last executing test programs: 2m18.29836338s ago: executing program 1 (id=3499): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r2 = io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008140}, 0x2404c044) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) fallocate$auto(r2, 0x80, 0xf, 0x6ad5) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) pread64$auto(0xffffffffffffffff, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xd0\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xa7\xf3u\xa8ak\xff\x7f\x00\x00\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00'/272, 0x202, 0x7) 2m14.723975576s ago: executing program 1 (id=3505): mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) socket(0x1e, 0x80000, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r3 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x10) write$auto_dev_fops_plock(r3, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5) sendfile$auto(r4, r2, 0x0, 0x1fff5) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) io_uring_setup$auto(0x4bf15e08, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) unshare$auto(0x40000080) 2m12.612403195s ago: executing program 1 (id=3511): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockopt$auto(r1, 0x28, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x6e9) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0xffffffff, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0xfffffffffffff4c5, 0x2}, 0x408, 0x8, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x7, 0x3, 0x100000, 0x96bd, 0x7ff, 0xbf0}) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) preadv$auto(0x3, &(0x7f00000000c0)={0x0, 0x3}, 0x3, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x7) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000000000)=""/39, 0x27) 2m11.398090094s ago: executing program 1 (id=3513): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 2m10.138315604s ago: executing program 1 (id=3515): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000040)="7247d54f73e9ac4e45aaa5e85f8850f65713538dfe58e39d7c38bc0a432cc91ff6f4", 0x9, &(0x7f0000000080)={&(0x7f00000003c0)="2a7eb014d44936273c5ed7d8988b405711642725d428e8800b5d7bd6fea30d6543c64c4965f0d8a31bdd92550ebe354df12d9e297268f7e0786720cd9d46ad15504a9e47c5103b4104adcefbbee6a2b45c70d771a0924f41315f82d6d15b87f410bc3be6fd2c6dd482c01076a98494a39b1215765fc5856651ae21a8a507fede5bcb8a0ac405478578b5798190f0a92a84d4002e7728c139f71e585cd22de2efce0f7a6e7764f54a2c62dd54941d0f5fe3ca8f3883447bbdb4a3f5fb13bc9be02cfc8ec1b7da", 0x3}, 0x8, 0x0, 0x9}}, 0x845, 0xef0) msync$auto(0x0, 0xe0, 0x6) 2m8.105366669s ago: executing program 1 (id=3517): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) writev$auto(r1, &(0x7f00000001c0)={&(0x7f0000000140)="6f0652c6086ae0a2fe7ab4fa6240270adb45e1a618e291796886fc09ad6a0f5e589370cb94080bbef19b1e212655c621c94ee58d38b93391ee04cf580d3228d761076197a69792f3c9d55ba8aa142016aa036adb69e8f87b", 0x7}, 0x3) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/filesystems\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000280)=""/144, 0x90) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r4 = eventfd2$auto(0x7f, 0x0) r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0xd, "74a517f574545f6e56dd0a76e95f7ebe732ad2c90cf711c0bb363ed3997e3e14", @inferred=r4}) ioctl$auto(r3, 0x9, r5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000001580)=""/4077, 0xfed) mmap$auto(0x4, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x4, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x200000000000, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x401, 0x22002, 0x9, 0xfffffffd, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x70e2, 0x0, 0xe573, 0xb7, 0x0, 0x0, 0x8, 0x0, 0x9, 0x100000, 0x10000, 0x15b, 0x7, 0x1fc, 0x0, 0x10000000000002, 0x0, 0x0, 0x48, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x0, 0x0, 0xa53, 0xfffffffffffffffd, 0xfffffffffffffffd]}, 0x7, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd04, &(0x7f00000001c0)) 2m6.847268392s ago: executing program 3 (id=3519): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x6, 0x0, 0x18) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1ed", 0x24) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x6, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_ALL(0x0, 0xe, 0x0, 0x3e, 0x0) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x2, 0x9, 0x43, 0x0) dup2$auto(0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 2m5.72182874s ago: executing program 3 (id=3522): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000040)="7247d54f73e9ac4e45aaa5e85f8850f65713538dfe58e39d7c38bc0a432cc91ff6f4", 0x9, &(0x7f0000000080)={&(0x7f00000003c0)="2a7eb014d44936273c5ed7d8988b405711642725d428e8800b5d7bd6fea30d6543c64c4965f0d8a31bdd92550ebe354df12d9e297268f7e0786720cd9d46ad15504a9e47c5103b4104adcefbbee6a2b45c70d771a0924f41315f82d6d15b87f410bc3be6fd2c6dd482c01076a98494a39b1215765fc5856651ae21a8a507fede5bcb8a0ac405478578b5798190f0a92a84d4002e7728c139f71e585cd22de2efce0f7a6e7764f54a2c62dd54941d0f5fe3ca8f3883447bbdb4a3f5fb13bc9be02cfc8ec1b7da", 0x3}, 0x8, 0x0, 0x9}}, 0x845, 0xef0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) 2m4.726250225s ago: executing program 3 (id=3523): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) 1m52.937532744s ago: executing program 32 (id=3517): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) writev$auto(r1, &(0x7f00000001c0)={&(0x7f0000000140)="6f0652c6086ae0a2fe7ab4fa6240270adb45e1a618e291796886fc09ad6a0f5e589370cb94080bbef19b1e212655c621c94ee58d38b93391ee04cf580d3228d761076197a69792f3c9d55ba8aa142016aa036adb69e8f87b", 0x7}, 0x3) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/filesystems\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000280)=""/144, 0x90) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r4 = eventfd2$auto(0x7f, 0x0) r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0xd, "74a517f574545f6e56dd0a76e95f7ebe732ad2c90cf711c0bb363ed3997e3e14", @inferred=r4}) ioctl$auto(r3, 0x9, r5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000001580)=""/4077, 0xfed) mmap$auto(0x4, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x4, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x200000000000, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x401, 0x22002, 0x9, 0xfffffffd, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x70e2, 0x0, 0xe573, 0xb7, 0x0, 0x0, 0x8, 0x0, 0x9, 0x100000, 0x10000, 0x15b, 0x7, 0x1fc, 0x0, 0x10000000000002, 0x0, 0x0, 0x48, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x0, 0x0, 0xa53, 0xfffffffffffffffd, 0xfffffffffffffffd]}, 0x7, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffff7effffd04, &(0x7f00000001c0)) 1m52.933840607s ago: executing program 3 (id=3526): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop11\x00', 0x0, 0x0) mmap$auto(0xce80, 0x1, 0x4000000000de, 0x40eb1, r0, 0x1) r1 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x6, 0x21, 0x0, 0x10) close_range$auto(r0, r1, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r4, 0x4008af30, 0x0) 1m51.922444444s ago: executing program 3 (id=3527): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x4, 0x100000000000034, 0x6) fsopen$auto(0x0, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) msync$auto(0x0, 0xe0, 0x6) 1m50.785498447s ago: executing program 3 (id=3530): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 1m35.325913185s ago: executing program 33 (id=3530): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) 1m14.62586182s ago: executing program 0 (id=3600): r0 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=0x1) fcntl$auto_F_UNLCK(r0, 0x7f, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) r1 = open(0x0, 0x595002, 0x60c) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000500)=""/4096, 0x1000) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r4, 0x8000) read$auto_bdi_debug_stats_fops_(r1, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 1m12.639794036s ago: executing program 0 (id=3594): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r6 = open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r6, r5, 0x0, 0x2) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x3fe, 0x10002, 0x7d, 0x3, 0x5, 0x5, 0xffffffffffffffff, [], {0x0, 0x10, 0x6, 0x6, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x4, 0x80000001, 0x8, 0x6b, 0x5, 0x0, 0xfffffffa, 0xb0}}) 1m11.264633257s ago: executing program 4 (id=3598): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) 1m9.383481389s ago: executing program 0 (id=3602): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) getsockopt$auto_SO_COOKIE(r0, 0x8001, 0x39, 0x0, 0x0) mmap$auto(0x9, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syslog$auto(0x4, &(0x7f0000000040)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0xf4) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001200)={@siginfo_0_0={0x5, 0xec9c, 0x80000000, @_rt={0xffffffffffffffff, 0xffffffffffffffff, @sival_ptr=&(0x7f0000000200)="84f1057a02f559f0998e83f2b50904a37d63f1a855947887a29d1149f3cee774cc8ff4e3a3365730b3b5d0f8ed6a14385bd67c94f5f95908e6cd5f14ebbf1b0f03be28908b6b6fd1c6151c09715248de57f72d837ccdfb8f1f768817468414b9dc90734cb93f924ec581c3423b5f4406b5bef3e1e2355b0422e30d3026339ec2ca5ac3c46fb0a6bbb5d8439fca679e7ddce3e90c934509a53b121368acc35b069fef1c8fba6a9fb069fd109dbac535fd561ef8e48aece3004d5de6e7431cb1154f743ee8a721d5f7b0f468b8912134d001c52867da062c9274c99a3326b838ae4d3a061d16395ab88c96e0ce8d30dcba7e0be96d0fcb61f738fc00e3fdd188b20a7068bcf5ecb22049d73f7c470a8c6738e746d0a1e476eadf08d12a4772d331ce1747a3dcea8fd01ac6703b5fc0b8dff4c3a866970db8289c1fa20bffed5bf0014a0bf8bd0d21dc398ed195830e4d237f91b2b27962964c6da09da1cf676cd06a3422ca1f4fce770b54e91a7d7878df66e23b673a08f7a01f2b1d4625509c069718ff895284bc037b20613b6ce3501e1b875b8dff08eb8b933ccb26a636e24b12966962de3d777136113257221ddae7ad8a61a5077ad45a8639a3b1f6b09b4af8546a7f27b679107e1f0a5cd5c570f88661060b27f558feb38121520096b16c77f944d9d4768bbc74fc8b7f4c187d9e8e305cf6c19b856d720a0bd3f58284e652b196980bcc16d821c532beaef5b51a9d31139eaa7989b5692ddf1806373e7fb1aa2e3e4533324272c3c1348739076dbd0d9bebff460d39fdf4cb2e0a327609c30ea7fd9ad4a2b5c579c31abf7739f53da1a35e7fdf7dad0ea39fb6ddde33d214850bb4a8d35230daf19352abd40bea335cdd785f97d671141c9edde864ec446f5bc6df9e9239ab55f0230ab03988f8dc13adf583ab8da2d0da344dfb88f353dc4317e7f86fdab1a0b0463c79ef1439433f19e530dacc97e8be2979db36d7b77721d61ae499c999dc4a7bdf103bb75108eb364db583ba9cf38c4f308f73873b524a2676bccdb10ed7f720ebb99f148d506006d81fdd1cc6cf88653743a81e1d8daabf1761614cef6a82a7c6992b80db054b952084efcd643607ac76da600a048fdc19bac07f713aaad2e5703a3a074044da11094572c6a70c0cf6e8ecc0e754a8c32ab2245aff99d0dec2585ee6edf414ad7cb7c8fcccdbb2c55dc1ec472a4466a55e984a31ffc6844d1fe7c169456bb95a55ac981ebd3138ab1cdbc57f05d9017affb963ee68f1378558fd9da144e10818c25dec56bad6caf8fb23f70b2a8a42e80c6a02a488c631a270b85b48ab73e48ff691498fbb48523e5216a4e5bf7f6e650a3835ff51d8ecd2d8a6f153163e9ab3891123dc39e8c5f990a02fad414f69087488d1718636bd54c7bc14df92a3c2aed7257ea759454ba21ec7229ceb2623b9c3e415964f52d802df87551e90cca7ee4fc69135bbd2280d339d773475782f6fcbbdd7fe004c834063813b4b59916595e740af197e25bccb24e607eba77f3989b4e680d02f3ba3988c43006a5e758505b9ec4da9c871a3dcb2b8dbe3cc3fa5ab458884dfd5eda0e5840bb6a162c77579440812d4e769f36466261effe8f715e8999be0cb6130f4fadfa314ccedc3e69d65ffff702766e602b4623013aa07f0af155c328f0c804f8d13ba9a3101672ce5468b498052966ad1584e968e1abff8f0439e649bbf9539e591fdeaafcff3db4bde69cf0c7066f48aafc00ade988699609228a45d878fd9e90441dab8a51e6317fdf8345f135711f2a1c24408336fe7d996d0945858faf592de97b637d62e653d9ff4bfe22e3711027bbbbe2cd508ee7e0934605ace971da3ec44d82e867e6465bc8040929bf3d8d370f3f5c386abdb8c0ca30d6027551cddb6de851c78f7e03f61d3c39c97fec308cfd0ec1e88ec20451c1a4d999832f44ba24be35cbed28b3bccca7851430bf54d5b5f6cc1a6f1a38f340487830f913bd9d4a06026402dd227f1de0da7726e3debe2cc63fb219686104f8a5afe0af744a85b12491d08bfb46c67dd59fe6bbe46ac4eff02c576670d8a7e91bd4946d7e489b819b7dcf9d31a4d9cdcbd22cdf84155c0567df089d06ddb04415738fda8ec4c884d614fc0a09e5bbe7f7e5e335188d40cfc4c0443e7066f81009dbd2545f982aafd0bef7b18fedd6be05f50a0aa3847a8837c76b644947075d4f311ba1b0ae9a86d0fd56b70bb788f2d109a439491ae441cf11a7df086d9ed8ef1c7c95848a08f85d38866485ab2b18a4a67a673f73ba5d87b70429cb1a324776a13ef7000a39025ee7deb2fdb700bae50086cc13f28e8198058d4ed4156f8a3c8789dc74b59ce97aac5520c878acfe41d05a9cb5d60bfdc8b08a67ab6860d72af3ce31506c92fe237c271a69b40fd9d332270add3f76136f6165dae6bfaf5ebbd2eec0ca4cab804a1648cece151929066a5b23a3b4aafd719a0d30fbbb3e87da81f52c2f221f9d4226bb3706ed3db03b17f9ee3aaa0aeb8610c56b050b4b8f00e8bdf83df9b8fa72e4e6c6fcd4dfbcb80ef548f1652d0418b25af7308427bcf7b1fe6da8fc94593334b69929072d945e06377aea6baaab34ba85c04d04ea0338a982a1c7d95ef1ed59639e00784d122ed051eda4aea62d48d07f74d22f18246e3a3619b05d6d25b0f519fa8d95098e459994a00727b5f4f52c485daaee5a46c081ea089642c6cc14806d73952fed63936636c769abc4dc45a30712d98932edd45455bc5a9133e44f804ff86b9175ad10e463ba61ed6991c01c0ae91ebb75b4a36cc5464f876424493b4e8e8e937c46d3d0039e159ff2924c647552f7b16561a147537ed1310eb10fe5acea537ad92f6241a8d8faed5ee5dd044013a80bd5e3602bb77e28c06b3f7d669cc0b1db89211ee794a25302e9a926ca4b679f94bdfb915c6c63819cf6b881d85f9cac0a51e39f249172730501fc383bc1cd76e94b3317ddd0b64fb2e070c020c49fb5f8ecd1f92beeab2f189923c22187d405088846edf134a185df5e76ec4081ff52b8ed1e296844e99e3ae594fd2c69633184f248bf514b555e91be96f24bd3441523d12b5064cb33138a9495ddcc6f65d12408cc800ffbbb4162a41204cc179cbe04a1e7944ebb952004eecb9b53ba1b02ade8ec4e4fdb63b4aaefb8899edf08a01f765ab52a28d948de190c39d68a2293fe2db8ce5dbc8853b2797d4e91854ddb94bfa741fbd41944ed2ec7718a4d4842c451f4132072f9359ddb7261f41ea9c7b7e5a915872694bdaed3da90d3318370512a34f40db85eef0e9323cf6f89098cb8cdc465ec7010183c9a68529f195b57ea923c658440b09492924422e372c8aaa4a9865b01cc1b604aae7691859bc99af187fdcaa7242c94e8131c08b8f874b8e4b54055e33a3616a2d367294747c2837a75e4d017c5fde6229418c9b3b5926a5f19404ef6dc35b0f94ce351780c1058ff2719d4d306930c728c71ef415a6fde2e4627acd1fda069e79ffcf27440f9cbc6291011ca686bf28d3aafb0b54e37a01c2c3e85e2ffd29b7aafd4d4d1ec79e6fa6646ecaf32cf2c1f9a3d9c974a1f527161c11f05151624288ecf1055a46ed70e8293fb97a83eaa88c17e57c182a8e9b86172e876eae4e69f3f9b9e6ced2d654d6c8915eadd762c21c32d05ef51c026ec97fe0507abcdfee1a0df9834c280bae21a6f0bc96b514126fdaa5e0f797cc63109f48e1e5d4b9df3787f4862f71ad4808809a2128ff4ebcb8a1bdd3e464da51412a6e56f49873f7e8139e64410881966d0569cc246cbc30d6b654f88d3e3dcd56e0509618a48f2e82ecc549b812c8bb592312e2fbd1be8916a0d141607b21945d12045c38e35bba5965ea367255f7866752428d183737fb86e7c3d847393a2a8d4428866a3f6a6d82237cc2a188fcca254eb8fc1384e744a019220a815f1adc815b6abb7d24659b0a577f9fc0d2b435b4de1c11ac06688d83a839b37f2626378e616d2b73cd84389446cd201dc9556d2a4bfb2c3ea9f9fc647b93a6d658d4ceb9821a33ec42644452e0d038011f5be54a5665bc1800f70685eef711d829e257a895c5aefd2a03e7fee6f249b47bc4118352d25011792d97975ea63571cbec2ba39ad80d8b73d93bf961aff1eb1c6aecf5906a49dce3885c2a240997f5d9d40d73b36331cd26ef86d75cdf468d43bde6f11d3894a222eeb952c51bfc7542bd1253bfd32ea4b1d668717fb92afefa2b391339bc769e0231dcec1af079bebde343db6cb075307aa16532f97c37546f71e188db45a4e548a293af0fbeb71bc82eee5f2a3d25bf6f937b12d530a3cc87ef0d4e1fa99b24aeec8d63284b9446beb498982eac3bebb2a5e18c52d07dc31be388c8907d13b232f658e29051220498ca173012aa2b296761a3fab2c8b16e75c87b32284c0e60df035ee72ba945daf64771015c47b70d7a427ff377f45257c599ca80e84f4032e8d390fee4620b7442174b28b1d940fe5fe2209150457508481fc3f334f986e4ed35f56ecac0a50ded8b346cd6e0e405bbd1a36923a856bf0188f6b3646ffae7e2385f607c3cd6dd5aa6cd8639fe1e695b012540474b4a6e238bc692eee0fc2df26e8e0a2e529e8fd84c6c63818fb10e12fa1aef8a7f32823f5451484538d5e2edaa781b87f10a76913dc8c2d9715e497576257f745876c9e3838711710d38f67ef9aa1ce317911eed1b4c1f537be27e806846f24e5fbdea3d441bebdabcc57322ae2bc9502a17b7fe4671cdf017e8531ca0787b5e52f2aa0062f065e80fbeb011ac01bd1cbd4a1188514ad79ce3ca32c57b0db566ca6a178e2cfb501d6df3bd7508c6282c2a73787dfd282bee13c20eb62068d6cc047fd4c9af429724dd18eaf85c479c24f71bcedd16d9450e68e6c8493188d63e02c1c569d2d58bd292f8e4fdc256926135817fa158308c79126d25ebc9374552c6f052a16b291f5889109796f39884e77dbd165a4e2e616afc6c6f062e68f0ba1f3ebaf9c541fdceca6b94976e253ff921740b574dc705ab7606fbd27382d4facd7f4d33782ee5fb6e1381372ec9ea9a70cdb987f5d747e5a0b2eacde76a2ad50e158b4a272e85dbc91ae4b05c5460e3c81e7acd8020889c50ed3f1588e12446877f8728dfcf4c1395fc30f6af4f8839166ebad8efc11ba30ece2d448dbed7eebf89d10095a069813808781f53df3600fb1128cc26c42afd5959a662579418f8aaee8f5c06c5b9a802c5f5040e03f827ee09189ee1e054415007804b9c56fa65d6659196584802921cc9c5cba719b47f83dcb70cdbd331d289a073277db5cd86b38d46196bd819dbba4455f87cc81ba85d3b3369ec94dbf999886f7ab784e9c95c8505361e42635af1e159a5fc9c32b0602d2b452e3218ddb2d027663ad849e750e175934d002b75a55ee83431d3ff10d0abd9f401fe67e419d76f835d6f1036e5def1444d88c627e1cea4585bf1987d749dedd8b68baf158dd82cdeca4cdedf154b5ece1ec865c17133daea8da3681650fe10c4f0a2a8bd71df71a71b2fc3e0b0e0523e60003229db054c26efa9a2ee7fde77ed4db4f3e563b789e065452d96bde54e6de7119fe6c2cd7c558e21e4431061ecd5cdd3b6d09155e2957d89624b1a980a7a8f47c863ff01192c4d5973b7afe7eee3e02fe5e65c4f8e40d85c7f7fea9b6ae4072bf19fc647167ceda5e2f8f92b0b434197c62d9ec8fb7660529420283204e3ab83b9b9128380cbc253a8e0e52b631c106350cc41b92a8b2dd3db35722596"}}}, 0x0, &(0x7f0000001280)={{0x646f, 0xfffffffc00000000}, {0xfffffffffffffffc, 0x8}, 0x5, 0x7, 0x1000, 0x3147, 0x4891, 0xffff, 0x7, 0x6, 0x4, 0x5, 0x80000000, 0xa5f, 0xf, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto(0x0, 0x3, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r2 = socket(0x29, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) getsockopt$auto_SO_PASSCRED(r1, 0x8000, 0x10, &(0x7f0000000180)=']-^&\x00', &(0x7f00000001c0)=0xb31) ioctl$auto(r4, 0x4b62, r1) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0xd1) ioctl$auto(0x3, 0xc00caee0, r3) ioctl$auto(r2, 0x4018aee3, 0x24) open(&(0x7f0000000000)='./file0\x00', 0x202880, 0x0) 1m9.374137027s ago: executing program 2 (id=3603): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0xf633, 0x40eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0xc2000, 0x0) ioctl$auto(r0, 0x4611, r0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x98c7) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000000007ffe) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 1m9.198387068s ago: executing program 4 (id=3604): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 1m9.091953925s ago: executing program 2 (id=3605): mmap$auto(0x0, 0x5, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710f}, 0x6) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = set_tid_address$auto(&(0x7f0000000100)=0x9) prctl$auto_PR_SET_MM_END_DATA(0x80000000, 0x4, r2, 0x0, 0x2) read$auto(r1, 0x0, 0x80000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xa}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r4, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e654014f2bc90628546cda7e9ce67b7d2ab52b096b449a312a437bac96a8cbd5f23dc7bf6f14d15f2f273c36ef21cef7aeb39937ef4ea2f4dd48bc81624c1ed60c83c39ba4d4ebee5b273c9888dbd978927b4b89795bcfc7ce379345bea07636878f456f4e82905ddfef781fbf9825f22c3d1af4a2295e2fad62ed1a9fa2db5eff40233560c88004511ae", 0x98) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) setsockopt$auto_SO_PASSSEC(r1, 0xffffffe3, 0x22, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x10001) 1m7.890679514s ago: executing program 4 (id=3606): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r1, 0x0, 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1m7.889208515s ago: executing program 0 (id=3607): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={0x0, 0x0, 0x3ff}}}, 0x7fff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xfffffffffffffffb, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r1, 0x0, 0x400000, 0xc) 1m5.595743783s ago: executing program 0 (id=3609): futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r1, 0x0, 0x7e91, 0x7fffffff) readv$auto(0x3, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) io_uring_setup$auto(0x59, 0x0) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28001) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='\xee\xff\xff\xff', 