last executing test programs: 21m56.197234726s ago: executing program 3 (id=848): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) (async) r1 = prctl$auto(0x4, 0x8135, 0x0, 0x8, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffe, 0x8000) (async) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) prlimit64$auto(0x0, 0xa3d, 0x0, 0x0) (async) read$auto(r2, 0x0, 0x1) (async) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x5, 0x0) write$auto(r3, 0x0, 0x6) (async) ioctl$auto_PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x8001) write$auto(r0, &(0x7f0000000100)='%]{\fZo\xda\x9d\xa0\xd3\xcc\x9aF\xdf2a\xaa]\xd1_8[\xe7d\xe1\xd1xy\"\x04E\x81\x8e\x93\x9b)M\xb0\xfe\xc7_\x00<\x8e\x03\xbbs\xa3\xf0i\xfe\x15\x14\xe3ENw&\x9c\t\x8b<\x99I\f\xb8\xf9\xf9\xe1\x88\x86\xd31\x81UR\x80\xd1\xd0\x7f\xa51\xfao\x01kN\x1a\x9b\x17=1\xb9\x15\xe2(l%\x90\xca\xf8^\x81v\xcc\x82\xf8+7-B=?D', 0x100000000) 21m56.007196125s ago: executing program 3 (id=849): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x4, 0x0, 0x40eb1, 0x401, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) capset$auto(&(0x7f0000000000)={0x31, 0x0}, &(0x7f0000000080)={0x4, 0x4}) prctl$auto(0xcb7, 0x4, r2, 0x9, 0xd06c) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x11, 0x20, 0x0, 0x4) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) epoll_pwait2$auto(r1, &(0x7f0000000100)={0x200, 0x5f}, 0x3ff, &(0x7f0000000180)={0x2, 0x94}, &(0x7f0000000280)={0x100000000}, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 21m52.909413936s ago: executing program 3 (id=856): mmap$auto(0xfffffffffffffffe, 0x400008, 0xdd, 0x80000009b76, 0xffffffffffffffff, 0x3) getrandom$auto(0x0, 0x8008000006000002, 0x7) ioctl$auto(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) mmap$auto(0x3, 0x40007, 0x1000000005, 0x9b73, 0x2, 0x8000) r0 = userfaultfd$auto(0x1) ioctl$auto(r0, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0x80000, 0xfffff9f7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x7fc, 0x4, 0xeb1, r1, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) prctl$auto(0x3e, 0x400001, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xb01, 0x8fd6, 0x948b, 0x6, 0x35f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0x9]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xa5\xc7\xf7|\xc6\xa2\xc9\x1cR\xbd\xf5Zo\xb8{$\xec\xc0\xcd\xfc\xba\x80\xe5\xe5\xfd+\x96gc\x03\x8e\xea\xcc^1\xf2\x1d\xf8n3-\x97\x16\x96\xe0\xf1\x81k\xa3\xab\xf2&\x98\x13\x04\xf0\x92\x0f@\x15\x88K\xd9dt\xecV\xee\x95\xaf\x1c\xc9\xbe\x85\xc5rW\n\x9d\xbf\xea\xea%e7\xe4>\x863\xd8T\xf4\xc7W\xf1\xa9\x90\xff\xf5\xf8:I\xd9BM\x86\xd46\xeckR\x99\xc6\x14\x03e\nw\x99\xe5\x19]\xfa\xf4\xfdt\xb4\xa1\x04\xff\x14s\xfc\xfa\xa2\xfcpB\xc6oO^3\x7fp\xad\xca\xa8\xa5g\xb6\xe6\xbe\n\xa8{\x83\x8e\xb0f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x3, 0x400008, 0xb71, 0x13, r0, 0x7fffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, 0x0, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r3 = socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r3) socket$nl_generic(0x10, 0x3, 0x10) 21m50.646970345s ago: executing program 3 (id=865): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) socket(0x1d, 0x3, 0x1) 21m49.905680635s ago: executing program 3 (id=866): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0x1, 0xeb1, r1, 0xff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r2 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x220001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x5, 0x4, 0x800005) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) remap_file_pages$auto(0x46a27, 0x1003, 0x0, 0xb74, 0x66a) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) fstat$auto(r2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), 0xffffffffffffffff) 21m49.415015061s ago: executing program 32 (id=866): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0x1, 0xeb1, r1, 0xff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r2 = socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x220001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioperm$auto(0x5, 0x4, 0x800005) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) remap_file_pages$auto(0x46a27, 0x1003, 0x0, 0xb74, 0x66a) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) fstat$auto(r2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), 0xffffffffffffffff) 18m53.711291189s ago: executing program 4 (id=1391): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r0 = socket(0x1d, 0x2, 0x7) bind$auto(r0, &(0x7f0000000000)=@can, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = timerfd_create$auto(0x7, 0x0) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x2) bind$auto(r1, 0x0, 0x9) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/034/001\x00', 0x80142, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)=0x81) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) close_range$auto(0x2, 0x8, 0x0) 18m53.141812452s ago: executing program 4 (id=1393): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) socket(0x18, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x4) fallocate$auto(0x8000000000000003, 0x0, 0xb, 0x4cbd5d) setsockopt$auto(r0, 0x10000000084, 0x22, 0x0, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sockstat6\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0x200000000009, 0xfc) unshare$auto(0x40000080) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x569300, 0x120) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x40601, 0x0) socket(0x2, 0x2, 0x88) open(&(0x7f0000000100)='./file0\x00', 0x40801, 0x175) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(r4, 0x0, 0x3) ptrace$auto(0xd, r3, 0x4, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000140)={0xa0000, 0xfffffffffffffffc, 0x98, 0x4, 0x4, 0x6, 0x3ff, 0x8000, 0x2b0e, 0x6, 0x9, 0xffff, 0x3, 0x9, 0x6ff5}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)) futex_waitv$auto(&(0x7f00000004c0)={0x3, 0x1, 0xcb, 0x100}, 0x40, 0x0, &(0x7f0000000500)={0xe2, 0xff}, 0x0) mmap$auto(0x0, 0x80003, 0xffd, 0x8000000008012, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x1) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000300)="9a0050c109d0a32a27f9cdecc9cd2dc000282894a3f24477a83300ee06733424dded15d0e33edae3f869402bae70dbd1b53a9c6db30f487a13da4702c002a0b71362cb3c98f3610f57bb69e7", 0x4c) 18m48.143576916s ago: executing program 4 (id=1407): socket(0x2, 0x6, 0xb) 18m47.630802293s ago: executing program 4 (id=1409): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (async) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r1, 0x0, @_sigev_thread={0x0, 0x0}}) (async) mq_notify$auto(r1, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r1, 0x0, @_sigev_thread={0x0, 0x0}}) read$auto(r0, 0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) rseq$auto(&(0x7f0000000040)={0x3, 0x3, 0x5, 0x2, 0x1, 0x1000, "96b42e185bc7b442693ab1eb25e5d1094e91bcfc27af09165b42c32a131674d3fab35339c6f09483c9ada20806ae24077be9a108cc061372ea23c679c16dd303a7f2355ff201cb26c01644fab51c25e67b8098f50d8aee9dae706613f8c421b203a85e0f4f1d28372919c6b996d5277d659d18c8ff4a27bf43bd3fe721119293a7d0d9237d9aba8b9c75182b1d63253c4eb2b9ea3ddb981ce4f9006e86ebeec6e84adda171333ee20902ca6ac0dbe1da9b1232f6e08ad413c62dac9ee2749cd4268efc0524a19780dca1d1d1f6848bae0cb7a99d84bb0346"}, 0x7f, 0x3, 0x7f) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 18m38.696570384s ago: executing program 4 (id=1434): write$auto(0xffffffffffffffff, &(0x7f0000000040)='1\b\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x93QH\a', 0x81) r0 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x74, 0x9, 0x3, 0x11, r0, 0x3) 18m38.237250767s ago: executing program 4 (id=1437): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x80000000, 0x1) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x80000000, 0x6, 0x6f7244f1, 0x2, 0x9, 0x3, r2, [0x8, 0x81, 0x3], {0x841, 0x3, 0x6, 0x5, 0xe2e, 0x1, 0xc159, 0xffff, 0x2}, {0x0, 0x227, 0x2, 0xb6, 0x5, 0x5, 0xc, 0x9, 0x6}}) arch_prctl$auto(0x1021, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r2, 0x8001) getpid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0xa) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 18m23.087389311s ago: executing program 33 (id=1437): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x80000000, 0x1) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x80000000, 0x6, 0x6f7244f1, 0x2, 0x9, 0x3, r2, [0x8, 0x81, 0x3], {0x841, 0x3, 0x6, 0x5, 0xe2e, 0x1, 0xc159, 0xffff, 0x2}, {0x0, 0x227, 0x2, 0xb6, 0x5, 0x5, 0xc, 0x9, 0x6}}) arch_prctl$auto(0x1021, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) pread64$auto(r3, 0x0, 0xa0, 0xf86) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r2, 0x8001) getpid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0xa) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 11m1.710563054s ago: executing program 0 (id=2875): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = socket(0x2, 0x3, 0xa) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, r1, 0x0, 0xfdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000140)={0x10, 0x20401, 0x2000005fc, 0x10000006, 0xfffffffd, 0x9, "51b09dda79c2e937de3c6d44c1a7a2b843dfc4bee52c6829ea9d69a0f224acd9ce9368135e68f8105a4df41244f1a10d952100024f5aa496057114692d09d36457ddca81645b1526b665bbf1c362adbe7a614b083bf3e3dba66568195979c94d8a77672ce9d536132087d55602a5610c3f08c8"}, 0x3d, 0x0, 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 11m1.367816435s ago: executing program 0 (id=2876): prctl$auto(0x200008, 0x4, 0x0, 0x3, 0xfffffffffffffffe) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xde, 0x12, 0xffffffffffffffff, 0x28000) (rerun: 64) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x20000000, 0x800020007, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x13, 0x0, 0x20) unshare$auto(0x40000080) unshare$auto(0x40000080) (async) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x6880, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000180)) r2 = ioctl$auto_NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) (async, rerun: 32) bpf$auto(0x200000d, 0x0, 0x9) (async, rerun: 32) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x3, &(0x7f0000000180)="1d3e23c068b844b0ee56838053d6af6444fdf49e8a44943146d4461d17130adec3c5bd3765eec614140a2167d29ea83d3de9c81f9d14449f9c945aae92b19858a4c4b732a7f19834e90d1d00136a030c43335c9cc5b35ade1435382ce31b540b6bcfe9d6b9db5f10d9b1178ab9dba0e64e9dce6804b27ae7bd") madvise$auto(0xd29, 0x53, 0x0) (async) r3 = socket(0x2b, 0x3, 0x6) sendmmsg$auto(r3, 0x0, 0x2, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async, rerun: 32) socket(0x200000000000011, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x6, 0x5) (async, rerun: 64) sendfile$auto(0x6, 0x3, 0x0, 0xc01) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="810b27bd7000ffdbdf250100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c009b49", @ANYRES16=r5, @ANYBLOB="000127bd7000fedbdf256d0000000800a10007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4c814) 10m56.691270093s ago: executing program 0 (id=2887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, 0xe04}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_BSSID={0x5a, 0xf5, "3cbb77047e59f25d0cc68d458e2757b9cac41b9855f0907b81cdbb810883d96e7b7e615ef17bece613081eee0c62c5c79d5b5b95b8270c5b4b461d8709490979e1bce35697bb66d3570ca794aff3acde7b7c3281c861"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0xff}}, @NL80211_ATTR_HT_CAPABILITY={0x53, 0x1f, "1150e96e3ed8d5bc38c3a18dabcb7b44dcfe2a344f158ad58719446db03c88a6f282cca7550e94df1c21a9e1342d1b34b84457c6a40ad9fb7fd7401604452b0231da25d6e20d5a7e4f8a6ac84f7505"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x3}]}, 0xf0}}, 0x4008004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f0000000c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000480)={0x794, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_PROBE_RESP={0x779, 