last executing test programs: 9.34340197s ago: executing program 3 (id=56): mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x80000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0xa}, 0x1) remap_file_pages$auto(0x6a27, 0xffc, 0x0, 0x3, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 8.489915616s ago: executing program 3 (id=59): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) r2 = set_tid_address$auto(&(0x7f0000000080)=0xffffffc0) r3 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r3, 0x8000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)={0x6f8, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_COORDINATOR={0x4a0, 0x1e, 0x0, 0x1, [@typed={0x8, 0x157, 0x0, 0x0, @pid=r2}, @generic="a49b2390518e690cd8b61df001a322107076a0512f1cc20dfc8a58e364f9c44e5cf54d275ca0cbdcd25655b3f443cb880ec78901394a82aa4efed7d3ce5018b27cb8723821601225cbfeff4665475fb84e1d9ca4f25741ba99259ef5e7ee4ad677a4e7a06ebaaf534a50dfe676e9c0bd8501862e4edec730fdad6eb2ced88e805edfd92929eba8c6311dc4ae9cdffe60454a39091f4ca6af69c08a9f6e5881d20bc11fd8c6616c9b73425edc3027975ab708ded0e54e4f951fa51a", @generic="e62787ae294f4cb5baab9fb30a02cb31ec4b1bb7a16dd1ecb9562bb3fc5c38259c0963cc8cd4528674350da006857b22fd4c3d1984a4d98fe6b415fb7e0b4af53d3fbbc903aa33aa80c41cb0f2a084105336237c65592532ece8a96f90fb811161eee8ffb43cad33245bb8397513b3e41f90f8ca9f6e9095adb9f24cd961904e7fc4bc25416166aa88873b6a6115a3ebd7129d1a7110463df6c8b592bae551bc5307f3316186c040c7ec68d8a2a9da60682c50a06143ee0354b78fdc88f64a429e96c6476437adb490640d2864d20abcee186e6a776a5fadd441557c78e7ddd9a2b4832bcda489cc5f3dbbded4e2339b84", @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x2c1, 0xa5, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x8}, @generic="f2b70dd1d38b0a476558f1b49afa28ad05174117108a4a8ed29985bdf9855781c2d6e5f74601fccc01ad17a9b232b33e62888e70841beca4f3780726124ced0a0537a44a90608be9750b9333a27697925e008d36239fdfd62bf8989b0724c57dba794694e02803a78a4229ec3d303ac61f810eada03747b131e5afee581640bd0677f0297aab946cdf1cde5391f3e91d581823cd9b6612f268b54431d14d33d85f", @generic="a104596fce6defbcfaaf76a16a6d7e9d05022bdea08d054070da5a14d79cb09ff6da92b6e2b800eeb9a840799d28048de0f3f3a53561b0b30f1c56d12805121cc03faac4647581556bca758269307678df3969bc822ddb382e05b0c3978a2ba4e2556f2ddee8bcc7c782c67916e72baf70679aae39b1", @generic="eb688004b91005457ea485481b99a9e785427a051126b7f88c434a36cd9a87110063ce7253b7a24a506f9c2b7a0113d957e21f38207ba992cf536911b30dc3b2569e69c6462af8b84f23adba44d18b333c06018bf5df942b2242891acbee0b580be25e", @generic="bf81919b5defc5325019c745550b73f798e226c4c3d6696b1668b77b690b2d0bb29c0e2792a5df716e8baeeec1809e276da806c13cb4daafaf08b3803d6357531818993ebd35e8a791803e733775c39f50ffc3097946e9adc606b99b75871ea4c83699b274ed840c534e2d8f56a4e50b6bc6074d62c47975accd833cf5ee4a7f6f1fff15dd3cc05f7fc07c20ddaa8c24a31e87249bd619184ff93ea845250736ef119a1b093f94829b877586ff73785f1985902aa3e5f01ba8353bfd63a4ca068b", @generic="59a541e2b578ac873bfef249356a6897f1b52651c05057f9d4d745f14f349c16b9c10267a8bddb03a380075e3b8203def6474002cb118abdc9d770ed259527ef44363275a13d0c4a45e6efdd45db6d368fd5f7eb459c07d24b8cb0be87f96d103acf6a9c0e8d004ad96a98632e517ce4528b3e7b7892"]}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x4, 0x59}, @nested={0x4, 0x6}, @nested={0x4, 0x25}]}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xfd}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_SEC_LEVEL={0x223, 0x2d, 0x0, 0x1, [@typed={0x14, 0x90, 0x0, 0x0, @ipv6=@remote}, @generic, @generic="91f77a5a2b1b7eb13e0653d707d1f83ab7466d299517e3053f50", @typed={0x89, 0xce, 0x0, 0x0, @binary="94205830558e1866458773abbd66931a43e5c557d9f887817a11ba296f1fc62a962b8ad99675d972ed184217d00fbb02f562b7ce4b506a9d92ca93255b085c910da4ba27892711e0e9ea515305c2dafe28e5b2d9712511d1b986a2a0dabc999d9228964b0a6109d70ac59c7e260a6b085950564dd621eddc2d4f642b6a102094911c7e7529"}, @generic="9951b79d1a5c5e29d734c9176ce91ff8c2a1dc0d80308685ebbd3b34d634f0c7ed1607eea6fecf41bf570652013ba6f63559e221995c884e57db31fa9b9f418c8e43868eddfe03b4315c2bf67f633e23dc8187feb785001faf08129d12d3800fcd5207bb1aaa2adf872a84f0019e0e8a94af3e6412f2ccb195792cd4784396be4734ea9411f05b27a69219088e13120aafa0acb1138962e5da3515b9e6003a8dda071aabebcdb5b3af756d8ef1c1e656eb5cf617f2", @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@loopback}, @nested={0xa5, 0xb9, 0x0, 0x1, [@generic="1f254eb6a98de08a160228331766f487323329dcd8afe2d3fc902d3cbf885b985b1d9653fd505d588eed6d0698245485eb2a67ceeb187ed0131f5d6b70df9928db39726229278b3ff186191c6bfb8d0e272b420787cbebc60cf4bc7b9332201bd1f79938a3b7ac2ef83d51f92670ee0fc8a7410ec37b85c7ad0432a9667075133192b8377e4dc1e493", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xa0}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1000}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x8081}, 0x4010) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) 8.48825708s ago: executing program 0 (id=65): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r0, 0x84, 0x22, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0x1fff8}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 8.140567358s ago: executing program 3 (id=60): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e01b878eb479b027ac21f194e192ea38307da7f54a5f331933ec3ccb5a2cc337706aea3d20b54ceac7dea5abae711fa550df2485d5ef6ec49e1c486a4cad56808fafcd75d9aae6a30d1b639deb1b4e71206bcbf6500efdf", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_NO_CHECK(r0, 