last executing test programs: 8m9.242076766s ago: executing program 3 (id=24): ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)={0x43, 0x7, 0x9, 0xabe, 0x4, 0xc, "0924ca419dc4d8e4e1226f5fb4d8c264fe2de51f1c10b355c2333c335b0c767b2f4fcc6608d94bdba4a45745e84fbc35d2758e98981cb0abe163c77fa96bb62a"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.13/usb35/ep_00/direction\x00', 0xc2481, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) rseq$auto(&(0x7f0000000340)={0xe, 0xfffffffc, 0x0, 0x6, 0xfffffffd, 0x2, "71125f2c35de9f494d24c3d55eb228584bff65534841417d307822bacd0bcc9e955ab6bae3d42f6007ebe138684d8b453b48dc2cd5951bd42cb21ca79f04e6d1f0752386f70adda705059767c47fb659803786f65928c65a6a4aaf547d5091c24d022ea4b2472630d5fee9b2be59d24d616e4d83bab01c7138392aa1e3"}, 0x8002, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x9, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x53, 0xfffffffffffffffe, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x8057, 0x7fffffff, 0xeb1, 0x401, 0x7fff) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x143402, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', 0x0) 8m7.837205219s ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r3, @ANYBLOB="280109800c00ea006d61637365633000e7002e80ea546656278c93952f9101afd392a22ad5dee5c3d6fea5031c8d17ca812af7fe7b240d9f6a3469659743be1864c7db436e9e76d49111fd550a1ca8b35a7d9748c7374ce3c5ee0cb000d2af41cf3ff5ca2140a4345cd86d7fa409604cd47536c8c89ac53fcf904f2040e3fa588f7845d5a5a3c758d76a6ea3243d41523307b728c1eae2fae8f36da92dc889cdc79fd55c8d4d0ad53e9f9120101cf27eaf1d15ddb64f597c46cf34373303f61cfc19c15f173d7f0d2f6870beddf607a1ebd3b22caddd7f9fd609a1115beabcf4f867ddee569d307ebe1240f53b7999a06b1f915f882e7e0008004300", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10007) open_tree$auto(r4, 0x0, 0x1001) ioctl$auto_BLKSSZGET(r4, 0x1268, 0x0) 8m4.429523995s ago: executing program 3 (id=42): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x1000000000, 0x20009, 0x8, 0x16, 0x401, 0x4) socket(0x3, 0x2, 0x4) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x52141, 0x0) socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) setsockopt$auto(0x3, 0x10000000084, 0x20020, 0x0, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090027bd7000fbdbdf25030000fd07000800", @ANYRES32=r3, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x20) mmap$auto(0x10000, 0xe984, 0x3, 0x1000000eb5, 0xffffffffffffffff, 0x8001) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec8\x00', 0x1a9202, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, 0x0, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 8m2.57058595s ago: executing program 3 (id=47): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) capget$auto(&(0x7f0000000180)={0x4, 0xffffffffffffffff}, &(0x7f0000000200)={0x114, 0xe42, 0x1}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000003e00)=ANY=[@ANYBLOB="981d0000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYRES8=r0], 0x1d98}, 0x1, 0x0, 0x0, 0x80c0}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0xffffffff}, 0xd) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd3/queue/max_integrity_segments\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/207, 0xcf) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0xbf30acdf44ddf63e, 0x0) ioctl$auto(r5, 0x551f, r5) r6 = socket(0x2, 0x1, 0x0) r7 = socket(0x21, 0x4, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(r7, &(0x7f00000001c0)=@in={0x2, 0x3, @rand_addr=0x64010101}, 0x55) setsockopt$auto(r7, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) syz_genetlink_get_family_id$auto_nfc(0x0, r7) syz_genetlink_get_family_id$auto_macsec(0x0, r7) close_range$auto(0x2, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x7, 0x2, 0xffffffffffffffff, 0x12, r6, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) 8m2.247016589s ago: executing program 3 (id=48): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1, &(0x7f0000000340)="7b598f00b034423fc0f7fd20d64376bfddaecbb322dc1b0257af35a91e3a3c6f1e3da17e18357e3279ca1e77788dbc5ea2dd12c8f62828f13b0e60a4501a319806730e5a3cebf9792317bdfb7bf0b8160b8568b1aff7489b440a8c16c0d91ee16bead24b2abece5e6fa811256ef7e287d55ba22abd351afdfbb888044ba30910052232", 0xd880bb7) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x46840, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x8af04, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxb\x00', 0x121800, 0x0) r3 = fcntl$auto(0x3, 0x4, 0xa553) fcntl$auto_F_GETOWN(r2, 0x9, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) read$auto_uinput_fops_uinput(r4, &(0x7f0000000200)=""/26, 0x1a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x72042, 0x0) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00}) io_uring_setup$auto(0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x1001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x2, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) mbind$auto(0x5, 0x9, 0x4, 0x0, 0x1, 0x2) socket(0x2, 0x2, 0x73) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) r6 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x141000, 0x0) dup2$auto(r6, r3) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 8m1.112490171s ago: executing program 3 (id=54): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x0, r2) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r4, 0x7ff) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) (async) mmap$auto(0x105, 0x40008, 0x3ff, 0x40eb6, r0, 0x300000000000) io_setup$auto(0x1, 0x0) (async) r5 = syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) (async) prctl$auto(0x1, 0x0, r5, 0x101, 0x0) (async) socket(0x5, 0xa, 0x7c6e) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_TCSBRKP2(r1, 0x5425, &(0x7f0000000200)="fbe5d5a2b95be0e93ace7d30799f989a053f7289b66758edbdefb117b913bd869d09846cc8bb461a4ec79f0c318190d5092d3adf22659ed81040fc0a636a68bee56084915d2a8034c89d40efbde0b58e73399d31f8a26642b306b88ac69157306a7e0e9af19151bca3d35253d6a5dcd1c8a9fad890817a77d2015e8f3538d4d9b6e8bf5e333bf4a216fa6f12f82dd6b9c287d328354ae02a893e33f294632c1d25d5b37d7f7a004b43001bead61826af8adb7230cc4518362b2813cb6c14c945a55093198b8aee46") openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8m0.846985832s ago: executing program 32 (id=54): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x0, r2) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r4, 0x7ff) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) (async) mmap$auto(0x105, 0x40008, 0x3ff, 0x40eb6, r0, 0x300000000000) io_setup$auto(0x1, 0x0) (async) r5 = syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) (async) prctl$auto(0x1, 0x0, r5, 0x101, 0x0) (async) socket(0x5, 0xa, 0x7c6e) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_TCSBRKP2(r1, 0x5425, &(0x7f0000000200)="fbe5d5a2b95be0e93ace7d30799f989a053f7289b66758edbdefb117b913bd869d09846cc8bb461a4ec79f0c318190d5092d3adf22659ed81040fc0a636a68bee56084915d2a8034c89d40efbde0b58e73399d31f8a26642b306b88ac69157306a7e0e9af19151bca3d35253d6a5dcd1c8a9fad890817a77d2015e8f3538d4d9b6e8bf5e333bf4a216fa6f12f82dd6b9c287d328354ae02a893e33f294632c1d25d5b37d7f7a004b43001bead61826af8adb7230cc4518362b2813cb6c14c945a55093198b8aee46") openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m8.98680503s ago: executing program 0 (id=242): socket(0x22, 0x2, 0x4) getpeername$auto(0x3, 0x0, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x1}, {0xc, 0x3}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0x10000f33, 0x8}}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x244000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x7018c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x890) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcd) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r1, 0x8000) 7m6.437004451s ago: executing program 0 (id=249): close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x5aa, 0x0, 0x8, 0x0, 0x6, 0x1000}, 0x5}, 0x2, 0xfd) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0xfff8, 0x3}, 0xb3, 0x0, 0x0, 0x8) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x1b6) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m6.322643696s ago: executing program 0 (id=251): r0 = socket(0x10, 0x2, 0x0) r1 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000140)=0x3) ioctl$auto_VHOST_SET_VRING_ERR2(r1, 0x4008af22, &(0x7f0000000380)={0x6, r0}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x4, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2}, 0x1fe, 0x81) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16=0xffffffffffffffff, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0) write$auto(r4, &(0x7f0000000240)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\x03\x00\x00\x00\x00\x00\x00\x00\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x801) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x10001) 7m5.947800591s ago: executing program 0 (id=254): ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)={0x43, 0x7, 0x9, 0xabe, 0x4, 0xc, "0924ca419dc4d8e4e1226f5fb4d8c264fe2de51f1c10b355c2333c335b0c767b2f4fcc6608d94bdba4a45745e84fbc35d2758e98981cb0abe163c77fa96bb62a"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.13/usb35/ep_00/direction\x00', 0xc2481, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) rseq$auto(&(0x7f0000000340)={0xe, 0xfffffffc, 0x0, 0x6, 0xfffffffd, 0x2, "71125f2c35de9f494d24c3d55eb228584bff65534841417d307822bacd0bcc9e955ab6bae3d42f6007ebe138684d8b453b48dc2cd5951bd42cb21ca79f04e6d1f0752386f70adda705059767c47fb659803786f65928c65a6a4aaf547d5091c24d022ea4b2472630d5fee9b2be59d24d616e4d83bab01c7138392aa1e3"}, 0x8002, 0x0, 0x6) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x9, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) getsockopt$auto(0x6, 0x1, 0x53, 0xfffffffffffffffe, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x8057, 0x7fffffff, 0xeb1, 0x401, 0x7fff) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x143402, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', 0x0) 7m5.262093855s ago: executing program 0 (id=256): mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0xe) 7m4.040738625s ago: executing program 0 (id=261): openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto_TCSBRK2(r2, 0x5409, 0x0) (async) ioctl$auto_TCSBRK2(r2, 0x5409, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyx4/power/runtime_suspended_time\x00', 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyx4/power/runtime_suspended_time\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x8, 0x5}, {0x7, 0x79e3}}) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) 6m48.662440651s ago: executing program 33 (id=261): openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xa800, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) (async) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto_TCSBRK2(r2, 0x5409, 0x0) (async) ioctl$auto_TCSBRK2(r2, 0x5409, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyx4/power/runtime_suspended_time\x00', 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyx4/power/runtime_suspended_time\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x8, 0x5}, {0x7, 0x79e3}}) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) 4m38.300677335s ago: executing program 4 (id=745): sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="0100273d"], 0x2c}, 0x1, 0x0, 0x0, 0x4040088}, 0xc0d8) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x1102, 0x0) semctl$auto_GETZCNT(0x5, 0x0, 0xf, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0xf, 0x1, 0x0, 0x8000000000000000, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write$auto(r4, 0x0, 0x3f00) ptrace$auto(0x10, r3, 0x4, 0x7ff) shmctl$auto_IPC_SET(0x38, 0x1, &(0x7f0000000340)={{0x2, 0xffffffffffffffff, 0x0, 0x4, 0x7, 0x3640, 0x3}, 0x3, 0x8, 0x5, 0x29d69257, @inferred=r3, @inferred=r3, 0x0, 0x0, &(0x7f0000000280)="6ca6e218ec70853607d2c28079de632d0d5c733ee509a3fa7559d796aace935b6f7fa5b33582d6e6ae3801a54588", &(0x7f00000002c0)}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000001c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000002f40)=ANY=[@ANYBLOB="4c18fbff098ff7210e8c1f26a97df942d47dcb824863bbfe", @ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r6, @ANYBLOB="05005500000000000800ef000400000058c66ec467b97bc8cec08e44d001bc0f6783fb40141ea2a108e94e3e7df7824f8493ad6116016a1b4d85132d97103c817597200b67ddcf66a48720340047800400418094633658ef51867d7d9de92b0f9e3a480f781efc5688a34fb85f8d981a1dba866805d1519e11d9381fbaf3c971018780ead3e0738acc55f99c84a41adc4005d65dbfa47e04538ef499e3f6ab81462f90320e8204593476bec89572a5d8d5c904eb2b59b004953a3c68983a045be4778ea634c8e031de8d53d5bb84d0cd31d608a4084f004f9fdbcd31f79d3a8e5c6615240642b7021c010513a7202a900e70e145970b37b0bd5f617b23f097a0c4488b55e3a6cc1fcd1300270b4e680c26987f4c9e3f22fb3d466b639ed3d0e4a78014277a97fb8dc92dcd1e61286ac4a2d29c2f063bf10ddcd2cabb4aa9370c54576e2910d7f52f6879b5b0a93d631ad51e251c6e43f5f215171b361b7935ab9bcb1267cbf124533df4484c65aa679a888623c8bbb0c21ab688b401c145dbdfbba256f61cb358767807034292c5d45f8eb0889a4dc6011f61d3c5dc1742b502f5ca0080e3f63d4ad3ebaa35a6e009692db25409b0091072b011b6a8b5a3d2386d1a32ac5faebabeb520843aed72ea6e20b393e51cd42eb21cf9a865b17c6780f81e186cd5d936285bb88446b5be48ffe1839a99dac119e10000000c002b00070000000000000000180001800400ad00080004800400208008003a0026324b1d89acf55a0270e061eba90a637269e08ca76fa33736b7486ecfe36d05bfcb556030d31f9a22", @ANYRESDEC=r3, @ANYRES8, @ANYRESHEX=r6, @ANYRESDEC=r5, @ANYRES32=r3, @ANYBLOB="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"], 0x184c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) ptrace$auto(0x5, r3, 0x7, 0x4f) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0xf106, 0x0, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x9, 0x20000e, 0x1, 0x15, r0, 0x6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/devices/virtual/mtd/mtd0/mtd0/type\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000b40)=""/99, 0x63) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/013/001\x00', 0x2100, 0x0) 4m35.83900795s ago: executing program 4 (id=749): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x82002, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000002000, 0x128009, 0x8000000000000001, 0x200000eb1, r0, 0x20000018000) socket(0x21, 0x2, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/029/001\x00', 0x682002, 0x0) mmap$auto(0x0, 0x28da, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) lgetxattr$auto(&(0x7f0000000740)='.\x00', &(0x7f0000000780)='\xda--\x00', 0x0, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) setsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x40) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r5, &(0x7f0000000200)='ev_\x00\x00\x00\x00\x00`F\xfa\x89\x1a?\xba\x98\xba\xda\x93\xd7\x87\x88\rR\a\x94\a\xc5pd[\xdc\x05c!\xa6\xcc\xb5\xbeoTx\xf1\x96\xc0\x80\xbb\"\x00\xc2\'s\xdd\'\xd0\xc1i\a\xca\x0e\xf8\xc55C_\xfd\xe1\xa3\xeb\xc3\xddf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0xe) 4m32.159878946s ago: executing program 4 (id=767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x3, 0xe, 0xfffffffffffffffc) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x1000000000e56, 0xd3e, 0x1, 0x2, 0x100000000000001, 0x95f4da0a, 0xffffffff, 0x3, 0x62, 0xb, 0x7, 0x6d3f, 0x9, 0x6, 0x6]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d8) ioctl$auto(r2, 0xc00454c8, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x200c01, 0x0) mmap$auto(0x0, 0x2220009, 0x3, 0x4000001000000010, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x7, 0xb, &(0x7f0000000000)='/sys/power/pm_trace\x00', &(0x7f0000000040)=0x7) (async) getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x7, 0xb, &(0x7f0000000000)='/sys/power/pm_trace\x00', &(0x7f0000000040)=0x7) bpf$auto(0xf, 0x0, 0x2f5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80102, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x3) (async) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x3) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mlockall$auto(0x0) socket(0x9, 0x80000, 0x4) (async) socket(0x9, 0x80000, 0x4) 4m17.008726765s ago: executing program 34 (id=767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x3, 0xe, 0xfffffffffffffffc) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) (async) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x1000000000e56, 0xd3e, 0x1, 0x2, 0x100000000000001, 0x95f4da0a, 0xffffffff, 0x3, 0x62, 0xb, 0x7, 0x6d3f, 0x9, 0x6, 0x6]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d8) ioctl$auto(r2, 0xc00454c8, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x200c01, 0x0) mmap$auto(0x0, 0x2220009, 0x3, 0x4000001000000010, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x7, 0xb, &(0x7f0000000000)='/sys/power/pm_trace\x00', &(0x7f0000000040)=0x7) (async) getsockopt$auto_SO_NO_CHECK(0xffffffffffffffff, 0x7, 0xb, &(0x7f0000000000)='/sys/power/pm_trace\x00', &(0x7f0000000040)=0x7) bpf$auto(0xf, 0x0, 0x2f5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80102, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x3) (async) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x3) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mlockall$auto(0x0) socket(0x9, 0x80000, 0x4) (async) socket(0x9, 0x80000, 0x4) 3m47.682740575s ago: executing program 1 (id=908): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) write$auto(r7, 0x0, 0x41ec) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c005eb5a3f2dc9997fceb863a7050e40e4d86cb", @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2528000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)=@bpf_attr_3={0x5, 0x1be2, 0x5, 0x7, 0xc9d, 0xff, 0x6, 0x7, 0x6, "12b5e251c53aa6b8d1a490ecb3ef7b6d", r10, 0x9e41, r0, 0xfff, 0x8, 0x2, 0xffffffff, 0xf, 0x80000001, 0x7, @attach_btf_obj_fd=r6, 0x3ff, 0xfffffffffffffff9, 0x2, 0x0, 0x1ff, r2, r1}, 0x54a7) 3m44.434736503s ago: executing program 1 (id=915): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = socket(0xa, 0x2, 