0x91, "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"}]}, 0x794}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002d80)={0x3c, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x1000c000) r5 = socket(0x23, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) lsetxattr$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=':$\x9a/:\x00', &(0x7f0000000100)="de42ae5249e2367ec1b4957990149b6f6d8aa05d05742fa8572110f4790211096537885059309b834c958453733d36534275285ff26e10a29be3f495c900f76141dbb2ec481836d8b2615a51621aee91279affc7a47eb5116135d35640872e6e4a21f6426dd3731b63ebdf42e20f8503f6dc15acec9aeaaaecd9be13a66dfaa432ebcd051af434fff7ce48c80574b74a0ae448c258a946f266c7c9609f88cb48934a7a90f3ae4cfd3039a65fd889affa2fe262f268729cbac678c2b4363237a82da61b255aa0379cfe44e0afe91e1ed52c0c7eb24dff78486aca005eed7229772e71d7579f17417b78c1463c", 0x0, 0xfffffffd) getsockopt$auto_SO_BSDCOMPAT(r5, 0x1, 0xe, &(0x7f0000000000)=':$\x9a/:\x00', &(0x7f0000000040)=0xfff) 10m56.363852661s ago: executing program 0 (id=2888): mmap$auto(0x0, 0x2000f, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) sysfs$auto(0x2, 0x4b, 0x0) (async) fsopen$auto(0x0, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r0 = socket(0x23, 0x3, 0x0) (async) syslog$auto(0x4, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c800}, 0x8004) 10m56.13138323s ago: executing program 0 (id=2891): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendfile$auto(r0, r1, &(0x7f0000000080)=0x80, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi18\x00', 0xc0400, 0x0) close_range$auto(0x2, r3, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x200444d4) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x20000, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) 10m54.631137071s ago: executing program 0 (id=2895): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') fchdir$auto(r0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, r3) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x7e4a, &(0x7f00000002c0)="3adfbe9c5e479d32cbc8e8ddf8ee8cab2dcc26f14401d47b90e39b8a245fada0a5933d0334b4127b76ab7d44889ec94f1186cabc4bfabc116e102a85eed4ec5daaa53f756b99dfa8f0ae47bf14d0bfe448f98193c52040593d3a885004357eab0bd7452a46ecf7efbed31e3be27cea801d41ded1ed35b27de414723f6986dfd1a07ed33306d45dd8d294c3bcc8f3d98332351ca66fe98ca0d05f", 0x1, &(0x7f0000000440)="ed7f8e5bc39832ecf2da1b3e5f4ce2c9fe1a95c84a88e4cc39d222e43e672a23060708e2a965605f1cf6b163beca9661bfabf3362cf99b023eed26052fd4cc9ee6e4374957e68c328a5a95abbcf020e3dd59c7a95af69c823a73a188659da85ffdfa696e11b9a9db9712e42d168c22f3a203e4fbaea3ac01f1c2fb99da3fe256c4b2ecf3b042d5e830ab09dc28f1f7afb95f0a3ae721bd7c43ff26238c7b1015d8f1d713", &(0x7f00000000c0)=0x4}) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$auto(r1, &(0x7f0000000080)='macsec\x00', &(0x7f0000000540)="4406c9be3aa26d4c5355b2155dd5a8b257765811061611861ad795aea39c67e0a8052247eb461509a7d92a40435f111db6133646ee0da4a6c2066d2fcd59f8df274f6fae296ca9d6451f44c42fad2216aea51da8e0b8c3c3ef6be5f308bad9a074ed309dbc71b50bd8c38af4ed1beb02cbf9c7c7143e6b5fdac2d75db9c3816f5990618c8451cab4b9db207c6f7eda4cffc2bc53d7fa12c478348929213fec145224ed7a05f2d8ffd550283e6c9f1f952294f3973493165da6444fb715983d25c12aab942fa24c1be7006856f4044cb695bc742deccb16db2373e0710fb8d755d441cc80a6c2", 0x1800000000000, 0x9) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="f72ee8acf6ae12c32b000000", @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400128012000100898771f1c19f17790485908286dd000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x20084804) readv$auto(r5, &(0x7f0000000680)={&(0x7f0000000540), 0x2040200}, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r8 = socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r8, 0x0, 0x4004) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r9 = open(0x0, 0x101000, 0x0) socket(0x1d, 0x3, 0x1) read$auto_trace_options_fops_trace(r9, &(0x7f0000000380)=""/173, 0xad) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000280)={{0x3, 0x10000, 0x0, 0x7, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0x0) 10m39.570884603s ago: executing program 34 (id=2895): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') fchdir$auto(r0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r3 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, r3) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x7e4a, &(0x7f00000002c0)="3adfbe9c5e479d32cbc8e8ddf8ee8cab2dcc26f14401d47b90e39b8a245fada0a5933d0334b4127b76ab7d44889ec94f1186cabc4bfabc116e102a85eed4ec5daaa53f756b99dfa8f0ae47bf14d0bfe448f98193c52040593d3a885004357eab0bd7452a46ecf7efbed31e3be27cea801d41ded1ed35b27de414723f6986dfd1a07ed33306d45dd8d294c3bcc8f3d98332351ca66fe98ca0d05f", 0x1, &(0x7f0000000440)="ed7f8e5bc39832ecf2da1b3e5f4ce2c9fe1a95c84a88e4cc39d222e43e672a23060708e2a965605f1cf6b163beca9661bfabf3362cf99b023eed26052fd4cc9ee6e4374957e68c328a5a95abbcf020e3dd59c7a95af69c823a73a188659da85ffdfa696e11b9a9db9712e42d168c22f3a203e4fbaea3ac01f1c2fb99da3fe256c4b2ecf3b042d5e830ab09dc28f1f7afb95f0a3ae721bd7c43ff26238c7b1015d8f1d713", &(0x7f00000000c0)=0x4}) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$auto(r1, &(0x7f0000000080)='macsec\x00', &(0x7f0000000540)="4406c9be3aa26d4c5355b2155dd5a8b257765811061611861ad795aea39c67e0a8052247eb461509a7d92a40435f111db6133646ee0da4a6c2066d2fcd59f8df274f6fae296ca9d6451f44c42fad2216aea51da8e0b8c3c3ef6be5f308bad9a074ed309dbc71b50bd8c38af4ed1beb02cbf9c7c7143e6b5fdac2d75db9c3816f5990618c8451cab4b9db207c6f7eda4cffc2bc53d7fa12c478348929213fec145224ed7a05f2d8ffd550283e6c9f1f952294f3973493165da6444fb715983d25c12aab942fa24c1be7006856f4044cb695bc742deccb16db2373e0710fb8d755d441cc80a6c2", 0x1800000000000, 0x9) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="f72ee8acf6ae12c32b000000", @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400128012000100898771f1c19f17790485908286dd000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x20084804) readv$auto(r5, &(0x7f0000000680)={&(0x7f0000000540), 0x2040200}, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r8 = socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r8, 0x0, 0x4004) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r9 = open(0x0, 0x101000, 0x0) socket(0x1d, 0x3, 0x1) read$auto_trace_options_fops_trace(r9, &(0x7f0000000380)=""/173, 0xad) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000280)={{0x3, 0x10000, 0x0, 0x7, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0x0) 7.295192159s ago: executing program 5 (id=5203): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x601, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)="16274a4edd") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) 7.13638023s ago: executing program 2 (id=5204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) pread64$auto(0xffffffffffffffff, 0x0, 0xe5, 0x40) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ram10\x00', 0x6600, 0x0) 6.979212824s ago: executing program 5 (id=5205): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x33, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) (async) socket(0x15, 0x80000, 0x1fd) (async) stat$auto(0x0, &(0x7f00000001c0)={0x101, 0x9, 0x4, 0xffffffff, 0xee01, 0x0, 0x0, 0x3, 0x800000000000, 0x9, 0x7, 0x0, 0x1, 0x5, 0x8000, 0x4, 0x7}) (async) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, 0x0, 0x800) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee1, 0x0) 6.959950062s ago: executing program 2 (id=5206): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x200000000003, 0x2f4a3a23) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/bond0/ignore_routes_with_linkdown\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x801, 0x84) setsockopt$auto(r3, 0x10000000084, 0x7f, 0x0, 0x6) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x40086602, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) socket(0xf, 0x3, 0x2) process_madvise$auto_MADV_DONTNEED_LOCKED(0xffffffffffffffff, 0x0, 0x9, 0x18, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_buffer_subbuf_size_fops_trace(r4, &(0x7f0000000240)=""/250, 0xfa) 6.762704738s ago: executing program 6 (id=5207): ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x7ff, 0x5, 0x2, 0x4, 0x6}, "073f30a031f41a274a3009a0bdaa7ff3531c081060285c460a213823a786ddf3"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2, 0x0) r0 = fsmount$auto(0xffffffffffffffff, 0x400, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1, 0x0) setsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x3f2c0, 0x43, &(0x7f0000000040)='^\x00', 0x4) r1 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim3/ports/2/ipsec\x00', 0x2000, 0x0) ioctl$auto(r0, 0x3ff, r1) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x14200, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) setsockopt$auto_SO_INCOMING_CPU(r2, 0x7c, 0x31, &(0x7f0000000140)='\\]&[\x00', 0x1) r4 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x1, 0x2) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000180), 0x400240, 0x0) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r3) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20048081) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1, 0x0) write$auto(r5, &(0x7f0000000300)='^\x00', 0x8001) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) ioctl$auto_FITHAW(r4, 0xc0045878, 0x4b0) syz_clone3(&(0x7f0000001580)={0x8a809800, &(0x7f0000000440)=0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0), {0x14}, &(0x7f0000000500)=""/4096, 0x1000, &(0x7f0000001500)=""/30, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r3}}, 0x58) syz_clone3(&(0x7f0000001800)={0x20040000, &(0x7f0000001600)=0xffffffffffffffff, &(0x7f0000001640)=0x0, &(0x7f0000001680), {0x3e}, &(0x7f00000016c0)=""/30, 0x1e, &(0x7f0000001700)=""/182, &(0x7f00000017c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r3}}, 0x58) shmctl$auto(0x4, 0x200, &(0x7f00000019c0)={{0x1000, 0x0, 0xffffffffffffffff, 0x4, 0xb, 0x7, 0x4}, 0xb, 0xda3f, 0x3, 0x9, @inferred=0xffffffffffffffff, @inferred, 0x3, 0x0, &(0x7f0000001880)="e3878c0f2b0c5625b81dc7b007442e672f2259bdba79b148c475b81b509b1205545c38e2b58fae3084ba08bee25a", &(0x7f00000018c0)="04951f11b53289f6de31879a41d527ebcb18258256f7b1ec67477ddcab788849fbe31a17b8b40d4ca1bcc12cb3dfc62baa4863b48af9300acd10217bff2418b200da440e1dd88e3ec99698c0db01b1c7f5726ee64d370374e8b4de16e05338ca83b5ef000f9a5b3775312cbb1f686a392d17330bcc0e4e535ed24b5df8dbca04686b0097bc18cc6bfb80835ab8d7a730b7383e92e8af2913ae2ab122f65ccf8dfa4e94d91f2c613285f190ae6f7c6c3d562408010790d28768ce61270ae775f475a3e8e3bc9d8f700575"}) waitid$auto_P_PIDFD(0x3, r7, &(0x7f0000001a40)={@siginfo_0_0={0x1, 0x81, 0x0, @_kill={r9, r10}}}, 0x2, &(0x7f0000001ac0)={{0x8, 0x2}, {0x7, 0x17c5}, 0xffffffffffffffff, 0xbb, 0x5, 0x6, 0x1ff, 0x100, 0xb, 0x5, 0x8136, 0x8cf, 0x9, 0x5, 0x1ff, 0x400}) setsockopt$auto(r8, 0x80, 0x100, &(0x7f0000001b80)='\x00', 0x10) r11 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/rx_duplicates\x00', 0x200, 0x0) signalfd$auto(r11, &(0x7f0000001c40)={0x836}, 0x9) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001cc0), r3) r14 = fcntl$getown(r11, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d00)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r12, &(0x7f0000002280)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002240)={&(0x7f0000001d40)={0x4dc, r13, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xe6}, @NL80211_ATTR_FILS_KEK={0x25, 0xf2, "7e70998713bab820d2db9a883939c86862b2aa1a4833289e396b4c02915c7ea461"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}, @NL80211_ATTR_CSA_IES={0x41d, 0xb9, 0x0, 0x1, [@generic="e871907e43449b7eb4d5bb6f1d66428fce341468ee72583f0484c4e699da2a9f8dceeda6984991d667209d697b7fdfbd65e19d6163f730c98e2c7da9824bf15bb108e4fe87ba22", @generic="6cd91de805ffc9014ad6aeadca9273809957b36bdd5c", @nested={0x37e, 