0x80000000) semtimedop$auto(0x2eeb8896, &(0x7f0000000000)={0x9, 0x100, 0x5}, 0x7, &(0x7f0000000040)={0x3, 0x6}) 1m5.5949919s ago: executing program 2 (id=3610): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNGETVNETHDRSZ2(r0, 0x800454d7, &(0x7f00000000c0)=0x80000001) write$auto(0xffffffffffffffff, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1, &(0x7f00000000c0)={0xe4, 0x37b60000, 0x8, @raw=0x34}, 0x800) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 1m5.358761208s ago: executing program 4 (id=3611): mmap$auto(0x3, 0x2020009, 0x7, 0xf8, 0xffffffffffffffff, 0x400) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x48a000, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x40000023}, 0x96) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0) r0 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x10004010) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.8/usb26/bcdDevice\x00', 0x9801, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x248401, 0x0) read$auto(r1, 0x0, 0x1ff) 1m3.807778866s ago: executing program 4 (id=3613): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r0, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) syz_clone3(&(0x7f00000004c0)={0x50080000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x2a}, &(0x7f0000000b40)=""/4096, 0x1000, &(0x7f0000000380)=""/197, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) process_madvise$auto_MADV_MERGEABLE(r2, &(0x7f00000005c0)={&(0x7f0000000540)="59c0d40f2b23544996f6beecf7a8514b1eb34558976c71059eef5461adef0bad2bc338a0e3b02653a44e2d1e9db6c8ffd454f03781627e7f9414f4f20d86b1c95efa8fcb58cca00a22450c5eccbfc8f4d5463001b24333d6f97e4281d77d06853be88d8dc1f6c3e7863fa2d7", 0x2}, 0x0, 0xc, 0x3) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000000c0)="853b33beb09cc9805808ebfcf09c11e1f16d8766f7d285df51d3f93f524861b48f927d619dcf98b1d448352bb6b73362a150591191f29db12efc6bd5fb3a4a65bd1223fc536a894f0a72a1a5b23fc6aeadcb1e1611d62ac3f5ddbceb50b715871b98b255605106af1386095da3ee314be8d9f0f325490823693c4c491bcf64168ea62286f6f6b7af85") keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1fff7000, 0x1800000ff000000, 0x5) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r5, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r6) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$auto_percpu_stats_fops_(r5, &(0x7f0000000180)=""/93, 0x5d) 1m3.121634345s ago: executing program 2 (id=3614): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) msgctl$auto(0x4, 0x10000, &(0x7f00000002c0)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1, 0x4}, &(0x7f0000000240)=0x9, &(0x7f0000000280), 0x25, 0x553, 0x9, 0xf41, 0x2, 0xffff, 0x6, 0x3, @raw=0xe, @raw=0x59}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) ioctl$auto(r3, 0x4b72, 0xffffffffffffffff) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16, @ANYBLOB="000227bd7000fbdbdf2503000000a70001002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c000200253a5ec62d3a7c0005000400a40000000500040009000000"], 0xd8}}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0405626, r4) 1m2.272453289s ago: executing program 4 (id=3616): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 1m1.798979642s ago: executing program 0 (id=3617): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 58.884827039s ago: executing program 2 (id=3620): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001340)={0x18, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001580), r0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f0000001240)=':,\x00', 0x0, 0x9000000, &(0x7f0000001280)={0x4, 0xac, 0xfffffffffffffffb, 0x1, 0xee00, 0x0, 0x7, 0x100, 0xa, 0x8001, 0x2, 0x0, {0x4, 0x7}, {0x3, 0x3274925}, {0x1, 0x4}, {0x180000000000000, 0x400}, 0x10001, 0x3, 0x8, 0x727, 0x33, 0x8, 0xfffffffd, 0xfffffffffffffffd, 0xfffffffe, 0x401, 0x3, 0xc58, [0x5, 0xa71d, 0x7df5, 0x6, 0x9, 0x0, 0x8000, 0x6, 0x81]}) wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) shmctl$auto_IPC_INFO(0x2, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f00000015c0)={0x424, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [@nested={0x4, 0x157}, @nested={0x4, 0x8c}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x2}, @nested={0x20, 0x5b, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0xcb8}, @generic]}, @typed={0x4, 0xa8}, @generic]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c7, 0x2, 0x0, 0x1, [@nested={0x95, 0x4d, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @uid=0xee00}, @generic="35e778354a4cbbe66767af46447c2a916be188961f60217bca921fb75729764a6c7c3c120f4d577e9ef3d031944d9c536edb68f32c9ffe8b406f97b09c0a3c210ab31952e376889c028b0295537be8b7696fb76083a2a1994cbfc50516f0434c90dca8ab94bd1b8fb9087388090224ffade4e1d4361349d2a9c05b02ae9d12f990d878ec8207ea419f"]}, @generic="55d67aa9eb50baa8b549389e99869b7ccf334d1f0593450b7551ef04576384c88763ebbe06254ae6fc75", @nested={0x274, 0x92, 0x0, 0x1, [@typed={0x101, 0x156, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x22}, @generic="97068e7d5cad19da5fb2a0d6c5dc42c5359eee09e3f7dd215547d2e5ef6b011eee641e2bedad396d9182e5a88934df667f3adc8ba9d6d60f7a42d5d0afd2e7490eee1ed6f428d3cb1325bb0b2a78e24cf3549c36a298a80a0e056de075d7489d642a57dfdd3b0330a2e4428582baddc22ed661f0defa944000851fe9a1414066a8ae6031a216728e4d3b09701f0b9f3e4215df76adf7dc2a15de3991fc4c26f03b8a0dcdd661e1482e8dc4e1ac1300ed466b8ec79917a934834912b7c6548150df9e859cb3509639cc", @generic="cbf10c685484165bf14589d7ab869dbd02a585daca2674a5c6a484130cc079e8b133e75558f3ad1d7802c8252112c9630eb13c5a8aa557f995d2eb2e5a64d9aa5c45496c4340f2df3704636313fd4b277242ab751255a3814fef6c2e105a9f366ab8f26409ad6b4376d4a9aefa9d46a60ac80177c9e31814aed29fcdb7895d4bc2f0bf", @typed={0x8, 0x15a, 0x0, 0x0, @fd=r0}, @generic, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @generic="48932c880e4a69a2b993548a860cb8d041b8cfb5941b0bd7f25a6fd03e299ee697f5cc93236f2d", @generic="e67e66be2b", @generic="50800a78bd77ec33e28a7c42d257e4ef70059c3f2bbd4a1af7d79c914232a119552bbe460eda5ee650aa17e9592f3e3a1f7b9bbbf3c095851139de2855dcb69b7136fcd4ad5ebe64dbf897f79a68845e056ab4c048de94af8f"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r7, 0xc0045627, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 57.67776827s ago: executing program 2 (id=3622): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 47.148656192s ago: executing program 34 (id=3616): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 46.335147257s ago: executing program 35 (id=3617): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 42.326431584s ago: executing program 36 (id=3622): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 26.645121246s ago: executing program 6 (id=3653): r0 = socket(0x1d, 0x2, 0x6) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) setresuid$auto(0x0, 0x7, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140)="139737edf09bc0ab4587d1384902bf2e38ea30f73106cff83c4513698090b8fd", 0x10, &(0x7f0000000200)={&(0x7f0000000180)="132c6e81b55839dea00e60bc2e57031cc5f6ebf12647aad6b2ab950d7505b0b284fb7d2b0d6ade1c28d760338d58010de408cc4151b8c2f4ebe7d0123129fb20602eaa", 0x8}, 0x4, &(0x7f0000000240)="a0dea4e6afb633b742c10d7f079a9ab3ae4a217ab34df42512305684335c5611a4", 0xe1a4, 0x4}, 0xb}, 0xfffffd3b, 0x4fe) clone3$auto(&(0x7f0000000000)={0x5, 0xd3d, 0xf, 0x10200000, 0x7, 0x200, 0x50, 0x5, 0x401, 0xb, 0xd}, 0x5) r6 = socket(0x18, 0x5, 0x1) connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) sysfs$auto(0x4, 0x80000001, 0x401) read$auto(r7, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) r8 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r8, 0x73a) setfsuid$auto(0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5}) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), r6) ioctl$auto_SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000440)="e864d599057cfe9c13d75fca051510896682779b3b37e86fbc996bbdd107ea6b0ae531f7dd3d0724f7ff4370514f8fb6e4ab6accf616b3538e138170cd5d68547dd9c393ef6adb5080a0aa2b90fdd19505739f31c0593eec2fc0e97ed4ccd2ff33b901aead54710855") sendmsg$auto_NBD_CMD_RECONFIGURE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fcdbdf2503000000080001000300000008000100060000000800010000000050e8588b9dd7000c000600ed21"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 25.738943564s ago: executing program 5 (id=3654): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TUNGETVNETHDRSZ2(r0, 0x800454d7, &(0x7f00000000c0)=0x80000001) write$auto(0xffffffffffffffff, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x1, &(0x7f00000000c0)={0xe4, 0x37b60000, 0x8, @raw=0x34}, 0x800) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0) 25.157919643s ago: executing program 6 (id=3656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r1 = prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x800) accept$auto(r1, &(0x7f0000000240)=@hci={0x1f, 0xffffffffffffffff, 0x2}, &(0x7f00000002c0)=0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) open_by_handle_at$auto(r3, &(0x7f00000000c0)={0x0, 0x4}, 0x7) 24.446868907s ago: executing program 5 (id=3658): socket(0x2, 0x80000, 0xb) 23.397546712s ago: executing program 5 (id=3660): openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub4/hw_params\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) socket(0x2, 0x5, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x6200, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 23.166740433s ago: executing program 5 (id=3661): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x149182, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) 22.543628681s ago: executing program 5 (id=3662): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@token_create={0x5, r2}, 0x9) setsockopt$auto(r2, 0x9, 0x8, &(0x7f0000000000)='\x00', 0xfffffffe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto(r3, &(0x7f00000001c0)='7K\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) r4 = socket(0x26, 0x2, 0x1) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r2) socket(0x1a, 0x80000, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80d0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) finit_module$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) r6 = getpid() shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f0000000440)={{0x1000, 0xee00, 0xffffffffffffffff, 0x97c, 0x10000, 0x0, 0x9}, 0x671, 0x69ad, 0x1, 0x7, @raw=0x1, @raw=0x6, 0x4, 0x0, &(0x7f0000000280)="832922ddc770db99b839741117f955b6735d03d985bb0f46b5b9e41c23c97cb1950132814cf16079ab956dcd1f5bb39fcbcc842f4e62248b4c036f886e258e472752d687de0b70970a8c568113d644abda8924cd3c7a1c52e7871953af04ab7288858bb1f5e29f2be25906f6430f9929cf77d87a1224f8d05ad01eabd89a35a56a5f657bfe81b8dd", &(0x7f0000000380)="fd0c4ed64791f3d9dfe195178d558f040c07c9dcd8dce90465bedf68670c65c3bfd77235f71d8090dbcefc5db01b1291dd7104221261927b14420880bcc5574504571190934005d7f8d2226ef93ccf0776e7bf21705da66d8650a5334ff3cf2c77948d27e77fbab10b29e68d9fedc8a70155ec821f622d3b97d2586a36f1013f85f6308e554666f46a892d45e7170c9d8b4c058e2733b1fcfa6e8460e05b879f37d5317c241d"}) msgctl$auto_MSG_STAT_ANY(0x80, 0xd, &(0x7f0000000540)={{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x101, 0x400, 0x2}, &(0x7f00000004c0)=0x4, &(0x7f0000000500)=0xff, 0x2, 0x9, 0x4, 0xe, 0x2, 0x81, 0x8, 0x4, @inferred=r6, @inferred=r6}) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f0000000640)={{0x2, r7, r8, 0x9b, 0x8, 0x3, 0xef}, &(0x7f00000005c0)=0x9, &(0x7f0000000600)=0x6, 0x6c6be1f7, 0x7, 0x9b, 0x800, 0x1, 0xfb, 0xa66f, 0x401, @inferred=r6, @raw=0x4}) rt_tgsigqueueinfo$auto(r6, r6, 0x2, 0x0) 22.028950376s ago: executing program 5 (id=3664): r0 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=0x1) fcntl$auto_F_UNLCK(r0, 0x7f, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) r1 = open(0x0, 0x595002, 0x60c) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000500)=""/4096, 0x1000) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r4, 0x8000) read$auto_bdi_debug_stats_fops_(r1, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 19.331552365s ago: executing program 6 (id=3668): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 17.568759488s ago: executing program 6 (id=3674): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 16.626147589s ago: executing program 6 (id=3675): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) 15.551707443s ago: executing program 6 (id=3676): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) ioctl$auto(0xc8, 0x400454de, 0x6f) writev$auto(r0, &(0x7f0000000040)={&(0x7f00000002c0), 0x4e}, 0x4) 15.271052973s ago: executing program 7 (id=3677): r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/usb/drivers/cdc_mbim/uevent\x00', 0xdf802, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000240), 0x7}, 0x2000000006, 0x12, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r4, 0x40045566, &(0x7f0000000040)=0x7fffffff) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00 \x00'/21, 0x100000002, 0x100000001) 11.531171331s ago: executing program 7 (id=3683): r0 = socket(0x1d, 0x2, 0x6) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) setresuid$auto(0x0, 0x7, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f0000000140)="139737edf09bc0ab4587d1384902bf2e38ea30f73106cff83c4513698090b8fd", 0x10, &(0x7f0000000200)={&(0x7f0000000180)="132c6e81b55839dea00e60bc2e57031cc5f6ebf12647aad6b2ab950d7505b0b284fb7d2b0d6ade1c28d760338d58010de408cc4151b8c2f4ebe7d0123129fb20602eaa", 0x8}, 0x4, &(0x7f0000000240)="a0dea4e6afb633b742c10d7f079a9ab3ae4a217ab34df42512305684335c5611a4", 0xe1a4, 0x4}, 0xb}, 0xfffffd3b, 0x4fe) clone3$auto(&(0x7f0000000000)={0x5, 0xd3d, 0xf, 0x10200000, 0x7, 0x200, 0x50, 0x5, 0x401, 0xb, 0xd}, 0x5) r6 = socket(0x18, 0x5, 0x1) connect$auto(r6, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) sysfs$auto(0x4, 0x80000001, 0x401) read$auto(r7, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) r8 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r8, 0x73a) setfsuid$auto(0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(r9, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5}) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), r6) ioctl$auto_SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000440)="e864d599057cfe9c13d75fca051510896682779b3b37e86fbc996bbdd107ea6b0ae531f7dd3d0724f7ff4370514f8fb6e4ab6accf616b3538e138170cd5d68547dd9c393ef6adb5080a0aa2b90fdd19505739f31c0593eec2fc0e97ed4ccd2ff33b901aead54710855") sendmsg$auto_NBD_CMD_RECONFIGURE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fcdbdf2503000000080001000300000008000100060000000800010000000050e8588b9dd7000c000600ed21"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10.108518015s ago: executing program 7 (id=3685): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r0, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r1) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001340)={0x18, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001580), r0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f0000001240)=':,\x00', 0x0, 0x9000000, &(0x7f0000001280)={0x4, 0xac, 0xfffffffffffffffb, 0x1, 0xee00, 0x0, 0x7, 0x100, 0xa, 0x8001, 0x2, 0x0, {0x4, 0x7}, {0x3, 0x3274925}, {0x1, 0x4}, {0x180000000000000, 0x400}, 0x10001, 0x3, 0x8, 0x727, 0x33, 0x8, 0xfffffffd, 0xfffffffffffffffd, 0xfffffffe, 0x401, 0x3, 0xc58, [0x5, 0xa71d, 0x7df5, 0x6, 0x9, 0x0, 0x8000, 0x6, 0x81]}) wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x6, &(0x7f00000013c0)={{0xc000000, 0x4}, {0x48, 0x7}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x81, 0x1b}) shmctl$auto_IPC_INFO(0x2, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d40)={&(0x7f00000015c0)={0x424, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [@nested={0x4, 0x157}, @nested={0x4, 0x8c}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x2}, @nested={0x20, 0x5b, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0xcb8}, @generic]}, @typed={0x4, 0xa8}, @generic]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffe}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c7, 0x2, 0x0, 0x1, [@nested={0x95, 0x4d, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @uid=0xee00}, @generic="35e778354a4cbbe66767af46447c2a916be188961f60217bca921fb75729764a6c7c3c120f4d577e9ef3d031944d9c536edb68f32c9ffe8b406f97b09c0a3c210ab31952e376889c028b0295537be8b7696fb76083a2a1994cbfc50516f0434c90dca8ab94bd1b8fb9087388090224ffade4e1d4361349d2a9c05b02ae9d12f990d878ec8207ea419f"]}, @generic="55d67aa9eb50baa8b549389e99869b7ccf334d1f0593450b7551ef04576384c88763ebbe06254ae6fc75", @nested={0x274, 0x92, 0x0, 0x1, [@typed={0x101, 0x156, 0x0, 0x0, @binary="fbcedf7ca35d0089dd7fb7204664dc05d1bb98ada40bc7a43d16e21978dc0a916d0dce92db81c59c59e12a65101486ec47c4e78664b3c8e43aafd586ec8c9c045d0adab9cde9ba5725ac36bdd7514a261c5fe31923799b37be356a343440ac95088fafa187273a7494c78b3d345152afc103949ff9019e6c1dc81181b631c1352ae7565a8c27e68cc32ca3e10ed3618d48574dd6615f82be8139d3d5db83be4efabe890962a93bbd924d5e77ad7f6a029a9bf9181df414b1611abc175f452c8433b93dc7f93641ef3d47500954fee4ccb5d84ea3ef8aebc198a711623949ed7ec9110889f559034df0deaf0fe8a87412d8e765b8f67c61b7c6b5709e42"}, @nested={0x4, 0x22}, @generic="97068e7d5cad19da5fb2a0d6c5dc42c5359eee09e3f7dd215547d2e5ef6b011eee641e2bedad396d9182e5a88934df667f3adc8ba9d6d60f7a42d5d0afd2e7490eee1ed6f428d3cb1325bb0b2a78e24cf3549c36a298a80a0e056de075d7489d642a57dfdd3b0330a2e4428582baddc22ed661f0defa944000851fe9a1414066a8ae6031a216728e4d3b09701f0b9f3e4215df76adf7dc2a15de3991fc4c26f03b8a0dcdd661e1482e8dc4e1ac1300ed466b8ec79917a934834912b7c6548150df9e859cb3509639cc", @generic="cbf10c685484165bf14589d7ab869dbd02a585daca2674a5c6a484130cc079e8b133e75558f3ad1d7802c8252112c9630eb13c5a8aa557f995d2eb2e5a64d9aa5c45496c4340f2df3704636313fd4b277242ab751255a3814fef6c2e105a9f366ab8f26409ad6b4376d4a9aefa9d46a60ac80177c9e31814aed29fcdb7895d4bc2f0bf", @typed={0x8, 0x15a, 0x0, 0x0, @fd=r0}, @generic, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @generic="48932c880e4a69a2b993548a860cb8d041b8cfb5941b0bd7f25a6fd03e299ee697f5cc93236f2d", @generic="e67e66be2b", @generic="50800a78bd77ec33e28a7c42d257e4ef70059c3f2bbd4a1af7d79c914232a119552bbe460eda5ee650aa17e9592f3e3a1f7b9bbbf3c095851139de2855dcb69b7136fcd4ad5ebe64dbf897f79a68845e056ab4c048de94af8f"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x20000800}, 0x1000) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r7, 0xc0045627, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 8.841297137s ago: executing program 7 (id=3687): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x27, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x0, 0x0) r2 = getpid() io_getevents$auto(0x24, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x5, 0xebe, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x4, 0x2, &(0x7f0000000500)=0x3, 0xa, 0x1) futex_wake$auto(0x0, 0x9, 0xffffffff, 0xa) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r4, 0x820, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) waitid$auto_P_PID(0x1, r2, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x8, 0x1, 0x9, 0x6, 0x69, 0x3, 0x6, 0x0, 0x2, 0x37, 0x4, 0x6}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) 6.838706935s ago: executing program 37 (id=3664): r0 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=0x1) fcntl$auto_F_UNLCK(r0, 0x7f, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(0x3, 0x81484d11, 0x38) r1 = open(0x0, 0x595002, 0x60c) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000500)=""/4096, 0x1000) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r4, 0x8000) read$auto_bdi_debug_stats_fops_(r1, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) write$auto_proc_uid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 6.214041116s ago: executing program 7 (id=3691): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001) gettid() r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 6.20248807s ago: executing program 8 (id=3692): sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2200, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0xbb0a, 0x2000000df, 