last executing test programs: 13.540464683s ago: executing program 1 (id=406): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = socket(0x10, 0x2, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x181c00, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0x20080, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x2084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r3, 0x10000000084, 0x19, 0x0, 0x8) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r0, 0x0, 0x4, 0x8) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4000b, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x48000, 0x0) poll$auto(&(0x7f0000000040)={r4, 0x1000, 0x9}, 0x1, 0x9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 12.575172604s ago: executing program 1 (id=411): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) 8.551503885s ago: executing program 0 (id=417): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r2, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) mmap$auto(0x3, 0xfffffffffffffffd, 0x9, 0x43fd, r0, 0x5) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 7.867028492s ago: executing program 1 (id=419): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) 6.587583638s ago: executing program 3 (id=422): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r2, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) mmap$auto(0x3, 0xfffffffffffffffd, 0x9, 0x43fd, r0, 0x5) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 6.517628055s ago: executing program 0 (id=423): mmap$auto(0x8, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f00000000c0)={0x0, 0xfffffffd}, 0x80000, 0x804, 0x5) socket(0x2b, 0x1, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x1000, 0x7, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000080), r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r3, r2, 0x0, 0x7) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2c, 0x2, 0x8b) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socket(0x15, 0x5, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x2, &(0x7f0000000180)="0a576e1ac775d742b165f08416492664c85ae89f706e78800a6750a0b578d4bf26c039fd90a26e6e7ba0858fa1fcf73f01e79f27b7b756bdd9b7b2210700000000000000edfa5ee2c13785090873363ef1547bba2fb7265bc3951c3b7a1dd3eb05c0d0758f36ac6e89787e83b4626664f6c69a1c4ebe9ae6a1f281ee7a7991ec84626f8c07dcf2ce89b8c4c8e87b815fe566bc0897b8d0047814b75076cfb6621110d39c30e4fb7048b9c4fccf36cd29b02e92fb0fcbc4946ba3ea42eb813ca73212487027b8afff2b6297c0fa83a98652c2f7d882170ef68c66fdfd360a85f6fb06faf005c6e75f8f5a872772f0dfc80c18abe7a8603f1b5b8630ebcd140423bf6e90e20b48edd426070000a389ea37b0ad0569acb70465ba2e50c4a9cc1c20de25473ef1de95090cfcbd9e72dc304d484b07a5367850532d58b35f99c9b6616b9e9c23e8dce90271fcc3834cf072e2977d5f4cbacd5f6bac1f4da22ffb61") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) 5.740659139s ago: executing program 3 (id=424): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYBLOB=']', @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x1ac}}, 0x4c041) r0 = socket(0xf, 0x5, 0xf) setsockopt$auto(r0, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r2, 0x57, r1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) sysfs$auto(0x17, 0x4, 0x0) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x8, 0xd589}, {r0, 0x0, 0xa7, 0x2}]}) 5.705009542s ago: executing program 2 (id=425): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4c041) r0 = socket(0xf, 0x5, 0xf) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r2, 0x57, r1) open(0x0, 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) sysfs$auto(0x17, 0x4, 0x0) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x8, 0xd589}, {r0, 0x0, 0xa7, 0x2}]}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20040, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 4.568101063s ago: executing program 1 (id=426): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x401) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) mmap$auto(0x4, 0x1000003b, 0x7ec, 0x18, 0x200000401, 0x8002) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x80, 0xffc, 0x5, 0x1}, "654c6fbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) 4.330988146s ago: executing program 2 (id=427): mmap$auto(0x5, 0x4, 0x2, 0x755, 0xffffffffffffffff, 0x300000000000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x80040, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x1000000004, 0x13, r1, 0x110000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/pcm0c/sub7/info\x00', 0x1cb842, 0x0) write$auto(r2, &(0x7f00000005c0)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xd6\xff\xa9{\x02J\x82-\xa4c\xcd\xda\a\xdc\x96\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffo\to\xbd\x7f;`-\xad', 0x4) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/swradio12/power/runtime_active_time\x00', 0x2a0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/222, 0xde) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="7c4ca51f26ebf34f8a723b784111b65c38b27d32a45b0e92f4d2abba02736f21b2848ae30b8c082064932bc5686c5c23a710d9ba868f6f910a604d55ff5b3d35dd73ed48dbdef06d659010fb8937f347d02f473723cdab4e05baea93028285f0e26ee934f402577c191b39c334a177cf689cf44929bc96586e6955556aae75cba37d11e9f56627c8a1beb47bfb87bc721453ce4005efddcdcb0bd2213bfb51cf2938ef4715b9ed0408003500", @ANYBLOB="85939e20f04f624ef28198c22f5e17401e367db24e16d4afab079f47eae37be6ad4d218657606b629b2fe052fc75fde16b8f5fd2ecb5ca8fdae513d1a6768bbc89637751cf95929be47d1f796f81f3d0e6911ffff1a358047cfaa735cebe1f068eeb4fa6d31efc1fa5acfa753f90ff95dcd2af3f743f58ac3fd5b16238142d7ebe89a42b86b7f4d2c1af2f547b107aa5e2a2dc4b8ca58312f52dd478a03f674972e00bffe5f315211eb70d7646b8a3d887df898668e617", @ANYBLOB="04007480000800160000020000080001002f6f65458b657c2f6d6d2f6b6f6f64655f64757073001000000000000000000006000900030000000500080004000000"], 0x1e4}, 0x1, 0x0, 0x0, 0x2008000}, 0x24000800) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f) mmap$auto(0x4000000000, 0x2020009, 0x8003, 0x1a, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0) r4 = epoll_create$auto(0x3a) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x8, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 4.158552293s ago: executing program 3 (id=428): socket(0x2, 0x3, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) clone$auto(0x20003b4b, 0x8000000000002001, 0x0, 0x0, 0xfffffffffffffffb) open(0x0, 0xae841, 0x1fb) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7fffffe) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) socket(0xf, 0x80000, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy16/hwsim/ps\x00', 0x101840, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) 3.643223218s ago: executing program 3 (id=429): socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) listen$auto(0x3, 0x400000) madvise$auto_MADV_POPULATE_READ(0x5, 0x40, 0x16) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snd/pcmC0D0c\x00', 0x80900, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r0, 0xc2604111, &(0x7f0000000600)={0x10001, [{[0x4, 0x9, 0x1, 0x80000001, 0x1, 0x1, 0x3, 0x5]}, {[0xffffffff, 0x8, 0xffffffff, 0x200, 0xfffffffa, 0xffff8000, 0x3, 0x2]}, {[0x1334000, 0x1, 0x7, 0x1, 0xcb0, 0x4, 0x5, 0x8]}], [{[0x63, 0x8, 0x9, 0x3, 0x3, 0x2, 0x781, 0x6]}, {[0x3, 0x200, 0x514be123, 0x1, 0x1, 0x7, 0x4, 0x81]}, {[0x5, 0x8001, 0x4, 0x7, 0x5, 0x80, 0x1, 0x9]}, {[0x6124, 0x8, 0x4, 0x800, 0x10001, 0x7, 0x3, 0x7fffffff]}, {[0x6, 0x5, 0x5, 0x104, 0x4, 0x0, 0x3]}], [{0x7f, 0x315e, 0x1, 0x0, 0x1}, {0x35b22e9c, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x79e2, 0x1, 0x0, 0x0, 0x1}, {0x400, 0x18, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x3, 0x0, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xa, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xffffffff, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x8, 0x0, 0x1}, {0x1, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x9, 0xfcfa, 0x0, 0x1, 0x1, 0x1}, {0x401, 0x401, 0x0, 0x1, 0x0, 0x1}], [{0x0, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x3}, {0x0, 0x81, 0x0, 0x1, 0x1, 0x1}, {0x1df, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x5, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xffff0001, 0x8, 0x1, 0x1, 0x1}, {0x2, 0xdad4, 0x1, 0x0, 0x1}, {0x0, 0x7, 0x0, 0x1, 0x0, 0x1}], 0x101, 0x9, 0x7, 0x2, 0x6, 0x7, 0x1000, "4053c497e8da8420f7601310f6ca3464", "ebd82fd2742103b4779e2c8334ab7ecfd1c4fc6197b76b5cf37ed3776f42a82b829c87af8c19d402cbf98aa045e1f364"}) 3.390186753s ago: executing program 0 (id=430): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e7fedd005d0322a303a6c15c4f40e1f332c7c4faff40ce305019980fae04cd59e9cf09adf040abd8e2059759cbf0a5177a0c50c28d908b0816966be546cd9037cb66d049940258fb11f6e3f4501cc7d4003ade89bafb1357e43c9d4dbeed283071a963953c87e23a89e59b86109157b202de7de45e0518341eccc3e4b4b01508b9ec2ac436a71036", @ANYRES16=r0, @ANYBLOB="010326bd7000fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x24000874}, 0x8c0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) getrandom$auto(0x0, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r4, 0x0, 0x20000010001, 0x400000000000) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r5, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80840, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fef08d00"}, 0x17) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) 3.268655258s ago: executing program 2 (id=431): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) mmap$auto(0x7, 0x4020009, 0x6, 0x16, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x04\x00\x00\x00\x1c\x92\x87\x9e\x00\x00\x01\x00\x00\x00\x00,\x12\xa5Yvp+\x16~3\xe6\xfc\xa4\xddd\t\x95\xecD\x10\xc4f\xd7\x8a\xadJ\xd7\xb9\xcd\x98\xbd\xfd\xe3N\xd11_\x19\x1c2\xf2x\xf91\xb8\xf1C\xec\xb1 \xc3a4\xbfw\xff\x1a\xe2\x89\xa0\r\xa0\xe2\xfc|\x86\xf5$:<\xb0\xaeiH\x8f\xdaO\x81n\xdc\x8b\x9cZ\x90\x1a2\xa0%\xc7\xa9;)\x18w\n\x97\xc1\xd7\x15\xe8i\xb7\x856I\x7fM\xa4[\xbb\xee\xeb:_\x05\xf6\x81\xc5)\xaf\x7f\x00\x9c\x18{c\xf28\xe6\x87\x13\xcd\v\x1f\x883\xb3\xbd\xfbRN\x90pX\xae\xbc\x8eN`6Xv\"\x93\x84\xa0\xec\x01c\xf3y\xe2\xb7\rF\xf1IZ\xbb\xc2\xb8T\x04\xb6D\xb5\x7f\xafu\xb7\xf9\xa7\v\x88\xb9\xc9\xb0\xdeN\'K\xf6', 0x100000a3d9) select$auto(0x100, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x0, 0x3, 0x15f4da07, 0x8, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x200000000008]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x8, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x3, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x5, 0x100000001, 0x9, 0x6, 0x1ff, 0x100000000, 0x3, 0x4, 0x401, 0x0, 0x8, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x8000000000000000, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0x8001, 0x18f, 0xfffffffffffffff9, 0x3, 0x5a4, 0x1000, 0x80000001, 0x1]}, &(0x7f0000000380)={[0x8000000000000005, 0x5, 0x1001, 0x10001, 0xe, 0xf, 0x4, 0x3, 0x59fc8000, 0x6, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x10006, 0xcc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = socket(0x1e, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x2}}, 0x66) 3.18314925s ago: executing program 0 (id=432): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4c041) r0 = socket(0xf, 0x5, 0xf) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r2, 0x57, r1) open(0x0, 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) sysfs$auto(0x17, 0x4, 0x0) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x8, 0xd589}, {r0, 0x0, 0xa7, 0x2}]}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x20040, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 3.168287856s ago: executing program 3 (id=433): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) ioctl$auto_FBIOGETCMAP(r3, 0x4604, &(0x7f0000000040)="9cfc") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) socket(0xa, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x3f00) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 2.961102455s ago: executing program 1 (id=434): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYBLOB=']', @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x1ac}}, 0x4c041) r0 = socket(0xf, 0x5, 0xf) setsockopt$auto(r0, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r2, 0x57, r1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sysfs$auto(0x17, 0x4, 0x0) ioctl$auto_PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x8, 0xd589}, {r0, 0x0, 0xa7, 0x2}]}) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 1.645798684s ago: executing program 0 (id=435): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x40000, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r2, 0x402, 0x2) fcntl$auto(r2, 0x402, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd965020000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) 1.587498186s ago: executing program 2 (id=436): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x801, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/kernel/random/boot_id\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) mmap$auto(0x2, 0x6, 0xdf, 0xeb9, r0, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi18\x00', 0xc0400, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fcdbdf255e00000006006500090000004a0075807dd9b5ae48e3b75880cfbe144e7638c3a1615deaf219c38df68536de617661f3e2e4ec459387f46b03947af7cfb602c03ed517538ddf580c0933ba0d5024e523ab11c0f2ab73000008002201010000003300550062deb99746688e3ffbf5f35a94ba584cc7964485b603efe337545d22cc15c2bdac9e078ad297b299c2fd846d537100003d18f604f032976c18edf6e2d8b527a7824a0101bb0b47e8015dcc0df24aae78fa54a6f05d3dbd44961ddea0d8209514e8538fdc2e9ceca0e39fb3bff6a0b5773871ea8c2a2711"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/29t\x00', 0x184101, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) r5 = geteuid() setreuid$auto(r5, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r6, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(0x0) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, 0x0, 0x9, 0x8) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(r0, 0x2, 0x38) 1.314513578s ago: executing program 1 (id=437): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/16, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000100), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24186311", @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf2503000000101001800c10d48004000c800400aa80e47defd78dbceffd5588dbc6ef4453dc1a2d9a06756f8994113e8bc64b42deda46cf905f8597d6c2f52e8a70e5410d9d1c83d66379101dcf855b6ec1b3d23ee63a8b8028989f74eb210762a3d2a2b01379c7bf2f17ec207611d0866f5ffe0fcde18c794cd4143e15a6c26de9caf87e42932770731c0e8611814e2f72bb8481b943828536f96d9f65156073502c8ff42cdc71de2186c5897a56acbe2eab9cb82f5c84d27067e1cb25da713d54937438d07c380834539188d4539b03d4b4e51133883653520771e756ca5276ef0ba29f35faea0e8f1864b890db326bb383f91d1b1ad4d4879b859d78900c8f2b24017c1af18f98b50deb45eb770e358004276fbf621d90fd1a07db674680e10b9ac8718d9bbc68664e567aed39408f405f138eae25d3e95f150322618ddb536adc4eadba5d541d217854bf39c6b8134f5046e84f12e4ee8a5be51637135ddcadb18e3dc741b7912a6652f988ae9ad3039004867608bb530875d5bf769e2973fbe2f3457d654a4ede7643cd255ee45c807fd6f1c09835b67bf8ee00d3f791b269737cd3f3f0ca4b2af1ce34d36464fc7a88171231f009e16a758c3857d2203b3dea980ab5761619bdc7d588f2e0ffd60720158d3ab23312f027eee1d3b2af38cf19df1bb2a30fa36a84add629d6595e31e1c0ea028a6b3f45fead46bbdf53c9b22bdb4559bf8a7933939ef844e113fef232d72933d91392caef5bfb9bd12f29c417b6dd21fd4c98bcebe67edfbdcce2e4f5d93f2c3b8b6693bfa5d3e0a5c95ca47390d4db6ca335fd532be112461e214fece6d6449836f121b99ee76c3e41f80ebcebaab9f351412e40a9c1e2e87f5bba1bf8422244318f1ee655504f108961c247e4e0a1a4a3c1c878ff6ad1b52af0bf3dc1cd8c4df5a9d3754c06c353e95542c28c740d436f98308c16bd862e6553663bb1630d7e71f2e4c966b955dbc708cf1d392b8bf9af38f95696034928598f9a3cfa66ec41ef62edd105eb2eb54de9a1009e57206223a62effad006221e222f4539a995f3429469cd82412ec8949aa8bc1d5edc774688cc50a87289d679e81744ee30ba1de92fbe0155fc3d3b51f6792676aa7a66ce147e55c77304f36d504deaa29e96657509f9f2ed23d493234bbed86940f3916491b7ff77836ae13117ce09e90acefb0412ad082f0a3711fd64946516801c7d430ecfe0dfe8a5e7b74c1fc352caa0dd6834e5c361b110762c98bf5828d86dedead97de7560438a8fa0cac0d6d69206748d03d6cc9a60f7ad0994cc0deb7b2be06a1721283486cc7c6639a688aadc87f232f9f316a24ed0e30b1205f47978a4c5109b5836c2ee68efafca98d3a3af33464cb8aece160ca2739b54728d8278cb3690cdd9319f2b4a1312ce6878f15ff055199f9e1c0080f7f4d44b9670268e8a297f53386b0cf8775086c433a3d307ded156d2025243dffabda2db6c0d599981b7f74fc2b69d52a3d38c2788a8f4a55ad97ed26ed43e4ae2fe6fa41dbec5db8d75fbbb244d04fc14a291659dae719799a5558e192c3e331502ddc3a7bce3ea6c7a2974be6e7b3584851ec97c1d7b9cdbdb66fbdb5a09995c8ea439d9b2124da7596f403a43b4fbced444ad80cec1b9c16a444156834841e953ec453e51abb2fea9aa8a5601adaca615cf5880b3e32f1362d28cd0c00fa0c50e7475f6913264cfd83460399dd78436503fc52efd379bbdd5542f82ae8612fff25171127cb44453d6081530ad38e8c1cc635a92335b0fc5c0e064432637627e33695590f5ecffa25fed492bb5da86af5c483a8747d4340cfb1b631d9e2561d33e5855e16cce5e018d094f2998558c08544d3d18667345da711ae521c8a1cc08f1bc2d2727ff14077d80add21cd4a06bc42163f8b7572410b7bb9893485ff0855e4d1c26739b390b01321b98a155db9ab38452128bc785c9fe750a891e324eeaa4ecb030e6c52209bd224c57528b58d0329283e3029c79a5f8f90f6e0c80fd2d038f323415ddfbd00b86c339cfbaf655facfcce3cffd9a6240d47b0c47a41fcc7d5f15aae9b5ab04444ed199ce4b6e1b39cf71aa223b3f3b5327909655aedfe7ffdb3447bc84157a6b6d33a5e3f110a19fbc1148e80ebab9e1dadee1cb0d3096ca6130687daf87f02fd8028c77ac03dee56c0fdd3bd174f1d559e15fcd03aa6aba6f4d2f00c078f91d97749ae08c8d518209f129851c02a54d46b81d3fa5f700a4a9c0cb9ade3e7c6b3ff316c0f3ebdf1bbf25a61986f06a201c1fc9d29ccc954010b7d41e45e24d8f0bf3039f40d7410c2380c0f97a790a61d3346ddb8150993d8ff05f6b24483cc14e38c02770d52177cb7558258c1ffb888f9120959c6e5740d7af41a9dd2aeea0b41d5c720995a0be692ce0a5ac77a026999ff07802cff832be7788c7b96a148cb493e9877c29a4ea46db32258690866a3f2a2ca268a7fcc073a823bd70e399aa9361d34b507db32cac5c0309764580bfacc4b7ed25da648de5fb63f49a0d63636b30e08f78b4466523e2e44cadc3e9c2bba8c39b187111535a62a0109fa04c2635927e375139fbaa809e4b669c7e4e4e4d1a2221f28c80a2f41b6dddca6fd9ad637765562866c464ff3bf327a9a3ff5dcf82194d23721f4970501a93192950586a48d4a3594c28dd7a98ffa85252dd69f32892290114169a6204ed8e587b0713b0fccdc3688aa4e77aa856d2b1ffba56a76f0062f379c6dea5f39c5839939d7c3561adf536083378a3cf6799cdede1aa384765bc638ff3eedb8f9f7cdeb778d241324145549c837c84d002504c83688a973eb11bd667cd909a77c2f7488f4da9b6967cb7fb39da8e4357abc03616dc92ba016e54487e80435ee171e10546500683e59371e47ad5345ac8ca608efd4d38de787784ae4432a57acecb99f7b107389355770e0933abe1c40585dc50dbf474b6cbe82d173938d6dec85acf7c17e9bb81f2fd1432932c3db43d047c978351b38c45427387be31269467b8a2ae99d3d75f5bfac55102588c584e8cec070bfea93aca15d74ec407982baa99bf214c7075dd8e081fb65296208b8b8a0991fec94ecbce3c72ba692e4da7464235102e6af94abe2ff44ed39486034b0d2249a4b4ba9bff344ac1cc48433078edad7b1b7ded9e3ce7a694a59b166e9b891af6e8194c07af0ec395edd9136de43c27988945b7c2576522f1f8de9905f39c4e174317dd3bd72c19255279b13d850088eb25b690af177477e9e93cea6f3e861e58a56ceaa5735d9541ddad93abe39084cba38902cbc8fff4ae522e7880adf452297e1b4662bff8dfb606f41f89e8c3f6bfea8687d5891739aaca65e532e1d1d115fcd6958038e022ef9621113817319e89fbe7bce36cd4ba27cd23550878b36566985c8f7f22f712376355b3eff95f2c8d5431333cb8016710496e87367710353e709abd8f00affaab37f48b3bf96854796aab2dc5312564d97fce2d889b6decd9108b397b630c53666d1c04d71ede264b99fc1f0270a28d97eaaac3dc2f2040ff598571153165e8baaa3ffd1b5b2ae296fdfcca49d472774d3ad554bbc3b6ee2652dfec26c2ba589bb8d6838ca24cd6e2b4c04c3fe9cc622158cb1d80a41fce76cdd0eed815d3d806ddd7187a0fbb65d6d078ae1ce7b9b232c45a3164ae