0x3a) (async) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) (async) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) (rerun: 64) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/pcm0p/sub0/hw_params\x00', 0x400000, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) (async) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 64) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) 3m43.406546157s ago: executing program 1 (id=919): mmap$auto(0x0, 0x20009, 0xdf, 0x100000010, 0x401, 0x8002) (async) ustat$auto(0x801, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async) r0 = socket(0x2, 0x5, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x4, 0xb}, 0x8}, 0x5, 0x7fffffff) (async) io_uring_setup$auto(0x6, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r2, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) open(0x0, 0x7ffd, 0x12) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x7f, 0x7, 0x3, 0x8000eb1, 0xffffffffffffffff, 0xfff) (async) r3 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x1, 0x0, 0x80000000) (async) r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/features/oneway_spam_detection\x00', 0x1c0, 0x0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb9, r4, 0x401) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/first_error_errcode\x00', 0x400, 0x0) read$auto(r5, 0x0, 0x20) (async) read$auto(r3, 0x0, 0x4000000081) 3m42.408041006s ago: executing program 1 (id=923): socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) 3m42.258930704s ago: executing program 1 (id=924): mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4, 0xffffffffff7fffff, 0x3f, 0xfffffffffffffffa, 0x8002) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x4, 0x2) mlock$auto(0xfbe8, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3m32.706881651s ago: executing program 1 (id=953): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x8000000ed, 0x9, 0x6, 0xd554, r0, 0x2008107ffffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dmmidi2\x00', 0x0, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r1, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r2, 0x2, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0xbe55, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket(0x2, 0x801, 0x100) setsockopt$auto(r5, 0x6, 0x3, 0x0, 0x8000008) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose12/carrier\x00', 0x408481, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0xe97f, 0xe2, 0xeb1, 0x401, 0x8000) 3m31.920105613s ago: executing program 35 (id=953): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x8000000ed, 0x9, 0x6, 0xd554, r0, 0x2008107ffffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dmmidi2\x00', 0x0, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r1, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r2, 0x2, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0xbe55, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = socket(0x2, 0x801, 0x100) setsockopt$auto(r5, 0x6, 0x3, 0x0, 0x8000008) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose12/carrier\x00', 0x408481, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0xe97f, 0xe2, 0xeb1, 0x401, 0x8000) 20.907807189s ago: executing program 2 (id=1583): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000651f85b3791efc790c4ce01b059e113f113308f64a2479f45885e2ae9a", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x80, r4, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@generic="a598334fc9b4106614bd4d6a28c56f44a9e8fe3360a19e7be1639578aa6dee4a50ca652c76537bba9c75791590bfa05e016b4650b9c496e3572d347b6704d3a51d373af6e1e417e6bdde025bf27a5ad749a5061b4b309ba0b54dab875e3d8d92e490c7d980d147c0"]}]}, 0x80}}, 0x24048084) listmount$auto(0x0, 0x0, 0xf4240, 0x0) unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r5, 0x6f2d, r5) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) 16.075805585s ago: executing program 2 (id=1592): r0 = socket(0xa, 0x2, 0x73) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x6, 0x8000000008011, 0x3, 0x8000) r1 = pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000040)={0x6, 0xa, 0x1, 0x78e0, 0x9, 0x0}) get_robust_list$auto(r2, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697f}, 0xed71390}, 0x9a6, 0xb04) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10800}, 0xc890) connect$auto(r0, &(0x7f00000018c0)=@xdp={0x2c, 0x0, r5, 0x13}, 0x55) close_range$auto(0x2, 0x8, 0x0) 11.942167278s ago: executing program 2 (id=1599): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video33\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0845657, r0) shmctl$auto_SHM_LOCK(0xffff, 0xb, &(0x7f00000000c0)={{0x5, 0xee01, 0xee01, 0x0, 0x1, 0x0, 0x26b}, 0xf68, 0x7, 0x10000, 0x4a, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000000)="b41c90e6ac562672c1f87fa125e8ac194cd5563ccf6fe09b19c48c1c4e8a912910cdb7d161b2d9abef06723192479f12", &(0x7f0000000080)="f91cdae2882df134594c17fdf2b8e917d12fe289aa43e7fc105c7044283fc6d66bc363e9a8edc5d7f424df13d598352a5e"}) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r3 = getegid() r4 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r2, r3, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, 0x0, &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982"}) msgctl$auto_IPC_STAT(0xac, 0x2, &(0x7f00000001c0)={{0x9, r1, r3, 0xfb90, 0x9, 0x400, 0x6}, &(0x7f0000000140)=0xfc, &(0x7f0000000180)=0x6, 0x7, 0x10000, 0x5, 0xf, 0x439b, 0x8, 0x7, 0x6, @raw=0x5, @raw=0x4}) 8.781427156s ago: executing program 2 (id=1614): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x2, 0x88) setsockopt$auto(r0, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e24, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000002df, 0xeb1, 0x401, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)=0xa) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7.512304108s ago: executing program 7 (id=1621): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_KEEPALIVE(r2, 0x3, 0x9, &(0x7f00000000c0)='ethtool\x00', &(0x7f0000000100)=0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000440)={0x5bc, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1c8, 0x2, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @nested={0x1b9, 0x95, 0x0, 0x1, [@generic="6a3bd551b668399325b9fee1acc1b3fa6a2ff3f9794756c64dcf2c6eb908d83490b15f097ae3b3b20476f0d2f9c790f0c45224952b42917b6a3efdf4aad5b8cf7723ffaaa83fe181fe666c5d0d48df4f1b3e7dab3ffa811e68d68db8da5d84269488de6363dcd1782ff8ba5e33be6a991446fa3dba84a428e3ee7022e4f1ee4fde14c93c6cc5c8141155bcd08de120fd3f090e4e09684992d5bbb440aeb5e1d9aa33a0f26d16ba3778d78f1c004d9a9447b73ef7ada22ee575abce8beb4b99d0467bcef6f8ecab172ef2fdd3aaf734262f484f8de8e6342431fc877977264b1687", @generic="d43947c49860bad4c0fe9999b625b5d3c992ed9a", @generic="0f1162df5426", @generic="37092dc6ed1188bbe4dbcb2d15564b4b825198a54ab2c80cb3f9aadb2f1b4c5f34775c2a85c485c88ff0dd0eab0ee133eb3a9bb90e68f150f9862843584477dc1e07422b5006b20b27ac4fc5cc3918be58903f82876b1b3d511a1ca5a27f910ff1fb23b2f8156cdd5e5f7121e12134182cdf29a9309c2326ee91b864b09bfe38e83c697121d228482e25ed9cf1f72439e40b4fcb939b94c91138ced0f3b248d74b85fadabc614884925419193ab8288fc2a4893af90ed09adaac"]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc6, 0x3, 0x0, 0x1, [@generic="f6cf07e5736b2ffcb67f62b024f81896a1fb1259afd2d41efac9afdcc4f927248de53a0bb1489ff40748d6d86c55caa122ff10ccfed0e034a2fc5ba9eb12151c6d2db4fc4310165fb9ee9d9a7b877512ca48fedde7f74f2e7d7c9b6fb3ef8bb8e81981fa224134ed38a3ea329d8c75037807365e948b29322cf8cb829f728d12079ac77b7cd783ece6a921b6e53e9a113c0e56048c8eb900a18ace279123643b864cc7ff051487d59579", @typed={0x4, 0x7f}, @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@remote}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x318, 0x2, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@remote}, @generic="8d4d31fff8a211f088ea0e715d87d2cda363b0491923e1177bada2181c8b6c931cb932b46c035945465d1f5ec0ae733b8ec7fc1a19b4f9d4c24943c5f2eb287939096d537188f479ad12de2d49d2182556cfe2d9cd94f0ec8bf2d294f9b5ed92a4cea1313fff5d669317987399aafdd7d187c1ebf919ff961456912eb0e6894593b5670f9df3f6110e26987d0a6481a4d721873f6290a74638c905ae4c77237a6224d6be4dc734f72e414fe800c25e703943741816ac2a5ad1fd0bcba1e12ae4ab2cac99f7f3", @generic="a3104bed0c20bf366e160492ffc0aae043a221f5ad82b373473407ec1317c4463f0fb47416e89899a096107268a316c2dac02eb15031bda408da622aee806dacc19ed8aff95db84915b84c3d4abc2e962a6aa0804f83f57f9b791d27788252385dced631486b963d4d5656da5b9411a9f7f91d97a8ebddacb09a256348dae770b34168fed7f77744cda5011c82c1c24aa0c42605945812ff13302b5d5fe90906c6aafb24bb5a77cd9ddc71cb19aca63ff69a8c623110e2e57b", @nested={0xc8, 0x4b, 0x0, 0x1, [@nested={0x4, 0x5e}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x5f}, @typed={0xb2, 0x132, 0x0, 0x0, @binary="708556b0a2cc13ef3a7130b7fa683b5db25abef6f498d5da281fe8218de75dbf104aee5730858d2102dfce7c460c274b0f2977bf3b3d4aa8a2ed796b087ff6b65a25aba830d8eee47a9aaec06a5068357057b544e9b82e7b0e27ad6329a7d68b811c859b05143d50d0b56bc0e3abd797456601bffd430eb015530a9df9842d27fdc45c6fc573c8d9168e5fcb2b471221a4b05ccf61f9812fcf4d31a4e235779e84c476cc9da42e7349ad581221ae"}]}, @generic="7664b6a8dec686904f763000514975255ef3035e555a3bd66c9faae2969845edb24fb509d600fcb9d9448cca7dc8eb16704fdbc35a6a35450d7f4aaed57c", @generic="cde2b8c0c90472b78847e53586d52b80591d71d67ef641817ff84742a9bccca90390025f67e0f280f067c1cd93e78ee6e94fb8652bf169019731d22eb9c02dd459cce47cc9bd30a1ad33ff350d037242d6e43d", @typed={0x4, 0x48}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x1c, 0xe3, 0x0, 0x0, @binary="14588db5912e8a0b8d9a08ac115ad2f65463be120f6dc5c1"}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x28000}, 0x40882) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) unshare$auto(0x40000080) io_uring_setup$auto(0x7, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04\x14\xa8\x1bk|d\v\x00\x00@\x00\x81\x00\x12\x00\xf6\xf5\x00\xdf\xff\x00', 0x13) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x1f}}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "367380c195"}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, "3b3cb0a0b842dfc481243959871f952b700394b92b0b6c7f73"}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x68}}, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0xffffffffffffff6d, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) 6.126107015s ago: executing program 7 (id=1624): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = getpgrp(0xffffffffffffffff) kcmp$auto(r3, 0x0, 0xbf, 0xffffffffffffffff, r2) sched_setattr$auto(r3, &(0x7f0000000080)={0x3, 0x80, 0x88e, 0x2, 0x92, 0x5, 0x279e, 0x1, 0x80000001, 0x8}, 0x6) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r4, 0x0, 0x2) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) 4.830844425s ago: executing program 2 (id=1631): r0 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) pread64$auto(r0, &(0x7f0000000040)='!}#a[.\x84^(--\x00', 0x8, 0x80000000) readv$auto(r0, &(0x7f0000000140)={&(0x7f0000000080)="d2dc3dfbfc2c6a3e1b16f9612ab7dfd5b4e034b60badda37ec8335d744063732da61b9076d002d79651d3b694127481223b6fdfce6d52721ed7f78077a71368d18e2fdb7e7699dd8b600d1608ae0044077119fc0492f095a82b42ff7c8fe9fe8ce57e5527dfdf1b2e1ace16555af8e5da47d3e869708d5dcb1305f15966b3a805dc92eab562eaee55d1cdbecd36f3db2e94f697b6bafcc2abfa61faa41c014149a3177283615032371697db902be0d6c2d2177235f915b391bc5f9d0a6bfda05", 0xd9c}, 0xfffffffffffffffb) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000180)={0x0, 0x8, 0xa2, 0xffffffffffffffff, 0x4, 0xffffffffffffffff}) mmap$auto(0xb31, 0x1ff, 0x10, 0x1010, r0, 0x8000000000000000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x400040, 0x82) r3 = socket$nl_generic(0x10, 0x3, 0x10) getrlimit$auto(0x3, &(0x7f0000000200)={0x4, 0x9}) r4 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x20000, 0x0) ioctl$auto_FIOQSIZE(r4, 0x5460, 0xfffffffffffffffe) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), r2) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000000) kcmp$auto_KCMP_EPOLL_TFD(r1, r1, 0x7, r0, 0x2) r6 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f00000003c0), 0x141080, 0x0) r7 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x1b1481, 0x0) ioctl$auto_BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000440)={@raw=0x4, "ada380abedb2741758f73f835935e2b68c2031d0c099bea83704bddb08df470b67b24a9d11c8cfb465ccb3852e284018c498e8e9752ad2bba6a7f5b7a92578091fab994816f1109071d7caaf721bcbaf151d6dc388909aa68bcb19ac80214163afc7e540ed7a40dba7ef35c36f39e068052696c86322ab8bbcb50e949030c710b8984aa9eaa0ada112e5036cac0bee43f9102ce94da197dac28df38337e908f984e254992f5fd8f228790631505dc1ceab95177650a4b88ad95084132a357d61442d93e604f89d5919bd2f4679c0bc1d4ba9df097b755f8d036790c617e71804dcfa56c270d53fbefc14e021765898616f8d937abbb115a3cf3ed74bf0c18e34c716dd21ff6e20524f1f9288412a9c3238eb425f1b063ca26a22deec2bfc3d7a19664b6b4013563bb5bc71d39cd533bac5583169ad8a0aee6fb1f2fd81b643a7c5813b58fd3032e168c54498b081f92df842ec7daa5cf22229d86c72da1f1699b0e5fad5742eb450fd48f266921acb427d05ea59db1dceb9b4bb2603ff087af7801520272fcdfb9d7df16364de43f329a866b6b9548f52b28f845c220bf1e2f19bc23793cc1457ae133a570917c061e25c8ff889d3d3d5ecc631e1d2118be88247388ff8fa924e4ae270e5ce0413cd282c7610b923707d6b7b88b253cc1fe217496397f6bf50f7756ee7dd309f081278a54632ed9bc414ea6d4813c0e553514ccc0477e183b62dc1aba5e275c07c2a0a964e063f531e077fb868edfd16b190e9f56679e44f6a57bae3c7be5a5663ae782abb2cdfeaeafbd0ea5f0a9355fa214fe3c259e1c044ed1ba4437e54fa5a443ebfeeb003b9747bbc6e496eb82bc313a7d179eed9301f744a1a695cc5a7bdd5a3b9e1b6ba6f33d6ec55ba23fb46d92632f5c8a2fc22abd133866740542b3f213e8f69fe95520288a24573a90d89564d13d541afcdab6420c4895933cf3dd7a0f80f0986bf2366bbe3792de6d72b582311a941d0e50313ae7ddbfcf5510cf1f3eda8dd01f31ba61d0bfff10476fecc2385c17620fa59d11290507ff45e5fba63dc27764de498562bba03626b141aa702965bf9df624c73b63c64737a631da721fde2e37ac8863c4007112fb80cab3dde6e382a350b37f177213ce7ae66bed3cedb92d56ff55aaef85b21748dd6426f688b72807e9db42aa9f7e4ca8180ecee5b90dd763c1593d5e7bd5a7b8f6e16888e0b559c0fb071d9c6cadc01d1b0e3c8f54c9213d809e06dc2de6df85687c2e537ee0a054df7cec56e8ca9c68dc0d07a93eb8b263150862d9a41e57865c20b6fe7e7c0cbc2fbc685e4f068890b598f83844555c1bf5a2a9d874a9cf6cc0def547050dd09dffaedd8b7b82b6c9378f1f69ba117949bac02d2cd623802fff45a86e97303c80530c017449bfd6355e3b9f2f5cbec7730748aac84a114ada1004f42acff9f5f091af9f0053ef45a6b82d57c8a5e265383b23522607d6e46468bee0529683571db755ad4862377f7fdbd1f78650be548e3587bb55cf2aaef3b7a86a0ea173f29cb2f4651246642ffa42dde54e80dd1a56d1961c9141640f78a67d33d3a27955458bfcbc09792623cf04feb4093255a5bdc63ce79597f33c9fee86173b1ebb30cf827743827a6a62c53aceb715d62aa37e438e1c99558ecb359e3baf2ca77aee507f29474493e8563cd601d4faea7d571ce7b6f41425239d742361da32a55be439af0799ee8a2b4f8bb73cac4f8293193c44e2dc3c50d734e67da5218299069b990bd57d40553ca79562b347cc579dc015e573348b9890ea671de3a0605ca0d9c45dbd9ab700dfb477ddfd7ef3abc08251e2d81b4d37e6cdb3297dbf88d349ff73987c6e49f3b796498527de1f3d1463665f71b78e086147c6dfc8942fd268105433d2a8e45ad719e4d9a35ea7d128e8d0e6485710c28c9ae14bed5e0eb4307b107ba8d18057989ba5ba70ef43b1d0b0f1ddefc0cc8a8c21b489b8cc9afcc508f671454469b9666e130bcbb2f4f44c0220153d66c93491a3402951b54fdd0e228d499628bc17a226d3445d11682a7edeafa9ac87c32a3b914d2e3e9ac5b0344e4214055360c1e530b8726fe12efbd69964d7b5d3c7d559b0b807e5902b3022f7e8a92149c506ed3000e3855e503b5b79b0a17ebf215ebcc303c619a1c6385449ffd24dc183922131a000061be4c5b8ccdf66f7860f50c03c7556c33474018c5e81f0b06396dffea0054248e769aa4c83aa43b599347d83e7859f2d96655f79a4b67250e5f13dde9695f26ee7f0eea9eb179cee9ae305a5a139f9ddce2e91c7198a707548ab000823530e93a5f3e12978a633ddced9574bfd0464aad375d708ee78577b3832f3f9fc0d96814f2d5941533e8e3c9b1394585a15cb75da6478e6d8c5147a5fad3d648bf61e0ea0461cf755042356277a10172add408830c3d18fc46aac65b5f0f94dfaa63bd247cd1b55f2048f0b9afb53fe752f3e899affea2c962bec1b385e22382eeb86cf0b6645e3913b66c5ba9f43c222de4c92a1f5cb29abe8d9f8b34309a4f999059b149c438f6121a6d651e6b73f956501ea38c140a9f26bd700e6003aa05bf3b20312b7171ac89364dcfcb46e04d52daa63cb807035e59f8fc0f5fe7115194a38d6f9ee032f8f8a29b6ec8e922845a48992df44a1c87e48c527959bc2ba1d7f2768d169ef24190c529bc28091cdcb5cc0ce2c894de09d01229227c290fd85822c32ca109a3a7f3dea0ef940944bb0dbc62ab1119569a587012710f5eaae4d33b92a1dab9d51c7cf0d7b9b1229c845c7d36c1d54769807d0ad04e68f02bbcce54e3fdbe2949271924a6d32308d1b02846f087d4492144c6349c3654451c21180eaf18e9f4bfc5cbb5952d46cefc578484d4c0ed8747870ead19f81d2417a95672b6dfadc64a9c9459551cbed7e9af217d7a050d4d081d185270a3723cbf7f807c4f3193497da1eca21aad8bb69eb5863e9423e52ea0f0371c4ae91f3a1ae15c8a2f8c406dbe9e6970e3ee254ab3418ef63eaad22425d1f51c7fb3a8eafc3c855ba9577950d6e97e5405b36e66c0f3f74426becd2f64da619bcc632927f41c30d95a827c6d5c19ae0c6bbd69546787314afc2a8198a3ee0f19ec000372f3ae1a33abe2bafcb70813265ac1a169b8be837117758af62b6ec383456269b2a5d1b545b896ffe8def3e4bae7bde3dcb0fb0218021a5a2fb830ac90d82a0263a89289905ae25c695e552ca9fe4e6f99cbbe7ecf6c565f77614b16135a8f011c17bbb9656ed821bcfc97ca441090991e97c47e5ef6c21dc5c390475bb5b52b52b79312dfa1f6d7c2ac2965080c1f59b12411736916ff2f3612e060ad55a08fae388d6ef22e4b874368b4a6a478f4de5b5d47c526b54fe8f2077d2b09fc181ec09a4dd2e7a8886e0a1b38ec63829e1e1ce3538ca3ff356c84effda6ef6266b6196c7f2e177651303fdbed11af6b98a90a7546f7d715128a7fcbb512aa1bcba47aa6fc2bbfba9a0ab3919b91aa88b5ea25f64ef6b461a02cd6849c9566a0b47dcd0b90b0f9ff2e137d38bb33ed406d6b858e5a9ec128812adef2af050ddc64e6f3b4081ec544a323fdd6ac0e4d806c33471eb54eeb3c6cfbb303b7c63f1a0eac1a7e9ef9107046103593de3ceecc0bb29ea17439f026441f8b3c7aa29a927880c5db6519615bb4ec66eddcb5ee2ed9bdfd02dfda03677540f907725e023e616476d23c202282fff3eefcde95f5db9b6e8c06bd1242b31bd2cfcb7662bf9c9519f605b3ba7b056216338e9cd68125baef086fbbca4cedb5d57728338a5c07f4dbdd9b64cfdcd4937fe925db9fc19ced1c55cff3bec23a5b7fd12f120a5b988ad3c4ebd2d127635580481e3526f598411658bc35f36a698cbf308587b7115e309fe6617ca9a00cdaf003bf02f09a190f1a3dc002d5d6b8cc5d7757995700506a9560a1bf34f844a4ee87f7a0bb71cb45b94e7be6531af0c63bc7ece5c5fb4e83de26f539e9facef668b3bb17de2000bc7765d801101186fb3c3ba35762815035be586f56baf286262cfe7e20358957765531c0dd7d1b7cb6e4a4969a6d8e18313c65908c6f34e5c4de9e4e341c5d50aefb3034500c8c79e277553913f1f085ddb88548c022811bd5d8cf6695ba724f35b4b0bb8412b03e2228d9c3d6f88c36510da69c829b6c43c57781a08e3c977c60a6ffef0ecee6db04ca92ca8689f4622b9c54e33de6ec0ec29ee786d5b6825077e6300bb1f887764c4888c64a3e220db702b0a68f1d9bf3d897da6871ea3aaf7c4c833aed20a9d6785fdf0066f15300d02887bdee194b28e80b39656848c298fa740aa799974a0bce24ba3d094ad73c70c05f4aa7a50db5fb7acd627d904db038a8d574eced4a9afbcced4f517d7ed57d8982f689fb0f40997874f7d745a2eebcba4cb30d18e274b1041fae842e11ee3e690a39dfa3c2bfa0b3bb51a4e7eefb4c785b1bde77aca0e077e2561573376bfdc879ce2e617cd289170b337501bdfc377b5af982b049c53b601449082f4debd0fa8f16d4e66e652b8815b679c42665f44f0f85768502e283be7ff4ff907bf8e0d6783c0f3150e6cff2c670607b6590d0b8a312f57f9908e091695ee89552186a6dece4c52dfee98c7fd6249dcb63dcfdbf726c71dc0a50c84fbf0ef3cef12e8a5ae8e80acaf53c556184bb9f288d401c26f77b7bb153a6a8ba3b4b6fc4e14d6bbe60dc78c0faa08c1742ef63ffe31952c87d953d110f99752bff541a8fee7e501f09521e8cf9258afe8cef40eb978defbb4a84cb60b3dc9d11d00e4ed8950d841c5c0ce7065c866239fcbf69f6f957a78de4f08cfa9389fb67a0a1179f3671d9726e9404d946a2099433f9343674f4e262a17adf3fe7780fc5bb6395f751f3ba8feab0b3743770f239df357e9287c34101bb6d94f0632449d01faf2307dd57a259df9bf5aa6bc6c1220db4115ce129f4100bc9489baa325d242cd9625001424956006335769b6ee0b0f8ff185be588cc1a2871f6766c20126643ad1c2902b5e9a45bf407dd1fd0c84af04d4b8a4a52d48a49f6b6f0a5f906e72c0b45948ab9dd7109346168bf164590401102f21559349cc912d5003647e814dd8c2d860d9a1b036e0cb2d904e7305093713e543e6bcbd359f773c76271846afef3e193ec68b57778399e16889ce7d6763857117190818ec3f6a331122baa1d76060a4133691807d78b969aaf8e03c8c91e3165506f1aafe75a824e73416ff6e48476b30bf27e65582a75ee8081f184bc93a838e60eae0742f8c896e9e97511e863639080c52d4b3b9a1056b003d80421c397120229d0fd74be13a24b4c3ea378222748c7dff26ddf392bc56d344a6958a2da204d38bda35082147e3cd6cef5f9002e6546b6835c31fd5765db97a9271cbd72438ff604f92ad17a09c0a38e473eefdec6832a284dc7582707d674eccc588c86aa255b728184feb4fa70a0a7afee28a6550a7fc620808f3fd3eac3c7bf397a5891620a598d6fdfe8bd29cd37f05e863f3083c9c5b3bc63c16804b8d309269e1c6ed4098eadf2f4eaf1bc31562322e6fd395fdd4ee26b3cb69ed29e42ed0cda05ed5a8532959c159da53325ba031de4ad1fe3a08f240206e77c73fe3ffce624700e40fbadc8e9238b28ca1e93c1920b6b3e456a2a0b132aff251c4c2271d1515a5de82752113cc894a4dfab6b79a53863ce83dc9b3e9279975a4455e0719dad599c3caa4193e7bf79133e7df906cced992c1307c8a85404f74cee2f0fad2a7893b52988b83fc9c5"}) listen$auto(r4, 