0x20000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(r1, 0x5423, &(0x7f0000000140)="c52418ade777b29a6b5eb37cf867f0cb761d6ff5f138996b8d790c66823e3161754a49ebcb8eafaf22389a203001376928c8657290e0f6f84385368e21618cb2f31085c5b2d649f70ccfd2a8cdedd5f4a048db6bf149b936b5e14f334baef14f50c677e061febbb17654e8aed3165ee3ffaa88ef39ff85ff65f2efe48af96062a99ea9a7d9315943aaf74b774df6b2e9775fee111bab1e025b92710fad883f0caf23161f6f554fd72af13a93e237446d8150846f9799e547e10ef5ff9e883bca4a3dddb436fd608eae4b2cfabcf64ab5ba5845f7435b8d91c21ea8") mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = epoll_create$auto(0x8800001) epoll_ctl$auto(r3, 0x1, r0, 0x0) 5.107435291s ago: executing program 8 (id=3693): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) mkdir$auto(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0xf6, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_RCVBUF(r2, 0x2, 0x8, 0x0, 0x9) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x103040, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0xffffffff) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x529380, 0x0) 5.066018312s ago: executing program 7 (id=3694): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0x0) madvise$auto(0x2000000, 0x8, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto(0x3, 0xc08c5332, 0x38) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd50009ddbdf251100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20018048}, 0x0) sendmsg$auto_NL80211_CMD_STOP_NAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4) ioctl$auto_BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0x1, 0x5000000000}) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x4, 0x7, r1, [0x1, 0x401, 0x1000], {0x7, 0xd4, 0x1, 0x1007, 0x95, 0xf6c, 0x7fff, 0x5, 0xfff}, {0x3, 0x8, 0x10000, 0x0, 0x5, 0xfffeffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 4.300955479s ago: executing program 8 (id=3695): pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x75e8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x412200, 0x0) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x24044094) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x2fb) mmap$auto(0xfffffffffffffffe, 0x9, 0xdf, 0x9b76, 0x2, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14c"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.837169461s ago: executing program 8 (id=3696): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[], 0x244}, 0x1, 0x0, 0x0, 0x20000081}, 0x40094) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) sendmsg$auto_NFC_CMD_ENABLE_SE(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000004", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf2511000000080001000500000005000a0007000000080001000100000008001e00a2000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8804) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x5b, 0xbb, "ae38f51a6241e2326e1620187b87114228f98410ea43be499e912fa019baee81584f7e52f9bd2a4f905ccc548ca83fe59a31a42ae6966701786a2d0401e7fe9dad9160f8110b3dc3a47c916ce737b326245f7e995742b3"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 2.508576383s ago: executing program 8 (id=3697): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2a00, 0x0) socket(0x2, 0x1, 0x106) fcntl$auto_F_GETSIG(r0, 0xb, 0xab8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x79) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x2, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x8, 0x9, 0x6, 0x4]}, 0x0) write$auto(r1, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x40, 0x100000000, 0x0, 0x40) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r2, &(0x7f00000000c0)='\x01', 0x10000000004) fanotify_init$auto(0x5, 0x2000000000002) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\xff\xff\x9a\xb9\xd1\xf5\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) fsmount$auto(0x4, 0x0, 0xa7) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) r3 = socket(0xa, 0x3, 0x3c) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x600a40, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$#\x00\x00', @ANYRES16, @ANYBLOB="02002cbd7000fddbdf25540000000400d80008032380b2001580824cddaf98490162d3358ca9a574a732e1a5ddfdffb1a3b5ae8f11811c9462df69805e3356c7960e4b155615336181cbe5da3c7e739ecd85c921bdee95709ab0c60bf7075f9a5a8c8be7e1f5500c5133587ed0c09b40fd884881ededc8bee0a3c523a51588e9302747c375348b9011a25977906daa0425ace47e3bd745ff3ec2f55d78765cc3c9735a5b51f75bd1a8ca0f6089b2dff35ce8221a3ac67cd6bd5c8a7bcefbf05c0a4d23fd3c58c590000008004400", @ANYRES32=r4, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000840) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0) kexec_load$auto(0x30, 0x91, &(0x7f0000000040)={@kbuf=&(0x7f0000000000)="5201c541f2f98930373ea086c524def7a516839ba6792db4", 0x81, 0x0, 0x200000000f}, 0x7fffffff) 1.202658348s ago: executing program 8 (id=3698): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r1 = prctl$auto(0x43, 0xe, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x800) accept$auto(r1, &(0x7f0000000240)=@hci={0x1f, 0xffffffffffffffff, 0x2}, &(0x7f00000002c0)=0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) open_by_handle_at$auto(r3, &(0x7f00000000c0)={0x0, 0x4}, 0x7) 276.61265ms ago: executing program 38 (id=3676): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) ioctl$auto(0xc8, 0x400454de, 0x6f) writev$auto(r0, &(0x7f0000000040)={&(0x7f00000002c0), 0x4e}, 0x4) 0s ago: executing program 9 (id=3690): bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x9, 0x24, 0xf, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x8, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x319, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/218, 0xda) socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x81) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r3 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000240), 0xc2800, 0x0) pread64$auto(r3, &(0x7f00000005c0)='\x03W\x96l\x1e~A\x15\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xad?\xe5I\xcf5\x11\x99\xf1\xa2\xa0\x82UnO\x8e4\xc3\r\xe3i`\x9dV$\xe9\xa0\xa1\x7f\xd1`Xp\x9a\xbb\xf8\"\x02\x87\xb7\xf1u\x05_\xb1\x98-wbh\x1a\xbd|\xb4!\xbeA\t\x00)8\xd9\x86\xffm\xb8d\"]\x98\x96\xf4\x8b3\x9d>\xb0<\xcf\xbfl`9q@\\\x990\x82\xe1\xde\xd6E\xefzq\x9fBN*\x93=\r\xe3\x00\x00\x00', 0x100000002, 0x100000004) kernel console output (not intermixed with test programs): 6090 R15: 00007ffdb8ef5038 [ 692.641779][T14924] [ 694.033427][T14940] random: crng reseeded on system resumption [ 696.509617][T14976] random: crng reseeded on system resumption [ 698.455133][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2213'. [ 700.301446][T15042] random: crng reseeded on system resumption [ 703.140890][T15088] random: crng reseeded on system resumption [ 703.747435][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2233'. [ 704.080166][T15105] random: crng reseeded on system resumption [ 704.148194][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 707.471779][T15159] random: crng reseeded on system resumption [ 707.689211][T15163] random: crng reseeded on system resumption [ 709.161396][T15173] random: crng reseeded on system resumption [ 709.586840][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 711.847579][T15213] Process accounting resumed [ 712.064795][T15223] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2257'. [ 712.115137][T15225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'. [ 715.556022][T15280] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 715.721022][T15286] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2270'. [ 715.739746][T15269] Process accounting resumed [ 715.766757][T15282] smpboot: CPU 1 is now offline [ 716.463816][T15294] random: crng reseeded on system resumption [ 718.623302][T15332] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2282'. [ 719.282985][T15339] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 719.546133][T15343] smpboot: CPU 1 is now offline [ 719.997521][T15354] random: crng reseeded on system resumption [ 723.221054][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'. [ 723.304424][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 724.076303][T15415] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 724.594762][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 724.649650][T15434] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 724.685197][T15434] netlink: 'syz.0.2303': attribute type 6 has an invalid length. [ 725.280978][T15445] random: crng reseeded on system resumption [ 726.832531][T15473] netlink: 89 bytes leftover after parsing attributes in process `syz.2.2311'. [ 726.911100][T15473] netlink: 89 bytes leftover after parsing attributes in process `syz.2.2311'. [ 726.956618][T15470] netlink: 89 bytes leftover after parsing attributes in process `syz.2.2311'. [ 727.005887][T15476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2312'. [ 731.008714][T15551] random: crng reseeded on system resumption [ 732.415825][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2334'. [ 733.783036][T15600] random: crng reseeded on system resumption [ 734.233880][T15610] random: crng reseeded on system resumption [ 735.099140][T15625] random: crng reseeded on system resumption [ 737.292599][T15662] random: crng reseeded on system resumption [ 738.890760][T15689] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2358'. [ 739.302564][T15694] FAULT_INJECTION: forcing a failure. [ 739.302564][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 739.394829][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.3.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.394869][T15694] Tainted: [L]=SOFTLOCKUP [ 739.394877][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.394892][T15694] Call Trace: [ 739.394899][T15694] [ 739.394908][T15694] dump_stack_lvl+0x100/0x190 [ 739.394952][T15694] should_fail_ex.cold+0x5/0xa [ 739.394981][T15694] ? usb_alloc_urb+0x66/0xa0 [ 739.395011][T15694] should_failslab+0xc2/0x120 [ 739.395038][T15694] __kmalloc_noprof+0xe0/0x850 [ 739.395084][T15694] usb_alloc_urb+0x66/0xa0 [ 739.395115][T15694] do_proc_control+0x2ee/0xe50 [ 739.395152][T15694] ? __pfx_do_proc_control+0x10/0x10 [ 739.395193][T15694] usbdev_ioctl+0x1a28/0x3aa0 [ 739.395230][T15694] ? __pfx_usbdev_ioctl+0x10/0x10 [ 739.395269][T15694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 739.395296][T15694] ? do_vfs_ioctl+0x226/0x13e0 [ 739.395344][T15694] ? find_held_lock+0x2b/0x80 [ 739.395368][T15694] ? __fget_files+0x215/0x3d0 [ 739.395397][T15694] ? hook_file_ioctl_common+0x146/0x410 [ 739.395435][T15694] ? __fget_files+0x21f/0x3d0 [ 739.395464][T15694] ? __pfx_usbdev_ioctl+0x10/0x10 [ 739.395498][T15694] __x64_sys_ioctl+0x18e/0x210 [ 739.395537][T15694] do_syscall_64+0x106/0xf80 [ 739.395562][T15694] ? clear_bhb_loop+0x40/0x90 [ 739.395591][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.395617][T15694] RIP: 0033:0x7f5c1f59c819 [ 739.395636][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.395660][T15694] RSP: 002b:00007f5c203ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.395683][T15694] RAX: ffffffffffffffda RBX: 00007f5c1f815fa0 RCX: 00007f5c1f59c819 [ 739.395699][T15694] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000008 [ 739.395713][T15694] RBP: 00007f5c1f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 739.395731][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.395745][T15694] R13: 00007f5c1f816038 R14: 00007f5c1f815fa0 R15: 00007ffd2d651008 [ 739.395776][T15694] [ 741.225565][T15720] random: crng reseeded on system resumption [ 742.545905][T15746] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2368'. [ 742.732528][T15738] FAULT_INJECTION: forcing a failure. [ 742.732528][T15738] name fail_futex, interval 1, probability 0, space 0, times 0 [ 742.840411][T15738] CPU: 0 UID: 0 PID: 15738 Comm: syz.1.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.840450][T15738] Tainted: [L]=SOFTLOCKUP [ 742.840459][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.840474][T15738] Call Trace: [ 742.840482][T15738] [ 742.840490][T15738] dump_stack_lvl+0x100/0x190 [ 742.840532][T15738] should_fail_ex.cold+0x5/0xa [ 742.840561][T15738] get_futex_key+0x1d2/0x1620 [ 742.840596][T15738] ? __pfx_get_futex_key+0x10/0x10 [ 742.840636][T15738] futex_wake+0xea/0x530 [ 742.840677][T15738] ? __pfx_futex_wake+0x10/0x10 [ 742.840716][T15738] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 742.840761][T15738] do_futex+0x32b/0x350 [ 742.840794][T15738] ? __pfx_do_futex+0x10/0x10 [ 742.840828][T15738] ? __pfx___might_resched+0x10/0x10 [ 742.840865][T15738] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 742.840909][T15738] __x64_sys_futex+0x34f/0x4d0 [ 742.840946][T15738] ? __pfx___x64_sys_futex+0x10/0x10 [ 742.840991][T15738] do_syscall_64+0x106/0xf80 [ 742.841016][T15738] ? clear_bhb_loop+0x40/0x90 [ 742.841046][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.841078][T15738] RIP: 0033:0x7f31bcf9c819 [ 742.841098][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.841121][T15738] RSP: 002b:00007f31bdf170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.841144][T15738] RAX: ffffffffffffffda RBX: 00007f31bd215fa8 RCX: 00007f31bcf9c819 [ 742.841160][T15738] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f31bd215fac [ 742.841175][T15738] RBP: 00007f31bd215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 742.841190][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.841205][T15738] R13: 00007f31bd216038 R14: 00007ffc7ad7b0a0 R15: 00007ffc7ad7b188 [ 742.841235][T15738] [ 743.701738][T15734] Process accounting paused [ 745.199754][T15775] random: crng reseeded on system resumption [ 745.592722][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 745.945557][T15783] Process accounting paused [ 746.497777][T15795] random: crng reseeded on system resumption [ 747.500659][T15807] FAULT_INJECTION: forcing a failure. [ 747.500659][T15807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.537995][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.549529][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.606457][T15807] CPU: 0 UID: 0 PID: 15807 Comm: syz.3.2381 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.606496][T15807] Tainted: [L]=SOFTLOCKUP [ 747.606505][T15807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.606520][T15807] Call Trace: [ 747.606527][T15807] [ 747.606536][T15807] dump_stack_lvl+0x100/0x190 [ 747.606579][T15807] should_fail_ex.cold+0x5/0xa [ 747.606603][T15807] ? prepare_alloc_pages+0x16d/0x5f0 [ 747.606635][T15807] should_fail_alloc_page+0xeb/0x140 [ 747.606665][T15807] prepare_alloc_pages+0x1f0/0x5f0 [ 747.606700][T15807] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 747.606749][T15807] ? __pfx_stack_trace_save+0x10/0x10 [ 747.606777][T15807] ? stack_depot_save_flags+0x27/0x9d0 [ 747.606811][T15807] ? kasan_save_stack+0x3f/0x50 [ 747.606832][T15807] ? kasan_save_stack+0x30/0x50 [ 747.606853][T15807] ? kasan_save_track+0x14/0x30 [ 747.606879][T15807] ? kasan_save_stack+0x3f/0x50 [ 747.606904][T15807] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 747.606948][T15807] ? __lock_acquire+0x4a5/0x2630 [ 747.606987][T15807] ? __lock_acquire+0x4a5/0x2630 [ 747.607024][T15807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.607051][T15807] ? policy_nodemask+0xed/0x4f0 [ 747.607080][T15807] alloc_pages_mpol+0x1fb/0x550 [ 747.607108][T15807] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 747.607135][T15807] ? __anon_vma_prepare+0x2db/0x5e0 [ 747.607170][T15807] ? __anon_vma_prepare+0x2db/0x5e0 [ 747.607209][T15807] folio_alloc_mpol_noprof+0x36/0x340 [ 747.607243][T15807] vma_alloc_folio_noprof+0xed/0x1d0 [ 747.607275][T15807] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 747.607306][T15807] ? __anon_vma_prepare+0x2e2/0x5e0 [ 747.607349][T15807] do_anonymous_page+0xb3a/0x1fb0 [ 747.607389][T15807] ? __pmd_alloc+0x3fb/0x950 [ 747.607422][T15807] __handle_mm_fault+0x1d48/0x2b60 [ 747.607462][T15807] ? mt_find+0x45e/0x8e0 [ 747.607496][T15807] ? __pfx___handle_mm_fault+0x10/0x10 [ 747.607530][T15807] ? __pfx_mt_find+0x10/0x10 [ 747.607588][T15807] handle_mm_fault+0x36d/0xa20 [ 747.607628][T15807] __get_user_pages+0xf9c/0x34d0 [ 747.607669][T15807] ? __pfx___get_user_pages+0x10/0x10 [ 747.607707][T15807] get_user_pages_remote+0x3d2/0xb10 [ 747.607748][T15807] ? __pfx_get_user_pages_remote+0x10/0x10 [ 747.607789][T15807] get_arg_page+0xf4/0x310 [ 747.607827][T15807] ? __pfx_get_arg_page+0x10/0x10 [ 747.607872][T15807] copy_string_kernel+0x17d/0x500 [ 747.607911][T15807] ? alloc_bprm+0x420/0x710 [ 747.607951][T15807] do_execveat_common.isra.0+0x2e6/0x580 [ 747.607997][T15807] __x64_sys_execve+0x93/0xd0 [ 747.608037][T15807] do_syscall_64+0x106/0xf80 [ 747.608061][T15807] ? clear_bhb_loop+0x40/0x90 [ 747.608091][T15807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.608115][T15807] RIP: 0033:0x7f5c1f59c819 [ 747.608135][T15807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.608159][T15807] RSP: 002b:00007f5c203ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 747.608182][T15807] RAX: ffffffffffffffda RBX: 00007f5c1f815fa0 RCX: 00007f5c1f59c819 [ 747.608198][T15807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 747.608213][T15807] RBP: 00007f5c1f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 747.608227][T15807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.608241][T15807] R13: 00007f5c1f816038 R14: 00007f5c1f815fa0 R15: 00007ffd2d651008 [ 747.608273][T15807] [ 750.250610][ T30] audit: type=1807 audit(1775559938.349:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 750.311591][ T30] audit: type=1802 audit(1775559938.349:25): pid=15859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2393" res=0 errno=0 [ 750.431758][T15852] ima: policy update failed [ 750.470614][ T30] audit: type=1802 audit(1775559938.569:26): pid=15852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2393" res=0 errno=0 [ 752.518697][T15908] random: crng reseeded on system resumption [ 753.705966][ T30] audit: type=1807 audit(1775559941.799:27): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 753.769420][ T30] audit: type=1802 audit(1775559941.799:28): pid=15923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2406" res=0 errno=0 [ 753.879560][T15917] ima: policy update failed [ 753.926543][ T30] audit: type=1802 audit(1775559942.029:29): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2406" res=0 errno=0 [ 754.045689][T15925] FAULT_INJECTION: forcing a failure. [ 754.045689][T15925] name failslab, interval 1, probability 0, space 0, times 0 [ 754.066476][T15936] random: crng reseeded on system resumption [ 754.122360][T15925] CPU: 0 UID: 0 PID: 15925 Comm: syz.1.