0x4f, 0x0, 0x1, [@generic="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", @generic="e3", @typed={0x8, 0x111, 0x0, 0x0, @fd=r4}, @generic="24a443acfa94fd08c0ac606075001e7538dc5f0ac8f0a9945ce0f9f8c1a69479a4d1da96ef0f6ddf7b751c86319b4d51498ff5c26fa05e463e1c3640ff77175c73f331a6fd104a85e104bab75a7d995e8762997e8825e1e51cc45048ed77ab0862be8f838cc6269b91a30bee011a53c226468e785c55c6d1b1603787428d525c1d3137b2fef1fc02c42bd49e93d57f12bb7b919d0910b13bb5b859967b3a0712b3474d63d1c670a302a540baf8980814323beaf0d41994d55a969fe5973571814b5dbee5d2e26125e34e11182753127bc9aaff485af77a8144fbbdf8cbe290f673790c40a1201af5671fcdc53931543cf7c6fa4e51d0", @nested={0x4, 0x149}, @nested={0x4, 0x50}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x8}, @generic="eadb85aac8ba17e1c7a55d7befa88943baa1e16015cdd0f10ff7de0313da5a31d5e17582394edf200fbe1c657f73c17b6fa2c92c03b642ab54e1a3432e2d5769cec5ef055be82635bf8e60adfd2ad0f2a4c494a0befd9e07d97c4fe22680727b6e5693b85e1b6c2fb5067c3078b294b1644b9008af78b94733396ce500a97db74acafe2d981db470fa191115d409b7d729566dfb9ef9a45afd729fb8d7900bf9e09739fd5217b5e9650640348d341ee4667c1b158a09791cd5b0ac5750e63e6283dfaed339", @generic="cb742573be29b6e519418a3beb4bb94fddca08132de2f3104c9134404f9497dbbeb1c16a7758607d1a6882a9e9bde7173d73ceda3108c218839c89c84b96a22cba69455d7a795f81067b3fe3519ba9db4f8958efdbce217019d8a3c4922ab2b05806b853c02b1ab9f3e259446d190d992406e3c1a82b6e56797862758c632c43cac9197fa239f548126221d0ff54aacdc938333287931adf6083400abd452f39552ac6dfd8e9f012d9b594"]}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@private1}, @nested={0xc, 0x12, 0x0, 0x1, [@typed={0x4, 0x39}, @nested={0x4, 0xa6}]}, @typed={0x8, 0x134, 0x0, 0x0, @pid=r14}, @nested={0x14, 0x13, 0x0, 0x1, [@nested={0x4, 0x136}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @nested={0x4, 0x119}]}]}, @NL80211_ATTR_MBSSID_CONFIG={0x3c, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xf0}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x70}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x2}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r15}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_BSSID={0x26, 0xf5, "da10d7d58141e455d78d373e31332dd9b9321bc5f44f38cdfecec029a26477fae323"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x4dc}, 0x1, 0x0, 0x0, 0xb004}, 0x4) 6.444705809s ago: executing program 6 (id=5209): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x5) r1 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r1, 0x4, 0x8000040006) ptrace$auto(0xf, r1, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptybd\x00', 0x6202, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0x3, 0x1, 0x62, 0x80000022, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) 6.310932091s ago: executing program 2 (id=5211): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) socket(0x10, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) semctl$auto(0x4, 0x804, 0x13, 0x46) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x8000000003, 0x62, 0x8000001f, 0x40007, 0x4, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter6\x00', 0x8000, 0x0) pread64$auto(r1, 0x0, 0xf429, 0xb) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.870331686s ago: executing program 5 (id=5212): mmap$auto(0x0, 0x6, 0x10000, 0x16, 0x2, 0x7ffc) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x230, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x20c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x13e, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x38}, {0x30}]}, @NL80211_PMSR_ATTR_PEERS={0x104, 0x5, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xc, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x0, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x4c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0x0, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40081, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) 5.093787714s ago: executing program 2 (id=5214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) pread64$auto(0xffffffffffffffff, 0x0, 0xe5, 0x40) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ram10\x00', 0x6600, 0x0) 4.986646032s ago: executing program 6 (id=5215): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf250200000008000800", @ANYRES32=r4, @ANYBLOB="1400018008000200060000000800010003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002300)='/dev/ttype\x00', 0x189e41, 0x0) ioctl$auto_TIOCMSET(r5, 0x5418, &(0x7f0000002340)="5cc1afe076860802c7612aac8961fbb2179bb0ee11ff195fa84a8ae56095397fec8dda3176ef7fe2fcba866fd522652e27f1bf00a4b60216") mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nr_requests\x00', 0x129102, 0x0) r6 = setfsuid$auto(0x0) setuid$auto(r6) shmctl$auto_SHM_STAT_ANY(0xfffffff0, 0xf, &(0x7f0000000200)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffff0, 0x2, 0x3, 0x9}, 0x7, 0xf, 0x7fff, 0x400, @raw=0x3, @raw=0x9, 0x5, 0x0, &(0x7f00000000c0)="3711817029f58fc051db48ae0d9db19df04e2c3e2c06b1b771fc54ae94da45bae06ebaa17d2402b630e79cfb676f1f9b3d8d4d8afefb4089026f4f5f388bb246c664cfe23e96eac97278204a307868445231851371506e01759cb1963ceaca795e23ef2e91e00ec1b434c1731a943a3dba75dd9f30073cb246ca0bd390eadc7c5ea4fd922f79c2a20551248af0f15e9b3bb5da9ac3e3f86a0455c0f8a7cd5286ae010ad4fab0f5394d869c0c3e1d", &(0x7f0000000180)="e0aef284ab5ecf79d427e5d169f425acb3ac2744d65e0bc31455255d685e350cef34e32d8780bd0cb9dea42c9df04885500cff2875acc9bc9468bdb5da5ad98cab33f18818c36871a79bf2653367ff3269ae8ac5087db38b9803e2058ba902edd9bfd4c836ccb6ea5f8529ab097cd1344974138c718d6caf"}) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000040)={0x2, 0x2, 0x6, 0x8, 0x7, 0xffffffffffffffff}) futex$auto(0x0, 0x81, 0x1ffb, 0x0, 0x0, 0xa2) shmctl$auto(0x2, 0x6, &(0x7f0000002280)={{0x8, r6, r7, 0xffffffff, 0x8, 0x6, 0x6}, 0x8, 0x4, 0xfffffffc, 0x3, @raw=0xa, @inferred=r8, 0x4, 0x0, &(0x7f0000000280)="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", &(0x7f0000001280)="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"}) 4.752159799s ago: executing program 2 (id=5216): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lseek$auto(r1, 0x1, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xa0009, 0x4000000000df, 0xebf, r0, 0x8004) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x20004804) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x20007, 0x8000, 0x20000000000eb5, r2, 0x6) newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x40) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) rseq$auto(&(0x7f0000000300)={0x7, 0x159c4bf4, 0x5192, 0x7, 0x8, 0x0, "2d8d114e6530b6630e4a9702d903e924a92ca4ee93be447b23d4fa56e3e6bb5129e5eec843bb563b88943280e17755c7f14aa9f9fdc6eedfd9318a4edbefb78eb97a277ca1b9fb23ec551e4c85daecb80c4828a538fa568aa53e4893922bf5385bac28e6356ee1a95aa0cda2dbf2fe7dc79be5d8d9c555259629f3a31fa0d0b935442c03e69ff0d87337606bcddba1"}, 0xf01faf31, 0x80000000, 0x101) r4 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0xc) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000e37e821db67eacf78ca82891688d61cfacb9e9219b7d9155ff0197d8f13b928e73b50bc20951bff1e81b5276c56f52a4f906bd45a37ebe1f326481a8cbe2915e1736fcdb80c88acdabfe5522eb02369ee4484d5052457eb784e9abcd29bc9aaa3bb6dc13c81696f1f59e", @ANYRES16=r6, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x18, 0xa, 0x400) 4.615390752s ago: executing program 5 (id=5217): socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) (rerun: 32) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x0, 0x7, 0x100000000000d, 0x8fd6, 0x948b, 0x6, 0x6, 0x3, 0x5514328, 0x0, 0x80000001, 0x800, 0x9, 0x9, 0x9, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket(0x26, 0x1, 0x8000100) (async) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32) socket(0x2b, 0x1, 0x1) (async, rerun: 32) recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x4, 0x0, 0x5, 0x80000003}, 0x1}, 0x2, 0x6, 0x0) (async, rerun: 32) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/erspan0/accept_source_route\x00', 0xa0202, 0x0) (rerun: 32) sendfile$auto(r2, r2, 0x0, 0x7fffe000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7) (async) mmap$auto(0x0, 0x13c, 0xdf, 0x9b72, 0x2, 0x8) (async, rerun: 32) open(0x0, 0x1e1401, 0xe5) (rerun: 32) tkill$auto(0x0, 0x7) (async) write$auto(0x3, 0x0, 0x100082) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) 4.452058854s ago: executing program 1 (id=5218): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(r0, 0x0, 0x3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) 3.759813128s ago: executing program 1 (id=5219): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) write$auto(r2, &(0x7f0000000000)='\x04>\x01\x05\x00\x04\x00!\x00\xb6', 0x7c) 3.635310692s ago: executing program 6 (id=5220): madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x9, 0x0, 0x20008004) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) write$auto(0x3, 0x0, 0x5c8) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x22000, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x5, 0x2bc5) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 2.724497071s ago: executing program 1 (id=5221): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket(0x29, 0x2, 0x0) socket(0x21, 0x2, 0x2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msync$auto(0x0, 0xd94e, 0x4) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x400019, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r2, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x9, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}, 0xa, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) pkey_free$auto(0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgctl$auto(0x0, 0x3, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) 2.619495355s ago: executing program 5 (id=5222): prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0) poll$auto(&(0x7f0000000f80)={r0, 0x2}, 0x98, 0x5) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) 2.558099056s ago: executing program 6 (id=5223): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffd2b) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) prctl$auto(0x2, 0x6, 0x0, 0x800000100000000, 0x9) (async) wait4$auto(0xfffffffffffffffb, 0x0, 0x2, 0xfffffffffffffffc) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff2) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r3, 0x4008af24, r1) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) (async) socket(0x3, 0x4, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 2.32343375s ago: executing program 5 (id=5224): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x3, 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20300, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) flock$auto(r2, 0x4) (async) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000002c0)='-', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002140)=""/4094, 0xffe) (async) memfd_secret$auto(0x0) (async) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) (async) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r4 = ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2081, 0x0) (async) unshare$auto(0x40000080) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x2aa00b6e) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x10000005, 0x2) (async) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) poll$auto(0x0, 0x4, 0x100004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40) (async) r5 = semctl$auto_GETPID(0x4, 0x1, 0xb, 0xffffffffffffffff) (async) r6 = getpgrp(0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000300)=@link_create={@map_fd=r0, @target_ifindex=r7, 0x0, 0xfff, @netfilter={0x4, 0x6, 0x3, 0x4}}, 0x200) (async) rt_tgsigqueueinfo$auto(r5, r6, 0x1, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x0, 0x4, @_sigpoll={0x1000, r3}}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) 1.507366896s ago: executing