0x7f) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001440), 0x30200, 0x0) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)=@bpf_attr_1={r7, 0x61e3, @next_key=0x10000, 0x100000001}, 0x8) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001580), r2) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000001dc0)={&(0x7f0000001540), 0xc, &(0x7f0000001d80)={&(0x7f00000015c0)={0x798, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_RIC={0x751, 0xb2, "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"}, @NL80211_ATTR_REG_ALPHA2={0x30, 0x21, "23f064b37cf3a72ddadd924f66ae123e8f60e3e5905edc055d1967ceb038725271755881a682f0dbbd639a1e"}]}, 0x798}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000800) setrlimit$auto(0x6f, &(0x7f0000001e00)={0x0, 0x8000}) setsockopt$auto_SO_LINGER(r3, 0xb, 0xd, &(0x7f0000001e40)='nl80211\x00', 0x1) setrlimit$auto(0xfffffff7, &(0x7f0000001e80)={0x5, 0x2}) fadvise64$auto_POSIX_FADV_WILLNEED(r6, 0x3, 0x8000, 0x3) sendmmsg$auto(r2, &(0x7f0000002140)={{&(0x7f0000001ec0)="ad9ff59e6b0351b780d2d322be1c15fa7566d189ebcd032adad8c6de60d291f46d9a8e0527a0ee77514578354d817d7b31d89581d29631de1de24df989f22a2b0c2468639dc3078b5df00564484f9333b00826c2a544b1a47a227c49504c65cdf8ca35fcac77dccfa4e69e9bc4154d8a5b9eef8e27eb5ff8ad1e0d9ffd", 0xfffffff7, &(0x7f0000002040)={&(0x7f0000001f40)="deb5691bd087c75d05810a630a40cd684f2bd047b4bdb435594bee0fd4b953f1442e80f74b8dff7a624346ad8c34b4feab006b6cb91c667604363ba9643db2e9ee24088a44193cb9f14c80b93bddcd077b59afdfdc8c188200765f0350f08d6aaaa7ed8997efb14546fafdd441f1bf25cd14a368e9751dfa84515f0047669d93142e9b6bebbe5eaacb90b42cbd83754cd55d213542bcafb4b71b512996b8eea2ab6a3f4d8e428f2a5aa033624462c7f3cc0f79116c50eea62c282f4439665ea86421608bb96c2a306ef20249431801ff4a843362081e153efbe4f9e655ba97ad7de8a554a55d0a6ff87302be509a63f54a2be477a1", 0x2}, 0x3828, &(0x7f0000002080)="18bb35a8d03623ac44c524d73c4329140aaa0a28c03c728985e28a2ffe3076db8a01535242eff7d13cf7aab7a4c0222824256a92cac8f159ec1b9497e43b5f48711636cd45b46faefcd6b30a6b94a7f865017dd7d8942109abbb374414b19cd2230894d77e38353c9732581281d263f5ce55aef39b0b5470554be3bed1fc0eaaee12b5336d31ce", 0x1, 0xfffffffe}, 0x7fff}, 0x11, 0x6) remap_file_pages$auto(0xddd, 0x1000, 0x9, 0x120000, 0x1) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000002180), 0x84000, 0x0) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000021c0), 0x2641, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r10, 0xc02054a5, &(0x7f0000002280)={0x8, 0xffffffffffffffff, 0x9, "c1704c5082c841a871639ddeba30e6ff"}) 4.694707263s ago: executing program 6 (id=1632): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0xfff, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bpf$auto(0x1d2, &(0x7f0000000200)=@bpf_attr_1={r0, 0x1e000, @next_key=0x2}, 0x8) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x100000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB="61405187f769dfc0d74f38e03e85a536203506879d743f092dd1ef64c6d1111473928d3b3ebd7ee40f10b5c39c4a5420ec7abd61c3d443f6e91e27fec551257509698a0977325e9b51f72bd85312b87e5d08ee0cca3bbfe23b0318ae971e824863be3c1f7f9819838dd53450c80863fc7c0a5402b57697d6e7748dabc53e46b4db4246a5af09047dd43135e9ac165bc8e2ec3b20d899e1d34e96671e767c2bdd19fa02bb9913ee2c5bfbcafbf407458e0e9145b53051e6e87bf96372fc25c0823edb7d3f2961ccf1f349e5e53837768cc3fdca430242fbb9170b25954e813391b7a28de89a9d0eda7f9f3770277cf22e54000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeed2, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.356805189s ago: executing program 5 (id=1635): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/rootcell\x00', 0x8042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) close_range$auto(r3, 0x8, 0x2) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = memfd_create$auto(0x0, 0xe) fcntl$auto(0xff80000000000000, 0x409, 0x13) lgetxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='&-+-+\x00', &(0x7f0000000300)="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", 0x1ee) fallocate$auto(r4, 0x3, 0x2, 0x4) r5 = socket(0xa, 0x801, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x512}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a603, 0x0) ioctl$auto(r6, 0x5646, r6) setsockopt$auto(r3, 0x10000000084, 0x19, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbff256b00000021000d01fd5736a95c80db3ee7c4aadb2715ac2f8807943d1727244eba33fc42fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) 4.163877599s ago: executing program 5 (id=1636): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2b82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) r1 = prctl$auto(0x3c, 0x1, 0x4, 0x5, 0x33c4cc41) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x101, 0xeb2, 0x401, 0x8000) (async) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) (async) futex_requeue$auto(&(0x7f0000000040)={0xf, 0x6, 0x2}, 0xfffffffd, 0xf, 0x9) (async) r3 = epoll_create$auto(0x5a5d) (async, rerun: 64) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) close_range$auto(r0, 0xffffffffffffffff, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sysfs$auto(0x2, 0x7, 0x0) (async) socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=r6, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) r7 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r7, 0x720, 0x0) (async) r8 = timerfd_create$auto(0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r9 = socket(0x2, 0x801, 0x106) (rerun: 64) setsockopt$auto(r9, 0x1, 0x2, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) (rerun: 32) ioctl$auto_VHOST_SET_VRING_CALL2(r8, 0x4008af21, &(0x7f0000000080)={0x3b0, r8}) ioctl$auto(0x3, 0x40085400, 0x5) poll$auto(&(0x7f00000000c0)={r1, 0x800, 0x4a}, 0x5, 0x108) (async) epoll_ctl$auto(r3, 0x1, r2, 0x0) ioctl$auto_NS_GET_PARENT(r10, 0xb702, 0x0) 3.760854249s ago: executing program 7 (id=1637): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) write$auto_evm_key_ops_evm_secfs(r2, 0x0, 0xa) msync$auto(0x200000, 0x2000000005, 0x6) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x10, 0x2, 0xc) 3.514664452s ago: executing program 5 (id=1638): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360ca1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_device\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x5, 0x20007, 0x20000000000004, 0x200000000006517, 0x401, 0x1000000000000f) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x480, 0x0) ioctl$auto_UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000480)=0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(0xffffffffffffffff, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="0fa2b118295d367ac7f732816ef9d690cb07b7541f16b56e169d1e044077d0cfeb953acdfc92b876242d3f09ee8319d4fdf03555e7adb48d8d8a689b84ca8243718fef78e6cd1553b1c2d6114e29158447b81536118ba358a4460350e5378416e3fef6dd32ce2b7a525e37b659a4c212bfd5bc72abbaa27ade500321dfce928ee3c565fe9f76fa76423efb87fd63f43d809834244c9a4a34d78f59e16c84ac07ecb88f51309bc13b85611d2b978a747f1f7181602d2c", @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf25030000001800038014000c0000c12f7a2700000000000000000000000000000112000100898771f1c19f17790485908286dd00000400028004000380bfe1a426df052917556efed9008f3eced8af84cd2b5bec9747d7b7f69560d270559ac39c54cf7c1ba29e0f872b46b094c58aea4b5965501eb3c8f320b391f25ce68b0e33a38d18d226eaeed876e3b0c8058b757295affc"], 0x48}, 0x1, 0x0, 0x0, 0x44000884}, 0xc0844) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mlockall$auto(0x7) mmap$auto(0x353a4000000000, 0x200004, 0x8, 0x40eb3, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_5={@target_ifindex, r4, 0x5, 0x10000, r0, @relative_fd=r4}, 0xa) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0xfffdfffc, 0x13c, 0x9) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}, 0x3}, 0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x200000, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) 3.496005201s ago: executing program 6 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(0x0, 0x161342, 0x100) ioctl$auto_UI_SET_EVBIT(r1, 0x40045564, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x88) setsockopt$auto(r2, 0x11, 0xb, 0x0, 0x8) fspick$auto(r1, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x482b01, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r4, 0x8000) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) socket(0xf, 0x3, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r3, 0x0, 0x0, &(0x7f0000000500)="745564adafe6a295b7242223459ba005d5d72c51044c539ece5ef156e2ac1f0dcc5dd3827b4ad310d74d4ab5f660257e5674af130aeb35586e5ca2d193843aa305ea1a38558751fd8b69758f11d65b70f028de042b04d8d4ece14438d39917841ff01ce5226b5b57c1a04ddd8458195ee425ce222cb6acaf12d7cecaa7c483b90b07f2a4cc4faf38b561ad9a27bf4278171e690018bdc51c9ac7e24c34cfd9fee866cdf9be0aeaf7087e84cd8855d8f03cddcef9441fec3dbc2527322960d9ed2962fe16dfeb630b40115a71", 0x80) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2e, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7) close_range$auto(0x2, 0x8, 0x0) 2.489447327s ago: executing program 5 (id=1640): r0 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x7, 0x4d, &(0x7f0000000000)='3#\\\\(\'([(:\x00', &(0x7f00000000c0)=0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getsockopt$auto_SO_PEERSEC(r1, 0x1ff, 0x1f, &(0x7f0000000300)='/dev/input/event1\x00', &(0x7f0000000340)=0x7fffffff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(r1, 0xae42, r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="6fe7868ee888e522720190dcfa442c39d4160004", @ANYRES16=r3, @ANYBLOB="080027bd7000fcdbdf2579000000b100490184049e2053e7d0e36d3c508cfdf9f9426a6f4f167bc3661c86a7983a833096d8ca4e495c6cb63cf2505b72df6abfdaf052bca5c1338f23fe35a600daa131a1960eb0e9ae393edd4cb6f2783512f77081eaaf2610b9ed4329bdc48bab11d017780218192a50a2a52e9cd23b3bce53672c3a43b62c18826637feeba4d0f142d8a3c2cafc64330a8e1cd7533fc848250b07a20158a0106321ce2b6b7490fc8147040a99952cbb567dc0f4ed865ed4000000040093000500920006000000"], 0xd4}}, 0x8000) socket(0x10, 0x1, 0x106) ioctl$auto(0x3, 0x890b, 0x38) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x212d03, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x4000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r5, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) socket(0x1f, 0x2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=&(0x7f0000000180)='/\\{\x00', &(0x7f0000000240)=&(0x7f0000000200)='/dev/kvm\x00') close_range$auto(r2, 0xffffffffffffffff, 0x1) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x6a4, 0x400, 0x2}]}) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x24, 0x0, 0x108, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/kvm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.311157027s ago: executing program 6 (id=1641): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) (async) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250200000008000300000000000800010005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.006742478s ago: executing program 6 (id=1642): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(r1, 0x0, 0x6) mmap$auto(0x0, 0xe983, 0xfffffffffffffffb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/pppoe\x00', 0x2c00, 0x0) pread64$auto(r3, 0x0, 0x3, 0x8000) r4 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) getdents$auto(r4, 0x0, 0xde) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 1.649473302s ago: executing program 5 (id=1643): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) (rerun: 32) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) (async) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x190b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) fallocate$auto(r1, 0x1, 0x2, 0x6653) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x20000000000000, 0x1, 0x9, 0x8001, 0x1]}, 0x0) (async, rerun: 32) mincore$auto(0x1000, 0x8001, 0x0) r3 = socket(0x2a, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x4, 0x0, 0x4) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000000008000) msync$auto(0x1ffff000, 0x1800000800000fe, 0x400000004) (async, rerun: 64) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) (async) prctl$auto(0xfffff801, 0x6, 0x0, 0xa78, 0x3) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) 1.551372492s ago: executing program 7 (id=1644): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x0) r0 = pipe$auto(0x0) lstat$auto(0x0, 0x0) dup2$auto(0x5, 0x4) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) write$auto(0x6, 0x0, 0x100000001) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) 1.099200984s ago: executing program 2 (id=1645): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/&\x00', 0x5, 0x9) r1 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/sessionid\x00', 0x240, 0x0) preadv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x2}, 0x4, 0x7, 0xe3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000029, 0xfffffffffffffff7, 0x4}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) symlink$auto(&(0x7f00000020c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) eventfd2$auto(0x24d4c362, 0x2) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume_offset\x00', 0xa081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv6/conf/macsec0/accept_source_route\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1fe) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x3) 1.049905992s ago: executing program 6 (id=1646): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) unshare$auto(0x1) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x2, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socket(0x2b, 0x1, 0x1) socketcall$auto_SYS_SHUTDOWN(0xd, &(0x7f0000000080)=0xb5) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01032dbd7000fbdbdf2515000000faa6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)="978693dc87b1c1fd2f1eb908a830a927544df29604e114be47d79b044b10", 0x1e) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 594.747028ms ago: executing program 5 (id=1647): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x0, 0x80, "417acc606935", "008000c6c280"}) write$auto(r1, &(0x7f0000000840)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xf3\x8dz \xee\x04\x18U\xd9\xfeZ\x1a\xe2\x9cK\fE\a\xca\xd36\xe8k8\x83\xcf\xc5D\xcc>\xb2\x9a|y\xfa\xb6\xa6\xeb\xba\xac\xd561\v\x96\xe2 #5\xf6j<\x9a\xc7KG\xa0\xdf\x82\x068k\x05\x9d\xa6\x99\xa3\x91;\xeb\xf8\xff\xae\xe6\x82N\nF\x12\xc5\xc2>k\x9a{o\xaa\xe5n\x97\t\xbd\x06\xaep\b\xc7\xc9\xa4\r\x17s\x86\xf1\x97\x84\x84jL;q\xb5UNO\x0e5\xe1A\x17\x19B\x12t\xb5\xe9]\x94\x95\xe2R\x8d$\x1bm\x9e<\x8f\x11\xab1<\x8b\\\xc1\x94\xbd\x84t\xdbs\xcf\xeb\x84\x8b\x80\xc8u\x93Q\xe2K\xcf7\xd2Y\xc0\xc2\x06\xc3\xbb\x8d\x7faO\x15\xb6ACQ$\x1a\x85\xe6y\xc2\x06\xc9\xff\xdd\xb6\x80\xd9tc\xcb\x01\x1e\xe0\x9a\xc5\x81\xa8\xd2F\x82\xd2\xa3\xe5\xb4&\x84\xe8\x11X\x06:\xd4\xe3ou\xbd\xa3T\xb4@V\x1f\x8f\x19\xa9N\xaf0\xc7\xb7\xccQ;\xcc\x9f\x95\xcf\x92\xa6\xf1!\xf7\x02Dq6\x96\x80\xfaD\xccw*\xae\xdfl.F\x1c\x8c\xe89\x01\xf6\xe3f:\xccys\xda\xc1\xbc],\x10\x1f\xe1\xc6\x909\x88IHJ\xb0\x1a\x9f!