last executing test programs: 13m37.959389457s ago: executing program 32 (id=436): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x202001, 0x0) r1 = socket(0x1, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, r4, 0x201, 0x70bd28, 0x25dfdbff, {}, [@ILA_ATTR_IFINDEX={0x8, 0x4, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) getsockopt$auto_SO_BSDCOMPAT(r0, 0x0, 0xe, &(0x7f00000001c0)='/proc/mtrr\x00', &(0x7f0000000200)=0xbd) r7 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) pread64$auto(r7, 0x0, 0x400000, 0x7) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/69, 0x45) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001040)=""/4088, 0xff8) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x387000, 0x0) 12m9.510181256s ago: executing program 33 (id=662): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xca, 0x0, 0x1ff) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x108800, 0x0) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0xffffffffffffffff, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) unlink$auto(&(0x7f00000001c0)='\x01\bL\xf2p\xbd\x15Rq?\xdc\x92\xa7\x97\x02\x88\xd9\xd6.fn\"\x9a\x12\x17\x90\x98\xb7\xa7\xddW+\xf5\xc0\x1e\xf4\x1c\x90\xc5\x913f\xbd\xca.\xa4\xf2\xc9\xff}\xe7\xdf\x92xS\xe6o\x127\xf8\xf2P\xd2\xd4\x13%\xd3$+\xdc\xfe&\xd2Q\xc8\xae%\xdc\xdbC26\xd7$\x06i\xa5\xad\xdb\x02RU\x81\xc3\x14kN\xff\x98p\xdc(\xc6,\"\x18\xa7\xdd\xe6\x91n\'\xd2\xc5\xda\xf1\x909\x17E5L\x04\x96\x0fYe\x1fV)\x06\xc3f\x8a\xbd\xaa0\x06T\x9f\x13\xd4`\xdafY\x03!\xa1\xf7g\x14^\xcf\x8b\\\xe45\xb5\x04\\]E~\x18\xae\\\x8a;{\x1a\xe8\xc2\x88\x8b\rD\x7f\xf8l\a\xf5\x14;\x94\xa1\x82\xb5\x1e\xab\xc2\x8d\x93O\xa9E\xc5\xea\x92\xcb\x9fl\x19.^\x83\x93e\xe7\xe7\xc1\xeeZ\xdb\xd3\x96\r\x95\xb8=\xa3\x98\x93\x9e\xa4\x9dl\xfd\x9c\x02\xf4\xf0\xacp\x8fV\xd8UD\x9dF\xa4\x9c\x86\x05\xbd\x02bV\xec\xd3\xf7\xd6\xe5wW\xd1\xe0 \x86T\xbf\x86%\xbc1\xaf\xcd\xfb3o\xef\x93.p\xe4\xb4*\xe2{\xa9\x05\xa2\xa5\xf6_\\\x8f\xd1\x9e\x98\xa5\x93%..\x1e\xeb\x85\xffQ\xf1\xaf\xa2v\bb3\\\xf65\xa7B:\xb2\xab\xe3`\xaf\xf7Z~\xc4j\xf6N\xfcv\xa8\x88\xb9i\x00'/595) (async) r1 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000001700)={@inferred=0xffffffffffffffff, 0xc, 0x3, 0x5, "9d4724b72b9845790081bff800c12173ddd2b94a2ce292e848840a0c00", @inferred=0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (async) r4 = socket(0x1f, 0x800, 0xffffff01) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(r3, 0x80000000000003ff, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r6 = socket(0x21, 0x4, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r6, @ANYRES32=r4, @ANYRESDEC=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x60048040}, 0x40000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(0x3, 0x4038ae7a, 0x38) 2m34.666012024s ago: executing program 3 (id=2251): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x100100001ff, 0x7, 0x0, 0x1000000000008fd6, 0x948b, 0x1000, 0x15f4da0a, 0x2000000000000000, 0xfffffffffffffffb, 0x66, 0x9, 0x20000005, 0x200000005, 0x9, 0xffffffffffffffc0, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r2, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r4, 0xc1205531, r3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendfile$auto(r5, r5, 0x0, 0x2) sysfs$auto(0x5, 0x100000074e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x9fca, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 2m33.584436197s ago: executing program 3 (id=2255): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) init_module$auto(0x0, 0xfffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x20, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x48800) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) (async) write$auto(0x3, 0x0, 0x7fff) (async) ioctl$auto(0x3, 0x4b71, 0x38) 2m33.439544573s ago: executing program 3 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0x7, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa509}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1ac}}, 0x401c084) r2 = socket(0xf, 0x5, 0xf) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3a, 0x8, 0x0, 0x1, 0x3) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r4) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYRES64, @ANYBLOB="5b792a75e39f79bb5030884dbf6966ca904144bcc195cfbbb5f10afa836374de3148f4b5f3742f0a1eeb7bd993c5aaa7b3e081b5300175d3743acf3b74b7c57540e3371ba02fcb57edf8ff33f47e6321568ea0f5265d704148fd8073611b546b4a66b59f61c09ab14f8b0597e5244b102919392ab81bd306675f64880bbb0fa692da0b103ca722c017798e5fed72a256862ce8e7173f42bb811e0a7b4f81c9773d85a374e8175c798b7d407d3887db88204ecde13527833892c4010af99007e48919a6608e012f9162940d5a80a51a8cf5acb046f424ce32831d9896138bb34029d97b", @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES8, @ANYBLOB="8e9b8bd83a3aced3f3d30ccb665799487f115c6cf1495a565984f78b5f659b6e150f3c373d6b85f05811256c8c9b18c0c3b2a5590a1b2fc1af15894aeb859c877fbd9a23d8b71d1dd94b0382b69c6e1b17071f377dd882136028f42f5a6a5c50ca0988bd35d21f79acf6e37555ebd754d1e73041435f99d74fe7df4e93866549f2147b21558bb398a5296203e41a606302e32d10bb854d75a7cbfb98b52c3fa4b5927c42f4106285a20a0641c3", @ANYRESOCT=r2], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0x400c000) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0x19, 0x404, 0x9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r7, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0) mmap$auto(0x5, 0x40009, 0xe0, 0xd2, 0xffffffffffffffff, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x200000, 0x0) open(0x0, 0x161342, 0x0) 2m33.437217577s ago: executing program 4 (id=2257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0x7, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa509}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1ac}}, 0x401c084) r2 = socket(0xf, 0x5, 0xf) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3a, 0x8, 0x0, 0x1, 0x3) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r4) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYRES64, @ANYBLOB="5b792a75e39f79bb5030884dbf6966ca904144bcc195cfbbb5f10afa836374de3148f4b5f3742f0a1eeb7bd993c5aaa7b3e081b5300175d3743acf3b74b7c57540e3371ba02fcb57edf8ff33f47e6321568ea0f5265d704148fd8073611b546b4a66b59f61c09ab14f8b0597e5244b102919392ab81bd306675f64880bbb0fa692da0b103ca722c017798e5fed72a256862ce8e7173f42bb811e0a7b4f81c9773d85a374e8175c798b7d407d3887db88204ecde13527833892c4010af99007e48919a6608e012f9162940d5a80a51a8cf5acb046f424ce32831d9896138bb34029d97b", @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES8, @ANYBLOB="8e9b8bd83a3aced3f3d30ccb665799487f115c6cf1495a565984f78b5f659b6e150f3c373d6b85f05811256c8c9b18c0c3b2a5590a1b2fc1af15894aeb859c877fbd9a23d8b71d1dd94b0382b69c6e1b17071f377dd882136028f42f5a6a5c50ca0988bd35d21f79acf6e37555ebd754d1e73041435f99d74fe7df4e93866549f2147b21558bb398a5296203e41a606302e32d10bb854d75a7cbfb98b52c3fa4b5927c42f4106285a20a0641c3", @ANYRESOCT=r2], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0x400c000) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0x19, 0x404, 0x9) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r7, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC1D1p\x00', 0x40341, 0x0) mmap$auto(0x5, 0x40009, 0xe0, 0xd2, 0xffffffffffffffff, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x200000, 0x0) open(0x0, 0x161342, 0x0) 2m31.85355122s ago: executing program 3 (id=2259): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) sendfile$auto(r0, r0, 0x0, 0xb9) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f00000001c0)={0x4, "85470413", 0x80000001, 0x7bd2, 0x7, 0x8, 0x50000000, 0xbe9c, 0xa56, 0x2, 0x46, 0x6000000000000, 0x5, 0x9, 0x2, 0x0, 0x6, 0x8, 0x2, "6bf3913e4b512195fc5ac50215d6f7ceda78821b"}) close_range$auto(0x2, 0x8, 0x0) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x11) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_TSINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x14, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x1aa67b58}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x7fff}]}, @ETHTOOL_A_TSINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x800000}, 0x4) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000000)=@bpf_attr_1={r0, 0xe, @value=0xfffffffffffffff8, 0xfffffffffffffffa}, 0xc) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x0) ioctl$auto(0x3, 0x89e1, 0x91) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="81b527bd7000", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) umask$auto(0x6) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) 2m31.47522024s ago: executing program 4 (id=2262): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0xe1d2b27bdc14aad6) flock$auto(r0, 0x5) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya7\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 2m30.511159773s ago: executing program 4 (id=2263): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x9, 0x4, 0x1) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) socket(0xa, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) 2m30.24634882s ago: executing program 3 (id=2265): ioctl$auto_FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x8) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose13/gro_flush_timeout\x00', 0x450040, 0x0) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r0, 0x1, &(0x7f0000000040)="1221db513df519b4d1d709bc", 0x5) fcntl$auto_F_GETOWN(r0, 0x9, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20040010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x7000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xb}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "454742c31f8144f2b07a6bcd6b9516a905bfe6197d323924302680a48d5ded39705bfa7e767305847eb40380ccced9504e475ed33c19986a198b9e793ea301e339f1e0dc7b8f01d65b60ef16311a3ac138032ddc292250e5286314ffbfe5a2a80e88d9fb02c993e6d7c37d3e4082429ac4851b36f0d6cefcc2a8732fd37d53cd"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x4040000) r4 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000003c0), 0x101400, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r4, &(0x7f0000000400)=""/206, 0xce) mmap$auto_snd_pcm_f_ops_pcm(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x6) r5 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/netdevsim/netdevsim5/psample/out_tc_occ_max\x00', 0x80c40, 0x0) write$auto_fops_u64_(r5, &(0x7f0000000540)="0bb13c3c7360d360afb38151bc3228b68ca51733791534b790f534f5610b00374f408644c0d55df4a78722eca8ae30648288e1bb5c5a68728d5501bf50b5dcdbe58cbdfb3cfd071539899eb04d177ba026004d3c8502ac0b4b3211b5118a71a48839c28a53deeb724acfa41706da6ac4d4b1e094ec1ddd1bd0dbf0774f16493e6df5c935ee80416e84bac28129a6ada5c7a6b39e513c294a0671ee", 0x9b) (async) unshare$auto(0x644) r6 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000600)=0x9) lstat$auto(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0xffff, 0x2, 0x9, 0x9, 0xee01, 0xffffffffffffffff, 0x0, 0x9, 0x7, 0x7634, 0x3, 0x4800000000000000, 0xf320, 0x9, 0x33b, 0x101, 0x8}) (async) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000740)={0xf, 0xee00, 0x1, 0x3}) fstat$auto(r6, &(0x7f0000000780)={0x80, 0x8, 0x9, 0xffffffff, r7, r8, 0x0, 0x4, 0x80000001, 0x480, 0x124b39070000000, 0x3, 0xfffffffffffffb6f, 0x8000, 0x9, 0x2, 0x3}) (async) r9 = accept4$auto(r0, &(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, &(0x7f0000000880)=0xfffff4ea, 0xf4a8) setsockopt$auto_SO_RCVBUF(r9, 0xa, 0x8, &(0x7f00000008c0)='\xe9](:}\x00', 0x49b6) (async, rerun: 32) getsockopt$auto_SO_GET_FILTER(r9, 0x8, 0x1a, &(0x7f0000000900)='\xe9](:}\x00', &(0x7f0000000940)=0xf) (async, rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000980)='/dev/input/event1\x00', 0x163000, 0x0) ioctl$auto_TIOCNXCL2(r9, 0x540d, &(0x7f00000009c0)="8b85b4") (async) fcntl$auto_F_GETLEASE(r6, 0x401, 0x800) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000a00), 0x141000, 0x0) (async) ioctl$auto_BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000000a40)=0x100000) r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000ac0), r6) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x14056105}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xfe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xff}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xd}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7fff}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NL80211_CMD_VENDOR(r6, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x270, 0x0, 0x600, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}, @NL80211_ATTR_FILS_NONCES={0xeb, 0xf3, "66ea0c7b2f979914127e2fe301fd5850e064a1825dd992bfdb2be7d809bdb7dfdab008f12c2d7c50f5e5bf791f07e73fdc4e2083d1c2406741db0abd4b41771f92c75b5d2d008933523bd53d5013d866a74fd1953d1930d31fe7e4682e76d00095f0b58ec1196bcbd7c0876dd7dd8f91430cb78fb1b89a3cc724eea30615086e554175ff2f8436eff8a52baf430c41c90d4ae060b83a2648e42a006986a39876f9882f5bd1e56e73d7c5b87153a5d97ade2435749f6ea4698f70049cbb287df2cd32bbaa44a78ade581e57bcb29fc9b0d3283b3b7d789cfa380cbdfa515df45e86556aa9136341"}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_FILS_KEK={0x22, 0xf2, "af3dc1897f64e5449c9f9833b2d19d4d95cc991781e545c5c1024b89b3dd"}, @NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic="95b2d3f1665fc61e6291ba530478888e3dc6c10f4cd14fdd9263e1d1affa9809d0805df81f2f5073c41893f090985b4ead8697e2b5f8eeab8f264bb03f48df50e6b6d2b1706312d47f3e80325aa47b031b526af10481249a38410af8cafcc46753ef70b0c60d7151f022779618dc3fa5e4fef887004fe59036dd824f6153fd90d01f42a814049605118c7df5ae0e91a2733aa3c07782784783be7c07ad2f2e9aa44a39912a5fc78de25d31b678de176b715a5c0ed04c6802d0ddf1f9c8bb2ed5c3df61abd2a73ea91f5c8c2d8914c95d", @generic="7723558629bdb70b2dee39464b7a28698caa921abbb0c44a5b8bf1dfe6eee29bbc1327bd5a764d951c5caf879ecdfff568d0cb99"]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, "c27538dfd98f7bfd3ba136d248a1b9ee"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}]}, 0x270}}, 0x20000800) 2m29.825617334s ago: executing program 3 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='4', 0x1) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000040)={0x0, 0x7}, 0x9) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) (async) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=@token_create={0x3}, 0x2) close_range$auto(0x2, 0x8, 0x0) 2m29.369952517s ago: executing program 4 (id=2270): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), r1) socket(0x2c, 0x3, 0x0) poll$auto(&(0x7f0000000140)={r0, 0x9, 0xa}, 0x5, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) io_uring_setup$auto(0x101, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/amidi2\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x201, 0x10, 0x0, 0x1, 0x100000000000009, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x1, 0x80000001, 0x10000000000084, 0xa7b, 0x0, 0x2, 0x800]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1f, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x8480, 0x16c) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x28401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x8, 0x4a0009, 0xdf, 0x40000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x5) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x4, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x3, 0x7, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) 2m28.306201449s ago: executing program 4 (id=2274): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/queue/read_ahead_kb\x00', 0x1079c2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e902, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1180659dbdaeaa2c2176ccd287f5dfe4cd610bcc3d786d3924216836410151dfd6a4886a1342d3a99acfaf4d52f3e02be721fcc9fd0657bc26526a07fb3b1a4e8cf75c022e582f1bae9b5577c9a7a29397f63066417c5424be21ef808786798d665827a21e52500bdd379fd5cf651a8a40e525a8b6a688bd70545aff0921b6972c290fb96d99dacdc87cecf7", @ANYRES32=r1, @ANYBLOB="10002cbd7000fbdbdf250700000005000a0003001e0005000f000400000005000a0004000000a70019002c7f5dcbc2288bf6cc6f4ccbc62aa98fd0fa606a4c54219cc3ffffff7f000000008f935d094d007ef76c27e988118d9fa79d88394cc9dd1989f2eec9ef0143851f4f2dd7b17f4b2378d5ca8440a5aadda6f975bc31d6540e408b3f76dfb4aa72421e1fc829d23ed178e1e402ffe9c5db921cd3ec86207cfda2d696aed85432f330f479af6b3f43f1c38a95f82c784cc18765c58e34421500"], 0xd4}, 0x1, 0x0, 0x0, 0x20008014}, 0x88040) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd0\x00', 0xdd01, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) r3 = socket(0x18, 0x5, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x4, 0x422, 0x8b3d) ioctl$sock_SIOCGIFINDEX(r3, 0x40047452, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NODE_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000b443057a8b674ba8d99000", @ANYRES16=r5, @ANYBLOB="010328bd7000fbdbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) open(0x0, 0x161342, 0x100) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da06, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000440)=""/68, 0x44) socket(0xa, 0x1, 0x84) 2m27.084261205s ago: executing program 4 (id=2278): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0440, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x3, 0x0, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x8000000000000000, 0x8, {0x100000000, 0xfff}, 0x5, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x80000004, 0xc1, 0xffffffffffff628e, 0xa743, 0xdeb9, 0x804}) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xc0282, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000340)={{0xffff, 0xee00, 0xee00, 0x6, 0x71, 0x7, 0x6}, 0x7, 0x0, 0x2, 0x5, @raw=0x9, @raw=0x6, 0x8, 0x0, &(0x7f0000000200)="bb9c56390227190f7475075326e0b3979ec02fcafaaea376ed17c4d7cc10d96fd6009175e9fe0276c40a4325af7a32fb061c4c1bc74d4410968897374d3cf677385572407ce77315ce04d02d2644c1", &(0x7f00000005c0)="9c9b7299ff1aad1bf5566942b3d0f9947b6fa6141665046c2569120ed013a14a19e5fcf1a954310c9202495e43833aec17fe076fe7b663d13be55c81b7d15113987010747b16657883482dedaee8f877ee141048a26deb008060f4e6f69f64910014c05530efacd89f27dd5de1cf3c0c9b41f80e62b7eb31c1a45d7f743a51a4d28f8b941155598b8952669e45c6f34a8c2e47bbaa697f230f6bceba130210d6e3308352aea3371eea0baad42699461bf0ab76de0cb6d821843b093798d73cf401585a0440420ee7cd0f751675d6962dc3f48226d92ce8"}) setresuid$auto(r3, 0x7, r3) (async) setfsuid$auto(r3) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r4, 0x0, 0x3) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1000001fc, 0x200000000807, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0xb, 0x4, 0x5, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) llistxattr$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='!\\^@\x00', 0x8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mmap$auto(0xfffff000, 0x400008, 0x1ff, 0x9b72, 0x2, 0x8000) mremap$auto(0xb, 0x80, 0x7fff, 0x7, 0x1001ff000) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000dddbdf255500000004009100"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20004844) (async) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "d56c0319672eb562f39956c4"}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, "4c6b67a24ab61064a305947924276bc06bfe6c6768b100b11d8fb29660ae74"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000e00) 2m14.52625956s ago: executing program 34 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/slab/kmalloc-64/min_partial\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='4', 0x1) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000040)={0x0, 0x7}, 0x9) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) (async) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=@token_create={0x3}, 0x2) close_range$auto(0x2, 0x8, 0x0) 2m12.031225549s ago: executing program 35 (id=2278): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0440, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x3, 0x0, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x8000000000000000, 0x8, {0x100000000, 0xfff}, 0x5, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x80000004, 0xc1, 0xffffffffffff628e, 0xa743, 0xdeb9, 0x804}) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xc0282, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) write$auto(0x3, 0x0, 0x81) (async) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000340)={{0xffff, 0xee00, 0xee00, 0x6, 0x71, 0x7, 0x6}, 0x7, 0x0, 0x2, 0x5, @raw=0x9, @raw=0x6, 0x8, 0x0, &(0x7f0000000200)="bb9c56390227190f7475075326e0b3979ec02fcafaaea376ed17c4d7cc10d96fd6009175e9fe0276c40a4325af7a32fb061c4c1bc74d4410968897374d3cf677385572407ce77315ce04d02d2644c1", &(0x7f00000005c0)="9c9b7299ff1aad1bf5566942b3d0f9947b6fa6141665046c2569120ed013a14a19e5fcf1a954310c9202495e43833aec17fe076fe7b663d13be55c81b7d15113987010747b16657883482dedaee8f877ee141048a26deb008060f4e6f69f64910014c05530efacd89f27dd5de1cf3c0c9b41f80e62b7eb31c1a45d7f743a51a4d28f8b941155598b8952669e45c6f34a8c2e47bbaa697f230f6bceba130210d6e3308352aea3371eea0baad42699461bf0ab76de0cb6d821843b093798d73cf401585a0440420ee7cd0f751675d6962dc3f48226d92ce8"}) setresuid$auto(r3, 0x7, r3) (async) setfsuid$auto(r3) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r4, 0x0, 0x3) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1000001fc, 0x200000000807, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0xb, 0x4, 0x5, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) llistxattr$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='!\\^@\x00', 0x8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mmap$auto(0xfffff000, 0x400008, 0x1ff, 0x9b72, 0x2, 0x8000) mremap$auto(0xb, 0x80, 0x7fff, 0x7, 0x1001ff000) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000dddbdf255500000004009100"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20004844) (async) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "d56c0319672eb562f39956c4"}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, "4c6b67a24ab61064a305947924276bc06bfe6c6768b100b11d8fb29660ae74"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000e00) 2m8.879995721s ago: executing program 6 (id=2321): lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) (async) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getpid() (async) r2 = getpid() r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130026bd7000fcdbdf1e74abff0008000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001245}, 0xa, 0x40000000000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x32, 0x3, r2, 0x2, 0x100000001) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r6, 0x4004556e, 0x1f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) (async) write$auto(0x3, 0x0, 0x81) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x10400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) (async) mmap$auto(0xfffffffffffffffe, 0x10400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) unshare$auto(0x40000080) 2m8.569785862s ago: executing program 6 (id=2344): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x0, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r0, 0xc040564a, r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x1003, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4842, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 2m7.64956823s ago: executing program 6 (id=2345): r0 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_futex/times\x00', 0x482140, 0x0) mmap$auto(0x1916, 0xb, 0xdf, 0x9b72, r0, 0xb0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x56640, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r2 = open(&(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0xd1) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x8000000000000000, 0x9, 0x8000000000000000, 0x7, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r5, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) pread64$auto(r6, &(0x7f00000000c0)='/proc/sys/kernel/sem\x00', 0xa1a1, 0x5) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) 1m52.850375793s ago: executing program 0 (id=2387): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0xa, 0x801, 0x84) listen$auto(0x3, 0x81) r0 = accept$auto(0x3, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x200000000, 0xfffdfffffffffffa, 0x1, 0x1, 0x6, 0x0, 0x7, 0x4ec4445, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x200005, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, [0x80, 0x0, 0x0, 0x400000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) timer_delete$auto(0x2) open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') poll$auto(&(0x7f0000000080)={r3, 0x9, 0x1816}, 0xff, 0x2) 1m52.445672804s ago: executing program 36 (id=2345): r0 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_futex/times\x00', 0x482140, 0x0) mmap$auto(0x1916, 0xb, 0xdf, 0x9b72, r0, 0xb0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x56640, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r2 = open(&(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0xd1) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x8000000000000000, 0x9, 0x8000000000000000, 0x7, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r5, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) pread64$auto(r6, &(0x7f00000000c0)='/proc/sys/kernel/sem\x00', 0xa1a1, 0x5) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) 1m52.001130555s ago: executing program 0 (id=2390): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) (async) r0 = socket(0x10, 0x4, 0xffffffc0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x4008) (async) sendmmsg$auto(r0, 0x0, 0x7, 0x4008) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) r3 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x40, 0x0) pread64$auto(r3, 0x0, 0x8, 0xa) (async) pread64$auto(r3, 0x0, 0x8, 0xa) madvise$auto(0x0, 0x200007, 0x28) (async) madvise$auto(0x0, 0x200007, 0x28) setresuid$auto(0x2, 0x7, 0x8080) r4 = socket(0x10, 0x2, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="d122e8ff27bd7000fddbd7250600fc00"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000854) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) 1m50.90964238s ago: executing program 0 (id=2393): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0xa505}, 0x800}, 0x1000007, 0x4008) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) mmap$auto(0x5, 0x2, 0xb, 0x9b72, 0x2, 0x8001) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) unshare$auto(0x40000080) pwrite64$auto(r1, 0x0, 0x7, 0x7) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m50.239226275s ago: executing program 0 (id=2396): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='>', 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r3, 0x301, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'vdpa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) 1m50.064410084s ago: executing program 0 (id=2398): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x800, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getsockopt$auto(r0, 0x29, 0x18, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002170f4eeb146854913543af494d3403012efb0e68613f2c0adfb24b3800cfeaf", @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0a00010025247d275e000000"], 0x30}}, 0x4844) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) socket(0x1d, 0x3, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) kill$auto(0x0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05002bbd7000fddbdf25000000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x15, 0x5, 0x0) r7 = getsockopt$auto(r6, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r7) r8 = getpid() r9 = gettid() rt_tgsigqueueinfo$auto(r8, r9, 0x21, 0x0) 1m49.618980636s ago: executing program 0 (id=2399): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x56640, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = open(&(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0xd1) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x8000000000000000, 0x9, 0x8000000000000000, 0x7, 0x1, 0x1]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r4, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) pread64$auto(r5, &(0x7f00000000c0)='/proc/sys/kernel/sem\x00', 0xa1a1, 0x5) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) 1m34.058330778s ago: executing program 37 (id=2399): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x56640, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = open(&(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0xd1) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x8000000000000000, 0x9, 0x8000000000000000, 0x7, 0x1, 0x1]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r4, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) pread64$auto(r5, &(0x7f00000000c0)='/proc/sys/kernel/sem\x00', 0xa1a1, 0x5) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) 1m13.12302267s ago: executing program 5 (id=2527): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x100, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x84202, 0x0) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0xf, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0xe, 0x20009, 0x9, 0x14, 0xffffffffffffffff, 0x7ff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd14/queue/nomerges\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x9) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.unix.gid/flush\x00', 0x1a9601, 0x0) write$auto(r6, 0x0, 0x9) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000340), r1) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, r4, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) close_range$auto(0x2, 0x8, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) 1m10.757609174s ago: executing program 5 (id=2535): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresgid$auto(0x0, 0xee01, 0xffffffffffffffff) r0 = getegid() mmap$auto(0x400, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) semctl$auto(0x7, 0x2, 0x2, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/2/ipsec\x00', 0xfa042, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b73, r1) setregid$auto(r0, r0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r2, 0x80044dfd, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0xa04, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x401) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x1) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x6, 0x101, 0x1, 0xffffffeefffffff0, r3, 0x8002) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x440, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) 1m10.080805087s ago: executing program 5 (id=2538): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x800, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x1, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) timer_create$auto(0x9, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$auto(0x3, 0x4, r1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0x18, 0x4, 0x103) 1m8.77121496s ago: executing program 5 (id=2544): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0xa505}, 0x800}, 0x1000007, 0x4008) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) mmap$auto(0x5, 0x2, 0xb, 0x9b72, 0x2, 0x8001) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) unshare$auto(0x40000080) pwrite64$auto(r1, 0x0, 0x7, 0x7) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m7.766832169s ago: executing program 5 (id=2549): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x7c34) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x3) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x400001, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(r1, 0x0, 0x7, 0x40271, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x800, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_snmp6/dummy0\x00', 0x199940, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) 1m7.412671631s ago: executing program 5 (id=2552): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/217, 0x115) bpf$auto(0x11, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r1, 0x1ed04f40, @old_map_fd=r0}, 0x100) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x189b02, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r2) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000077317351f434f58139739a4702f34b2293dd0923dffe51795a62fe5b5c54f46d126424654cb5841446d43ce89891c0527472d561e7ee2b7925165cb6cf60571871691bd81d5270bf87e0ca1ac76cca2e0a594aaab4ac65dc3c15fc785b2c46fc53e4d80e", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 51.760430233s ago: executing program 38 (id=2552): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ptp/ptp0/n_alarms\x00', 0x42080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/217, 0x115) bpf$auto(0x11, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r1, 0x1ed04f40, @old_map_fd=r0}, 0x100) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0x189b02, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r2) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000077317351f434f58139739a4702f34b2293dd0923dffe51795a62fe5b5c54f46d126424654cb5841446d43ce89891c0527472d561e7ee2b7925165cb6cf60571871691bd81d5270bf87e0ca1ac76cca2e0a594aaab4ac65dc3c15fc785b2c46fc53e4d80e", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 36.268370329s ago: executing program 2 (id=2672): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) timer_create$auto(0x1, 0x0, 0x0) r2 = mq_open$auto(&(0x7f0000000000), 0x7e, 0x9, 0x0) mq_notify$auto(r0, 0x0) read$auto_proc_page_owner_operations_page_owner(r2, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r3 = socket(0x22, 0x6, 0x200) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x0, 0x311) ioctl$auto(0x3, 0x80000541b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48890) memfd_create$auto(&(0x7f00000001c0)='!\x00', 0x18) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x141c01, 0x0) fallocate$auto(r1, 0x1ff, 0xd, 0xffffffffffdffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r4) shmat$auto(0xffffffffffffffff, 0xfffffffffffffffd, 0x6) ioperm$auto(0x5, 0x9, 0x3ffffffc) fdatasync$auto(0x68a3) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/macvtap0/router_solicitation_interval\x00', 0x400100, 0x0) lseek$auto(r5, 0x0, 0x0) 36.009552938s ago: executing program 2 (id=2673): socket(0x28, 0x1, 0x28) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x62042, 0x0) mmap$auto(0x0, 0xb, 0xf51ce67, 0x10011, 0x3, 0x0) memfd_create$auto(0x0, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyt7\x00', 0x40980, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/revision\x00', 0x8a080, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/revision\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002100)=""/4090, 0xffa) mmap$auto_v4l2_fops_v4l2_dev(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xc24) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x141000, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x141000, 0x0) shmctl$auto_SHM_LOCK(0x55fa, 0xb, &(0x7f0000000340)={{0xdb, 0x0, 0xee00, 0xf, 0x3800000, 0x8, 0x100}, 0x8000, 0x7f, 0xa91c, 0x4, @inferred=0xffffffffffffffff, @raw=0x7, 0x1, 0x0, &(0x7f0000000140)="ced0d300675c63b2d6e5e059ca18b4f212dbdccc6e8ca718058cb4fa54bf044d11fe4949988b26d42af1e5412520ecc3d4c00e86a61d4f3faebb11ceb6d7ff12f5c58fb7d549b0e2149f5d7c929fc89a6b2da2b36067a8c95363efa95ecdf8ae961f7a125d767a04e7d084d24c7974a3943d0e3f40bbf6679a3e6591d41d7927b72d2e8b0d0ded3dedd6eecbd38b76cb1379f905b387fb6b0bc0eb3860da0c4452504924f82be46ee220bb95cf10a5531a21ed010e970e5b1f40d4050aff3c7a04", &(0x7f0000000240)="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"}) (async) shmctl$auto_SHM_LOCK(0x55fa, 0xb, &(0x7f0000000340)={{0xdb, 0x0, 0xee00, 0xf, 0x3800000, 0x8, 0x100}, 0x8000, 0x7f, 0xa91c, 0x4, @inferred=0xffffffffffffffff, @raw=0x7, 0x1, 0x0, &(0x7f0000000140)="ced0d300675c63b2d6e5e059ca18b4f212dbdccc6e8ca718058cb4fa54bf044d11fe4949988b26d42af1e5412520ecc3d4c00e86a61d4f3faebb11ceb6d7ff12f5c58fb7d549b0e2149f5d7c929fc89a6b2da2b36067a8c95363efa95ecdf8ae961f7a125d767a04e7d084d24c7974a3943d0e3f40bbf6679a3e6591d41d7927b72d2e8b0d0ded3dedd6eecbd38b76cb1379f905b387fb6b0bc0eb3860da0c4452504924f82be46ee220bb95cf10a5531a21ed010e970e5b1f40d4050aff3c7a04", &(0x7f0000000240)="4fb33bdfe4b6490cd73f7c10e50391d2265130e1b74452304246a12ff2868a73ad7ddcc474eb8e4fcc28835e78168a8a519621cafbc20dc9e970f6237657f48908c85b9a42590ce78fcb5915f3a13dbc68561b0e18fa2401b3e94426f7f15017794bf1378902f940ef2170ad4f3836714aa6cfadee0d93eb7a673b138cca22804bca6240714277fbfa07a85273c1d280633104852a89df8a957d2cd79ec52a3c79ed355e4e0216074d9e6e6d6bd6c6204effec739844862097aa0b7dedb057705e398f760c1a8c02abc9cf52ccb755562d481c8ba0978edb0dbe3486aab0a66605f97f3f6987785f5650a8841413a2abfda948eaebf200dab510355c"}) r3 = semctl$auto_GETPID(0x5, 0x7, 0xb, 0x7) shmctl$auto_IPC_SET(0xb, 0x1, &(0x7f0000000480)={{0x2, 0xffffffffffffffff, r2, 0x3, 0x1000, 0x7, 0x17b}, 0xfffffff7, 0x5, 0x2, 0x1, @inferred=r3, @raw=0x23180000, 0x400, 0x0, &(0x7f00000003c0)="1becb4e3f778042e02fd1399912cf07ba43a36e4f7217b32a76371c91ba24d98c99b47477576ae26ac641da300bba1594d319ffbebb2d387c11b714526782302f7c3e60d7efe488031427a1b69204495d3e8bf94b75b106a3854ad311fea7aa1f7ab05944d64dbb6115c0da2bc", &(0x7f0000000440)="0fb8da25c09d8a29c846b797cf51aebfde167c88ce25c82b5bb882c8e24791"}) (async) shmctl$auto_IPC_SET(0xb, 0x1, &(0x7f0000000480)={{0x2, 0xffffffffffffffff, r2, 0x3, 0x1000, 0x7, 0x17b}, 0xfffffff7, 0x5, 0x2, 0x1, @inferred=r3, @raw=0x23180000, 0x400, 0x0, &(0x7f00000003c0)="1becb4e3f778042e02fd1399912cf07ba43a36e4f7217b32a76371c91ba24d98c99b47477576ae26ac641da300bba1594d319ffbebb2d387c11b714526782302f7c3e60d7efe488031427a1b69204495d3e8bf94b75b106a3854ad311fea7aa1f7ab05944d64dbb6115c0da2bc", &(0x7f0000000440)="0fb8da25c09d8a29c846b797cf51aebfde167c88ce25c82b5bb882c8e24791"}) getsockopt$auto(r1, 0xa, 0x2, &(0x7f00000000c0)='\xe2\x00', &(0x7f0000000100)=0x5) 35.596944271s ago: executing program 2 (id=2675): r0 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/version\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) semctl$auto_SETVAL(0x6, 0x4, 0x10, 0x6) r3 = prctl$auto_PR_SET_MM_START_DATA(0x80000001, 0x3, 0x0, 0x9, 0xd) ioctl$auto(0xffffffffffffffff, 0xfffff369, 0x2) mmap$auto(0x0, 0x8000000020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/234, 0xea) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) uname$auto(0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x6, 0x0, 0x2, 0x7fff, 0xa4, 0x3, &(0x7f0000000100)="76c1153dec4f86"}) mmap$auto(0x0, 0x440009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) kexec_load$auto(0x5, 0x1, &(0x7f0000000180)={@buf=&(0x7f0000000200), 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0xffffffffffffffff, 0x5601, 0x3) prlimit64$auto(r0, 0x8000, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x1e1b}) waitid$auto(0x1, r4, &(0x7f0000000280)={@_si_pad}, 0x9f62, &(0x7f0000000340)={{0x5}, {0x2bf}, 0x8dc, 0x8, 0x1, 0x5, 0x1, 0x8, 0xf, 0x7, 0x2, 0x80000000, 0x0, 0x7, 0x130, 0x7}) 33.892952722s ago: executing program 2 (id=2678): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r4, 0x0, 0x9) fcntl$auto(r3, 0xfffffffd, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d7, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) 32.91570884s ago: executing program 2 (id=2682): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) poll$auto(0x0, 0x0, 0x3) (async) poll$auto(0x0, 0x0, 0x3) ioperm$auto(0x7, 0x71, 0x863) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000180)='#$}\x00', &(0x7f00000001c0)="8b41fa0023d5e62cd56fb02cc40a72e225c640f5f3", 0x8001, 0x2) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r1, 0x8, 0x400000000000006, 0x4) (async) fadvise64$auto(r1, 0x8, 0x400000000000006, 0x4) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) pread64$auto(r2, 0x0, 0x3, 0x5ef6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r3, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) io_uring_setup$auto(0x6, 0x0) (async) r4 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r5, 0x0, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r6, 0x0, 0x2b6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x124, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf9}, @NL80211_ATTR_KEY_DATA={0x4}, @NL80211_ATTR_MBSSID_ELEMS={0xee, 0x133, 0x0, 0x1, [@generic="c39f68487ad0de5446dfa8afd4847c5283f9e86dc4fab0a3a6e9b0d2e9ba44ae2ae4e98d4779ffde266c990c6a9d5e2c6fe6b78f06106e2fef4cd789710865fccf310a343a18533a24d2c6cbb8712f1f73d6b0ea2dada2a207bc5a14766335792c530ddd1f5f5a", @nested={0xc, 0x10f2, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @u32=0xd}]}, @generic="8e560fe403d9e0302deedb14acef9cb37b8dde1d2e6d0b2db4628a86549f38f5b3a8cfb9dde91e5dd943ca5bd8ff89ee129530037a0efb79e6507c02fdf2f0d84a09fa1e4c7d0c6c84c4954eacc8a7dabbae30f08ffd7a109c18c0f8188c0ffd572874ab35deb021bb17b847e1eaf91dd782dbcb491a96"]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffffff3) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8402, 0x0) (async) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8402, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) landlock_add_rule$auto(r4, 0x3, &(0x7f0000000240)="93a8c040ee6312529d96f84fd55a6ec57c38c90ed527a51e9276fc1fd682c426dfde812a8355e3127a35ae3af501130bc7ee60ef829605011c5609d924e2e39abf24e614975760ee90f11bc49af9ca6558526916af3170f87273c8a443ec07c8de6932133f873e0c0aca16f99a1a865383366a19acc23f805e57d3fda0aa1942ae41ae661f6dd6d37e2d45182b88e30f697a6ad5f6a1ea7f8f4b214f40368710", 0x2) write$auto(0x3, 0x0, 0xfffffdef) 32.141622359s ago: executing program 2 (id=2683): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x11, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010228bd7000ffdbdf250100000008000400", @ANYRES32=r6, @ANYBLOB="212415f8e301b2e861b2fe3438e6c0abe628e629b756cd359b39626cb44fae9f2715d74d90065d12bf5351941efa27327bd2c37db92a0514e4ad9e83f02c252f7ae016675a5cfc63e760b3ee1df219cf9fbc8a5c73b5c98fe576"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) ioctl$auto(r3, 0xfffffffe, r7) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r8 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x0) read$auto(r8, 0x0, 0x10000004000049) symlink$auto(&(0x7f00000000c0)='.\x00', &(0x7f0000000040)='./file0\x00') 24.915412955s ago: executing program 7 (id=2705): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresgid$auto(0x0, 0xee01, 0xffffffffffffffff) r0 = getegid() mmap$auto(0x400, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002) semctl$auto(0x7, 0x2, 0x2, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/2/ipsec\x00', 0xfa042, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b73, r1) setregid$auto(r0, r0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r2, 0x80044dfd, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0xa04, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x401) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x1) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x6, 0x101, 0x1, 0xffffffeefffffff0, r3, 0x8002) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x440, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) 24.271426524s ago: executing program 7 (id=2707): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async) unshare$auto(0x9) io_uring_setup$auto(0x1, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) unshare$auto(0x40000080) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_snmp6/veth1\x00', 0x100, 0x0) read$auto(r1, &(0x7f0000000000)='\x00', 0xea) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)=@query={@target_fd=r2, 0x1, 0x8, 0x2, 0x4, @prog_cnt=0x3ff, 0x0, 0xfff, 0x3a6, 0x4, 0x97da}, 0x10a) (async) r3 = io_uring_setup$auto(0x3, &(0x7f0000000380)={0x4, 0x0, 0x8000, 0x5b, 0x81, 0x6, 0xffffffffffffffff, [0xe, 0x9, 0x100], {0x8, 0x400, 0x7, 0x3446, 0x4, 0xffffffff, 0x8, 0x1, 0x6}, {0xffff, 0x7ff, 0x1, 0x8, 0x8000, 0xd, 0x21d, 0x5, 0x5}}) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000440), r3) (async) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, 0x0, 0x1, 0x0, 0x0, 0xc044}, 0x1) r4 = waitid$auto(0x42, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x7, 0x7d2, 0xd5ae, @_sigfault={&(0x7f00000000c0)="4ba6a403b94fd1f75aa81163a7af0e349a8b2abe5e6c7fbf7c5082a67f38520dbdc7692997aa45e63b6b16e806371967f4d563fcf251b4a49080e02c5463c66752df", @_addr_lsb=0x8}}}, 0x2, &(0x7f00000002c0)={{0x7ff, 0xffffffffffffffff}, {0x4e, 0x7}, 0x7f, 0x9, 0x1000000000000006, 0x3fffffff80000000, 0x800, 0x7, 0x5, 0x7, 0x9, 0x3, 0x10001, 0x9577, 0x9, 0x9}) bpf$auto(0x12, &(0x7f0000000040)=@link_detach={0xffffffffffffffff}, 0x26) (async) r6 = geteuid() (async) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001180)={{0x8, 0xffffffffffffffff, 0x0, 0x6, 0xdf7, 0x7, 0x9f71}, 0x80000000, 0x800, 0xfffffffffffffff8, 0x1, @inferred=r4, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000140)="995d45922db8a829198ebce22bd5f42e563b53a249de9c8b5d392d88426369a73c6fe6f66de06f9f4964cd20af595ff4f1e8bf7f8642d6", &(0x7f0000000180)="0fcf475dd313ee031e4b16142db4468a960cfcb2afe55e2451131c45395f5365acd8e54088ecd6e411aaeb30fab62b9e0c6a45fe9f944cba65c493c3b52ec9daae97d2e921fd8f7445db95dec3e911ce93a43b678725144023381a8143badba1eb1022d4b330bf5a1659daf939956f065eb300d4dacbcdb51596010e193f5ea206bb5755bea5c49e46cf654a3a132610d117f6415c2f6f75f4c072f9229b13afef58a25ad93a463c1859589b2bf46c9be2c9d5d3445c035d726fef567ca899cc6168c87cb7f29481657f6a18834dbf874b83ac3e976c11fbf70045c7ba3089e88f129db9bbab00d32d16e388aa53acc8650295c376d303ccdbd3608b56f1cb4e19366f300871f3ec222e72f30ff7959df8af036cd74e325319805e1334996e69e649567a3604a1adbe0ee3d9100fd12792c4f3e3fe955896bc42bbd49569da07aeaf77b6d5185970cdffc9e7835ed54e3c85044aa1292f1709b0d2279928dd48758eb59a886628279267cece1c918af23283c51672c503b06df96f2d5ca96a274e408a56f0d4b2ab9411f4beb91b33b7ff9a93aa409adccf45bf3519d1c7ae925909558b292e7f80bb6898e5a0c97a2f950182a8675e61f2a53e81b99348428158d19b18e62d2cbe1f02c6ea04095f84879dca5784505b017e301483eeabc73c73b0c6156263051e739d7966109f002b1b9775e353894af9dee82faa6ebfaacf2cc53aa22468847f6ce38b209f83d966d6c47eae089909cc43bfe2e9c3d722a0d0a5aadfd10fe78f99acae16bc5eb2fc25c8752b6f645bdc016057c1759c6c0b551a07574ca5d1c77db3af9c4434b23ed4ce5fd115ca09422f4d860cbe290ce41d83e3d85d902c4e6220c4ffdbe0b3745571406580e68b793bafac082d6ff636cb17c44e0349a9145a58296ae388487791933f29ea3c8f176f28d5a9ec83f6e14fd284b4a8cf0e22aadb9ef802e39641369471ddb03d6ea2b8d5e9db9f7b6b6640b8d636d927b8774b7f37ba4f034fa13558a576e3b4e242552111e02a63ac6640dff388fd48eea2d1e47a4e9715bb99536af22345d2d8fadee5969c01244eef83bef14e1d9ac5635337835b9fdb5a8d9801997eff27c6f7ee5b3907c839503bce9e4035a09d1b6e4baed86536825e6e247ce4414ce30adf90df7368474546420fc38230d6703789f3e4e802152264d20eebde7d2a5072ad9bdd3f068e0f82cc7544fe684309b62b71a241960353c7059321efba278fe446cfc133f9984a4a99bdabec766a219449881e88bd18fe9689fbbefbc2e35bdf6556162dbed3be8ff6270949144244ad5c17380f5807c2d13266531c26ded7e718d37d033820e02b0bd0ec2ef944d965000987a4056d296e9eea06ce49fbdcd72670bbac9464b92a9de1c0af964a965f765349dfcbfb5d1bac01d38a3322d918346206fd4c1545a714a2a9f51b51c452936277cb36667c54e4f1066759ac7e8c6aa1d5f117a4e25db35e331980ab2be6e5fab5463e1128bdd7d898f5c486fc9e999f5f32c611febed21fea9246a452017e7c0a458408477062da84a6d5b9216a1671238f56c1bff19097488e02e6afd0df9026fede8967755890f3f207014cd5faeb538c046e25f497ab3e00c1ca0e1f7ef37ed7f0584b46706232d75cdbc6fe95aae0dffe59840aeca402154768b5235d1906b272f386fd63c486da5fde4b87dda99d44cd8114a6efb5492b79b60b264a38987cde18d354817d1152afdfd053a0b0b690d17463603ab6ae54d292a5f0317f9a25901cad31bc3120e99ad2d9adce9e28f3cc4ef13e6a7e8688320331fcc31000ffff30ab87dea81387a659c0660a694b536ab2d1e2949cc73c408065f6d8ead88f401af383920c04a9fd348d6d3b070c9571a1bd8ffeb6cb21f30d759f707d1aadc9dccc98123c110ed7197c4ce06312a647a95737f321ccd3c46f7f84bd4df57e2e321c4d899231c68d2aada6bf3bc92ec717d9a244f7d12993a41dba21a8c3b9c387cd9418148f7f4da4d4eeb05d67e71e359e8e5633e463aecc124ff17992e2f520be5618d882804098db62be3a580c4081765272a7c3ee1d699577f880ea34482149193a10a50452099b52f50b6c911528626d122c6987bcd17319dbbe3873a8d00bed5bf8b171382d710b4747ac59f94eaba458c67b352bde8036c507ae81fa8e2023a5bd9aac6609eb49cf4013381fdf5bb758cbd70dcb7fbfc170920d51c094216fcc9a6b10381c578b6694976df4fa45916552bb9af3939304c185e7d791cebc6a90d240ff44cc25a901767b67c30f84e13bbc322d609b6b10ae572e490cc4fe3c28fa88258043fcea26923e0c23108fcfabbdabb172b81092a07482083fefd5b17bdded95af9042b65a80db8acac1469fb303a6d6239fa5526abaa3ecef66a60168dbdaba1dcf3629c01408e9a4b4114fee61668567ef68baf2e5393696a7f7cfe3669acbf06a3f8f634b0cefa26d15e0c5781166cf6129194574e25ce9616fd2cf4504c66382cf08c4bb9e36cd2ddbf8925e0ef9daed51cf244dfa1e4c7f4c0f69dea0db1477655edf634b7b020f350fd9efe914637230358268bdf250f334dd34691d86ec9bd25f712622dfc524f45b267bef3da3dd0d890a01b92889a22b02c2853c566dcd4161a3ea78b326820d26e8175a720375c9e8ba01757a976f9762894e43d8862002767afaab99fcdea793d9ef36c8a6e539d5d5ff227f27169421dcb066a9e5ff264c9aac0af3a9fd7ed36846fee0a3242fb334742ea466965958dcc5127defa0eb86b67d61eb95479d9a2234ae9f299d54f477b593371bc0019be11f27f3b0149528f6bc13004e704a3bc6b48f2e6f0d2560382604cf766f022ef554f75e0aa350d977ac5b019288efc606b3a8b29276d2c182569e93568b83f3d015df4e91b54f0f097c5a3aa0c2d1beb72ccdbe45a9ee5edeca97939c4c296f1f7ff43c1dffc42640eef9d31ab361460a9ef1da5760b5ad1ea99acbb0d1125054d7ec276b15e854d1b75ab376354684c83ebb6835ee030669516b734246a6b3e482c4c17ceebf9929ce3a955af326ef2e615c0f5746e27308884b6b2d1d4e742e44006fe5fd719f696c6c17796ca8f974984a5a3c7804e8d181849cc265670fa6a84643adc9ce3129afdbf2b3eb7894150ef272195bb19adee5c76daf9483c594ab592fe226877a87b5c1b648aa90ad588cd09aacc1a7369c78c453ef2322c519b34a3fbeb2c47fe113b1cf91bd0fb5329b2b1bfdb0f6bb931a994a67388958a1e16dc682c99f92d68b40424868da7254369a473efa7042f443b3f1e29792b42452f7bd28843851a9eaba3901b22ceee830e6c39e47180a9a224be3348a85308b0e64545d27697969bde067f88bc9a4af62d0c715bce40da2ccd6a732c245af636919cfdf9a4ce36ab5cd6e82785580a3ce962733ad234101e6c08b898ed05b584ce848ab29a553992b671190227974ef1d82a34df2877ca12394f6b9a56f6b7eb1eeb8287edaa8d24a35aa1ecf8c4f26001b49b976b288339f2a72614a4d02e358e779931cd12b94897fc34c57275cb5ca74ff151bfb5c7aa934e9cddccc6d5dbf36b59ad30d41e3a76b6e506ef78a0c1894ed63ee65f9f410b71866eb16eb7a44191abce936ad38f4052e9204d2ac8c50809764d7be16486ac35c034a03bb927c2a4b5cd42366ff084302612cd35869b48067cb4de57078aeba31a904e02243e08ff067ee208fb7f524dd6c24508ce434c0f7ca2fe9ebd0085137f27c7f99b98eb1627c65ccee8afc06766a0481fddc30275e78cef92aae01486abaabe875ff970ab427f8d36330fbbadb3eead5dafa492640a860d7c4fd33f618e2a272cd4bdc45eeb836475933fcd60b2cff2937a93a1923a62b8543f93dbd77f0c58370d2eac298387810db566d358565883a7c633f683ebf758fdab3e0f5ade19acb55a1b53a59fd86bb65c9e6c1ae5675d54105a81a722e9ebbdfc367432dd4b87e9d32525b41b6321f8ea9cf036b03de802bfa6db733756d8314930062b5c215ca6657e67f62beeb5245cc0a210b0794f85c486216d60c040abfdec35b332683f2ec0cb3f33f198fccc7842a7d4beeb8b912bd6efc8da15eaab4aa50408c15f57cf16d52fb43c16ac2c077114a9a9fcdeed4d0"}) fstat$auto(r5, &(0x7f0000001200)={0x1, 0x8000000000000001, 0xfffffffffffffb52, 0x3ff, r6, r7, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x6, 0x8000000000000000, 0x5, 0x7f, 0x100000001}) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000380)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r4, r6}}}, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000003000)=ANY=[], 0x11d4}, 0x1, 0x0, 0x0, 0x20040044}, 0x4004844) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 23.285636275s ago: executing program 7 (id=2710): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r3, &(0x7f0000000040)='\x00', 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6f001000", @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf2504000000060011000000000005000f00f000000008001d000b00000005000b001f00000008000d000900000005000b0009000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x41) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) 21.976042779s ago: executing program 7 (id=2714): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/1/smp_affinity_list\x00', 0x70a683, 0x0) close_range$auto(0x0, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto_SETALL(0x7, 0xffff, 0x11, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x5, 0x0) (async) getsockopt$auto(0x6, 0x40000000029, 0x31, 0xfffffffffffffffe, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0x400000, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) (async) r3 = fanotify_init$auto(0x602, 0x1) (async) socket(0x0, 0x1, 0x9) (async) close_range$auto(0x2, 0x8000, 0x0) socket(0x11, 0xf7a6b5aec3ff20f5, 0x300) socket(0x10, 0x3, 0x174) setsockopt$auto(0x3, 0x11b, 0x0, 0xffffffffffffffff, 0x43) (async) fanotify_mark$auto(0x400000000000, 0x405, 0x72b, r3, 0x0) (async) sysfs$auto(0xa, 0x7fffffff, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x8000) (async) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYRES64=r2, @ANYBLOB="0800010048530400080002"], 0x3c}}, 0x84) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x7, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x7) 21.673585889s ago: executing program 7 (id=2717): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x18d, 0x0, 0x4000000000e2, 0x20000000eb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00', 0x40300, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/dev_snmp6/tunl0\x00', 0x40102, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) r3 = gettid() process_vm_writev$auto(r3, &(0x7f00000000c0)={0x0, 0x802}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r4 = pidfd_open$auto(0x1, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(r4, 0x0, 0xffffffffffffffff, 0x0, 0x104) pread64$auto(0xffffffffffffffff, &(0x7f00000003c0)='/proc/scsi/sg/devices\x00\xecI\xefq\xfeX\x98V\xf8y\x90 h@AK\xe2Z\xa5\"\x00\a\x8b.\f\xc8\x93|\xb8b\xa4\xe9|2g\xf8\x8c\x13\xa3\x98\xfa<\x00\x00x\xc8\xc3\xa0\xf7\xbe:9^\"k\xf4\x824\xf0\xddy\xfa\x85lA\'\xd3\xda\xfc\xce\xa8q\xfet@\x8d\xe5\xeb\xca\xaf\xcef\x11\xa7n\x9bc\x10\xda\xc5\x1b]\xb5@P\x8c\x0e\x12\xb0\xfd\xc2e\xce\xd4\x8f\xda\xdf\x198\x85\xeb&\xe9!