last executing test programs: 14.10447994s ago: executing program 1 (id=5): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) mmap$auto(0xfed, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)=0x28003) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)="22b4631969d61891e78ebf3ebb439c157eacfe4db4b6c2e070f1afe386c5c2640000002003000080a465ff35272bb991d5339f78f3e2ff58b28300bc9491a191529de3af4c1f8437d0cf53820cddc51f257a9c216dd2d6f7a147b5e990b95c4cfa7b4d38fa5cbf80632dcc1e71aa562e0a33", 0x72) mmap$auto(0x0, 0x2020009, 0x23, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x8082, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48802, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) socket(0x18, 0x5, 0x2) socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3af69885e7f19772b9d0dc4295e151bd0c37592fd2f770bba863a89d6fa43095c8ea5d7d3e716b3804e7450a182c4eac291c2c1a6dd8f19f41356fe6c0d7da42bf384021f4e6e7d90535dc4dad7447e775e74db2568ab69a78fb1599575ea01d00c991a580982ab7e8f0cf4870ac043997fb79e099ec36d5ef1876f8efebfecfebc4d6e95138c19c19898f4eab065d67b901bd763369ea9e73ee48451fa1805946420d725f727b9dafba2d3fbf5aa0e00058785e06450338b6870e95c69bc3ab8570d2a4ebad8eb69136f428e01b26fb6f5e048c2bc14f464cec0a31264e8d994999749c6e0c0d90f11135676f525108"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004004}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) 10.984996862s ago: executing program 1 (id=12): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto(0x3, 0x80000541b, 0x38) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) get_mempolicy$auto(0x0, 0x0, 0x2, 0x86, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card2\x00', 0x688200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x801, 0x100) setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/use_carrier\x00', 0x103b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x8080000001) mmap$auto(0x4, 0x6, 0xdb, 0xebb, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x34, 0xffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 9.555997382s ago: executing program 1 (id=18): mmap$auto(0x0, 0x2, 0x6, 0x10, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 7.270747544s ago: executing program 3 (id=23): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x48d81, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$auto(r0, 0x0, 0x13) socket(0xa, 0x3, 0x100) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x800, 0x0) select$auto(0x7fffffff, 0x0, 0x0, &(0x7f0000000140)={[0x800, 0x5, 0x1800000, 0xfffffffffffffffd, 0x948b, 0x100000001, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50aa, 0x6d3c, 0x6, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x79c, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0x400000000000f]}, 0x0) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x1, &(0x7f0000000080)={0x80000003, 0xd, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x5}, {0x100, 0x1, 0x80052, 0x5, 0x5, 0x40, 0x104, 0x0, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x1, 0x0, 0x7) madvise$auto(0x3, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) 6.706456882s ago: executing program 1 (id=26): mmap$auto(0x0, 0x2, 0x6, 0x10, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x311442, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 6.037567211s ago: executing program 2 (id=27): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_BLKBSZGET(r0, 0x80081270, &(0x7f00000001c0)=0xbbc) listen$auto(0x3, 0x81) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1a1c42, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) eventfd2$auto(0x5, 0xe) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x8, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x6, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x0, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x8, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 6.011407226s ago: executing program 0 (id=28): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 5.997216738s ago: executing program 3 (id=29): mmap$auto(0x0, 0x400008, 0xe5, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x80000000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c00160067"], 0x28}, 0x1, 0x0, 0x0, 0x4004054}, 0x4c810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) r0 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0xfc, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) close$auto(r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x200020000000, 0x3, 0x12) madvise$auto(0x5, 0x4, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40601, 0x0) write$auto(r6, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5.502934571s ago: executing program 0 (id=30): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x40000) ioperm$auto(0x84, 0x7, 0x4000008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x802, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) 4.845333848s ago: executing program 3 (id=31): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r0, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x0, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x20000000000003, 0x8000400, 0x7, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x9, 0x0, 0x37}, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x602182, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='/dev/mtd0\x00', 0x1a10, 0xfffffffffffffffb) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x68082, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) 4.296095175s ago: executing program 1 (id=32): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r5, 0x3a, 0x1) swapon$auto(0x0, 0x2efe) 4.292493487s ago: executing program 2 (id=33): kexec_load$auto(0x8, 0x8, &(0x7f0000000300)={@buf=&(0x7f00000002c0)="3edf2cd778f3dfb939dff16550ffb45a1188a856d4b6d5ef260c6af7a59cb0114551f312cf16a3ae6e09b99b4f6fccc7c0", 