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.122398][T15925] Tainted: [L]=SOFTLOCKUP [ 754.122406][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.122431][T15925] Call Trace: [ 754.122439][T15925] [ 754.122448][T15925] dump_stack_lvl+0x100/0x190 [ 754.122491][T15925] should_fail_ex.cold+0x5/0xa [ 754.122521][T15925] should_failslab+0xc2/0x120 [ 754.122548][T15925] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 754.122587][T15925] ? skb_clone+0x190/0x400 [ 754.122615][T15925] skb_clone+0x190/0x400 [ 754.122640][T15925] netlink_broadcast_filtered+0xb6a/0xf50 [ 754.122676][T15925] ? __alloc_skb+0x5b7/0x710 [ 754.122714][T15925] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 754.122741][T15925] ? netlink_has_listeners+0x20f/0x430 [ 754.122764][T15925] ? netlink_has_listeners+0x20f/0x430 [ 754.122793][T15925] netlink_broadcast+0x39/0x50 [ 754.122819][T15925] kobject_uevent_env+0xcdd/0x18b0 [ 754.122859][T15925] ? bus_to_subsys+0x114/0x150 [ 754.122900][T15925] device_del+0x605/0x9b0 [ 754.122930][T15925] ? __pfx_device_del+0x10/0x10 [ 754.122956][T15925] ? put_device+0x24/0x30 [ 754.122992][T15925] ? nfc_llcp_local_put.part.0+0x80/0xd0 [ 754.123033][T15925] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 754.123072][T15925] nfc_remove_device+0x9d/0xc0 [ 754.123095][T15925] virtual_ncidev_close+0x4b/0xa0 [ 754.123132][T15925] __fput+0x3ff/0xb40 [ 754.123169][T15925] task_work_run+0x150/0x240 [ 754.123207][T15925] ? __pfx_task_work_run+0x10/0x10 [ 754.123252][T15925] exit_to_user_mode_loop+0x100/0x4a0 [ 754.123289][T15925] do_syscall_64+0x668/0xf80 [ 754.123313][T15925] ? clear_bhb_loop+0x40/0x90 [ 754.123343][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.123368][T15925] RIP: 0033:0x7f31bcf9c819 [ 754.123387][T15925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.123411][T15925] RSP: 002b:00007f31bdf17028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 754.123444][T15925] RAX: 0000000000000000 RBX: 00007f31bd215fa0 RCX: 00007f31bcf9c819 [ 754.123459][T15925] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 754.123474][T15925] RBP: 00007f31bd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 754.123489][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.123503][T15925] R13: 00007f31bd216038 R14: 00007f31bd215fa0 R15: 00007ffc7ad7b188 [ 754.123534][T15925] [ 755.105221][T15946] netlink: 89 bytes leftover after parsing attributes in process `syz.1.2411'. [ 755.173881][T15949] netlink: 89 bytes leftover after parsing attributes in process `syz.1.2411'. [ 755.374795][T15944] netlink: 89 bytes leftover after parsing attributes in process `syz.1.2411'. [ 756.213516][T15957] netlink: 'syz.3.2413': attribute type 4 has an invalid length. [ 756.253147][T15957] netlink: 'syz.3.2413': attribute type 5 has an invalid length. [ 756.280945][T15957] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2413'. [ 758.497522][T15988] random: crng reseeded on system resumption [ 758.856982][ T30] audit: type=1807 audit(1775559946.959:30): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 758.883989][T15989] ima: policy update failed [ 758.931585][ T30] audit: type=1802 audit(1775559946.959:31): pid=15990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2419" res=0 errno=0 [ 759.090437][ T30] audit: type=1802 audit(1775559947.029:32): pid=15989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2419" res=0 errno=0 [ 759.341859][T16004] random: crng reseeded on system resumption [ 760.957867][T16022] random: crng reseeded on system resumption [ 762.943621][T16037] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 763.010885][T16037] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2431'. [ 765.331858][T16070] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2437'. [ 765.541693][T16069] __vm_enough_memory: pid: 16069, comm: syz.2.2440, bytes: 4398046511104 not enough memory for the allocation [ 766.014574][T16081] random: crng reseeded on system resumption [ 766.765854][T16090] random: crng reseeded on system resumption [ 767.835756][T16110] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2449'. [ 768.188358][T16116] random: crng reseeded on system resumption [ 772.021094][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 772.081707][T16170] netlink: 'syz.2.2463': attribute type 1 has an invalid length. [ 772.089776][T16170] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2463'. [ 773.853587][T16196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2470'. [ 775.148187][T16194] Process accounting resumed [ 777.807700][T16223] Process accounting resumed [ 778.107086][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 779.448705][T16264] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2484'. [ 780.641638][T16290] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2489'. [ 781.390647][T16299] random: crng reseeded on system resumption [ 783.095957][T16306] kexec: Could not allocate control_code_buffer [ 786.768275][ T5828] Bluetooth: hci1: unexpected event 0x12 length: 440 > 8 [ 787.755629][T16377] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2506'. [ 787.815980][T16367] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2505'. [ 787.854700][T16379] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2507'. [ 788.131913][T16381] random: crng reseeded on system resumption [ 788.388111][T16385] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2510'. [ 790.648199][T16422] overlayfs: "check_copy_up" module option is obsolete [ 800.735276][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'. [ 805.770964][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 805.815645][T16597] netlink: 'syz.3.2557': attribute type 2 has an invalid length. [ 805.853986][T16597] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 805.900562][T16597] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.2557'. [ 806.919342][T16591] kexec: Could not allocate control_code_buffer [ 807.076548][T16591] Process accounting paused [ 808.435893][T16621] Process accounting paused [ 808.956296][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.962804][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.468663][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'. [ 813.574516][T16706] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2578'. [ 814.182319][T16714] netlink: zone id is out of range [ 814.187496][T16714] netlink: zone id is out of range [ 814.244869][T16714] netlink: zone id is out of range [ 814.275251][T16714] netlink: zone id is out of range [ 814.337327][T16713] netlink: zone id is out of range [ 814.379984][T16714] netlink: zone id is out of range [ 814.411705][T16713] netlink: zone id is out of range [ 814.452327][T16714] netlink: zone id is out of range [ 814.457717][T16714] netlink: zone id is out of range [ 814.513528][T16713] netlink: zone id is out of range [ 815.469907][ T30] audit: type=1804 audit(1775560003.569:33): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2581" name="/newroot/659/file0" dev="tmpfs" ino=3433 res=1 errno=0 [ 815.650530][ T30] audit: type=1804 audit(1775560003.629:34): pid=16726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2581" name="/newroot/659/file0" dev="tmpfs" ino=3433 res=1 errno=0 [ 823.524988][T16825] net_ratelimit: 16 callbacks suppressed [ 823.525009][T16825] netlink: zone id is out of range [ 823.607968][T16825] netlink: zone id is out of range [ 823.733482][T16825] netlink: zone id is out of range [ 823.778990][T16826] netlink: zone id is out of range [ 823.865114][T16825] netlink: zone id is out of range [ 823.890572][T16826] netlink: zone id is out of range [ 823.923812][T16825] netlink: zone id is out of range [ 823.953043][T16826] netlink: zone id is out of range [ 824.011576][T16825] netlink: zone id is out of range [ 824.033863][T16826] netlink: zone id is out of range [ 824.317577][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 825.945898][T16852] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.032548][T16852] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 826.311763][T16852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 826.359113][T16852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 826.481632][T16852] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 826.700349][T16852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 826.769534][T16852] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 827.990399][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 828.391182][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 828.397299][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 828.713056][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 830.070381][T15757] Bluetooth: hci0: command 0x0c1a tx timeout [ 830.470362][T15757] Bluetooth: hci2: command 0x0c1a tx timeout [ 830.791686][T15757] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.071859][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 834.024337][T16946] zswap: compressor not available [ 834.388939][T16954] futex_wake_op: syz.1.2630 tries to shift op by -2048; fix this program [ 834.471956][T16954] FAULT_INJECTION: forcing a failure. [ 834.471956][T16954] name failslab, interval 1, probability 0, space 0, times 0 [ 834.542589][T16954] CPU: 0 UID: 0 PID: 16954 Comm: syz.1.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.542627][T16954] Tainted: [L]=SOFTLOCKUP [ 834.542636][T16954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 834.542650][T16954] Call Trace: [ 834.542658][T16954] [ 834.542668][T16954] dump_stack_lvl+0x100/0x190 [ 834.542710][T16954] should_fail_ex.cold+0x5/0xa [ 834.542740][T16954] should_failslab+0xc2/0x120 [ 834.542767][T16954] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 834.542793][T16954] ? allocate_partition+0x1bc/0x2a0 [ 834.542827][T16954] kstrdup+0x51/0xe0 [ 834.542851][T16954] allocate_partition+0x1bc/0x2a0 [ 834.542888][T16954] mtd_add_partition+0x1bc/0x660 [ 834.542918][T16954] ? __pfx_mtd_add_partition+0x10/0x10 [ 834.542945][T16954] ? __might_fault+0xc5/0x140 [ 834.542981][T16954] ? __might_fault+0xc5/0x140 [ 834.543028][T16954] mtdchar_blkpg_ioctl+0x207/0x250 [ 834.543059][T16954] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 834.543114][T16954] mtdchar_ioctl+0x1670/0x1fd0 [ 834.543149][T16954] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 834.543179][T16954] ? lock_acquire+0x1cf/0x380 [ 834.543219][T16954] ? trace_contention_end+0x140/0x180 [ 834.543258][T16954] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 834.543290][T16954] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 834.543329][T16954] ? __pfx___mutex_lock+0x10/0x10 [ 834.543367][T16954] ? find_held_lock+0x2b/0x80 [ 834.543406][T16954] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 834.543436][T16954] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 834.543471][T16954] __x64_sys_ioctl+0x18e/0x210 [ 834.543510][T16954] do_syscall_64+0x106/0xf80 [ 834.543535][T16954] ? clear_bhb_loop+0x40/0x90 [ 834.543564][T16954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.543589][T16954] RIP: 0033:0x7f31bcf9c819 [ 834.543614][T16954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.543638][T16954] RSP: 002b:00007f31bdf17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.543662][T16954] RAX: ffffffffffffffda RBX: 00007f31bd215fa0 RCX: 00007f31bcf9c819 [ 834.543677][T16954] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000006 [ 834.543692][T16954] RBP: 00007f31bd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 834.543706][T16954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.543721][T16954] R13: 00007f31bd216038 R14: 00007f31bd215fa0 R15: 00007ffc7ad7b188 [ 834.543752][T16954] [ 834.543825][T16954] memory allocation error while creating partitions for "mtdram test device" [ 837.422641][T16980] Process accounting resumed [ 839.712615][T16988] Process accounting resumed [ 840.710405][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 848.629588][T17090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 848.710562][T17090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.804436][T17090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.900618][T17090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.430491][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 850.790386][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 850.870375][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.956219][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 859.665286][T17209] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 859.760396][T17209] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2682'. [ 862.601492][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 862.717730][T17247] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2691'. [ 862.894460][T17247] mac80211_hwsim hwsim5 : renamed from wlan0 (while UP) [ 865.580487][T17282] sd 0:0:1:0: PR command failed: 1026 [ 865.596244][T17282] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 865.655928][T17282] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 869.431445][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 869.767881][T17309] Process accounting paused [ 870.325034][T17331] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2708'. [ 870.395047][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.401708][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.634455][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 875.685978][T17389] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2720'. [ 883.694999][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2743'. [ 889.032594][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 889.427867][T17543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2752'. [ 892.388298][ T5828] block nbd0: Receive control failed (result -32) [ 897.385774][T17588] [U] 0="/ [ 897.581093][T17588] [U] [ 897.700400][T17588] [U] EeQ@ [ 898.030526][T17588] [U]  [ 900.380773][T17605] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2764'. [ 901.127874][T17584] Process accounting resumed [ 902.320104][T17632] FAULT_INJECTION: forcing a failure. [ 902.320104][T17632] name failslab, interval 1, probability 0, space 0, times 0 [ 902.406683][T17632] CPU: 0 UID: 0 PID: 17632 Comm: syz.0.2770 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.406723][T17632] Tainted: [L]=SOFTLOCKUP [ 902.406731][T17632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 902.406746][T17632] Call Trace: [ 902.406754][T17632] [ 902.406763][T17632] dump_stack_lvl+0x100/0x190 [ 902.406805][T17632] should_fail_ex.cold+0x5/0xa [ 902.406835][T17632] should_failslab+0xc2/0x120 [ 902.406862][T17632] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 902.406901][T17632] ? mempool_init_node+0x2f7/0x6e0 [ 902.406930][T17632] ? mempool_init_noprof+0x3a/0x50 [ 902.406959][T17632] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 902.406988][T17632] mempool_init_node+0x2f7/0x6e0 [ 902.407022][T17632] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 902.407048][T17632] ? __pfx_mempool_free_slab+0x10/0x10 [ 902.407075][T17632] mempool_init_noprof+0x3a/0x50 [ 902.407106][T17632] bioset_init+0x37e/0x8a0 [ 902.407136][T17632] ? __pfx_bioset_init+0x10/0x10 [ 902.407178][T17632] __alloc_disk_node+0x83/0x6b0 [ 902.407216][T17632] __blk_alloc_disk+0xd2/0x170 [ 902.407243][T17632] ? __pfx___blk_alloc_disk+0x10/0x10 [ 902.407289][T17632] ? __pfx_idr_alloc+0x10/0x10 [ 902.407314][T17632] ? lockdep_init_map_type+0x5c/0x250 [ 902.407349][T17632] ? __raw_spin_lock_init+0x3a/0x110 [ 902.407390][T17632] ? __pfx_hot_add_show+0x10/0x10 [ 902.407428][T17632] zram_add+0x1bf/0x610 [ 902.407464][T17632] ? __pfx_zram_add+0x10/0x10 [ 902.407519][T17632] ? find_held_lock+0x2b/0x80 [ 902.407542][T17632] ? sysfs_file_kobj+0xe4/0x290 [ 902.407578][T17632] ? __pfx_hot_add_show+0x10/0x10 [ 902.407615][T17632] hot_add_show+0x21/0x80 [ 902.407659][T17632] class_attr_show+0x72/0xa0 [ 902.407693][T17632] ? __pfx_class_attr_show+0x10/0x10 [ 902.407724][T17632] sysfs_kf_seq_show+0x217/0x3a0 [ 902.407763][T17632] seq_read_iter+0x32f/0x1270 [ 902.407816][T17632] kernfs_fop_read_iter+0x46c/0x610 [ 902.407846][T17632] ? rw_verify_area+0xce/0x6d0 [ 902.407885][T17632] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 902.407917][T17632] vfs_read+0x825/0xb30 [ 902.407944][T17632] ? __pfx_vfs_read+0x10/0x10 [ 902.407987][T17632] ksys_read+0x12a/0x250 [ 902.408010][T17632] ? __pfx_ksys_read+0x10/0x10 [ 902.408042][T17632] do_syscall_64+0x106/0xf80 [ 902.408067][T17632] ? clear_bhb_loop+0x40/0x90 [ 902.408098][T17632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.408124][T17632] RIP: 0033:0x7f2ac179c819 [ 902.408145][T17632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.408169][T17632] RSP: 002b:00007f2ac264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 902.408192][T17632] RAX: ffffffffffffffda RBX: 00007f2ac1a15fa0 RCX: 00007f2ac179c819 [ 902.408208][T17632] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 902.408223][T17632] RBP: 00007f2ac1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 902.408237][T17632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.408251][T17632] R13: 00007f2ac1a16038 R14: 00007f2ac1a15fa0 R15: 00007fffd890a7a8 [ 902.408284][T17632] [ 905.204750][T17632] zram: Error allocating disk structure for device 5 [ 906.501465][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 909.883710][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 909.954158][T17687] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2784'. [ 910.350402][T17694] zram: Removed device: zram0 [ 913.502943][T17721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'. [ 915.670366][T17743] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2798'. [ 916.278812][T17743] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 921.719051][T17803] FAULT_INJECTION: forcing a failure. [ 921.719051][T17803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 922.450339][T17803] CPU: 0 UID: 0 PID: 17803 Comm: syz.1.2811 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.450378][T17803] Tainted: [L]=SOFTLOCKUP [ 922.450386][T17803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.450400][T17803] Call Trace: [ 922.450408][T17803] [ 922.450417][T17803] dump_stack_lvl+0x100/0x190 [ 922.450459][T17803] should_fail_ex.cold+0x5/0xa [ 922.450488][T17803] get_futex_key+0x1d2/0x1620 [ 922.450522][T17803] ? __pfx_get_futex_key+0x10/0x10 [ 922.450552][T17803] ? find_held_lock+0x2b/0x80 [ 922.450575][T17803] ? futex_wake+0x456/0x530 [ 922.450621][T17803] futex_wake+0xea/0x530 [ 922.450658][T17803] ? __pfx_futex_wait+0x10/0x10 [ 922.450697][T17803] ? __pfx_futex_wake+0x10/0x10 [ 922.450738][T17803] ? putname+0xb1/0x110 [ 922.450765][T17803] ? kmem_cache_free+0x124/0x6a0 [ 922.450799][T17803] ? do_sys_openat2+0x1b4/0x1e0 [ 922.450837][T17803] do_futex+0x32b/0x350 [ 922.450870][T17803] ? __pfx_do_futex+0x10/0x10 [ 922.450909][T17803] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.450946][T17803] ? __fget_files+0x21f/0x3d0 [ 922.450973][T17803] __x64_sys_futex+0x34f/0x4d0 [ 922.451009][T17803] ? __x64_sys_openat+0x12d/0x210 [ 922.451042][T17803] ? __x64_sys_close_range+0x30f/0x5d0 [ 922.451070][T17803] ? __pfx___x64_sys_futex+0x10/0x10 [ 922.451113][T17803] ? __pfx___x64_sys_close_range+0x10/0x10 [ 922.451151][T17803] do_syscall_64+0x106/0xf80 [ 922.451176][T17803] ? clear_bhb_loop+0x40/0x90 [ 922.451205][T17803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.451230][T17803] RIP: 0033:0x7f31bcf9c819 [ 922.451249][T17803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.451273][T17803] RSP: 002b:00007f31bdf170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 922.451296][T17803] RAX: ffffffffffffffda RBX: 00007f31bd215fa8 RCX: 00007f31bcf9c819 [ 922.451312][T17803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f31bd215fac [ 922.451326][T17803] RBP: 00007f31bd215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 922.451341][T17803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 922.451355][T17803] R13: 00007f31bd216038 R14: 00007ffc7ad7b0a0 R15: 00007ffc7ad7b188 [ 922.451386][T17803] [ 924.551293][T17829] netlink: 'syz.0.2817': attribute type 1 has an invalid length. [ 924.600378][T17829] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2817'. [ 926.152826][T17833] program syz.3.2816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.048217][T17883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 930.453361][T17896] binder: 17889:17896 ioctl c00c620f 2000000001c0 returned -22 [ 931.403797][T17895] Process accounting paused [ 931.845541][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.856850][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.393465][T17929] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 932.432524][T17929] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2839'. [ 934.837672][T17961] random: crng reseeded on system resumption [ 938.827503][T18009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2857'. [ 939.184418][T18008] binder: 18002:18008 ioctl c00c620f 2000000001c0 returned -22 [ 942.095667][T18050] FAULT_INJECTION: forcing a failure. [ 942.095667][T18050] name failslab, interval 1, probability 0, space 0, times 0 [ 942.200676][T18050] CPU: 0 UID: 0 PID: 18050 Comm: syz.3.