\r:Pt\x88\xe8\x83\xe831\xe2\xe7H\xa2f\xfc9\xfe\xad<:\xe3*\xc0+\xdbSH\xb8S', 0x1000, 0x100) read$auto(r2, 0x0, 0x35cb) write$auto(0x3, 0x0, 0xfdef) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/usb_serial_simple/bind\x00', 0x8702, 0x0) read$auto(r5, 0x0, 0x4009) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 21.120076758s ago: executing program 7 (id=2718): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000001) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40, 0x80}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x40, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)={0x1198, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1184, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1084, 0x5, 0x0, 0x1, [{0x1080, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "1fb5becd41368ab779a0b29218e67556fc4604877ebfcbd398c11fb77c35a8bf6e74ddc9b04a9138098aecf779ea7e3d541edf3023425cada97c0dc587c6fa47716dd359907f0a162a0b886614c1a7e9546da002cc83e2ed566b0379129f985c460fbbf435e700a4b5580b8a56632571928f8f21f4d11364a0ef75b476ff3956f1c7da142f79c10a4876ffcc63f2d86a0e69b888fc4f296dee02ad8557cdbfb9f0235a183eca304867b40759629cbc72b1502c43b99766ba6d68b0c0ab3c3f028eac0d0571801e5df2a1d739c243a58bf16cfb3859743e905b7ba869f46438f8ae3034bf72d5e80c5484943de2b70c62ef38e5219cc8006f282faca545419374470f9a70397a1f81bc4623e08269594bbebf9b08b81b87ccaebf876dcaf1fa4562e3163b353cb8ff91dba36cfd929ec300388d9224fe45abcc42e157398da0642301b14d590dd9a490eeb4555c64ae48caedffd84b246834f69dfa63f173ce93ba2775a6f4aba2492fe9d62fcae89dab6719935a28c2d614d93e984df4b3a292e0e5d6754a30e52d52b951092a4df3b6abb5c8b74740d551a77c41d02f0ea667e8acb61eac844c20151dac7c08ae95aed291d11cd81365501d3fb0120e11566f94afe38fb008e05536f93364d00a43b8f486bd9aeed50d5a38947982f5f700f06aa7d6783f30abda22a3c9948a274bfae36f6a66c3229520089d65cbddde93a28dd2a72e93bc6c0d9b98f49c9d771f73b1d4dcb6c06829b15422f0c596401ba563a88ded070e2a05a79c8070085502fb3ca34fc767ff2d3b490bb9a6abc3019eefaa4bd9f345f6b94d597166754c5f95140dc5fa9ce51a7cc3257885d074c7cdfd88bb400fd6dbe2d4a830134967cacad9beaff366bf7e3b0a4fa0526473a70c1f44e343a5b9fadf9fc536113772f0f7b0bf16f9b7a7dd8eaa5f7fd9cf259565247f0e58375156005c30e25691d7f8fbd489af83a18f71a38b1996be1ca10bdcbe8d850603d9b81ba828c907753483e9ff23d1d861c36d8045acadaa640a61357fcf9aed13afdf56d13861dd74ce620e592230d3c8699e9adccf2920614ae13c1e3e88a830f36bfcd40ff7c767995044f2ba1661c5f977d9754c58a0d9dd7aad1fbfd94d36dfc61c532c5cb3093ccc0c125ee0e762469f8680500675d4404db12b7062c19c4f0c81c0de489b5eb725f1d7d4cbe7a1f4b51fe8faffb6a709c0a7a4ae7efe75bc66d6c2e705fbee29c0858d9891735c97a28aa15c16fa0444ac2caeeffae42f1fbf0f17adbc9ee40236a844add60741eb64c722811c6f9fd7d614f9620d6f07914b6e7d5eb5dc3d7d6d5f5323575a7c9f864d9d5793d4ca606ab3234930a32e44d8a08d624861a6b94c72f551e7adc8daee91594175bdba18c663ced5991c0846f1c03a96b5d8f858c10dea4886e12ee90186d2130891eb1b354abb1040dd571589b4b7884b31cff7f8b3cdef5a61bc9644883c852106d9be09e5f4d649c669a64fadd3a9b129ab1c956e33dd5ac7224439feb0ccae51aa092c36b4e8d720170d20c22a49e5919d203b312096d625e4316f141f26a9257af159b3c47e025fa40d0150b7dd969d2ec67c727b81653f679f6ebbf8b3ad9c3b0acf232d1b869982879c4a2722cc1e4f0740e9d0feb661e45c5b081ad0546761e6a025529086ca4d38a4b22193e792bbfe6ceb22be5ca954210d0f93f5e38550054b6ae80e64673158815af6cd6adc3b942b4371d33d9662ac80e3ef2eb4acd44ec66cb6d8948d67c3ba8e578f52ac30ab107723e5ce51c4e6d59b20ba7085fd8dbde58cf9a0bd3385e95db6b56a9a68e3160ad36a93e26dc8b915cd4e4767d3dbd3b74052f55e3a74b1edb1068c973a5ca70809c6aeab8ad627955a815315330c51153dcdcb6e77029b0a3712a9231f0c188659e5bb9f89b6a8fd91536a47db7e5d596fa93f0719502e442417ee11bfcb364c6ddadfc8581ce7779d107d6f7aa8739c3254ce9b1e2dbbc1e75566b6d80817e1820e02e8df220e1c9b2d98a15e9db86c5a32bf52b0f1de1be7636cb21e87d777fa1e7828be02578cac204a8e9c7ca6119aa0bdd165bbf7d0f799f0d2ae118bd9037982c1fed3e223b60cc86f21e8c1d9336cb76cb521bc9791abcd99af0bf70a198de0d678cc8bdc0f74fef28407bf09d93054d5e20f5452fad596ae036bec1109e4541d5cb9d287b5498934fad3963a53030dc2264668467716afee211f4dc8082800be3829050b2e26c447b001c076dda2e2b7f17c96612b0f594b6ef5193c5dc3affa5778896e1e40a3953e5557d39799c312b4126a6086dd85393ed3322a48ca0afb9e5dd96ac9461dc7cfc8b02a23b7a1486ea8c9bb204e39298b1017a67a8c1cf1e0582c6b8d95a611c0053eccc9592e1af600e4386680be35c29acfd9033058a4842006fe429188e6a4783a9bf5fd7d1c36c0530f6a42be785419ef2192ffe02470d376f084a4352cdc7e34b9f4891304499b1e0946832b187762d191d7e9cd9cc9112ad768e5132f804f304a9ba0572d0e1c7eac6ff606baf0f0f2e1c836d9a9f7f01fe748dd5ae7b34ed6d51f6e4c8575de14c8552026c4c82516080d919a706fa62958742cc2843ce88c04a19cb66781f2b75d9a81d3f4f2c078e35bacf3a69dc717b61c9c9557d82bdaa636fe80e37f41d63f2388da0b79555f2b3d2b7b30db6d2837aecd455814118a737d3d2845704f4b8a7156dd582477d0b9f0d2622b1f963d243c73646d35dd25547446fa94f47b63637e37b9c61ed88c97b185f9b8d09ffd768cd1c79ab31ff33e82423872f4b2642a1530a248b1dac5a776d5c5d6381e38f01fe8b23921c7b52175619bfe522c945e45ea5a0d35f35fb7c7f772f32657b8b936de258ab52fcf2bc4973c7d8da82d113bd59831b658c62b6913c9162f66a92bcdba85a33796028c8285083f65eec0168039af09f83e27d94fa22f4a595702cbd51d8f48ad8aff4a74c5fd50922b3eba0341c6718f34f3a59181722e330ccfc7d1997357fbb1c95213b082d6b6f119118bb24a98c2c53de48b8b1bdd9c51c88c89acbcd4de108fb32f4beda27743b4a04e5ebc677862da939c7dfc616e765b79b1359d8e5ae4eeae5cd38954a7b6f8693496bfd2624f1a83182440510d7de981a321ccf81b75ab23317598adcb3bff8454110a056ee64a3b088c3ed6d0cd1d2e7033f872106205e95f171e347f02d9583f59113e49386e30ad92537b577e9822f3ecfc1b1374bf2911f61168f30b8f1e3af513e8248409d25c1d3bc09e93a66fa2c4bb3caaf1f4bc28e730ffd78375136e8c32d9bc26b8958c62aa7912dcdf44bbb6668c872df81c6362a679e57860484f003506ab7e1bd7344261c761bc03a7a0167047c1c07e8e46e9af814ab2b93fbdd8536448ee939188ed5a79c6d5d962efe69afde6999a5d52d71090bcb11a1eacb07185f9f5199d44c9bb5c48a09b28cc10e3f84f04677c3052e57d5426d3f5fa852a8f4ed3c8495a4f79261bbf6d1405c9ee97fe3df651819907bf93e4bd0c0a7d2d454e7ba0e84eada5731bf373ae529a6a1f17f959c77931d2ae261b588e844e8c1deae11cf6bbc1433ecabd2715cca3c7471b6f8de376a72647f7bbe11659adb21af39f0b71ae0aaee207f1811cef018fc70717c38b14948f307302bebca0450c6d1670996a92eebe691e0f7395fc20c554a171472df72761fca5a73a242f15c39b7fe6e4c013d655cdd09e319727758beb367aaadf6e70bfef6f8fce3e7c3848279f88ebe8a10f00dfe8f4dd87f9437b8bfa4b7b1517902cc06887ec5a9b9eef923c0e72e9ff82226ae8bf7cef3b3cf91e0ff8408e62421a4d88875b9f6a9382722d42aaf8fea280198a23eda48f6ddc26411825dbfadd25301735d1f9c74f61b15d3b2181dc9d77a4115c7047b9c6520b55dd2fcf343c4f1cb7cf93c10c0e01e282f28cf54575924024819409c322dce701d88f78c94416ebf4c2275bac8c75299636f3a507b7f933c5e13d853725a5ce8f9ec33de647b87a1d0775d62dfa07fead5253cc18526b5ffd90312ff098b81dd01c59f882b0223e6cf768b2ee0d5e0e8d10a2f5c04aa3b97a3dc92e102b30d60f3f0ff5b6253e49d960bc6b8d3a5daf6f3f4c06fcaa315e8315fe71023875f318934414cfd10fd7625e084b132b1c37b1b3e10777c10a3f9c47cca710012a77bf342bd64ba5fb08e24908cbf07143a49c2acf74d0c4097b0a8c2efcb6dbda4433acd0f1e2ad24cbcb4462aa7ce3d12514d4aaaec95457ec06f197c0df614d484af7987458ed2e33552b7a1cf72a4c4b016e7a7399ef9998bd52f860d2ef0751e7e96ebc472af3e666f7778f8eedb12bbac921eac8436b31ab61d72c259a2473678d88743f0f768c1782ee4702646bf349308712ea8cbad36d90b5c770971a1ff70719cdfdeb01927a561fb67d7cb6a2feec1215bac6eeedfb930d3556b5547a7e1af3199de6929a745c5323dbc34624761bb1beff6508463a5b7cac6d1d0265c733cb609b8cdaa56042d29fb70fa58c64b1fed6028d3a2ee7d6f3046cd980bea9f9e1d82fd9beafe7d66cfcbdd49caa5ea4f43faca173cba614e02f407b5c791e460a3ee590b3780ad8cbab34ff0379cc1f947201e28d0cbfa9cc5beef86ecc7090eac13ff614bf73f24b335fcff38a57bce197f67a5816f3d11bb558f0485b4441fcddb6b33c211f19f263f35462349492e26d5fc8437e09539c06fd6b14f243e0a51cc7ed7482677c5a9e7c864b81ae890e6412b6b387e887c9a70e5470c0d17800bb4e39a971a30151c2d5717a9c1183fc5e43902b25130f5fe2d85a64b77a8e64dc59d0b1e3b022efb9c1cbdfebb071c0fbd09619577bb1e18b488091d5c239589805b8df254db031aaa7751bb0b71bffe4b307ebd8359271c2376f2c75a8bea9808725cca6254f89e211cae70dce4cefa123d29238ecb0057d28eeaaabea6e99ab64ebea4c2c62806e6a9e2bccb96a4d07e816ee378e094acee3a9f31b0d1033634310baef6bc7f5e0870a2f1f7f519861834935b1073f9a5c348a46b3be82932d3cf1823a60fb9d0b269b94e58614b5cca1bf2f47ad4e15a93fce9995e06583c41b84930fc26cfe19e9ce9028c7ed8f6f701ed97a74ff3d3affcacf957946fd675240ea08b362a4c1d15aa0722f4cec99aae7d167c49c6123b1ddc36285804044883676921d8b9feed089851e819b782c1fc4025c44874f1454e53e477838e6ff0a472331da69f8e4efb474db064a4b4325c08b4db60377a142c19512b7d1e9fdcfb599662e5448ef3fed112a62bad364467613c73a3385df9766446627c2658c87b56c069440d4e0406e1220c79c2c99116c3224a7a90fee8b6c04f3ff85cbe993c3bb4f7961a801dd893557cd0be736f17e3fa2c65ecc61b907c9d919612ac73a41f91d88733b5830d135a457b3c13fceb0bd294f412bde878315b32c91529b5d55383a1f79f949a8424865b474d784a7a89153b88fc7ec11589b01b9b1aece6585de4d6dbf329c09f35426525addf3e1aa57dddace18fdb219b5e4b32c29a24de709f180b6ff5578141158f467ee9f0cccb580e5b9929c59e47cc8ff27b8401a934769d99f26cc9a9f66ecd0879df8b5becf0cb9a41006396075455306059a7dce312f4e08c54d13bd5da696b32f2c8efbdaad768e372049a3a58bb8c6972d34f859c4ea29ec46aa7752f5d7e8bd3523a10de8b876cb1d61d143d55a1f343252f0927fd5d853b663a71dbb0fff6a7ff07f9cf1e1eb23e07009ffde16778c6f"}]}]}, @NL80211_PMSR_ATTR_PEERS={0xfc, 0x5, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x48, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}]}]}]}]}]}, 0x1198}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) 16.902556646s ago: executing program 39 (id=2683): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x11, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010228bd7000ffdbdf250100000008000400", @ANYRES32=r6, @ANYBLOB="212415f8e301b2e861b2fe3438e6c0abe628e629b756cd359b39626cb44fae9f2715d74d90065d12bf5351941efa27327bd2c37db92a0514e4ad9e83f02c252f7ae016675a5cfc63e760b3ee1df219cf9fbc8a5c73b5c98fe576"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x0, 0x0) ioctl$auto(r3, 0xfffffffe, r7) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r8 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_vm_writev$auto(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4, 0x0) read$auto(r8, 0x0, 0x10000004000049) symlink$auto(&(0x7f00000000c0)='.\x00', &(0x7f0000000040)='./file0\x00') 10.051296861s ago: executing program 1 (id=2747): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1000000000085) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r6 = socket(0x15, 0x5, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000200)={0x24, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) getsockopt$auto(r6, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 7.715534269s ago: executing program 1 (id=2752): mmap$auto(0x10000000000000, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x83fe) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) listen$auto(0x3, 0x81) read$auto(r0, 0x0, 0x5) close_range$auto(0x2, r0, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video34\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={r1, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x6, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x404) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3, 0x1, 0x0, 0x0, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x9, 0x8fd6, 0x948b, 0x3, 0x15f4da0c, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) read$auto_fops_u32_(r4, &(0x7f0000000340)=""/191, 0xbf) read$auto(r2, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0xff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0x23, 0x80805, 0x0) 6.456245718s ago: executing program 1 (id=2755): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x9, 0x3944) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdf3) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(r3, &(0x7f0000000100)={0x4, 0x1a0000000003, 0x7f, 0x77d508f5, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x7, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) socket(0x15, 0x5, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/state\x00', 0x2, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000240)=""/146, 0x92) getsockopt$auto(r4, 0x7, 0x100271f, 0xfffffffffffffffc, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) 5.914599666s ago: executing program 40 (id=2718): sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000001) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40, 0x80}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x40, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)={0x1198, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1184, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1084, 0x5, 0x0, 0x1, [{0x1080, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}]}]}, @NL80211_PMSR_ATTR_PEERS={0xfc, 0x5, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x48, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}]}]}]}]}]}, 0x1198}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) 5.904064966s ago: executing program 8 (id=2757): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x14480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x7fff) r3 = prctl$auto(0x1000000003b, 0x5, 0x4, 0x5, 0x3) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r3, 0x300000000000) lseek$auto(r2, 0x7ff, 0x1) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x3, 0x2, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) ioctl$auto(r0, 0x5, r2) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xfffffffffffffffc, 0x5, 0x5, 0xebd, r4, 0x9) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r6 = socket(0x11, 0x2, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x1000, 0x400003, 0x4) 4.133863713s ago: executing program 9 (id=2760): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000180)=@query={@target_fd=r0, 0x6, 0x1, 0x6, 0x4c7, @prog_cnt=0x7, 0x0, 0x72, 0x4, 0x1, 0x5}, 0x2) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x53}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x4d}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x28, 0x19, 0x0, 0x1, [@generic="051616495759b1ae0d3c8500a71503422c982f4cc79ebf169ac67fbb600b291b0b86ead2"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x40004) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="b22f434586", 0x5) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 4.009969232s ago: executing program 1 (id=2761): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) io_uring_setup$auto(0x48, 0x0) io_uring_register$auto(0x100000001, 0x0, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x7b3e, 0x3e, 0xfffffffffffffffe, 0x0) 3.986885834s ago: executing program 8 (id=2762): ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) writev$auto(0xca, 0x0, 0x7e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c1800, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000009c0)='*\'\x00', 0xe388) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x2) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x2003f0, 0x15) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/blkio.bfq.dequeue\x00', 0x8ad00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) bpf$auto(0x5, &(0x7f0000000300)=@link_detach={r0}, 0x47) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3.889207457s ago: executing program 9 (id=2763): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x0, 0x5, 0x0, 0xb, 0x8007c) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) msgrcv$auto(0x0, 0x0, 0x3, 0x1, 0xf1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd0\x00', 0xdd01, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x8) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.866526532s ago: executing program 1 (id=2764): r0 = socket(0x11, 0x3, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x40, 0x0) getsockopt$auto_SO_PEERNAME(r0, 0x3, 0x1c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', &(0x7f0000000040)=0x8) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r1, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @reserved="e5d3ae87fbcd20f354bc462d9518a90adaffe1ee53ac907ef49a78f7f58694e39f46c35bd0c8ad2a47a2aff7fda026a07e8dd68f0a57203bb6c2cf1b764eaba7", @control={{}, 0x40000000004, {}, {}, 0x6}}) 2.671781694s ago: executing program 1 (id=2765): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rxrpc/stats\x00', 0x20602, 0x0) pread64$auto(r0, 0x0, 0x7, 0xffff) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) semop$auto(0xfffffffffffffffb, 0xfffffffffffffffe, 0x8) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r1, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) socket(0xa, 0x2, 0x0) 2.465337403s ago: executing program 8 (id=2766): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) madvise$auto(0x1, 0x5, 0x7) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) socket(0x2b, 0x1, 0xd) mmap$auto(0x0, 0x1, 0xa12a, 0xeb1, 0x400, 0x8000) capset$auto(0x0, 0x0) getsockopt$auto(r0, 0x40000000029, 0x2, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub5/xrun_injection\x00', 0x40000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/242, 0xf2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r2, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0x1b, 0xffffffffffffffff, 0x8000000000008000) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) write$auto(r3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.241983335s ago: executing program 8 (id=2767): mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = waitid$auto_P_ALL(0x0, 0x82b3, &(0x7f0000000000)={@siginfo_0_0={0x8000, 0x6, 0x7, @_sigpoll}}, 0x2, &(0x7f0000000080)={{0x6, 0x7}, {0x2, 0x5}, 0x0, 0x5, 0x400, 0x8a3, 0x7fffffff, 0xd, 0x10, 0xc000, 0xfffffffffffffff8, 0x9, 0xe, 0x0, 0xe3, 0x7ff}) (async) prctl$auto_PR_GET_UNALIGN(0x5, 0x7, 0x9, 0x5, 0x100000000) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/77, 0x4d) (async) prctl$auto_PR_GET_UNALIGN(0x5, 0xf, 0x0, 0x0, 0x7) (async, rerun: 64) prctl$auto_PR_GET_UNALIGN(0x5, 0x2, 0x8000000000000001, 0x9, 0xd) (async, rerun: 64) prctl$auto_PR_GET_UNALIGN(0x5, 0x5, 0x3, 0x1, 0x10000) (async) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x2, 0x9, 0x0) (async) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x7fff, 0x40, 0x77b, 0x43f) (async, rerun: 64) prctl$auto_PR_GET_UNALIGN(0x5, 0x2, 0x5, 0x2d, 0x5) (rerun: 64) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x0, 0x9, 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x2f, 0x6, 0x0, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r2) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) read$auto(r4, 0x0, 0xb5) (async, rerun: 32) r5 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim0/psample/latency_max\x00', 0x68001, 0x0) (rerun: 32) write$auto(r5, 0x0, 0x10000001ff) (async, rerun: 64) sendmsg$auto_TIPC_NL_PUBL_GET(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x20, r3, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='@+\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) (async, rerun: 64) prctl$auto(0x7ff800, 0x1, r0, 0x5, 0x7) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) 1.998732642s ago: executing program 9 (id=2768): r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x10120009, 0x1, 0xeb1, 0x401, 0x1) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)="bfee6966f149e49ef46729d6456f83bb446932adead6566966f7032e04f2f302329413a28612f84931cf31fe9439f8e2c108de0a846fed49dea6c994b57fad1956afdf57575e866814d22e699a733514818286608edcd80a9b4d8cd2b15e05d79b29f7af8f7d7db5b02ae1508dc6eca8b7bd00c787eb26eaab9c69f89074a07e02b89dea6dc45c8bdc95101c8f551731c1fb5092133b17391b084f59", 0x80000000) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, r0, &(0x7f0000000180)={0x3, 0x7fff}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd14\x00', 0x400001, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(r2, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) r4 = socket(0x15, 0x5, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/state\x00', 0x2, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000240)=""/155, 0x9b) getsockopt$auto(r4, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.666850614s ago: executing program 9 (id=2769): prctl$auto_PR_SET_MM_ARG_END(0x1ff, 0x9, 0x0, 0x7, 0x7fffffff) (async) r0 = prctl$auto_PR_SET_MM_ARG_END(0x1ff, 0x9, 0x0, 0x7, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40802}, 0x4000040) (async) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40802}, 0x4000040) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy2/rts_threshold\x00', 0x121000, 0x0) (async) r2 = openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy2/rts_threshold\x00', 0x121000, 0x0) read$auto_rts_threshold_ops_(r2, &(0x7f0000000180)=""/140, 0x8c) (async) read$auto_rts_threshold_ops_(r2, &(0x7f0000000180)=""/140, 0x8c) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000240)={0x9, 0x3ff, 0x8, 0x92b, "66bff2ddb4a286cbc05fd07e65e8eb49f63ddad1feaf06bf34d001c4e9c3cda07d969a1c086bf4f4d8e86c8de82ed7494c61e0a1289252a051c0af7252e5c90f", "bcb7a036e8bfc1c4b2143f7179768dc25de8eb339e44578da272147ca5205e7c7deb018217a2b395273d5e7849dd45e4e2a8b8158c265287267a87a349ca54fa64e90463207ada3c265df91d5c80ff47", "ef123d85e0855314a4e54751383262d78b232faeece2f2814b689d230bcdd3bd", 0x1ff, 0x9, 0x0, 0x0, '\x00', "fbd8b8437fbfd687057c841da2d7266b37908d4b1f39bc598bb91f08d5bfe4608699b2db682e8072fe3a6db616b06ab0b8c8bc413a0ff05c4ecf5cb9617c10ad"}) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) prctl$auto_PR_SET_UNALIGN(0x6, 0x1, 0x1, 0xb90f, 0x9) prctl$auto_PR_SET_UNALIGN(0x6, 0x800000, 0x0, 0x1, 0xd8) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SET_UNALIGN(0x6, 0xf7b9, 0xa4d, 0x7, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{@raw=0x8, 0x7, 0x400, 0x1, "2bc922f6401bed0ed2bdd9488ac7a3fe907e960e12b6c20938d7b8caf077153a6c9985f1fd7e0512333d6ae4", @raw=0x1000}, 0xfff, 0x0, 0x9, @raw=0x8001, @integer64={0x8, 0x0, 0x4}, "2447943fb2d66d74ff3087456344ff4f13ae5ddba92bbad778da99f736dfb78b15f3d00b6cb1a4ff4aac717d9be01ac5621985fd6a31469c67edd1b1775508fd"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{@raw=0x8, 0x7, 0x400, 0x1, "2bc922f6401bed0ed2bdd9488ac7a3fe907e960e12b6c20938d7b8caf077153a6c9985f1fd7e0512333d6ae4", @raw=0x1000}, 0xfff, 0x0, 0x9, @raw=0x8001, @integer64={0x8, 0x0, 0x4}, "2447943fb2d66d74ff3087456344ff4f13ae5ddba92bbad778da99f736dfb78b15f3d00b6cb1a4ff4aac717d9be01ac5621985fd6a31469c67edd1b1775508fd"}) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MNTR_FLAGS={0xd9, 0x17, "98ddfd54c7714717601e1eca399d3df214123e21b0b5f3bc05285455c7d177ac5297ca02ab9ff1c733b6e84aaf1823730d3339b2e7fa95843e55e5a0ac4581f700f14542aa97b1e83e6fba7d6a74b7ef8d40f39ccd317889845a9ec76756d0d668d648aa502f57b2d5fd26a038ca498a207827b0e28b4261b10f8698d61f60aa3f087756ab5f766c8e9c71112e26925ff91c7709507b65ac616a98198a28e97b0ef8bb42a4143efa676accef42c4ca43c95363b794a52ce15d1cae03fdc9a523c2a90c605c6e2f777f78bc32dbd3bb21974e1f1139"}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc880}, 0x4048801) (async) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MNTR_FLAGS={0xd9, 0x17, "98ddfd54c7714717601e1eca399d3df214123e21b0b5f3bc05285455c7d177ac5297ca02ab9ff1c733b6e84aaf1823730d3339b2e7fa95843e55e5a0ac4581f700f14542aa97b1e83e6fba7d6a74b7ef8d40f39ccd317889845a9ec76756d0d668d648aa502f57b2d5fd26a038ca498a207827b0e28b4261b10f8698d61f60aa3f087756ab5f766c8e9c71112e26925ff91c7709507b65ac616a98198a28e97b0ef8bb42a4143efa676accef42c4ca43c95363b794a52ce15d1cae03fdc9a523c2a90c605c6e2f777f78bc32dbd3bb21974e1f1139"}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc880}, 0x4048801) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0x62, 0x5b, "7b4b023430ecc85be9c7c8d43482572e0ca651f4251c6458f89d0da0d484e90ea730ce3e6df4babad5f3fbc83a7e8c36c7d2ffea1ad41d75e460ed98905d42d09759eb3b5356b0df432a02b77f38f25e3d900fec18ed0af4a914930005bf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_MATCH={0x62, 0x5b, "7b4b023430ecc85be9c7c8d43482572e0ca651f4251c6458f89d0da0d484e90ea730ce3e6df4babad5f3fbc83a7e8c36c7d2ffea1ad41d75e460ed98905d42d09759eb3b5356b0df432a02b77f38f25e3d900fec18ed0af4a914930005bf"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$auto_PR_SET_UNALIGN(0x6, 0x9, 0x5, 0xfffffffffffffffb, 0x2) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0xa410080}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x264, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_FLAGS2={0xeb, 0x43, "415746cb4670c356f7239d950b5537e4ec891de8692bb7ff32c8d4dc9bbf2cfbf0224b0b0367fcd2fe18fcd77ebdba2f7725d16a73e1d5aedaca8803cea9442f4e6913a5e2613a2b8091768bffea78a7ab8bd9c68e45fd7ddf331d09e50ebab2d77500d7b10ef8c4545e1390a91e8156ef7c9a8182e3914f04c3c6d5639c22181c22c73ab8a79f454febe5c1fd7438b459935a06ec1458599b3a2c4f38d008bf5fcec06068a882ca64c8634ab95085f8724782cef021a2644762515b743c1d2acb63487dac7259ddda8b60ec0db24a11bb2178b3f7b7ef0851a9bfa18d48e20512a0798806a54c"}, @NL80211_ATTR_SAR_SPEC={0x164, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x128, 0x2, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe90}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2d}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf32}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400040}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xab}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7d4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xea39}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x15f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}]}, @NL80211_SAR_ATTR_SPECS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x7}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000}, 0x1000c054) prctl$auto_PR_SET_UNALIGN(0x6, 0xba, 0x1, 0x5, 0x6) prctl$auto_PR_SET_UNALIGN(0x6, 0x2, 0x5, 0x3, 0xfffffffffffffffe) prctl$auto_PR_SET_UNALIGN(0x6, 0x100000001, 0x1, 0x2, 0x4) sendmmsg$auto(r2, &(0x7f0000000d00)={{0xfffffffffffffffd, 0x6, &(0x7f0000000bc0)={&(0x7f0000000b80)="f36c71d683b8f7ccf70626f3369bf53d5517f246e0d5fb", 0xc}, 0x5, &(0x7f0000000c00)="705be9860fcb6e47462d8efb04536a50e6291ed53e2d00db67891e39655555b3f99bc3d2c6d9a2d59f7ffef840ab70c99f88d158a428c324ed26f58a48bd28871325600c347b6fa3650b3634a2cd67671f44dafcb7441390c3448c552072503d85faa50313f1147ac129e1d8703167475813e93f9b322654c5d77bb84255c31c6db2c2b78bfe9148385ff9ed955ef12b5abb205f3c4bcb7da42d369763d6e8e5ecbfa65419bd9a51e460a0badb5f2694096980650f570f3f8013a4b9fd600292efeb20b6dfc41cc9c889cae0c50e47dcb285f98e89405bde1d419a7147a6bf4ad12ae9fe91b41d4c2cf59ee643a38e3faf16", 0x7}, 0x800}, 0x10, 0x7) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000d40)=@link_detach={r0}, 0x0) (async) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000d40)=@link_detach={r0}, 0x0) write$auto(r3, &(0x7f0000000e00)='nl80211\x00', 0x800) r6 = clone3$auto(&(0x7f0000000e40)={0x6, 0xf5, 0x1, 0x6, 0x1, 0x6, 0x40, 0x2, 0x8, 0x7}, 0x5) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f0000000ec0)={"392ebd8cc006fbd415b61cc62bdd1d78e151e8356d7ea45797cba4b860924ff6", 0x5, 0x1, 0x3, 0x6, 0x0, r6}) mmap$auto(0x3, 0x7fff, 0x0, 0xdf53, r5, 0x9) lsm_list_modules$auto(&(0x7f0000000f40), &(0x7f0000000f80)=0x1ff, 0xffff9ee4) prctl$auto_PR_SET_UNALIGN(0x6, 0xbb, 0x6, 0x8000, 0x2) set_mempolicy$auto(0x0, &(0x7f0000000fc0)=0x8, 0x4) (async) set_mempolicy$auto(0x0, &(0x7f0000000fc0)=0x8, 0x4) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x1c}}, 0x20000014) prctl$auto_PR_SET_UNALIGN(0x6, 0x8, 0xe3e8, 0x8, 0x1) (async) prctl$auto_PR_SET_UNALIGN(0x6, 0x8, 0xe3e8, 0x8, 0x1) 1.440065264s ago: executing program 9 (id=2770): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000040)=""/4099, 0xfd98) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x700000000000000) open(0x0, 0x161342, 0x100) open(0x0, 0xeee00, 0x31) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffc318, 0x948b, 0x3, 0x15f4da06, 0x3, 0x8, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0x1, 0x1, 0x6) socket(0xa, 0x800, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/kvm/pf_guest\x00', 0x800, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x101, 0x0) 1.125137404s ago: executing program 8 (id=2771): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/bus/usb/004/001\x00', 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) pread64$auto(r1, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x1, 0x5) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create$auto(0x4) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) r5 = wait4$auto(0xffffffffffffffff, &(0x7f00000000c0), 0x508, &(0x7f0000000100)={{0x9, 0x4}, {0xf0c, 0x3}, 0x3, 0x1, 0x21, 0x2, 0xc, 0xb69e, 0x9, 0x700000000000000, 0x4, 0x0, 0x0, 0x80, 0x9, 0x100000000}) r6 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000280)={@siginfo_0_0={0x5, 0x401, 0x2, @_sigfault={&(0x7f00000001c0)="1386e34b8a1b19c230629d8c4116da96ce0ae392dfeff34873099c8655b0bf46f691f7054ce328ef7cf757851cf7747943422469d849dad8bd019992d551fab0b2fe4388aadd0cc2763f02509870e9f1c4a11b166d8ae02c3f03546fc8da74cc663436f108c7deb4d3d8c4f5c09a8bac92578c4488989b3505a71066c12ad51eed", @_perf={0xa00, 0x5, 0xe7f2}}}}, 0x8001, &(0x7f0000000300)={{0xc25c, 