33dc08342d20417ce4d65b7be3c8ef43a53ce17728d2dddf77f3199094387635a9fa0c9b7c408943de5fb72b0ec3c6a4c3d6176602597b13a9c49dc4ca7cda0278c09bd733c6345bf182fe59739d23d412ab166dd1efe5f6310046e34419b875d5af0781c8e7ff24e618a049204c4f91478d4d272c1bb08d14e18ed774a8c83f75ffd8ca1d387207a4ad220aa56295413e1c86ade7ea9576295d55bff97552630ae6314a4236e91847f1519e82d66d75ef428c70cf62ff1e501c3a51cacb88a665bbe0604bc89985462de17b877d9bfdf9c71c914c29ab56b7082c2f3fdace9ac4957a966f5b4b73338d2f6a9cfb956e519beaf4ba6f2bbfbc687da2f446b3032ab14eef1d7f5e2baa4f9f0bd8c716a1d5cc654debef78a69fd6ce3915e9bc8b91bc80f85463a909f89c469342d2be76bd941fc32c2c57febbc849f4157e024cc21b7c8450a8cdd9a8eba24a58765f6a87436325dafe8e344f9fd52cd2f44a17263b2932b333afddd6e7073a02ce017b6b959a8d089d71165e90e3052e532e21625c8923bcac5490b00478b0e9adc0fadefffbbf8601a446c2cc7a4560addb48a7a4b4e23c670d8c8860c1aa72e96eb18f983a627d7eefea7f583bbf26b84d7eab2db2262d5e63af19fc532fdc06c4f1fade258c8d11f9beea1fadafa9101808ead2d7a7cbc88db7a91d76483416f8adc0102e77b671cbee00ca77d92d782bb6af51f56f66d0a090a87712bd9f10a2dde6c1ae4aba6653d1a2f8897560938bcc8ffc1f453a11b233ff3a8ea4bca28b086173714045934c756c1af511b0c277dd443461f0b104422bd6c1a5210c8f8dbdb298ecf4336d90878bdaaffc7cbd2593478f7791461b7b730aaa1bb8f5c237f05407b35105901226d1f0789b737803aa75783117cd92e14f7615bcf1c9f4f8f1f87ac38c7d38bffe554dc9432cc3af38ba7ad72e85bb5d95c9c126eee38382eef3be1186d1215e3e8dce4306c42a5e44619619024a7da2d50320a15c0b764a940bf854de42ddec7791a7d4c7d8a5463af1d2a843c400189e6b0d2a52123e5256257080be92603eb615fedc70be87790393f25a70ad9f8913e05269faaf9bed1af93bc1c4d266eef1ace3c8dd8828b60798c621fa1353ec99ff837411f2fb918493ac8e6b6fe568693b2b6acd7e8b3c509ddc0ae09c910780039b84910d4631c9792e291c5fdcc4ff9354639a67c093b86f0088097391983bd62be688c3925ffa5faddc6281bec21a49d8e430a2b14ec8acd40007b5ae990bc21783ba6d31eec13f953b5d4425909c17c00ad16fcb41bb0d75fe13354a1168e9f79721ba8b2e377b1e9fb12d14f0ad359fedf8e22e9ba8291df0c4b981ff3526940946d5c5a6c9d9fc2422a0bb940066e625cfaf3a97acf1951c118b966e9c7b0a58bd74999f253aec922f446846db6be6528a00ed87f9fada52bc259fecc617d6a84f592c39089bcd55d8ee9d8a096b1b118fb3fc1a9948ab62ef23351508eeff13a5e44d19b1e6bd52af0b0d12d6b9ac331d220a047b576a535933fd9c1187b1749ee37739fd61cb53c0526880084b7b75b20a38fde01a6e9e90ec006d6c76a61203aa099e79791e4a426fc7633b3360a0471b4f5eeff77ef3177434f1c255d87da1d32db9b03c1e14469b02240625b829347de40e33f6a186ed628650675dbde11761fd89f353f9693281c5d19c4399f414dfdf1e75c6f3afe5cda988fa585057e3bb191eefb0dd6ff655cca7d0259e2f7cbed9701c420a13f1b4810b0b1623d8efc4a82b9027b42299494a94c4e9444d848124d1599f111b18eba2fe109c91d4360e82db7bb70c6024de84de7a955bdd6d79b7719b9fb5d09f5691738d290d781d06fd9126919c8aa4cd0fada7b0c2c7eb4b2b870a848f0116af24ab7ee3e3ff455b75612aecd729e6ba71b3b110642132265d7bccefbb3b015fdc7b605ab475244df853f61cdc3271f6dbf1194f3f849b2c611136409a185e965b6062bfa7729343add4f29b86e963fcdc9d2deebfa6fc2c0f7e568c46ffb0d7a38228a1a949377aaead876220bde5ca2686e4bcc15848d7f4b5f8f4dc02ddc41a00a8c72921b8a63fda7e23a35631a490c4d2d33c81f99509e2cbc3b0e525a4"], 0x1024}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd95, 0x2}, 0x0, 0x7ffffffff000, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket(0xf, 0x3, 0x2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r7, 0x2, 0x0) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r6, 0x5386, &(0x7f0000000080)="b228b7be210232") write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 969.713567ms ago: executing program 2 (id=438): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYBLOB=']', @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x1ac}}, 0x4c041) r0 = socket(0xf, 0x5, 0xf) setsockopt$auto(r0, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r1, 0x57, 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sysfs$auto(0x17, 0x4, 0x0) ioctl$auto_PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r3, 0x0, 0xffffffffffffffff, 0x9}, {0xffffffffffffffff, 0x0, 0x10000333d, 0x7}, {0xffffffffffffffff, 0x0, 0x7, 0x2}, {0xffffffffffffffff, 0x0, 0x8, 0xd589}, {r0, 0x0, 0xa7, 0x2}]}) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 848.4712ms ago: executing program 0 (id=439): mmap$auto(0x0, 0x20009, 0xdf, 0x18, 0x200000000000404, 0x0) (async) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mlockall$auto(0x7) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) gettid() r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000180)="2148caed7b1654c278021ead91a1fa9f649e431b5e44478f35ed0350de9a7293e7dc028b0d1b", 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x6, 0x8, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r2, 0xfffff588, 0x9, 0x2, 0x100000000000200}, 0x7f) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c71a", 0x31) (async, rerun: 32) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x38f4c0, 0x0) (rerun: 32) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r4, 0x80085502, &(0x7f00000001c0)={0x10, 0x1000}) (async) ioctl$auto(r1, 0xffff, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r5, 0x0, 0x0) 160.129543ms ago: executing program 3 (id=440): mmap$auto(0x5, 0x4, 0x2, 0x755, 0xffffffffffffffff, 0x300000000000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x80040, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x1000000004, 0x13, r1, 0x110000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/pcm0c/sub7/info\x00', 0x1cb842, 0x0) write$auto(r2, &(0x7f00000005c0)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xd6\xff\xa9{\x02J\x82-\xa4c\xcd\xda\a\xdc\x96\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffo\to\xbd\x7f;`-\xad', 0x4) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/swradio12/power/runtime_active_time\x00', 0x2a0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/222, 0xde) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="220225bd7000fedbdf2501000000080027000800000008000100ff7f0000780130800400d6806f01f58097767cd8b58a7d7bfdb9f95c896e6711c73a12eccfd197e940eda30cf6f210cd9fb24a08002200050000001000f5002f6465762f766964656f32005ef1fbba7cd0bd0be7010071992b8235d7999b5d3702ef683837a09955d56dce83739f6cde5744e11c38540b80aa56690fcd92a5c82004d8ba06131025efaa0ae49b4f2ec353571dc330d6ef443d943e501a625d01a38dadda4b04bc5882b7574a7d1fc83870c3b33aa5cb1b4b364b9dea08da38f80400188026003b00b6292c716123083facdbbd95ab165bebcefd02c62785818b5fc90daee31b44e221caee7acc4246e99c0751a4ee9a5c6b034c042d525a3d", @ANYRES32=r1, @ANYBLOB="7c4ca51f26ebf34f8a723b784111b65c38b27d32a45b0e92f4d2abba02736f21b2848ae30b8c082064932bc5686c5c23a710d9ba868f6f910a604d55ff5b3d35dd73ed48dbdef06d659010fb8937f347d02f473723cdab4e05baea93028285f0e26ee934f402577c191b39c334a177cf689cf44929bc96586e6955556aae75cba37d11e9f56627c8a1beb47bfb87bc721453ce4005efddcdcb0bd2213bfb51cf2938ef4715b9ed0408003500", @ANYBLOB="85939e20f04f624ef28198c22f5e17401e367db24e16d4afab079f47eae37be6ad4d218657606b629b2fe052fc75fde16b8f5fd2ecb5ca8fdae513d1a6768bbc89637751cf95929be47d1f796f81f3d0e6911ffff1a358047cfaa735cebe1f068eeb4fa6d31efc1fa5acfa753f90ff95dcd2af3f743f58ac3fd5b16238142d7ebe89a42b86b7f4d2c1af2f547b107aa5e2a2dc4b8ca58312f52dd478a03f674972e00bffe5f315211eb70d7646b8a3d887df898668e617", @ANYBLOB="04007480000800160000020000080001002f6f65458b657c2f6d6d2f6b6f6f64655f64757073001000000000000000000006000900030000000500080004000000"], 0x1e4}, 0x1, 0x0, 0x0, 0x2008000}, 0x24000800) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f) mmap$auto(0x4000000000, 0x2020009, 0x8003, 0x1a, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0) r4 = epoll_create$auto(0x3a) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) socket(0x8, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=441): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0xfffffffffffffffd, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x8, &(0x7f0000000340)={@siginfo_0_0={0x2000, 0x7, 0xdd22, @_sigfault={&(0x7f0000000300)="7498e775235c924fb746478f79f5c53657a4ccd6c81e8dd8767b78ea66a116689f83e7f1473a38c76bcf75eae8f9d81a8a1ca37955b44f55", @_addr_pkey={"818b2fb1075f6fc1", 0x1}}}}, 0x278f6dd2) io_uring_setup$auto(0x87, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x23, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x2, 0x0, 0x3, 0x8, 0x2, {0x2100000000, 0x10000}, 0xfffffffffffffffc, 0x73d, 0xffffffffffffffdd, 0x1008001, 0x0, 0x6, 0x21b, 0xffffffff, 0xa747, 0x7, 0x1000}) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xa2100, 0x0) fcntl$auto_F_GETFL(r3, 0x3, 0x3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x280004, 0x4000000000df, 0x40040eb0, 0xd, 0x8) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r1) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042dbd7000fcdbdf250500000006000700070000000a007e3bcd371bf3d9f80000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) gettid() kexec_load$auto(0x3, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000140)="5bafd56c2c122bc0003f91ad0e2963b1259c512c75114cd1bf833777c5f1aa905ac6eaa258e2aca172f1b2fb7932baaa9e6bdd5d4c193da127fe2ae6116f2ad909a5ee204ca4094f82cb444aed85374298875fd1e2c861610242a6b8c01c0e2bb8d7896b6d6286d95dcd06fbd7120d0e562fe7fb9f334d7067ea429bd6914891fa48b2bea45968c3fe24052221cec0fd646ebea2baa46ac5f8e8af6bdfaa451cd4e6da", 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4d", 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 80.243488][ T5821] cgroup: Unknown subsys name 'net' [ 80.410698][ T5821] cgroup: Unknown subsys name 'cpuset' [ 