0x80, 0xb, &(0x7f0000000080)='/dev/ttynull\x00', &(0x7f00000000c0)=0x7ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x169382, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) 7.344037661s ago: executing program 1 (id=62): mmap$auto(0x0, 0x202000a, 0x3, 0x3d3b76d4, 0xfffffffffffffffa, 0x5) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) write$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) epoll_create1$auto(0x7fff) read$auto(0x3, 0x0, 0xfdef) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) r0 = socket(0x23, 0x4, 0x1) connect$auto(r0, &(0x7f00000000c0)=@xdp={0x2c, 0xf, 0x0, 0x5}, 0x40000055) connect$auto(r0, 0x0, 0x7f) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r1, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) 7.011722475s ago: executing program 0 (id=63): fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x100000001, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r1 = open_by_handle_at$auto(r0, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r0, 0x0, 0x2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x50080, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xffffffffffffffff, 0x4) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x941683, 0x0) ioctl$auto_SG_SET_DEBUG(r3, 0x227e, &(0x7f00000000c0)) sendfile$auto(r2, r2, 0x0, 0x7fffe000) read$auto(0x3, 0x0, 0x80) 6.732596297s ago: executing program 2 (id=66): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) r1 = pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x8, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x80, 0x676164a5, @_rt={0x0, 0x0, @sival_ptr=0x0}}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x800064d1, 0xffffffffffffffff) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x480080, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open(0x0, 0x0, 0x101) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(r5, 0x40246f4c, 0x38) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) 6.526951312s ago: executing program 3 (id=67): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x50080, 0x0) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) ftruncate$auto(r5, 0x71b2) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 2.668439552s ago: executing program 2 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) getsockopt$auto(r0, 0x10, 0xaf, &(0x7f0000000040)='},\x00', &(0x7f00000000c0)=0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x14, r1, 0x721, 0x70bd2e, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2004010) 2.554440941s ago: executing program 2 (id=71): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) (async) dup3$auto(0x8000000000000001, 0x5, 0x800080000) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bind$auto(r1, &(0x7f0000000180)=@generic={0x1a, "2f7cc654b9dff9cb8e402430c205"}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) (async) bpf$auto(0x0, 0x0, 0xf) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) madvise$auto(0x5, 0x5, 0x9) 2.150862638s ago: executing program 1 (id=72): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x80002, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0xfffffffffffffffe, 0xebe, r0, 0x26c) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x11, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xa888, r2, 0x10}, 0x22) (async) semget$auto(0x1ff, 0x5ee, 0x7) 2.150446312s ago: executing program 0 (id=73): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80401, 0x0) write$auto(0x3, 0x0, 0xfdef) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x80dc5521, 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x9) sendmsg$auto_NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x4004001) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x101202, 0x0) write$auto(r0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3a, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/ip6gre0/forwarding\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port5/early_stop\x00', 0xc0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x600c2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) write$auto(0x3, 0x0, 0x100082) socket(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1.976709156s ago: executing program 1 (id=74): pread64$auto(0xffffffffffffffff, 0x0, 0xffffff7f, 0x8000000000009) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x2) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) chdir$auto(&(0x7f0000000040)='./cgroup\x00') fallocate$auto(r0, 0x1, 0xd, 0x5) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x1f53, 0x2000000000002) r1 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) acct$auto(&(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/degp/dT\x02\xa2%h\xdd\xfep\x0e\xe6\x96w\x05r\x9c\xb6L\t0\x0f\x954\xf6\b\xa0&C\x83L\xc0\xe9\t\"\xa5\x8f\xce\x03\xb6\x16\x90\xc3\x97\xb7\n\"zB\xedCf\xfd \x87\xdb\x8f\x87\xe9\xea\x89-B\x06\x97\xcb+\xf09\xa1\xa5\x8d\x9b\b\xc8\x15\xb6|\xc7 t\xc8#\xf8,\xab\xa7\xf6\x03Z\x93\xf5\xc8\x87\xc9z}]\x85\xcc\xd5d\x02\x90{\xc3_\xd4>b\x96\xc5\x93\xb1\xa0E\xda\xb8\xb1\xa5G\r\xf4[\xec \"\xd9\x13\x803\xa6V\xe3\x06\xc72\xc0d|?\xfaA\xd2\xd6\xce\xfa\x9a\x98\x01\aXV.\xf15>;\xfat9\x8f\xbf\x8dRQf\xa4\x11\x13\xa0R\xcb\xc2v\x0f\xfc\xb3:f\x8f\xae\xcc\xbb\xd2\xfa\xef%\xfa\x85\xd9\x7fL\xad\xab\xd0\xd1\xc9vJr\x89\x90vq\x17\xbb\x82[D\xedJ\xe3{re\x8a\xeb~\xf1V<\xc2p~\x90\xe6\x1c\xf86\xeb\x11\xe2\x90\rr\xda.