program 2 (id=5225): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x3}, 0x2}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\xa6-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) (async, rerun: 32) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (rerun: 32) socket(0x29, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi18\x00', 0xc0400, 0x0) (rerun: 64) close_range$auto(0x2, r1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) sendmsg$auto_TIPC_NL_NET_SET(r1, 0x0, 0x200444d4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 927.381613ms ago: executing program 1 (id=5226): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0x28, 0x1, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf253000000008009e000a00000004006c000600b500d9000000fc000e80f700030040aad91f8e15de3e38c99c42cc32167d3b5699e205b2570b71766dbadd1b7d80b14c10b9baf257c0297e25cf7e7660f559409e3550111e00e0c5066eddc794bd4e2029ec9b82d9dbf74ee03bf57dcd24a2fa4c99a1491fadb62e66094184a2af3cfa7305498b904d22916da43e"], 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008815) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya7\x00', 0x169701, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x80002, 0x0) 574.098483ms ago: executing program 1 (id=5227): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = memfd_create$auto(0x0, 0x4) (async, rerun: 64) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/lo\x00', 0x40000, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0xff) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0x6, 0x1, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) r4 = socket(0x2, 0x0, 0xa) clock_nanosleep$auto(0x0, 0x2, 0x0, &(0x7f0000000340)={0x66, 0x6}) (async) sendmmsg$auto(r4, &(0x7f0000000080)={{&(0x7f0000000140), 0x76b, &(0x7f0000000280)={0x0, 0x4b}, 0x4, 0x0, 0x6, 0x800}, 0x7}, 0x8, 0x7fff) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) (async) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0x800, 0x15) (async) acct$auto(0x0) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x62b82, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4f04d233, 0xfffffffb, 0xffffffffffffffff, @relative_fd=r5, 0x5}, 0x3) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 64) ioctl$auto(0x3, 0xae41, r6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x1, 0x200007, 0x19) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) 183.43763ms ago: executing program 1 (id=5228): r0 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82, 0x0) bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0xf, 0x6, 0x26, r1}, 0x99) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_sectorsizes\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) r5 = socket(0x2, 0x1, 0x106) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r6, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b4d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b2338", 0x60) getsockopt$auto(r5, 0x6, 0x6, 0xfffffffffffffffc, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) select$auto(0x6, &(0x7f0000000240)={[0x324b, 0x5000000000000, 0x8, 0x4, 0x4, 0x100000001, 0x95, 0x9, 0x3000000000, 0x7, 0x0, 0x4, 0x9, 0x1, 0x2, 0x2]}, &(0x7f00000002c0)={[0x36d, 0x1, 0xe, 0x7, 0x8c76, 0x3, 0xfffffffffffffffb, 0xd4c, 0x64ed, 0x5, 0x81, 0x100000000000, 0x0, 0x3, 0x8000000000000001, 0x7]}, &(0x7f0000000340)={[0xffff, 0xb, 0xc, 0x400, 0x734ab7c3, 0x8, 0xe, 0xa, 0x8, 0x1, 0x2, 0xffffffff, 0x1, 0xfffffffffffffffc, 0xff, 0x6]}, &(0x7f00000003c0)={0x80000001, 0x9f7f}) 0s ago: executing program 6 (id=5229): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x60342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x60342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) (async) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) r2 = socket(0xa, 0x6, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) (async) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) (async) write$auto(0x3, 0x0, 0x5c8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/can/rcvlist_sff\x00', 0x400, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/can/rcvlist_sff\x00', 0x400, 0x0) pread64$auto(r4, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x400, 0x0) read$auto(r5, 0x0, 0x4) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f00000012c0)) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)="62a5ff2ca2e4fc1b71b7faed4a286671cfffc95aaf26ae818fe160f9d99a6903ebc1a48a04e92ba729405a21a6534a63fcfa7edcd09ee96d24f29eb282670cd3896eb6e4ae85e5604d2f043ca5f74bb9e3a221cbca2062ff682ed0043d778601f7ddcc20a71944a950f96b7ecfe36a74f28b8f05120702afed7f6f3b119a8f00c190032643a68cd388265cc9", 0x8) (async) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)="62a5ff2ca2e4fc1b71b7faed4a286671cfffc95aaf26ae818fe160f9d99a6903ebc1a48a04e92ba729405a21a6534a63fcfa7edcd09ee96d24f29eb282670cd3896eb6e4ae85e5604d2f043ca5f74bb9e3a221cbca2062ff682ed0043d778601f7ddcc20a71944a950f96b7ecfe36a74f28b8f05120702afed7f6f3b119a8f00c190032643a68cd388265cc9", 0x8) bpf$auto(0xfffffffc, &(0x7f0000000780)=@task_fd_query={0x0, r3, 0x2f5d, 0x3, 0xffffffffffffffff, 0x34, r2, 0x3, 0x6}, 0xa3) (async) bpf$auto(0xfffffffc, &(0x7f0000000780)=@task_fd_query={0x0, r3, 0x2f5d, 0x3, 0xffffffffffffffff, 0x34, r2, 0x3, 0x6}, 0xa3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) lstat$auto(0x0, 0x0) unshare$auto(0x40000080) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             [ 1525.513684][T31501] phram: not enough arguments [ 1525.524457][T31502] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 1526.077849][T31516] blktrace: Concurrent blktraces are not allowed on ram7 [ 1526.126863][T31514] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4788'. [ 1526.503336][T31532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'. [ 1527.632827][T31551] program syz.1.4800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1527.663477][T31545] program syz.1.4800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1527.932951][T31543] random: crng reseeded on system resumption [ 1529.176807][T31574] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 1529.595271][T31575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 1532.223584][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4811'. [ 1533.022055][T31638] i2c i2c-0: delete_device: Can't parse I2C address [ 1533.053452][T31631] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4813'. [ 1533.985296][T31650] CIFS: VFS: Invalid SecurityFlags: [ 1534.227108][T31285] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1534.227149][T31285] Bluetooth: hci0: unexpected subevent 0x0a length: 725 > 30 [ 1535.413567][T31674] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1535.714271][ T30] audit: type=1800 audit(4294967356.742:61): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4821" name="file0" dev="tmpfs" ino=277 res=0 errno=0 [ 1535.800126][ T30] audit: type=1800 audit(4294967356.742:62): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4821" name="file0" dev="tmpfs" ino=277 res=0 errno=0 [ 1535.849220][T31678] [U]  [ 1535.852050][T31678] [U] [ 1535.854767][T31678] [U] [ 1535.857477][T31678] [U] [ 1535.877000][T31678] [U] [ 1535.879737][T31678] [U] [ 1535.882453][T31678] [U] [ 1535.885144][T31678] [U] [ 1535.941356][T31678] [U] [ 1535.944081][T31678] [U] [ 1535.946766][T31678] [U] [ 1535.949469][T31678] [U] [ 1536.026764][T31678] [U] [ 1536.029532][T31678] [U] [ 1536.032253][T31678] [U] [ 1536.034972][T31678] [U] [ 1536.097297][T31678] [U] [ 1536.100023][T31678] [U] [ 1536.102811][T31678] [U] [ 1536.105506][T31678] [U] [ 1536.271334][T31678] [U] [ 1536.274086][T31678] [U] [ 1536.276793][T31678] [U] [ 1536.279498][T31678] [U] [ 1536.302326][T31678] [U] [ 1536.305094][T31678] [U] [ 1536.308024][T31678] [U] [ 1536.310750][T31678] [U] [ 1536.316033][T31678] [U] [ 1536.318777][T31678] [U] [ 1536.321493][T31678] [U] [ 1536.324223][T31678] [U] [ 1536.328915][T31678] [U] [ 1536.331653][T31678] [U] [ 1536.334364][T31678] [U] [ 1536.337061][T31678] [U] [ 1536.702843][T31678] [U] [ 1536.705572][T31678] [U] [ 1536.708251][T31678] [U] [ 1536.710942][T31678] [U] [ 1536.730710][T31678] [U] [ 1536.733469][T31678] [U] [ 1536.736286][T31678] [U] [ 1536.739090][T31678] [U] [ 1536.762777][T31678] [U] [ 1536.765528][T31678] [U] [ 1536.768233][T31678] [U] [ 1536.771016][T31678] [U] [ 1537.156425][T31678] [U] [ 1537.159174][T31678] [U] [ 1537.161851][T31678] [U] [ 1537.164532][T31678] [U] [ 1537.231648][T31678] [U] [ 1537.234397][T31678] [U] [ 1537.237078][T31678] [U] [ 1537.239754][T31678] [U] [ 1537.300687][T31678] [U] [ 1537.303451][T31678] [U] [ 1537.306174][T31678] [U] [ 1537.308867][T31678] [U] [ 1537.337310][T31678] [U] [ 1538.781266][T31709] kexec: Could not allocate control_code_buffer [ 1540.192016][T31742] FAULT_INJECTION: forcing a failure. [ 1540.192016][T31742] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.239983][T31742] CPU: 1 UID: 0 PID: 31742 Comm: syz.2.4836 Tainted: G U syzkaller #0 PREEMPT(full) [ 1540.240010][T31742] Tainted: [U]=USER [ 1540.240016][T31742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1540.240025][T31742] Call Trace: [ 1540.240031][T31742] [ 1540.240038][T31742] dump_stack_lvl+0x16c/0x1f0 [ 1540.240063][T31742] should_fail_ex+0x512/0x640 [ 1540.240083][T31742] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1540.240101][T31742] should_failslab+0xc2/0x120 [ 1540.240120][T31742] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1540.240136][T31742] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1540.240152][T31742] ? watch_queue_init+0x45/0x170 [ 1540.240174][T31742] watch_queue_init+0x45/0x170 [ 1540.240193][T31742] create_pipe_files+0x676/0x9a0 [ 1540.240215][T31742] do_pipe2+0xaf/0x1c0 [ 1540.240234][T31742] ? __pfx_do_pipe2+0x10/0x10 [ 1540.240253][T31742] ? xfd_validate_state+0x61/0x180 [ 1540.240278][T31742] __x64_sys_pipe2+0x54/0x80 [ 1540.240297][T31742] do_syscall_64+0xcd/0x490 [ 1540.240317][T31742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.240332][T31742] RIP: 0033:0x7ff61678ebe9 [ 1540.240345][T31742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.240360][T31742] RSP: 002b:00007ff6149f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1540.240374][T31742] RAX: ffffffffffffffda RBX: 00007ff6169b5fa0 RCX: 00007ff61678ebe9 [ 1540.240384][T31742] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 1540.240393][T31742] RBP: 00007ff616811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1540.240402][T31742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.240411][T31742] R13: 00007ff6169b6038 R14: 00007ff6169b5fa0 R15: 00007ffe4ffc1e78 [ 1540.240430][T31742] [ 1540.426788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1541.584286][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1541.590726][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1542.699576][T31795] hub 3-0:1.0: USB hub found [ 1542.715362][T31795] hub 3-0:1.0: 1 port detected [ 1542.846287][T31795] usb usb3: authorized to connect [ 1542.995468][T31801] zswap: compressor Ȯ9Qz%;0*lH`Bkjwjӳ<85'.Y[`2Y$`Yvgִq"b%zN[O EiFi(Sh3Kx>ԝRS=kHɟ{?Bbޝ4)> not available [ 1543.189017][T31801] [U] [ 1543.191874][T31801] [U] [ 1543.194602][T31801] [U] [ 1543.197319][T31801] [U] [ 1543.238886][T31801] [U] [ 1543.241630][T31801] [U] [ 1543.244318][T31801] [U] [ 1543.247019][T31801] [U] [ 1543.250856][T31801] [U] [ 1543.253593][T31801] [U] [ 1543.256344][T31801] [U] [ 1543.259065][T31801] [U] [ 1543.262163][T31801] [U] [ 1543.264888][T31801] [U] [ 1543.267598][T31801] [U] [ 1543.270311][T31801] [U] [ 1543.273513][T31801] [U] [ 1543.276258][T31801] [U] [ 1543.278976][T31801] [U] [ 1543.281690][T31801] [U] [ 1543.285369][T31801] [U] [ 1543.288086][T31801] [U] [ 1543.290778][T31801] [U] [ 1543.293462][T31801] [U] [ 1543.335395][T31801] [U] [ 1543.338247][T31801] [U] [ 1543.340969][T31801] [U] [ 1543.343685][T31801] [U] [ 1543.347476][T31801] [U] [ 1543.350205][T31801] [U] [ 1543.352912][T31801] [U] [ 1543.355623][T31801] [U] [ 1543.450787][T31801] [U] [ 1543.453566][T31801] [U] [ 1543.456293][T31801] [U] [ 1543.459001][T31801] [U] [ 1543.490611][T31801] [U] [ 1543.493375][T31801] [U] [ 1543.496091][T31801] [U] [ 1543.498819][T31801] [U] [ 1543.706838][T31801] [U] [ 1543.709588][T31801] [U] 8Loos4@Z~~n4^Ӑ{&pѧ*y4!hN_鐉㐢:| a؜hԧeOe kXn(sCճ˹Wh !b [ 1543.731645][T31801] [U] one,mg|At.1O=iQ5L; dB [ 1543.738687][T31801] [U] 1 PAs%?