\xa0\xcc\f+\x96\xd8\x06F\xd2\xd3\xf0\xf0\xcam\xa4:2\x81\xf8F\xce&3\x1f|\x17n<\xbdGv\xf1/\x1c\xf0 1 [ 86.935168][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.947135][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.956290][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.965323][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.973574][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.981375][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.991850][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.000976][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.011777][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.040514][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.057087][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.064541][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.093465][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.100747][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.119813][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.130934][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.138211][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.147182][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.155167][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.736039][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.874036][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.979279][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 87.990459][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.998648][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.006314][ T5827] bridge_slave_0: entered allmulticast mode [ 88.013735][ T5827] bridge_slave_0: entered promiscuous mode [ 88.073698][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.081607][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.094973][ T5827] bridge_slave_1: entered allmulticast mode [ 88.103168][ T5827] bridge_slave_1: entered promiscuous mode [ 88.156564][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.189101][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.223905][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.305722][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.313221][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.321404][ T5828] bridge_slave_0: entered allmulticast mode [ 88.329114][ T5828] bridge_slave_0: entered promiscuous mode [ 88.348170][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.355646][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.362978][ T5826] bridge_slave_0: entered allmulticast mode [ 88.370431][ T5826] bridge_slave_0: entered promiscuous mode [ 88.382516][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.389733][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.397833][ T5828] bridge_slave_1: entered allmulticast mode [ 88.405300][ T5828] bridge_slave_1: entered promiscuous mode [ 88.415051][ T5827] team0: Port device team_slave_0 added [ 88.423577][ T5827] team0: Port device team_slave_1 added [ 88.429713][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.437080][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.444472][ T5826] bridge_slave_1: entered allmulticast mode [ 88.452541][ T5826] bridge_slave_1: entered promiscuous mode [ 88.536016][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.543306][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.570073][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.584791][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.607720][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.618576][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.626497][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.653007][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.667687][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.690666][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.728139][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.735832][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.743852][ T5825] bridge_slave_0: entered allmulticast mode [ 88.751458][ T5825] bridge_slave_0: entered promiscuous mode [ 88.787351][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.794755][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.802681][ T5825] bridge_slave_1: entered allmulticast mode [ 88.809856][ T5825] bridge_slave_1: entered promiscuous mode [ 88.818580][ T5828] team0: Port device team_slave_0 added [ 88.826638][ T5826] team0: Port device team_slave_0 added [ 88.857702][ T5828] team0: Port device team_slave_1 added [ 88.869205][ T5826] team0: Port device team_slave_1 added [ 88.926877][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.942829][ T5827] hsr_slave_0: entered promiscuous mode [ 88.949209][ T5827] hsr_slave_1: entered promiscuous mode [ 88.981030][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.005479][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.013214][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.039377][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.051738][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.058721][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.085007][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.101349][ T5832] Bluetooth: hci3: command tx timeout [ 89.101353][ T52] Bluetooth: hci0: command tx timeout [ 89.130046][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.137080][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.166868][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.178880][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.186035][ T5832] Bluetooth: hci1: command tx timeout [ 89.186156][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.218380][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.235531][ T5825] team0: Port device team_slave_0 added [ 89.260219][ T5832] Bluetooth: hci2: command tx timeout [ 89.269383][ T5825] team0: Port device team_slave_1 added [ 89.301938][ T5828] hsr_slave_0: entered promiscuous mode [ 89.309852][ T5828] hsr_slave_1: entered promiscuous mode [ 89.317890][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 89.324818][ T5828] Cannot create hsr debugfs directory [ 89.415868][ T5826] hsr_slave_0: entered promiscuous mode [ 89.422457][ T5826] hsr_slave_1: entered promiscuous mode [ 89.428700][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 89.434529][ T5826] Cannot create hsr debugfs directory [ 89.441241][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.448208][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.475615][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.534195][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.541714][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.567929][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.763978][ T5825] hsr_slave_0: entered promiscuous mode [ 89.770856][ T5825] hsr_slave_1: entered promiscuous mode [ 89.776944][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 89.783280][ T5825] Cannot create hsr debugfs directory [ 89.972718][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.986035][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.028856][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.041025][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.150625][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.163124][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.177567][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.212197][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.294023][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.313334][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.325607][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.345842][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.475464][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.486827][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.501316][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.509529][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.526333][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.583539][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.611443][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.619045][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.633340][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.660208][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.667396][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.736440][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.763813][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.771080][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.791821][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.811168][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.818601][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.914356][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.958519][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.965757][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.009402][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.029287][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.036521][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.073937][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.138656][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.146404][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.157561][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.164801][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.181505][ T5832] Bluetooth: hci3: command tx timeout [ 91.201151][ T5832] Bluetooth: hci0: command tx timeout [ 91.260610][ T5832] Bluetooth: hci1: command tx timeout [ 91.340029][ T5832] Bluetooth: hci2: command tx timeout [ 91.365402][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.533118][ T5827] veth0_vlan: entered promiscuous mode [ 91.583498][ T5827] veth1_vlan: entered promiscuous mode [ 91.652327][ T5827] veth0_macvtap: entered promiscuous mode [ 91.668264][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.689798][ T5827] veth1_macvtap: entered promiscuous mode [ 91.758472][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.788394][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.810353][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.846374][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.861918][ T3495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.872683][ T3495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.898498][ T3495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926882][ T3495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948670][ T5826] veth0_vlan: entered promiscuous mode [ 91.967872][ T5828] veth0_vlan: entered promiscuous mode [ 92.015331][ T5826] veth1_vlan: entered promiscuous mode [ 92.035042][ T5828] veth1_vlan: entered promiscuous mode [ 92.081176][ T5825] veth0_vlan: entered promiscuous mode [ 92.094236][ T5825] veth1_vlan: entered promiscuous mode [ 92.101567][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.109660][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153217][ T1218] cfg80211: failed to load regulatory.db [ 92.199670][ T5828] veth0_macvtap: entered promiscuous mode [ 92.226198][ T5825] veth0_macvtap: entered promiscuous mode [ 92.231836][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.241284][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.242655][ T5828] veth1_macvtap: entered promiscuous mode [ 92.261936][ T5826] veth0_macvtap: entered promiscuous mode [ 92.274129][ T5825] veth1_macvtap: entered promiscuous mode [ 92.289110][ T5826] veth1_macvtap: entered promiscuous mode [ 92.318631][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.358078][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.359351][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.397129][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.411447][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.431945][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.451346][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.469599][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518212][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.542470][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.571561][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597459][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606872][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.644608][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.655818][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.675099][ T3501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.711558][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721800][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811868][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.845537][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.866010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.896404][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.911189][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.028176][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.037742][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.074520][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.087289][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.124632][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.141345][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.164401][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.193713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.260473][ T5832] Bluetooth: hci0: command tx timeout [ 93.264272][ T52] Bluetooth: hci3: command tx timeout [ 93.341700][ T52] Bluetooth: hci1: command tx timeout [ 93.353606][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.420621][ T52] Bluetooth: hci2: command tx timeout [ 93.795208][ T5937] svc: failed to register nfsdv3 RPC service (errno 111). [ 93.805203][ T5937] svc: failed to register nfsaclv3 RPC service (errno 111). [ 93.850416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.880280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.153003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.291992][ T5948] netlink: 342 bytes leftover after parsing attributes in process `syz.0.7'. [ 94.310644][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.680242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.683503][ T5949] zswap: compressor not available [ 95.343453][ T52] Bluetooth: hci0: command tx timeout [ 95.348930][ T52] Bluetooth: hci3: command tx timeout [ 95.420674][ T52] Bluetooth: hci1: command tx timeout [ 95.500559][ T52] Bluetooth: hci2: command tx timeout [ 95.625030][ T5960] FAULT_INJECTION: forcing a failure. [ 95.625030][ T5960] name failslab, interval 1, probability 0, space 0, times 1 [ 95.690302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 95.739540][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 95.739562][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.739574][ T5960] Call Trace: [ 95.739580][ T5960] [ 95.739587][ T5960] dump_stack_lvl+0x16c/0x1f0 [ 95.739615][ T5960] should_fail_ex+0x512/0x640 [ 95.739640][ T5960] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 95.739658][ T5960] should_failslab+0xc2/0x120 [ 95.739677][ T5960] kmem_cache_alloc_node_noprof+0x78/0x770 [ 95.739691][ T5960] ? __alloc_skb+0x2b2/0x380 [ 95.739716][ T5960] ? __alloc_skb+0x2b2/0x380 [ 95.739735][ T5960] __alloc_skb+0x2b2/0x380 [ 95.739755][ T5960] ? __pfx___alloc_skb+0x10/0x10 [ 95.739779][ T5960] ? tcp_send_mss+0x159/0x2c0 [ 95.739800][ T5960] mptcp_sendmsg_frag+0x4d7/0x2cb0 [ 95.739828][ T5960] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 95.739860][ T5960] __subflow_push_pending+0x345/0xac0 [ 95.739900][ T5960] __mptcp_push_pending+0x2ce/0x550 [ 95.739941][ T5960] ? __pfx___mptcp_push_pending+0x10/0x10 [ 95.739982][ T5960] mptcp_sendmsg+0xd2f/0x1ec0 [ 95.740006][ T5960] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 95.740025][ T5960] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 95.740039][ T5960] inet_sendmsg+0x11c/0x140 [ 95.740061][ T5960] sock_write_iter+0x509/0x610 [ 95.740080][ T5960] ? __pfx_sock_write_iter+0x10/0x10 [ 95.740104][ T5960] ? bpf_lsm_file_permission+0x9/0x10 [ 95.740121][ T5960] ? security_file_permission+0x71/0x210 [ 95.740137][ T5960] ? rw_verify_area+0xcf/0x6c0 [ 95.740153][ T5960] vfs_write+0x7d3/0x11d0 [ 95.740168][ T5960] ? __pfx_sock_write_iter+0x10/0x10 [ 95.740187][ T5960] ? __pfx_vfs_write+0x10/0x10 [ 95.740200][ T5960] ? find_held_lock+0x2b/0x80 [ 95.740229][ T5960] ksys_write+0x1f8/0x250 [ 95.740244][ T5960] ? __pfx_ksys_write+0x10/0x10 [ 95.740264][ T5960] do_syscall_64+0xcd/0xfa0 [ 95.740281][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.740296][ T5960] RIP: 0033:0x7fba34f8efc9 [ 95.740314][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.740328][ T5960] RSP: 002b:00007fba35d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.740342][ T5960] RAX: ffffffffffffffda RBX: 00007fba351e5fa0 RCX: 00007fba34f8efc9 [ 95.740352][ T5960] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 95.740374][ T5960] RBP: 00007fba35011f91 R08: 0000000000000000 R09: 0000000000000000 [ 95.740382][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.740390][ T5960] R13: 00007fba351e6038 R14: 00007fba351e5fa0 R15: 00007ffe14f8cb48 [ 95.740410][ T5960] [ 96.022208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.032129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 96.181811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.184840][ T5963] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.540554][ T30] audit: type=1804 audit(1761587160.239:2): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.11" name="/newroot/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=203 res=1 errno=0 [ 96.962908][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12'. [ 97.150448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 97.244397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.444470][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 97.472129][ T5992] netlink: zone id is out of range [ 97.478536][ T5992] netlink: zone id is out of range [ 97.484945][ T5992] netlink: zone id is out of range [ 97.535360][ T5992] netlink: zone id is out of range [ 97.540741][ T5992] netlink: zone id is out of range [ 97.546999][ T5992] netlink: zone id is out of range [ 97.714234][ T5992] netlink: zone id is out of range [ 97.813043][ T5992] netlink: zone id is out of range [ 97.889157][ T5992] netlink: zone id is out of range [ 97.924562][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 97.955270][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 98.051657][ T5992] netlink: zone id is out of range [ 98.064557][ T5997] netlink: 342 bytes leftover after parsing attributes in process `syz.3.15'. [ 98.077098][ T5997] Zero length message leads to an empty skb [ 98.520675][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 98.545732][ T6010] netlink: 'syz.3.18': attribute type 7 has an invalid length. [ 98.608193][ T5999] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.685809][ T6026] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.094384][ T6024] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.495070][ T52] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 100.997243][ T6044] delete_channel: no stack [ 101.129458][ T6041] process 'syz.3.24' launched ':,' with NULL argv: empty string added [ 101.287805][ T6047] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23'. [ 101.309743][ T6052] FAULT_INJECTION: forcing a failure. [ 101.309743][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.325326][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(full) [ 101.325358][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.325372][ T6052] Call Trace: [ 101.325379][ T6052] [ 101.325387][ T6052] dump_stack_lvl+0x16c/0x1f0 [ 101.325417][ T6052] should_fail_ex+0x512/0x640 [ 101.325456][ T6052] _copy_to_iter+0x29f/0x1710 [ 101.325494][ T6052] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 101.325522][ T6052] ? kernfs_root+0xf8/0x2a0 [ 101.325553][ T6052] ? __pfx__copy_to_iter+0x10/0x10 [ 101.325589][ T6052] ? kernfs_seq_stop+0xcd/0x120 [ 101.325636][ T6052] ? kernfs_put_active+0x86/0xe0 [ 101.325672][ T6052] seq_read_iter+0xd02/0x12d0 [ 101.325724][ T6052] kernfs_fop_read_iter+0x46c/0x610 [ 101.325748][ T6052] ? rw_verify_area+0xcf/0x6c0 [ 101.325774][ T6052] vfs_read+0x8bf/0xcf0 [ 101.325804][ T6052] ? __pfx___mutex_lock+0x10/0x10 [ 101.325831][ T6052] ? __pfx_vfs_read+0x10/0x10 [ 101.325880][ T6052] ksys_read+0x12a/0x250 [ 101.325905][ T6052] ? __pfx_ksys_read+0x10/0x10 [ 101.325940][ T6052] do_syscall_64+0xcd/0xfa0 [ 101.325968][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.325993][ T6052] RIP: 0033:0x7f0e0718efc9 [ 101.326012][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.326032][ T6052] RSP: 002b:00007f0e053f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.326059][ T6052] RAX: ffffffffffffffda RBX: 00007f0e073e6090 RCX: 00007f0e0718efc9 [ 101.326074][ T6052] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 101.326087][ T6052] RBP: 00007f0e07211f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.326101][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.326115][ T6052] R13: 00007f0e073e6128 R14: 00007f0e073e6090 R15: 00007ffee1389e18 [ 101.326151][ T6052] [ 101.898067][ T6063] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 103.965116][ T6099] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 104.239324][ T6100] futex_wake_op: syz.1.38 tries to shift op by -9; fix this program [ 106.633192][ T52] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 106.698971][ T6131] could not allocate digest TFM handle [ 108.058757][ T6155] tipc: Started in network mode [ 108.065411][ T6155] tipc: Node identity ee00, cluster identity 4711 [ 108.093938][ T6155] tipc: Node number set to 60928 [ 108.377801][ T6164] netlink: 'syz.1.51': attribute type 60 has an invalid length. [ 108.541754][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.678160][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.771889][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.901882][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.684020][ T12] bridge_slave_1: left allmulticast mode [ 109.697957][ T12] bridge_slave_1: left promiscuous mode [ 109.716738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.733469][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.747802][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.758942][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.767224][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.775352][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.837137][ T12] bridge_slave_0: left allmulticast mode [ 109.842978][ T12] bridge_slave_0: left promiscuous mode [ 109.848840][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.944302][ T6201] FAULT_INJECTION: forcing a failure. [ 110.944302][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 110.962392][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.1.61 Not tainted syzkaller #0 PREEMPT(full) [ 110.962418][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.962428][ T6201] Call Trace: [ 110.962434][ T6201] [ 110.962440][ T6201] dump_stack_lvl+0x16c/0x1f0 [ 110.962463][ T6201] should_fail_ex+0x512/0x640 [ 110.962487][ T6201] ? fs_reclaim_acquire+0xae/0x150 [ 110.962510][ T6201] should_failslab+0xc2/0x120 [ 110.962530][ T6201] __kmalloc_noprof+0xdd/0x880 [ 110.962553][ T6201] ? tomoyo_encode2+0x100/0x3e0 [ 110.962572][ T6201] ? tomoyo_encode2+0x100/0x3e0 [ 110.962586][ T6201] tomoyo_encode2+0x100/0x3e0 [ 110.962604][ T6201] tomoyo_encode+0x29/0x50 [ 110.962618][ T6201] tomoyo_realpath_from_path+0x18f/0x6e0 [ 110.962639][ T6201] tomoyo_path_perm+0x274/0x460 [ 110.962659][ T6201] ? tomoyo_path_perm+0x260/0x460 [ 110.962681][ T6201] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 110.962723][ T6201] ? __pfx_ima_file_check+0x10/0x10 [ 110.962741][ T6201] ? hook_file_truncate+0xc7/0x250 [ 110.962760][ T6201] security_file_truncate+0x84/0x1e0 [ 110.962776][ T6201] path_openat+0xc10/0x2cb0 [ 110.962798][ T6201] ? __pfx_path_openat+0x10/0x10 [ 110.962814][ T6201] ? __lock_acquire+0xb8a/0x1c90 [ 110.962836][ T6201] do_filp_open+0x20b/0x470 [ 110.962851][ T6201] ? __pfx_do_filp_open+0x10/0x10 [ 110.962879][ T6201] ? alloc_fd+0x471/0x7d0 [ 110.962899][ T6201] do_sys_openat2+0x11b/0x1d0 [ 110.962937][ T6201] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.962964][ T6201] __x64_sys_openat+0x174/0x210 [ 110.962984][ T6201] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.963012][ T6201] do_syscall_64+0xcd/0xfa0 [ 110.963030][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.963045][ T6201] RIP: 0033:0x7f0e0718efc9 [ 110.963057][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.963071][ T6201] RSP: 002b:00007f0e07f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.963084][ T6201] RAX: ffffffffffffffda RBX: 00007f0e073e5fa0 RCX: 00007f0e0718efc9 [ 110.963093][ T6201] RDX: 0000000000002202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 110.963102][ T6201] RBP: 00007f0e07211f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.963110][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.963118][ T6201] R13: 00007f0e073e6038 R14: 00007f0e073e5fa0 R15: 00007ffee1389e18 [ 110.963146][ T6201] [ 110.963165][ T6201] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.480480][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.512609][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.545360][ T12] bond0 (unregistering): Released all slaves [ 111.822794][ T5832] Bluetooth: hci2: command tx timeout [ 112.536135][ T12] hsr_slave_0: left promiscuous mode [ 112.562387][ T12] hsr_slave_1: left promiscuous mode [ 112.572667][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.592392][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.616470][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.633495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.922566][ T12] veth1_macvtap: left promiscuous mode [ 112.929874][ T12] veth0_macvtap: left promiscuous mode [ 112.937802][ T12] veth1_vlan: left promiscuous mode [ 112.986365][ T12] veth0_vlan: left promiscuous mode [ 113.900062][ T5832] Bluetooth: hci2: command tx timeout [ 115.436894][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 115.921531][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.930116][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.937367][ T6179] bridge_slave_0: entered allmulticast mode [ 115.960180][ T6179] bridge_slave_0: entered promiscuous mode [ 115.986499][ T5832] Bluetooth: hci2: command tx timeout [ 116.000565][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.015310][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.022999][ T6179] bridge_slave_1: entered allmulticast mode [ 116.034143][ T6179] bridge_slave_1: entered promiscuous mode [ 116.127193][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.165770][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.272200][ T6179] team0: Port device team_slave_0 added [ 116.283463][ T6179] team0: Port device team_slave_1 added [ 116.487607][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.505186][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.587813][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.617442][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.637652][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.690049][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.837072][ T6312] FAULT_INJECTION: forcing a failure. [ 116.837072][ T6312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 116.859118][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 116.859156][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.859172][ T6312] Call Trace: [ 116.859181][ T6312] [ 116.859192][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 116.859242][ T6312] should_fail_ex+0x512/0x640 [ 116.859283][ T6312] should_fail_alloc_page+0xe7/0x130 [ 116.859320][ T6312] prepare_alloc_pages+0x3c2/0x610 [ 116.859355][ T6312] ? rcu_is_watching+0x12/0xc0 [ 116.859387][ T6312] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 116.859415][ T6312] ? css_rstat_updated+0x1c2/0x510 [ 116.859448][ T6312] ? __pfx_css_rstat_updated+0x10/0x10 [ 116.859475][ T6312] ? finish_task_switch.isra.0+0x221/0xc10 [ 116.859517][ T6312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.859559][ T6312] ? __lock_acquire+0x622/0x1c90 [ 116.859598][ T6312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.859640][ T6312] ? policy_nodemask+0xea/0x4e0 [ 116.859675][ T6312] alloc_pages_mpol+0x1fb/0x550 [ 116.859709][ T6312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 116.859750][ T6312] folio_alloc_mpol_noprof+0x36/0x2f0 [ 116.859789][ T6312] vma_alloc_folio_noprof+0xed/0x1e0 [ 116.859825][ T6312] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 116.859877][ T6312] do_pte_missing+0x2202/0x3ba0 [ 116.859924][ T6312] ? find_held_lock+0x2b/0x80 [ 116.859955][ T6312] __handle_mm_fault+0x1556/0x2aa0 [ 116.860003][ T6312] ? __pfx___handle_mm_fault+0x10/0x10 [ 116.860038][ T6312] ? __pte_offset_map_lock+0x174/0x310 [ 116.860068][ T6312] ? find_held_lock+0x2b/0x80 [ 116.860101][ T6312] ? follow_page_pte+0x5cf/0x1390 [ 116.860136][ T6312] handle_mm_fault+0x589/0xd10 [ 116.860177][ T6312] __get_user_pages+0x54e/0x3530 [ 116.860222][ T6312] ? __pfx___get_user_pages+0x10/0x10 [ 116.860265][ T6312] populate_vma_page_range+0x267/0x3f0 [ 116.860300][ T6312] ? __pfx_populate_vma_page_range+0x10/0x10 [ 116.860331][ T6312] ? __pfx_find_vma_intersection+0x10/0x10 [ 116.860362][ T6312] ? do_mmap+0x69c/0x1210 [ 116.860395][ T6312] __mm_populate+0x1d8/0x380 [ 116.860431][ T6312] ? __pfx___mm_populate+0x10/0x10 [ 116.860466][ T6312] ? up_write+0x1b2/0x520 [ 116.860500][ T6312] vm_mmap_pgoff+0x37f/0x470 [ 116.860532][ T6312] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 116.860566][ T6312] ? __x64_sys_futex+0x1e0/0x4c0 [ 116.860594][ T6312] ? __x64_sys_futex+0x1e9/0x4c0 [ 116.860628][ T6312] ksys_mmap_pgoff+0x7d/0x5c0 [ 116.860653][ T6312] ? xfd_validate_state+0x61/0x180 [ 116.860691][ T6312] __x64_sys_mmap+0x125/0x190 [ 116.860730][ T6312] do_syscall_64+0xcd/0xfa0 [ 116.860760][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.860785][ T6312] RIP: 0033:0x7f2d7678efc9 [ 116.860820][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.860844][ T6312] RSP: 002b:00007f2d776a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 116.860868][ T6312] RAX: ffffffffffffffda RBX: 00007f2d769e5fa0 RCX: 00007f2d7678efc9 [ 116.860885][ T6312] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 116.860906][ T6312] RBP: 00007f2d76811f91 R08: 0000000000000002 R09: 0000000000008000 [ 116.860922][ T6312] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 116.860938][ T6312] R13: 00007f2d769e6038 R14: 00007f2d769e5fa0 R15: 00007ffdf9905a38 [ 116.860974][ T6312] [ 117.323146][ T6179] hsr_slave_0: entered promiscuous mode [ 117.351423][ T6179] hsr_slave_1: entered promiscuous mode [ 117.402677][ T6179] debugfs: 'hsr0' already exists in 'hsr' [ 117.408490][ T6179] Cannot create hsr debugfs directory [ 117.451523][ T6323] input: f as /devices/virtual/input/input5 [ 117.674923][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'. [ 118.060033][ T5832] Bluetooth: hci2: command tx timeout [ 118.287053][ T6179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.360733][ T6179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.943502][ T6179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.984402][ T6179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.379350][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.447924][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.652863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.660077][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.050405][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.057649][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.123721][ T6364] kafs: addr_prefs: Invalid Command [ 120.172391][ T5832] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 120.392655][ T6379] netlink: 122 bytes leftover after parsing attributes in process `syz.1.87'. [ 120.458734][ T6379] netlink: 18 bytes leftover after parsing attributes in process `syz.1.87'. [ 120.855379][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.358725][ T6179] veth0_vlan: entered promiscuous mode [ 122.447635][ T6179] veth1_vlan: entered promiscuous mode [ 122.547134][ T6179] veth0_macvtap: entered promiscuous mode [ 122.623201][ T6179] veth1_macvtap: entered promiscuous mode [ 122.624568][ T6425] FAULT_INJECTION: forcing a failure. [ 122.624568][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 122.643890][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT(full) [ 122.643912][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.643922][ T6425] Call Trace: [ 122.643927][ T6425] [ 122.643934][ T6425] dump_stack_lvl+0x16c/0x1f0 [ 122.643956][ T6425] should_fail_ex+0x512/0x640 [ 122.643977][ T6425] ? __kmalloc_cache_noprof+0x5f/0x780 [ 122.644005][ T6425] should_failslab+0xc2/0x120 [ 122.644023][ T6425] __kmalloc_cache_noprof+0x72/0x780 [ 122.644046][ T6425] ? apply_wqattrs_prepare+0x130/0xbd0 [ 122.644066][ T6425] ? apply_wqattrs_prepare+0x130/0xbd0 [ 122.644080][ T6425] apply_wqattrs_prepare+0x130/0xbd0 [ 122.644103][ T6425] apply_workqueue_attrs_locked+0x64/0xe0 [ 122.644119][ T6425] __alloc_workqueue+0xf3f/0x1810 [ 122.644144][ T6425] alloc_workqueue_noprof+0xd2/0x200 [ 122.644162][ T6425] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 122.644182][ T6425] ? rcu_is_watching+0x12/0xc0 [ 122.644197][ T6425] ? trace_kmalloc+0x2b/0xd0 [ 122.644213][ T6425] ? __kmalloc_noprof+0x34f/0x880 [ 122.644234][ T6425] ? ieee80211_register_hw+0x15c9/0x4120 [ 122.644258][ T6425] ieee80211_register_hw+0x1f1a/0x4120 [ 122.644282][ T6425] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 122.644300][ T6425] ? __pfx___debug_object_init+0x10/0x10 [ 122.644321][ T6425] ? find_held_lock+0x2b/0x80 [ 122.644336][ T6425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.644360][ T6425] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 122.644378][ T6425] ? __hrtimer_setup+0x176/0x280 [ 122.644409][ T6425] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 122.644437][ T6425] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 122.644459][ T6425] hwsim_new_radio_nl+0xba2/0x1330 [ 122.644476][ T6425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 122.644497][ T6425] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 122.644517][ T6425] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 122.644538][ T6425] genl_family_rcv_msg_doit+0x209/0x2f0 [ 122.644557][ T6425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 122.644581][ T6425] ? bpf_lsm_capable+0x9/0x10 [ 122.644599][ T6425] ? security_capable+0x7e/0x260 [ 122.644619][ T6425] ? ns_capable+0xd7/0x110 [ 122.644636][ T6425] genl_rcv_msg+0x55c/0x800 [ 122.644655][ T6425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.644672][ T6425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 122.644708][ T6425] netlink_rcv_skb+0x158/0x420 [ 122.644729][ T6425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.644748][ T6425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.644772][ T6425] ? netlink_deliver_tap+0x1ae/0xd30 [ 122.644798][ T6425] genl_rcv+0x28/0x40 [ 122.644813][ T6425] netlink_unicast+0x5aa/0x870 [ 122.644832][ T6425] ? __pfx_netlink_unicast+0x10/0x10 [ 122.644854][ T6425] netlink_sendmsg+0x8c8/0xdd0 [ 122.644871][ T6425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.644888][ T6425] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 122.644912][ T6425] ____sys_sendmsg+0xa98/0xc70 [ 122.644930][ T6425] ? copy_msghdr_from_user+0x10a/0x160 [ 122.644943][ T6425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.644970][ T6425] ___sys_sendmsg+0x134/0x1d0 [ 122.644981][ T6425] ? futex_private_hash_put+0x176/0x300 [ 122.645000][ T6425] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.645011][ T6425] ? __lock_acquire+0x622/0x1c90 [ 122.645054][ T6425] __sys_sendmsg+0x16d/0x220 [ 122.645067][ T6425] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.645079][ T6425] ? __x64_sys_futex+0x1e0/0x4c0 [ 122.645110][ T6425] do_syscall_64+0xcd/0xfa0 [ 122.645128][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.645142][ T6425] RIP: 0033:0x7f2d7678efc9 [ 122.645155][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.645168][ T6425] RSP: 002b:00007f2d77686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.645183][ T6425] RAX: ffffffffffffffda RBX: 00007f2d769e6090 RCX: 00007f2d7678efc9 [ 122.645193][ T6425] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000000f [ 122.645201][ T6425] RBP: 00007f2d76811f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.645210][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.645218][ T6425] R13: 00007f2d769e6128 R14: 00007f2d769e6090 R15: 00007ffdf9905a38 [ 122.645239][ T6425] [ 123.144434][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.293012][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.475906][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.544358][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.694132][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.815198][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.834685][ T5832] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 124.050300][ T30] audit: type=1800 audit(4294967314.440:3): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="dbroot" dev="configfs" ino=9906 res=0 errno=0 [ 124.070063][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.178347][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.194811][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.510137][ T6447] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 124.561296][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.569371][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.819461][T11823] ICMPv6: process `syz.7.1115' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 435.867290][T11251] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 436.216310][ T7740] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 436.265446][ T7740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 436.265446][ T7740] [ 437.037181][T11837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 438.352474][T11845] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 438.417469][T11845] EXT4-fs (sda1): This should not happen!! Data will be lost [ 438.417469][T11845] [ 439.794439][T11251] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 440.391356][T11913] futex_wake_op: syz.6.1129 tries to shift op by -2048; fix this program [ 440.641991][T11913] bond0: option fail_over_mac: invalid value () [ 441.529037][ T3501] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 441.564293][ T3501] EXT4-fs (sda1): This should not happen!! Data will be lost [ 441.564293][ T3501] [ 442.381121][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 442.421649][T11960] hub 1-0:1.0: USB hub found [ 442.445400][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 442.445400][ T60] [ 442.462702][T11960] hub 1-0:1.0: 1 port detected [ 442.544512][T11967] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 442.952972][T11982] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 442.970239][T11982] EXT4-fs (sda1): This should not happen!! Data will be lost [ 442.970239][T11982] [ 443.683119][T11982] Process accounting resumed [ 444.214688][ T7740] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 444.302627][ T7740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 444.302627][ T7740] [ 444.584914][T11251] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 445.390297][T12029] Invalid ELF header magic: != ELF [ 445.438452][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.445155][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.631589][ T30] audit: type=1800 audit(4294967381.790:21): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1150" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 446.352851][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 446.823191][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 446.835759][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 446.835759][ T12] [ 446.888946][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 446.960052][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 446.960052][ T12] [ 448.334742][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805db4d400: rx timeout, send abort [ 448.343237][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db4d400: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 449.201901][ T3501] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 449.249100][ T3501] EXT4-fs (sda1): This should not happen!! Data will be lost [ 449.249100][ T3501] [ 449.377918][ T3501] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 449.400109][ T3501] EXT4-fs (sda1): This should not happen!! Data will be lost [ 449.400109][ T3501] [ 450.052330][T12158] 0x000200000001-0xa29656a63616329 : "" [ 450.058060][T12158] mtd: partition "" is out of reach -- disabled [ 450.073974][T12158] ftl_cs: FTL header not found. [ 451.093838][T12183] Invalid ELF header magic: != ELF [ 452.514600][T12218] ptrace attach of "./syz-executor exec"[10008] was attempted by "./syz-executor exec"[12218] [ 453.076020][T12238] batman_adv: Routing algorithm '' is not supported [ 453.567693][T12262] netlink: 'syz.2.1183': attribute type 11 has an invalid length. [ 454.087313][T12283] zswap: compressor not available [ 454.785197][T12303] bond0: option fail_over_mac: invalid value () [ 454.864526][T12299] bond0: option fail_over_mac: invalid value () [ 457.632244][T12372] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 457.660521][T12371] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 458.234750][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 5 with max blocks 1 with error 117 [ 458.352604][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 458.352604][ T60] [ 458.775152][T12398] tipc: Started in network mode [ 458.780383][T12398] tipc: Node identity ee00, cluster identity 4711 [ 458.786818][T12398] tipc: Node number set to 60928 [ 458.847178][T12397] delete_channel: no stack [ 460.220752][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1215'. [ 460.416910][ T30] audit: type=1804 audit(4294967396.570:22): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1216" name="/newroot/102/file0" dev="tmpfs" ino=544 res=1 errno=0 [ 460.476577][T12449] Process accounting paused [ 460.507798][ T30] audit: type=1804 audit(4294967396.570:23): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1216" name="/newroot/102/file0" dev="tmpfs" ino=544 res=1 errno=0 [ 460.882220][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1217'. [ 462.816838][T12506] zswap: compressor not available [ 463.262619][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 924 with max blocks 4 with error 117 [ 463.470291][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 463.470291][ T12] [ 464.149106][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 465.083055][T12557] usb usb36: usbfs: process 12557 (syz.2.1230) did not claim interface 0 before use [ 465.625087][T12578] vhci_hcd: invalid port number 21 [ 465.799295][T12585] netlink: zone id is out of range [ 465.804787][T12585] netlink: zone id is out of range [ 465.810155][T12585] netlink: zone id is out of range [ 465.815530][T12585] netlink: zone id is out of range [ 465.821051][T12585] netlink: zone id is out of range [ 465.826235][T12585] netlink: zone id is out of range [ 465.831564][T12585] netlink: zone id is out of range [ 465.838445][T12585] netlink: zone id is out of range [ 465.843682][T12585] netlink: zone id is out of range [ 465.849036][T12585] netlink: zone id is out of range [ 466.467322][ T7732] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 924 with max blocks 1 with error 117 [ 466.543664][ T7732] EXT4-fs (sda1): This should not happen!! Data will be lost [ 466.543664][ T7732] [ 468.902472][T12665] Invalid ELF header magic: != ELF [ 471.135952][T12678] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[12678] [ 472.313828][T12718] aoe: can't write to that file. [ 472.426601][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 5 with max blocks 7 with error 117 [ 472.480030][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 472.480030][ T12] [ 474.980897][T11251] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 477.609206][T12752] Process accounting paused [ 479.412308][T12799] FAULT_INJECTION: forcing a failure. [ 479.412308][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 479.412372][T12799] CPU: 1 UID: 0 PID: 12799 Comm: syz.2.1271 Not tainted syzkaller #0 PREEMPT(full) [ 479.412391][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 479.412400][T12799] Call Trace: [ 479.412407][T12799] [ 479.412414][T12799] dump_stack_lvl+0x16c/0x1f0 [ 479.412435][T12799] should_fail_ex+0x512/0x640 [ 479.412457][T12799] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 479.412477][T12799] should_failslab+0xc2/0x120 [ 479.412497][T12799] kmem_cache_alloc_node_noprof+0x78/0x770 [ 479.412512][T12799] ? __alloc_skb+0x2b2/0x380 [ 479.412538][T12799] ? __alloc_skb+0x2b2/0x380 [ 479.412557][T12799] __alloc_skb+0x2b2/0x380 [ 479.412576][T12799] ? __pfx___alloc_skb+0x10/0x10 [ 479.412596][T12799] ? find_held_lock+0x2b/0x80 [ 479.412614][T12799] ? __lock_acquire+0x622/0x1c90 [ 479.412634][T12799] sctp_packet_transmit+0x1ca/0x3040 [ 479.412673][T12799] ? find_held_lock+0x2b/0x80 [ 479.412688][T12799] ? sctp_outq_flush+0xb4e/0x3350 [ 479.412714][T12799] sctp_outq_flush+0xb68/0x3350 [ 479.412738][T12799] ? mark_held_locks+0x49/0x80 [ 479.412756][T12799] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 479.412772][T12799] ? __pfx_sctp_outq_flush+0x10/0x10 [ 479.412797][T12799] ? sctp_outq_tail+0x671/0xa30 [ 479.412819][T12799] sctp_do_sm+0x1792/0x5c80 [ 479.412845][T12799] ? arch_stack_walk+0xa6/0x100 [ 479.412878][T12799] ? __pfx_sctp_do_sm+0x10/0x10 [ 479.412897][T12799] ? look_up_lock_class+0x59/0x150 [ 479.412913][T12799] ? register_lock_class+0x41/0x4c0 [ 479.412951][T12799] ? mark_held_locks+0x49/0x80 [ 479.412968][T12799] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 479.412982][T12799] ? lockdep_hardirqs_on+0x7c/0x110 [ 479.412996][T12799] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 479.413013][T12799] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 479.413038][T12799] sctp_close+0x3ff/0x940 [ 479.413059][T12799] ? __pfx_sctp_close+0x10/0x10 [ 479.413075][T12799] ? __pfx___might_resched+0x10/0x10 [ 479.413094][T12799] ? ip_mc_drop_socket+0x1f/0x280 [ 479.413109][T12799] ? down_write+0x14d/0x200 [ 479.413128][T12799] inet_release+0xed/0x200 [ 479.413149][T12799] inet6_release+0x4f/0x70 [ 479.413164][T12799] __sock_release+0xb3/0x270 [ 479.413179][T12799] ? __pfx_sock_close+0x10/0x10 [ 479.413192][T12799] sock_close+0x1c/0x30 [ 479.413204][T12799] __fput+0x402/0xb70 [ 479.413228][T12799] task_work_run+0x150/0x240 [ 479.413250][T12799] ? __pfx_task_work_run+0x10/0x10 [ 479.413271][T12799] ? __pfx___do_sys_close_range+0x10/0x10 [ 479.413291][T12799] exit_to_user_mode_loop+0xec/0x130 [ 479.413313][T12799] do_syscall_64+0x426/0xfa0 [ 479.413330][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.413345][T12799] RIP: 0033:0x7f2d7678efc9 [ 479.413357][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.413371][T12799] RSP: 002b:00007f2d77686038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 479.413386][T12799] RAX: 0000000000000000 RBX: 00007f2d769e6090 RCX: 00007f2d7678efc9 [ 479.413395][T12799] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 479.413405][T12799] RBP: 00007f2d76811f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.413415][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.413423][T12799] R13: 00007f2d769e6128 R14: 00007f2d769e6090 R15: 00007ffdf9905a38 [ 479.413443][T12799] [ 480.891859][T12810] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 526.618615][T14297] binder: 14294:14297 ioctl c0306201 200000000000 returned -14 [ 527.171938][T14353] FAULT_INJECTION: forcing a failure. [ 527.171938][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 527.188245][T14353] CPU: 0 UID: 0 PID: 14353 Comm: syz.6.1410 Not tainted syzkaller #0 PREEMPT(full) [ 527.188270][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 527.188279][T14353] Call Trace: [ 527.188284][T14353] [ 527.188290][T14353] dump_stack_lvl+0x16c/0x1f0 [ 527.188312][T14353] should_fail_ex+0x512/0x640 [ 527.188333][T14353] ? __kmalloc_cache_noprof+0x5f/0x780 [ 527.188360][T14353] should_failslab+0xc2/0x120 [ 527.188380][T14353] __kmalloc_cache_noprof+0x72/0x780 [ 527.188403][T14353] ? slip_open+0x88a/0x1150 [ 527.188426][T14353] ? slip_open+0x88a/0x1150 [ 527.188444][T14353] slip_open+0x88a/0x1150 [ 527.188465][T14353] ? __pfx_n_tty_close+0x10/0x10 [ 527.188485][T14353] ? __pfx_slip_open+0x10/0x10 [ 527.188505][T14353] ? down_write+0x14d/0x200 [ 527.188525][T14353] ? __pfx_slip_open+0x10/0x10 [ 527.188544][T14353] tty_ldisc_open+0x9f/0x120 [ 527.188568][T14353] tty_set_ldisc+0x32b/0x780 [ 527.188584][T14353] tty_ioctl+0xc2d/0x1680 [ 527.188600][T14353] ? __pfx_tty_ioctl+0x10/0x10 [ 527.188621][T14353] ? find_held_lock+0x2b/0x80 [ 527.188636][T14353] ? hook_file_ioctl_common+0x145/0x410 [ 527.188655][T14353] ? __fget_files+0x20e/0x3c0 [ 527.188672][T14353] ? __pfx_tty_ioctl+0x10/0x10 [ 527.188688][T14353] __x64_sys_ioctl+0x18e/0x210 [ 527.188710][T14353] do_syscall_64+0xcd/0xfa0 [ 527.188727][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.188741][T14353] RIP: 0033:0x7ff7ff78efc9 [ 527.188753][T14353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.188767][T14353] RSP: 002b:00007ff8005f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.188785][T14353] RAX: ffffffffffffffda RBX: 00007ff7ff9e5fa0 RCX: 00007ff7ff78efc9 [ 527.188794][T14353] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000a [ 527.188804][T14353] RBP: 00007ff7ff811f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.188812][T14353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.188821][T14353] R13: 00007ff7ff9e6038 R14: 00007ff7ff9e5fa0 R15: 00007ffec5a4f378 [ 527.188842][T14353] [ 529.108522][T14436] bond0: option all_slaves_active: invalid value (15) [ 529.258730][T14373] netlink: 'syz.5.1415': attribute type 4 has an invalid length. [ 529.324857][T14373] netlink: 'syz.5.1415': attribute type 1 has an invalid length. [ 530.949679][ T3501] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1407 with max blocks 17 with error 117 [ 531.022661][ T3501] EXT4-fs (sda1): This should not happen!! Data will be lost [ 531.022661][ T3501] [ 531.152368][T14513] Invalid ELF header magic: != ELF [ 531.738587][T14530] FAULT_INJECTION: forcing a failure. [ 531.738587][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 531.810814][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.5.1429 Not tainted syzkaller #0 PREEMPT(full) [ 531.810838][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.810847][T14530] Call Trace: [ 531.810853][T14530] [ 531.810859][T14530] dump_stack_lvl+0x16c/0x1f0 [ 531.810880][T14530] should_fail_ex+0x512/0x640 [ 531.810903][T14530] ? __kmalloc_cache_noprof+0x5f/0x780 [ 531.810929][T14530] should_failslab+0xc2/0x120 [ 531.810949][T14530] __kmalloc_cache_noprof+0x72/0x780 [ 531.810972][T14530] ? fuse_dev_alloc+0x48/0x280 [ 531.810990][T14530] ? lockdep_init_map_type+0x5c/0x280 [ 531.811012][T14530] ? fuse_dev_alloc+0x48/0x280 [ 531.811028][T14530] fuse_dev_alloc+0x48/0x280 [ 531.811048][T14530] fuse_dev_alloc_install+0x13/0x40 [ 531.811066][T14530] cuse_channel_open+0x100/0x7f0 [ 531.811084][T14530] ? __pfx_cuse_channel_open+0x10/0x10 [ 531.811101][T14530] misc_open+0x26d/0x450 [ 531.811122][T14530] ? __pfx_misc_open+0x10/0x10 [ 531.811141][T14530] chrdev_open+0x234/0x6a0 [ 531.811158][T14530] ? __pfx_apparmor_file_open+0x10/0x10 [ 531.811179][T14530] ? __pfx_chrdev_open+0x10/0x10 [ 531.811197][T14530] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 531.811216][T14530] do_dentry_open+0x982/0x1530 [ 531.811233][T14530] ? __pfx_chrdev_open+0x10/0x10 [ 531.811255][T14530] vfs_open+0x82/0x3f0 [ 531.811277][T14530] path_openat+0x1de4/0x2cb0 [ 531.811300][T14530] ? __pfx_path_openat+0x10/0x10 [ 531.811316][T14530] ? __lock_acquire+0xb8a/0x1c90 [ 531.811337][T14530] do_filp_open+0x20b/0x470 [ 531.811353][T14530] ? __pfx_do_filp_open+0x10/0x10 [ 531.811383][T14530] ? alloc_fd+0x471/0x7d0 [ 531.811402][T14530] do_sys_openat2+0x11b/0x1d0 [ 531.811422][T14530] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.811450][T14530] __x64_sys_openat+0x174/0x210 [ 531.811470][T14530] ? __pfx___x64_sys_openat+0x10/0x10 [ 531.811499][T14530] do_syscall_64+0xcd/0xfa0 [ 531.811517][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.811531][T14530] RIP: 0033:0x7fce6478efc9 [ 531.811543][T14530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.811558][T14530] RSP: 002b:00007fce629f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.811572][T14530] RAX: ffffffffffffffda RBX: 00007fce649e5fa0 RCX: 00007fce6478efc9 [ 531.811582][T14530] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 531.811591][T14530] RBP: 00007fce64811f91 R08: 0000000000000000 R09: 0000000000000000 [ 531.811599][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.811607][T14530] R13: 00007fce649e6038 R14: 00007fce649e5fa0 R15: 00007ffdb0229378 [ 531.811627][T14530] [ 533.271459][T14562] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1435'. [ 533.864398][T14585] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1440'. [ 533.900680][T14585] IPv6: NLM_F_CREATE should be specified when creating new route [ 533.931370][T14585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.939162][T14585] IPv6: NLM_F_CREATE should be set when creating new route [ 533.946395][T14585] IPv6: NLM_F_CREATE should be set when creating new route [ 536.055225][ T52] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 