\x82\xbd\x0f\xbd{\x861\x03\xda-#\\^`\xc8\x01%V\xab\r\b\xde\xaa\xf8s\x86K\bR\x12\xbc{\xef\xc5<\xfd\x02\xe2\xf0\br\xde\n\xe4\xa6\v\xbcd\x9e\xe9\xbd\x18\x89\xa1\xe8w\x0e7\xae\x10e\xb6\xce\xe25\xdf\xd8\x12X`\xec\n\x87\x86X\x9b\x80i7\xcb\xed\xbdQ\xe4\xbb*\xedq\xb0>\x92\xb6W\b\x1eV\xadk\x11\xa9\xa1\x1f\xe1\xac\xb7\xd0\xcc\x94\xc1g\x8c\xe5\xf0\"\xe1\xc2. \\X\xe0\xd30\xa9X\x8dB\xb1\xddS\xbey\xb4]j \x96\xe3\x84\xcc\x02C\xd23\x16T\xden\"\xea\xf2j\b\xd2\xf6\xe5\xc2a\xaa\xefr\x80\rZ\x06s\xa0\xaf\x93MmM|\xfdN\x19\xf0RS\xc4\xca\x84H\x19T\xd4\xc4\x00\rO\xce\x04\x00\x00\x00\x00\x00\x00\x8a\xd0\xd48\xb4\x0e0\xff\x98\xce\x01\'\x83i\xd9\x94\xcf\xd7\x03_|J\x9b\x06q\x0e\xdf_/\x00\xfa\xcd\xb9\"L\x17\xc3\xdc\x16\xc7\x02\xb7\x91\x85Ot\xd0r\xc2r\xee\xce\xefU\x1a\x89\xd6,\x04\x96o\xb9\x1b\x19b&O\xf2\xf1\xef\xd1\x04A\x00q?\xa0\x00\xec\xf17\xbbpu\xeeW\xd7HSXt\xe4\xf07+\xc8\xd3\x87|\x15\x9b\x95t\x195l\xcb\xfd\xae@\xbd>\xdcd\xaa\x19r\xec_>\xf2\x7f\xe6\xe7\x1c\x1dE\x87k(k\x98\x81\xe8\t\"\xed\x94\xe33\xebk*\xc1\xcc\x98\x1d\xdd\x9c\v\xc3\xef\x9b\xc3\xca\x14\xb54\x8aS\xa0`*\xc4\xe6|n\xc7\xbf1\x02yc\xc2\xf3\xb1\x0e\xb4\xc5\xf3\xe2\x10\xa9\xbdQ\xb6\xc7\x81_3^y\x06\x0f\xec\x95\xf0QP\x1c\xc7;\x7f\x03i\x91\xff\xa0\xfek\xb1\xd1\xa3w\x1b\'[\x00|\xe6\xaa\xe3 \x9d\xb6g\xe2l\xe3q!\xfa\x15\xab\x9e\xe0\xbbp\xcfqT<\xe0\"\x17\x1a\xd3\xa6\x05\xa40\x9a\x90\x12\x17t%\x17+\x8b\xf7u\x93\xf9') execve$auto(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)=&(0x7f0000000380)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000440)=&(0x7f0000000400)='\\\\+^\x00') io_uring_register$auto_IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f00000004c0)="71573b84f63cc949", 0xffffff46) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) 1.677588527s ago: executing program 1 (id=75): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e01b878eb479b027ac21f194e192ea38307da7f54a5f331933ec3ccb5a2cc337706aea3d20b54ceac7dea5abae711fa550df2485d5ef6ec49e1c486a4cad56808fafcd75d9aae6a30d1b639deb1b4e71206bcbf6500efdf", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_NO_CHECK(r0, 0x80, 0xb, &(0x7f0000000080)='/dev/ttynull\x00', &(0x7f00000000c0)=0x7ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x169382, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) 1.512301652s ago: executing program 2 (id=77): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x400000000005}, 0x3fc) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x803}, 0x2004, 0x8) io_uring_setup$auto(0x6, 0x0) ioperm$auto(0x2, 0x7fc, 0x200000) ioperm$auto(0x80, 0x1180, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r2, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) pipe$auto(&(0x7f0000000140)=r1) socket(0x11, 0x80003, 0x300) 408.406532ms ago: executing program 0 (id=78): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x12b901, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x404081, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r1) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x2, 0x4, 0x400019) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 322.148272ms ago: executing program 3 (id=79): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0xc8) syz_clone3(&(0x7f0000000400)={0x100200, 0x0, 0x0, &(0x7f00000000c0), {0x38}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) madvise$auto(0x0, 0x2003f2, 0x15) r0 = fsopen$auto(0x0, 0x1) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x385f00, 0x0) ioctl$auto(r1, 0xc040564a, r1) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/driver_buffered_tids\x00', 0x10080, 0x0) fsmount$auto(r2, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto(r0, 0x1, r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto_MADV_RANDOM(0xffffffffffffffff, 0x1, 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000240)) bind$auto(0x3, 0x0, 0x6a) 268.931772ms ago: executing program 2 (id=80): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) r1 = prctl$auto_PR_SET_MM_START_DATA(0xf, 0x3, 0xffffffffffffffff, 0x9, 0xffff) ioctl$auto_TIOCSWINSZ2(r0, 0x5600, &(0x7f0000000380)) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040910) sendmsg$auto_NFC_CMD_GET_SE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0xfe}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x8008}, 0x4000) 190.979225ms ago: executing program 0 (id=81): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r1 = fcntl$auto(0x3, 0x4, 0xa553) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) shutdown$auto(0x200000003, 0x2) symlink$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$auto_SO_PASSPIDFD(r1, 0x7, 0x4c, &(0x7f00000000c0)='\'$[-\x00\xb0\xd6\x01\xae\xa4\xdczD8]\xafr\xf3\x15\x1e\x1a;\xc4K\f', 0x4) 164.984075ms ago: executing program 1 (id=82): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/231, 0xe7) mq_unlink$auto(&(0x7f0000000040)='/dev/rtc0\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x48, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0xf, 0xa, 0x0, 0x0, @str='ovs_packet\x00'}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 0s ago: executing program 2 (id=83): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x6, 0x1, 0xffffffffffffffff}, 0x7) mmap$auto(0x400000000000, 0x6, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x241, 