0x4, 0x4, 0x9}, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f0000000580)="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", 0x4e00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/netdevsim/unlink_device\x00', 0x10b081, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) shmctl$auto_SHM_UNLOCK(0x0, 0xc, 0x0) sysfs$auto(0x5, 0x10000000000002f, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x84800, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r7, &(0x7f0000000240)="71045fe4393806f43ee3d3c99fce77e61cd10263b88dafc12adbd02ac010d4a85521ed6bbd494e6e693f6924ddbb3c5c5ec5f593b9186a44a8c7090acb9e5e9b1ffe5dc6fcdbc3fa8130c34192601750e6a52a312334461d2226e4ebc96b1a57c6e90d29c29f04", 0x67) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) io_uring_register$auto_IORING_REGISTER_PERSONALITY(r0, 0x9, &(0x7f00000001c0)="7e9d22a2fb5b424c2be7a8bf6ac94877342774", 0x68) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf44000000050000000c0001800800010000000000000db09dd954530bc2bcc32f0e07fb68fad84e6bec73f01ac45dae848ac13bc4f207aeffd711f605400c12cfbd7d5d44f50400f6d497a318f520fd7caa61c4afdb31573cd5216793354b763750829b03a6f26e6c", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(r3, 0x0, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/jfs/TxAnchor\x00', 0x80000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/team_slave_1\x00', 0x100, 0x0) 4.011065521s ago: executing program 2 (id=34): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r0, 0x80081270, &(0x7f00000001c0)=0xbbc) listen$auto(0x3, 0x81) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1a1c42, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) eventfd2$auto(0x5, 0xe) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(0x3, 0x0, 0x5c8) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x8, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x6, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x0, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x8, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 3.928448442s ago: executing program 3 (id=35): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) mmap$auto(0xfed, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)=0x28003) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)="22b4631969d61891e78ebf3ebb439c157eacfe4db4b6c2e070f1afe386c5c2640000002003000080a465ff35272bb991d5339f78f3e2ff58b28300bc9491a191529de3af4c1f8437d0cf53820cddc51f257a9c216dd2d6f7a147b5e990b95c4cfa7b4d38fa5cbf80632dcc1e71aa562e0a33", 0x72) mmap$auto(0x0, 0x2020009, 0x23, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x8082, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48802, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) socket(0x18, 0x5, 0x2) socket(0x1d, 0x2, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="3af69885e7f19772b9d0dc4295e151bd0c37592fd2f770bba863a89d6fa43095c8ea5d7d3e716b3804e7450a182c4eac291c2c1a6dd8f19f41356fe6c0d7da42bf384021f4e6e7d90535dc4dad7447e775e74db2568ab69a78fb1599575ea01d00c991a580982ab7e8f0cf4870ac043997fb79e099ec36d5ef1876f8efebfecfebc4d6e95138c19c19898f4eab065d67b901bd763369ea9e73ee48451fa1805946420d725f727b9dafba2d3fbf5aa0e00058785e06450338b6870e95c69bc3ab8570d2a4ebad8eb69136f428e01b26fb6f5e048c2bc14f464cec0a31264e8d994999749c6e0c0d90f11135676f525108"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004004}, 0x20008041) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xd}, 0x2}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) 3.679822574s ago: executing program 0 (id=36): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 3.052747917s ago: executing program 0 (id=37): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48d81, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$auto(r0, 0x0, 0x13) socket(0xa, 0x3, 0x100) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x7, 0x637b, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x800, 0x0) select$auto(0x7fffffff, 0x0, 0x0, &(0x7f0000000140)={[0x800, 0x5, 0x1800000, 0xfffffffffffffffd, 0x948b, 0x100000001, 0x800295f4da0a, 0x400, 0x40000000000003, 0x462, 0x80000001, 0x50aa, 0x6d3c, 0x6, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x20a, 0x6, 0xfffffffffffffff6, 0x7, 0x9, 0x79c, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0x400000000000f]}, 0x0) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x1, &(0x7f0000000080)={0x80000003, 0xd, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x5}, {0x100, 0x1, 0x80052, 0x5, 0x5, 0x40, 0x104, 0x0, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x1, 0x0, 0x7) madvise$auto(0x3, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) 2.381891161s ago: executing program 2 (id=38): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r0, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_open$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x82080, 0x0) setns(r3, 0x60020000) 1.990767621s ago: executing program 0 (id=39): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyqe\x00', 0x100, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_active\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/17, 0x11) r3 = socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card2\x00', 0x80802, 0x0) ioctl$auto(r5, 0x800064bd, r5) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x10040040) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) 1.601218473s ago: executing program 3 (id=40): syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'pim6reg0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(r0, 0x0, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0xcc, 0x6, 0x9, 0x2, 0x1ff, 0x6, 0x4, 