80.419439][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.925025][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.137875][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.146245][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.148820][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.154911][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.168217][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.177980][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.183573][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.192450][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.201825][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.210091][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.217387][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.223430][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.225312][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.233292][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.238469][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.246650][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.255403][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.262737][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.268866][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.275639][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.805047][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.901615][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.992193][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.017212][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 85.150681][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.158567][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.165876][ T5832] bridge_slave_0: entered allmulticast mode [ 85.173620][ T5832] bridge_slave_0: entered promiscuous mode [ 85.181746][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.189361][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.196522][ T5831] bridge_slave_0: entered allmulticast mode [ 85.204542][ T5831] bridge_slave_0: entered promiscuous mode [ 85.227636][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.234785][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.242468][ T5832] bridge_slave_1: entered allmulticast mode [ 85.250684][ T5832] bridge_slave_1: entered promiscuous mode [ 85.258004][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.265136][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.272517][ T5831] bridge_slave_1: entered allmulticast mode [ 85.279524][ T5831] bridge_slave_1: entered promiscuous mode [ 85.358974][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.366181][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.374350][ T5833] bridge_slave_0: entered allmulticast mode [ 85.381780][ T5833] bridge_slave_0: entered promiscuous mode [ 85.418062][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.427552][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.434744][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.442114][ T5833] bridge_slave_1: entered allmulticast mode [ 85.449904][ T5833] bridge_slave_1: entered promiscuous mode [ 85.469662][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.476956][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.484141][ T5830] bridge_slave_0: entered allmulticast mode [ 85.492326][ T5830] bridge_slave_0: entered promiscuous mode [ 85.502614][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.515849][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.527771][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.574515][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.581769][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.591102][ T5830] bridge_slave_1: entered allmulticast mode [ 85.598314][ T5830] bridge_slave_1: entered promiscuous mode [ 85.619845][ T5831] team0: Port device team_slave_0 added [ 85.640038][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.663528][ T5831] team0: Port device team_slave_1 added [ 85.672808][ T5832] team0: Port device team_slave_0 added [ 85.682788][ T5832] team0: Port device team_slave_1 added [ 85.691201][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.716191][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.781270][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.818202][ T5833] team0: Port device team_slave_0 added [ 85.835269][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.842488][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.868628][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.881164][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.888284][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.914364][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.929676][ T5833] team0: Port device team_slave_1 added [ 85.946357][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.953560][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.980022][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.991668][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.998987][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.025131][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.053414][ T5830] team0: Port device team_slave_0 added [ 86.088529][ T5830] team0: Port device team_slave_1 added [ 86.095164][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.102601][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.129196][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.142649][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.149997][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.176887][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.239837][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.247621][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.273834][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.286688][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.293655][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.319624][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.330410][ T5842] Bluetooth: hci0: command tx timeout [ 86.330416][ T5845] Bluetooth: hci1: command tx timeout [ 86.330705][ T5845] Bluetooth: hci3: command tx timeout [ 86.336126][ T5842] Bluetooth: hci2: command tx timeout [ 86.401236][ T5831] hsr_slave_0: entered promiscuous mode [ 86.407670][ T5831] hsr_slave_1: entered promiscuous mode [ 86.446437][ T5832] hsr_slave_0: entered promiscuous mode [ 86.452774][ T5832] hsr_slave_1: entered promiscuous mode [ 86.459296][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.468091][ T5832] Cannot create hsr debugfs directory [ 86.501962][ T5833] hsr_slave_0: entered promiscuous mode [ 86.508491][ T5833] hsr_slave_1: entered promiscuous mode [ 86.514531][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.522196][ T5833] Cannot create hsr debugfs directory [ 86.554827][ T5830] hsr_slave_0: entered promiscuous mode [ 86.561879][ T5830] hsr_slave_1: entered promiscuous mode [ 86.568438][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.576007][ T5830] Cannot create hsr debugfs directory [ 87.132046][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.151968][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.183039][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.208124][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.255617][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.266609][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.294113][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.303840][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.365349][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.377815][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.412931][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.442295][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.511866][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.532931][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.557048][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.569116][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.650113][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.684753][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.715482][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.722829][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.754108][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.761259][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.829137][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.850131][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.924321][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.935522][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.965982][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.973140][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.982953][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.990102][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.005563][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.060301][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.067551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.109934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.117169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.141141][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.184987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.229831][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.237032][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.407006][ T5842] Bluetooth: hci3: command tx timeout [ 88.408782][ T51] Bluetooth: hci2: command tx timeout [ 88.412451][ T5842] Bluetooth: hci1: command tx timeout [ 88.418082][ T5845] Bluetooth: hci0: command tx timeout [ 88.446486][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.539269][ T5832] veth0_vlan: entered promiscuous mode [ 88.585471][ T5832] veth1_vlan: entered promiscuous mode [ 88.695484][ T5832] veth0_macvtap: entered promiscuous mode [ 88.770810][ T5832] veth1_macvtap: entered promiscuous mode [ 