0xfffffffffffff3bf}, {0xfffffffffffffe0e, 0x2}, 0x77a6584e, 0x6, 0x7, 0x6, 0x9, 0x6, 0x100, 0x7, 0x2, 0x4, 0x8001, 0x9, 0x9, 0x6}) shmctl$auto_IPC_SET(0x9, 0x1, &(0x7f0000000580)={{0x4, 0xee01, 0xee00, 0x1, 0x200, 0x3, 0x2}, 0x81, 0x120000000, 0x101, 0x0, @inferred=0xffffffffffffffff, @inferred, 0x100, 0x0, &(0x7f00000003c0)="bf7d7b7fe62018c86a9df877a45ec4c0f6d4e9bfe750ad18e2f74194e34345cfe6d28a27c57334005b8baa7bf684c913ac6baccdc6c0391c94db5db35e88a6d97f05baa429a9f97521db9418244f3b23473eec006ac68c973e409e3728defce6446fdf9ca9586956b094a435b8b3332da3a8adca067da8b9f2ef051303cd512eae498cfbbf4cd1d8827f32d600b6128d811357c6e1db7cfebef00baf5145", &(0x7f0000000480)="1149524c05d52b173d845f6808a46e4c86026daec39de8517e3601fff97c375164e7cad02fc2ee9fa9881a514d29976816cf468f117224357b6c634639af6ad800a347afa8f4039c5b3a9c7354e405709bb7d75950ce807b88a1a226e51391c90dcd47597373df4e2d839082eb4d74cb4b84ecc9f69bdb66476d4c4b3361219adb78fc9ce1d0d67c66468dd8c9744bcf43e4afc2486c65293ce578eb7ca023a505b854a602eca086ae36500b57b905ffeb25a200e43512fddbc32ef72b3247cb845d4830eb0d69818839b2f88b3323b25afeaa73a469b0a19263b0b432652c67e867a88f4f5039bf21e5b2030d49f5caa4cada9a"}) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000019c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001980)={&(0x7f0000000600)={0x1378, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x1}, @NL802154_ATTR_SEC_DEVKEY={0x1342, 0x2f, 0x0, 0x1, [@nested={0xae, 0xf8, 0x0, 0x1, [@typed={0xc, 0x19, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xfb}, @nested={0x4, 0x91}, @generic="df5627074b3bf592a3f97712ab5000e8e99ccd4bdfebf295994d53afb033879f6fd62769f08ea5cd6a39a42b32833e1802701d104e262acbf9dbd4f2edbc9d473b4d8824f52b46096f1a8d7df8880a68565ebeebfe1958a9c2f2e014383897055123e0ec4711a006f4555cf22fd11a78791bf96214afbe3dc8bfd6b7628b312272875426066524e170aca135a53da1bd0395bafc637e"]}, @nested={0x6e, 0xb7, 0x0, 0x1, [@generic="6c7a0a25f59d371ae0e1da028e865d098686668fc98c58c4b96f90ada856f5ba90f99e079f6d4b0c12242c61847a7423e080ae1fcab15db61f27190463de50d559cecb7a2394854485a02771e4c3997dd138b7fa9f59f47c5ed2cb194593bb2508e2ca9af4af", @nested={0x4, 0x12b}]}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="5ae00c2b843f1cc1bdbea19373ebd6eb7c95ff7db5ec536058709b005fc4b37843b4cca51d2e79897e584fa3ffd994c8f663599dde6e049e704f8a7e00335ed48ea3855b1476fbb18d6c758317231c2a950aed70de11625adebf0dce60eabd886fc0b37363c9f957631001bfe366549f4bda42bbe8ce29e87c1e1a58f3cb37be24e4eedf71acbd0d64b5f846ec726d1b4911c3ed1463e9435c634583f6cd0761a2fbcdbc68b4f9035ecb76b6c7c55a083a017282005b6815128d3fa42e9326a40c55d2f1deadaa1b6b83fdf3c0fd47b2c68201c42ec55f080241bc54bfff76b8415546730039f99047cf9b22110adbc9b0ffc6aa0b07499d11d7f55c99a9ffa39883798ec3a3138e9fb4fb2321e3f4b940d7ed2e1db8692ec07dde1eafcd1d88a8dd35c3d5a7472db71fddbd23c05b92cf6abc18e112c11d82f56bfaf3ffc17d65c4ae3989d1049eebc4ff3bb188d3cdaab50d75eaba4465eb3198a806563c1f9ab31b3b9709dc5c36b3b1fb8afd31f9d6f7e4a99fa9d26972f18ef948eecfaafd09c640d44177ecda5d3253908bd089e204d035f111b2b263c0a7281807eae6374273d89cd3a1b202321aa80e27ef79e9f722d4228d966ab0ff011bf469825d9ef5fdd5000c90df3ace30ada3559f45b97ebc3f6ce9d3a0b9a29eded59b00d639248b884b955528945b0675c450ac1f0e360fd76c9e4199fd93dcae473e6b5f432423a62bba27134e6f8e1584b3ad6282e858d35d8f1e372325f981c44855d87dda55be66d5b20888b4f93df07be6621b64033ea69f423bdd9875653ece4dd697d9ace78dcb9c20ff9ca56266e8ae93cded042a2fde0ef81494ab7ccbfcd62daeb7e191b5067c01248cc40b93dd41b8b59930d128ea6935ccd2b411bf3e7674ada39d01d7193250c1c1948dd3dcb7c60d56a7a5afd9dfe83b65db3286ef5f5f2d6760e5acecc23f1ed844bf4c34317ff124b351e9fe2e80710f017b92cbb05e399d6a859d1be5f97ab2bfe5824809cd38e0b1e5a329f50cfd55272479db13c329a85d2dec2af63755b1e88a5042b74ae7fd11a0ec35d8b18bdadefc43cbb24f1bdbf2788b66a2a0647449a473a147a660b5a6230293cf39a18d14bca8aa57bab755da378108aa89bb2019b97f0cfb1c5b7e9f8384c6ddb5494409b93c673328b862d703789f308a0b79ba876f1997fdd65e84b8efd668aef7f5f93e0b658c4716477cc8ce436caeac10b8cc60c0b617059be5ff4a1e353c7e03aa74d9b065ea95eb5d05786f182155aa90d7d21bd145df69bc7e139936b5462cbc888d955a1d8abc903076b377cbac3aa18cbb5abd0a143add4aa0f052ae71b6804b158854cb330d604b5bc65b6433230b8b79c4c587561e460a2f708557ea09ab07d452f306d7ff2085261b16d06a30a8b7af4a64f5c7fadd4e3e9edc59f8fdda01923b29ee8d5ad5ad738de7dbe4a683ed2432449c463daf150622d153a066903d0df5ffe59c5d8aa63092730a08d23bb71247f011387394472054a8632b59ffee5580e23440e707ea19d9ef721050bacd0ae986415fc73944a2b9382d1de82702c5db78db21f904b07216eab61e860a7df2b8c80f306f1bd957ec7a90d3a5917d15b69933f15a5a4cd4fc27bdf178409befbf13814e982903a5bbabf5b9ca0fcea620f1691f8c51494ab0b93551eb8f23713c28280a8fe7bf0e84ab8c6057b76c8991876bc2f6cb93511cf1773b36c213285640096564de8835c4fc2737e735cac9ef39732af4201e2362c146197f967fe48b18015d7ea4d05e0603513545632fa60fa9915d27df8a3b01defb323cbc2735c3bb1a1241acbfaca10e58eae52216b9d4917e39b1c34d31eb1b4b055f4b128617c338c54d432ed0259f715f2ff6b492260a19ba96a18071178cfe1514e44f310ccac9325187f41ff18a7b4def4cfd98bc39a11d5240c5ab45599da2678c9aa40d82d990c81d074442508b443242b22849737f640aa69de1017535b0ec5f118a10d2f4b290dede13b2b27102fb317d0323e8cbe3269ca1a2d545b66f74527ee73e1dc8c7a3454020b25fb12b4a2a9a88fd833f708657b5037b32589c1924182d40a88d07a7f515b286586f7ae6ab9bc48d40d6f4c26a57f74ee551d1c7bf08e59a3419dce77234b75a170773d50723143ea8a3beedaf1a83d6d1b08cd6d21e89631abecb3b717f7a8eb050b1b287d2b0898fee27728c07860706417cf5719cda7e5ce89d7fbcf3bdb6420654b1661f647a1d9a37e6d36a49e6f509a108e7a6fef71bd21397e5df1f4d7184fbf015768b5afa582408fffb8207cc6e22d0dc702fdd5880dfcd6746e77c98f90332a49a90a3f21e371b6e4d99b74c585d7fea54fa185bacf3f952c7f28a65a18fafdbb4916d4513dbba7bf7b80225c2c1bcc83b66896547931d6a3e5bdb03629f9677185a60193fc2cb53b7570a697e3735c81c53500cb3ae8b60aea27e0b06fd2e9639cec6739ae861f4ca12d9434ae7bb819a5bd70e8f6f1ec50f12a3449f1be1956628d70354a52e30bde5708f69f302f878603d66b332a5adbd9f2f62310844435cb011cfdcb497cec39c6c05eb8773c6b028f093f45206fac2cb822f3d29b2c03a8b13f187dcbd9ee0567efc5b85eb314aab7d7b7b19dcb632704d382b4e05388eb6a88879faf32221e1fe48a3c0b8174b3a46750d99d0c7ac9c9060b75344e69545c15c9132a31b983103c89e584e452bb153dcb86b7b493f723928ac8854347c7b05321542947ac3df7e887ab674ff0cc15b37776563ae9be9427e72b20eba61f8a02b8299d3e21683b478a6c92c311b25dc3aaa07dfd397faa795adb07ae8f066c6d071be552942b017b3bcf35d3f2149a1ba252bc740077cc44b4545193885be43a3f2b50cc068e5575ab3146d607da4459fcbf7ea6f506f4422bab41e9d8176e37cd739895bb039d287fe4a2c5c709c599ed684aaad8049f5db80d1320e8a3e69c787b6bc5df210b1d30004e9baa6d5c02cce6e4ff1553a6d8670318d0f458953203a69c8f73a0842fec5022123c1f2d06654b46c739caf914ffa55488ac7d5c9349d7f26d74eb4a2d2dcadc4e0c014a1a9f911ee96d94e74091d50bf6eaaa5cfee149f3fe593266742c9b56ffb337397d845ad287499105002846accea8a66bbb45b7f645e30a2b6b1a0428f7eea3f50200b50001aca931cae7cd86ec6c1bf18fa71c5762c6d4f4700f32d9acfe308c273c46a101c1bcc16b9436cce11d08e8fb496e0a7bef80aa2870c020e559f0e238b360f204a1b44e9baf94a8b86badebe8562974ba2c75bd9c259f07c3bf1d282972b639a38fd2e45d8852de1652b370ff387387874bf5a8d3fc33c53cd69614df937a67ccc70965451efe29950e27dd914d2fc9e0cd6c6cad77a732a056f82f00652e01686966a6b73060a457dd4d3c1ad1beb832f1008b57cd66e1cf8b3b868bd87a37ae8a3d0e3e0fc8f6dff6cd4052885b6b0cfec584bd08e08810a1927214b07f0567156e15f9391cfedfeb1dbfc10d239cf49559859f3c33c821824d1dcc94e2c4711fac0026d05e52924c3ab9be252ae6b984bcd5bbb07cb1e9978149bd066ec0fb69ea677f3884861174ae83ad7b558e4d3fb9a559070b76bdbd22cc50619f98e42a83b88143a1abc704d3f3aa62409f236ced0bc9084257ba6ab9618688d416ae39d6ef08773d3d96ca1b8a2f356808cdce915e201cbe36c02aecdf1351f4e7880f184a5d385dd75d88bad043fae4366e5b2c8f008665d4217f5281da40cbd6cef7c1be8858b9811ab7c53ffc740dc3cc7bf68f26abe3267b6192d719831c599037805e4364d087ca6361d80f07444016df955a4e4e4e64914d52d01d396d5a8050a5adebc011b18c7936c485cb4d0e7917a98df2495b2f2aff0824251c53ead6cf9e6e754490cc649eeee067948740495c59d93df1bcac6e939655494f4414444e7c0d6790cc639c83f4803af70a6d2a3dc06e841a9f843958be1c08085decd7ee44c9dd9fb3da2f6428ee021867e57bee55eed2956c999a6af9e6046f62523bccaeb7e3968f2ec3c65c3918a2e036dd732e46fe4b40ea2bc75632b675e669da8a8ffcf266d9af53d913e818715c60d718b930cb1d5933214e7ae383b4fce8e81299c82e952f1e3fcf5b3ae7f3b575f334a55de427608d3027efeea2a2ada1539f6044078979f9792ed2920f9d0aa3a595d0645a872a1d6e6088316b797f11172034ea793c67e362c92af42d3d035e17fccd431582f2c21874a83739a3ccb567efbe60ce52eda30c682b12f5e3d486dbd75ae62bec26504790256ab8d1cc35da866a87d8f6e88ca32be3e8dda4ba410319c329065828dd052f061930aa0c61728853b997a1096f6f47188f193ba542722163e3f61157d55c7c71e572e4dce8f517fe7ccf20e7fee5d524a80b2f462be6f8a26a68504878c64510194f8773db90c7da9d8f82c1626eca5b03be1c0423a9942fd903fddd975c86956459b80a408b5ad14a747cc9203805422555d4541055c51e62c060fcd988e930e1c3bc1a63afca23bdc52164f7475bb20f240abb7b7fe4fd9060c5b04a14660df5e4047492a2bdd02d9ca85e77961940dc3c4fbfdd6c43af4560df108952b55b0544e903d245d9bb55abdf141d79edb494ab477789315e6ee50ca17959149f4f44a6024d64ce6c259e5b0c73f0b3b97824720d21e3156fd0a8c6275b89d9f60bf1224aff4aa1a8b7bee92819a5464bf38bd48da885792c164602f2d0346e777b4d9b7d168c12009fe92896ddbc643b5cd97a0a3516354ef13c6e7bcd46927c2a6df74f339a6a52f609fb34c3d4fccad54b0049e49e0961266ea81f170acb2ce6631c0bf8dc01fe5dfd78b7c7fd0b7564a78cb19d863ed149a3dfe106638b31eb4684b8269fed048d01f95f9fb0afe5225984a3e2e7d6de111209160b90cead9e68850a7485f5ffe1f0074a650413384e167740654bbb5bfeab4ae5eb8fc6010cc481293897eff60bcdea9ffd4048bdf033090a6f0706fb279f7d0c5c443559dc574758e8db28a1a2766e869af287f7214ed1a0b5e2fa9ec070257519d2514bfad3ade11e39035a4a59e53e0ace42f4ea293e359917376efbdd41ebea3229fe733d3fa1431065378cd4a8e095dcac899a61217ff3f2536cf6bbc55ee7255c99a615bb36400f9cafd6ca235708607286650812b19036a43d8c0c621401d903f2d415f51cab67266d1ace1fb17e7651d3abff9eb15e7b0d75e2440ec08d24697d5ae79c699a92ae2d5e08d4c7efec48afe9e675cad40d888f6ef56231c85605bffe71d1087f83afb16b90a4da887a5b29a15c74893e1e1a25d8e5fdd4d1c18aa8ac97de7180f0a68c9673181416138518265298d5499e6d0e68dc2ed7697639899fb3ef136e1ed13aa8fcc0e203a3aff768f061f2c458b02642134c2ec0bf5885ed1553464358a0dacc5d2873fcbfeba21827235dce8a8ca29fbb38f5b76d73adfa3f123217dee0e2c497bc55f9641fde832e74a72a846ed41c99762249ba7bebce30737ed4b25e890b41c8394faadec4be2812dd29556f7d48acf18ed0d2668e77874311fc31ef6bfc65347bc95825077ea893ad9224934ca31db0efe5ecfdcd11477cb54d607b9d6f1adaec8cf15fc656c4f1c17fdfe19f59cc84921e8258731dd135a9654e608e995a2a3616c510db0afebbc5a688f4d61013afbbd54397418ccd587d55401c6813419dc5d1dd36ff4029597c07bfd1f03076642e879155605ebb1acf652692ea00523bbe98095b6bd31457d1f", @generic="25ca212cc72c2413e5fee0ad688ca589216495da122d3e796ac5455b891feb4af8617430403c2b0f86699405be5ae7098607a4b2646001b63d0f33981391eda188241a418aa3ebdec35da876d725326115a7b101114d1a1ad3aafd12961df512f0920c6d20ba0e6d9a85c1931162cafb9d73ddafc4d23c750b7a5ccdc2933a0db493e511eade3469834be49e6be075c10215c0e56cc8266882e42b760a790dd72493469c201d98b05dc120b31c11c7fc8698d138d029108cd7b2092c5e0198bec9afb7e3c0f1ac7e4f0f00b673cc", @typed={0x8, 0xd4, 0x0, 0x0, @str='3&,\x00'}, @nested={0xc, 0xb3, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @pid=r5}]}, @nested={0x12b, 0xfb, 0x0, 0x1, [@nested={0x4, 0x82}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x6a}, @typed={0x8, 0x48, 0x0, 0x0, @fd=r2}, @generic="36b843522f99af3794a43ba56953720155126ea61064057591836c9d72611aa6bc298aaceb6a2de153aeadc56f4e76b5bb4e7e03ae52bbbdc3d61a8127b321e886cf4d6495963591078a74fedd3720a6f1f43b8aec4000aa9edcf20ce9fa3525df4c92a174ada45b7d5811a69c453f0b680466a15363130df79061150a44eaa2a3f5f0fb7259530b45b674b93a9307c057373bb31b10fcac7834bbc4ffe28549bc1668f2c3fdf9462778751b910dc3707a", @generic="f97a1c356646600135a8c3062e906505cb3efb1ba8a214c429eb90eefd09e81d4ce70385d31513a3aa8f6cb11e223159fdefb54e3092c004c52cb40fb3b4d0847fbdabeca88af67769f71a9cd1a510962cc8d9a89008", @typed={0x8, 0x139, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0x113, 0x0, 0x0, @uid=r7}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x1378}}, 0x0) ioctl$auto(0x3, 0x80000541b, 0xb551) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) 498.888268ms ago: executing program 9 (id=2772): madvise$auto_MADV_UNMERGEABLE(0x2, 0x7, 0xd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0) (async) madvise$auto_MADV_UNMERGEABLE(0x9, 0x6094, 0xd) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/mpls/conf/netdevsim2/input\x00', 0x40802, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x200, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x3) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x84) (async, rerun: 64) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) io_uring_setup$auto(0x81c5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 32) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (rerun: 32) mmap$auto(0x8, 0x200006, 0x2, 0x40ebd, 0x602, 0x300400000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)) 0s ago: executing program 8 (id=2773): socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x8, 0x3, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xe9e, 0x3ff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x6, 0x2000df, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x1) socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, 0x0, 0x7, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, 0x0, 0x6f3) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) r2 = gettid() readv$auto(0x3, 0x0, 0x1) tkill$auto(r2, 0x7) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): c8/0xf10 [ 968.346601][T18407] page last free pid 5839 tgid 5839 stack trace: [ 968.377756][T18407] __free_frozen_pages+0x7fe/0x1180 [ 968.393587][T18407] __put_partials+0x16d/0x1c0 [ 968.411530][T18407] qlist_free_all+0x4d/0x120 [ 968.423106][T18407] kasan_quarantine_reduce+0x195/0x1e0 [ 968.454264][T18407] __kasan_slab_alloc+0x69/0x90 [ 968.459201][T18407] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 968.488038][T18407] add+0x80d/0x15c0 [ 968.501727][T18407] wg_allowedips_insert_v4+0xdd/0x130 [ 968.524990][T18407] set_peer+0x1249/0x1460 [ 968.541759][T18407] wg_set_device+0xa72/0x1360 [ 968.561354][T18407] genl_family_rcv_msg_doit+0x206/0x2f0 [ 968.578584][T18407] genl_rcv_msg+0x55c/0x800 [ 968.587450][T18407] netlink_rcv_skb+0x155/0x420 [ 968.598449][T18407] genl_rcv+0x28/0x40 [ 968.608171][T18407] netlink_unicast+0x53d/0x7f0 [ 968.622065][T18407] netlink_sendmsg+0x8d1/0xdd0 [ 969.734336][T18466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 969.887203][T18466] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 971.459293][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2179'. [ 971.508987][T18539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.542887][T18539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.582525][T18539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.607900][T18539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.889516][T18580] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 974.062975][T18602] netlink: Unknown conntrack attr (type=146, max=9) [ 974.234092][T18607] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 976.252773][T18668] FAULT_INJECTION: forcing a failure. [ 976.252773][T18668] name fail_futex, interval 1, probability 0, space 0, times 0 [ 976.286770][T18668] CPU: 1 UID: 0 PID: 18668 Comm: syz.3.2205 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 976.286811][T18668] Tainted: [U]=USER [ 976.286819][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.286833][T18668] Call Trace: [ 976.286840][T18668] [ 976.286848][T18668] dump_stack_lvl+0x16c/0x1f0 [ 976.286889][T18668] should_fail_ex+0x512/0x640 [ 976.286925][T18668] ? rcu_is_watching+0x12/0xc0 [ 976.286949][T18668] should_fail_futex+0x4c/0x60 [ 976.286974][T18668] __x64_sys_futex+0x25e/0x4c0 [ 976.287007][T18668] ? __pfx___x64_sys_futex+0x10/0x10 [ 976.287035][T18668] ? xfd_validate_state+0x61/0x180 [ 976.287071][T18668] ? rcu_is_watching+0x12/0xc0 [ 976.287097][T18668] do_syscall_64+0xcd/0x490 [ 976.287119][T18668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.287143][T18668] RIP: 0033:0x7f33f0f8e929 [ 976.287161][T18668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.287184][T18668] RSP: 002b:00007fff73d73408 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 976.287207][T18668] RAX: ffffffffffffffda RBX: 00000000000ee4bd RCX: 00007f33f0f8e929 [ 976.287223][T18668] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33f11b5fac [ 976.287237][T18668] RBP: 0000000000000032 R08: 00007f33f1dae000 R09: 0000000d73d736ff [ 976.287253][T18668] R10: 00007fff73d73500 R11: 0000000000000246 R12: 00007f33f11b5fac [ 976.287268][T18668] R13: 00007fff73d73500 R14: 00000000000ee4ef R15: 00007fff73d73520 [ 976.287290][T18668] [ 976.748568][T18676] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 977.034205][T18678] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 979.361121][T18736] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 979.452116][T18743] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2215'. [ 979.535007][T18736] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2214'. [ 979.856157][T18752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 980.575338][T18780] Invalid ELF header magic: != ELF [ 982.251140][T18810] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 982.386057][T18810] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 982.445160][T18810] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 982.948695][T18826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.963096][T18826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.972159][T18826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.979978][T18826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 983.009716][T18826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.296421][T11095] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.424474][T11095] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.556413][T11095] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.702710][T18824] chnl_net:caif_netlink_parms(): no params data found [ 983.796937][T11095] bridge_slave_1: left allmulticast mode [ 983.812093][T11095] bridge_slave_1: left promiscuous mode [ 983.819073][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.830418][T11095] bridge_slave_0: left allmulticast mode [ 983.870154][T11095] bridge_slave_0: left promiscuous mode [ 983.897048][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.925794][T18846] overlayfs: missing 'lowerdir' [ 984.271567][T11095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.287866][T11095] bond0 (unregistering): Released all slaves [ 984.435464][T11095] HfR: left promiscuous mode [ 984.518278][T18824] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.531939][T18824] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.539324][T18824] bridge_slave_0: entered allmulticast mode [ 984.561221][T18824] bridge_slave_0: entered promiscuous mode [ 984.609941][T18824] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.646618][T18824] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.673610][T18824] bridge_slave_1: entered allmulticast mode [ 984.690954][T18824] bridge_slave_1: entered promiscuous mode [ 984.816513][T18863] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 985.019930][T18824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.054584][T18824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.067878][T18879] uinput: write device info first [ 985.074087][T18826] Bluetooth: hci0: command tx timeout [ 985.250025][T18876] can: request_module (can-proto-0) failed. [ 985.549841][T18824] team0: Port device team_slave_0 added [ 985.569268][T11095] hsr_slave_0: left promiscuous mode [ 985.578200][T11095] hsr_slave_1: left promiscuous mode [ 985.585695][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.594429][T11095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.602607][T11095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.610120][T11095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.623250][T11095] veth1_macvtap: left promiscuous mode [ 985.628867][T11095] veth0_macvtap: left promiscuous mode [ 985.808713][T11095] team0 (unregistering): Port device team_slave_1 removed [ 985.846814][T11095] team0 (unregistering): Port device team_slave_0 removed [ 985.951038][T18824] team0: Port device team_slave_1 added [ 986.024497][T18824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.031485][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.097172][T18824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.113311][T18824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.120383][T18824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.202862][T18824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.357295][T18824] hsr_slave_0: entered promiscuous mode [ 986.395640][T18824] hsr_slave_1: entered promiscuous mode [ 986.883440][T18912] tipc: Started in network mode [ 986.888383][T18912] tipc: Node identity ee00, cluster identity 4711 [ 986.902255][T18912] tipc: Node number set to 60928 [ 987.151784][T18826] Bluetooth: hci0: command tx timeout [ 987.185364][T18909] ptrace attach of "./syz-executor exec"[8651] was attempted by "./syz-executor exec"[18909] [ 987.207590][T18928] ptrace attach of "./syz-executor exec"[8651] was attempted by "./syz-executor exec"[18928] [ 987.952536][T18950] caif:caif_disconnect_client(): nothing to disconnect [ 988.293295][T18824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.368972][T18824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.389268][T18824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 988.424677][T18824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.660975][T18824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.679241][T18979] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 988.796500][T18824] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.971489][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.978903][T18944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.049398][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.056564][T18944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.234066][T18826] Bluetooth: hci0: command tx timeout [ 989.245470][T18824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 989.256958][T18824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.931384][T18824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.207832][T18824] veth0_vlan: entered promiscuous mode [ 990.320240][T18824] veth1_vlan: entered promiscuous mode [ 990.320491][T19021] FAULT_INJECTION: forcing a failure. [ 990.320491][T19021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.378509][T19021] CPU: 1 UID: 0 PID: 19021 Comm: syz.4.2249 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 990.378567][T19021] Tainted: [U]=USER [ 990.378578][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.378597][T19021] Call Trace: [ 990.378607][T19021] [ 990.378619][T19021] dump_stack_lvl+0x16c/0x1f0 [ 990.378675][T19021] should_fail_ex+0x512/0x640 [ 990.378725][T19021] _copy_from_iter+0x29f/0x16f0 [ 990.378778][T19021] ? rcu_is_watching+0x12/0xc0 [ 990.378810][T19021] ? __pfx__copy_from_iter+0x10/0x10 [ 990.378857][T19021] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 990.378905][T19021] ? __asan_memset+0x23/0x50 [ 990.378943][T19021] ? __build_skb_around+0x278/0x3b0 [ 990.378984][T19021] ? is_vmalloc_addr+0x86/0xa0 [ 990.379030][T19021] netlink_sendmsg+0x829/0xdd0 [ 990.379070][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.379121][T19021] ____sys_sendmsg+0xa95/0xc70 [ 990.379161][T19021] ? copy_msghdr_from_user+0x10a/0x160 [ 990.379211][T19021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.379253][T19021] ? __pfx_futex_wake_mark+0x10/0x10 [ 990.379301][T19021] ___sys_sendmsg+0x134/0x1d0 [ 990.379351][T19021] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.379412][T19021] ? rcu_is_watching+0x12/0xc0 [ 990.379456][T19021] __sys_sendmsg+0x16d/0x220 [ 990.379485][T19021] ? __pfx___sys_sendmsg+0x10/0x10 [ 990.379512][T19021] ? __x64_sys_futex+0x1e0/0x4c0 [ 990.379561][T19021] do_syscall_64+0xcd/0x490 [ 990.379591][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.379622][T19021] RIP: 0033:0x7f70ecd8e929 [ 990.379647][T19021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.379678][T19021] RSP: 002b:00007f70edb41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.379710][T19021] RAX: ffffffffffffffda RBX: 00007f70ecfb5fa0 RCX: 00007f70ecd8e929 [ 990.379731][T19021] RDX: 0000000008000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 990.379750][T19021] RBP: 00007f70ece10b39 R08: 0000000000000000 R09: 0000000000000000 [ 990.379769][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.379787][T19021] R13: 0000000000000000 R14: 00007f70ecfb5fa0 R15: 00007ffd261eba58 [ 990.379815][T19021] [ 990.396094][T18824] veth0_macvtap: entered promiscuous mode [ 990.463202][T19027] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input50 [ 990.579093][T19023] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 990.734288][T18824] veth1_macvtap: entered promiscuous mode [ 990.800484][T18824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.833535][T18824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.860196][T18824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.882512][T18824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.891481][T18824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.912886][T18824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.008416][T18824] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 991.060327][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.062467][T18824] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 991.081658][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.130781][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.159700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.311756][T18826] Bluetooth: hci0: command tx timeout [ 991.372384][T19052] Invalid ELF header magic: != ELF [ 991.483877][T19048] can: request_module (can-proto-3) failed. [ 992.619321][T19088] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 992.844726][T19097] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 993.419428][T19058] kexec: Could not allocate control_code_buffer [ 995.143916][T19111] kexec: Could not allocate control_code_buffer [ 996.824147][T19210] Console: switching to colour frame buffer device 128x48 [ 996.945674][T19197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 996.964146][T19197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 996.971884][T19197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 996.978746][T19197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 996.994246][T19197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 997.015596][T19197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 997.335145][T18826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 997.424902][T19217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'. [ 997.936435][T19238] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 997.961244][T19235] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 998.191754][T18826] Bluetooth: hci1: command 0x0406 tx timeout [ 998.232710][T19242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 998.238955][T19242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 998.249376][T19242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 998.263384][T19242] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 998.392428][T19242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 