537.118371][ T52] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 539.077916][T14814] usb usb37: usbfs: process 14814 (syz.5.1458) did not claim interface 0 before use [ 539.182059][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 539.334014][T14830] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 539.428269][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 539.428293][T14837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.428308][T14837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.443923][T14837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.443943][T14837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.843562][T14837] snd_aloop snd_aloop.0: control 7:-2:4::2 is already present [ 540.042961][T14794] Process accounting paused [ 540.466235][T14894] bond0: option all_slaves_active: invalid value () [ 541.057523][T14882] synth uevent: /module/orangefs: unknown uevent action string [ 541.124310][T14926] Invalid ELF header magic: != ELF [ 542.204419][T15000] FAULT_INJECTION: forcing a failure. [ 542.204419][T15000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.278331][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.5.1470 Not tainted syzkaller #0 PREEMPT(full) [ 542.278355][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.278364][T15000] Call Trace: [ 542.278369][T15000] [ 542.278375][T15000] dump_stack_lvl+0x16c/0x1f0 [ 542.278395][T15000] should_fail_ex+0x512/0x640 [ 542.278420][T15000] strncpy_from_user+0x3b/0x2e0 [ 542.278443][T15000] getname_flags.part.0+0x8f/0x550 [ 542.278467][T15000] getname_flags+0x93/0xf0 [ 542.278481][T15000] do_sys_openat2+0xb8/0x1d0 [ 542.278501][T15000] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.278528][T15000] __x64_sys_openat+0x174/0x210 [ 542.278549][T15000] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.278576][T15000] do_syscall_64+0xcd/0xfa0 [ 542.278593][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.278607][T15000] RIP: 0033:0x7fce6478efc9 [ 542.278619][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.278632][T15000] RSP: 002b:00007fce629f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.278646][T15000] RAX: ffffffffffffffda RBX: 00007fce649e5fa0 RCX: 00007fce6478efc9 [ 542.278656][T15000] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 542.278665][T15000] RBP: 00007fce64811f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.278673][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.278681][T15000] R13: 00007fce649e6038 R14: 00007fce649e5fa0 R15: 00007ffdb0229378 [ 542.278700][T15000] [ 542.684237][T15056] FAULT_INJECTION: forcing a failure. [ 542.684237][T15056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.738515][T15056] CPU: 0 UID: 0 PID: 15056 Comm: syz.7.1473 Not tainted syzkaller #0 PREEMPT(full) [ 542.738540][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.738549][T15056] Call Trace: [ 542.738555][T15056] [ 542.738561][T15056] dump_stack_lvl+0x16c/0x1f0 [ 542.738582][T15056] should_fail_ex+0x512/0x640 [ 542.738607][T15056] should_fail_alloc_page+0xe7/0x130 [ 542.738629][T15056] prepare_alloc_pages+0x3c2/0x610 [ 542.738649][T15056] ? rcu_is_watching+0x12/0xc0 [ 542.738666][T15056] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 542.738683][T15056] ? rcu_is_watching+0x12/0xc0 [ 542.738697][T15056] ? trace_sched_exit_tp+0xd1/0x120 [ 542.738718][T15056] ? __schedule+0x11a3/0x5de0 [ 542.738731][T15056] ? __lock_acquire+0x622/0x1c90 [ 542.738754][T15056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 542.738770][T15056] ? __lock_acquire+0x622/0x1c90 [ 542.738796][T15056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.738827][T15056] ? policy_nodemask+0xea/0x4e0 [ 542.738848][T15056] alloc_pages_mpol+0x1fb/0x550 [ 542.738867][T15056] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 542.738885][T15056] ? __futex_wait+0x24b/0x2f0 [ 542.738908][T15056] ? __pfx___futex_wait+0x10/0x10 [ 542.738932][T15056] ___kmalloc_large_node+0xed/0x160 [ 542.738954][T15056] __kmalloc_large_node_noprof+0x1c/0x70 [ 542.738975][T15056] __kmalloc_noprof.cold+0xc/0x62 [ 542.738996][T15056] ? iovec_from_user+0x108/0x140 [ 542.739012][T15056] ? iovec_from_user+0x108/0x140 [ 542.739023][T15056] iovec_from_user+0x108/0x140 [ 542.739038][T15056] __import_iovec+0x88/0x650 [ 542.739055][T15056] import_iovec+0x86/0xb0 [ 542.739069][T15056] __do_sys_process_madvise+0x121/0x3c0 [ 542.739091][T15056] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 542.739111][T15056] ? __pfx_do_futex+0x10/0x10 [ 542.739147][T15056] do_syscall_64+0xcd/0xfa0 [ 542.739164][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.739178][T15056] RIP: 0033:0x7fc23338efc9 [ 542.739190][T15056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.739203][T15056] RSP: 002b:00007fc23414a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 542.739217][T15056] RAX: ffffffffffffffda RBX: 00007fc2335e5fa0 RCX: 00007fc23338efc9 [ 542.739227][T15056] RDX: 00000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff [ 542.739235][T15056] RBP: 00007fc233411f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.739244][T15056] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 542.739253][T15056] R13: 00007fc2335e6038 R14: 00007fc2335e5fa0 R15: 00007ffc62f50e18 [ 542.739272][T15056] [ 543.294332][T15060] zswap: compressor not available [ 545.627410][T15137] input: 00 [ 545.627410][T15137] as /devices/virtual/input/input13 [ 545.677554][T15137] FAULT_INJECTION: forcing a failure. [ 545.677554][T15137] name failslab, interval 1, probability 0, space 0, times 0 [ 545.728532][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.2.1483 Not tainted syzkaller #0 PREEMPT(full) [ 545.728555][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 545.728565][T15137] Call Trace: [ 545.728570][T15137] [ 545.728576][T15137] dump_stack_lvl+0x16c/0x1f0 [ 545.728598][T15137] should_fail_ex+0x512/0x640 [ 545.728619][T15137] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 545.728637][T15137] should_failslab+0xc2/0x120 [ 545.728657][T15137] kmem_cache_alloc_noprof+0x75/0x6e0 [ 545.728671][T15137] ? __kernfs_new_node+0xd2/0x8e0 [ 545.728693][T15137] ? __kernfs_new_node+0xd2/0x8e0 [ 545.728708][T15137] __kernfs_new_node+0xd2/0x8e0 [ 545.728729][T15137] ? __pfx___kernfs_new_node+0x10/0x10 [ 545.728761][T15137] ? find_held_lock+0x2b/0x80 [ 545.728778][T15137] ? kernfs_root+0xee/0x2a0 [ 545.728800][T15137] kernfs_new_node+0x13c/0x1e0 [ 545.728824][T15137] __kernfs_create_file+0x53/0x350 [ 545.728841][T15137] sysfs_add_file_mode_ns+0x207/0x3c0 [ 545.728862][T15137] sysfs_create_file_ns+0x13d/0x1d0 [ 545.728879][T15137] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 545.728898][T15137] ? mark_held_locks+0x49/0x80 [ 545.728920][T15137] device_create_file+0xf2/0x1e0 [ 545.728938][T15137] device_add+0xa2b/0x1aa0 [ 545.728961][T15137] ? __pfx_device_add+0x10/0x10 [ 545.728981][T15137] ? __pfx_exact_lock+0x10/0x10 [ 545.729001][T15137] ? kobject_get+0xbb/0x150 [ 545.729020][T15137] cdev_device_add+0xc2/0x1e0 [ 545.729038][T15137] evdev_connect+0x3a4/0x4c0 [ 545.729057][T15137] input_attach_handler.isra.0+0x176/0x250 [ 545.729074][T15137] input_register_device+0xab9/0x1180 [ 545.729094][T15137] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 545.729116][T15137] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 545.729136][T15137] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 545.729161][T15137] ? find_held_lock+0x2b/0x80 [ 545.729185][T15137] ? __pfx_uinput_ioctl+0x10/0x10 [ 545.729204][T15137] __x64_sys_ioctl+0x18e/0x210 [ 545.729226][T15137] do_syscall_64+0xcd/0xfa0 [ 545.729242][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.729257][T15137] RIP: 0033:0x7f2d7678efc9 [ 545.729269][T15137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.729283][T15137] RSP: 002b:00007f2d776a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.729298][T15137] RAX: ffffffffffffffda RBX: 00007f2d769e5fa0 RCX: 00007f2d7678efc9 [ 545.729307][T15137] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 545.729316][T15137] RBP: 00007f2d76811f91 R08: 0000000000000000 R09: 0000000000000000 [ 545.729324][T15137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.729332][T15137] R13: 00007f2d769e6038 R14: 00007f2d769e5fa0 R15: 00007ffdf9905a38 [ 545.729352][T15137] [ 546.007962][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.038318][T15185] FAULT_INJECTION: forcing a failure. [ 547.038318][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 547.085859][T15137] input: failed to attach handler evdev to device input13, error: -12 [ 547.150944][T15185] CPU: 0 UID: 0 PID: 15185 Comm: syz.5.1491 Not tainted syzkaller #0 PREEMPT(full) [ 547.150968][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.150977][T15185] Call Trace: [ 547.150983][T15185] [ 547.150988][T15185] dump_stack_lvl+0x16c/0x1f0 [ 547.151009][T15185] should_fail_ex+0x512/0x640 [ 547.151032][T15185] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 547.151050][T15185] should_failslab+0xc2/0x120 [ 547.151070][T15185] kmem_cache_alloc_noprof+0x75/0x6e0 [ 547.151083][T15185] ? lockdep_init_map_type+0x5c/0x280 [ 547.151103][T15185] ? copy_process+0x3e9a/0x76a0 [ 547.151124][T15185] ? copy_process+0x3e9a/0x76a0 [ 547.151139][T15185] copy_process+0x3e9a/0x76a0 [ 547.151155][T15185] ? __pfx___futex_wait+0x10/0x10 [ 547.151184][T15185] ? __pfx_copy_process+0x10/0x10 [ 547.151200][T15185] ? futex_private_hash_put+0x176/0x300 [ 547.151220][T15185] ? futex_private_hash_put+0x18a/0x300 [ 547.151241][T15185] kernel_clone+0xfc/0x930 [ 547.151259][T15185] ? __pfx_kernel_clone+0x10/0x10 [ 547.151286][T15185] __do_sys_clone+0xce/0x120 [ 547.151302][T15185] ? __pfx___do_sys_clone+0x10/0x10 [ 547.151327][T15185] ? xfd_validate_state+0x61/0x180 [ 547.151346][T15185] ? __pfx_do_writev+0x10/0x10 [ 547.151366][T15185] do_syscall_64+0xcd/0xfa0 [ 547.151382][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.151397][T15185] RIP: 0033:0x7fce6478efc9 [ 547.151408][T15185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.151433][T15185] RSP: 002b:00007fce629f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 547.151447][T15185] RAX: ffffffffffffffda RBX: 00007fce649e5fa0 RCX: 00007fce6478efc9 [ 547.151457][T15185] RDX: 0000000000000000 RSI: 0000000100000000 RDI: 0000000000000007 [ 547.151466][T15185] RBP: 00007fce64811f91 R08: 0000000000000006 R09: 0000000000000000 [ 547.151475][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.151484][T15185] R13: 00007fce649e6038 R14: 00007fce649e5fa0 R15: 00007ffdb0229378 [ 547.151514][T15185] [ 547.361369][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.082070][T15256] vivid-003: ================= START STATUS ================= [ 548.152865][T15256] vivid-003: Radio HW Seek Mode: Bounded [ 548.221494][T15256] vivid-003: Radio Programmable HW Seek: false [ 548.256823][T15256] vivid-003: RDS Rx I/O Mode: Block I/O [ 548.287276][T15256] vivid-003: Generate RBDS Instead of RDS: false [ 548.337336][T15256] vivid-003: RDS Reception: true [ 548.372999][T15256] vivid-003: RDS Program Type: 0 inactive [ 548.416491][T15256] vivid-003: RDS PS Name: inactive [ 548.446526][T15256] vivid-003: RDS Radio Text: inactive [ 548.466461][T15256] vivid-003: RDS Traffic Announcement: false inactive [ 548.516052][T15256] vivid-003: RDS Traffic Program: false inactive [ 548.550190][T15256] vivid-003: RDS Music: false inactive [ 548.583713][T15256] vivid-003: ================== END STATUS ================== [ 549.981754][ T154] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1416 with max blocks 8 with error 117 [ 550.064047][ T154] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.064047][ T154] [ 550.116695][ T154] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 5 with max blocks 5 with error 117 [ 550.177687][ T154] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.177687][ T154] [ 550.674538][ T154] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 918 with max blocks 10 with error 117 [ 550.746001][ T154] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.746001][ T154] [ 551.079721][T15316] Invalid ELF header magic: != ELF [ 551.133223][ T52] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 552.061861][T15374] zswap: compressor not available [ 552.730881][T15410] sp0: Synchronizing with TNC [ 552.889587][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1366 with max blocks 58 with error 117 [ 552.972005][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 552.972005][ T36] [ 554.065348][T15540] FAULT_INJECTION: forcing a failure. [ 554.065348][T15540] name failslab, interval 1, probability 0, space 0, times 0 [ 554.113713][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.6.1527 Not tainted syzkaller #0 PREEMPT(full) [ 554.113744][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.113754][T15540] Call Trace: [ 554.113759][T15540] [ 554.113765][T15540] dump_stack_lvl+0x16c/0x1f0 [ 554.113786][T15540] should_fail_ex+0x512/0x640 [ 554.113808][T15540] ? __kmalloc_cache_noprof+0x5f/0x780 [ 554.113834][T15540] should_failslab+0xc2/0x120 [ 554.113854][T15540] __kmalloc_cache_noprof+0x72/0x780 [ 554.113876][T15540] ? net_alloc_generic+0x1e/0x70 [ 554.113890][T15540] ? copy_net_ns+0xe9/0x690 [ 554.113904][T15540] ? copy_net_ns+0x136/0x690 [ 554.113922][T15540] ? copy_net_ns+0x136/0x690 [ 554.113936][T15540] copy_net_ns+0x136/0x690 [ 554.113950][T15540] ? copy_cgroup_ns+0x71/0x6b0 [ 554.113968][T15540] create_new_namespaces+0x3ea/0xa90 [ 554.113988][T15540] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 554.114006][T15540] ksys_unshare+0x45b/0xa40 [ 554.114025][T15540] ? __pfx_ksys_unshare+0x10/0x10 [ 554.114044][T15540] ? xfd_validate_state+0x61/0x180 [ 554.114069][T15540] __x64_sys_unshare+0x31/0x40 [ 554.114087][T15540] do_syscall_64+0xcd/0xfa0 [ 554.114103][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.114117][T15540] RIP: 0033:0x7ff7ff78efc9 [ 554.114129][T15540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.114142][T15540] RSP: 002b:00007ff8005f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 554.114156][T15540] RAX: ffffffffffffffda RBX: 00007ff7ff9e5fa0 RCX: 00007ff7ff78efc9 [ 554.114166][T15540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 554.114174][T15540] RBP: 00007ff7ff811f91 R08: 0000000000000000 R09: 0000000000000000 [ 554.114182][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.114190][T15540] R13: 00007ff7ff9e6038 R14: 00007ff7ff9e5fa0 R15: 00007ffec5a4f378 [ 554.114209][T15540] [ 554.524788][T15502] FAULT_INJECTION: forcing a failure. [ 554.524788][T15502] name fail_futex, interval 1, probability 0, space 0, times 0 [ 554.549574][T15502] CPU: 0 UID: 0 PID: 15502 Comm: syz.7.1525 Not tainted syzkaller #0 PREEMPT(full) [ 554.549599][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.549608][T15502] Call Trace: [ 554.549614][T15502] [ 554.549620][T15502] dump_stack_lvl+0x16c/0x1f0 [ 554.549642][T15502] should_fail_ex+0x512/0x640 [ 554.549667][T15502] get_futex_key+0x1d0/0x1560 [ 554.549690][T15502] ? __pfx_get_futex_key+0x10/0x10 [ 554.549709][T15502] ? __pick_eevdf+0x30a/0x670 [ 554.549736][T15502] futex_wait_setup+0x9d/0x550 [ 554.549765][T15502] __futex_wait+0x193/0x2f0 [ 554.549788][T15502] ? __pfx___futex_wait+0x10/0x10 [ 554.549809][T15502] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.549823][T15502] ? lockdep_hardirqs_on+0x7c/0x110 [ 554.549840][T15502] ? __pfx_futex_wake_mark+0x10/0x10 [ 554.549864][T15502] ? futex_private_hash_put+0x176/0x300 [ 554.549884][T15502] ? futex_private_hash_put+0x18a/0x300 [ 554.549903][T15502] futex_wait+0xe8/0x380 [ 554.549916][T15502] ? __pfx_futex_wait+0x10/0x10 [ 554.549947][T15502] do_futex+0x229/0x350 [ 554.549967][T15502] ? __pfx_do_futex+0x10/0x10 [ 554.549986][T15502] ? cap_task_prctl+0x2af/0xa80 [ 554.550009][T15502] __x64_sys_futex+0x1e0/0x4c0 [ 554.550031][T15502] ? __pfx___x64_sys_futex+0x10/0x10 [ 554.550050][T15502] ? syscall_user_dispatch+0x78/0x140 [ 554.550078][T15502] do_syscall_64+0xcd/0xfa0 [ 554.550095][T15502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.550109][T15502] RIP: 0033:0x7fc23338efc9 [ 554.550122][T15502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.550135][T15502] RSP: 002b:00007fc2315f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.550149][T15502] RAX: ffffffffffffffda RBX: 00007fc2335e6098 RCX: 00007fc23338efc9 [ 554.550159][T15502] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc2335e6098 [ 554.550167][T15502] RBP: 00007fc2335e6090 R08: 0000000000000000 R09: 0000000000000000 [ 554.550176][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.550186][T15502] R13: 00007fc2335e6128 R14: 00007ffc62f50d30 R15: 00007ffc62f50e18 [ 554.550207][T15502] [ 555.167350][T15540] Process accounting resumed [ 555.316851][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1532'. [ 555.825518][T15601] ALSA: mixer_oss: invalid OSS volume '0' [ 555.862031][T15601] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 555.916574][T15601] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 556.252009][T15616] netlink: 'syz.5.1537': attribute type 15 has an invalid length. [ 556.280738][T15616] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1537'. [ 557.519936][T15704] zswap: compressor not available [ 557.546313][T15705] zswap: compressor not available [ 559.224019][T15833] can: request_module (can-proto-0) failed. [ 559.422223][T15857] vivid-003: ================= START STATUS ================= [ 559.450317][T15857] vivid-003: Radio HW Seek Mode: Bounded [ 559.468601][T15857] vivid-003: Radio Programmable HW Seek: false [ 559.488970][T15857] vivid-003: RDS Rx I/O Mode: Block I/O [ 559.499073][T15844] Invalid ELF header magic: != ELF [ 559.515199][T15857] vivid-003: Generate RBDS Instead of RDS: false [ 559.545408][T15857] vivid-003: RDS Reception: true [ 559.562086][T15857] vivid-003: RDS Program Type: 0 inactive [ 559.582360][T15857] vivid-003: RDS PS Name: inactive [ 559.618977][T15857] vivid-003: RDS Radio Text: inactive [ 559.639941][T15857] vivid-003: RDS Traffic Announcement: false inactive [ 559.692230][T15857] vivid-003: RDS Traffic Program: false inactive [ 559.698613][T15857] vivid-003: RDS Music: false inactive [ 559.732398][T15857] vivid-003: ================== END STATUS ================== [ 560.520978][T15896] zswap: compressor not available [ 561.318494][T15970] Setting dangerous option i915.mitigations - tainting kernel [ 561.407759][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1559'. [ 561.459925][T15961] veth1_macvtap: left promiscuous mode [ 561.549487][T15983] FAULT_INJECTION: forcing a failure. [ 561.549487][T15983] name failslab, interval 1, probability 0, space 0, times 0 [ 561.607178][T15983] CPU: 0 UID: 0 PID: 15983 Comm: syz.7.1561 Tainted: G U syzkaller #0 PREEMPT(full) [ 561.607208][T15983] Tainted: [U]=USER [ 561.607213][T15983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.607222][T15983] Call Trace: [ 561.607228][T15983] [ 561.607234][T15983] dump_stack_lvl+0x16c/0x1f0 [ 561.607256][T15983] should_fail_ex+0x512/0x640 [ 561.607278][T15983] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 561.607295][T15983] should_failslab+0xc2/0x120 [ 561.607316][T15983] kmem_cache_alloc_noprof+0x75/0x6e0 [ 561.607330][T15983] ? __proc_create+0x2ce/0x8e0 [ 561.607362][T15983] ? __proc_create+0x2ce/0x8e0 [ 561.607381][T15983] __proc_create+0x2ce/0x8e0 [ 561.607402][T15983] ? __pfx___proc_create+0x10/0x10 [ 561.607426][T15983] ? _raw_write_unlock+0x28/0x50 [ 561.607441][T15983] ? proc_register+0x559/0x8b0 [ 561.607463][T15983] proc_create_reg+0x7d/0x180 [ 561.607486][T15983] proc_create_net_data+0x8e/0x1c0 [ 561.607508][T15983] ? __pfx_proc_create_net_data+0x10/0x10 [ 561.607530][T15983] ? __pfx___netlink_kernel_create+0x10/0x10 [ 561.607550][T15983] fib_proc_init+0xf4/0x1b0 [ 561.607567][T15983] fib_net_init+0x2af/0x3f0 [ 561.607583][T15983] ? __pfx___register_sysctl_table+0x10/0x10 [ 561.607603][T15983] ? __pfx_fib_net_init+0x10/0x10 [ 561.607620][T15983] ? lockdep_init_map_type+0x5c/0x280 [ 561.607640][T15983] ? __pfx_nl_fib_input+0x10/0x10 [ 561.607659][T15983] ? devinet_init_net+0x5c2/0x910 [ 561.607679][T15983] ? __pfx_fib_net_init+0x10/0x10 [ 561.607694][T15983] ops_init+0x1e2/0x5f0 [ 561.607711][T15983] setup_net+0x100/0x390 [ 561.607725][T15983] ? __pfx_setup_net+0x10/0x10 [ 561.607740][T15983] ? debug_mutex_init+0x37/0x70 [ 561.607757][T15983] copy_net_ns+0x2f8/0x690 [ 561.607774][T15983] create_new_namespaces+0x3ea/0xa90 [ 561.607795][T15983] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 561.607813][T15983] ksys_unshare+0x45b/0xa40 [ 561.607832][T15983] ? __pfx_ksys_unshare+0x10/0x10 [ 561.607851][T15983] ? xfd_validate_state+0x61/0x180 [ 561.607877][T15983] __x64_sys_unshare+0x31/0x40 [ 561.607895][T15983] do_syscall_64+0xcd/0xfa0 [ 561.607912][T15983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.607926][T15983] RIP: 0033:0x7fc23338efc9 [ 561.607939][T15983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.607953][T15983] RSP: 002b:00007fc23414a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 561.607967][T15983] RAX: ffffffffffffffda RBX: 00007fc2335e5fa0 RCX: 00007fc23338efc9 [ 561.607977][T15983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 561.607985][T15983] RBP: 00007fc233411f91 R08: 0000000000000000 R09: 0000000000000000 [ 561.607994][T15983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.608003][T15983] R13: 00007fc2335e6038 R14: 00007fc2335e5fa0 R15: 00007ffc62f50e18 [ 561.608024][T15983] [ 561.901890][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1561'. [ 562.241600][T15997] usbip-vudc usbip-vudc.0: gadget not bound [ 562.288193][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1562'. [ 563.680005][T16045] Line length is too long: Should be less than 4094 [ 564.872083][T16118] Invalid ELF header magic: != ELF [ 568.320103][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.338814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.494676][T16287] Invalid ELF header magic: != ELF [ 569.017837][T16319] program syz.7.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.392979][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1585'. [ 569.784435][T16365] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1586'. [ 570.720709][T16396] FAULT_INJECTION: forcing a failure. [ 570.720709][T16396] name failslab, interval 1, probability 0, space 0, times 0 [ 570.776684][T16396] CPU: 0 UID: 0 PID: 16396 Comm: syz.6.1587 Tainted: G U syzkaller #0 PREEMPT(full) [ 570.776711][T16396] Tainted: [U]=USER [ 570.776715][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.776724][T16396] Call Trace: [ 570.776730][T16396] [ 570.776736][T16396] dump_stack_lvl+0x16c/0x1f0 [ 570.776757][T16396] should_fail_ex+0x512/0x640 [ 570.776778][T16396] ? __kmalloc_noprof+0xca/0x880 [ 570.776803][T16396] should_failslab+0xc2/0x120 [ 570.776823][T16396] __kmalloc_noprof+0xdd/0x880 [ 570.776845][T16396] ? lsm_blob_alloc+0x68/0x90 [ 570.776866][T16396] ? lsm_blob_alloc+0x68/0x90 [ 570.776882][T16396] lsm_blob_alloc+0x68/0x90 [ 570.776899][T16396] security_sk_alloc+0x30/0x270 [ 570.776921][T16396] sk_prot_alloc+0x1c7/0x2a0 [ 570.776941][T16396] sk_alloc+0x36/0xc20 [ 570.776963][T16396] tun_chr_open+0x80/0x5e0 [ 570.776988][T16396] ? __pfx_tun_chr_open+0x10/0x10 [ 570.777008][T16396] misc_open+0x26d/0x450 [ 570.777031][T16396] ? __pfx_misc_open+0x10/0x10 [ 570.777051][T16396] chrdev_open+0x234/0x6a0 [ 570.777068][T16396] ? __pfx_apparmor_file_open+0x10/0x10 [ 570.777089][T16396] ? __pfx_chrdev_open+0x10/0x10 [ 570.777107][T16396] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 570.777127][T16396] do_dentry_open+0x982/0x1530 [ 570.777144][T16396] ? __pfx_chrdev_open+0x10/0x10 [ 570.777164][T16396] vfs_open+0x82/0x3f0 [ 570.777186][T16396] path_openat+0x1de4/0x2cb0 [ 570.777209][T16396] ? __pfx_path_openat+0x10/0x10 [ 570.777226][T16396] ? __lock_acquire+0xb8a/0x1c90 [ 570.777248][T16396] do_filp_open+0x20b/0x470 [ 570.777264][T16396] ? __pfx_do_filp_open+0x10/0x10 [ 570.777293][T16396] ? alloc_fd+0x471/0x7d0 [ 570.777312][T16396] do_sys_openat2+0x11b/0x1d0 [ 570.777332][T16396] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.777360][T16396] __x64_sys_openat+0x174/0x210 [ 570.777381][T16396] ? __pfx___x64_sys_openat+0x10/0x10 [ 570.777409][T16396] do_syscall_64+0xcd/0xfa0 [ 570.777426][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.777441][T16396] RIP: 0033:0x7ff7ff78efc9 [ 570.777453][T16396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.777467][T16396] RSP: 002b:00007ff8005f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.777485][T16396] RAX: ffffffffffffffda RBX: 00007ff7ff9e5fa0 RCX: 00007ff7ff78efc9 [ 570.777495][T16396] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 570.777504][T16396] RBP: 00007ff7ff811f91 R08: 0000000000000000 R09: 0000000000000000 [ 570.777518][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.777527][T16396] R13: 00007ff7ff9e6038 R14: 00007ff7ff9e5fa0 R15: 00007ffec5a4f378 [ 570.777546][T16396] [ 572.241645][T16396] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 573.370409][T16328] Process accounting resumed [ 574.283148][T16509] futex_wake_op: syz.7.1593 tries to shift op by -2048; fix this program [ 575.265547][T16535] Invalid ELF header magic: != ELF [ 575.682138][T15438] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 576.768570][T16607] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1597'. [ 577.952276][T16630] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 578.056083][T16630] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1599'. [ 578.158639][T16636] Invalid ELF header magic: != ELF [ 579.391389][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1606'. [ 579.715653][T16713] zswap: compressor not available [ 580.735606][T16808] FAULT_INJECTION: forcing a failure. [ 580.735606][T16808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.806863][T16808] CPU: 0 UID: 0 PID: 16808 Comm: syz.7.1613 Tainted: G U syzkaller #0 PREEMPT(full) [ 580.806889][T16808] Tainted: [U]=USER [ 580.806894][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 580.806903][T16808] Call Trace: [ 580.806908][T16808] [ 580.806913][T16808] dump_stack_lvl+0x16c/0x1f0 [ 580.806934][T16808] should_fail_ex+0x512/0x640 [ 580.806958][T16808] _copy_to_iter+0x463/0x1710 [ 580.806985][T16808] ? _raw_spin_unlock+0x28/0x50 [ 580.806999][T16808] ? __pfx__copy_to_iter+0x10/0x10 [ 580.807026][T16808] ? __folio_put+0x32e/0x450 [ 580.807045][T16808] copy_page_to_iter+0x12a/0x1e0 [ 580.807069][T16808] pipe_to_user+0xb0/0x170 [ 580.807091][T16808] ? anon_pipe_buf_release+0x40a/0x520 [ 580.807110][T16808] __splice_from_pipe+0x39a/0x800 [ 580.807125][T16808] ? __pfx_pipe_to_user+0x10/0x10 [ 580.807151][T16808] __do_sys_vmsplice+0x716/0x11a0 [ 580.807171][T16808] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 580.807187][T16808] ? get_pid_task+0x106/0x250 [ 580.807209][T16808] ? find_held_lock+0x2b/0x80 [ 580.807227][T16808] ? find_held_lock+0x2b/0x80 [ 580.807254][T16808] ? __fget_files+0x20e/0x3c0 [ 580.807271][T16808] ? fput+0x9b/0xd0 [ 580.807289][T16808] ? ksys_write+0x1ac/0x250 [ 580.807304][T16808] ? __pfx_ksys_write+0x10/0x10 [ 580.807324][T16808] ? do_syscall_64+0xcd/0xfa0 [ 580.807339][T16808] do_syscall_64+0xcd/0xfa0 [ 580.807355][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.807376][T16808] RIP: 0033:0x7fc23338efc9 [ 580.807388][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.807401][T16808] RSP: 002b:00007fc2315f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 580.807415][T16808] RAX: ffffffffffffffda RBX: 00007fc2335e6090 RCX: 00007fc23338efc9 [ 580.807425][T16808] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000004 [ 580.807434][T16808] RBP: 00007fc2315f6090 R08: 0000000000000000 R09: 0000000000000000 [ 580.807443][T16808] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 580.807451][T16808] R13: 00007fc2335e6128 R14: 00007fc2335e6090 R15: 00007ffc62f50e18 [ 580.807471][T16808] [ 581.611988][T15438] Bluetooth: hci2: Malformed LE Event: 0x1d [ 582.614016][T15438] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 583.127361][T16938] binder: 16937:16938 ioctl 400454ca 38 returned -22 [ 584.237487][T17017] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 584.976890][T17050] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1632'. [ 585.301870][T17062] busy [ 585.977529][T17045] Process accounting paused [ 586.210311][T17083] Invalid ELF header magic: != ELF [ 589.522692][T17287] ================================================================== [ 589.522705][T17287] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 589.522732][T17287] Write of size 8 at addr ffffc90003ac93e0 by task syz.5.1647/17287 [ 589.522746][T17287] [ 589.522757][T17287] CPU: 0 UID: 0 PID: 17287 Comm: syz.5.1647 Tainted: G U syzkaller #0 PREEMPT(full) [ 589.522777][T17287] Tainted: [U]=USER [ 589.522782][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.522792][T17287] Call Trace: [ 589.522801][T17287] [ 589.522806][T17287] dump_stack_lvl+0x116/0x1f0 [ 589.522825][T17287] print_report+0xcd/0x630 [ 589.522846][T17287] ? __virt_addr_valid+0x81/0x610 [ 589.522875][T17287] ? sys_imageblit+0x1a6f/0x1e60 [ 589.522891][T17287] kasan_report+0xe0/0x110 [ 589.522912][T17287] ? sys_imageblit+0x1a6f/0x1e60 [ 589.522932][T17287] sys_imageblit+0x1a6f/0x1e60 [ 589.522952][T17287] ? __pfx_sys_imageblit+0x10/0x10 [ 589.522968][T17287] ? __pfx__prb_read_valid+0x10/0x10 [ 589.522988][T17287] ? find_held_lock+0x2b/0x80 [ 589.523002][T17287] ? up+0xcb/0x140 [ 589.523018][T17287] ? do_raw_spin_unlock+0x172/0x230 [ 589.523041][T17287] ? prb_read_valid+0x78/0xa0 [ 589.523061][T17287] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 589.523079][T17287] soft_cursor+0x524/0xa10 [ 589.523101][T17287] ? fb_get_color_depth+0x120/0x250 [ 589.523122][T17287] bit_cursor+0xe8c/0x17e0 [ 589.523145][T17287] ? __pfx_bit_cursor+0x10/0x10 [ 589.523168][T17287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.523191][T17287] ? get_color+0x1da/0x450 [ 589.523209][T17287] ? __pfx_bit_cursor+0x10/0x10 [ 589.523228][T17287] fbcon_cursor+0x40c/0x5a0 [ 589.523246][T17287] ? add_softcursor+0x1/0x290 [ 589.523268][T17287] set_cursor+0x1db/0x250 [ 589.523288][T17287] con_write+0x89/0xb0 [ 589.523303][T17287] n_tty_write+0x41e/0x11e0 [ 589.523324][T17287] ? __pfx_n_tty_write+0x10/0x10 [ 589.523341][T17287] ? trace_kmalloc+0x2b/0xd0 [ 589.523358][T17287] ? __pfx_woken_wake_function+0x10/0x10 [ 589.523380][T17287] ? kfree+0x252/0x6d0 [ 589.523392][T17287] ? __pfx_n_tty_write+0x10/0x10 [ 589.523410][T17287] file_tty_write.constprop.0+0x503/0x9b0 [ 589.523427][T17287] redirected_tty_write+0xd4/0x150 [ 589.523442][T17287] vfs_write+0x7d3/0x11d0 [ 589.523457][T17287] ? __pfx_redirected_tty_write+0x10/0x10 [ 589.523473][T17287] ? __pfx_vfs_write+0x10/0x10 [ 589.523487][T17287] ? find_held_lock+0x2b/0x80 [ 589.523505][T17287] ksys_write+0x12a/0x250 [ 589.523519][T17287] ? __pfx_ksys_write+0x10/0x10 [ 589.523536][T17287] do_syscall_64+0xcd/0xfa0 [ 589.523552][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.523566][T17287] RIP: 0033:0x7fce6478efc9 [ 589.523578][T17287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.523594][T17287] RSP: 002b:00007fce62591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.523609][T17287] RAX: ffffffffffffffda RBX: 00007fce649e6270 RCX: 00007fce6478efc9 [ 589.523619][T17287] RDX: 0000000000000cb6 RSI: 0000200000000e00 RDI: 0000000000000009 [ 589.523628][T17287] RBP: 00007fce64811f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.523637][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.523645][T17287] R13: 00007fce649e6308 R14: 00007fce649e6270 R15: 00007ffdb0229378 [ 589.523660][T17287] [ 589.523665][T17287] [ 589.523669][T17287] The buggy address belongs to a vmalloc virtual mapping [ 589.523687][T17287] Memory state around the buggy address: [ 589.523696][T17287] ffffc90003ac9280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.523706][T17287] ffffc90003ac9300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.523716][T17287] >ffffc90003ac9380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.523725][T17287] ^ [ 589.523733][T17287] ffffc90003ac9400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.523743][T17287] ffffc90003ac9480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 589.523752][T17287] ================================================================== [ 589.583987][T17287] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 589.584008][T17287] CPU: 0 UID: 0 PID: 17287 Comm: syz.5.1647 Tainted: G U syzkaller #0 PREEMPT(full) [ 589.584031][T17287] Tainted: [U]=USER [ 589.584036][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.584045][T17287] Call Trace: [ 589.584050][T17287] [ 589.584057][T17287] dump_stack_lvl+0x3d/0x1f0 [ 589.584077][T17287] vpanic+0x640/0x6f0 [ 589.584099][T17287] panic+0xca/0xd0 [ 589.584118][T17287] ? __pfx_panic+0x10/0x10 [ 589.584136][T17287] ? sys_imageblit+0x1a6f/0x1e60 [ 589.584153][T17287] ? preempt_schedule_common+0x44/0xc0 [ 589.584168][T17287] ? preempt_schedule_thunk+0x16/0x30 [ 589.584191][T17287] check_panic_on_warn+0xab/0xb0 [ 589.584211][T17287] end_report+0x107/0x170 [ 589.584229][T17287] kasan_report+0xee/0x110 [ 589.584247][T17287] ? sys_imageblit+0x1a6f/0x1e60 [ 589.584265][T17287] sys_imageblit+0x1a6f/0x1e60 [ 589.584283][T17287] ? __pfx_sys_imageblit+0x10/0x10 [ 589.584298][T17287] ? __pfx__prb_read_valid+0x10/0x10 [ 589.584318][T17287] ? find_held_lock+0x2b/0x80 [ 589.584332][T17287] ? up+0xcb/0x140 [ 589.584348][T17287] ? do_raw_spin_unlock+0x172/0x230 [ 589.584371][T17287] ? prb_read_valid+0x78/0xa0 [ 589.584391][T17287] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 589.584408][T17287] soft_cursor+0x524/0xa10 [ 589.584430][T17287] ? fb_get_color_depth+0x120/0x250 [ 589.584452][T17287] bit_cursor+0xe8c/0x17e0 [ 589.584474][T17287] ? __pfx_bit_cursor+0x10/0x10 [ 589.584498][T17287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 589.584521][T17287] ? get_color+0x1da/0x450 [ 589.584539][T17287] ? __pfx_bit_cursor+0x10/0x10 [ 589.584559][T17287] fbcon_cursor+0x40c/0x5a0 [ 589.584577][T17287] ? add_softcursor+0x1/0x290 [ 589.584600][T17287] set_cursor+0x1db/0x250 [ 589.584621][T17287] con_write+0x89/0xb0 [ 589.584636][T17287] n_tty_write+0x41e/0x11e0 [ 589.584658][T17287] ? __pfx_n_tty_write+0x10/0x10 [ 589.584676][T17287] ? trace_kmalloc+0x2b/0xd0 [ 589.584702][T17287] ? __pfx_woken_wake_function+0x10/0x10 [ 589.584726][T17287] ? kfree+0x252/0x6d0 [ 589.584746][T17287] ? __pfx_n_tty_write+0x10/0x10 [ 589.584765][T17287] file_tty_write.constprop.0+0x503/0x9b0 [ 589.584784][T17287] redirected_tty_write+0xd4/0x150 [ 589.584800][T17287] vfs_write+0x7d3/0x11d0 [ 589.584815][T17287] ? __pfx_redirected_tty_write+0x10/0x10 [ 589.584832][T17287] ? __pfx_vfs_write+0x10/0x10 [ 589.584846][T17287] ? find_held_lock+0x2b/0x80 [ 589.584872][T17287] ksys_write+0x12a/0x250 [ 589.584887][T17287] ? __pfx_ksys_write+0x10/0x10 [ 589.584904][T17287] do_syscall_64+0xcd/0xfa0 [ 589.584921][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.584936][T17287] RIP: 0033:0x7fce6478efc9 [ 589.584949][T17287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.584963][T17287] RSP: 002b:00007fce62591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.584977][T17287] RAX: ffffffffffffffda RBX: 00007fce649e6270 RCX: 00007fce6478efc9 [ 589.584988][T17287] RDX: 0000000000000cb6 RSI: 0000200000000e00 RDI: 0000000000000009 [ 589.584997][T17287] RBP: 00007fce64811f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.585006][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.585015][T17287] R13: 00007fce649e6308 R14: 00007fce649e6270 R15: 00007ffdb0229378 [ 589.585030][T17287] [ 589.585095][T17287] Kernel Offset: disabled