%4EZI E7!OHЮF [ 1543.746565][T31801] [U] aw [ 1543.749847][T31801] [U] @K9,'?P48͑i1 n.6i@8Tl#Q*ڮKcEǿ#1d# .&Dʑֳmx6n7j*6?zov4Hb @C_gQ >res(wۭ;YK9@l2k=o*O n.8nwW"Y%}j81Iz_nR [ 1543.773153][T31801] [U] YIwxF1a߲E [ 1543.778171][T31801] [U] j\7>Q93u0Zou`u,_*% [ 1543.795418][T31801] [U] Xĉ̿Vrkb7m!6Ky{%]Td]V6DDEd`6Xc[X:T)(8_]F:i?eM^?ѾϾqPjr .P#jHL㐿^2okb{} [ 1543.811226][T31801] [U] }\N{Mvr"sdQaIgҶo!ݾ$GpJ;>ftEx;*ʱ8wk [JP]2y$$>㜥;BqLjXbe."*#IR\=trG|=w^T,FPVZ%(OAc*F@n˓_S_n ɕ= l0vGsKmHxn_o6!GH u!i)i8rcc1-0$poKni_ȫ#D3CGF5H&uͳlĄqHG [ 1544.176047][T31801] [U] HAevkօV&ؚ]>'2ԍb5@pw2}6oc}S&'ҍ3S)xkQD'^&;rBrY1W :2q%a?cZS3OaNAߡj_3 @B>ϾBo<5@ЎPԡǶl -Q+CBA|TOw;Qshir"vX^)ь}kuV@ j~‘j\VƼ:H [ 1544.203084][T31801] [U] :рR&"dLg4nJP\nMVWD?z\s^xϦD+ +hoJCTɂXjIheM-`j~̌|]( [ 1544.215428][T31801] [U] KL$7Еʇ bv'*. [ 1544.220123][T31801] [U] }Ĵ̈i_3SnL[xg)< [ 1544.226472][T31801] [U] BmyNRׄF/=K)&ڍڀ KxD|v!2ɒ=6yA0Z֑M>wZq)(ooGwTᦇޫ5 "w Yb(ƎB|-8=wyƟ送h [ 1544.245087][T31801] [U] cKNDTI͑ayENs斁JR?._*LNm֏ğB&g1b$EwKҗ}Ը c!.߫7n}qvi1| [ 1544.261431][T31801] [U] Z7Oe%Y ;ԘY+$-}`/S]mdR8;^0G]6̨). 5CiU]5^2Lbec(uR%'51Yɱbԭ_"ۦ`K踝l2b& [ 1544.278110][T31801] [U] 8͛9qF [ 1544.282378][T31801] [U] .)bܚ;u:ZKwDyPʘ.Y7™AxWw<=,ynqOi̧͢ DIp [ 1544.292554][T31801] [U] %{.aOǫTup:{65I}~Glc [ 1544.299082][T31801] [U] y -}LI[Hj70+ [ 1544.304561][T31801] [U] [0H!e /_d9QITY~#D [ 1544.310654][T31801] [U] yՒh"["(7l [ 1544.331694][T31823] can0: slcan on ttyS2. [ 1544.426594][T31801] [U] |gctp 2kbS:H:r8E| [ 1544.534497][T31825] can0 (unregistered): slcan off ttyS2. [ 1545.278791][T31827] [U]  [ 1545.685645][T31867] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1547.657083][T31898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1547.663366][T31898] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1547.682932][T31898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.722131][T31898] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1548.673371][T31912] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4868'. [ 1549.686597][ T8224] Bluetooth: hci1: command 0x0c1a tx timeout [ 1549.693158][ T8224] Bluetooth: hci5: command 0x0c1a tx timeout [ 1549.703337][ T8224] Bluetooth: hci2: command 0x0c1a tx timeout [ 1549.765789][ T8224] Bluetooth: hci0: command 0x0c1a tx timeout [ 1550.007163][T31937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1550.013915][T31937] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1550.044302][T31937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1550.051640][T31937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1550.293907][T31945] netlink: 'syz.6.4878': attribute type 11 has an invalid length. [ 1550.328348][T31945] netlink: 'syz.6.4878': attribute type 11 has an invalid length. [ 1550.338095][T31945] netlink: 'syz.6.4878': attribute type 11 has an invalid length. [ 1550.358408][T31945] netlink: 'syz.6.4878': attribute type 11 has an invalid length. [ 1550.410969][T31945] i2c i2c-0: new_device: Missing parameters [ 1550.434983][T31949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1550.535501][ T8224] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 1550.535529][ T8224] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 1550.552233][ T8224] Bluetooth: hci0: Dropping invalid advertising data [ 1550.562538][ T8224] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 1550.562567][ T8224] Bluetooth: hci0: Dropping invalid advertising data [ 1550.576550][ T8224] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1551.105915][T31961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1551.156081][T31960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1551.206628][T31960] geneve1: entered promiscuous mode [ 1551.224126][T31960] geneve1: entered allmulticast mode [ 1551.272914][T31972] lo: entered allmulticast mode [ 1551.477232][T31976] vivid-009: ================= START STATUS ================= [ 1551.530331][T31979] lo: left allmulticast mode [ 1551.539476][T31976] vivid-009: Enable Output Cropping: true grabbed [ 1551.613212][T31976] vivid-009: Enable Output Composing: true grabbed [ 1551.670897][T31982] block nbd7: not configured, cannot reconfigure [ 1551.680595][T31976] vivid-009: Enable Output Scaler: true grabbed [ 1551.709752][T31979] blktrace: Concurrent blktraces are not allowed on loop2 [ 1551.741413][T31976] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1551.833765][T31976] vivid-009: Transmit Mode: HDMI grabbed [ 1551.840017][T31976] vivid-009: Hotplug Present: 0x00000000 [ 1551.852517][T31976] vivid-009: RxSense Present: 0x00000000 [ 1551.858350][T31976] vivid-009: EDID Present: 0x00000000 [ 1551.870675][T31976] vivid-009: ================== END STATUS ================== [ 1552.073877][ T8224] Bluetooth: hci0: command 0x0c1a tx timeout [ 1552.080388][ T8019] Bluetooth: hci1: command 0x0c1a tx timeout [ 1552.086883][ T8019] Bluetooth: hci5: command 0x0c1a tx timeout [ 1552.092924][ T8019] Bluetooth: hci2: command 0x0c1a tx timeout [ 1552.234970][T31991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1552.250720][T31991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1552.262603][T31991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1552.268895][T31991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1552.582013][T32007] FAULT_INJECTION: forcing a failure. [ 1552.582013][T32007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.613849][T32007] CPU: 1 UID: 0 PID: 32007 Comm: syz.2.4892 Tainted: G U syzkaller #0 PREEMPT(full) [ 1552.613896][T32007] Tainted: [U]=USER [ 1552.613905][T32007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1552.613922][T32007] Call Trace: [ 1552.613932][T32007] [ 1552.613943][T32007] dump_stack_lvl+0x16c/0x1f0 [ 1552.613985][T32007] should_fail_ex+0x512/0x640 [ 1552.614026][T32007] strncpy_from_user+0x3b/0x2e0 [ 1552.614065][T32007] getname_flags.part.0+0x8f/0x550 [ 1552.614109][T32007] getname_flags+0x93/0xf0 [ 1552.614139][T32007] do_sys_openat2+0xb8/0x1d0 [ 1552.614177][T32007] ? __pfx_do_sys_openat2+0x10/0x10 [ 1552.614229][T32007] __x64_sys_openat+0x174/0x210 [ 1552.614265][T32007] ? __pfx___x64_sys_openat+0x10/0x10 [ 1552.614318][T32007] do_syscall_64+0xcd/0x490 [ 1552.614356][T32007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.614391][T32007] RIP: 0033:0x7ff61678ebe9 [ 1552.614414][T32007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.614441][T32007] RSP: 002b:00007ff6149d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1552.614469][T32007] RAX: ffffffffffffffda RBX: 00007ff6169b6090 RCX: 00007ff61678ebe9 [ 1552.614488][T32007] RDX: 0000000000080000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1552.614506][T32007] RBP: 00007ff616811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1552.614524][T32007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.614540][T32007] R13: 00007ff6169b6128 R14: 00007ff6169b6090 R15: 00007ffe4ffc1e78 [ 1552.614575][T32007] [ 1552.841273][T32010] ptrace attach of "./syz-executor exec"[32011] was attempted by "./syz-executor exec"[32010] [ 1554.341390][ T8224] Bluetooth: hci0: command 0x0c1a tx timeout [ 1554.347571][ T8224] Bluetooth: hci1: command 0x0c1a tx timeout [ 1554.355992][T21709] Bluetooth: hci5: command 0x0c1a tx timeout [ 1554.362309][T21709] Bluetooth: hci2: command 0x0c1a tx timeout [ 1555.972745][ T8019] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1556.494892][T32104] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 1559.093500][T32167] lo: entered allmulticast mode [ 1559.494374][ T1220] smpboot: CPU 0 is now offline [ 1559.619260][T32167] blktrace: Concurrent blktraces are not allowed on loop2 [ 1559.700999][T32170] lo: left allmulticast mode [ 1561.157982][T32196] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1563.840409][T32264] vivid-007: ================= START STATUS ================= [ 1563.869089][T32264] vivid-007: Generate PTS: true [ 1563.889396][T32264] vivid-007: Generate SCR: true [ 1563.914125][T32264] tpg source WxH: 320x240 (Y'CbCr) [ 1563.934514][T32264] tpg field: 1 [ 1563.959513][T32264] tpg crop: (0,0)/320x240 [ 1563.973948][T32264] tpg compose: (0,0)/320x240 [ 1564.004624][T32264] tpg colorspace: 8 [ 1564.044704][T32264] tpg transfer function: 0/0 [ 1564.078493][T32264] tpg Y'CbCr encoding: 0/0 [ 1564.180012][T32264] tpg quantization: 0/0 [ 1564.184194][T32264] tpg RGB range: 0/2 [ 1564.242579][T32264] vivid-007: ================== END STATUS ================== [ 1564.506793][T32276] can: request_module (can-proto-3) failed. [ 1565.262840][T32302] size and base must be multiples of 4 kiB [ 1565.329465][T32302] CPU: 1 UID: 0 PID: 32302 Comm: syz.5.4950 Tainted: G U syzkaller #0 PREEMPT(full) [ 1565.329502][T32302] Tainted: [U]=USER [ 1565.329508][T32302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1565.329517][T32302] Call Trace: [ 1565.329526][T32302] [ 1565.329533][T32302] dump_stack_lvl+0x16c/0x1f0 [ 1565.329559][T32302] mtrr_del+0xd1/0x110 [ 1565.329581][T32302] mtrr_ioctl+0x922/0xcf0 [ 1565.329602][T32302] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1565.329626][T32302] ? find_held_lock+0x2b/0x80 [ 1565.329645][T32302] ? __fget_files+0x20e/0x3c0 [ 1565.329663][T32302] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1565.329682][T32302] proc_reg_unlocked_ioctl+0x226/0x320 [ 1565.329702][T32302] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1565.329724][T32302] __x64_sys_ioctl+0x18e/0x210 [ 1565.329747][T32302] do_syscall_64+0xcd/0x490 [ 1565.329769][T32302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.329783][T32302] RIP: 0033:0x7f3a0218ebe9 [ 1565.329796][T32302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.329811][T32302] RSP: 002b:00007f3a0307d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1565.329826][T32302] RAX: ffffffffffffffda RBX: 00007f3a023b6090 RCX: 00007f3a0218ebe9 [ 1565.329836][T32302] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 1565.329845][T32302] RBP: 00007f3a02211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1565.329855][T32302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.329864][T32302] R13: 00007f3a023b6128 R14: 00007f3a023b6090 R15: 00007ffc297d5c78 [ 1565.329883][T32302] [ 1565.969108][T32322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 1566.857547][T32326] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 1568.080740][T32360] sd 0:0:1:0: PR command failed: 1026 [ 1568.086181][T32360] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1568.179957][T32360] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1568.545778][ T8019] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1569.766266][T32381] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4961'. [ 1569.833259][T32381] MTRR 1 not used [ 1570.077762][T32409] net_ratelimit: 163 callbacks suppressed [ 1570.077776][T32409] openvswitch: netlink: Key type 277 is out of range max 32 [ 1570.159459][T32406] netlink: 354 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1572.021687][T32450] FAULT_INJECTION: forcing a failure. [ 1572.021687][T32450] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.054238][T32450] CPU: 1 UID: 0 PID: 32450 Comm: syz.6.4975 Tainted: G U syzkaller #0 PREEMPT(full) [ 1572.054269][T32450] Tainted: [U]=USER [ 1572.054275][T32450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.054284][T32450] Call