998.404132][T19240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 998.652426][T19245] ptrace attach of "./syz-executor exec"[19247] was attempted by "./syz-executor exec"[19245] [ 998.733620][T19246] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 998.756404][T19246] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 999.704417][T18826] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 1000.271788][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1000.277895][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1000.431973][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1000.865163][T19269] kexec: Could not allocate control_code_buffer [ 1001.787569][T19292] netlink: 'syz.0.2288': attribute type 2 has an invalid length. [ 1002.511679][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1002.928689][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 1003.115240][T19309] netlink: 'syz.5.2291': attribute type 2 has an invalid length. [ 1003.466251][T19311] could not allocate digest TFM handle [ 1003.636066][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.642539][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.591774][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1006.875655][T19369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1008.885311][T19388] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1009.486981][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1009.844976][T19421] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2315'. [ 1010.528974][T19445] random: crng reseeded on system resumption [ 1010.539656][T19445] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1010.548163][T19445] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1010.556714][T19445] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1010.565147][T19445] PM: hibernation: Basic memory bitmaps created [ 1010.724520][T19445] PM: hibernation: Basic memory bitmaps freed [ 1011.578989][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1011.586824][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1011.594354][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1011.602504][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1011.611253][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1011.858069][T19469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.024153][T19461] chnl_net:caif_netlink_parms(): no params data found [ 1012.135419][T19461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.161670][T19461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.169199][T19461] bridge_slave_0: entered allmulticast mode [ 1012.192806][T19461] bridge_slave_0: entered promiscuous mode [ 1012.213539][T19461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.220707][T19461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.228143][T19461] bridge_slave_1: entered allmulticast mode [ 1012.235309][T19461] bridge_slave_1: entered promiscuous mode [ 1012.274215][T19461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.379482][T19461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.435721][T19491] ubi0: attaching mtd0 [ 1012.441187][T19491] ubi0: scanning is finished [ 1012.466551][T19491] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1012.479391][T19461] team0: Port device team_slave_0 added [ 1012.499196][T19461] team0: Port device team_slave_1 added [ 1012.538764][T19461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.566763][T19461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.629147][T19461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.677773][T19491] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1012.678244][T19461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.718802][T19461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.744774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.841504][T19461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.029564][T19461] hsr_slave_0: entered promiscuous mode [ 1013.037334][T19461] hsr_slave_1: entered promiscuous mode [ 1013.046328][T19461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1013.057389][T19461] Cannot create hsr debugfs directory [ 1013.493604][T19461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1013.507791][T19461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1013.524399][T19461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1013.546297][T19461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1013.632691][T18826] Bluetooth: hci3: command tx timeout [ 1013.706440][T19517] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1013.736520][T19461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.793180][T19461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.828608][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.835857][T18944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.853185][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.860563][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.911559][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.920154][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.927840][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.939009][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.948508][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1014.312089][T19525] chnl_net:caif_netlink_parms(): no params data found [ 1014.582723][T19525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.590039][T19525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.602089][T19525] bridge_slave_0: entered allmulticast mode [ 1014.609251][T19525] bridge_slave_0: entered promiscuous mode [ 1014.624338][T19525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.631921][T19525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.639465][T19525] bridge_slave_1: entered allmulticast mode [ 1014.652163][T19525] bridge_slave_1: entered promiscuous mode [ 1014.717086][T19461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.734257][T19525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.735361][T19545] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1014.749631][T19525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.903983][T19525] team0: Port device team_slave_0 added [ 1014.931563][T19525] team0: Port device team_slave_1 added [ 1014.969921][T19525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.996115][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.022130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.052454][T19525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.083655][T19525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.107592][T19549] could not allocate digest TFM handle [ 1015.113220][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.113303][T19525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.215515][T19525] hsr_slave_0: entered promiscuous mode [ 1015.234275][T19525] hsr_slave_1: entered promiscuous mode [ 1015.240960][T19525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.249558][T19556] could not allocate digest TFM handle [ 1015.269261][T19525] Cannot create hsr debugfs directory [ 1015.590709][T19461] veth0_vlan: entered promiscuous mode [ 1015.621054][T19461] veth1_vlan: entered promiscuous mode [ 1015.681022][T19525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1015.694848][T19525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1015.712035][T18826] Bluetooth: hci3: command tx timeout [ 1015.718920][T19461] veth0_macvtap: entered promiscuous mode [ 1015.726366][T19525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1015.738909][T19525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1015.757731][T19461] veth1_macvtap: entered promiscuous mode [ 1015.825962][T19461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.891981][T19461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.948289][T19461] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.958641][T19461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.970409][T19461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.980176][T19461] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.031755][T18826] Bluetooth: hci5: command tx timeout [ 1016.160219][T19525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.194119][T19461] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 1016.239594][T19525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.253193][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.293590][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.354279][T19461] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1016.400763][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.408008][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.448541][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.455765][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.481009][T18944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.506310][T18944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.660993][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2321'. [ 1016.807327][T19582] caif:caif_disconnect_client(): nothing to disconnect [ 1016.889215][T19525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.317572][T19525] veth0_vlan: entered promiscuous mode [ 1017.339658][T19525] veth1_vlan: entered promiscuous mode [ 1017.413461][T19525] veth0_macvtap: entered promiscuous mode [ 1017.429987][T19525] veth1_macvtap: entered promiscuous mode [ 1017.455504][T19525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.473579][T19525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.486949][T19525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.498955][T19525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.508724][T19525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.520431][T19525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.591567][T19525] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 1017.628295][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.641282][T19525] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 1017.651145][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.696681][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.714574][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.792349][T18826] Bluetooth: hci3: command tx timeout [ 1017.934701][T19618] Invalid ELF header magic: != ELF [ 1018.113446][T18826] Bluetooth: hci5: command tx timeout [ 1018.167424][T19623] Invalid ELF header magic: != ELF [ 1019.539367][T18826] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 1019.658528][ T30] audit: type=1800 audit(4295006052.530:25): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2348" name="dbroot" dev="configfs" ino=70740 res=0 errno=0 [ 1019.871780][T18826] Bluetooth: hci3: command tx timeout [ 1020.192474][T18826] Bluetooth: hci5: command tx timeout [ 1020.871069][T19649] vivid-007: ================= START STATUS ================= [ 1020.920595][T19649] vivid-007: Generate PTS: true [ 1020.976373][T19649] vivid-007: Generate SCR: true [ 1020.999706][T19649] tpg source WxH: 320x240 (Y'CbCr) [ 1021.007635][T19649] tpg field: 1 [ 1021.014309][T19649] tpg crop: (0,0)/320x240 [ 1021.020393][T19649] tpg compose: (0,0)/320x240 [ 1021.025537][T19649] tpg colorspace: 8 [ 1021.041447][T19649] tpg transfer function: 0/0 [ 1021.058939][T19649] tpg Y'CbCr encoding: 0/0 [ 1021.080777][T19649] tpg quantization: 0/0 [ 1021.086388][T19649] tpg RGB range: 0/2 [ 1021.100144][T19649] vivid-007: ================== END STATUS ================== [ 1022.244075][T19677] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1022.278278][T18826] Bluetooth: hci5: command tx timeout [ 1022.284651][T19677] batman_adv: Routing algorithm '' is not supported [ 1022.958860][T19688] could not allocate digest TFM handle [ 1023.123382][T19689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1023.129493][T19689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1023.137379][T19689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1023.150965][T19689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1023.157484][T19689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1023.163766][T19689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1023.192559][T19689] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1023.203542][T19689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1023.213724][T19689] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.287884][T19689] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.460463][T19705] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2361'. [ 1023.480392][T19705] FAULT_INJECTION: forcing a failure. [ 1023.480392][T19705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1023.570054][T19705] CPU: 1 UID: 0 PID: 19705 Comm: syz.5.2361 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1023.570110][T19705] Tainted: [U]=USER [ 1023.570122][T19705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.570142][T19705] Call Trace: [ 1023.570152][T19705] [ 1023.570165][T19705] dump_stack_lvl+0x16c/0x1f0 [ 1023.570221][T19705] should_fail_ex+0x512/0x640 [ 1023.570274][T19705] should_fail_alloc_page+0xe7/0x130 [ 1023.570306][T19705] prepare_alloc_pages+0x3c2/0x610 [ 1023.570345][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.570380][T19705] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1023.570431][T19705] ? kasan_save_stack+0x42/0x60 [ 1023.570478][T19705] ? kasan_save_stack+0x33/0x60 [ 1023.570528][T19705] ? kasan_save_stack+0x42/0x60 [ 1023.570572][T19705] ? kasan_save_stack+0x33/0x60 [ 1023.570618][T19705] ? kasan_save_track+0x14/0x30 [ 1023.570663][T19705] ? __kasan_slab_alloc+0x89/0x90 [ 1023.570712][T19705] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1023.570758][T19705] ? __anon_vma_prepare+0x344/0x5e0 [ 1023.570802][T19705] ? __vmf_anon_prepare+0x11c/0x240 [ 1023.570836][T19705] ? __handle_mm_fault+0x27f6/0x5490 [ 1023.570876][T19705] ? handle_mm_fault+0x589/0xd10 [ 1023.570917][T19705] ? __get_user_pages+0x589/0x3b80 [ 1023.570951][T19705] ? populate_vma_page_range+0x278/0x3a0 [ 1023.571000][T19705] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1023.571050][T19705] ? __x64_sys_mmap+0x125/0x190 [ 1023.571094][T19705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.571130][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.571161][T19705] ? lock_acquire+0x2cd/0x350 [ 1023.571203][T19705] ? local_lock_release+0x99/0x140 [ 1023.571236][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.571267][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.571297][T19705] ? lock_acquire+0x2cd/0x350 [ 1023.571337][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.571368][T19705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1023.571420][T19705] ? policy_nodemask+0xea/0x4e0 [ 1023.571450][T19705] alloc_pages_mpol+0x1fb/0x550 [ 1023.571481][T19705] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1023.571509][T19705] ? lock_release+0x201/0x2f0 [ 1023.571556][T19705] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1023.571598][T19705] vma_alloc_folio_noprof+0xed/0x1e0 [ 1023.571632][T19705] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1023.571668][T19705] ? __handle_mm_fault+0x1092/0x5490 [ 1023.571711][T19705] ? rcu_is_watching+0x12/0xc0 [ 1023.571742][T19705] ? lock_release+0x201/0x2f0 [ 1023.571785][T19705] __handle_mm_fault+0x2f21/0x5490 [ 1023.571833][T19705] ? __pfx___handle_mm_fault+0x10/0x10 [ 1023.571877][T19705] ? __pte_offset_map_lock+0x174/0x310 [ 1023.571918][T19705] ? follow_page_pte+0x3af/0x14c0 [ 1023.571958][T19705] handle_mm_fault+0x589/0xd10 [ 1023.572016][T19705] __get_user_pages+0x589/0x3b80 [ 1023.572057][T19705] ? __pfx_mt_find+0x10/0x10 [ 1023.572091][T19705] ? __pfx___get_user_pages+0x10/0x10 [ 1023.572128][T19705] ? __pfx___might_resched+0x10/0x10 [ 1023.572159][T19705] ? cap_capable+0xb3/0x250 [ 1023.572193][T19705] populate_vma_page_range+0x278/0x3a0 [ 1023.572233][T19705] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1023.572273][T19705] ? __pfx_find_vma_intersection+0x10/0x10 [ 1023.572311][T19705] ? do_mmap+0x69c/0x1210 [ 1023.572348][T19705] __mm_populate+0x1d8/0x380 [ 1023.572386][T19705] ? __pfx___mm_populate+0x10/0x10 [ 1023.572425][T19705] ? up_write+0x1b2/0x520 [ 1023.572474][T19705] vm_mmap_pgoff+0x362/0x450 [ 1023.572507][T19705] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1023.572543][T19705] ? __x64_sys_futex+0x1e0/0x4c0 [ 1023.572581][T19705] ? __x64_sys_futex+0x1e9/0x4c0 [ 1023.572623][T19705] ksys_mmap_pgoff+0x7d/0x5c0 [ 1023.572657][T19705] ? xfd_validate_state+0x61/0x180 [ 1023.572700][T19705] ? __pfx_do_writev+0x10/0x10 [ 1023.572744][T19705] __x64_sys_mmap+0x125/0x190 [ 1023.572789][T19705] do_syscall_64+0xcd/0x490 [ 1023.572820][T19705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.572854][T19705] RIP: 0033:0x7f190198e929 [ 1023.572880][T19705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.572912][T19705] RSP: 002b:00007f190273b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1023.572944][T19705] RAX: ffffffffffffffda RBX: 00007f1901bb5fa0 RCX: 00007f190198e929 [ 1023.572966][T19705] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1023.572986][T19705] RBP: 00007f1901a10b39 R08: 0000000000000002 R09: 0000000000008000 [ 1023.573015][T19705] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1023.573036][T19705] R13: 0000000000000000 R14: 00007f1901bb5fa0 R15: 00007ffedf12ef58 [ 1023.573067][T19705] [ 1025.165653][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1025.173099][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.179166][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1025.201009][T19724] Invalid ELF header magic: != ELF [ 1025.254597][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1025.261182][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1025.267251][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1025.289961][T19713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1025.308314][T19713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1025.324475][T19713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1025.593970][T19713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1025.631983][T19713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1025.642304][T19713] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1026.313395][T19737] program syz.0.2366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1026.340092][T19737] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1027.320046][T13408] Bluetooth: hci1: command 0x0406 tx timeout [ 1027.327474][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1027.355774][T19749] could not allocate digest TFM handle [ 1027.391778][T13408] Bluetooth: hci2: command 0x0c1a tx timeout [ 1027.631834][T13408] Bluetooth: hci0: command 0x0c1a tx timeout [ 1027.639532][ T30] audit: type=1807 audit(4295006060.510:26): UNKNOWN= res=0 [ 1027.647226][ T30] audit: type=1802 audit(4295006060.510:27): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2370" res=0 errno=0 [ 1027.723064][T18826] Bluetooth: hci3: command 0x0c1a tx timeout [ 1027.729268][T13408] Bluetooth: hci5: command 0x0c1a tx timeout [ 1028.130863][T19765] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1028.131923][T19755] ima: policy update failed [ 1028.190440][ T30] audit: type=1802 audit(4295006061.040:28): pid=19755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2370" res=0 errno=0 [ 1029.791939][T13408] Bluetooth: hci5: command 0x0c1a tx timeout [ 1029.798136][T13408] Bluetooth: hci3: command 0x0c1a tx timeout [ 1029.837167][T19807] caif:caif_disconnect_client(): nothing to disconnect [ 1030.424130][T19812] could not allocate digest TFM handle [ 1033.727780][T19865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 1033.902945][T18826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1033.911930][T18826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1033.919314][T18826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1033.952765][T18826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1033.962742][T18826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1034.115122][T19862] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 1034.784582][T19884] could not allocate digest TFM handle [ 1034.936831][T19869] chnl_net:caif_netlink_parms(): no params data found [ 1035.181336][T19892] caif:caif_disconnect_client(): nothing to disconnect [ 1035.296827][T19869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.322067][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.339695][T19869] bridge_slave_0: entered allmulticast mode [ 1035.346974][T19869] bridge_slave_0: entered promiscuous mode [ 1035.356076][T19869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.371745][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.384644][T19869] bridge_slave_1: entered allmulticast mode [ 1035.394313][T19869] bridge_slave_1: entered promiscuous mode [ 1035.453990][T19915] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1035.467232][T19869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.481967][T19916] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1035.516113][T19869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.700430][T19869] team0: Port device team_slave_0 added [ 1035.718974][T19869] team0: Port device team_slave_1 added [ 1035.770651][T19869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.791021][T19869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.825638][T19869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.870301][T19869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.878324][T19869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.905690][T19869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.033883][T13408] Bluetooth: hci6: command tx timeout [ 1036.073071][T19869] hsr_slave_0: entered promiscuous mode [ 1036.102167][T19869] hsr_slave_1: entered promiscuous mode [ 1036.119736][T19869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1036.147811][T19869] Cannot create hsr debugfs directory [ 1036.533590][T19941] Invalid ELF header magic: != ELF [ 1036.961244][T19869] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1036.995718][T19869] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1037.011328][T19869] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1037.052546][T19869] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1037.319174][T19869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.380097][T19869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.400987][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.408368][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.428358][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.435550][T18944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.767923][T19869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.112184][T13408] Bluetooth: hci6: command tx timeout [ 1038.159007][T19869] veth0_vlan: entered promiscuous mode [ 1038.175271][T19869] veth1_vlan: entered promiscuous mode [ 1038.211333][T19869] veth0_macvtap: entered promiscuous mode [ 1038.226040][T19869] veth1_macvtap: entered promiscuous mode [ 1038.230988][T19993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 1038.252501][T19869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.266569][T19869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.285181][T19869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.294922][T19869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.307252][T19869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.311123][T19995] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 1038.331569][T19869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.424065][T19869] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 1038.522418][ T9324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.528405][T19869] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1038.548570][ T9324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.627108][ T9324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.645169][ T9324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.902855][T20007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1038.909867][T20007] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.921691][T20007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1038.953380][T20007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.995074][T20007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1039.016882][T20007] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1039.046840][T20007] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1039.089683][T20007] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1039.153110][T20007] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1039.310172][T20014] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1039.341267][T20009] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1039.741094][T20020] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 1040.910540][T13408] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.916654][T13408] Bluetooth: hci1: command 0x0406 tx timeout [ 1040.990265][T13408] Bluetooth: hci0: command 0x0c1a tx timeout [ 1040.996381][T13408] Bluetooth: hci2: command 0x0c1a tx timeout [ 1041.070368][T13408] Bluetooth: hci6: command 0x0419 tx timeout [ 1041.076929][T13408] Bluetooth: hci5: command 0x0c1a tx timeout [ 1041.082982][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1043.152905][T13408] Bluetooth: hci6: command 0x0419 tx timeout [ 1043.325574][T20061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1043.333495][T20061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1043.362117][T20061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1043.389490][T20061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1043.407560][T20061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1043.428221][T20061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1043.447604][T20061] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1043.932977][T20077] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1044.598377][T13408] Bluetooth: hci1: command 0x0406 tx timeout [ 1045.195408][ T30] audit: type=1800 audit(4295006078.074:29): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2434" name="members" dev="configfs" ino=74002 res=0 errno=0 [ 1045.397981][T13408] Bluetooth: hci0: command 0x0c1a tx timeout [ 1045.398000][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1045.398041][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1045.468129][T18826] Bluetooth: hci6: command 0x0419 tx timeout [ 1045.474803][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1045.478087][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1045.857445][T20114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1045.864098][T20114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.880320][T20114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1045.892109][T20114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1045.906238][T20114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1045.916445][T20114] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1045.926174][T20114] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1046.066400][T20131] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1046.298394][T20138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1046.317107][T20138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1046.323931][T20138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1046.350387][T20138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1046.358828][T20138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1046.384769][T20138] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1046.421502][T20138] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1048.039635][T20179] Setting