0x408, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0xff, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0xcb}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbe2df2502000000080002000100000028e5ff102d084475a9db785e92655ba955715583cc8a50063b3f5b86a34d4538191f112a8151d1cd40b92ef28fecf0ee5384dc719adb2cdb504b5061949d21c6c08399099c7aeb25a44be34571d51bd758e1d8a1135a4f734dc9494b025b6bdf4fbbf44b5355558911de93218243672f35b4eebeff5095141729de40aee41da2a874a3096581f618dd02d4f9ea95617b64f8b2b91222aa5c540d25e26833945b44d647c86bb617"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000280), r1) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="56020000", @ANYRES16=r3, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x29882fe5309675a8) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001340)='/sys/module/l1oip/parameters/limit\x00', 0x80302, 0x0) 1.259543861s ago: executing program 2 (id=41): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) read$auto_buffer_subbuf_size_fops_trace(r1, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) write$auto(r0, 0x0, 0x10007c) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x4) gettid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) statx$auto(r2, 0x0, 0x1001, 0x82, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) 790.866675ms ago: executing program 0 (id=42): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 426.693417ms ago: executing program 2 (id=43): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r0, 0x80081270, 0x0) listen$auto(0x3, 0x81) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1a1c42, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) eventfd2$auto(0x5, 0xe) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x8, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x6, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x0, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x8, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 293.636175ms ago: executing program 3 (id=44): mmap$auto(0x0, 0x2, 0x6, 0x10, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x3b) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x311442, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00\xd6I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xa8\xd3D\xd6O\xffmU\x03\xbcK\x86\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x8e\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x00\x00\x00\x00\x00\x00', 0x100000a3d9) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 0s ago: executing program 1 (id=45): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/179, 0xb3) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x40000) ioperm$auto(0x84, 0x7, 0x4000008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x802, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 80.580775][ T5812] cgroup: Unknown subsys name 'net' [ 80.707160][ T5812] cgroup: Unknown subsys name 'cpuset' [ 80.715813][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.134889][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.854733][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.854860][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.862338][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.878612][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.879318][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.887097][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.895198][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.902094][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.907169][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.914582][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.923309][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.929405][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.935540][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.942917][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.950012][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.957054][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.970581][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.972783][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.985474][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.992873][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.433474][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.487387][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.540972][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.673362][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.681111][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.688499][ T5826] bridge_slave_0: entered allmulticast mode [ 84.695455][ T5826] bridge_slave_0: entered promiscuous mode [ 84.713247][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 84.725658][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.732807][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.740247][ T5826] bridge_slave_1: entered allmulticast mode [ 84.747254][ T5826] bridge_slave_1: entered promiscuous mode [ 84.835832][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843047][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.850408][ T5823] bridge_slave_0: entered allmulticast mode [ 84.857312][ T5823] bridge_slave_0: entered promiscuous mode [ 84.881158][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.890535][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.898282][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.905688][ T5823] bridge_slave_1: entered allmulticast mode [ 84.912595][ T5823] bridge_slave_1: entered promiscuous mode [ 84.919969][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.927255][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.934483][ T5824] bridge_slave_0: entered allmulticast mode [ 84.941334][ T5824] bridge_slave_0: entered promiscuous mode [ 84.955440][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.993691][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.000892][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.008334][ T5824] bridge_slave_1: entered allmulticast mode [ 85.015287][ T5824] bridge_slave_1: entered promiscuous mode [ 85.029965][ T5826] team0: Port device team_slave_0 added [ 85.065535][ T5826] team0: Port device team_slave_1 added [ 85.073743][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.117264][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.139687][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.148928][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.156419][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.163514][ T5825] bridge_slave_0: entered allmulticast mode [ 85.170591][ T5825] bridge_slave_0: entered promiscuous mode [ 85.198847][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.208398][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.215725][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.222825][ T5825] bridge_slave_1: entered allmulticast mode [ 85.229911][ T5825] bridge_slave_1: entered promiscuous mode [ 85.237519][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.244624][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.270848][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.284747][ T5823] team0: Port device team_slave_0 added [ 85.309899][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.317166][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.343364][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.356288][ T5823] team0: Port device team_slave_1 added [ 85.384647][ T5824] team0: Port device team_slave_0 added [ 85.417187][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.428452][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.439048][ T5824] team0: Port device team_slave_1 added [ 85.502826][ T5825] team0: Port device team_slave_0 added [ 85.510055][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.517337][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.543502][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.564513][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.571470][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.597842][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.610626][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.618099][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.644225][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.657164][ T5825] team0: Port device team_slave_1 added [ 85.671130][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.678838][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.704855][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.734725][ T5826] hsr_slave_0: entered promiscuous mode [ 85.741008][ T5826] hsr_slave_1: entered promiscuous mode [ 85.801627][ T5824] hsr_slave_0: entered promiscuous mode [ 85.807898][ T5824] hsr_slave_1: entered promiscuous mode [ 85.814688][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 85.820454][ T5824] Cannot create hsr debugfs directory [ 85.828030][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.835113][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.861648][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.874257][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.881188][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.907269][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.985096][ T5834] Bluetooth: hci2: command tx timeout [ 85.990720][ T5834] Bluetooth: hci0: command tx timeout [ 86.040494][ T5823] hsr_slave_0: entered promiscuous mode [ 86.047375][ T5823] hsr_slave_1: entered promiscuous mode [ 86.053356][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 86.059338][ T5823] Cannot create hsr debugfs directory [ 86.074844][ T5834] Bluetooth: hci3: command tx timeout [ 86.074851][ T5829] Bluetooth: hci1: command tx timeout [ 86.103146][ T5825] hsr_slave_0: entered promiscuous mode [ 86.109922][ T5825] hsr_slave_1: entered promiscuous mode [ 86.116197][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.121924][ T5825] Cannot create hsr debugfs directory [ 86.498487][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.510763][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.520965][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.538566][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.587154][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.601124][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.618907][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.640163][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.703806][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.736554][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.772280][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.811559][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.941646][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.955823][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.991879][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.035122][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.057343][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.110796][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.130819][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.150484][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.157769][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.188408][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.197949][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.205063][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.249338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.256709][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.281377][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.288554][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.315815][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.353356][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.375249][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.382356][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.409311][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.416422][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.466474][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.538389][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.590114][ T4142] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.597325][ T4142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.631455][ T4142] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.638618][ T4142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.970166][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.062228][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.066085][ T5834] Bluetooth: hci2: command tx timeout [ 88.074853][ T5829] Bluetooth: hci0: command tx timeout [ 88.102951][ T5824] veth0_vlan: entered promiscuous mode [ 88.145106][ T5834] Bluetooth: hci1: command tx timeout [ 88.154327][ T5834] Bluetooth: hci3: command tx timeout [ 88.158775][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.186086][ T5824] veth1_vlan: entered promiscuous mode [ 88.213801][ T5826] veth0_vlan: entered promiscuous mode [ 88.257364][ T5826] veth1_vlan: entered promiscuous mode [ 88.273040][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.309335][ T5825] veth0_vlan: entered promiscuous mode [ 88.331497][ T5825] veth1_vlan: entered promiscuous mode [ 88.347856][ T5824] veth0_macvtap: entered promiscuous mode [ 88.375946][ T5826] veth0_macvtap: entered promiscuous mode [ 88.386730][ T5824] veth1_macvtap: entered promiscuous mode [ 88.410615][ T5826] veth1_macvtap: entered promiscuous mode [ 88.426423][ T5825] veth0_macvtap: entered promiscuous mode [ 88.436476][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.462307][ T5825] veth1_macvtap: entered promiscuous mode [ 88.479614][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.489539][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.511498][ T5823] veth0_vlan: entered promiscuous mode [ 88.530402][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.541099][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.552872][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.567001][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.575927][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.606528][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.620888][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.633235][ T5823] veth1_vlan: entered promiscuous mode [ 88.651812][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.660659][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671259][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.695286][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.765081][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.790916][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.800227][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.815041][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.823473][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.837838][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.860784][ T5823] veth0_macvtap: entered promiscuous mode [ 88.908804][ T5823] veth1_macvtap: entered promiscuous mode [ 88.928167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.942481][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.989926][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.000963][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.014290][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.036133][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.040905][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.073783][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.085878][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.122345][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.132962][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.163570][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.175295][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.187554][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196858][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.293897][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.303960][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.324102][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.348528][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.572311][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.573710][ T5920] FAULT_INJECTION: forcing a failure. [ 89.573710][ T5920] name failslab, interval 1, probability 0, space 0, times 1 [ 89.583910][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.663067][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 89.663090][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.663104][ T5920] Call Trace: [ 89.663111][ T5920] [ 89.663117][ T5920] dump_stack_lvl+0x100/0x190 [ 89.663145][ T5920] should_fail_ex.cold+0x5/0xa [ 89.663172][ T5920] should_failslab+0xc2/0x120 [ 89.663193][ T5920] __kmalloc_cache_noprof+0x80/0x810 [ 89.663210][ T5920] ? drm_atomic_state_alloc+0xb8/0x120 [ 89.663230][ T5920] ? drm_atomic_state_alloc+0xb8/0x120 [ 89.663246][ T5920] drm_atomic_state_alloc+0xb8/0x120 [ 89.663264][ T5920] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 89.663285][ T5920] ? trace_contention_end+0xd6/0x110 [ 89.663308][ T5920] ? __mutex_lock+0x26a/0x1b90 [ 89.663325][ T5920] ? __mutex_lock+0x26a/0x1b90 [ 89.663341][ T5920] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 89.663359][ T5920] ? drm_master_internal_acquire+0x21/0x80 [ 89.663395][ T5920] drm_client_modeset_commit_locked+0x14d/0x580 [ 89.663417][ T5920] drm_client_modeset_commit+0x4f/0x80 [ 89.663436][ T5920] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 89.663458][ T5920] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 89.663478][ T5920] drm_fbdev_client_restore+0x1b/0x30 [ 89.663492][ T5920] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 89.663505][ T5920] drm_client_dev_restore+0x205/0x2a0 [ 89.663530][ T5920] drm_release+0x2c6/0x360 [ 89.663547][ T5920] ? __pfx_drm_release+0x10/0x10 [ 89.663563][ T5920] __fput+0x3ff/0xb40 [ 89.663589][ T5920] task_work_run+0x150/0x240 [ 89.663604][ T5920] ? __pfx_task_work_run+0x10/0x10 [ 89.663624][ T5920] exit_to_user_mode_loop+0x100/0x4b0 [ 89.663644][ T5920] ? rcu_is_watching+0x12/0xc0 [ 89.663660][ T5920] do_syscall_64+0x4ea/0xf80 [ 89.663677][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.663692][ T5920] RIP: 0033:0x7fc39c79bf79 [ 89.663708][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.663725][ T5920] RSP: 002b:00007fc39d635028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 89.663742][ T5920] RAX: 0000000000000000 RBX: 00007fc39ca15fa0 RCX: 00007fc39c79bf79 [ 89.663752][ T5920] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 89.663760][ T5920] RBP: 00007fc39c8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 89.663769][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.663777][ T5920] R13: 00007fc39ca16038 R14: 00007fc39ca15fa0 R15: 00007fff5b4837e8 [ 89.663798][ T5920] [ 89.985551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.040015][ T5920] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.116415][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.144771][ T5834] Bluetooth: hci2: command tx timeout [ 90.150205][ T5834] Bluetooth: hci0: command tx timeout [ 90.224190][ T5829] Bluetooth: hci3: command tx timeout [ 90.229670][ T5829] Bluetooth: hci1: command tx timeout [ 90.297398][ T5925] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.334344][ T5925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.365752][ T5925] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.466515][ T5925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.490870][ T5929] futex_wake_op: syz.2.3 tries to shift op by -2048; fix this program [ 90.528561][ T5925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.528694][ T5929] futex_wake_op: syz.2.3 tries to shift op by -2048; fix this program [ 90.566616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.575570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.584644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.592846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.601581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.622697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.701643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.710724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.725807][ T5925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.749254][ T5925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.804543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.838019][ T5925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.872893][ T5925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 90.993119][ T5925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.999498][ T5925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.066379][ T5925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.855885][ T797] cfg80211: failed to load regulatory.db [ 92.306568][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.527317][ T5957] capability: warning: `syz.3.8' uses 32-bit capabilities (legacy support in use) [ 92.571802][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.725651][ T5957] ptp ptp0: new virtual clock ptp1 [ 92.756378][ T5957] ptp ptp0: new virtual clock ptp2 [ 92.764429][ T5957] ptp ptp0: new virtual clock ptp3 [ 92.772136][ T5957] ptp ptp0: guarantee physical clock free running [ 92.785272][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.818420][ T5964] Zero length message leads to an empty skb [ 92.936701][ T5967] futex_wake_op: syz.2.10 tries to shift op by -2048; fix this program [ 92.982041][ T5967] futex_wake_op: syz.2.10 tries to shift op by -2048; fix this program [ 93.032428][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.988860][ T5983] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[5983] [ 94.390884][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.634081][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.869058][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.106904][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.881563][ T6017] futex_wake_op: syz.0.19 tries to shift op by -2048; fix this program [ 95.934334][ T6017] futex_wake_op: syz.0.19 tries to shift op by -2048; fix this program [ 96.320779][ T6026] FAULT_INJECTION: forcing a failure. [ 96.320779][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 96.334329][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 96.334357][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.334367][ T6026] Call Trace: [ 96.334372][ T6026] [ 96.334378][ T6026] dump_stack_lvl+0x100/0x190 [ 96.334403][ T6026] should_fail_ex.cold+0x5/0xa [ 96.334430][ T6026] should_failslab+0xc2/0x120 [ 96.334451][ T6026] kmem_cache_alloc_noprof+0x83/0x780 [ 96.334471][ T6026] ? locks_get_lock_context+0x94/0x5e0 [ 96.334496][ T6026] ? locks_get_lock_context+0x94/0x5e0 [ 96.334517][ T6026] locks_get_lock_context+0x94/0x5e0 [ 96.334541][ T6026] posix_lock_inode+0xcc/0x23e0 [ 96.334564][ T6026] ? __pfx_posix_lock_inode+0x10/0x10 [ 96.334581][ T6026] ? common_file_perm+0x1ab/0x4f0 [ 96.334605][ T6026] vfs_lock_file+0xfb/0x150 [ 96.334621][ T6026] fcntl_setlk+0x469/0xde0 [ 96.334640][ T6026] ? __pfx_fcntl_setlk+0x10/0x10 [ 96.334663][ T6026] ? rep_movs_alternative+0x30/0x90 [ 96.334686][ T6026] do_fcntl+0xf39/0x1670 [ 96.334708][ T6026] ? __pfx_do_fcntl+0x10/0x10 [ 96.334728][ T6026] ? __fget_files+0x215/0x3d0 [ 96.334752][ T6026] ? tomoyo_file_fcntl+0x6c/0xc0 [ 96.334768][ T6026] __x64_sys_fcntl+0x163/0x200 [ 96.334791][ T6026] do_syscall_64+0xc9/0xf80 [ 96.334808][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.334823][ T6026] RIP: 0033:0x7fbf2d99bf79 [ 96.334835][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.334848][ T6026] RSP: 002b:00007fbf2e78a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 96.334863][ T6026] RAX: ffffffffffffffda RBX: 00007fbf2dc16090 RCX: 00007fbf2d99bf79 [ 96.334872][ T6026] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000007 [ 96.334881][ T6026] RBP: 00007fbf2da327e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.334889][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.334897][ T6026] R13: 00007fbf2dc16128 R14: 00007fbf2dc16090 R15: 00007ffe0690cdb8 [ 96.334916][ T6026] [ 96.554435][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.638181][ T6007] binder: 6005:6007 ioctl c018620c 0 returned -1 [ 96.704860][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.783749][ T6024] zswap: compressor û not available [ 96.945336][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.187561][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.811026][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.627054][ T6073] FAULT_INJECTION: forcing a failure. [ 99.627054][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 99.774097][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 99.774119][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.774128][ T6073] Call Trace: [ 99.774134][ T6073] [ 99.774141][ T6073] dump_stack_lvl+0x100/0x190 [ 99.774165][ T6073] should_fail_ex.cold+0x5/0xa [ 99.774192][ T6073] should_failslab+0xc2/0x120 [ 99.774213][ T6073] __kmalloc_cache_noprof+0x80/0x810 [ 99.774230][ T6073] ? vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 99.774251][ T6073] ? __asan_memcpy+0x3c/0x60 [ 99.774276][ T6073] ? vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 99.774298][ T6073] vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 99.774325][ T6073] vidtv_psi_desc_clone+0x33f/0x5d0 [ 99.774348][ T6073] vidtv_channel_si_init+0x764/0x18d0 [ 99.774371][ T6073] vidtv_mux_init+0x526/0xbf0 [ 99.774389][ T6073] vidtv_start_feed+0x33e/0x4c0 [ 99.774408][ T6073] ? __pfx_vidtv_start_feed+0x10/0x10 [ 99.774426][ T6073] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.774441][ T6073] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 99.774464][ T6073] ? mark_held_locks+0x40/0x70 [ 99.774487][ T6073] ? __pfx_vidtv_start_feed+0x10/0x10 [ 99.774506][ T6073] dmx_ts_feed_start_filtering+0xf6/0x220 [ 99.774529][ T6073] dvb_dmxdev_start_feed+0x273/0x3f0 [ 99.774550][ T6073] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 99.774570][ T6073] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 99.774590][ T6073] dvb_demux_do_ioctl+0xe64/0x1200 [ 99.774615][ T6073] dvb_usercopy+0x167/0x340 [ 99.774630][ T6073] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 99.774650][ T6073] ? __pfx_dvb_usercopy+0x10/0x10 [ 99.774673][ T6073] ? __fget_files+0x21f/0x3d0 [ 99.774695][ T6073] dvb_demux_ioctl+0x29/0x40 [ 99.774710][ T6073] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 99.774728][ T6073] __x64_sys_ioctl+0x18e/0x210 [ 99.774744][ T6073] do_syscall_64+0xc9/0xf80 [ 99.774761][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.774776][ T6073] RIP: 0033:0x7fbf2d99bf79 [ 99.774790][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.774803][ T6073] RSP: 002b:00007fbf2e78a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.774818][ T6073] RAX: ffffffffffffffda RBX: 00007fbf2dc16090 RCX: 00007fbf2d99bf79 [ 99.774828][ T6073] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 99.774836][ T6073] RBP: 00007fbf2da327e0 R08: 0000000000000000 R09: 0000000000000000 [ 99.774845][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.774853][ T6073] R13: 00007fbf2dc16128 R14: 00007fbf2dc16090 R15: 00007ffe0690cdb8 [ 99.774873][ T6073] [ 100.180017][ T6076] futex_wake_op: syz.3.31 tries to shift op by -2048; fix this program [ 100.214503][ T6076] futex_wake_op: syz.3.31 tries to shift op by -2048; fix this program [ 100.458743][ T6080] ptp ptp0: guarantee physical clock free running [ 104.330028][ T6138] NFSD: Failed to start, no listeners configured. [ 104.455034][ T6135] mmap: syz.0.42 (6135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.954664][ T6149] FAULT_INJECTION: forcing a failure. [ 104.954664][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 105.047224][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(full) [ 105.047262][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.047277][ T6149] Call Trace: [ 105.047285][ T6149] [ 105.047295][ T6149] dump_stack_lvl+0x100/0x190 [ 105.047337][ T6149] should_fail_ex.cold+0x5/0xa [ 105.047385][ T6149] should_failslab+0xc2/0x120 [ 105.047425][ T6149] __kmalloc_cache_noprof+0x80/0x810 [ 105.047470][ T6149] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 105.047493][ T6149] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 105.047519][ T6149] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 105.047541][ T6149] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 105.047565][ T6149] vidtv_channel_si_init+0x1289/0x18d0 [ 105.047587][ T6149] vidtv_mux_init+0x526/0xbf0 [ 105.047605][ T6149] vidtv_start_feed+0x33e/0x4c0 [ 105.047624][ T6149] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.047642][ T6149] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.047657][ T6149] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 105.047680][ T6149] ? mark_held_locks+0x40/0x70 [ 105.047706][ T6149] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.047725][ T6149] dmx_ts_feed_start_filtering+0xf6/0x220 [ 105.047749][ T6149] dvb_dmxdev_start_feed+0x273/0x3f0 [ 105.047769][ T6149] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 105.047790][ T6149] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 105.047810][ T6149] dvb_demux_do_ioctl+0xe64/0x1200 [ 105.047834][ T6149] dvb_usercopy+0x167/0x340 [ 105.047850][ T6149] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 105.047869][ T6149] ? __pfx_dvb_usercopy+0x10/0x10 [ 105.047893][ T6149] ? __fget_files+0x21f/0x3d0 [ 105.047914][ T6149] dvb_demux_ioctl+0x29/0x40 [ 105.047930][ T6149] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 105.047946][ T6149] __x64_sys_ioctl+0x18e/0x210 [ 105.047963][ T6149] do_syscall_64+0xc9/0xf80 [ 105.047980][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.047995][ T6149] RIP: 0033:0x7fa64039bf79 [ 105.048008][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.048021][ T6149] RSP: 002b:00007fa6411dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.048036][ T6149] RAX: ffffffffffffffda RBX: 00007fa640616090 RCX: 00007fa64039bf79 [ 105.048046][ T6149] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 105.048054][ T6149] RBP: 00007fa6404327e0 R08: 0000000000000000 R09: 0000000000000000 [ 105.048062][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.048071][ T6149] R13: 00007fa640616128 R14: 00007fa640616090 R15: 00007ffe07d91178 [ 105.048091][ T6149] [ 105.049820][ T6149] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 105.317206][ T6149] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 105.325617][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(full) [ 105.334727][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.344863][ T6149] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 105.350776][ T6149] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 5d 0a ea f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 39 0a ea f9 4d 85 e4 [ 105.370387][ T6149] RSP: 0018:ffffc9000af47a18 EFLAGS: 00010247 [ 105.376462][ T6149] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d1aa000 [ 105.384431][ T6149] RDX: 0000000000000000 RSI: ffffffff881c5de3 RDI: 0000000000000005 [ 105.392399][ T6149] RBP: ffff88814cde8560 R08: 0000000000000000 R09: 4453534204050000 [ 105.400369][ T6149] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 105.408335][ T6149] R13: ffff888076d3d100 R14: ffff8881453ea3e0 R15: ffff888076d3d440 [ 105.416306][ T6149] FS: 00007fa6411dd6c0(0000) GS:ffff8881245c1000(0000) knlGS:0000000000000000 [ 105.425240][ T6149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.431822][ T6149] CR2: 00007fa6403e96c0 CR3: 0000000074900000 CR4: 00000000003526f0 [ 105.439794][ T6149] Call Trace: [ 105.443065][ T6149] [ 105.445991][ T6149] vidtv_channel_si_init+0x12fc/0x18d0 [ 105.451466][ T6149] vidtv_mux_init+0x526/0xbf0 [ 105.456161][ T6149] vidtv_start_feed+0x33e/0x4c0 [ 105.461027][ T6149] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.466412][ T6149] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.471789][ T6149] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 105.478390][ T6149] ? mark_held_locks+0x40/0x70 [ 105.483182][ T6149] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.488581][ T6149] dmx_ts_feed_start_filtering+0xf6/0x220 [ 105.494337][ T6149] dvb_dmxdev_start_feed+0x273/0x3f0 [ 105.499637][ T6149] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 105.505114][ T6149] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 105.510322][ T6149] dvb_demux_do_ioctl+0xe64/0x1200 [ 105.515461][ T6149] dvb_usercopy+0x167/0x340 [ 105.519986][ T6149] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 105.525551][ T6149] ? __pfx_dvb_usercopy+0x10/0x10 [ 105.530587][ T6149] ? __fget_files+0x21f/0x3d0 [ 105.535279][ T6149] dvb_demux_ioctl+0x29/0x40 [ 105.539878][ T6149] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 105.545173][ T6149] __x64_sys_ioctl+0x18e/0x210 [ 105.549939][ T6149] do_syscall_64+0xc9/0xf80 [ 105.554450][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.560343][ T6149] RIP: 0033:0x7fa64039bf79 [ 105.564751][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.584356][ T6149] RSP: 002b:00007fa6411dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.592783][ T6149] RAX: ffffffffffffffda RBX: 00007fa640616090 RCX: 00007fa64039bf79 [ 105.600749][ T6149] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 105.608715][ T6149] RBP: 00007fa6404327e0 R08: 0000000000000000 R09: 0000000000000000 [ 105.616680][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.624647][ T6149] R13: 00007fa640616128 R14: 00007fa640616090 R15: 00007ffe07d91178 [ 105.632621][ T6149] [ 105.635647][ T6149] Modules linked in: [ 105.640624][ T6149] ---[ end trace 0000000000000000 ]--- [ 105.800901][ T6149] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 105.822195][ T6149] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 5d 0a ea f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 39 0a ea f9 4d 85 e4 [ 105.878517][ T6149] RSP: 0018:ffffc9000af47a18 EFLAGS: 00010247 [ 105.966743][ T6149] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d1aa000 [ 105.987098][ T6149] RDX: 0000000000000000 RSI: ffffffff881c5de3 RDI: 0000000000000005 [ 106.002422][ T6149] RBP: ffff88814cde8560 R08: 0000000000000000 R09: 4453534204050000 [ 106.014657][ T6149] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 106.032217][ T6149] R13: ffff888076d3d100 R14: ffff8881453ea3e0 R15: ffff888076d3d440 [ 106.042669][ T6149] FS: 00007fa6411dd6c0(0000) GS:ffff8881246c1000(0000) knlGS:0000000000000000 [ 106.051732][ T6149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.058433][ T6149] CR2: 0000000000100000 CR3: 0000000074900000 CR4: 00000000003526f0 [ 106.067156][ T6149] Kernel panic - not syncing: Fatal exception [ 106.073551][ T6149] Kernel Offset: disabled [ 106.077857][ T6149] Rebooting in 86400 seconds..