0x0) r2 = clone3$auto(&(0x7f0000000040)={0x8, 0x4, 0xfffffffffffffff9, 0x10000, 0xf49, 0x8000000000000000, 0x10, 0x3d, 0xf, 0x1ff, 0x5184}, 0x1) prctl$auto(0xc0, 0x1, r2, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x111, r0, 0x9) mmap$auto(0x0, 0x81, 0x5, 0xebf, 0xfffffffffffffffa, 0x3) unshare$auto(0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) eventfd$auto(0xffffff40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 83.086894][ T5810] cgroup: Unknown subsys name 'net' [ 83.214442][ T5810] cgroup: Unknown subsys name 'cpuset' [ 83.224568][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.985386][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.056600][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.067818][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.075592][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.083928][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.093215][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.101104][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.107560][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.116277][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.124823][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.133118][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.201315][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.210703][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.220671][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.228006][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.236762][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.244039][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.251353][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.259174][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.264147][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.275193][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.892025][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.977214][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.107067][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.137381][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.209463][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.217366][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.224927][ T5823] bridge_slave_0: entered allmulticast mode [ 88.232460][ T5823] bridge_slave_0: entered promiscuous mode [ 88.265107][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.272372][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.279732][ T5821] bridge_slave_0: entered allmulticast mode [ 88.287478][ T5821] bridge_slave_0: entered promiscuous mode [ 88.295398][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.302701][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.310276][ T5823] bridge_slave_1: entered allmulticast mode [ 88.317717][ T5823] bridge_slave_1: entered promiscuous mode [ 88.343849][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.351069][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.358261][ T5821] bridge_slave_1: entered allmulticast mode [ 88.365845][ T5821] bridge_slave_1: entered promiscuous mode [ 88.446847][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.459020][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.501071][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.525691][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.559167][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.566585][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.574493][ T5830] bridge_slave_0: entered allmulticast mode [ 88.582028][ T5830] bridge_slave_0: entered promiscuous mode [ 88.589855][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.597350][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.604797][ T5831] bridge_slave_0: entered allmulticast mode [ 88.612237][ T5831] bridge_slave_0: entered promiscuous mode [ 88.644582][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.651869][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.659171][ T5830] bridge_slave_1: entered allmulticast mode [ 88.666790][ T5830] bridge_slave_1: entered promiscuous mode [ 88.674002][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.681296][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.688462][ T5831] bridge_slave_1: entered allmulticast mode [ 88.695942][ T5831] bridge_slave_1: entered promiscuous mode [ 88.716794][ T5821] team0: Port device team_slave_0 added [ 88.749555][ T5823] team0: Port device team_slave_0 added [ 88.757122][ T5821] team0: Port device team_slave_1 added [ 88.787152][ T5823] team0: Port device team_slave_1 added [ 88.807296][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.819636][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.853426][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.865158][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.887184][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.894410][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.920947][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.956884][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.964071][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.990444][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.002426][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.009409][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.035579][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.078475][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.085586][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.112244][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.135370][ T5830] team0: Port device team_slave_0 added [ 89.143809][ T5831] team0: Port device team_slave_0 added [ 89.151543][ T5830] team0: Port device team_slave_1 added [ 89.201834][ T5829] Bluetooth: hci0: command tx timeout [ 89.207585][ T5829] Bluetooth: hci1: command tx timeout [ 89.218589][ T5831] team0: Port device team_slave_1 added [ 89.246648][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.253857][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.280109][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.321548][ T5821] hsr_slave_0: entered promiscuous mode [ 89.328371][ T5821] hsr_slave_1: entered promiscuous mode [ 89.335866][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.343422][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.369542][ T5144] Bluetooth: hci3: command tx timeout [ 89.369991][ T5829] Bluetooth: hci2: command tx timeout [ 89.381916][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.407652][ T5823] hsr_slave_0: entered promiscuous mode [ 89.414339][ T5823] hsr_slave_1: entered promiscuous mode [ 89.421055][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.426878][ T5823] Cannot create hsr debugfs directory [ 89.433529][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.440799][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.467170][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.479630][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.486716][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.512690][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.600674][ T5830] hsr_slave_0: entered promiscuous mode [ 89.607214][ T5830] hsr_slave_1: entered promiscuous mode [ 89.613747][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 89.619484][ T5830] Cannot create hsr debugfs directory [ 89.650294][ T5831] hsr_slave_0: entered promiscuous mode [ 89.656985][ T5831] hsr_slave_1: entered promiscuous mode [ 89.663537][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 89.669299][ T5831] Cannot create hsr debugfs directory [ 90.117521][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.133510][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.145430][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.165936][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.237473][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.267822][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.280785][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.292672][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.383629][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.397374][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.431696][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.449830][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.516940][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.528375][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.539261][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.561723][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.596272][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.628844][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.670125][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.708701][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.718751][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.726014][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.748085][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755253][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.784129][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.791332][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.819597][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.845921][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.853173][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.907325][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.946526][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.953805][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.974245][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.981471][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.994263][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.046415][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.078605][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.129789][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.137010][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.199477][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.206711][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.283948][ T5144] Bluetooth: hci0: command tx timeout [ 91.289493][ T5829] Bluetooth: hci1: command tx timeout [ 91.441518][ T5829] Bluetooth: hci2: command tx timeout [ 91.446985][ T5829] Bluetooth: hci3: command tx timeout [ 91.481188][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.583574][ T5821] veth0_vlan: entered promiscuous mode [ 91.607317][ T5821] veth1_vlan: entered promiscuous mode [ 91.701071][ T5821] veth0_macvtap: entered promiscuous