dangerous option i915.mitigations - tainting kernel [ 1048.253399][T20183] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 1048.347170][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1048.354290][T13408] Bluetooth: hci2: command 0x0c1a tx timeout [ 1048.430166][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1048.436267][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1048.440759][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1048.442336][T13408] Bluetooth: hci6: command 0x0419 tx timeout [ 1048.497868][T20172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1048.504077][T20172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.510732][T20172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1048.519708][T20172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1048.538822][T20172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.547128][T20172] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1048.567095][T20172] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1049.787982][T18826] Bluetooth: hci1: command 0x0406 tx timeout [ 1050.508682][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1050.588082][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1050.594669][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1050.597643][T13408] Bluetooth: hci0: command 0x0c1a tx timeout [ 1050.600773][T18826] Bluetooth: hci6: command 0x0419 tx timeout [ 1050.600817][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1051.865011][T20236] can: request_module (can-proto-3) failed. [ 1052.283452][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1052.290929][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1052.298262][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1052.306520][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1052.336519][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1053.328911][T20241] chnl_net:caif_netlink_parms(): no params data found [ 1053.599929][T20241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.631523][T20241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.670031][T20241] bridge_slave_0: entered allmulticast mode [ 1053.708747][T20241] bridge_slave_0: entered promiscuous mode [ 1053.751741][T20241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.759065][T20241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.766525][T20241] bridge_slave_1: entered allmulticast mode [ 1053.774402][T20241] bridge_slave_1: entered promiscuous mode [ 1053.940780][T20241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.952193][T20271] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2464'. [ 1053.968349][T20241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.005838][T20241] team0: Port device team_slave_0 added [ 1054.014293][T20241] team0: Port device team_slave_1 added [ 1054.429869][T20231] Bluetooth: hci7: command tx timeout [ 1054.496284][T20241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.812875][T20241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.861068][T20274] block nbd7: not configured, cannot reconfigure [ 1054.909194][T20241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.935920][T20241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.964403][T20241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.140651][T20241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.355614][T20241] hsr_slave_0: entered promiscuous mode [ 1055.375223][T20241] hsr_slave_1: entered promiscuous mode [ 1055.392367][T20241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.416368][T20241] Cannot create hsr debugfs directory [ 1055.594511][T20288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 1056.226008][T20241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1056.258855][T20241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1056.352612][T20241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1056.398332][T20241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1056.510304][T20231] Bluetooth: hci7: command tx timeout [ 1056.972850][T20241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.072161][T20241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.108128][T11120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.115359][T11120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.171587][T11120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.178761][T11120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.240556][T20314] could not allocate digest TFM handle [ 1057.759530][T20241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.601656][T20231] Bluetooth: hci7: command tx timeout [ 1058.752381][T20241] veth0_vlan: entered promiscuous mode [ 1058.852625][T20241] veth1_vlan: entered promiscuous mode [ 1058.942712][T20241] veth0_macvtap: entered promiscuous mode [ 1058.964869][T20241] veth1_macvtap: entered promiscuous mode [ 1059.016148][T20241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.097832][T20241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.133210][T20241] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.158945][T20241] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.194828][T20241] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.230701][T20241] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.413304][T20241] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1059.543689][T20375] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 1059.642083][T18944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.653345][T20241] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 1059.664116][T18944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.686305][T20376] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 1059.755557][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2478'. [ 1059.759630][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.817115][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.920166][T20375] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1059.958330][T20386] FAULT_INJECTION: forcing a failure. [ 1059.958330][T20386] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.052105][T20386] CPU: 0 UID: 0 PID: 20386 Comm: syz.8.2479 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1060.052159][T20386] Tainted: [U]=USER [ 1060.052170][T20386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.052189][T20386] Call Trace: [ 1060.052199][T20386] [ 1060.052211][T20386] dump_stack_lvl+0x16c/0x1f0 [ 1060.052267][T20386] should_fail_ex+0x512/0x640 [ 1060.052320][T20386] should_failslab+0xc2/0x120 [ 1060.052351][T20386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1060.052402][T20386] ? copy_pid_ns+0x2bf/0xce0 [ 1060.052438][T20386] copy_pid_ns+0x2bf/0xce0 [ 1060.052470][T20386] ? __pfx_copy_pid_ns+0x10/0x10 [ 1060.052504][T20386] ? copy_mnt_ns+0xac/0xac0 [ 1060.052554][T20386] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1060.052588][T20386] ? trace_cap_capable+0x18d/0x200 [ 1060.052620][T20386] ? copy_ipcs+0xb6/0x610 [ 1060.052657][T20386] create_new_namespaces+0x2aa/0xa90 [ 1060.052696][T20386] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1060.052733][T20386] ksys_unshare+0x45b/0xa40 [ 1060.052776][T20386] ? __pfx_ksys_unshare+0x10/0x10 [ 1060.052818][T20386] ? xfd_validate_state+0x61/0x180 [ 1060.052866][T20386] __x64_sys_unshare+0x31/0x40 [ 1060.052907][T20386] do_syscall_64+0xcd/0x490 [ 1060.052938][T20386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.052982][T20386] RIP: 0033:0x7fdd39b8e929 [ 1060.053007][T20386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.053039][T20386] RSP: 002b:00007fdd3aa7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1060.053071][T20386] RAX: ffffffffffffffda RBX: 00007fdd39db5fa0 RCX: 00007fdd39b8e929 [ 1060.053092][T20386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1060.053111][T20386] RBP: 00007fdd39c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1060.053129][T20386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.053147][T20386] R13: 0000000000000000 R14: 00007fdd39db5fa0 R15: 00007ffd2f31e6f8 [ 1060.053177][T20386] [ 1060.292540][T20386] zram: Removed device: zram0 [ 1060.451983][T20390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1060.460183][T20390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1060.505322][T20390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1060.539518][T20390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1060.556993][T20390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1060.575999][T20390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1060.582368][T20390] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1060.599308][T20390] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1060.606646][T20390] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1060.649837][T20390] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1060.805216][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2483'. [ 1061.150268][T20408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1061.172909][T20231] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1062.513653][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1062.518134][T20231] Bluetooth: hci4: command 0x0c1a tx timeout [ 1062.520528][T18826] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.588766][T18826] Bluetooth: hci6: command 0x0419 tx timeout [ 1062.594947][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1062.601151][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1062.601225][T20231] Bluetooth: hci0: command 0x0c1a tx timeout [ 1062.668450][T20231] Bluetooth: hci7: command 0x0c1a tx timeout [ 1062.944448][T20437] caif:caif_disconnect_client(): nothing to disconnect [ 1063.312774][T20456] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1063.673404][T20472] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1064.253783][T20485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1064.300847][T20484] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1064.341950][T20489] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1064.747229][T20231] Bluetooth: hci7: command 0x0c1a tx timeout [ 1065.071653][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.083707][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.362092][T20504] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1065.372481][T20504] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1065.401070][T20504] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1065.505861][T20504] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1065.547207][T20504] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1065.728183][T20513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.734306][T20513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.747005][T20513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1065.761941][T20513] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1065.794617][T20513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.810101][T20513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.830935][T20513] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1066.040852][T20513] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1066.061084][T20513] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1066.243924][T20518] FAULT_INJECTION: forcing a failure. [ 1066.243924][T20518] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.258800][T20518] CPU: 0 UID: 0 PID: 20518 Comm: syz.5.2505 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1066.258848][T20518] Tainted: [U]=USER [ 1066.258857][T20518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1066.258874][T20518] Call Trace: [ 1066.258882][T20518] [ 1066.258892][T20518] dump_stack_lvl+0x16c/0x1f0 [ 1066.258942][T20518] should_fail_ex+0x512/0x640 [ 1066.258987][T20518] should_failslab+0xc2/0x120 [ 1066.259012][T20518] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1066.259053][T20518] ? skb_clone+0x190/0x3f0 [ 1066.259077][T20518] ? netlink_deliver_tap+0x103/0xd30 [ 1066.259107][T20518] skb_clone+0x190/0x3f0 [ 1066.259131][T20518] netlink_deliver_tap+0xabd/0xd30 [ 1066.259162][T20518] netlink_dump+0xb4d/0xce0 [ 1066.259192][T20518] ? __pfx_netlink_dump+0x10/0x10 [ 1066.259225][T20518] ? __asan_memset+0x23/0x50 [ 1066.259259][T20518] ? genl_start+0x67f/0x980 [ 1066.259295][T20518] __netlink_dump_start+0x6d6/0x990 [ 1066.259327][T20518] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1066.259379][T20518] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1066.259423][T20518] ? __pfx_genl_start+0x10/0x10 [ 1066.259455][T20518] ? __pfx_genl_dumpit+0x10/0x10 [ 1066.259489][T20518] ? __pfx_genl_done+0x10/0x10 [ 1066.259526][T20518] ? bpf_lsm_capable+0x9/0x10 [ 1066.259560][T20518] ? security_capable+0x7e/0x260 [ 1066.259586][T20518] ? ns_capable+0xd7/0x110 [ 1066.259613][T20518] genl_rcv_msg+0x46e/0x800 [ 1066.259652][T20518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1066.259687][T20518] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 1066.259729][T20518] netlink_rcv_skb+0x155/0x420 [ 1066.259759][T20518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1066.259796][T20518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1066.259835][T20518] ? netlink_deliver_tap+0x1ae/0xd30 [ 1066.259870][T20518] genl_rcv+0x28/0x40 [ 1066.259905][T20518] netlink_unicast+0x53d/0x7f0 [ 1066.259942][T20518] ? __pfx_netlink_unicast+0x10/0x10 [ 1066.259984][T20518] netlink_sendmsg+0x8d1/0xdd0 [ 1066.260023][T20518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.260067][T20518] ____sys_sendmsg+0xa95/0xc70 [ 1066.260105][T20518] ? copy_msghdr_from_user+0x10a/0x160 [ 1066.260154][T20518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1066.260188][T20518] ? preempt_schedule_thunk+0x16/0x30 [ 1066.260231][T20518] ? try_to_wake_up+0xa2f/0x1680 [ 1066.260264][T20518] ___sys_sendmsg+0x134/0x1d0 [ 1066.260312][T20518] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.260356][T20518] ? futex_private_hash_put+0xc7/0x240 [ 1066.260401][T20518] ? rcu_is_watching+0x12/0xc0 [ 1066.260439][T20518] __sys_sendmsg+0x16d/0x220 [ 1066.260463][T20518] ? __pfx___sys_sendmsg+0x10/0x10 [ 1066.260487][T20518] ? __x64_sys_futex+0x1e0/0x4c0 [ 1066.260529][T20518] do_syscall_64+0xcd/0x490 [ 1066.260554][T20518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.260581][T20518] RIP: 0033:0x7f190198e929 [ 1066.260603][T20518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.260632][T20518] RSP: 002b:00007f190273b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.260658][T20518] RAX: ffffffffffffffda RBX: 00007f1901bb5fa0 RCX: 00007f190198e929 [ 1066.260676][T20518] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000006 [ 1066.260693][T20518] RBP: 00007f1901a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1066.260710][T20518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.260726][T20518] R13: 0000000000000000 R14: 00007f1901bb5fa0 R15: 00007ffedf12ef58 [ 1066.260752][T20518] [ 1066.821887][T20528] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1067.391084][T18826] Bluetooth: hci7: Unable to find connection for big 0xd2 [ 1067.638819][T20543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1067.786231][T20231] Bluetooth: hci2: command 0x0c1a tx timeout [ 1067.786235][T20184] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.786313][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1067.865859][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1067.867671][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1067.872052][T20231] Bluetooth: hci0: command 0x0c1a tx timeout [ 1068.004602][T20552] program syz.7.2511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.014805][T20552] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1068.105824][T18826] Bluetooth: hci7: command 0x0c1a tx timeout [ 1068.112008][T20231] Bluetooth: hci6: command 0x0419 tx timeout [ 1068.805657][T20569] random: crng reseeded on system resumption [ 1068.848658][T20569] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1068.929352][T20569] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1068.997996][T20569] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1069.023838][T20569] PM: hibernation: Basic memory bitmaps created [ 1069.358279][T20584] PM: hibernation: Basic memory bitmaps freed [ 1069.864704][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1069.904454][T20593] Device name cannot be null; rc = [-22] [ 1070.233215][T20595] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1071.845206][T20614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1071.857654][T20614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1071.910713][T20614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1072.012891][T20614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1072.043691][T20614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1072.064454][T20614] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1072.082968][T20614] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1072.112056][T20614] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1072.914369][T20620] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1072.930375][T20620] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1072.946887][T20620] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1072.957130][T20620] page_type: f5(slab) [ 1072.969788][T20620] raw: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 1072.980823][T20620] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1072.997554][T20620] head: 00fff00000000040 ffff88801b442140 0000000000000000 dead000000000001 [ 1073.008785][T20620] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1073.019134][T20620] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1073.028495][T20620] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1073.037502][T20620] page dumped because: unmovable page [ 1073.043277][T20620] page_owner tracks the page as allocated [ 1073.049223][T20620] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5958, tgid 5958 (udevd), ts 141484788086, free_ts 141293878834 [ 1073.071635][T20620] post_alloc_hook+0x1c0/0x230 [ 1073.123178][T20620] get_page_from_freelist+0x1321/0x3890 [ 1073.128940][T20620] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1073.135760][T20620] alloc_pages_mpol+0x1fb/0x550 [ 1073.141395][T20620] new_slab+0x23b/0x330 [ 1073.145830][T20620] ___slab_alloc+0xd9c/0x1940 [ 1073.150726][T20620] __slab_alloc.constprop.0+0x56/0xb0 [ 1073.227291][T20620] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1073.270842][T20626] could not allocate digest TFM handle [ 1073.301133][T20620] uevent_show+0x165/0x3a0 [ 1073.332816][T20620] dev_attr_show+0x53/0xe0 [ 1073.372479][T20620] sysfs_kf_seq_show+0x216/0x3e0 [ 1073.382139][T20620] seq_read_iter+0x506/0x12c0 [ 1073.390928][T20620] kernfs_fop_read_iter+0x40f/0x5a0 [ 1073.396692][T20620] vfs_read+0x8bc/0xc60 [ 1073.401804][T20620] ksys_read+0x12a/0x250 [ 1073.406404][T20620] do_syscall_64+0xcd/0x490 [ 1073.426412][T20620] page last free pid 6296 tgid 6296 stack trace: [ 1073.434382][T20620] __free_frozen_pages+0x7fe/0x1180 [ 1073.477712][T20620] __put_partials+0x16d/0x1c0 [ 1073.482478][T20620] qlist_free_all+0x4d/0x120 [ 1073.492871][T20620] kasan_quarantine_reduce+0x195/0x1e0 [ 1073.508546][T20620] __kasan_slab_alloc+0x69/0x90 [ 1073.662853][T20620] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1073.680861][T20620] jbd2__journal_start+0x193/0x6a0 [ 1073.686311][T20620] __ext4_journal_start_sb+0x195/0x690 [ 1073.692242][T20620] ext4_dirty_inode+0xa1/0x130 [ 1073.785167][T20620] __mark_inode_dirty+0x1eb/0xe50 [ 1073.790263][T20620] generic_update_time+0xcf/0xf0 [ 1073.885075][T18826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1073.885097][T20231] Bluetooth: hci1: command 0x0406 tx timeout [ 1073.903192][T20643] syz.8.2530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1073.947928][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1073.981226][T20620] file_update_time+0x17d/0x1c0 [ 1073.986614][T20620] ext4_page_mkwrite+0x35e/0x1760 [ 1073.998803][T20620] do_page_mkwrite+0x174/0x380 [ 1074.023827][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1074.072592][T20620] __handle_mm_fault+0x3829/0x5490 [ 1074.077775][T20620] handle_mm_fault+0x589/0xd10 [ 1074.121494][T18826] Bluetooth: hci6: command 0x0419 tx timeout [ 1074.127621][T20231] Bluetooth: hci5: command 0x0c1a tx timeout [ 1074.132628][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1074.193620][T20184] Bluetooth: hci7: command 0x0c1a tx timeout [ 1074.684420][T20661] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1075.092527][T20665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.103855][T20665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.122635][T20665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.163142][T20665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.202625][T20665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1075.208801][T20665] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1075.215225][T20665] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1075.221331][T20665] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1076.959147][T20714] could not allocate digest TFM handle [ 1077.087205][T20723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2544'. [ 1077.121212][T20726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1077.141054][T20184] Bluetooth: hci2: command 0x0c1a tx timeout [ 1077.141057][T20231] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.163165][T20726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.217259][T20726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1077.227215][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1077.227227][T18826] Bluetooth: hci3: command 0x0c1a tx timeout [ 1077.227269][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.233319][T20231] Bluetooth: hci6: command 0x0419 tx timeout [ 1077.300945][T18826] Bluetooth: hci7: command 0x0c1a tx timeout [ 1077.322053][T20729] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1077.338919][T20726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1077.432821][T20726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1077.439526][T20726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1077.445859][T20726] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1077.452140][T20726] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1078.135858][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2553'. [ 1078.180110][T20750] netlink: 354 bytes leftover after parsing attributes in process `syz.9.2553'. [ 1078.230174][T20750] FAULT_INJECTION: forcing a failure. [ 1078.230174][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.250595][T20750] CPU: 1 UID: 0 PID: 20750 Comm: syz.9.2553 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1078.250650][T20750] Tainted: [U]=USER [ 1078.250661][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1078.250680][T20750] Call Trace: [ 1078.250689][T20750] [ 1078.250701][T20750] dump_stack_lvl+0x16c/0x1f0 [ 1078.250759][T20750] should_fail_ex+0x512/0x640 [ 1078.250809][T20750] should_failslab+0xc2/0x120 [ 1078.250839][T20750] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1078.250886][T20750] ? ptlock_alloc+0x1f/0x70 [ 1078.250927][T20750] ptlock_alloc+0x1f/0x70 [ 1078.250964][T20750] pte_alloc_one+0x82/0x3a0 [ 1078.251011][T20750] __pte_alloc+0x6d/0x3c0 [ 1078.251041][T20750] ? __pfx___pte_alloc+0x10/0x10 [ 1078.251072][T20750] ? _raw_spin_unlock+0x28/0x50 [ 1078.251122][T20750] ? __pmd_alloc+0x3fb/0x930 [ 1078.251163][T20750] copy_page_range+0x3c54/0x5d90 [ 1078.251224][T20750] ? __pfx_copy_page_range+0x10/0x10 [ 1078.251267][T20750] ? mas_store+0x7a9/0x1160 [ 1078.251298][T20750] ? rcu_is_watching+0x12/0xc0 [ 1078.251331][T20750] ? __pfx___might_resched+0x10/0x10 [ 1078.251364][T20750] ? __pfx_mas_store+0x10/0x10 [ 1078.251396][T20750] ? __vma_enter_locked+0x163/0x3f0 [ 1078.251447][T20750] ? lock_release+0x201/0x2f0 [ 1078.251486][T20750] ? down_write+0x14d/0x200 [ 1078.251519][T20750] ? up_write+0x1b2/0x520 [ 1078.251573][T20750] dup_mmap+0xe88/0x21d0 [ 1078.251617][T20750] ? __pfx_dup_mmap+0x10/0x10 [ 1078.251655][T20750] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1078.251704][T20750] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1078.251762][T20750] ? __pfx___might_resched+0x10/0x10 [ 1078.251795][T20750] ? mm_init+0xd3b/0x13c0 [ 1078.251835][T20750] copy_process+0x4081/0x76a0 [ 1078.251871][T20750] ? preempt_schedule_thunk+0x16/0x30 [ 1078.251919][T20750] ? __pfx_copy_process+0x10/0x10 [ 1078.251955][T20750] ? plist_check_head+0xa3/0x150 [ 1078.251994][T20750] ? futex_wake+0x456/0x530 [ 1078.252040][T20750] ? futex_private_hash_put+0xc7/0x240 [ 1078.252078][T20750] kernel_clone+0xfc/0x960 [ 1078.252114][T20750] ? __pfx_futex_wake+0x10/0x10 [ 1078.252156][T20750] ? __pfx_kernel_clone+0x10/0x10 [ 1078.252197][T20750] ? do_user_addr_fault+0x843/0x1370 [ 1078.252244][T20750] __do_sys_clone+0xce/0x120 [ 1078.252281][T20750] ? __pfx___do_sys_clone+0x10/0x10 [ 1078.252329][T20750] ? syscall_user_dispatch+0x78/0x140 [ 1078.252385][T20750] do_syscall_64+0xcd/0x490 [ 1078.252415][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.252448][T20750] RIP: 0033:0x7fd1fff8e929 [ 1078.252472][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.252504][T20750] RSP: 002b:00007fd200d1afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1078.252536][T20750] RAX: ffffffffffffffda RBX: 00007fd2001b5fa0 RCX: 00007fd1fff8e929 [ 1078.252556][T20750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 1078.252581][T20750] RBP: 00007fd200010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1078.252600][T20750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1078.252618][T20750] R13: 0000000000000000 R14: 00007fd2001b5fa0 R15: 00007ffe5bbb6b68 [ 1078.252648][T20750] [ 1079.142134][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1079.219975][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1079.300716][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1079.386856][T20764] could not allocate digest TFM handle [ 1079.392812][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1079.415276][T20770] ptrace attach of "./syz-executor exec"[19869] was attempted by "./syz-executor exec"[20770] [ 1079.470172][ T51] Bluetooth: hci7: command 0x0c1a tx timeout [ 1079.477107][T18826] Bluetooth: hci6: command 0x0419 tx timeout [ 1079.483507][T20231] Bluetooth: hci5: command 0x0c1a tx timeout [ 1079.489677][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1079.515777][T20764] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2557'. [ 1080.348797][T20785] Invalid ELF header magic: != ELF [ 1080.860017][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2564'. [ 1081.112560][ T30] audit: type=1800 audit(4295007137.000:30): pid=20811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2566" name="members" dev="configfs" ino=77924 res=0 errno=0 [ 