Trace: [ 1572.054290][T32450] [ 1572.054296][T32450] dump_stack_lvl+0x16c/0x1f0 [ 1572.054322][T32450] should_fail_ex+0x512/0x640 [ 1572.054343][T32450] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1572.054363][T32450] should_failslab+0xc2/0x120 [ 1572.054383][T32450] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1572.054398][T32450] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1572.054417][T32450] tcp_sendmsg_fastopen+0x24d/0x750 [ 1572.054437][T32450] tcp_sendmsg_locked+0x23ff/0x42a0 [ 1572.054462][T32450] ? rcu_is_watching+0x12/0xc0 [ 1572.054483][T32450] ? __lock_acquire+0xb97/0x1ce0 [ 1572.054507][T32450] ? __lock_acquire+0xb97/0x1ce0 [ 1572.054526][T32450] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1572.054542][T32450] ? do_raw_spin_lock+0x12c/0x2b0 [ 1572.054565][T32450] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1572.054591][T32450] ? __local_bh_enable_ip+0xa4/0x120 [ 1572.054612][T32450] tcp_sendmsg+0x2e/0x50 [ 1572.054625][T32450] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1572.054639][T32450] inet_sendmsg+0xb9/0x140 [ 1572.054656][T32450] ____sys_sendmsg+0x973/0xc70 [ 1572.054672][T32450] ? copy_msghdr_from_user+0x10a/0x160 [ 1572.054692][T32450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1572.054711][T32450] ? __pfx_futex_wake_mark+0x10/0x10 [ 1572.054736][T32450] ___sys_sendmsg+0x134/0x1d0 [ 1572.054758][T32450] ? __pfx____sys_sendmsg+0x10/0x10 [ 1572.054802][T32450] __sys_sendmsg+0x16d/0x220 [ 1572.054823][T32450] ? __pfx___sys_sendmsg+0x10/0x10 [ 1572.054842][T32450] ? __x64_sys_futex+0x1e0/0x4c0 [ 1572.054873][T32450] do_syscall_64+0xcd/0x490 [ 1572.054895][T32450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.054911][T32450] RIP: 0033:0x7f2badd8ebe9 [ 1572.054925][T32450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.054940][T32450] RSP: 002b:00007f2baebf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.054956][T32450] RAX: ffffffffffffffda RBX: 00007f2badfb5fa0 RCX: 00007f2badd8ebe9 [ 1572.054966][T32450] RDX: 0000000020004040 RSI: 0000200000000340 RDI: 0000000000000005 [ 1572.054976][T32450] RBP: 00007f2bade11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1572.054985][T32450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.054994][T32450] R13: 00007f2badfb6038 R14: 00007f2badfb5fa0 R15: 00007ffd8055bbd8 [ 1572.055014][T32450] [ 1572.348294][T32449] FAULT_INJECTION: forcing a failure. [ 1572.348294][T32449] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.361058][T32449] CPU: 1 UID: 0 PID: 32449 Comm: syz.2.4974 Tainted: G U syzkaller #0 PREEMPT(full) [ 1572.361085][T32449] Tainted: [U]=USER [ 1572.361091][T32449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.361101][T32449] Call Trace: [ 1572.361109][T32449] [ 1572.361116][T32449] dump_stack_lvl+0x16c/0x1f0 [ 1572.361142][T32449] should_fail_ex+0x512/0x640 [ 1572.361163][T32449] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1572.361184][T32449] should_failslab+0xc2/0x120 [ 1572.361203][T32449] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1572.361220][T32449] ? ptlock_alloc+0x1f/0x70 [ 1572.361238][T32449] ptlock_alloc+0x1f/0x70 [ 1572.361252][T32449] pte_alloc_one+0x82/0x3a0 [ 1572.361268][T32449] do_pte_missing+0x1afc/0x3ba0 [ 1572.361283][T32449] ? do_raw_spin_unlock+0x172/0x230 [ 1572.361307][T32449] ? __pmd_alloc+0x3fb/0x930 [ 1572.361329][T32449] __handle_mm_fault+0x152a/0x2a50 [ 1572.361347][T32449] ? mt_find+0x3ef/0xa30 [ 1572.361367][T32449] ? __pfx___handle_mm_fault+0x10/0x10 [ 1572.361381][T32449] ? __pfx_mt_find+0x10/0x10 [ 1572.361410][T32449] ? find_vma+0xbf/0x140 [ 1572.361436][T32449] ? __pfx_find_vma+0x10/0x10 [ 1572.361461][T32449] handle_mm_fault+0x589/0xd10 [ 1572.361480][T32449] ? __bpf_trace_exceptions+0x1/0x40 [ 1572.361503][T32449] do_user_addr_fault+0x7a6/0x1370 [ 1572.361527][T32449] ? rcu_is_watching+0x12/0xc0 [ 1572.361544][T32449] exc_page_fault+0x5c/0xb0 [ 1572.361563][T32449] asm_exc_page_fault+0x26/0x30 [ 1572.361576][T32449] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1572.361593][T32449] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1572.361607][T32449] RSP: 0018:ffffc9000b69fe68 EFLAGS: 00050212 [ 1572.361619][T32449] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 1572.361628][T32449] RDX: fffff520016d3fda RSI: 0000000000000000 RDI: ffffc9000b69fec0 [ 1572.361638][T32449] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520016d3fd9 [ 1572.361647][T32449] R10: ffffc9000b69fecf R11: 0000000000000000 R12: 0000000000000000 [ 1572.361656][T32449] R13: ffffc9000b69fec0 R14: 0000000000000000 R15: 0000000000000000 [ 1572.361678][T32449] _copy_from_user+0x98/0xd0 [ 1572.361702][T32449] __x64_sys_setrlimit+0xc6/0x160 [ 1572.361723][T32449] ? xfd_validate_state+0x61/0x180 [ 1572.361745][T32449] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 1572.361769][T32449] ? rcu_is_watching+0x12/0xc0 [ 1572.361785][T32449] do_syscall_64+0xcd/0x490 [ 1572.361805][T32449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.361820][T32449] RIP: 0033:0x7ff61678ebe9 [ 1572.361832][T32449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.361846][T32449] RSP: 002b:00007ff6149f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 1572.361860][T32449] RAX: ffffffffffffffda RBX: 00007ff6169b5fa0 RCX: 00007ff61678ebe9 [ 1572.361870][T32449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1572.361878][T32449] RBP: 00007ff616811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1572.361887][T32449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.361895][T32449] R13: 00007ff6169b6038 R14: 00007ff6169b5fa0 R15: 00007ffe4ffc1e78 [ 1572.361914][T32449] [ 1573.413330][T32468] zswap: compressor not available [ 1573.865920][T32491] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4981'. [ 1574.511102][T32515] FAULT_INJECTION: forcing a failure. [ 1574.511102][T32515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.567747][T32515] CPU: 1 UID: 0 PID: 32515 Comm: syz.6.4986 Tainted: G U syzkaller #0 PREEMPT(full) [ 1574.567780][T32515] Tainted: [U]=USER [ 1574.567786][T32515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1574.567795][T32515] Call Trace: [ 1574.567801][T32515] [ 1574.567808][T32515] dump_stack_lvl+0x16c/0x1f0 [ 1574.567833][T32515] should_fail_ex+0x512/0x640 [ 1574.567858][T32515] _copy_from_user+0x2e/0xd0 [ 1574.567882][T32515] move_addr_to_kernel+0x65/0x170 [ 1574.567900][T32515] __copy_msghdr+0x386/0x470 [ 1574.567921][T32515] copy_msghdr_from_user+0xc1/0x160 [ 1574.567942][T32515] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1574.567970][T32515] ___sys_sendmsg+0xfe/0x1d0 [ 1574.567998][T32515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.568048][T32515] __sys_sendmsg+0x16d/0x220 [ 1574.568070][T32515] ? __pfx___sys_sendmsg+0x10/0x10 [ 1574.568089][T32515] ? __x64_sys_futex+0x1e0/0x4c0 [ 1574.568120][T32515] do_syscall_64+0xcd/0x490 [ 1574.568142][T32515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.568157][T32515] RIP: 0033:0x7f2badd8ebe9 [ 1574.568170][T32515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.568192][T32515] RSP: 002b:00007f2baebf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.568209][T32515] RAX: ffffffffffffffda RBX: 00007f2badfb5fa0 RCX: 00007f2badd8ebe9 [ 1574.568221][T32515] RDX: 0000000020004040 RSI: 0000200000000340 RDI: 0000000000000005 [ 1574.568232][T32515] RBP: 00007f2bade11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1574.568241][T32515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.568250][T32515] R13: 00007f2badfb6038 R14: 00007f2badfb5fa0 R15: 00007ffd8055bbd8 [ 1574.568269][T32515] [ 1575.147669][T32526] [U]  [ 1575.150510][T32526] [U] [ 1575.153194][T32526] [U] [ 1575.155882][T32526] [U] [ 1575.189691][T32526] [U] [ 1575.192633][T32526] [U] [ 1575.195332][T32526] [U] [ 1575.198278][T32526] [U] [ 1575.232926][T32526] [U] [ 1575.235645][T32526] [U] [ 1575.238367][T32526] [U] [ 1575.241063][T32526] [U] [ 1575.265666][T32526] [U] [ 1575.268406][T32526] [U] [ 1575.271101][T32526] [U] [ 1575.273835][T32526] [U] [ 1575.287008][T32526] [U] [ 1575.289898][T32526] [U] [ 1575.292598][T32526] [U] [ 1575.295377][T32526] [U] [ 1575.328658][T32526] [U] [ 1575.331406][T32526] [U] [ 1575.334120][T32526] [U] [ 1575.336811][T32526] [U] [ 1575.404598][T32526] [U] [ 1575.407453][T32526] [U] [ 1575.410600][T32526] [U] [ 1575.413742][T32526] [U] [ 1575.455242][T32526] [U] [ 1575.457966][T32526] [U] [ 1575.460658][T32526] [U] [ 1575.463340][T32526] [U] [ 1575.503620][T32526] [U] [ 1575.506339][T32526] [U] [ 1575.509022][T32526] [U] [ 1575.511694][T32526] [U] [ 1575.564113][T32526] [U] [ 1575.566848][T32526] [U] [ 1575.569530][T32526] [U] [ 1575.572224][T32526] [U] [ 1575.630925][T32526] [U] [ 1575.633648][T32526] [U] [ 1575.636325][T32526] [U] [ 1575.639011][T32526] [U] [ 1575.678323][T32526] [U] [ 1575.681055][T32526] [U] [ 1575.683731][T32526] [U] [ 1575.686406][T32526] [U] [ 1575.722873][T32526] [U] [ 1575.725593][T32526] [U] [ 1575.728289][T32526] [U] [ 1575.731013][T32526] [U] [ 1575.794735][T32526] [U] [ 1576.625207][T32563] FAULT_INJECTION: forcing a failure. [ 1576.625207][T32563] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1576.681456][T32563] CPU: 1 UID: 0 PID: 32563 Comm: syz.6.4997 Tainted: G U syzkaller #0 PREEMPT(full) [ 1576.681488][T32563] Tainted: [U]=USER [ 1576.681495][T32563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1576.681505][T32563] Call Trace: [ 1576.681512][T32563] [ 1576.681519][T32563] dump_stack_lvl+0x16c/0x1f0 [ 1576.681549][T32563] should_fail_ex+0x512/0x640 [ 1576.681575][T32563] get_futex_key+0x1d0/0x1560 [ 1576.681599][T32563] ? __pfx_get_futex_key+0x10/0x10 [ 1576.681622][T32563] ? __cgroup_account_cputime+0xcc/0x120 [ 1576.681641][T32563] futex_wait_setup+0x9d/0x550 [ 1576.681668][T32563] __futex_wait+0x194/0x2f0 [ 1576.681689][T32563] ? __pfx___futex_wait+0x10/0x10 [ 1576.681709][T32563] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1576.681727][T32563] ? lockdep_hardirqs_on+0x7c/0x110 [ 1576.681748][T32563] ? __pfx_futex_wake_mark+0x10/0x10 [ 1576.681776][T32563] ? futex_private_hash_put+0x176/0x300 [ 1576.681795][T32563] ? futex_private_hash_put+0x18a/0x300 [ 1576.681815][T32563] futex_wait+0xe8/0x380 [ 1576.681839][T32563] ? __pfx_futex_wait+0x10/0x10 [ 1576.681872][T32563] do_futex+0x229/0x350 [ 1576.681893][T32563] ? __pfx_do_futex+0x10/0x10 [ 1576.681911][T32563] ? fput+0x9b/0xd0 [ 1576.681932][T32563] ? __sys_sendmsg+0x18c/0x220 [ 1576.681955][T32563] __x64_sys_futex+0x1e0/0x4c0 [ 1576.681976][T32563] ? __pfx___x64_sys_futex+0x10/0x10 [ 1576.682001][T32563] do_syscall_64+0xcd/0x490 [ 1576.682022][T32563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.682038][T32563] RIP: 0033:0x7f2badd8ebe9 [ 1576.682051][T32563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.682073][T32563] RSP: 002b:00007f2baebf30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1576.682090][T32563] RAX: ffffffffffffffda RBX: 00007f2badfb5fa8 RCX: 00007f2badd8ebe9 [ 1576.682101][T32563] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2badfb5fa8 [ 1576.682113][T32563] RBP: 00007f2badfb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.682124][T32563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.682134][T32563] R13: 00007f2badfb6038 R14: 00007ffd8055baf0 R15: 00007ffd8055bbd8 [ 1576.682154][T32563] [ 1577.739929][T32597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5005'. [ 1577.819720][T32597] bond0: entered promiscuous mode [ 1577.860626][T32597] bond_slave_0: entered promiscuous mode [ 1577.922574][T32597] bond_slave_1: entered promiscuous mode [ 1578.277253][ T30] audit: type=1800 audit(4294967399.549:63): pid=32615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5008" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1578.696794][T32621] bond0: option all_slaves_active: invalid value () [ 1578.718475][T32631] FAULT_INJECTION: forcing a failure. [ 1578.718475][T32631] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.769229][T32620] bond0: option all_slaves_active: invalid value () [ 1578.822812][T32631] CPU: 1 UID: 0 PID: 32631 Comm: syz.5.5011 Tainted: G U syzkaller #0 PREEMPT(full) [ 1578.822838][T32631] Tainted: [U]=USER [ 1578.822844][T32631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1578.822853][T32631] Call Trace: [ 1578.822859][T32631] [ 1578.822866][T32631] dump_stack_lvl+0x16c/0x1f0 [ 1578.822893][T32631] should_fail_ex+0x512/0x640 [ 1578.822915][T32631] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1578.822936][T32631] should_failslab+0xc2/0x120 [ 1578.822955][T32631] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1578.822978][T32631] ? __alloc_skb+0x2b2/0x380 [ 1578.823003][T32631] __alloc_skb+0x2b2/0x380 [ 1578.823026][T32631] ? __pfx___alloc_skb+0x10/0x10 [ 1578.823051][T32631] tipc_buf_acquire+0x26/0xe0 [ 1578.823066][T32631] tipc_msg_build+0x112/0x1150 [ 1578.823085][T32631] ? __pfx_tipc_msg_build+0x10/0x10 [ 1578.823104][T32631] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1578.823127][T32631] __tipc_sendmsg+0xa30/0x19a0 [ 1578.823156][T32631] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1578.823178][T32631] ? __lock_acquire+0xb97/0x1ce0 [ 1578.823202][T32631] ? __pfx_woken_wake_function+0x10/0x10 [ 1578.823235][T32631] ? __local_bh_enable_ip+0xa4/0x120 [ 1578.823254][T32631] tipc_sendmsg+0x4f/0x70 [ 1578.823268][T32631] sock_write_iter+0x4ff/0x5b0 [ 1578.823282][T32631] ? __pfx_sock_write_iter+0x10/0x10 [ 1578.823303][T32631] ? __futex_wait+0x24c/0x2f0 [ 1578.823325][T32631] ? copy_iovec_from_user+0x131/0x170 [ 1578.823349][T32631] do_iter_readv_writev+0x65f/0x9e0 [ 1578.823368][T32631] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1578.823386][T32631] ? bpf_lsm_file_permission+0x9/0x10 [ 1578.823407][T32631] ? security_file_permission+0x71/0x210 [ 1578.823426][T32631] ? rw_verify_area+0xcf/0x6c0 [ 1578.823443][T32631] vfs_writev+0x35f/0xde0 [ 1578.823460][T32631] ? __lock_acquire+0x62e/0x1ce0 [ 1578.823480][T32631] ? __pfx_vfs_writev+0x10/0x10 [ 1578.823509][T32631] ? __fget_files+0x20e/0x3c0 [ 1578.823529][T32631] ? do_writev+0x28c/0x340 [ 1578.823542][T32631] do_writev+0x28c/0x340 [ 1578.823558][T32631] ? __pfx_do_writev+0x10/0x10 [ 1578.823581][T32631] do_syscall_64+0xcd/0x490 [ 1578.823603][T32631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.823618][T32631] RIP: 0033:0x7f3a0218ebe9 [ 1578.823630][T32631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.823645][T32631] RSP: 002b:00007f3a0309e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1578.823660][T32631] RAX: ffffffffffffffda RBX: 00007f3a023b5fa0 RCX: 00007f3a0218ebe9 [ 1578.823670][T32631] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1578.823679][T32631] RBP: 00007f3a02211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1578.823688][T32631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.823697][T32631] R13: 00007f3a023b6038 R14: 00007f3a023b5fa0 R15: 00007ffc297d5c78 [ 1578.823717][T32631] [ 1580.843259][T32653] bond0: option lp_interval: invalid value () [ 1580.876325][T32653] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1581.449845][T32659] bond0: option arp_interval: invalid value () [ 1581.492101][T32659] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1582.454189][T32677] ALSA: mixer_oss: invalid OSS volume '0' [ 1582.480264][T32677] ALSA: mixer_oss: invalid OSS volume '' [ 1582.928821][T32698] netlink: 326 bytes leftover after parsing attributes in process `syz.5.5024'. [ 1583.047774][T32702] kvm: user requested TSC rate below hardware speed [ 1583.154737][T32699] kvm: user requested TSC rate below hardware speed [ 1583.209517][T32709] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 1583.863225][T32712] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 1586.467024][T10333] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 915 with max blocks 11 with error 117 [ 1586.493135][ T318] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5039'. [ 1586.556028][T10333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1586.556028][T10333] [ 1586.627755][T10333] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 905 with max blocks 10 with error 117 [ 1586.752293][T10333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1586.752293][T10333] [ 1586.954452][ T30] audit: type=1326 audit(4294967408.275:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=329 comm="syz.5.5042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a0218ebe9 code=0x0 [ 1587.092782][ T30] audit: type=1326 audit(4294967408.345:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=329 comm="syz.5.5042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a0218ebe9 code=0x0 [ 1587.164104][T10335] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 905 with max blocks 1 with error 117 [ 1587.222847][T10335] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1587.222847][T10335] [ 1587.705519][ T30] audit: type=1800 audit(4294967409.019:66): pid=347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5043" name="members" dev="configfs" ino=151533 res=0 errno=0 [ 1588.150685][ T349] synth uevent: /bus/auxiliary: unknown uevent action string [ 1590.945173][ T409] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1591.224914][ T414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5057'. [ 1591.585153][ T414] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input119 [ 1591.676190][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5059'. [ 1592.820593][ T454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1593.222478][ T454] team0: Port device team_slave_1 removed [ 1595.150121][ T495] netlink: zone id is out of range [ 1595.281594][ T495] netlink: zone id is out of range [ 1595.348540][ T495] netlink: zone id is out of range [ 1595.476087][ T495] netlink: zone id is out of range [ 1595.481220][ T495] netlink: zone id is out of range [ 1595.607596][ T495] netlink: zone id is out of range [ 1595.696320][ T495] netlink: zone id is out of range [ 1595.757634][ T495] netlink: zone id is out of range [ 1595.822734][ T495] netlink: zone id is out of range [ 1595.827875][ T495] netlink: zone id is out of range [ 1597.307205][ T541] netlink: 'syz.1.5077': attribute type 33 has an invalid length. [ 1597.535906][ T538] zswap: compressor not available [ 1598.002771][ T565] FAULT_INJECTION: forcing a failure. [ 1598.002771][ T565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.067838][ T561] ima: policy update failed [ 1598.079343][ T565] CPU: 1 UID: 0 PID: 565 Comm: syz.1.5081 Tainted: G U syzkaller #0 PREEMPT(full) [ 1598.079369][ T565] Tainted: [U]=USER [ 1598.079375][ T565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1598.079384][ T565] Call Trace: [ 1598.079390][ T565] [ 1598.079396][ T565] dump_stack_lvl+0x16c/0x1f0 [ 1598.079421][ T565] should_fail_ex+0x512/0x640 [ 1598.079445][ T565] strncpy_from_user+0x3b/0x2e0 [ 1598.079465][ T565] getname_flags.part.0+0x8f/0x550 [ 1598.079491][ T565] getname_flags+0x93/0xf0 [ 1598.079507][ T565] do_sys_openat2+0xb8/0x1d0 [ 1598.079530][ T565] ? __pfx_do_sys_openat2+0x10/0x10 [ 1598.079558][ T565] __x64_sys_openat+0x174/0x210 [ 1598.079580][ T565] ? __pfx___x64_sys_openat+0x10/0x10 [ 1598.079609][ T565] do_syscall_64+0xcd/0x490 [ 1598.079629][ T565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.079644][ T565] RIP: 0033:0x7f250ed8ebe9 [ 1598.079656][ T565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1598.079670][ T565] RSP: 002b:00007f250fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1598.079684][ T565] RAX: ffffffffffffffda RBX: 00007f250efb5fa0 RCX: 00007f250ed8ebe9 [ 1598.079694][ T565] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 1598.079704][ T565] RBP: 00007f250ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1598.079713][ T565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.079722][ T565] R13: 00007f250efb6038 R14: 00007f250efb5fa0 R15: 00007ffd2888b838 [ 1598.079740][ T565] [ 1598.476581][ T30] audit: type=1802 audit(4294967419.645:67): pid=561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5080" res=0 errno=0 [ 1598.733670][ T580] random: crng reseeded on system resumption [ 1602.892016][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.899129][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1604.808854][ T653] vhci_hcd: invalid port number 16 [ 1604.851446][ T653] vhci_hcd: invalid port number 16 [ 1605.248033][ T659] can: request_module (can-proto-4) failed. [ 1609.356558][ T737] device-mapper: ioctl: Unable to rename non-existent device, to uuid haper [ 1612.317274][ T30] audit: type=1800 audit(4294967302.181:68): pid=840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5126" name="features" dev="configfs" ino=153243 res=0 errno=0 [ 1612.337921][ C1] vkms_vblank_simulate: vblank timer overrun [ 1613.759248][ T872] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1613.982995][ T873] FAULT_INJECTION: forcing a failure. [ 1613.982995][ T873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.068430][ T873] CPU: 1 UID: 0 PID: 873 Comm: syz.2.5133 Tainted: G U syzkaller #0 PREEMPT(full) [ 1614.068457][ T873] Tainted: [U]=USER [ 1614.068462][ T873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1614.068472][ T873] Call Trace: [ 1614.068477][ T873] [ 1614.068484][ T873] dump_stack_lvl+0x16c/0x1f0 [ 1614.068514][ T873] should_fail_ex+0x512/0x640 [ 1614.068539][ T873] _copy_from_user+0x2e/0xd0 [ 1614.068564][ T873] restore_sigcontext+0xcb/0x6a0 [ 1614.068583][ T873] ? __pfx_restore_sigcontext+0x10/0x10 [ 1614.068614][ T873] ? __pfx_restore_altstack+0x10/0x10 [ 1614.068635][ T873] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.068653][ T873] ? lockdep_hardirqs_on+0x7c/0x110 [ 1614.068673][ T873] __do_sys_rt_sigreturn+0x1bb/0x230 [ 1614.068692][ T873] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1614.068716][ T873] do_syscall_64+0xcd/0x490 [ 1614.068736][ T873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.068751][ T873] RIP: 0033:0x7ff61672ade9 [ 1614.068765][ T873] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1614.068779][ T873] RSP: 002b:00007ff6149d4a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1614.068794][ T873] RAX: ffffffffffffffda RBX: 00007ff6169b6090 RCX: 00007ff61672ade9 [ 1614.068803][ T873] RDX: 00007ff6149d4a80 RSI: 00007ff6149d4bb0 RDI: 0000000000000011 [ 1614.068812][ T873] RBP: 00007ff616811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1614.068821][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.068830][ T873] R13: 00007ff6169b6128 R14: 00007ff6169b6090 R15: 00007ffe4ffc1e78 [ 1614.068848][ T873] [ 1614.242025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1614.410070][T10344] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 922 with max blocks 4 with error 117 [ 1614.422761][T10344] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1614.422761][T10344] [ 1614.773436][T10333] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 922 with max blocks 1 with error 117 [ 1614.875631][T10333] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1614.875631][T10333] [ 1617.795407][ T969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5151'. [ 1619.518872][ T1007] netlink: 146 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1622.412546][ T1114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5174'. [ 1623.427767][ T1137] __vm_enough_memory: pid: 1137, comm: syz.2.5179, bytes: 4398046511104 not enough memory for the allocation [ 1623.906839][ T1149] random: crng reseeded on system resumption [ 1627.671394][ T8019] Bluetooth: hci1: unexpected event 0x04 