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.200720][T18050] Tainted: [L]=SOFTLOCKUP [ 942.200728][T18050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 942.200743][T18050] Call Trace: [ 942.200751][T18050] [ 942.200760][T18050] dump_stack_lvl+0x100/0x190 [ 942.200803][T18050] should_fail_ex.cold+0x5/0xa [ 942.200832][T18050] should_failslab+0xc2/0x120 [ 942.200860][T18050] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 942.200900][T18050] ? security_inode_alloc+0x3b/0x2c0 [ 942.200928][T18050] ? lockdep_init_map_type+0x5c/0x250 [ 942.200967][T18050] security_inode_alloc+0x3b/0x2c0 [ 942.200995][T18050] inode_init_always_gfp+0xced/0x1040 [ 942.201027][T18050] alloc_inode+0x8e/0x250 [ 942.201061][T18050] new_inode+0x22/0x1c0 [ 942.201097][T18050] bdev_alloc+0x2b/0x420 [ 942.201130][T18050] ? bdi_init+0x3f4/0x5b0 [ 942.201154][T18050] ? bdi_init+0x49f/0x5b0 [ 942.201182][T18050] __alloc_disk_node+0x116/0x6b0 [ 942.201234][T18050] __blk_alloc_disk+0xd2/0x170 [ 942.201262][T18050] ? __pfx___blk_alloc_disk+0x10/0x10 [ 942.201314][T18050] ? __pfx_idr_alloc+0x10/0x10 [ 942.201339][T18050] ? lockdep_init_map_type+0x5c/0x250 [ 942.201373][T18050] ? __raw_spin_lock_init+0x3a/0x110 [ 942.201415][T18050] ? __pfx_hot_add_show+0x10/0x10 [ 942.201452][T18050] zram_add+0x1bf/0x610 [ 942.201489][T18050] ? __pfx_zram_add+0x10/0x10 [ 942.201544][T18050] ? find_held_lock+0x2b/0x80 [ 942.201567][T18050] ? sysfs_file_kobj+0xe4/0x290 [ 942.201602][T18050] ? __pfx_hot_add_show+0x10/0x10 [ 942.201639][T18050] hot_add_show+0x21/0x80 [ 942.201676][T18050] class_attr_show+0x72/0xa0 [ 942.201709][T18050] ? __pfx_class_attr_show+0x10/0x10 [ 942.201740][T18050] sysfs_kf_seq_show+0x217/0x3a0 [ 942.201778][T18050] seq_read_iter+0x32f/0x1270 [ 942.201830][T18050] kernfs_fop_read_iter+0x46c/0x610 [ 942.201860][T18050] ? rw_verify_area+0xce/0x6d0 [ 942.201897][T18050] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 942.201929][T18050] vfs_read+0x825/0xb30 [ 942.201956][T18050] ? __pfx_vfs_read+0x10/0x10 [ 942.201999][T18050] ksys_read+0x12a/0x250 [ 942.202022][T18050] ? __pfx_ksys_read+0x10/0x10 [ 942.202054][T18050] do_syscall_64+0x106/0xf80 [ 942.202078][T18050] ? clear_bhb_loop+0x40/0x90 [ 942.202108][T18050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.202133][T18050] RIP: 0033:0x7f5c1f59c819 [ 942.202154][T18050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.202178][T18050] RSP: 002b:00007f5c203ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.202201][T18050] RAX: ffffffffffffffda RBX: 00007f5c1f815fa0 RCX: 00007f5c1f59c819 [ 942.202217][T18050] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 942.202231][T18050] RBP: 00007f5c1f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 942.202246][T18050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.202260][T18050] R13: 00007f5c1f816038 R14: 00007f5c1f815fa0 R15: 00007ffd2d651008 [ 942.202297][T18050] [ 942.600034][T18054] sctp: [Deprecated]: syz.2.2868 (pid 18054) Use of int in maxseg socket option. [ 942.600034][T18054] Use struct sctp_assoc_value instead [ 943.090367][T18050] zram: Error allocating disk structure for device 0 [ 943.393700][T18058] serio: Serial port pty6 [ 943.820695][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 943.867217][T18068] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2872'. [ 947.808881][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 947.876085][T18127] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2887'. [ 949.898729][ T30] audit: type=1800 audit(1775560137.999:35): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2897" name="sr0" dev="devtmpfs" ino=3304 res=0 errno=0 [ 950.807463][T18157] nbd: socks must be embedded in a SOCK_ITEM attr [ 950.867064][T18157] block nbd1: shutting down sockets [ 951.884896][T18172] bridge0: port 3(gretap0) entered blocking state [ 951.944137][T18172] bridge0: port 3(gretap0) entered disabled state [ 951.991293][T18172] gretap0: entered allmulticast mode [ 952.019943][T18172] gretap0: entered promiscuous mode [ 952.064906][T18172] bridge0: port 3(gretap0) entered blocking state [ 952.071784][T18172] bridge0: port 3(gretap0) entered forwarding state [ 952.114417][T18182] QAT: Stopping all acceleration devices. [ 953.241429][T18202] QAT: Invalid ioctl 35077 [ 954.926784][T18223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2908'. [ 955.082358][T18223] gretap0: left allmulticast mode [ 955.099812][T18223] gretap0: left promiscuous mode [ 955.152022][T18223] bridge0: port 3(gretap0) entered disabled state [ 955.185965][T18223] bridge_slave_1: left allmulticast mode [ 955.212515][T18223] bridge_slave_1: left promiscuous mode [ 955.250549][T18223] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.278821][T18223] bridge_slave_0: left allmulticast mode [ 955.322063][T18223] bridge_slave_0: left promiscuous mode [ 955.346112][T18223] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.514909][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 956.994943][T18242] input: f as /devices/virtual/input/input26 [ 957.880597][T18249] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 958.347374][T18261] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2915'. [ 961.150926][T18302] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.1.2923: 7 [ 961.412519][T18306] nbd: socks must be embedded in a SOCK_ITEM attr [ 961.441698][T18306] block nbd1: shutting down sockets [ 961.627423][T18299] Process accounting resumed [ 962.612977][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'. [ 962.670420][T18323] bridge_slave_1: left allmulticast mode [ 962.676145][T18323] bridge_slave_1: left promiscuous mode [ 962.731637][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.769521][T18323] bridge_slave_0: left allmulticast mode [ 962.786279][T18323] bridge_slave_0: left promiscuous mode [ 962.815608][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.521218][T18366] can0: slcan on ttyS2. [ 965.621925][T18370] can0 (unregistered): slcan off ttyS2. [ 966.556843][T18379] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 969.773588][T18422] slcan: can't register candev [ 971.483139][T18450] input: f as /devices/virtual/input/input27 [ 973.338395][T18471] FAULT_INJECTION: forcing a failure. [ 973.338395][T18471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 973.443168][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.1.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 973.443207][T18471] Tainted: [L]=SOFTLOCKUP [ 973.443215][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 973.443230][T18471] Call Trace: [ 973.443237][T18471] [ 973.443246][T18471] dump_stack_lvl+0x100/0x190 [ 973.443289][T18471] should_fail_ex.cold+0x5/0xa [ 973.443314][T18471] ? prepare_alloc_pages+0x16d/0x5f0 [ 973.443346][T18471] should_fail_alloc_page+0xeb/0x140 [ 973.443376][T18471] prepare_alloc_pages+0x1f0/0x5f0 [ 973.443410][T18471] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 973.443453][T18471] ? __pfx_validate_mm+0x10/0x10 [ 973.443487][T18471] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 973.443529][T18471] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 973.443566][T18471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.443590][T18471] ? percpu_counter_add_batch+0xb9/0x230 [ 973.443623][T18471] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 973.443686][T18471] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 973.443723][T18471] ? vma_wants_writenotify+0x10b/0x390 [ 973.443762][T18471] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 973.443805][T18471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 973.443833][T18471] ? policy_nodemask+0xed/0x4f0 [ 973.443862][T18471] alloc_pages_mpol+0x1fb/0x550 [ 973.443890][T18471] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 973.443925][T18471] folio_alloc_mpol_noprof+0x36/0x340 [ 973.443960][T18471] vma_alloc_folio_noprof+0xed/0x1d0 [ 973.443992][T18471] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 973.444033][T18471] do_anonymous_page+0xb3a/0x1fb0 [ 973.444078][T18471] __handle_mm_fault+0x1d48/0x2b60 [ 973.444122][T18471] ? __pfx___handle_mm_fault+0x10/0x10 [ 973.444159][T18471] ? pte_offset_map_lock+0x174/0x320 [ 973.444186][T18471] ? find_held_lock+0x2b/0x80 [ 973.444219][T18471] ? follow_page_pte+0x5b3/0x1400 [ 973.444253][T18471] handle_mm_fault+0x36d/0xa20 [ 973.444294][T18471] __get_user_pages+0xf9c/0x34d0 [ 973.444334][T18471] ? __pfx___get_user_pages+0x10/0x10 [ 973.444372][T18471] populate_vma_page_range+0x267/0x3f0 [ 973.444405][T18471] ? __pfx_populate_vma_page_range+0x10/0x10 [ 973.444436][T18471] ? __pfx_find_vma_intersection+0x10/0x10 [ 973.444465][T18471] ? do_mmap+0x93f/0x12f0 [ 973.444496][T18471] __mm_populate+0x107/0x3a0 [ 973.444528][T18471] ? __pfx___mm_populate+0x10/0x10 [ 973.444561][T18471] ? up_write+0x290/0x4f0 [ 973.444600][T18471] vm_mmap_pgoff+0x37f/0x470 [ 973.444632][T18471] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 973.444664][T18471] ? do_futex+0x192/0x350 [ 973.444705][T18471] ? __pfx_do_futex+0x10/0x10 [ 973.444744][T18471] ksys_mmap_pgoff+0xe1/0x650 [ 973.444772][T18471] ? __x64_sys_futex+0x34f/0x4d0 [ 973.444803][T18471] ? __x64_sys_futex+0x358/0x4d0 [ 973.444836][T18471] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 973.444864][T18471] ? xfd_validate_state+0x129/0x190 [ 973.444906][T18471] __x64_sys_mmap+0x125/0x190 [ 973.444946][T18471] do_syscall_64+0x106/0xf80 [ 973.444971][T18471] ? clear_bhb_loop+0x40/0x90 [ 973.445001][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.445026][T18471] RIP: 0033:0x7f31bcf9c819 [ 973.445047][T18471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.445070][T18471] RSP: 002b:00007f31bdf17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 973.445094][T18471] RAX: ffffffffffffffda RBX: 00007f31bd215fa0 RCX: 00007f31bcf9c819 [ 973.445110][T18471] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000 [ 973.445125][T18471] RBP: 00007f31bd032c91 R08: ffffffffffffffff R09: 0000000000008000 [ 973.445140][T18471] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 973.445155][T18471] R13: 00007f31bd216038 R14: 00007f31bd215fa0 R15: 00007ffc7ad7b188 [ 973.445186][T18471] [ 979.722019][T18536] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 981.087318][T18553] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2973'. [ 981.781602][T18561] FAULT_INJECTION: forcing a failure. [ 981.781602][T18561] name failslab, interval 1, probability 0, space 0, times 0 [ 981.898575][T18561] CPU: 0 UID: 0 PID: 18561 Comm: syz.1.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.898614][T18561] Tainted: [L]=SOFTLOCKUP [ 981.898622][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 981.898637][T18561] Call Trace: [ 981.898645][T18561] [ 981.898654][T18561] dump_stack_lvl+0x100/0x190 [ 981.898695][T18561] should_fail_ex.cold+0x5/0xa [ 981.898724][T18561] should_failslab+0xc2/0x120 [ 981.898752][T18561] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 981.898792][T18561] ? __d_alloc+0x34/0xa80 [ 981.898821][T18561] ? security_inode_alloc+0xcf/0x2c0 [ 981.898853][T18561] __d_alloc+0x34/0xa80 [ 981.898878][T18561] ? __ns_ref_active_get+0x9f/0x1b0 [ 981.898921][T18561] path_from_stashed+0x427/0x750 [ 981.898949][T18561] ? do_raw_spin_unlock+0x145/0x1e0 [ 981.898992][T18561] ns_get_path+0x60/0x80 [ 981.899018][T18561] proc_ns_get_link+0x121/0x230 [ 981.899055][T18561] ? __pfx_proc_ns_get_link+0x10/0x10 [ 981.899094][T18561] ? atime_needs_update+0x8b/0x6b0 [ 981.899133][T18561] pick_link+0xd17/0x13c0 [ 981.899169][T18561] ? __pfx_proc_ns_get_link+0x10/0x10 [ 981.899209][T18561] step_into_slowpath+0x9ba/0xf90 [ 981.899253][T18561] ? __pfx_step_into_slowpath+0x10/0x10 [ 981.899292][T18561] ? find_held_lock+0x2b/0x80 [ 981.899325][T18561] path_openat+0xf95/0x31a0 [ 981.899360][T18561] ? __pfx_path_openat+0x10/0x10 [ 981.899397][T18561] do_file_open+0x20e/0x430 [ 981.899426][T18561] ? __pfx_do_file_open+0x10/0x10 [ 981.899472][T18561] ? alloc_fd+0x476/0x790 [ 981.899500][T18561] ? do_getname+0x191/0x390 [ 981.899535][T18561] do_sys_openat2+0x10d/0x1e0 [ 981.899569][T18561] ? __pfx_do_sys_openat2+0x10/0x10 [ 981.899604][T18561] ? __fget_files+0x21f/0x3d0 [ 981.899634][T18561] __x64_sys_openat+0x12d/0x210 [ 981.899669][T18561] ? __pfx___x64_sys_openat+0x10/0x10 [ 981.899714][T18561] do_syscall_64+0x106/0xf80 [ 981.899739][T18561] ? clear_bhb_loop+0x40/0x90 [ 981.899768][T18561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.899792][T18561] RIP: 0033:0x7f31bcf5d04e [ 981.899818][T18561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 981.899842][T18561] RSP: 002b:00007f31bdef5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 981.899865][T18561] RAX: ffffffffffffffda RBX: 00007f31bdef66c0 RCX: 00007f31bcf5d04e [ 981.899881][T18561] RDX: 0000000000000002 RSI: 00007f31bdef5f90 RDI: ffffffffffffff9c [ 981.899901][T18561] RBP: 00007f31bd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 981.899916][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.899931][T18561] R13: 00007f31bd216128 R14: 00007f31bd216090 R15: 00007ffc7ad7b188 [ 981.899962][T18561] [ 982.760354][T18567] sp0: Synchronizing with TNC [ 982.804557][T18565] input: f as /devices/virtual/input/input28 [ 983.567453][T18576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2979'. [ 983.652932][T18576] bridge_slave_1: left allmulticast mode [ 983.668919][T18576] bridge_slave_1: left promiscuous mode [ 983.687013][T18576] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.848630][T18576] bridge_slave_0: left allmulticast mode [ 983.872656][T18576] bridge_slave_0: left promiscuous mode [ 983.889642][T18579] Invalid ELF header magic: != ELF [ 983.900483][T18576] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.617796][T18585] FAULT_INJECTION: forcing a failure. [ 984.617796][T18585] name failslab, interval 1, probability 0, space 0, times 0 [ 984.688990][T18585] CPU: 0 UID: 0 PID: 18585 Comm: syz.0.2982 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.689032][T18585] Tainted: [L]=SOFTLOCKUP [ 984.689040][T18585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 984.689055][T18585] Call Trace: [ 984.689062][T18585] [ 984.689071][T18585] dump_stack_lvl+0x100/0x190 [ 984.689112][T18585] should_fail_ex.cold+0x5/0xa [ 984.689141][T18585] ? lsm_blob_alloc+0x68/0x90 [ 984.689177][T18585] should_failslab+0xc2/0x120 [ 984.689205][T18585] __kmalloc_noprof+0xe0/0x850 [ 984.689244][T18585] ? trace_kmem_cache_alloc+0xf3/0x120 [ 984.689277][T18585] lsm_blob_alloc+0x68/0x90 [ 984.689315][T18585] security_prepare_creds+0x2d/0x290 [ 984.689353][T18585] prepare_creds+0x5d6/0x950 [ 984.689393][T18585] copy_creds+0xa7/0xa50 [ 984.689435][T18585] copy_process+0x1087/0x7a40 [ 984.689467][T18585] ? __pfx___futex_wait+0x10/0x10 [ 984.689505][T18585] ? get_pid_task+0xfc/0x250 [ 984.689535][T18585] ? get_pid_task+0xfc/0x250 [ 984.689574][T18585] ? __pfx_copy_process+0x10/0x10 [ 984.689617][T18585] kernel_clone+0xfc/0x9a0 [ 984.689645][T18585] ? __pfx_futex_wait+0x10/0x10 [ 984.689696][T18585] ? __pfx_kernel_clone+0x10/0x10 [ 984.689741][T18585] __do_sys_clone+0xd9/0x120 [ 984.689771][T18585] ? __pfx___do_sys_clone+0x10/0x10 [ 984.689825][T18585] do_syscall_64+0x106/0xf80 [ 984.689850][T18585] ? clear_bhb_loop+0x40/0x90 [ 984.689880][T18585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.689905][T18585] RIP: 0033:0x7f2ac179c819 [ 984.689924][T18585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.689948][T18585] RSP: 002b:00007f2ac264afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 984.689971][T18585] RAX: ffffffffffffffda RBX: 00007f2ac1a15fa0 RCX: 00007f2ac179c819 [ 984.689987][T18585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020011 [ 984.690001][T18585] RBP: 00007f2ac1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 984.690016][T18585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 984.690030][T18585] R13: 00007f2ac1a16038 R14: 00007f2ac1a15fa0 R15: 00007fffd890a7a8 [ 984.690060][T18585] [ 987.689114][T18608] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.2.2987: 7 [ 988.191107][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2989'. [ 988.545707][T18619] team0: Port device team_slave_0 removed [ 989.916527][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 990.011406][T18646] netlink: 'syz.3.2993': attribute type 1 has an invalid length. [ 990.019245][T18646] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.2993'. [ 993.286510][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.292946][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.833596][T18649] Process accounting paused [ 994.147004][T18676] FAULT_INJECTION: forcing a failure. [ 994.147004][T18676] name failslab, interval 1, probability 0, space 0, times 0 [ 994.293770][T18676] CPU: 0 UID: 0 PID: 18676 Comm: syz.0.2998 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.293811][T18676] Tainted: [L]=SOFTLOCKUP [ 994.293819][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 994.293834][T18676] Call Trace: [ 994.293842][T18676] [ 994.293851][T18676] dump_stack_lvl+0x100/0x190 [ 994.293962][T18676] should_fail_ex.cold+0x5/0xa [ 994.294001][T18676] should_failslab+0xc2/0x120 [ 994.294030][T18676] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 994.294056][T18676] ? kstrdup_const+0x63/0x80 [ 994.294085][T18676] kstrdup+0x51/0xe0 [ 994.294110][T18676] kstrdup_const+0x63/0x80 [ 994.294133][T18676] __kernfs_new_node+0x9b/0x960 [ 994.294175][T18676] ? __pfx___kernfs_new_node+0x10/0x10 [ 994.294219][T18676] ? find_held_lock+0x2b/0x80 [ 994.294243][T18676] ? kernfs_root+0xee/0x2a0 [ 994.294277][T18676] ? kernfs_root+0xee/0x2a0 [ 994.294320][T18676] kernfs_new_node+0x11b/0x1a0 [ 994.294348][T18676] kernfs_create_link+0xcc/0x240 [ 994.294381][T18676] sysfs_do_create_link_sd+0x90/0x140 [ 994.294420][T18676] sysfs_create_link+0x61/0xc0 [ 994.294456][T18676] device_add+0x675/0x1950 [ 994.294490][T18676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.294516][T18676] ? __pfx_device_add+0x10/0x10 [ 994.294548][T18676] ? lockdep_init_map_type+0x5c/0x250 [ 994.294583][T18676] ? __init_waitqueue_head+0xca/0x150 [ 994.294629][T18676] netdev_register_kobject+0x1a9/0x3d0 [ 994.294663][T18676] register_netdevice+0x12e0/0x2210 [ 994.294695][T18676] ? __pfx_register_netdevice+0x10/0x10 [ 994.294739][T18676] __ip_tunnel_create+0x52b/0x670 [ 994.294768][T18676] ? __pfx___ip_tunnel_create+0x10/0x10 [ 994.294792][T18676] ? net_generic+0xea/0x2a0 [ 994.294825][T18676] ip_tunnel_init_net+0x230/0x780 [ 994.294857][T18676] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 994.294921][T18676] ? __kmalloc_noprof+0x320/0x850 [ 994.294964][T18676] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 994.295003][T18676] ops_init+0x1e2/0x5f0 [ 994.295032][T18676] setup_net+0x118/0x3a0 [ 994.295058][T18676] ? __pfx_setup_net+0x10/0x10 [ 994.295081][T18676] ? lockdep_init_map_type+0x5c/0x250 [ 994.295116][T18676] ? mutex_init_lockep+0x110/0x150 [ 994.295154][T18676] copy_net_ns+0x46f/0x7c0 [ 994.295185][T18676] create_new_namespaces+0x3ea/0xac0 [ 994.295219][T18676] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 994.295249][T18676] ksys_unshare+0x473/0xad0 [ 994.295282][T18676] ? __pfx_ksys_unshare+0x10/0x10 [ 994.295325][T18676] __x64_sys_unshare+0x31/0x40 [ 994.295357][T18676] do_syscall_64+0x106/0xf80 [ 994.295382][T18676] ? clear_bhb_loop+0x40/0x90 [ 994.295411][T18676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.295436][T18676] RIP: 0033:0x7f2ac179c819 [ 994.295458][T18676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.295481][T18676] RSP: 002b:00007f2ac264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 994.295504][T18676] RAX: ffffffffffffffda RBX: 00007f2ac1a15fa0 RCX: 00007f2ac179c819 [ 994.295521][T18676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 994.295536][T18676] RBP: 00007f2ac1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 994.295551][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.295566][T18676] R13: 00007f2ac1a16038 R14: 