1081.544289][T20814] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2567'. [ 1081.553717][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2567'. [ 1081.857554][T20813] bridge_slave_1: left allmulticast mode [ 1081.887971][T20813] bridge_slave_1: left promiscuous mode [ 1081.963423][T20813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.971382][T20831] FAULT_INJECTION: forcing a failure. [ 1081.971382][T20831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.987997][T20813] bridge_slave_0: left allmulticast mode [ 1081.997980][T20813] bridge_slave_0: left promiscuous mode [ 1081.998196][T20831] CPU: 1 UID: 0 PID: 20831 Comm: syz.8.2569 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1081.998252][T20831] Tainted: [U]=USER [ 1081.998264][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1081.998283][T20831] Call Trace: [ 1081.998295][T20831] [ 1081.998306][T20831] dump_stack_lvl+0x16c/0x1f0 [ 1081.998367][T20831] should_fail_ex+0x512/0x640 [ 1081.998424][T20831] _copy_from_user+0x2e/0xd0 [ 1081.998480][T20831] copy_msghdr_from_user+0x98/0x160 [ 1081.998541][T20831] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1081.998602][T20831] ? __pfx__kstrtoull+0x10/0x10 [ 1081.998643][T20831] ? aa_file_perm+0x4c7/0xfb0 [ 1081.998694][T20831] ___sys_sendmsg+0xfe/0x1d0 [ 1081.998750][T20831] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.998813][T20831] ? rcu_is_watching+0x12/0xc0 [ 1081.998862][T20831] __sys_sendmmsg+0x200/0x420 [ 1081.998897][T20831] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1081.998928][T20831] ? lock_release+0x201/0x2f0 [ 1081.998978][T20831] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1081.999032][T20831] ? fput+0x70/0xf0 [ 1081.999065][T20831] ? ksys_write+0x1ac/0x250 [ 1081.999112][T20831] ? __pfx_ksys_write+0x10/0x10 [ 1081.999165][T20831] __x64_sys_sendmmsg+0x9c/0x100 [ 1081.999195][T20831] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1081.999250][T20831] do_syscall_64+0xcd/0x490 [ 1081.999281][T20831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.999317][T20831] RIP: 0033:0x7fdd39b8e929 [ 1081.999344][T20831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.999378][T20831] RSP: 002b:00007fdd3aa19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1081.999412][T20831] RAX: ffffffffffffffda RBX: 00007fdd39db6240 RCX: 00007fdd39b8e929 [ 1081.999438][T20831] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 000000000000000a [ 1081.999459][T20831] RBP: 00007fdd3aa19090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.999481][T20831] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1081.999503][T20831] R13: 0000000000000000 R14: 00007fdd39db6240 R15: 00007ffd2f31e6f8 [ 1081.999538][T20831] [ 1082.259551][T20813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.288553][T20824] could not allocate digest TFM handle [ 1082.848306][T20841] could not allocate digest TFM handle [ 1084.866808][T20888] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1085.015456][T20892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 1085.232294][T20893] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 1085.906323][T20897] could not allocate digest TFM handle [ 1086.044746][T20897] FAULT_INJECTION: forcing a failure. [ 1086.044746][T20897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.063806][T20897] CPU: 1 UID: 0 PID: 20897 Comm: syz.9.2580 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1086.063857][T20897] Tainted: [U]=USER [ 1086.063868][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1086.063886][T20897] Call Trace: [ 1086.063896][T20897] [ 1086.063906][T20897] dump_stack_lvl+0x16c/0x1f0 [ 1086.063959][T20897] should_fail_ex+0x512/0x640 [ 1086.064007][T20897] _copy_from_user+0x2e/0xd0 [ 1086.064058][T20897] ____sys_sendmsg+0x607/0xc70 [ 1086.064098][T20897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.064138][T20897] ? __pfx__kstrtoull+0x10/0x10 [ 1086.064175][T20897] ? aa_file_perm+0x4c7/0xfb0 [ 1086.064219][T20897] ___sys_sendmsg+0x134/0x1d0 [ 1086.064268][T20897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.064325][T20897] ? rcu_is_watching+0x12/0xc0 [ 1086.064370][T20897] __sys_sendmmsg+0x200/0x420 [ 1086.064400][T20897] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1086.064427][T20897] ? lock_release+0x201/0x2f0 [ 1086.064470][T20897] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1086.064506][T20897] ? fput+0x70/0xf0 [ 1086.064534][T20897] ? ksys_write+0x1ac/0x250 [ 1086.064578][T20897] ? __pfx_ksys_write+0x10/0x10 [ 1086.064624][T20897] __x64_sys_sendmmsg+0x9c/0x100 [ 1086.064653][T20897] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1086.064710][T20897] do_syscall_64+0xcd/0x490 [ 1086.064739][T20897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.064771][T20897] RIP: 0033:0x7fd1fff8e929 [ 1086.064794][T20897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.064825][T20897] RSP: 002b:00007fd200d1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1086.064855][T20897] RAX: ffffffffffffffda RBX: 00007fd2001b5fa0 RCX: 00007fd1fff8e929 [ 1086.064874][T20897] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 000000000000000a [ 1086.064891][T20897] RBP: 00007fd200d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.064910][T20897] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1086.064928][T20897] R13: 0000000000000000 R14: 00007fd2001b5fa0 R15: 00007ffe5bbb6b68 [ 1086.064956][T20897] [ 1086.577285][ T30] audit: type=1800 audit(4295007150.467:31): pid=20909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2581" name="dbroot" dev="configfs" ino=78210 res=0 errno=0 [ 1088.149383][T20941] snd_aloop snd_aloop.0: control 4:65539:6:'x?F/zF˷fC:7 is already present [ 1088.842513][T20947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1088.852790][T20947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1088.877099][T20947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1088.883737][T20947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1088.894152][T20947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1088.917962][T20947] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1088.930478][T20947] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1088.959171][T20947] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1089.642024][T20960] could not allocate digest TFM handle [ 1089.773000][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2592'. [ 1090.193685][T20983] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.60), cmd(5) [ 1090.510164][T20987] netlink: 'syz.7.2596': attribute type 1 has an invalid length. [ 1090.896620][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1090.896682][T20184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1090.902900][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1090.909139][T20231] Bluetooth: hci4: command 0x0c1a tx timeout [ 1090.909179][T20231] Bluetooth: hci1: command 0x0406 tx timeout [ 1090.987841][ T51] Bluetooth: hci7: command 0x0c1a tx timeout [ 1090.987862][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1090.987908][T20184] Bluetooth: hci6: command 0x0419 tx timeout [ 1091.353292][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2599'. [ 1091.521067][T21004] could not allocate digest TFM handle [ 1091.611041][T21004] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2600'. [ 1091.696239][T21012] could not allocate digest TFM handle [ 1092.163107][T21026] bond0: option all_slaves_active: invalid value () [ 1092.172239][T21030] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1093.304239][ T30] audit: type=1800 audit(4295007157.187:32): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2607" name="SYSV00000007" dev="tmpfs" ino=0 res=0 errno=0 [ 1093.862936][T21075] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1094.167191][T21082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1094.182840][T21082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1094.231004][T21082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1094.237860][T21082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.244211][T21082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1094.252701][T21087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 1094.286025][T21082] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1094.292324][T21082] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1094.298733][T21082] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1094.347934][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1094.356874][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1094.365369][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1094.378611][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1094.408043][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1094.661417][T21083] chnl_net:caif_netlink_parms(): no params data found [ 1094.847828][T21099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1094.869520][T21099] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1094.875653][T21099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1094.936586][T21099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.968349][T21099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1094.978061][T21083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.985598][T21083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.991732][T21099] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1094.996646][T21083] bridge_slave_0: entered allmulticast mode [ 1095.008826][T21083] bridge_slave_0: entered promiscuous mode [ 1095.017292][T21083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.025009][T21083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.032602][T21083] bridge_slave_1: entered allmulticast mode [ 1095.042654][T21083] bridge_slave_1: entered promiscuous mode [ 1095.058700][T21099] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1095.065050][T21099] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1095.072575][T21099] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1095.078774][T21099] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1095.131578][T21099] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1095.147028][T21083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.168485][T21083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.313612][T21108] vhci_hcd: not connected 4 [ 1095.367951][T21083] team0: Port device team_slave_0 added [ 1095.384921][T21083] team0: Port device team_slave_1 added [ 1095.443556][T21087] ovs_: entered promiscuous mode [ 1095.476254][T21083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.572267][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.598897][T21083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.612168][T21083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.626650][T21083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.655554][T21083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.751980][T21117] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1095.769346][T21083] hsr_slave_0: entered promiscuous mode [ 1095.775869][T21083] hsr_slave_1: entered promiscuous mode [ 1095.783727][T21083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.792867][T21083] Cannot create hsr debugfs directory [ 1095.802720][T21117] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1096.287544][T21135] zswap: compressor not available [ 1096.612612][ T30] audit: type=1800 audit(4295007160.457:33): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2627" name="version" dev="configfs" ino=78812 res=0 errno=0 [ 1096.620062][T21083] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.671116][T21083] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.701306][T21083] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1096.725389][T21083] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1096.900878][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1096.900900][T18826] Bluetooth: hci1: command 0x0406 tx timeout [ 1096.913906][T20184] Bluetooth: hci4: command 0x0c1a tx timeout [ 1096.977959][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1096.985163][T20184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1097.056724][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1097.136963][T18826] Bluetooth: hci7: command 0x0c1a tx timeout [ 1097.137255][ T51] Bluetooth: hci6: command 0x0419 tx timeout [ 1097.143489][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1097.380277][T21083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.428554][T21083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.466222][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.473536][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.557624][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.564909][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.762444][T21186] netlink: zone id is out of range [ 1097.776030][T21186] netlink: zone id is out of range [ 1097.830973][T21186] netlink: zone id is out of range [ 1097.836197][T21186] netlink: zone id is out of range [ 1097.902789][T21186] netlink: zone id is out of range [ 1097.923835][T21196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1097.926499][T21186] netlink: get zone limit has 8 unknown bytes [ 1098.210224][T21083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.274459][T21083] veth0_vlan: entered promiscuous mode [ 1098.292506][T21083] veth1_vlan: entered promiscuous mode [ 1098.341946][T21083] veth0_macvtap: entered promiscuous mode [ 1098.363165][T21083] veth1_macvtap: entered promiscuous mode [ 1098.407295][T21083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.422996][T21083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.454196][T21083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.474465][T21083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.488833][T21083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.505655][T21083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.660986][T21083] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 1098.752378][T21083] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1098.761752][ T9324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.776431][ T9324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.875573][T11120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.916427][T11120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.159932][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1099.200469][T21243] netlink: 354 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1099.216879][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1099.292930][T21243] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1099.323149][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1099.634286][T21259] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2640'. [ 1100.093020][T20184] Bluetooth: hci7: unexpected event 0x3e length: 726 > 260 [ 1100.093064][T20184] Bluetooth: hci7: unexpected subevent 0x0e length: 725 > 15 [ 1100.132140][T20184] Bluetooth: hci7: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1100.822811][T21297] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2644'. [ 1100.881758][T21294] netlink: 198 bytes leftover after parsing attributes in process `syz.7.2644'. [ 1101.296749][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1101.527113][T21317] FAULT_INJECTION: forcing a failure. [ 1101.527113][T21317] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.594760][T21317] CPU: 0 UID: 0 PID: 21317 Comm: syz.8.2648 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1101.594800][T21317] Tainted: [U]=USER [ 1101.594808][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1101.594822][T21317] Call Trace: [ 1101.594829][T21317] [ 1101.594837][T21317] dump_stack_lvl+0x16c/0x1f0 [ 1101.594878][T21317] should_fail_ex+0x512/0x640 [ 1101.594916][T21317] should_failslab+0xc2/0x120 [ 1101.594938][T21317] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1101.594974][T21317] ? security_inode_alloc+0x3b/0x2b0 [ 1101.595002][T21317] security_inode_alloc+0x3b/0x2b0 [ 1101.595027][T21317] inode_init_always_gfp+0xce4/0x1030 [ 1101.595062][T21317] alloc_inode+0x86/0x240 [ 1101.595084][T21317] sock_alloc+0x40/0x280 [ 1101.595109][T21317] __sock_create+0xc1/0x8d0 [ 1101.595139][T21317] __sys_socket+0x14d/0x260 [ 1101.595168][T21317] ? __pfx___sys_socket+0x10/0x10 [ 1101.595198][T21317] ? xfd_validate_state+0x61/0x180 [ 1101.595226][T21317] ? __pfx___do_sys_swapon+0x10/0x10 [ 1101.595263][T21317] __x64_sys_socket+0x72/0xb0 [ 1101.595303][T21317] do_syscall_64+0xcd/0x490 [ 1101.595325][T21317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.595349][T21317] RIP: 0033:0x7fdd39b8e929 [ 1101.595366][T21317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.595390][T21317] RSP: 002b:00007fdd3aa7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1101.595412][T21317] RAX: ffffffffffffffda RBX: 00007fdd39db5fa0 RCX: 00007fdd39b8e929 [ 1101.595428][T21317] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000025 [ 1101.595443][T21317] RBP: 00007fdd39c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1101.595458][T21317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.595472][T21317] R13: 0000000000000000 R14: 00007fdd39db5fa0 R15: 00007ffd2f31e6f8 [ 1101.595495][T21317] [ 1101.595515][T21317] socket: no more sockets [ 1101.806986][T21312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1101.813297][T21312] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1101.885666][T21312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1101.951061][T21312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1101.981080][T21312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1102.007505][T21312] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1102.051222][T21312] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1102.089515][T21312] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1102.113649][T21312] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1103.865452][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1103.871732][T20184] Bluetooth: hci4: command 0x0c1a tx timeout [ 1103.936649][T20184] Bluetooth: hci2: command 0x0c1a tx timeout [ 1104.016462][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1104.022647][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1104.022693][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1104.098820][T20184] Bluetooth: hci6: command 0x0419 tx timeout [ 1104.098839][T18826] Bluetooth: hci7: command 0x0c1a tx timeout [ 1104.177244][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1106.257074][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1106.459935][T21437] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1106.749604][T21434] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1106.935220][T21434] team0: Port device team_slave_0 removed [ 1108.299704][T21488] can: request_module (can-proto-0) failed. [ 1108.346592][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1108.478684][T21488] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input66 [ 1108.994995][T21511] ima: policy update failed [ 1109.047686][ T30] audit: type=1802 audit(4295007172.937:34): pid=21511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2671" res=0 errno=0 [ 1109.079230][T21511] ima: policy update failed [ 1109.083964][ T30] audit: type=1802 audit(4295007172.967:35): pid=21511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2671" res=0 errno=0 [ 1109.219466][T21518] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1109.427735][T21509] Invalid ELF header magic: != ELF [ 1109.611069][T21530] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1109.689489][T21529] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1109.963171][T21542] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1110.161317][T21542] FAULT_INJECTION: forcing a failure. [ 1110.161317][T21542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1110.220369][T21542] CPU: 0 UID: 0 PID: 21542 Comm: syz.2.2675 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1110.220423][T21542] Tainted: [U]=USER [ 1110.220435][T21542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.220455][T21542] Call Trace: [ 1110.220465][T21542] [ 1110.220476][T21542] dump_stack_lvl+0x16c/0x1f0 [ 1110.220547][T21542] should_fail_ex+0x512/0x640 [ 1110.220599][T21542] should_fail_alloc_page+0xe7/0x130 [ 1110.220633][T21542] prepare_alloc_pages+0x3c2/0x610 [ 1110.220671][T21542] ? rcu_is_watching+0x12/0xc0 [ 1110.220705][T21542] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1110.220758][T21542] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1110.220932][T21542] ? css_rstat_updated+0x9d/0xd30 [ 1110.220971][T21542] ? rcu_is_watching+0x12/0xc0 [ 1110.221004][T21542] ? lock_release+0x201/0x2f0 [ 1110.221044][T21542] ? rcu_is_watching+0x12/0xc0 [ 1110.221075][T21542] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1110.221125][T21542] ? __mod_zone_page_state+0xcc/0x1a0 [ 1110.221196][T21542] ? lock_acquire+0x2cd/0x350 [ 1110.221237][T21542] ? rcu_is_watching+0x12/0xc0 [ 1110.221266][T21542] ? lock_acquire+0x2cd/0x350 [ 1110.221306][T21542] ? lock_release+0x201/0x2f0 [ 1110.221345][T21542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1110.221394][T21542] ? policy_nodemask+0xea/0x4e0 [ 1110.221425][T21542] alloc_pages_mpol+0x1fb/0x550 [ 1110.221455][T21542] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1110.221483][T21542] ? lock_release+0x201/0x2f0 [ 1110.221527][T21542] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1110.221567][T21542] vma_alloc_folio_noprof+0xed/0x1e0 [ 1110.221603][T21542] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1110.221639][T21542] ? __handle_mm_fault+0x1092/0x5490 [ 1110.221680][T21542] ? rcu_is_watching+0x12/0xc0 [ 1110.221711][T21542] ? lock_release+0x201/0x2f0 [ 1110.221755][T21542] __handle_mm_fault+0x2f21/0x5490 [ 1110.221802][T21542] ? __pfx___handle_mm_fault+0x10/0x10 [ 1110.221862][T21542] ? __pte_offset_map_lock+0x174/0x310 [ 1110.221904][T21542] ? follow_page_pte+0x3af/0x14c0 [ 1110.221944][T21542] handle_mm_fault+0x589/0xd10 [ 1110.221989][T21542] __get_user_pages+0x589/0x3b80 [ 1110.222029][T21542] ? __pfx_mt_find+0x10/0x10 [ 1110.222062][T21542] ? __pfx___get_user_pages+0x10/0x10 [ 1110.222101][T21542] ? __pfx___might_resched+0x10/0x10 [ 1110.222135][T21542] ? cap_capable+0xb3/0x250 [ 1110.222168][T21542] populate_vma_page_range+0x278/0x3a0 [ 1110.222209][T21542] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1110.222247][T21542] ? __pfx_find_vma_intersection+0x10/0x10 [ 1110.222283][T21542] ? do_mmap+0x69c/0x1210 [ 1110.222321][T21542] __mm_populate+0x1d8/0x380 [ 1110.222359][T21542] ? __pfx___mm_populate+0x10/0x10 [ 1110.222398][T21542] ? up_write+0x1b2/0x520 [ 1110.222446][T21542] vm_mmap_pgoff+0x362/0x450 [ 1110.222478][T21542] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1110.222514][T21542] ? __x64_sys_futex+0x1e0/0x4c0 [ 1110.222552][T21542] ? __x64_sys_futex+0x1e9/0x4c0 [ 1110.222595][T21542] ksys_mmap_pgoff+0x7d/0x5c0 [ 1110.222636][T21542] ? xfd_validate_state+0x61/0x180 [ 1110.222681][T21542] __x64_sys_mmap+0x125/0x190 [ 1110.222730][T21542] do_syscall_64+0xcd/0x490 [ 1110.222760][T21542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.222794][T21542] RIP: 0033:0x7fc7efd8e929 [ 1110.222869][T21542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.222910][T21542] RSP: 002b:00007fc7f0c33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1110.222943][T21542] RAX: ffffffffffffffda RBX: 00007fc7effb5fa0 RCX: 00007fc7efd8e929 [ 1110.222966][T21542] RDX: 00000000000000df RSI: 0000000000440009 RDI: 0000000000000000 [ 1110.222986][T21542] RBP: 00007fc7efe10b39 R08: 0000000000000007 R09: 0000000000028000 [ 1110.223005][T21542] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1110.223024][T21542] R13: 0000000000000000 R14: 00007fc7effb5fa0 R15: 00007ffe8858d718 [ 1110.223055][T21542] [ 1110.610603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.426906][T21566] caif:caif_disconnect_client(): nothing to disconnect [ 1111.988411][T21575] HfR: entered promiscuous mode [ 1112.800138][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2681'. [ 1113.014577][T21600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1113.021039][T21600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1113.044628][T21600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1113.050983][T21600] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1113.062257][T21600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1113.074134][T21600] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1113.090526][T21600] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1113.124422][T21600] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1113.153239][T21600] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1113.635451][T21628] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1114.367391][T20184] Bluetooth: hci6: unexpected subevent 0x19 length: 252 > 28 [ 1114.375632][T20184] Bluetooth: hci6: Unable to find connection with handle 0xc3d2 [ 1115.053284][T18826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1115.055689][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1115.060005][T20231] Bluetooth: hci1: command 0x0406 tx timeout [ 1115.073196][T20184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1115.132936][T20184] Bluetooth: hci7: command 0x0c1a tx timeout [ 1115.142785][T20184] Bluetooth: hci6: command 0x0419 tx timeout [ 1115.142975][T18826] Bluetooth: hci5: command 0x0c1a tx timeout [ 1115.148845][T20184] Bluetooth: hci3: command 0x0c1a tx timeout [ 1115.213879][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1116.248517][T21717] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1117.897946][T21744] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1118.005953][T21757] FAULT_INJECTION: forcing a failure. [ 1118.005953][T21757] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.025847][T21750] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1118.064359][T21757] CPU: 0 UID: 0 PID: 21757 Comm: syz.7.2701 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1118.064415][T21757] Tainted: [U]=USER [ 1118.064429][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1118.064447][T21757] Call Trace: [ 1118.064458][T21757] [ 1118.064470][T21757] dump_stack_lvl+0x16c/0x1f0 [ 1118.064527][T21757] should_fail_ex+0x512/0x640 [ 1118.064579][T21757] should_failslab+0xc2/0x120 [ 1118.064609][T21757] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1118.064652][T21757] ? rcu_is_watching+0x12/0xc0 [ 1118.064682][T21757] ? snd_pcm_oss_open+0x5eb/0x1400 [ 1118.064723][T21757] snd_pcm_oss_open+0x5eb/0x1400 [ 1118.064767][T21757] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1118.064806][T21757] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 1118.064847][T21757] ? __pfx_default_wake_function+0x10/0x10 [ 1118.064881][T21757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.064919][T21757] ? do_raw_spin_lock+0x12c/0x2b0 [ 1118.064968][T21757] ? rcu_is_watching+0x12/0xc0 [ 1118.064999][T21757] ? lock_release+0x201/0x2f0 [ 1118.065039][T21757] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1118.065075][T21757] soundcore_open+0x409/0x580 [ 1118.065107][T21757] ? __pfx_soundcore_open+0x10/0x10 [ 1118.065145][T21757] chrdev_open+0x231/0x6a0 [ 1118.065193][T21757] ? __pfx_apparmor_file_open+0x10/0x10 [ 1118.065235][T21757] ? __pfx_chrdev_open+0x10/0x10 [ 1118.065285][T21757] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1118.065334][T21757] do_dentry_open+0x744/0x1c10 [ 1118.065380][T21757] ? __pfx_chrdev_open+0x10/0x10 [ 1118.065434][T21757] vfs_open+0x82/0x3f0 [ 1118.065470][T21757] path_openat+0x1de4/0x2cb0 [ 1118.065520][T21757] ? __pfx_path_openat+0x10/0x10 [ 1118.065572][T21757] do_filp_open+0x20b/0x470 [ 1118.065618][T21757] ? __pfx_do_filp_open+0x10/0x10 [ 1118.065679][T21757] ? alloc_fd+0x471/0x7d0 [ 1118.065726][T21757] do_sys_openat2+0x11b/0x1d0 [ 1118.065761][T21757] ? __pfx_do_sys_openat2+0x10/0x10 [ 1118.065804][T21757] __x64_sys_openat+0x174/0x210 [ 1118.065842][T21757] ? __pfx___x64_sys_openat+0x10/0x10 [ 1118.065888][T21757] do_syscall_64+0xcd/0x490 [ 1118.065918][T21757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.065952][T21757] RIP: 0033:0x7f36fbb8e929 [ 1118.065977][T21757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.066010][T21757] RSP: 002b:00007f36fc9c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1118.066043][T21757] RAX: ffffffffffffffda RBX: 00007f36fbdb5fa0 RCX: 00007f36fbb8e929 [ 1118.066064][T21757] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1118.066084][T21757] RBP: 00007f36fbc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1118.066103][T21757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.066133][T21757] R13: 0000000000000000 R14: 00007f36fbdb5fa0 R15: 00007ffd5e343288 [ 1118.066166][T21757] [ 1119.963547][T21790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1119.982677][T21790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1120.028721][T21790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1120.108214][T21790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1120.162529][T21790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.226885][T21790] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1120.344247][T21790] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1120.373774][T21790] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1120.418155][T21790] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1120.710477][T21813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1120.743245][T21813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1120.775367][T21813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1120.812959][T21813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1120.859466][T21813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1120.888655][T21813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1120.942474][T21813] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1120.996686][T21813] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1121.032013][T21813] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1121.671774][T21845] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1122.309663][T21865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 1122.458796][T21857] ubi0: attaching mtd0 [ 1122.475374][T21857] ubi0: scanning is finished [ 1122.499762][T21857] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1122.740199][T20184] Bluetooth: hci1: command 0x0406 tx timeout [ 1122.819103][T20184] Bluetooth: hci2: command 0x0c1a tx timeout [ 1122.819108][T20231] Bluetooth: hci4: command 0x0c1a tx timeout [ 1122.898784][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1122.900942][T20231] Bluetooth: hci3: command 0x0c1a tx timeout [ 1122.904943][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1122.978728][T20184] Bluetooth: hci6: command 0x0419 tx timeout [ 1123.021994][T21857] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1123.058877][T18826] Bluetooth: hci7: command 0x0c1a tx timeout [ 1123.064978][T20184] Bluetooth: hci8: command 0x041b tx timeout [ 1123.365941][T21890] random: crng reseeded on system resumption [ 1123.384580][T21890] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1123.445789][T21890] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1123.480427][T21890] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1123.490043][T21890] PM: hibernation: Basic memory bitmaps created [ 1123.498487][T21890] PM: hibernation: Basic memory bitmaps freed [ 1123.742323][T21904] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1123.891090][T21904] uinput: write device info first [ 1124.941796][T21941] can: request_module (can-proto-0) failed. [ 1125.075282][T21948] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 1126.063013][T21971] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1126.496259][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.502882][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.697648][T21987] netlink: 334 bytes leftover after parsing attributes in process `syz.9.2725'. [ 1127.504465][T22004] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2729'. [ 1127.514372][T22004] tc_dump_action: action bad kind [ 1128.940360][T18826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1128.948870][T18826] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1128.957068][T18826] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1128.965195][T18826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1128.972837][T18826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1129.173012][T22021] chnl_net:caif_netlink_parms(): no params data found [ 1129.224047][T22034] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1129.291709][T22036] KVM: debugfs: duplicate directory 22036-3 [ 1129.384508][T22021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.392344][T22021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.399758][T22021] bridge_slave_0: entered allmulticast mode [ 1129.411924][T22021] bridge_slave_0: entered promiscuous mode [ 1129.420801][T22021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.428210][T22021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.436497][T22021] bridge_slave_1: entered allmulticast mode [ 1129.443858][T22021] bridge_slave_1: entered promiscuous mode [ 1129.479626][T22021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.525000][T22021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.598808][T22021] team0: Port device team_slave_0 added [ 1129.608460][T22021] team0: Port device team_slave_1 added [ 1129.626534][T22047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1129.648955][T22021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.658259][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.684296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.697095][T22047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1129.718417][T22047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1129.736555][T22021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.751557][T22047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1129.767838][T22047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1129.775019][T22021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.787274][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.814402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1129.821540][T22047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1129.828290][T22047] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1129.835059][T22047] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1129.843334][T22047] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1129.861437][T22021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.904848][T22047] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1129.964988][T22047] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1129.972842][T22047] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1129.984305][T22021] hsr_slave_0: entered promiscuous mode [ 1129.991161][T22021] hsr_slave_1: entered promiscuous mode [ 1129.997914][T22021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.012480][T22021] Cannot create hsr debugfs directory [ 1130.041805][T22051] FAULT_INJECTION: forcing a failure. [ 1130.041805][T22051] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.067986][T22051] CPU: 0 UID: 0 PID: 22051 Comm: syz.9.2737 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1130.068044][T22051] Tainted: [U]=USER [ 1130.068056][T22051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1130.068078][T22051] Call Trace: [ 1130.068088][T22051] [ 1130.068100][T22051] dump_stack_lvl+0x16c/0x1f0 [ 1130.068155][T22051] should_fail_ex+0x512/0x640 [ 1130.068206][T22051] ? constrain_params_by_rules+0x175/0xca0 [ 1130.068244][T22051] should_failslab+0xc2/0x120 [ 1130.068272][T22051] __kmalloc_noprof+0xd2/0x510 [ 1130.068317][T22051] ? unwind_get_return_address+0x59/0xa0 [ 1130.068369][T22051] constrain_params_by_rules+0x175/0xca0 [ 1130.068410][T22051] ? stack_trace_save+0x8e/0xc0 [ 1130.068445][T22051] ? stack_depot_save_flags+0x28/0xa40 [ 1130.068495][T22051] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1130.068533][T22051] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1130.068572][T22051] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 1130.068614][T22051] ? __kasan_kmalloc+0xaa/0xb0 [ 1130.068657][T22051] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1130.068695][T22051] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1130.068733][T22051] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1130.068780][T22051] ? snd_interval_refine+0x2fa/0x580 [ 1130.068840][T22051] snd_pcm_hw_refine+0x7de/0xad0 [ 1130.068880][T22051] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1130.068927][T22051] ? _snd_pcm_hw_param_min+0x259/0x630 [ 1130.068965][T22051] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 1130.069007][T22051] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1130.069048][T22051] ? __asan_memset+0x23/0x50 [ 1130.069086][T22051] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1130.069130][T22051] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1130.069179][T22051] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1130.069219][T22051] ? rcu_is_watching+0x12/0xc0 [ 1130.069266][T22051] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1130.069310][T22051] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1130.069350][T22051] ? __fget_files+0x204/0x3c0 [ 1130.069391][T22051] ? hook_file_ioctl_common+0x145/0x410 [ 1130.069427][T22051] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1130.069469][T22051] ? __fget_files+0x20e/0x3c0 [ 1130.069513][T22051] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1130.069555][T22051] __x64_sys_ioctl+0x18e/0x210 [ 1130.069594][T22051] do_syscall_64+0xcd/0x490 [ 1130.069625][T22051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.069658][T22051] RIP: 0033:0x7fd1fff8e929 [ 1130.069683][T22051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.069716][T22051] RSP: 002b:00007fd1fddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.069746][T22051] RAX: ffffffffffffffda RBX: 00007fd2001b6080 RCX: 00007fd1fff8e929 [ 1130.069767][T22051] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 1130.069787][T22051] RBP: 00007fd200010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1130.069813][T22051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.069834][T22051] R13: 0000000000000000 R14: 00007fd2001b6080 R15: 00007ffe5bbb6b68 [ 1130.069865][T22051] [ 1130.389353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1131.143467][T22078] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2739'. [ 1131.281878][T22021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.298997][T22021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.312619][T22021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1131.328015][T22021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.685015][T18826] Bluetooth: hci1: command 0x0406 tx timeout [ 1131.764672][T18826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1131.770868][T20184] Bluetooth: hci2: command 0x0c1a tx timeout [ 1131.770877][T20231] Bluetooth: hci4: command 0x0c1a tx timeout [ 1131.845342][T18826] Bluetooth: hci8: command 0x041b tx timeout [ 1131.851428][T20184] Bluetooth: hci7: command 0x0c1a tx timeout [ 1131.851488][T20231] Bluetooth: hci6: command 0x0419 tx timeout [ 1131.858469][T20184] Bluetooth: hci5: command 0x0c1a tx timeout [ 1131.870579][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1131.900837][T22021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.924781][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1131.998868][T22021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.180983][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.188157][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.329707][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.336940][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.023198][T22021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.087243][T22021] veth0_vlan: entered promiscuous mode [ 1133.138679][T22021] veth1_vlan: entered promiscuous mode [ 1133.222417][T22021] veth0_macvtap: entered promiscuous mode [ 1133.320632][T22021] veth1_macvtap: entered promiscuous mode [ 1133.352220][T22021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.385026][T22021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.446534][T22021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.476685][T22021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.490431][T22021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.499786][T22021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.570441][T22021] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1133.644968][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.647169][T22021] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 1133.682989][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.899822][T16918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.926319][T16918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.013766][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1134.394841][T22156] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 1134.889217][T22159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 1136.082449][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1136.666974][T22207] could not allocate digest TFM handle [ 1137.777773][T22231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1138.161338][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1138.417591][T22257] Invalid ELF header magic: != ELF [ 1140.010555][T18826] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1140.022902][T18826] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1140.032813][T18826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1140.049298][T18826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1140.057278][T18826] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1140.166055][T22286] ubi0: attaching mtd0 [ 1140.178404][T22286] ubi0: scanning is finished [ 1140.187716][T22286] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1140.241339][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1140.459381][T22286] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1140.695793][T22290] chnl_net:caif_netlink_parms(): no params data found [ 1141.031733][T22290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.038923][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.095297][T22290] bridge_slave_0: entered allmulticast mode [ 1141.126110][T22290] bridge_slave_0: entered promiscuous mode [ 1141.149375][T22320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.174733][T22290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.188538][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.255912][T22290] bridge_slave_1: entered allmulticast mode [ 1141.276845][T22290] bridge_slave_1: entered promiscuous mode [ 1141.365811][T22290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.431935][T22290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.762638][T22290] team0: Port device team_slave_0 added [ 1141.812015][T22290] team0: Port device team_slave_1 added [ 1142.034892][T22290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.074685][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.109690][T20184] Bluetooth: hci10: command tx timeout [ 1142.227081][T22290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.238547][T22327] caif:caif_disconnect_client(): nothing to disconnect [ 1142.293807][T22290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.329463][T20184] Bluetooth: hci9: command 0x041b tx timeout [ 1142.331937][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.390437][T22290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.701787][T22353] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1142.746927][T22290] hsr_slave_0: entered promiscuous mode [ 1142.765593][T22290] hsr_slave_1: entered promiscuous mode [ 1142.792240][T22290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.807556][T22290] Cannot create hsr debugfs directory [ 1143.185060][T22290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.295822][T22290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.442736][T22290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.464552][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.489784][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.497871][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.568241][T22290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.579381][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.593956][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.661201][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.723022][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.842153][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.887865][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1143.891349][T22290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1143.928991][T22290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1143.964482][T22290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1143.989521][T22290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1143.998054][T22370] netlink: 'syz.8.2767': attribute type 2 has an invalid length. [ 1144.159111][T20184] Bluetooth: hci10: command tx timeout [ 1144.182036][T22397] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1144.231409][T22290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.322956][T22290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.387805][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.395025][T18944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.544309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.551569][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.171068][T22290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.294301][T22290] veth0_vlan: entered promiscuous mode [ 1145.330592][T22290] veth1_vlan: entered promiscuous mode [ 1145.417437][T22290] veth0_macvtap: entered promiscuous mode [ 1145.434803][T22418] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1145.485930][T22290] veth1_macvtap: entered promiscuous mode [ 1145.524263][T22290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.556329][T22290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.604572][T22290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.629950][T22290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.639464][T22290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.648537][T22290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.679696][ T31] INFO: task syz-executor:8651 blocked for more than 143 seconds. [ 1145.691887][ T31] Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 [ 1145.715897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1145.725200][ T31] task:syz-executor state:D stack:24136 pid:8651 tgid:8651 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1145.738749][ T31] Call Trace: [ 1145.742093][ T31] [ 1145.745067][ T31] __schedule+0x116a/0x5de0 [ 1145.752542][ T31] ? __pfx___schedule+0x10/0x10 [ 1145.758172][ T31] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 1145.764922][ T31] ? shrinker_free+0xfe/0x430 [ 1145.770063][ T31] ? deactivate_locked_super+0x94/0x1a0 [ 1145.776220][ T31] ? cleanup_mnt+0x225/0x450 [ 1145.781737][ T31] ? schedule+0x2d7/0x3a0 [ 1145.786326][ T31] ? rcu_is_watching+0x12/0xc0 [ 1145.802373][ T31] ? lock_release+0x201/0x2f0 [ 1145.807326][ T31] schedule+0xe7/0x3a0 [ 1145.823581][ T31] schedule_preempt_disabled+0x13/0x30 [ 1145.829519][ T31] __mutex_lock+0x6c7/0xb90 [ 1145.834321][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1145.863782][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1145.875559][ T31] ? net_generic+0xea/0x2a0 [ 1145.890276][ T31] ? rcu_is_watching+0x12/0xc0 [ 1145.907352][ T31] ? lock_release+0x201/0x2f0 [ 1145.922313][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1145.940952][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1145.955246][ T31] nfsd_umount+0x48/0xe0 [ 1145.969804][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1145.985552][ T31] deactivate_super+0xde/0x100 [ 1145.997085][ T31] cleanup_mnt+0x225/0x450 [ 1146.006849][ T31] task_work_run+0x150/0x240 [ 1146.017416][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1146.026812][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1146.037323][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1146.050565][ T31] do_syscall_64+0x3f6/0x490 [ 1146.062921][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.076219][ T31] RIP: 0033:0x7f70ecd8fc57 [ 1146.123167][ T31] RSP: 002b:00007ffd261eace8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1146.162063][ T31] RAX: 0000000000000000 RBX: 00007f70ece10925 RCX: 00007f70ecd8fc57 [ 1146.199493][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd261eada0 [ 1146.226949][ T31] RBP: 00007ffd261eada0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.238043][T20184] Bluetooth: hci10: command tx timeout [ 1146.270084][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd261ebe30 [ 1146.287404][ T31] R13: 00007f70ece10925 R14: 00000000000f3a81 R15: 00007ffd261ebe70 [ 1146.295581][ T31] [ 1146.304233][ T31] INFO: lockdep is turned off. [ 1146.317924][ T31] NMI backtrace for cpu 1 [ 1146.317954][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1146.318001][ T31] Tainted: [U]=USER [ 1146.318012][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1146.318030][ T31] Call Trace: [ 1146.318040][ T31] [ 1146.318052][ T31] dump_stack_lvl+0x116/0x1f0 [ 1146.318105][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1146.318141][ T31] ? watchdog+0xd79/0x12c0 [ 1146.318188][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1146.318229][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1146.318273][ T31] watchdog+0xf70/0x12c0 [ 1146.318320][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.318362][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1146.318412][ T31] ? __kthread_parkme+0x19e/0x250 [ 1146.318446][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.318500][ T31] kthread+0x3c2/0x780 [ 1146.318542][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.318585][ T31] ? rcu_is_watching+0x12/0xc0 [ 1146.318616][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.318658][ T31] ret_from_fork+0x5d4/0x6f0 [ 1146.318696][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.318737][ T31] ret_from_fork_asm+0x1a/0x30 [ 1146.318778][ T31] [ 1146.318789][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1146.451835][ C0] NMI backtrace for cpu 0 [ 1146.451858][ C0] CPU: 0 UID: 0 PID: 5900 Comm: kworker/0:5 Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1146.451899][ C0] Tainted: [U]=USER [ 1146.451908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1146.451926][ C0] Workqueue: mld mld_ifc_work [ 1146.451969][ C0] RIP: 0010:csum_partial+0x4/0x60 [ 1146.451999][ C0] Code: e8 01 fd ff ff 5b 5d f7 d0 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 54 41 89 f4 55 89 d5 53 48 89 fb e8 ab 29 b2 fc 44 89 e6 48 89 [ 1146.452024][ C0] RSP: 0018:ffffc900047bfab0 EFLAGS: 00000282 [ 1146.452043][ C0] RAX: dffffc0000000000 RBX: ffff88808c932dc0 RCX: ffffffff8a331e53 [ 1146.452061][ C0] RDX: 0000000000000000 RSI: 000000000000001c RDI: ffff8880392a6040 [ 1146.452077][ C0] RBP: ffff888032560000 R08: 0000000000000003 R09: 000000000000ffff [ 1146.452093][ C0] R10: 0000000000000040 R11: 0000000000000000 R12: ffff888088fa8000 [ 1146.452109][ C0] R13: 0000000000000040 R14: 000000000000001c R15: 000000000000001c [ 1146.452125][ C0] FS: 0000000000000000(0000) GS:ffff888124962000(0000) knlGS:0000000000000000 [ 1146.452149][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1146.452166][ C0] CR2: 0000557b6016f0c8 CR3: 0000000035efa000 CR4: 00000000003526f0 [ 1146.452183][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1146.452198][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1146.452215][ C0] Call Trace: [ 1146.452224][ C0] [ 1146.452232][ C0] mld_sendpack+0x445/0x1220 [ 1146.452275][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1146.452316][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1146.452350][ C0] mld_ifc_work+0x740/0xca0 [ 1146.452391][ C0] process_one_work+0x9cf/0x1b70 [ 1146.452435][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 1146.452468][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1146.452511][ C0] ? assign_work+0x1a0/0x250 [ 1146.452563][ C0] worker_thread+0x6c8/0xf10 [ 1146.452606][ C0] ? __kthread_parkme+0x19e/0x250 [ 1146.452635][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1146.452674][ C0] kthread+0x3c2/0x780 [ 1146.452716][ C0] ? __pfx_kthread+0x10/0x10 [ 1146.452751][ C0] ? rcu_is_watching+0x12/0xc0 [ 1146.452777][ C0] ? __pfx_kthread+0x10/0x10 [ 1146.452812][ C0] ret_from_fork+0x5d4/0x6f0 [ 1146.452847][ C0] ? __pfx_kthread+0x10/0x10 [ 1146.452882][ C0] ret_from_fork_asm+0x1a/0x30 [ 1146.452915][ C0] [ 1146.734326][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1146.741292][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc1-syzkaller-00005-g488ef3560196 #0 PREEMPT(full) [ 1146.754725][ T31] Tainted: [U]=USER [ 1146.758570][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1146.768684][ T31] Call Trace: [ 1146.772004][ T31] [ 1146.775066][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1146.779742][ T31] panic+0x71c/0x800 [ 1146.783712][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1146.789682][ T31] ? __pfx_panic+0x10/0x10 [ 1146.794163][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1146.799603][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1146.805656][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1146.811094][ T31] ? watchdog+0xdda/0x12c0 [ 1146.815587][ T31] ? watchdog+0xdcd/0x12c0 [ 1146.820076][ T31] watchdog+0xdeb/0x12c0 [ 1146.824393][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.829139][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1146.834470][ T31] ? __kthread_parkme+0x19e/0x250 [ 1146.839553][ T31] ? __pfx_watchdog+0x10/0x10 [ 1146.844291][ T31] kthread+0x3c2/0x780 [ 1146.848453][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.853109][ T31] ? rcu_is_watching+0x12/0xc0 [ 1146.857929][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.862589][ T31] ret_from_fork+0x5d4/0x6f0 [ 1146.867329][ T31] ? __pfx_kthread+0x10/0x10 [ 1146.872009][ T31] ret_from_fork_asm+0x1a/0x30 [ 1146.876845][ T31] [ 1146.880211][ T31] Kernel Offset: disabled [ 1146.884567][ T31] Rebooting in 86400 seconds..