 [ 144.117419][ T7055] ksys_write+0x12a/0x250 [ 144.117460][ T7055] ? __pfx_ksys_write+0x10/0x10 [ 144.117506][ T7055] do_syscall_64+0x115/0x840 [ 144.117535][ T7055] ? clear_bhb_loop+0x40/0x90 [ 144.117568][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.117597][ T7055] RIP: 0033:0x7fca94d9de99 [ 144.117620][ T7055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.117647][ T7055] RSP: 002b:00007fca95bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.117674][ T7055] RAX: ffffffffffffffda RBX: 00007fca95026270 RCX: 00007fca94d9de99 [ 144.117695][ T7055] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 144.117713][ T7055] RBP: 00007fca94e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 144.117730][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.117747][ T7055] R13: 00007fca95026308 R14: 00007fca95026270 R15: 00007ffc755e9868 [ 144.117776][ T7055] [ 144.118081][ T7055] Kernel Offset: disabled