mode [ 91.734009][ T5821] veth1_macvtap: entered promiscuous mode [ 91.782928][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.828504][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.855289][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.876934][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.906798][ T1087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.924321][ T10] cfg80211: failed to load regulatory.db [ 91.942189][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.951075][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.959888][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.006010][ T5823] veth0_vlan: entered promiscuous mode [ 92.016797][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.048871][ T5823] veth1_vlan: entered promiscuous mode [ 92.137035][ T5830] veth0_vlan: entered promiscuous mode [ 92.165830][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.182024][ T5830] veth1_vlan: entered promiscuous mode [ 92.191897][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.263740][ T5831] veth0_vlan: entered promiscuous mode [ 92.272196][ T5823] veth0_macvtap: entered promiscuous mode [ 92.289922][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.301479][ T5831] veth1_vlan: entered promiscuous mode [ 92.307348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.326838][ T5823] veth1_macvtap: entered promiscuous mode [ 92.359937][ T5830] veth0_macvtap: entered promiscuous mode [ 92.379552][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.422544][ T5830] veth1_macvtap: entered promiscuous mode [ 92.442743][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.459110][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.504432][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514541][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.547908][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.585986][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.598764][ T5831] veth0_macvtap: entered promiscuous mode [ 92.609047][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.640074][ T5831] veth1_macvtap: entered promiscuous mode [ 92.649551][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.785147][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.797818][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920848][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.928275][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.939246][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.983976][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.027173][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.045430][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.060842][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.110188][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.122090][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180110][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.193074][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.212563][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.356505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.367489][ T5144] Bluetooth: hci0: command tx timeout [ 93.373359][ T5829] Bluetooth: hci1: command tx timeout [ 93.380728][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.521779][ T5829] Bluetooth: hci3: command tx timeout [ 93.527234][ T5144] Bluetooth: hci2: command tx timeout [ 93.575484][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.590451][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.618550][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.627581][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.720232][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.729426][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.130017][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.280006][ T5933] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.829180][ T5920] zswap: compressor not available [ 95.366049][ T5950] bond0: no command found in slaves file - use +ifname or -ifname [ 95.440487][ T5829] Bluetooth: hci1: command tx timeout [ 95.446281][ T5144] Bluetooth: hci0: command tx timeout [ 95.613527][ T5144] Bluetooth: hci3: command tx timeout [ 95.613540][ T5829] Bluetooth: hci2: command tx timeout [ 96.012974][ T5954] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 96.990708][ T5973] bond0: invalid ARP target specified [ 97.535753][ T5980] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 98.847644][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.856754][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.989042][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.214808][ T5998] Zero length message leads to an empty skb [ 99.981535][ T6013] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 100.008514][ T6013] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 100.070932][ T6013] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 100.079614][ T6013] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 100.131690][ T6013] page dumped because: unmovable page [ 100.174571][ T6013] page_owner info is not present (never set?) [ 100.540973][ T6019] kafs: addr_prefs: Too many elements in string [ 101.296830][ T6030] vivid-007: ================= START STATUS ================= [ 101.296888][ T6030] vivid-007: Generate PTS: true [ 101.296935][ T6030] vivid-007: Generate SCR: true [ 101.296963][ T6030] tpg source WxH: 320x240 (Y'CbCr) [ 101.296977][ T6030] tpg field: 1 [ 101.296986][ T6030] tpg crop: (0,0)/320x240 [ 101.297001][ T6030] tpg compose: (0,0)/320x240 [ 101.297017][ T6030] tpg colorspace: 8 [ 101.297026][ T6030] tpg transfer function: 0/0 [ 101.297037][ T6030] tpg Y'CbCr encoding: 0/0 [ 101.297049][ T6030] tpg quantization: 0/0 [ 101.297060][ T6030] tpg RGB range: 0/2 [ 101.297071][ T6030] vivid-007: ================== END STATUS ================== [ 102.100715][ T6046] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.985328][ T6094] bond0: no command found in slaves file - use +ifname or -ifname [ 106.038535][ T6098] vivid-007: ================= START STATUS ================= [ 106.056753][ T6098] vivid-007: Generate PTS: true [ 106.064121][ T6098] vivid-007: Generate SCR: true [ 106.080666][ T6098] tpg source WxH: 320x240 (Y'CbCr) [ 106.096171][ T6098] tpg field: 1 [ 106.162887][ T6098] tpg crop: (0,0)/320x240 [ 106.177070][ T6098] tpg compose: (0,0)/320x240 [ 106.202361][ T6098] tpg colorspace: 8 [ 106.206211][ T6098] tpg transfer function: 0/0 [ 106.241487][ T6098] tpg Y'CbCr encoding: 0/0 [ 106.245988][ T6098] tpg quantization: 0/0 [ 106.250174][ T6098] tpg RGB range: 0/2 [ 106.343839][ T6098] vivid-007: ================== END STATUS ================== [ 107.652250][ T6119] bond0: invalid ARP target specified [ 107.695995][ T6099] zswap: compressor not available [ 111.014788][ T6168] bond0: no command found in slaves file - use +ifname or -ifname [ 111.919012][ T6176] vivid-007: ================= START STATUS ================= [ 111.928900][ T6176] vivid-007: Generate PTS: true [ 111.934927][ T6176] vivid-007: Generate SCR: true [ 111.939982][ T6176] tpg source WxH: 320x240 (Y'CbCr) [ 112.026409][ T6176] tpg field: 1 [ 112.034051][ T6176] tpg crop: (0,0)/320x240 [ 112.071617][ T6176] tpg compose: (0,0)/320x240 [ 112.076335][ T6176] tpg colorspace: 8 [ 112.080208][ T6176] tpg transfer function: 0/0 [ 112.142580][ T6176] tpg Y'CbCr encoding: 0/0 [ 112.170985][ T6176] tpg quantization: 0/0 [ 112.208002][ T6176] tpg RGB range: 0/2 [ 112.225428][ T6176] vivid-007: ================== END STATUS ================== [ 113.089669][ T6195] process 'syz.3.56' launched ':,' with NULL argv: empty string added [ 113.263961][ T6195] mmap: syz.3.56 (6195) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.302169][ T6214] zswap: compressor not available [ 115.828041][ T6234] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 116.654012][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 119.567349][ T5144] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 119.567394][ T5144] Bluetooth: hci3: unexpected subevent 0x06 length: 725 > 10 [ 119.621658][ T6259] vivid-007: ================= START STATUS ================= [ 119.629613][ T6259] vivid-007: Generate PTS: true [ 119.635552][ T6259] vivid-007: Generate SCR: true [ 119.640874][ T6259] tpg source WxH: 320x240 (Y'CbCr) [ 119.646029][ T6259] tpg field: 1 [ 119.649429][ T6259] tpg crop: (0,0)/320x240 [ 119.653391][ T6257] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.656737][ T6259] tpg compose: (0,0)/320x240 [ 119.671738][ T6259] tpg colorspace: 8 [ 119.675612][ T6259] tpg transfer function: 0/0 [ 119.680818][ T6259] tpg Y'CbCr encoding: 0/0 [ 119.686537][ T6259] tpg quantization: 0/0 [ 119.695950][ T6259] tpg RGB range: 0/2 [ 119.699978][ T6259] vivid-007: ================== END STATUS ================== [ 120.035196][ T6269] ecryptfs_miscdev_write: Invalid packet size [0] [ 120.919744][ T6297] FAULT_INJECTION: forcing a failure. [ 120.919744][ T6297] name failslab, interval 1, probability 0, space 0, times 1 [ 120.945026][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 120.945065][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.945092][ T6297] Call Trace: [ 120.945102][ T6297] [ 120.945117][ T6297] dump_stack_lvl+0x100/0x190 [ 120.945192][ T6297] should_fail_ex.cold+0x5/0xa [ 120.945230][ T6297] should_failslab+0xc2/0x120 [ 120.945267][ T6297] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 120.945320][ T6297] ? __d_alloc+0x34/0xa80 [ 120.945355][ T6297] ? lockdep_hardirqs_on+0x78/0x100 [ 120.945389][ T6297] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 120.945437][ T6297] __d_alloc+0x34/0xa80 [ 120.945479][ T6297] d_alloc_pseudo+0x1c/0xc0 [ 120.945545][ T6297] alloc_file_pseudo+0xcf/0x230 [ 120.945593][ T6297] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.945637][ T6297] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 120.945680][ T6297] create_pipe_files+0x360/0x970 [ 120.945724][ T6297] do_pipe2+0xbd/0x1e0 [ 120.945760][ T6297] ? __pfx_do_pipe2+0x10/0x10 [ 120.945813][ T6297] __x64_sys_pipe+0x33/0x50 [ 120.945850][ T6297] do_syscall_64+0x106/0xf80 [ 120.945886][ T6297] ? clear_bhb_loop+0x40/0x90 [ 120.945928][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.945961][ T6297] RIP: 0033:0x7f3a3499c819 [ 120.945997][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.946033][ T6297] RSP: 002b:00007f3a358c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 120.946064][ T6297] RAX: ffffffffffffffda RBX: 00007f3a34c16180 RCX: 00007f3a3499c819 [ 120.946085][ T6297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 120.946106][ T6297] RBP: 00007f3a34a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 120.946126][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.946145][ T6297] R13: 00007f3a34c16218 R14: 00007f3a34c16180 R15: 00007fff5d5089c8 [ 120.946214][ T6297] [ 121.543813][ T6294] zswap: compressor not available [ 121.600432][ T5144] Bluetooth: hci3: command tx timeout [ 122.151468][ T9] ================================================================== [ 122.151495][ T9] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 122.151565][ T9] Write of size 8 at addr ffffc900040294e0 by task kworker/0:0/9 [ 122.151589][ T9] [ 122.151601][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 122.151633][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.151656][ T9] Workqueue: events_power_efficient fb_flashcursor [ 122.151690][ T9] Call Trace: [ 122.151699][ T9] [ 122.151710][ T9] dump_stack_lvl+0x100/0x190 [ 122.151754][ T9] print_report+0x156/0x4c9 [ 122.151795][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 122.151847][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 122.151891][ T9] kasan_report+0xdf/0x1e0 [ 122.151924][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 122.151974][ T9] sys_imageblit+0x19fb/0x1d60 [ 122.152027][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 122.152086][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 122.152124][ T9] soft_cursor+0x524/0xa10 [ 122.152170][ T9] bit_cursor+0xe58/0x16f0 [ 122.152213][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 122.152257][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.152308][ T9] ? get_color+0x1da/0x450 [ 122.152342][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 122.152382][ T9] fb_flashcursor+0x338/0x430 [ 122.152417][ T9] process_one_work+0xa23/0x19a0 [ 122.152473][ T9] ? __pfx_process_one_work+0x10/0x10 [ 122.152536][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 122.152570][ T9] worker_thread+0x5ef/0xe50 [ 122.152620][ T9] ? kthread+0x13a/0x450 [ 122.152658][ T9] ? __pfx_worker_thread+0x10/0x10 [ 122.152700][ T9] kthread+0x370/0x450 [ 122.152738][ T9] ? __pfx_kthread+0x10/0x10 [ 122.152780][ T9] ret_from_fork+0x754/0xd80 [ 122.152824][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 122.152871][ T9] ? __switch_to+0x7b4/0x1120 [ 122.152905][ T9] ? __pfx_kthread+0x10/0x10 [ 122.152945][ T9] ret_from_fork_asm+0x1a/0x30 [ 122.152987][ T9] [ 122.152997][ T9] [ 122.153005][ T9] The buggy address belongs to a vmalloc virtual mapping [ 122.153024][ T9] Memory state around the buggy address: [ 122.153045][ T9] ffffc90004029380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.153066][ T9] ffffc90004029400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.153087][ T9] >ffffc90004029480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.153103][ T9] ^ [ 122.153120][ T9] ffffc90004029500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.153141][ T9] ffffc90004029580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 122.153157][ T9] ================================================================== [ 122.153377][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.153397][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 122.153430][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.153449][ T9] Workqueue: events_power_efficient fb_flashcursor [ 122.153481][ T9] Call Trace: [ 122.153491][ T9] [ 122.153502][ T9] dump_stack_lvl+0x100/0x190 [ 122.153544][ T9] vpanic+0x552/0x970 [ 122.153573][ T9] ? __pfx_vpanic+0x10/0x10 [ 122.153601][ T9] ? mark_held_locks+0x40/0x70 [ 122.153641][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 122.153685][ T9] panic+0xd1/0xe0 [ 122.153711][ T9] ? __pfx_panic+0x10/0x10 [ 122.153740][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 122.153784][ T9] ? preempt_schedule_common+0x42/0xc0 [ 122.153815][ T9] ? check_panic_on_warn+0x1f/0x90 [ 122.153858][ T9] check_panic_on_warn.cold+0x19/0x34 [ 122.153890][ T9] end_report.part.0+0x3a/0x90 [ 122.153929][ T9] kasan_report.cold+0xe/0x18 [ 122.153990][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 122.154048][ T9] sys_imageblit+0x19fb/0x1d60 [ 122.154104][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 122.154159][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 122.154198][ T9] soft_cursor+0x524/0xa10 [ 122.154256][ T9] bit_cursor+0xe58/0x16f0 [ 122.154298][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 122.154360][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.154393][ T9] ? get_color+0x1da/0x450 [ 122.154426][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 122.154465][ T9] fb_flashcursor+0x338/0x430 [ 122.154500][ T9] process_one_work+0xa23/0x19a0 [ 122.154554][ T9] ? __pfx_process_one_work+0x10/0x10 [ 122.154606][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 122.154643][ T9] worker_thread+0x5ef/0xe50 [ 122.154696][ T9] ? kthread+0x13a/0x450 [ 122.154735][ T9] ? __pfx_worker_thread+0x10/0x10 [ 122.154789][ T9] kthread+0x370/0x450 [ 122.154827][ T9] ? __pfx_kthread+0x10/0x10 [ 122.154867][ T9] ret_from_fork+0x754/0xd80 [ 122.154931][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 122.154980][ T9] ? __switch_to+0x7b4/0x1120 [ 122.155015][ T9] ? __pfx_kthread+0x10/0x10 [ 122.155064][ T9] ret_from_fork_asm+0x1a/0x30 [ 122.155108][ T9] [ 122.155701][ T9] Kernel Offset: disabled