length: 64 > 10 [ 1627.671464][ T8019] Bluetooth: hci1: connection err: -111 [ 1627.688472][ T8019] Bluetooth: hci1: unexpected event 0x04 length: 64 > 10 [ 1627.688503][ T8019] Bluetooth: hci1: connection err: -111 [ 1627.706461][ T1244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1629.278222][ T1272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1629.312613][ T1272] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1629.340859][ T1272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1629.375058][ T1272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1629.423802][ T1272] CPU0 is offline. [ 1630.168442][ T1317] lo: entered allmulticast mode [ 1630.305582][ T1322] lo: left allmulticast mode [ 1630.709797][ T1329] netlink: 'syz.5.5212': attribute type 11 has an invalid length. [ 1630.798245][ T1329] netlink: 'syz.5.5212': attribute type 11 has an invalid length. [ 1630.935181][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5212'. [ 1631.064174][ T1329] netlink: 'syz.5.5212': attribute type 11 has an invalid length. [ 1631.098806][ T8019] Bluetooth: hci2: command 0x0c1a tx timeout [ 1631.232536][ T1329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5212'. [ 1631.320014][ T30] audit: type=1800 audit(4294967450.289:69): pid=1336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5213" name="features" dev="configfs" ino=155233 res=0 errno=0 [ 1631.354879][ T8019] Bluetooth: hci1: command 0x0c1a tx timeout [ 1631.360967][T32038] Bluetooth: hci5: command 0x0c1a tx timeout [ 1631.368371][ T1329] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5212'. [ 1631.414443][T32038] Bluetooth: hci0: command 0x0c1a tx timeout [ 1632.015352][ T1355] FAULT_INJECTION: forcing a failure. [ 1632.015352][ T1355] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.066101][ T1355] CPU: 1 UID: 0 PID: 1355 Comm: syz.1.5218 Tainted: G U syzkaller #0 PREEMPT(full) [ 1632.066128][ T1355] Tainted: [U]=USER [ 1632.066134][ T1355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1632.066144][ T1355] Call Trace: [ 1632.066150][ T1355] [ 1632.066157][ T1355] dump_stack_lvl+0x16c/0x1f0 [ 1632.066182][ T1355] should_fail_ex+0x512/0x640 [ 1632.066202][ T1355] ? __kmalloc_noprof+0xbf/0x510 [ 1632.066222][ T1355] ? __seq_open_private+0x22/0xd0 [ 1632.066244][ T1355] should_failslab+0xc2/0x120 [ 1632.066263][ T1355] __kmalloc_noprof+0xd2/0x510 [ 1632.066279][ T1355] ? __pfx_apparmor_file_open+0x10/0x10 [ 1632.066302][ T1355] __seq_open_private+0x22/0xd0 [ 1632.066324][ T1355] proc_timers_open+0x27/0x150 [ 1632.066346][ T1355] do_dentry_open+0x982/0x1530 [ 1632.066365][ T1355] ? __pfx_proc_timers_open+0x10/0x10 [ 1632.066389][ T1355] vfs_open+0x82/0x3f0 [ 1632.066412][ T1355] path_openat+0x1de4/0x2cb0 [ 1632.066435][ T1355] ? __pfx_path_openat+0x10/0x10 [ 1632.066456][ T1355] do_filp_open+0x20b/0x470 [ 1632.066473][ T1355] ? __pfx_do_filp_open+0x10/0x10 [ 1632.066496][ T1355] ? __pfx_kfree_link+0x10/0x10 [ 1632.066522][ T1355] ? alloc_fd+0x471/0x7d0 [ 1632.066543][ T1355] do_sys_openat2+0x11b/0x1d0 [ 1632.066564][ T1355] ? __pfx_do_sys_openat2+0x10/0x10 [ 1632.066591][ T1355] __x64_sys_openat+0x174/0x210 [ 1632.066613][ T1355] ? __pfx___x64_sys_openat+0x10/0x10 [ 1632.066642][ T1355] do_syscall_64+0xcd/0x490 [ 1632.066662][ T1355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.066677][ T1355] RIP: 0033:0x7f250ed8ebe9 [ 1632.066696][ T1355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.066711][ T1355] RSP: 002b:00007f250fc18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1632.066726][ T1355] RAX: ffffffffffffffda RBX: 00007f250efb5fa0 RCX: 00007f250ed8ebe9 [ 1632.066736][ T1355] RDX: 0000000000000040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1632.066746][ T1355] RBP: 00007f250ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1632.066756][ T1355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.066765][ T1355] R13: 00007f250efb6038 R14: 00007f250efb5fa0 R15: 00007ffd2888b838 [ 1632.066783][ T1355] [ 1632.697583][ T1358] netlink: 'syz.1.5219': attribute type 4 has an invalid length. [ 1632.721246][ T1358] netlink: 314 bytes leftover after parsing attributes in process `syz.1.5219'. [ 1634.097079][ T1381] FAULT_INJECTION: forcing a failure. [ 1634.097079][ T1381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1634.109963][ T1381] CPU: 1 UID: 0 PID: 1381 Comm: syz.6.5223 Tainted: G U syzkaller #0 PREEMPT(full) [ 1634.109987][ T1381] Tainted: [U]=USER [ 1634.109992][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1634.110001][ T1381] Call Trace: [ 1634.110007][ T1381] [ 1634.110014][ T1381] dump_stack_lvl+0x16c/0x1f0 [ 1634.110038][ T1381] should_fail_ex+0x512/0x640 [ 1634.110060][ T1381] should_fail_futex+0x4c/0x60 [ 1634.110078][ T1381] futex_lock_pi_atomic+0x148/0xd50 [ 1634.110102][ T1381] futex_lock_pi+0x23f/0x7c0 [ 1634.110125][ T1381] ? __pfx_futex_lock_pi+0x10/0x10 [ 1634.110147][ T1381] ? __futex_wait+0x24c/0x2f0 [ 1634.110169][ T1381] ? lockdep_hardirqs_on+0x7c/0x110 [ 1634.110205][ T1381] ? futex_private_hash_put+0x18a/0x300 [ 1634.110224][ T1381] ? __pfx_futex_wake_mark+0x10/0x10 [ 1634.110248][ T1381] ? __pfx_child_wait_callback+0x10/0x10 [ 1634.110273][ T1381] do_futex+0x11a/0x350 [ 1634.110291][ T1381] ? __pfx_do_futex+0x10/0x10 [ 1634.110308][ T1381] ? __pfx___do_sys_wait4+0x10/0x10 [ 1634.110331][ T1381] __x64_sys_futex+0x1e0/0x4c0 [ 1634.110351][ T1381] ? __pfx___x64_sys_futex+0x10/0x10 [ 1634.110368][ T1381] ? xfd_validate_state+0x61/0x180 [ 1634.110395][ T1381] do_syscall_64+0xcd/0x490 [ 1634.110415][ T1381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.110429][ T1381] RIP: 0033:0x7f2badd8ebe9 [ 1634.110442][ T1381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.110456][ T1381] RSP: 002b:00007f2baeb6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1634.110469][ T1381] RAX: ffffffffffffffda RBX: 00007f2badfb6360 RCX: 00007f2badd8ebe9 [ 1634.110479][ T1381] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1634.110488][ T1381] RBP: 00007f2bade11e19 R08: 0000000000000000 R09: 000000008000fff2 [ 1634.110496][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.110504][ T1381] R13: 00007f2badfb63f8 R14: 00007f2badfb6360 R15: 00007ffd8055bbd8 [ 1634.110522][ T1381] [ 1636.540634][ T1410] BUG: unable to handle page fault for address: fffff520046f1200 [ 1636.540649][ T1410] #PF: supervisor read access in kernel mode [ 1636.540659][ T1410] #PF: error_code(0x0000) - not-present page [ 1636.540668][ T1410] PGD 23ffed067 P4D 23ffed067 PUD 1ca83067 PMD 0 [ 1636.540690][ T1410] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 1636.540707][ T1410] CPU: 1 UID: 0 PID: 1410 Comm: syz.1.5228 Tainted: G U syzkaller #0 PREEMPT(full) [ 1636.540728][ T1410] Tainted: [U]=USER [ 1636.540733][ T1410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1636.540743][ T1410] RIP: 0010:sys_imageblit+0x17bc/0x1e60 [ 1636.540762][ T1410] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 dc 02 00 00 4d 63 f6 48 8b 8c cc 28 01 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 94 02 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 1636.540776][ T1410] RSP: 0018:ffffc9000eaf74f0 EFLAGS: 00010a06 [ 1636.540788][ T1410] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1636.540799][ T1410] RDX: 0000000000000000 RSI: 1ffff920046f1200 RDI: ffffc9000eaf7618 [ 1636.540811][ T1410] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 1636.540822][ T1410] R10: 0000000000000008 R11: 0000000000000000 R12: ffff888025fe1091 [ 1636.540832][ T1410] R13: ffffc9000eaf7618 R14: ffffc90023789000 R15: ffffc90023789000 [ 1636.540844][ T1410] FS: 00007f250fbf76c0(0000) GS:ffff8881247c3000(0000) knlGS:0000000000000000 [ 1636.540859][ T1410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1636.540869][ T1410] CR2: fffff520046f1200 CR3: 000000008a0b2000 CR4: 00000000003526f0 [ 1636.540878][ T1410] Call Trace: [ 1636.540883][ T1410] [ 1636.540891][ T1410] ? __asan_memcpy+0x3c/0x60 [ 1636.540907][ T1410] ? __pfx_sys_imageblit+0x10/0x10 [ 1636.540921][ T1410] ? this_cpu_in_panic+0x5c/0x80 [ 1636.540942][ T1410] ? _prb_read_valid+0x73c/0x890 [ 1636.540964][ T1410] ? __pfx__prb_read_valid+0x10/0x10 [ 1636.540984][ T1410] ? find_held_lock+0x2b/0x80 [ 1636.541000][ T1410] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1636.541020][ T1410] ccw_putcs+0x930/0xbc0 [ 1636.541045][ T1410] ? __pfx_ccw_putcs+0x10/0x10 [ 1636.541068][ T1410] ? fb_get_color_depth+0x120/0x250 [ 1636.541086][ T1410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1636.541108][ T1410] ? __pfx_ccw_putcs+0x10/0x10 [ 1636.541128][ T1410] fbcon_putcs+0x384/0x4a0 [ 1636.541146][ T1410] do_update_region+0x2e6/0x3f0 [ 1636.541161][ T1410] do_con_write+0x1e27/0x8280 [ 1636.541181][ T1410] ? srcu_gp_start_if_needed+0xda0/0xe70 [ 1636.541205][ T1410] ? __pfx___mutex_lock+0x10/0x10 [ 1636.541225][ T1410] ? __pfx_do_con_write+0x10/0x10 [ 1636.541251][ T1410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1636.541278][ T1410] con_write+0x23/0xb0 [ 1636.541297][ T1410] n_tty_write+0x41f/0x11e0 [ 1636.541315][ T1410] ? __pfx_n_tty_write+0x10/0x10 [ 1636.541327][ T1410] ? rcu_is_watching+0x12/0xc0 [ 1636.541341][ T1410] ? __pfx_woken_wake_function+0x10/0x10 [ 1636.541363][ T1410] ? kfree+0x24f/0x4d0 [ 1636.541375][ T1410] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 1636.541395][ T1410] ? __pfx_n_tty_write+0x10/0x10 [ 1636.541408][ T1410] file_tty_write.constprop.0+0x504/0x9b0 [ 1636.541429][ T1410] vfs_write+0x7d0/0x11d0 [ 1636.541446][ T1410] ? __pfx_tty_write+0x10/0x10 [ 1636.541464][ T1410] ? __pfx_vfs_write+0x10/0x10 [ 1636.541479][ T1410] ? find_held_lock+0x2b/0x80 [ 1636.541497][ T1410] ksys_write+0x12a/0x250 [ 1636.541513][ T1410] ? __pfx_ksys_write+0x10/0x10 [ 1636.541531][ T1410] do_syscall_64+0xcd/0x490 [ 1636.541550][ T1410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.541565][ T1410] RIP: 0033:0x7f250ed8ebe9 [ 1636.541577][ T1410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.541591][ T1410] RSP: 002b:00007f250fbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1636.541605][ T1410] RAX: ffffffffffffffda RBX: 00007f250efb6090 RCX: 00007f250ed8ebe9 [ 1636.541616][ T1410] RDX: 0000000000000060 RSI: 00002000000001c0 RDI: 0000000000000009 [ 1636.541625][ T1410] RBP: 00007f250ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1636.541635][ T1410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.541644][ T1410] R13: 00007f250efb6128 R14: 00007f250efb6090 R15: 00007ffd2888b838 [ 1636.541658][ T1410] [ 1636.541669][ T1410] Modules linked in: [ 1636.541679][ T1410] CR2: fffff520046f1200 [ 1636.541691][ T1410] ---[ end trace 0000000000000000 ]--- [ 1636.541698][ T1410] RIP: 0010:sys_imageblit+0x17bc/0x1e60 [ 1636.541713][ T1410] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 dc 02 00 00 4d 63 f6 48 8b 8c cc 28 01 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 94 02 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 1636.541728][ T1410] RSP: 0018:ffffc9000eaf74f0 EFLAGS: 00010a06 [ 1636.541740][ T1410] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1636.541749][ T1410] RDX: 0000000000000000 RSI: 1ffff920046f1200 RDI: ffffc9000eaf7618 [ 1636.541759][ T1410] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 1636.541769][ T1410] R10: 0000000000000008 R11: 0000000000000000 R12: ffff888025fe1091 [ 1636.541779][ T1410] R13: ffffc9000eaf7618 R14: ffffc90023789000 R15: ffffc90023789000 [ 1636.541789][ T1410] FS: 00007f250fbf76c0(0000) GS:ffff8881247c3000(0000) knlGS:0000000000000000 [ 1636.541803][ T1410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1636.541813][ T1410] CR2: fffff520046f1200 CR3: 000000008a0b2000 CR4: 00000000003526f0 [ 1636.541824][ T1410] Kernel panic - not syncing: Fatal exception [ 1636.541881][ T1410] Kernel Offset: disabled