00007f2ac1a15fa0 R15: 00007fffd890a7a8 [ 994.295598][T18676] [ 1002.542956][T18746] ovs_: entered promiscuous mode [ 1004.256346][T18790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. Ijn9_UVQ8j@:Un M%Ux[ 1006.625020][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1006.722834][T18809] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 1006.810295][T18809] netlink: 51505 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1007.529879][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3023'. [ 1007.563207][T18820] EXT4-fs error (device sda1): trigger_test_error:130: comm syz.3.3022: 7 [ 1012.861246][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3034'. [ 1016.262377][T18893] Invalid ELF header magic: != ELF [ 1017.278093][T18909] FAULT_INJECTION: forcing a failure. [ 1017.278093][T18909] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.621161][T18909] CPU: 0 UID: 0 PID: 18909 Comm: syz.1.3040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1017.621202][T18909] Tainted: [L]=SOFTLOCKUP [ 1017.621210][T18909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1017.621225][T18909] Call Trace: [ 1017.621234][T18909] [ 1017.621243][T18909] dump_stack_lvl+0x100/0x190 [ 1017.621284][T18909] should_fail_ex.cold+0x5/0xa [ 1017.621314][T18909] should_failslab+0xc2/0x120 [ 1017.621342][T18909] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1017.621381][T18909] ? security_inode_alloc+0x3b/0x2c0 [ 1017.621409][T18909] ? lockdep_init_map_type+0x5c/0x250 [ 1017.621448][T18909] security_inode_alloc+0x3b/0x2c0 [ 1017.621477][T18909] inode_init_always_gfp+0xced/0x1040 [ 1017.621508][T18909] alloc_inode+0x8e/0x250 [ 1017.621543][T18909] new_inode+0x22/0x1c0 [ 1017.621579][T18909] proc_pid_make_inode+0x22/0x160 [ 1017.621618][T18909] proc_ns_dir_lookup+0x25b/0x390 [ 1017.621660][T18909] lookup_open.isra.0+0x631/0x11b0 [ 1017.621704][T18909] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1017.621759][T18909] ? mnt_get_write_access+0x1e9/0x2f0 [ 1017.621799][T18909] path_openat+0xa98/0x31a0 [ 1017.621836][T18909] ? __pfx_path_openat+0x10/0x10 [ 1017.621874][T18909] do_file_open+0x20e/0x430 [ 1017.621903][T18909] ? __pfx_do_file_open+0x10/0x10 [ 1017.621941][T18909] ? __pfx_kfree_link+0x10/0x10 [ 1017.621992][T18909] ? alloc_fd+0x476/0x790 [ 1017.622020][T18909] ? do_getname+0x191/0x390 [ 1017.622056][T18909] do_sys_openat2+0x10d/0x1e0 [ 1017.622091][T18909] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.622137][T18909] __x64_sys_openat+0x12d/0x210 [ 1017.622172][T18909] ? __pfx___x64_sys_openat+0x10/0x10 [ 1017.622224][T18909] do_syscall_64+0x106/0xf80 [ 1017.622249][T18909] ? clear_bhb_loop+0x40/0x90 [ 1017.622280][T18909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.622305][T18909] RIP: 0033:0x7f31bcf5d04e [ 1017.622324][T18909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.622348][T18909] RSP: 002b:00007f31bded4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1017.622371][T18909] RAX: ffffffffffffffda RBX: 00007f31bded56c0 RCX: 00007f31bcf5d04e [ 1017.622387][T18909] RDX: 0000000000000002 RSI: 00007f31bded4f90 RDI: ffffffffffffff9c [ 1017.622402][T18909] RBP: 00007f31bd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1017.622417][T18909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.622431][T18909] R13: 00007f31bd216218 R14: 00007f31bd216180 R15: 00007ffc7ad7b188 [ 1017.622463][T18909] [ 1021.664475][T18935] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3046'. [ 1024.348946][T18929] Process accounting resumed [ 1027.917139][T18993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1028.023601][T18993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1028.134715][T18993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1028.265551][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3058'. [ 1028.280778][T18993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1028.405950][T18999] team0: Port device team_slave_1 removed [ 1029.995271][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 1030.071024][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1030.150434][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 1030.310292][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 1030.369652][T19025] Invalid ELF header magic: != ELF [ 1033.266203][T19060] FAULT_INJECTION: forcing a failure. [ 1033.266203][T19060] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.466286][T19060] CPU: 0 UID: 0 PID: 19060 Comm: syz.3.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.466327][T19060] Tainted: [L]=SOFTLOCKUP [ 1033.466335][T19060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1033.466350][T19060] Call Trace: [ 1033.466358][T19060] [ 1033.466368][T19060] dump_stack_lvl+0x100/0x190 [ 1033.466410][T19060] should_fail_ex.cold+0x5/0xa [ 1033.466440][T19060] should_failslab+0xc2/0x120 [ 1033.466468][T19060] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1033.466506][T19060] ? __kernfs_new_node+0xd2/0x960 [ 1033.466543][T19060] ? kstrdup+0xb3/0xe0 [ 1033.466569][T19060] __kernfs_new_node+0xd2/0x960 [ 1033.466610][T19060] ? __kernel_text_address+0xd/0x30 [ 1033.466648][T19060] ? arch_stack_walk+0xa6/0xf0 [ 1033.466673][T19060] ? __pfx___kernfs_new_node+0x10/0x10 [ 1033.466717][T19060] ? find_held_lock+0x2b/0x80 [ 1033.466740][T19060] ? kernfs_root+0xee/0x2a0 [ 1033.466774][T19060] ? kernfs_root+0xee/0x2a0 [ 1033.466817][T19060] kernfs_new_node+0x11b/0x1a0 [ 1033.466845][T19060] kernfs_create_dir_ns+0x4c/0x1a0 [ 1033.466873][T19060] sysfs_create_dir_ns+0x13a/0x2b0 [ 1033.466909][T19060] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1033.466944][T19060] ? find_held_lock+0x2b/0x80 [ 1033.466966][T19060] ? kobject_add_internal+0x25f/0x930 [ 1033.466997][T19060] ? kobject_add_internal+0x25f/0x930 [ 1033.467030][T19060] ? net_namespace+0x12/0x50 [ 1033.467056][T19060] ? device_namespace+0x76/0xa0 [ 1033.467093][T19060] kobject_add_internal+0x2c8/0x930 [ 1033.467128][T19060] kobject_add+0x16a/0x1e0 [ 1033.467158][T19060] ? __pfx_kobject_add+0x10/0x10 [ 1033.467194][T19060] ? kobject_put+0xb9/0x640 [ 1033.467229][T19060] device_add+0x294/0x1950 [ 1033.467262][T19060] ? __pfx_dev_set_name+0x10/0x10 [ 1033.467298][T19060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1033.467324][T19060] ? __pfx_device_add+0x10/0x10 [ 1033.467356][T19060] ? lockdep_init_map_type+0x5c/0x250 [ 1033.467390][T19060] ? __init_waitqueue_head+0xca/0x150 [ 1033.467435][T19060] netdev_register_kobject+0x1a9/0x3d0 [ 1033.467467][T19060] register_netdevice+0x12e0/0x2210 [ 1033.467499][T19060] ? __pfx_register_netdevice+0x10/0x10 [ 1033.467533][T19060] __ip_tunnel_create+0x52b/0x670 [ 1033.467560][T19060] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1033.467585][T19060] ? net_generic+0xea/0x2a0 [ 1033.467623][T19060] ip_tunnel_init_net+0x230/0x780 [ 1033.467653][T19060] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1033.467688][T19060] ? __kmalloc_noprof+0x320/0x850 [ 1033.467729][T19060] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 1033.467767][T19060] ops_init+0x1e2/0x5f0 [ 1033.467795][T19060] setup_net+0x118/0x3a0 [ 1033.467821][T19060] ? __pfx_setup_net+0x10/0x10 [ 1033.467843][T19060] ? lockdep_init_map_type+0x5c/0x250 [ 1033.467878][T19060] ? mutex_init_lockep+0x110/0x150 [ 1033.467916][T19060] copy_net_ns+0x46f/0x7c0 [ 1033.467946][T19060] create_new_namespaces+0x3ea/0xac0 [ 1033.467980][T19060] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1033.468010][T19060] ksys_unshare+0x473/0xad0 [ 1033.468043][T19060] ? __pfx_ksys_unshare+0x10/0x10 [ 1033.468085][T19060] __x64_sys_unshare+0x31/0x40 [ 1033.468116][T19060] do_syscall_64+0x106/0xf80 [ 1033.468140][T19060] ? clear_bhb_loop+0x40/0x90 [ 1033.468170][T19060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.468194][T19060] RIP: 0033:0x7f5c1f59c819 [ 1033.468214][T19060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.468239][T19060] RSP: 002b:00007f5c203cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1033.468262][T19060] RAX: ffffffffffffffda RBX: 00007f5c1f816090 RCX: 00007f5c1f59c819 [ 1033.468278][T19060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1033.468293][T19060] RBP: 00007f5c1f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.468307][T19060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.468321][T19060] R13: 00007f5c1f816128 R14: 00007f5c1f816090 R15: 00007ffd2d651008 [ 1033.468351][T19060] [ 1033.468386][T19060] kobject: kobject_add_internal failed for gretap0 (error: -12 parent: net) [ 1037.902665][T19096] zero sized request [ 1037.942733][T19096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1040.867730][T19126] capability: warning: `syz.3.3085' uses 32-bit capabilities (legacy support in use) [ 1041.374004][T19131] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 1041.415100][T19131] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3095'. [ 1046.834839][T19153] Process accounting resumed [ 1047.218228][T19147] Unable to find swap-space signature [ 1047.283426][T19181] FAULT_INJECTION: forcing a failure. [ 1047.283426][T19181] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.400358][T19181] CPU: 0 UID: 0 PID: 19181 Comm: syz.0.3098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.400397][T19181] Tainted: [L]=SOFTLOCKUP [ 1047.400409][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1047.400424][T19181] Call Trace: [ 1047.400438][T19181] [ 1047.400447][T19181] dump_stack_lvl+0x100/0x190 [ 1047.400490][T19181] should_fail_ex.cold+0x5/0xa [ 1047.400518][T19181] should_failslab+0xc2/0x120 [ 1047.400546][T19181] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1047.400585][T19181] ? alloc_empty_file+0x55/0x1c0 [ 1047.400616][T19181] ? __pfx_stack_trace_save+0x10/0x10 [ 1047.400646][T19181] alloc_empty_file+0x55/0x1c0 [ 1047.400678][T19181] path_openat+0xe8/0x31a0 [ 1047.400703][T19181] ? kasan_save_stack+0x3f/0x50 [ 1047.400724][T19181] ? kasan_save_stack+0x30/0x50 [ 1047.400744][T19181] ? kasan_save_track+0x14/0x30 [ 1047.400766][T19181] ? __kasan_slab_alloc+0x89/0x90 [ 1047.400789][T19181] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1047.400826][T19181] ? do_getname+0x35/0x390 [ 1047.400856][T19181] ? do_sys_openat2+0xc5/0x1e0 [ 1047.400890][T19181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.400918][T19181] ? __pfx_path_openat+0x10/0x10 [ 1047.400955][T19181] do_file_open+0x20e/0x430 [ 1047.400984][T19181] ? __pfx_do_file_open+0x10/0x10 [ 1047.401031][T19181] ? alloc_fd+0x476/0x790 [ 1047.401058][T19181] ? do_getname+0x191/0x390 [ 1047.401093][T19181] do_sys_openat2+0x10d/0x1e0 [ 1047.401126][T19181] ? __pfx_do_sys_openat2+0x10/0x10 [ 1047.401170][T19181] __x64_sys_openat+0x12d/0x210 [ 1047.401206][T19181] ? __pfx___x64_sys_openat+0x10/0x10 [ 1047.401251][T19181] do_syscall_64+0x106/0xf80 [ 1047.401276][T19181] ? clear_bhb_loop+0x40/0x90 [ 1047.401305][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.401330][T19181] RIP: 0033:0x7f2ac179c819 [ 1047.401349][T19181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.401372][T19181] RSP: 002b:00007f2ac264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1047.401394][T19181] RAX: ffffffffffffffda RBX: 00007f2ac1a15fa0 RCX: 00007f2ac179c819 [ 1047.401410][T19181] RDX: 00000000000e6e43 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1047.401426][T19181] RBP: 00007f2ac1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1047.401446][T19181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.401460][T19181] R13: 00007f2ac1a16038 R14: 00007f2ac1a15fa0 R15: 00007fffd890a7a8 [ 1047.401490][T19181] Ijn9_UVQ8j@:Un M%Ux[ 1049.367674][T19211] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3102'. [ 1049.470469][T19208] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3102'. [ 1053.353787][T19250] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1054.714300][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.720743][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.941944][T14540] Process accounting paused [ 1055.867049][T19257] Process accounting resumed [ 1057.825633][T19306] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1063.012857][T19371] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1063.549471][T19383] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 1063.592080][T19383] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1065.152362][T19392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1066.008118][T19394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1066.970557][T19419] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1067.574332][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1068.086469][T19429] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1068.653300][T19457] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 1068.730865][T19457] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3146'. [ 1074.211721][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1074.283760][T19522] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1074.871906][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 Ijn9_UVQ8j@:Un M%Ux[ 1076.670960][T19539] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3164'. [ 1076.741296][T19539] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3164'. [ 1077.629057][T19538] Process accounting paused [ 1080.622641][T19590] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3173'. [ 1086.002660][T19636] Process accounting paused Ijn9_UVQ8j@:Un M%Ux[ 1094.143291][T19725] can: request_module (can-proto-4) failed. [ 1094.828698][T19736] netlink: 350 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1098.209889][T19773] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1100.645473][T19802] FAULT_INJECTION: forcing a failure. [ 1100.645473][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.751140][T19802] CPU: 0 UID: 0 PID: 19802 Comm: syz.3.3215 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.751195][T19802] Tainted: [L]=SOFTLOCKUP [ 1100.751207][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1100.751227][T19802] Call Trace: [ 1100.751240][T19802] [ 1100.751252][T19802] dump_stack_lvl+0x100/0x190 [ 1100.751314][T19802] should_fail_ex.cold+0x5/0xa [ 1100.751355][T19802] should_failslab+0xc2/0x120 [ 1100.751396][T19802] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1100.751449][T19802] ? vm_area_alloc+0x1f/0x160 [ 1100.751496][T19802] ? vma_merge_new_range+0x38b/0xa30 [ 1100.751557][T19802] vm_area_alloc+0x1f/0x160 [ 1100.751605][T19802] __mmap_region+0x10cc/0x29e0 [ 1100.751662][T19802] ? __pfx___might_resched+0x10/0x10 [ 1100.751717][T19802] ? __pfx___mmap_region+0x10/0x10 [ 1100.751782][T19802] ? mas_prev_slot+0x67b/0x1c10 [ 1100.751835][T19802] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1100.751908][T19802] ? unmapped_area_topdown+0x460/0x580 [ 1100.752045][T19802] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1100.752104][T19802] mmap_region+0x180/0x3e0 [ 1100.752167][T19802] do_mmap+0xc63/0x12f0 [ 1100.752216][T19802] ? __pfx_do_mmap+0x10/0x10 [ 1100.752257][T19802] ? __pfx_down_write_killable+0x10/0x10 [ 1100.752316][T19802] vm_mmap_pgoff+0x29e/0x470 [ 1100.752366][T19802] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1100.752418][T19802] ? find_held_lock+0x2b/0x80 [ 1100.752452][T19802] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1100.752497][T19802] ksys_mmap_pgoff+0xe1/0x650 [ 1100.752536][T19802] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 1100.752574][T19802] ? find_held_lock+0x2b/0x80 [ 1100.752607][T19802] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1100.752642][T19802] ? exc_page_fault+0x6f/0xd0 [ 1100.752684][T19802] __x64_sys_mmap+0x125/0x190 [ 1100.752740][T19802] do_syscall_64+0x106/0xf80 [ 1100.752773][T19802] ? clear_bhb_loop+0x40/0x90 [ 1100.752813][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.752847][T19802] RIP: 0033:0x7f5c1f59c582 [ 1100.752884][T19802] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1100.752917][T19802] RSP: 002b:00007f5c203c9d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1100.752948][T19802] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c1f59c582 [ 1100.752968][T19802] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 1100.752988][T19802] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1100.753006][T19802] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 1100.753025][T19802] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f5c1f64fc55 [ 1100.753068][T19802] [ 1104.474260][T19816] Unable to find swap-space signature [ 1107.528033][T19878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1107.589596][T19878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1107.596162][T19878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1107.602676][T19878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1107.974798][T19882] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1108.189975][T19875] Process accounting resumed [ 1109.590353][T19501] Bluetooth: hci0: command 0x0c1a tx timeout [ 1109.670357][T19501] Bluetooth: hci3: command 0x0c1a tx timeout [ 1109.677430][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 1109.677933][T19501] Bluetooth: hci1: command 0x0c1a tx timeout [ 1115.419685][T19501] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1116.156313][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.163019][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.226347][T19973] Process accounting resumed [ 1120.392579][T19501] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 1120.840750][T19501] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1120.847935][T19501] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1120.864193][T19501] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1120.864311][T19501] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1126.016112][T20085] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 1126.040341][T20085] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1127.064542][T20102] syz.0.3280(20102): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1128.543296][T20124] block2mtd: illegal erase size [ 1134.186903][T20192] NFSD: Failed to start, no listeners configured. [ 1135.750528][T19501] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1138.296828][T20220] Process accounting paused [ 1141.540403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1144.804000][T20315] block2mtd: illegal erase size [ 1146.499578][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1146.587516][T20326] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1146.594770][T20326] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 1148.543568][T20330] Process accounting paused [ 1153.709954][T20405] block2mtd: illegal erase size [ 1155.534874][T20429] block2mtd: illegal erase size [ 1158.710445][T19501] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1162.710398][T19501] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1164.487539][T20513] syz.0.3346 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1169.094257][T20564] Process accounting resumed [ 1170.617956][T20592] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1172.273652][T20608] Unable to find swap-space signature [ 1172.362656][T20609] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1173.345049][T20614] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1176.594838][T20641] FAULT_INJECTION: forcing a failure. [ 1176.594838][T20641] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.720947][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.1.3368 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.721002][T20641] Tainted: [L]=SOFTLOCKUP [ 1176.721014][T20641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1176.721033][T20641] Call Trace: [ 1176.721044][T20641] [ 1176.721056][T20641] dump_stack_lvl+0x100/0x190 [ 1176.721117][T20641] should_fail_ex.cold+0x5/0xa [ 1176.721160][T20641] should_failslab+0xc2/0x120 [ 1176.721200][T20641] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1176.721255][T20641] ? security_inode_alloc+0x3b/0x2c0 [ 1176.721296][T20641] ? lockdep_init_map_type+0x5c/0x250 [ 1176.721352][T20641] security_inode_alloc+0x3b/0x2c0 [ 1176.721393][T20641] inode_init_always_gfp+0xced/0x1040 [ 1176.721454][T20641] alloc_inode+0x8e/0x250 [ 1176.721505][T20641] new_inode+0x22/0x1c0 [ 1176.721557][T20641] hugetlbfs_get_inode+0x313/0x750 [ 1176.721603][T20641] hugetlb_file_setup+0x3cc/0x5b0 [ 1176.721650][T20641] newseg+0xabb/0xed0 [ 1176.721707][T20641] ? __pfx_newseg+0x10/0x10 [ 1176.721755][T20641] ? down_write+0x146/0x1f0 [ 1176.721805][T20641] ? ksys_write+0x190/0x250 [ 1176.721840][T20641] ? ksys_write+0x190/0x250 [ 1176.721882][T20641] ipcget+0xee/0xf50 [ 1176.721930][T20641] ? do_futex+0x192/0x350 [ 1176.721977][T20641] ? __pfx_do_futex+0x10/0x10 [ 1176.722030][T20641] ? __pfx_ipcget+0x10/0x10 [ 1176.722080][T20641] ? __x64_sys_futex+0x34f/0x4d0 [ 1176.722125][T20641] ? __x64_sys_futex+0x358/0x4d0 [ 1176.722180][T20641] __x64_sys_shmget+0x13b/0x1b0 [ 1176.722232][T20641] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1176.722296][T20641] do_syscall_64+0x106/0xf80 [ 1176.722332][T20641] ? clear_bhb_loop+0x40/0x90 [ 1176.722375][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.722411][T20641] RIP: 0033:0x7f31bcf9c819 [ 1176.722438][T20641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.722471][T20641] RSP: 002b:00007f31bded5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1176.722503][T20641] RAX: ffffffffffffffda RBX: 00007f31bd216180 RCX: 00007f31bcf9c819 [ 1176.722527][T20641] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1176.722548][T20641] RBP: 00007f31bd032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1176.722568][T20641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.722588][T20641] R13: 00007f31bd216218 R14: 00007f31bd216180 R15: 00007ffc7ad7b188 [ 1176.722633][T20641] [ 1177.594042][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.600638][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.128157][T20671] Process accounting resumed [ 1185.202765][T20759] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1186.459865][T20771] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1186.459865][T20771] The task syz.2.3394 (20771) triggered the difference, watch for misbehavior. [ 1187.448152][T19501] Bluetooth: hci1: Malformed LE Event: 0x0b [ 1191.707473][T20827] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1194.026530][T20850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.804165][T20850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.104468][T20850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.387853][T20850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.875086][T20901] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1198.917858][T20901] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3420'. [ 1202.250406][T20955] can: request_module (can-proto-0) failed. [ 1203.764422][T20971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1203.812616][T20966] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1203.862148][T20971] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 1204.020258][T20971] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 1205.600350][T20984] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1206.381348][T20992] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1207.429034][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 1207.491935][T21005] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3438'. [ 1208.500890][T21024] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1208.755996][T21024] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1210.654334][T21036] Process accounting paused [ 1217.310257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 1218.333705][T21158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1221.590373][T19501] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1230.029991][T21300] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1230.077720][T21300] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3490'. [ 1230.608305][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 1230.618518][T21308] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3491'. [ 1232.099563][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1232.148694][T21340] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1234.637320][T21356] futex_wake_op: syz.3.3501 tries to shift op by -2048; fix this program [ 1236.574067][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1237.212493][T21387] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3502'. [ 1237.261706][T21387] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3502'. [ 1237.461902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 1237.743815][T21365] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1237.990890][T21380] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1238.783610][T21378] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 2: bad block bitmap checksum [ 1238.820440][T21378] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1367 with max blocks 9 with error 74 [ 1238.850158][T21378] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1238.850158][T21378] [ 1239.055067][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.061523][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.104794][T21410] Process accounting resumed [ 1260.000234][T21513] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1260.056684][T21513] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1260.106214][T21513] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1260.360491][T21523] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 1261.182558][T21382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1261.208580][T21382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1261.219436][T21382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1261.228856][T21382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1261.238446][T21382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1262.836137][T21534] chnl_net:caif_netlink_parms(): no params data found [ 1263.300731][T21534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.307946][T21534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.350499][T21382] Bluetooth: hci1: command tx timeout [ 1263.370666][T21534] bridge_slave_0: entered allmulticast mode [ 1263.481973][T21534] bridge_slave_0: entered promiscuous mode [ 1263.511554][T21534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.545732][T21534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.580362][T21534] bridge_slave_1: entered allmulticast mode [ 1263.587810][T21534] bridge_slave_1: entered promiscuous mode [ 1263.711739][T21534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.763537][T21534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.945835][T21534] team0: Port device team_slave_0 added [ 1263.957601][T21534] team0: Port device team_slave_1 added [ 1264.106064][T21534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.117033][T21534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.220217][T21534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.241616][T21534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.248649][T21534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.472511][T21534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.490668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 1264.617992][T21534] hsr_slave_0: entered promiscuous mode [ 1264.632860][T21534] hsr_slave_1: entered promiscuous mode [ 1264.639386][T21534] debugfs: 'hsr0' already exists in 'hsr' [ 1264.645976][T21534] Cannot create hsr debugfs directory [ 1265.430640][T21382] Bluetooth: hci1: command tx timeout [ 1265.773374][T21534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1265.797791][T21534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1265.827557][T21534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1265.874186][T21534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1266.207885][T21579] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1266.424926][T21534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.578926][T21582] block2mtd: illegal erase size [ 1266.679272][T21534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.761063][T21378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.768247][T21378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.818006][T21378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.825270][T21378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.313425][T21534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.510775][T21382] Bluetooth: hci1: command tx timeout [ 1268.094725][T21534] veth0_vlan: entered promiscuous mode [ 1268.118409][T21534] veth1_vlan: entered promiscuous mode [ 1268.273435][T21534] veth0_macvtap: entered promiscuous mode [ 1268.289127][T21534] veth1_macvtap: entered promiscuous mode [ 1268.456930][T21534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.499561][T21534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.616784][T21391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.682871][T21391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.718989][T21391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.747950][T21391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.144857][T21381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.169514][T21381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.284917][T21365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.333105][T21365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.592138][T21382] Bluetooth: hci1: command tx timeout [ 1269.663667][T21617] net_ratelimit: 16 callbacks suppressed [ 1269.663688][T21617] openvswitch: netlink: Message has 4 unknown bytes. [ 1270.006654][T21601] futex_wake_op: syz.2.3536 tries to shift op by -2048; fix this program [ 1271.944739][T21640] can: request_module (can-proto-0) failed. [ 1274.208234][T21631] Process accounting paused [ 1278.263259][T21380] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1278.274366][T21380] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1278.283697][T21380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1278.299095][T21380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1278.308358][T21380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1279.591062][T21720] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1279.641368][T21720] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1279.827152][T21701] chnl_net:caif_netlink_parms(): no params data found [ 1280.167510][T21701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.207334][T21701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.239553][T21701] bridge_slave_0: entered allmulticast mode [ 1280.286596][T21701] bridge_slave_0: entered promiscuous mode [ 1280.334321][T21701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.374283][T21701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.394866][T21380] Bluetooth: hci4: command tx timeout [ 1280.413736][T21701] bridge_slave_1: entered allmulticast mode [ 1280.461399][T21701] bridge_slave_1: entered promiscuous mode [ 1280.767329][T21701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.823859][T21701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.952559][T21701] team0: Port device team_slave_0 added [ 1280.984050][T21701] team0: Port device team_slave_1 added [ 1281.136795][T21701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.174836][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.215626][T21701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.367220][T21701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.379253][T21701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.465010][T21701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.692538][T21701] hsr_slave_0: entered promiscuous mode [ 1281.721541][T21701] hsr_slave_1: entered promiscuous mode [ 1281.749914][T21701] debugfs: 'hsr0' already exists in 'hsr' [ 1281.785823][T21701] Cannot create hsr debugfs directory [ 1282.419934][T21701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1282.442735][T21701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1282.457909][T21701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1282.472426][T21701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1282.480693][T21380] Bluetooth: hci4: command tx timeout [ 1282.796876][T21701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.852468][T21701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.868056][T21391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.875339][T21391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.922053][T21391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.929348][T21391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.038373][T21701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1283.446498][T21701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.867046][T21701] veth0_vlan: entered promiscuous mode [ 1283.882936][T21701] veth1_vlan: entered promiscuous mode [ 1283.934610][T21701] veth0_macvtap: entered promiscuous mode [ 1283.952267][T21701] veth1_macvtap: entered promiscuous mode [ 1283.983105][T21701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.004770][T21701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.031068][T21381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.039963][T21381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.059660][T21381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.087853][T21381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.196755][T21381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.220844][T21381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.272514][T21381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.281797][T21381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.551675][T21380] Bluetooth: hci4: command tx timeout [ 1286.630291][T21380] Bluetooth: hci4: command tx timeout [ 1294.446465][T21908] futex_wake_op: syz.2.3586 tries to shift op by -2048; fix this program [ 1295.901757][T21925] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1295.940532][T21925] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1297.502103][T21378] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1298.668802][T21951] nvme_fcloop: unknown parameter or missing value '7' [ 1300.488832][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.499801][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.146227][T21982] can: request_module (can-proto-0) failed. [ 1303.975521][T22004] FAULT_INJECTION: forcing a failure. [ 1303.975521][T22004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.989160][T22004] CPU: 0 UID: 0 PID: 22004 Comm: syz.0.3602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1303.989216][T22004] Tainted: [L]=SOFTLOCKUP [ 1303.989227][T22004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1303.989248][T22004] Call Trace: [ 1303.989259][T22004] [ 1303.989271][T22004] dump_stack_lvl+0x100/0x190 [ 1303.989329][T22004] should_fail_ex.cold+0x5/0xa [ 1303.989371][T22004] _copy_to_user+0x32/0xd0 [ 1303.989420][T22004] syslog_print_all+0x1cd/0x3f0 [ 1303.989473][T22004] ? __pfx_syslog_print_all+0x10/0x10 [ 1303.989541][T22004] ? bpf_lsm_capable+0x9/0x10 [ 1303.989579][T22004] ? security_capable+0x80/0x260 [ 1303.989619][T22004] do_syslog+0x350/0x6d0 [ 1303.989671][T22004] ? __pfx_do_syslog+0x10/0x10 [ 1303.989750][T22004] __x64_sys_syslog+0x74/0xb0 [ 1303.989800][T22004] ? lockdep_hardirqs_on+0x78/0x100 [ 1303.989837][T22004] do_syscall_64+0x106/0xf80 [ 1303.989870][T22004] ? clear_bhb_loop+0x40/0x90 [ 1303.989913][T22004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.989948][T22004] RIP: 0033:0x7f2ac179c819 [ 1303.989983][T22004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.990016][T22004] RSP: 002b:00007f2ac264b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1303.990051][T22004] RAX: ffffffffffffffda RBX: 00007f2ac1a15fa0 RCX: 00007f2ac179c819 [ 1303.990072][T22004] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004 [ 1303.990091][T22004] RBP: 00007f2ac1832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1303.990109][T22004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.990128][T22004] R13: 00007f2ac1a16038 R14: 00007f2ac1a15fa0 R15: 00007fffd890a7a8 [ 1303.990169][T22004] [ 1305.780907][T22011] Process accounting resumed [ 1306.203430][T22022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1307.460325][T22036] futex_wake_op: syz.0.3609 tries to shift op by -2048; fix this program [ 1310.547018][T21381] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1317.058636][T22112] futex_wake_op: syz.5.3623 tries to shift op by -2048; fix this program [ 1324.577560][T22157] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1375 with max blocks 1 with error 117 [ 1324.601076][T22157] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1324.601076][T22157] [ 1325.393092][T22161] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1325.571767][T22161] zswap: compressor not available [ 1325.583689][ T30] audit: type=1800 audit(2147484020.160:36): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3630" name="lu_gp_id" dev="configfs" ino=88326 res=0 errno=0 [ 1325.616045][T22159] kstrtoul() returned -22 for lu_gp_id [ 1325.775763][T22168] futex_wake_op: syz.5.3632 tries to shift op by -2048; fix this program [ 1326.023167][T21382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1326.033248][T21382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1326.043684][T21382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1326.342606][T21382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1326.370178][T21382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1327.152510][T21380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1327.170563][T21380] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1327.193008][T21380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1327.202222][T21380] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1327.210178][T21380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1327.338013][T22172] chnl_net:caif_netlink_parms(): no params data found [ 1327.966864][T22172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.995276][T22172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.004265][T22172] bridge_slave_0: entered allmulticast mode [ 1328.021760][T22172] bridge_slave_0: entered promiscuous mode [ 1328.045196][T22172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.060270][T22172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.067703][T22172] bridge_slave_1: entered allmulticast mode [ 1328.112269][T22172] bridge_slave_1: entered promiscuous mode [ 1328.300321][T22172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.353812][T22172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.470938][T21380] Bluetooth: hci5: command tx timeout [ 1328.604126][T22179] chnl_net:caif_netlink_parms(): no params data found [ 1328.647515][T22172] team0: Port device team_slave_0 added [ 1328.665358][T22172] team0: Port device team_slave_1 added [ 1328.826305][T22172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.851472][T22172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.913630][T22172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.966413][T22172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.990155][T22172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.060514][T22172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.273709][T21380] Bluetooth: hci6: command tx timeout [ 1329.302558][T22172] hsr_slave_0: entered promiscuous mode [ 1329.309634][T22172] hsr_slave_1: entered promiscuous mode [ 1329.317139][T22172] debugfs: 'hsr0' already exists in 'hsr' [ 1329.323360][T22172] Cannot create hsr debugfs directory [ 1329.365428][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.373447][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.381542][T22179] bridge_slave_0: entered allmulticast mode [ 1329.389936][T22179] bridge_slave_0: entered promiscuous mode [ 1329.425484][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.434060][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.442043][T22179] bridge_slave_1: entered allmulticast mode [ 1329.451747][T22179] bridge_slave_1: entered promiscuous mode [ 1329.575648][T22179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.602065][T22179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.693624][T22179] team0: Port device team_slave_0 added [ 1329.707774][T22179] team0: Port device team_slave_1 added [ 1329.792230][T22179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.799291][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.826205][T22179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.868449][T22179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.875747][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.902744][T22179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.918821][T22172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1329.945661][T22172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1329.977835][T22172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1330.018907][T22179] hsr_slave_0: entered promiscuous mode [ 1330.026113][T22179] hsr_slave_1: entered promiscuous mode [ 1330.033256][T22179] debugfs: 'hsr0' already exists in 'hsr' [ 1330.039047][T22179] Cannot create hsr debugfs directory [ 1330.045499][T22172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1330.412475][T22179] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1330.435653][T22179] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1330.467866][T22179] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1330.510337][T22172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.552540][T21380] Bluetooth: hci5: command tx timeout [ 1330.570214][T22179] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1330.645685][T22172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.726777][T21365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.734038][T21365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.022056][T21395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.029261][T21395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.350627][T21380] Bluetooth: hci6: command tx timeout [ 1331.366927][T21382] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1331.381261][T21382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1331.397107][T21382] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1331.405680][T21382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1331.419897][T21382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1331.785848][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.987083][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.037399][T21365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.044623][T21365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.107367][T21378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.114620][T21378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.158231][T22172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.377871][T22179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1332.540498][T22217] chnl_net:caif_netlink_parms(): no params data found [ 1332.630728][T21382] Bluetooth: hci5: command tx timeout [ 1333.016766][T22217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.040338][T22217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.047757][T22217] bridge_slave_0: entered allmulticast mode [ 1333.085336][T22217] bridge_slave_0: entered promiscuous mode [ 1333.132003][T22217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.139186][T22217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.171952][T22217] bridge_slave_1: entered allmulticast mode [ 1333.199037][T22217] bridge_slave_1: entered promiscuous mode [ 1333.457741][T21382] Bluetooth: hci6: command tx timeout [ 1333.613028][T21382] Bluetooth: hci7: command tx timeout [ 1333.714660][T22217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.743407][T22217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.882288][T22217] team0: Port device team_slave_0 added [ 1333.892885][T22217] team0: Port device team_slave_1 added [ 1333.934323][T22179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.079041][T22217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.094352][T22217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.154509][T22217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.207360][T22217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.229131][T22217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.300141][T22217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.371809][T22172] veth0_vlan: entered promiscuous mode [ 1334.518995][T22217] hsr_slave_0: entered promiscuous mode [ 1334.541560][T22217] hsr_slave_1: entered promiscuous mode [ 1334.548224][T22217] debugfs: 'hsr0' already exists in 'hsr' [ 1334.570284][T22217] Cannot create hsr debugfs directory [ 1334.578157][T22172] veth1_vlan: entered promiscuous mode [ 1334.711046][T21382] Bluetooth: hci5: command tx timeout [ 1334.914459][T22172] veth0_macvtap: entered promiscuous mode [ 1334.944535][T22172] veth1_macvtap: entered promiscuous mode [ 1335.013631][T22179] veth0_vlan: entered promiscuous mode [ 1335.079216][T22179] veth1_vlan: entered promiscuous mode [ 1335.144906][T22172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.324799][T22172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.446484][T22222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.468542][T22222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.517478][T21382] Bluetooth: hci6: command tx timeout [ 1335.545173][T22222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.581281][T22222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.632705][T22179] veth0_macvtap: entered promiscuous mode [ 1335.672098][T21382] Bluetooth: hci7: command tx timeout [ 1335.692802][T22179] veth1_macvtap: entered promiscuous mode [ 1335.844041][T22179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.939758][T22179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.978635][T21381] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.008557][T22217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1336.040342][T22217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1336.064998][T21381] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.106590][T21365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.121973][T21365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.139604][T22217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1336.165319][T22217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1336.187497][T21381] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.275209][T21381] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.409552][T21365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.431535][T21365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.876421][T21381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.911145][T21381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.752758][T21382] Bluetooth: hci7: command tx timeout [ 1337.846485][T22217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.052801][T21586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.088113][T21586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.221738][T22217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.429524][T21586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.436760][T21586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.449748][T21586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.456961][T21586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.873522][T22286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1339.115495][T22286] nfs: Unknown parameter 'nl802154' [ 1339.830854][T21382] Bluetooth: hci7: command tx timeout [ 1339.923555][T22217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.349361][T22317] futex_wake_op: syz.5.3644 tries to shift op by -2048; fix this program [ 1341.358598][T22217] veth0_vlan: entered promiscuous mode [ 1341.431916][T22217] veth1_vlan: entered promiscuous mode [ 1341.465890][T22317] futex_wake_op: syz.5.3644 tries to shift op by -2048; fix this program [ 1342.069804][T22217] veth0_macvtap: entered promiscuous mode [ 1342.118805][T22217] veth1_macvtap: entered promiscuous mode [ 1342.184190][T22217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.215613][T22217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.332860][T21586] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.418973][T21586] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.514938][T21586] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.531085][T21586] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.971211][T21586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.014890][T21586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.205796][T21365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.215115][T21365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.754345][T22358] zswap: compressor not available [ 1346.171581][T22371] block2mtd: illegal erase size [ 1346.493513][T22378] sd 0:0:1:0: PR command failed: 1026 [ 1346.519672][T22378] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1346.562314][T22378] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1350.277619][T22419] zswap: compressor not available [ 1351.133105][T22428] nvme_fcloop: unknown parameter or missing value '7' [ 1354.614503][T22460] zswap: compressor not available [ 1357.423791][T22492] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1357.611716][T22492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3676'. [ 1357.630554][T22492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.638191][T22492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.673179][T22492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.710356][T22492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.540603][T22515] zswap: compressor not available [ 1360.791136][T21586] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1364 with max blocks 12 with error 117 [ 1360.829333][T21586] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1360.829333][T21586] [ 1361.078390][T21586] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 1 with error 117 [ 1361.111695][T21586] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1361.111695][T21586] [ 1361.430597][T22523] sd 0:0:1:0: PR command failed: 1026 [ 1361.437734][T22523] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1361.464729][T22523] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1361.916265][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.923418][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.661647][T21380] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1366.673519][T21380] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1366.682015][T21380] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1366.693238][T21380] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1366.707739][T21380] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1366.803773][T22565] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1367.584932][T22565] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 1367.705589][T22560] chnl_net:caif_netlink_parms(): no params data found [ 1367.936664][T22575] FAULT_INJECTION: forcing a failure. [ 1367.936664][T22575] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1367.949774][T22575] CPU: 1 UID: 0 PID: 22575 Comm: syz.8.3693 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.949822][T22575] Tainted: [L]=SOFTLOCKUP [ 1367.949833][T22575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1367.949852][T22575] Call Trace: [ 1367.949861][T22575] [ 1367.949874][T22575] dump_stack_lvl+0x100/0x190 [ 1367.949931][T22575] should_fail_ex.cold+0x5/0xa [ 1367.949967][T22575] get_futex_key+0x1d2/0x1620 [ 1367.950015][T22575] ? __pfx_get_futex_key+0x10/0x10 [ 1367.950056][T22575] ? __lock_acquire+0x4a5/0x2630 [ 1367.950098][T22575] ? find_held_lock+0x2b/0x80 [ 1367.950130][T22575] ? __qrtr_bind.isra.0+0x3cf/0x880 [ 1367.950171][T22575] ? __qrtr_bind.isra.0+0x3cf/0x880 [ 1367.950216][T22575] futex_wake+0xea/0x530 [ 1367.950269][T22575] ? release_sock+0x21/0x220 [ 1367.950304][T22575] ? __pfx_futex_wake+0x10/0x10 [ 1367.950358][T22575] ? find_held_lock+0x2b/0x80 [ 1367.950392][T22575] ? qrtr_connect+0x24d/0x2f0 [ 1367.950431][T22575] ? __local_bh_enable_ip+0x9e/0x120 [ 1367.950469][T22575] ? lockdep_hardirqs_on+0x78/0x100 [ 1367.950509][T22575] do_futex+0x32b/0x350 [ 1367.950557][T22575] ? __pfx_do_futex+0x10/0x10 [ 1367.950615][T22575] ? __sys_connect+0xe4/0x170 [ 1367.950672][T22575] __x64_sys_futex+0x34f/0x4d0 [ 1367.950727][T22575] ? __pfx___x64_sys_futex+0x10/0x10 [ 1367.950792][T22575] do_syscall_64+0x106/0xf80 [ 1367.950827][T22575] ? clear_bhb_loop+0x40/0x90 [ 1367.950869][T22575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.950904][T22575] RIP: 0033:0x7f0a0e99c819 [ 1367.950933][T22575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.950973][T22575] RSP: 002b:00007f0a0f9080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1367.951002][T22575] RAX: ffffffffffffffda RBX: 00007f0a0ec15fa8 RCX: 00007f0a0e99c819 [ 1367.951022][T22575] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a0ec15fac [ 1367.951041][T22575] RBP: 00007f0a0ec15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1367.951059][T22575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.951076][T22575] R13: 00007f0a0ec16038 R14: 00007ffd4eefcf20 R15: 00007ffd4eefd008 [ 1367.951114][T22575] [ 1368.217438][T22560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.224675][T22560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.232201][T22560] bridge_slave_0: entered allmulticast mode [ 1368.240547][T22560] bridge_slave_0: entered promiscuous mode [ 1368.248647][T22560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.255963][T22560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.263302][T22560] bridge_slave_1: entered allmulticast mode [ 1368.270990][T22560] bridge_slave_1: entered promiscuous mode [ 1368.302643][T22560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.315722][T22560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.355137][T22560] team0: Port device team_slave_0 added [ 1368.363758][T22560] team0: Port device team_slave_1 added [ 1368.393090][T22560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.401535][T22560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.429194][T22560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.444606][T22560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.491416][T22560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.549452][T22560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.791569][T21382] Bluetooth: hci8: command tx timeout [ 1368.844579][T22560] hsr_slave_0: entered promiscuous mode [ 1368.859349][T22560] hsr_slave_1: entered promiscuous mode [ 1368.870591][T22582] netlink: 504 bytes leftover after parsing attributes in process `syz.8.3695'. [ 1368.881933][T22582] netlink: 350 bytes leftover after parsing attributes in process `syz.8.3695'. [ 1368.951263][T22560] debugfs: 'hsr0' already exists in 'hsr' [ 1368.962521][T22560] Cannot create hsr debugfs directory [ 1369.776928][T22560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1369.795605][T22560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1369.827236][T22560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1369.864068][T22560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1370.074349][T22560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.126287][T22560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.156671][T21586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.163947][T21586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.252517][T21586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.259683][T21586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.878325][T21382] Bluetooth: hci8: command tx timeout [ 1370.979366][T22560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.913249][T22560] veth0_vlan: entered promiscuous mode [ 1371.945608][T22560] veth1_vlan: entered promiscuous mode [ 1372.033148][T22560] veth0_macvtap: entered promiscuous mode [ 1372.058928][T22560] veth1_macvtap: entered promiscuous mode [ 1372.118443][T22560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.162175][T22560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.205338][T21381] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.216865][T21381] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.239261][T21381] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.258893][T21381] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.452683][T21395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.501503][T21395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.601740][T21391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1372.626507][T21391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.951233][T21380] Bluetooth: hci8: command tx timeout [ 1372.978111][T21382] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1372.991830][T21382] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1373.010274][T21382] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1373.022027][T21382] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1373.041802][T21382] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1374.387080][T22619] chnl_net:caif_netlink_parms(): no params data found [ 1374.674755][T22619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.697353][T22619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.737639][T22619] bridge_slave_0: entered allmulticast mode [ 1374.752787][T22619] bridge_slave_0: entered promiscuous mode [ 1374.782591][T22619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.789815][T22619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.810804][T22619] bridge_slave_1: entered allmulticast mode [ 1374.818411][T22619] bridge_slave_1: entered promiscuous mode [ 1374.878184][T22619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.901280][T22619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.955606][T22619] team0: Port device team_slave_0 added [ 1374.965372][T22619] team0: Port device team_slave_1 added [ 1375.008428][T22619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.016042][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.031799][T21382] Bluetooth: hci8: command tx timeout [ 1375.044692][T22619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.062467][T22619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.069718][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.116591][T21382] Bluetooth: hci9: command tx timeout [ 1375.133175][T22619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.243545][T22619] hsr_slave_0: entered promiscuous mode [ 1375.251533][T22619] hsr_slave_1: entered promiscuous mode [ 1375.258372][T22619] debugfs: 'hsr0' already exists in 'hsr' [ 1375.265140][T22619] Cannot create hsr debugfs directory [ 1375.562833][T22619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.193821][T21382] Bluetooth: hci9: command tx timeout [ 1378.140345][T21385] unregister_netdevice: waiting for erspan0 to become free. Usage count = 3 [ 1378.149504][T21385] unregister_netdevice: waiting for gretap0 to become free. Usage count = 3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1379.270556][T21382] Bluetooth: hci9: command tx timeout [ 1381.353093][T21382] Bluetooth: hci9: command tx timeout [ 1384.474722][T21382] Bluetooth: hci1: command 0x0406 tx timeout [ 1387.115607][T21472] unregister_netdevice: waiting for erspan0 to become free. Usage count = 9 [ 1387.127590][T21472] unregister_netdevice: waiting for gretap0 to become free. Usage count = 9