88.848867][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.890106][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.910763][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.924517][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.935268][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.944296][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.953371][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978693][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.992050][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.173034][ T5830] veth0_vlan: entered promiscuous mode [ 89.179308][ T5833] veth0_vlan: entered promiscuous mode [ 89.189654][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.202536][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.230258][ T5830] veth1_vlan: entered promiscuous mode [ 89.242855][ T5833] veth1_vlan: entered promiscuous mode [ 89.302311][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.310727][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.321123][ T5831] veth0_vlan: entered promiscuous mode [ 89.346486][ T5831] veth1_vlan: entered promiscuous mode [ 89.375849][ T5833] veth0_macvtap: entered promiscuous mode [ 89.389691][ T5830] veth0_macvtap: entered promiscuous mode [ 89.417134][ T5833] veth1_macvtap: entered promiscuous mode [ 89.425458][ T5830] veth1_macvtap: entered promiscuous mode [ 89.453999][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.470833][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.495188][ T5831] veth0_macvtap: entered promiscuous mode [ 89.526543][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.541241][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.552123][ T5831] veth1_macvtap: entered promiscuous mode [ 89.568844][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.581573][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.594663][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.605056][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614644][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.655788][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.664678][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674768][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684390][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721270][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.759978][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.837072][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.845812][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.864307][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.993110][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.115954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.137457][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.264158][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.273613][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.354352][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.371646][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.422026][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.457168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.467841][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.501365][ T5845] Bluetooth: hci0: command tx timeout [ 90.506955][ T5842] Bluetooth: hci2: command tx timeout [ 90.507003][ T5842] Bluetooth: hci3: command tx timeout [ 90.507038][ T5842] Bluetooth: hci1: command tx timeout [ 90.620170][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.752505][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.799825][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.057472][ T5935] mmap: syz.3.4 (5935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.272917][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.495652][ T5938] Zero length message leads to an empty skb [ 91.979613][ T43] cfg80211: failed to load regulatory.db [ 92.108825][ T5956] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input5 [ 92.567350][ T5845] Bluetooth: hci0: command tx timeout [ 92.567777][ T51] Bluetooth: hci1: command tx timeout [ 92.572881][ T5845] Bluetooth: hci3: command tx timeout [ 92.584034][ T5842] Bluetooth: hci2: command tx timeout [ 93.276860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.587249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.607083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.615316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.147046][ T5978] vhci_hcd: default hub control req: 7371 v0000 i0000 l0 [ 94.777171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.785704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.826840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.835355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.438170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.696644][ T6005] process 'syz.2.16' launched './file0' with NULL argv: empty string added [ 96.431186][ T6014] [U] [ 96.434194][ T6014] [U] [ 96.436926][ T6014] [U] [ 96.439649][ T6014] [U] [ 96.466966][ T6014] [U] [ 96.469687][ T6014] [U] [ 96.472367][ T6014] [U] [ 96.475060][ T6014] [U] [ 96.538451][ T6014] [U] [ 96.541220][ T6014] [U] [ 96.543950][ T6014] [U] [ 96.546673][ T6014] [U] [ 96.580349][ T6014] [U] [ 96.583098][ T6014] [U] [ 96.585793][ T6014] [U] [ 96.588491][ T6014] [U] [ 96.591913][ T6014] [U] [ 96.594605][ T6014] [U] [ 96.597282][ T6014] [U] [ 96.599970][ T6014] [U] [ 96.604535][ T6014] [U] [ 96.607231][ T6014] [U] [ 96.609905][ T6014] [U] [ 96.612584][ T6014] [U] [ 96.616044][ T6014] [U] [ 96.618744][ T6014] [U] [ 96.621427][ T6014] [U] [ 96.624104][ T6014] [U] [ 96.642717][ T6014] [U] [ 96.645430][ T6014] [U] [ 96.648115][ T6014] [U] [ 96.650798][ T6014] [U] [ 96.672848][ T6014] [U] [ 96.675566][ T6014] [U] [ 96.678274][ T6014] [U] [ 96.681003][ T6014] [U] [ 96.783223][ T6014] [U] [ 96.785951][ T6014] [U] [ 96.788638][ T6014] [U] [ 96.791324][ T6014] [U] [ 96.826373][ T6014] [U] [ 96.829134][ T6014] [U] [ 96.831857][ T6014] [U] [ 96.834579][ T6014] [U] [ 96.839152][ T6014] [U] [ 96.841902][ T6014] [U] [ 96.844625][ T6014] [U] [ 96.847345][ T6014] [U] [ 96.855379][ T6014] [U] [ 96.858116][ T6014] [U] [ 96.860814][ T6014] [U] [ 96.863515][ T6014] [U] [ 96.869971][ T6014] [U] [ 96.872721][ T6014] [U] [ 96.875451][ T6014] [U] [ 96.878158][ T6014] [U] [ 96.894731][ T6014] [U] [ 96.897500][ T6014] [U] [ 96.900231][ T6014] [U] [ 96.902951][ T6014] [U] [ 96.938282][ T6014] [U] [ 96.941008][ T6014] [U] [ 96.943693][ T6014] [U] [ 96.946368][ T6014] [U] [ 97.011774][ T6014] [U] [ 97.014493][ T6014] [U] [ 97.017174][ T6014] [U] [ 97.019867][ T6014] [U] [ 97.113675][ T6014] [U] [ 97.116423][ T6014] [U] [ 97.119104][ T6014] [U] [ 97.121777][ T6014] [U] [ 97.179349][ T6014] [U] [ 97.182071][ T6014] [U] [ 97.184779][ T6014] [U] [ 97.187478][ T6014] [U] [ 97.307294][ T6014] [U] [ 97.310059][ T6014] [U] [ 97.312781][ T6014] [U] [ 97.315500][ T6014] [U] [ 97.396948][ T6014] [U] [ 97.399718][ T6014] [U] [ 97.402444][ T6014] [U] [ 97.405162][ T6014] [U] [ 97.433859][ T6026] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input7 [ 97.483064][ T6014] [U] [ 97.720308][ T6031] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 98.086542][ T6033] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 101.727718][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 105.126878][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 106.127103][ T51] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 106.127144][ T51] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 106.142729][ T51] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 106.142790][ T51] Bluetooth: hci1: adv larger than maximum supported [ 106.150515][ T51] Bluetooth: hci1: adv larger than maximum supported [ 106.157642][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 107.701415][ T6165] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 107.716903][ T6165] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 107.758316][ T6165] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 107.766635][ T6165] page_type: f5(slab) [ 107.941394][ T6166] could not allocate digest TFM handle binfmt_misc [ 107.953827][ T6165] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 107.972863][ T6165] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 107.981782][ T6165] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 107.993037][ T6165] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 108.020447][ T6165] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 108.060049][ T6165] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 108.068923][ T6165] page dumped because: unmovable page [ 108.127867][ T6165] page_owner tracks the page as allocated [ 108.140316][ T6165] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5204, tgid 5204 (udevd), ts 97622812568, free_ts 97592003358 [ 108.226767][ T6165] post_alloc_hook+0x1c0/0x230 [ 108.232095][ T6165] get_page_from_freelist+0x1321/0x3890 [ 108.238102][ T6165] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 108.248081][ T6165] alloc_pages_mpol+0x1fb/0x550 [ 108.253020][ T6165] new_slab+0x23b/0x330 [ 108.257994][ T6165] ___slab_alloc+0xd9c/0x1940 [ 108.263069][ T6165] __slab_alloc.constprop.0+0x56/0xb0 [ 108.271142][ T6165] __kmalloc_noprof+0x2f2/0x510 [ 108.333988][ T6165] tomoyo_realpath_from_path+0xc2/0x6e0 [ 108.339954][ T6165] tomoyo_path_perm+0x274/0x460 [ 108.344860][ T6165] security_inode_getattr+0x116/0x290 [ 108.350386][ T6165] vfs_fstat+0x4b/0xe0 [ 108.354507][ T6165] __do_sys_newfstat+0x87/0x100 [ 108.359542][ T6165] do_syscall_64+0xcd/0x490 [ 108.364101][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.370114][ T6165] page last free pid 5833 tgid 5833 stack trace: [ 108.378629][ T6165] __free_frozen_pages+0x7fe/0x1180 [ 108.383859][ T6165] __put_partials+0x16d/0x1c0 [ 108.396807][ T6165] qlist_free_all+0x4d/0x120 [ 108.406914][ T6165] kasan_quarantine_reduce+0x195/0x1e0 [ 108.417817][ T6165] __kasan_slab_alloc+0x69/0x90 [ 108.427323][ T6165] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 108.440248][ T6165] getname_flags.part.0+0x4c/0x550 [ 108.445486][ T6165] __x64_sys_unlink+0xb0/0x110 [ 108.450867][ T6165] do_syscall_64+0xcd/0x490 [ 108.455746][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.080982][ T6206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 112.761238][ T6224] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 114.210239][ T6220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.216531][ T6220] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.233981][ T6220] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.260976][ T6220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.269206][ T6220] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.280391][ T6220] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.290389][ T6220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.298162][ T6220] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.308054][ T6220] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.319490][ T6220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.325899][ T6220] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.335050][ T6220] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.806784][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.841266][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 116.327125][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.333229][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.340190][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.900495][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.406918][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.413631][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.419741][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.967687][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.594428][ T6319] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 120.102238][ T6321] FAULT_INJECTION: forcing a failure. [ 120.102238][ T6321] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 120.154011][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.0.77 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 120.154049][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.154068][ T6321] Call Trace: [ 120.154077][ T6321] [ 120.154090][ T6321] dump_stack_lvl+0x16c/0x1f0 [ 120.154136][ T6321] should_fail_ex+0x512/0x640 [ 120.154179][ T6321] should_fail_alloc_page+0xe7/0x130 [ 120.154208][ T6321] prepare_alloc_pages+0x3c2/0x610 [ 120.154239][ T6321] ? rcu_is_watching+0x12/0xc0 [ 120.154265][ T6321] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 120.154308][ T6321] ? rcu_is_watching+0x12/0xc0 [ 120.154332][ T6321] ? trace_mm_page_alloc+0x11f/0x1a0 [ 120.154359][ T6321] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 120.154391][ T6321] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.154429][ T6321] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 120.154465][ T6321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.154513][ T6321] ? alloc_vmap_area+0x645/0x29c0 [ 120.154539][ T6321] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 120.154571][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.154600][ T6321] ? do_syscall_64+0xcd/0x490 [ 120.154622][ T6321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.154665][ T6321] alloc_pages_bulk_noprof+0x71c/0x1410 [ 120.154702][ T6321] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.154743][ T6321] ? policy_nodemask+0xea/0x4e0 [ 120.154789][ T6321] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 120.154830][ T6321] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.154872][ T6321] kasan_populate_vmalloc+0xf1/0x1f0 [ 120.154916][ T6321] alloc_vmap_area+0x959/0x29c0 [ 120.154968][ T6321] ? __pfx_alloc_vmap_area+0x10/0x10 [ 120.155007][ T6321] __get_vm_area_node+0x1ca/0x330 [ 120.155046][ T6321] __vmalloc_node_range_noprof+0x271/0x14b0 [ 120.155080][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.155121][ T6321] ? __lock_acquire+0xb8a/0x1c90 [ 120.155153][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.155194][ T6321] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.155228][ T6321] ? __alloc_pages_noprof+0xb/0x1b0 [ 120.155264][ T6321] ? ___kmalloc_large_node+0x84/0x1e0 [ 120.155291][ T6321] ? find_held_lock+0x2b/0x80 [ 120.155323][ T6321] __kvmalloc_node_noprof+0x30a/0x620 [ 120.155359][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.155392][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.155430][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.155458][ T6321] __do_sys_listmount+0x1c2/0xec0 [ 120.155489][ T6321] ? __x64_sys_futex+0x1e0/0x4c0 [ 120.155516][ T6321] ? __x64_sys_futex+0x1e9/0x4c0 [ 120.155545][ T6321] ? __pfx___do_sys_listmount+0x10/0x10 [ 120.155592][ T6321] do_syscall_64+0xcd/0x490 [ 120.155618][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.155644][ T6321] RIP: 0033:0x7f0ca718e929 [ 120.155679][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.155710][ T6321] RSP: 002b:00007f0ca7f3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 120.155740][ T6321] RAX: ffffffffffffffda RBX: 00007f0ca73b6160 RCX: 00007f0ca718e929 [ 120.155757][ T6321] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 120.155772][ T6321] RBP: 00007f0ca7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.155788][ T6321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 120.155803][ T6321] R13: 0000000000000000 R14: 00007f0ca73b6160 R15: 00007fff74de2af8 [ 120.155839][ T6321] [ 120.514094][ T6321] syz.0.77: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.521933][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.529833][ T6321] CPU: 1 UID: 0 PID: 6321 Comm: syz.0.77 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 120.529870][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.529884][ T6321] Call Trace: [ 120.529892][ T6321] [ 120.529902][ T6321] dump_stack_lvl+0x16c/0x1f0 [ 120.529954][ T6321] warn_alloc+0x248/0x3a0 [ 120.529993][ T6321] ? __pfx_warn_alloc+0x10/0x10 [ 120.530031][ T6321] ? kfree+0x2b4/0x4d0 [ 120.530069][ T6321] ? __get_vm_area_node+0x208/0x330 [ 120.530108][ T6321] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 120.530149][ T6321] ? __lock_acquire+0xb8a/0x1c90 [ 120.530180][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.530219][ T6321] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.530253][ T6321] ? __alloc_pages_noprof+0xb/0x1b0 [ 120.530287][ T6321] ? ___kmalloc_large_node+0x84/0x1e0 [ 120.530313][ T6321] ? find_held_lock+0x2b/0x80 [ 120.530344][ T6321] __kvmalloc_node_noprof+0x30a/0x620 [ 120.530378][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.530410][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.530446][ T6321] ? __do_sys_listmount+0x1c2/0xec0 [ 120.530473][ T6321] __do_sys_listmount+0x1c2/0xec0 [ 120.530510][ T6321] ? __x64_sys_futex+0x1e0/0x4c0 [ 120.530538][ T6321] ? __x64_sys_futex+0x1e9/0x4c0 [ 120.530567][ T6321] ? __pfx___do_sys_listmount+0x10/0x10 [ 120.530615][ T6321] do_syscall_64+0xcd/0x490 [ 120.530641][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.530666][ T6321] RIP: 0033:0x7f0ca718e929 [ 120.530687][ T6321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.530711][ T6321] RSP: 002b:00007f0ca7f3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 120.530735][ T6321] RAX: ffffffffffffffda RBX: 00007f0ca73b6160 RCX: 00007f0ca718e929 [ 120.530751][ T6321] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 120.530778][ T6321] RBP: 00007f0ca7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.530793][ T6321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 120.530813][ T6321] R13: 0000000000000000 R14: 00007f0ca73b6160 R15: 00007fff74de2af8 [ 120.530848][ T6321] [ 120.530948][ T6321] Mem-Info: [ 120.535370][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.556210][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.880992][ T6321] active_anon:11769 inactive_anon:0 isolated_anon:0 [ 120.880992][ T6321] active_file:13350 inactive_file:40306 isolated_file:0 [ 120.880992][ T6321] unevictable:768 dirty:486 writeback:0 [ 120.880992][ T6321] slab_reclaimable:9944 slab_unreclaimable:92863 [ 120.880992][ T6321] mapped:27515 shmem:6536 pagetables:1179 [ 120.880992][ T6321] sec_pagetables:0 bounce:0 [ 120.880992][ T6321] kernel_misc_reclaimable:0 [ 120.880992][ T6321] free:1324548 free_pcp:14608 free_cma:0 [ 121.069350][ T6321] Node 0 active_anon:49188kB inactive_anon:0kB active_file:53400kB inactive_file:161024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114644kB dirty:1964kB writeback:0kB shmem:25628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11720kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.173688][ T6321] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 121.298603][ T6321] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.376462][ T6321] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 121.422271][ T6321] Node 0 DMA32 free:1382288kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53928kB inactive_anon:0kB active_file:53400kB inactive_file:159712kB unevictable:1536kB writepending:1964kB present:3129332kB managed:2540876kB mlocked:0kB bounce:0kB free_pcp:28388kB local_pcp:13588kB free_cma:0kB [ 121.491160][ T6321] lowmem_reserve[]: 0 0 1 1 1 [ 121.594324][ T6321] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 121.657204][ T6321] lowmem_reserve[]: 0 0 0 0 0 [ 121.662518][ T6321] Node 1 Normal free:3898548kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22088kB local_pcp:12640kB free_cma:0kB [ 121.716095][ T6321] lowmem_reserve[]: 0 0 0 0 0 [ 121.787589][ T6321] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.829080][ T6321] Node 0 DMA32: 1186*4kB (UM) 1492*8kB (UM) 1011*16kB (UME) 496*32kB (ME) 444*64kB (ME) 172*128kB (UME) 98*256kB (M) 62*512kB (UM) 31*1024kB (UME) 3*2048kB (UME) 289*4096kB (UM) = 1377624kB [ 121.965851][ T6321] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 121.996918][ T6321] Node 1 Normal: 199*4kB (UME) 49*8kB (UME) 33*16kB (UME) 64*32kB (UME) 18*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898548kB [ 122.077024][ T6321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.147235][ T6321] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.209037][ T6321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.252653][ T6321] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.313361][ T6334] ======================================================= [ 122.313361][ T6334] WARNING: The mand mount option has been deprecated and [ 122.313361][ T6334] and is ignored by this kernel. Remove the mand [ 122.313361][ T6334] option from the mount to silence this warning. [ 122.313361][ T6334] ======================================================= [ 122.348553][ T6321] 64249 total pagecache pages [ 122.354099][ T6321] 31 pages in swap cache [ 122.393598][ T6321] Free swap = 124868kB [ 122.420347][ T6321] Total swap = 124996kB [ 122.424893][ T6321] 2097051 pages RAM [ 122.446324][ T6321] 0 pages HighMem/MovableOnly [ 122.498511][ T6321] 429854 pages reserved [ 122.514466][ T6321] 0 pages cma reserved [ 123.321922][ T6359] kAFS: Invalid Command on /proc/fs/afs/cells file [ 124.152011][ T6371] syz.1.86(6371): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 124.533018][ T6376] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 127.331001][ T6415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 129.193992][ T6436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 129.337295][ T6432] netlink: 342 bytes leftover after parsing attributes in process `syz.2.98'. [ 132.526568][ T6477] HfR: entered promiscuous mode [ 132.894572][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966742][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.317832][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 142.903956][ T6576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.910267][ T6576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.917483][ T6576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.923512][ T6576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.689135][ T6594] FAULT_INJECTION: forcing a failure. [ 143.689135][ T6594] name failslab, interval 1, probability 0, space 0, times 1 [ 143.716891][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.0.132 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 143.716929][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.716944][ T6594] Call Trace: [ 143.716952][ T6594] [ 143.716963][ T6594] dump_stack_lvl+0x16c/0x1f0 [ 143.717011][ T6594] should_fail_ex+0x512/0x640 [ 143.717046][ T6594] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 143.717082][ T6594] should_failslab+0xc2/0x120 [ 143.717108][ T6594] __kmalloc_cache_noprof+0x6a/0x3e0 [ 143.717144][ T6594] ? rfkill_fop_open+0x56/0x750 [ 143.717182][ T6594] ? __pfx_rfkill_fop_open+0x10/0x10 [ 143.717211][ T6594] rfkill_fop_open+0x56/0x750 [ 143.717242][ T6594] ? kobject_get_unless_zero+0x156/0x1e0 [ 143.717272][ T6594] ? __pfx_rfkill_fop_open+0x10/0x10 [ 143.717305][ T6594] misc_open+0x35d/0x420 [ 143.717338][ T6594] ? __pfx_misc_open+0x10/0x10 [ 143.717367][ T6594] chrdev_open+0x234/0x6a0 [ 143.717403][ T6594] ? __pfx_apparmor_file_open+0x10/0x10 [ 143.717436][ T6594] ? __pfx_chrdev_open+0x10/0x10 [ 143.717477][ T6594] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 143.717518][ T6594] do_dentry_open+0x741/0x1c10 [ 143.717556][ T6594] ? __pfx_chrdev_open+0x10/0x10 [ 143.717610][ T6594] vfs_open+0x82/0x3f0 [ 143.717644][ T6594] path_openat+0x1de4/0x2cb0 [ 143.717694][ T6594] ? __pfx_path_openat+0x10/0x10 [ 143.717732][ T6594] ? __lock_acquire+0xb8a/0x1c90 [ 143.717769][ T6594] do_filp_open+0x20b/0x470 [ 143.717806][ T6594] ? __pfx_do_filp_open+0x10/0x10 [ 143.717869][ T6594] ? alloc_fd+0x471/0x7d0 [ 143.717915][ T6594] do_sys_openat2+0x11b/0x1d0 [ 143.717943][ T6594] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.717969][ T6594] ? __fget_files+0x204/0x3c0 [ 143.718016][ T6594] __x64_sys_openat+0x174/0x210 [ 143.718046][ T6594] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.718091][ T6594] do_syscall_64+0xcd/0x490 [ 143.718118][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.718144][ T6594] RIP: 0033:0x7f0ca718e929 [ 143.718166][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.718192][ T6594] RSP: 002b:00007f0ca7f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.718218][ T6594] RAX: ffffffffffffffda RBX: 00007f0ca73b5fa0 RCX: 00007f0ca718e929 [ 143.718236][ T6594] RDX: 0000000000080480 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 143.718254][ T6594] RBP: 00007f0ca7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 143.718270][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.718286][ T6594] R13: 0000000000000000 R14: 00007f0ca73b5fa0 R15: 00007fff74de2af8 [ 143.718322][ T6594] [ 144.566835][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.626924][ T6596] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 144.956823][ T6601] HfR: entered promiscuous mode [ 144.967015][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.973179][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.973190][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.714861][ T6638] warning: `syz.0.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.461080][ T6659] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 151.897486][ T6647] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff88807840e000 pfn:0x78408 [ 151.970631][ T6647] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.979519][ T6647] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 152.197289][ T6647] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 152.207691][ T6647] raw: ffff88807840e000 0000000000000000 00000008ffffffff 0000000000000000 [ 152.216365][ T6647] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 152.225377][ T6647] head: ffff88807840e000 0000000000000000 00000008ffffffff 0000000000000000 [ 152.235845][ T6647] head: 00fff00000000003 ffffea0001e10201 00000000ffffffff 00000000ffffffff [ 152.245734][ T6647] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 152.255879][ T6647] page dumped because: unmovable page [ 152.266178][ T6647] page_owner tracks the page as allocated [ 152.370716][ T6647] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 83491983200, free_ts 83491650304 [ 152.614399][ T6647] post_alloc_hook+0x1c0/0x230 [ 152.710522][ T6647] get_page_from_freelist+0x1321/0x3890 [ 152.716132][ T6647] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 152.893629][ T6647] alloc_pages_mpol+0x1fb/0x550 [ 153.099168][ T6647] alloc_pages_noprof+0x131/0x390 [ 153.181053][ T6647] skb_page_frag_refill+0x186/0x5a0 [ 153.265288][ T6647] try_fill_recv+0x7e4/0x28a0 [ 153.270430][ T6647] virtnet_poll+0x1984/0x3c30 [ 153.285386][ T6647] __napi_poll.constprop.0+0xba/0x550 [ 153.298420][ T6647] net_rx_action+0xa9f/0xfe0 [ 153.303061][ T6647] handle_softirqs+0x219/0x8e0 [ 153.389640][ T6647] __irq_exit_rcu+0x109/0x170 [ 153.414909][ T6647] irq_exit_rcu+0x9/0x30 [ 153.424487][ T6647] common_interrupt+0xbf/0xe0 [ 153.462186][ T6647] asm_common_interrupt+0x26/0x40 [ 153.627594][ T6647] page last free pid 0 tgid 0 stack trace: [ 153.656791][ T6647] __free_frozen_pages+0x7fe/0x1180 [ 153.664343][ T6647] __folio_put+0x329/0x450 [ 153.676576][ T6647] skb_release_data+0x7fb/0x9c0 [ 153.701686][ T6647] napi_consume_skb+0x15a/0x220 [ 153.728879][ T6647] net_rx_action+0x47f/0xfe0 [ 153.733531][ T6647] handle_softirqs+0x219/0x8e0 [ 153.807449][ T6647] __irq_exit_rcu+0x109/0x170 [ 153.832599][ T6647] irq_exit_rcu+0x9/0x30 [ 153.859262][ T6647] common_interrupt+0xbf/0xe0 [ 153.882174][ T6647] asm_common_interrupt+0x26/0x40 [ 153.966101][ T6681] Invalid ELF header magic: != ELF [ 154.490992][ T6684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 156.574643][ T6708] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 158.183965][ T6721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 158.544294][ T6715] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 159.440471][ T6719] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.458458][ T6750] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 163.096028][ T6764] random: crng reseeded on system resumption [ 163.099385][ T6764] FAULT_INJECTION: forcing a failure. [ 163.099385][ T6764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.099436][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.2.166 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 163.099456][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.099465][ T6764] Call Trace: [ 163.099470][ T6764] [ 163.099476][ T6764] dump_stack_lvl+0x16c/0x1f0 [ 163.099504][ T6764] should_fail_ex+0x512/0x640 [ 163.099528][ T6764] should_fail_alloc_page+0xe7/0x130 [ 163.099544][ T6764] prepare_alloc_pages+0x3c2/0x610 [ 163.099562][ T6764] ? rcu_is_watching+0x12/0xc0 [ 163.099578][ T6764] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 163.099598][ T6764] ? find_held_lock+0x2b/0x80 [ 163.099614][ T6764] ? mark_held_locks+0x49/0x80 [ 163.099631][ T6764] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 163.099651][ T6764] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.099671][ T6764] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 163.099691][ T6764] ? stack_depot_save_flags+0x3e0/0xa40 [ 163.099712][ T6764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.099735][ T6764] ? kasan_save_stack+0x42/0x60 [ 163.099755][ T6764] ? kasan_save_stack+0x33/0x60 [ 163.099776][ T6764] ? do_dentry_open+0x741/0x1c10 [ 163.099795][ T6764] ? vfs_open+0x82/0x3f0 [ 163.099808][ T6764] ? path_openat+0x1de4/0x2cb0 [ 163.099826][ T6764] ? do_filp_open+0x20b/0x470 [ 163.099844][ T6764] ? do_sys_openat2+0x11b/0x1d0 [ 163.099857][ T6764] ? __x64_sys_openat+0x174/0x210 [ 163.099875][ T6764] ? do_syscall_64+0xcd/0x490 [ 163.099886][ T6764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.099901][ T6764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.099922][ T6764] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.099945][ T6764] ? policy_nodemask+0xea/0x4e0 [ 163.099969][ T6764] alloc_pages_mpol+0x1fb/0x550 [ 163.099983][ T6764] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.100002][ T6764] alloc_pages_noprof+0x131/0x390 [ 163.100015][ T6764] get_zeroed_page_noprof+0x18/0xb0 [ 163.100031][ T6764] get_image_page+0x18/0x190 [ 163.100044][ T6764] alloc_rtree_node+0x3c/0xb0 [ 163.100058][ T6764] memory_bm_create+0x519/0x810 [ 163.100080][ T6764] create_basic_memory_bitmaps+0xbd/0x320 [ 163.100098][ T6764] snapshot_open+0x235/0x2b0 [ 163.100114][ T6764] ? __pfx_snapshot_open+0x10/0x10 [ 163.100130][ T6764] misc_open+0x35d/0x420 [ 163.100148][ T6764] ? __pfx_misc_open+0x10/0x10 [ 163.100165][ T6764] chrdev_open+0x234/0x6a0 [ 163.100185][ T6764] ? __pfx_apparmor_file_open+0x10/0x10 [ 163.100205][ T6764] ? __pfx_chrdev_open+0x10/0x10 [ 163.100228][ T6764] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 163.100250][ T6764] do_dentry_open+0x741/0x1c10 [ 163.100270][ T6764] ? __pfx_chrdev_open+0x10/0x10 [ 163.100295][ T6764] vfs_open+0x82/0x3f0 [ 163.100313][ T6764] path_openat+0x1de4/0x2cb0 [ 163.100339][ T6764] ? __pfx_path_openat+0x10/0x10 [ 163.100360][ T6764] ? __lock_acquire+0xb8a/0x1c90 [ 163.100380][ T6764] do_filp_open+0x20b/0x470 [ 163.100409][ T6764] ? __pfx_do_filp_open+0x10/0x10 [ 163.100444][ T6764] ? alloc_fd+0x471/0x7d0 [ 163.100469][ T6764] do_sys_openat2+0x11b/0x1d0 [ 163.100485][ T6764] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.100508][ T6764] __x64_sys_openat+0x174/0x210 [ 163.100524][ T6764] ? __pfx___x64_sys_openat+0x10/0x10 [ 163.100547][ T6764] do_syscall_64+0xcd/0x490 [ 163.100562][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.100576][ T6764] RIP: 0033:0x7f51d598e929 [ 163.100588][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.100601][ T6764] RSP: 002b:00007f51d37d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.100615][ T6764] RAX: ffffffffffffffda RBX: 00007f51d5bb6080 RCX: 00007f51d598e929 [ 163.100625][ T6764] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 163.100634][ T6764] RBP: 00007f51d5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.100643][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.100651][ T6764] R13: 0000000000000000 R14: 00007f51d5bb6080 R15: 00007ffe1e7d6a08 [ 163.100671][ T6764] [ 163.549972][ T6768] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 165.164961][ T6767] tty tty20: ldisc open failed (-12), clearing slot 19 [ 165.733617][ T6794] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 166.659079][ T6806] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 167.205094][ T6821] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 167.595315][ T6817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 167.619325][ T6817] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 167.809179][ T6817] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 167.873080][ T6816] could not allocate digest TFM handle [ 167.898077][ T6817] page_type: f5(slab) [ 167.906810][ T6817] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 167.915519][ T6817] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 167.970904][ T6817] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 167.980228][ T6817] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 167.989661][ T6817] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 168.130102][ T6817] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 168.156698][ T6817] page dumped because: unmovable page [ 168.172400][ T6817] page_owner tracks the page as allocated [ 168.193684][ T6817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (udevd), ts 112606931189, free_ts 112549289121 [ 168.234869][ T6817] post_alloc_hook+0x1c0/0x230 [ 168.366797][ T6817] get_page_from_freelist+0x1321/0x3890 [ 168.372445][ T6817] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 168.378915][ T6817] alloc_pages_mpol+0x1fb/0x550 [ 168.459628][ T6817] new_slab+0x23b/0x330 [ 168.494708][ T6817] ___slab_alloc+0xd9c/0x1940 [ 168.535240][ T6817] __slab_alloc.constprop.0+0x56/0xb0 [ 168.596876][ T6817] __kmalloc_noprof+0x2f2/0x510 [ 168.601870][ T6817] tomoyo_realpath_from_path+0xc2/0x6e0 [ 168.608004][ T6817] tomoyo_path2_perm+0x36a/0x710 [ 168.616926][ T6817] tomoyo_path_rename+0xfc/0x1a0 [ 168.621938][ T6817] security_path_rename+0x18e/0x3c0 [ 168.655206][ T6817] do_renameat2+0x735/0xc90 [ 168.673051][ T6817] __x64_sys_rename+0x7d/0xa0 [ 168.686747][ T6817] do_syscall_64+0xcd/0x490 [ 168.694251][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.736901][ T6817] page last free pid 5821 tgid 5821 stack trace: [ 168.776824][ T6817] __free_frozen_pages+0x7fe/0x1180 [ 168.782185][ T6817] __folio_put+0x329/0x450 [ 168.809049][ T6817] skb_release_data+0x7fb/0x9c0 [ 168.872243][ T6817] __kfree_skb+0x4f/0x70 [ 168.882655][ T6817] tcp_ack+0x19b2/0x5c90 [ 168.912569][ T6817] tcp_rcv_established+0xda1/0x22e0 [ 168.922698][ T6817] tcp_v4_do_rcv+0x5ca/0xa90 [ 168.940850][ T6817] __release_sock+0x31b/0x400 [ 168.957826][ T6817] release_sock+0x5a/0x220 [ 168.976437][ T6817] tcp_sendmsg+0x38/0x50 [ 169.006713][ T6817] inet_sendmsg+0xb9/0x140 [ 169.016986][ T6817] sock_write_iter+0x4aa/0x5b0 [ 169.027092][ T6817] vfs_write+0x6c4/0x1150 [ 169.033506][ T6817] ksys_write+0x1f8/0x250 [ 169.049909][ T6817] do_syscall_64+0xcd/0x490 [ 169.065201][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.812280][ T6845] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 171.130249][ T6868] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 171.170448][ T6859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 171.974762][ T6872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 172.476438][ T6872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 syzkaller syzkaller login: [ 175.446586][ T6911] random: crng reseeded on system resumption [ 176.174055][ T6916] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         syzkaller syzkaller login: [ 257.425734][ T7651] syz.0.358 (7651) used greatest stack depth: 19896 bytes left [ 259.703538][ T7666] syz.0.361 (7666) used greatest stack depth: 19288 bytes left [ 261.172019][ T7907] [U]  [ 261.174889][ T7907] [U] [ 261.178637][ T7907] [U] [ 261.178693][ T7907] [U] [ 261.222131][ T7907] [U] [ 261.224913][ T7907] [U] [ 261.227627][ T7907] [U] [ 261.230340][ T7907] [U] [ 261.276969][ T7907] [U] [ 261.279744][ T7907] [U] [ 261.282483][ T7907] [U] [ 261.285209][ T7907] [U] [ 261.473353][ T7907] [U] [ 261.476126][ T7907] [U] [ 261.478845][ T7907] [U] [ 261.481569][ T7907] [U] [ 261.586796][ T7907] [U] [ 261.589568][ T7907] [U] [ 261.592289][ T7907] [U] [ 261.595008][ T7907] [U] [ 261.714052][ T7907] [U] [ 261.716828][ T7907] [U] [ 261.719571][ T7907] [U] [ 261.722289][ T7907] [U] [ 261.726508][ T7907] [U] [ 261.729257][ T7907] [U] [ 261.731973][ T7907] [U] [ 261.734694][ T7907] [U] [ 261.737825][ T7907] [U] [ 261.740574][ T7907] [U] [ 261.743298][ T7907] [U] [ 261.746019][ T7907] [U] [ 261.749107][ T7907] [U] [ 261.751823][ T7907] [U] [ 261.754538][ T7907] [U] [ 261.757263][ T7907] [U] [ 261.760397][ T7907] [U] [ 261.763131][ T7907] [U] [ 261.765853][ T7907] [U] [ 261.768580][ T7907] [U] [ 261.771735][ T7907] [U] [ 261.774470][ T7907] [U] [ 261.777197][ T7907] [U] [ 261.779934][ T7907] [U] [ 261.783163][ T7907] [U] [ 261.785902][ T7907] [U] [ 261.788628][ T7907] [U] [ 261.791350][ T7907] [U] [ 261.795183][ T7907] [U] [ 261.797933][ T7907] [U] [ 261.800656][ T7907] [U] [ 261.803373][ T7907] [U] [ 261.806708][ T7907] [U] [ 261.809437][ T7907] [U] [ 261.812159][ T7907] [U] [ 261.814877][ T7907] [U] [ 261.817971][ T7907] [U] [ 261.820702][ T7907] [U] [ 261.823424][ T7907] [U] [ 261.826144][ T7907] [U] [ 261.830435][ T7907] [U] [ 261.833170][ T7907] [U] [ 261.835892][ T7907] [U] [ 261.838606][ T7907] [U] [ 261.841726][ T7907] [U] [ 261.844457][ T7907] [U] [ 261.847176][ T7907] [U] [ 261.849899][ T7907] [U] [ 261.852950][ T7907] [U] [ 261.855675][ T7907] [U] [ 261.858395][ T7907] [U] [ 261.861117][ T7907] [U] [ 261.864260][ T7907] [U] [ 261.866999][ T7907] [U] [ 261.869718][ T7907] [U] [ 261.872455][ T7907] [U] [ 261.875493][ T7907] [U] [ 261.878233][ T7907] [U] [ 261.880949][ T7907] [U] [ 261.883663][ T7907] [U] [ 261.886788][ T7907] [U] [ 261.889512][ T7907] [U] [ 261.892224][ T7907] [U] [ 261.894943][ T7907] [U] [ 261.912548][ T7907] [U] [ 261.915309][ T7907] [U] [ 261.918035][ T7907] [U] [ 261.920759][ T7907] [U] [ 261.955572][ T7907] [U] [ 261.958338][ T7907] [U] [ 261.961051][ T7907] [U] [ 261.963766][ T7907] [U] [ 262.019335][ T7907] [U] [ 262.022103][ T7907] [U] [ 262.024830][ T7907] [U] [ 262.027531][ T7907] [U] [ 262.031704][ T7907] [U] [ 262.034445][ T7907] [U] [ 262.037161][ T7907] [U] [ 262.039877][ T7907] [U] [ 262.042811][ T7907] [U] [ 262.045534][ T7907] [U] [ 262.048250][ T7907] [U] [ 262.050962][ T7907] [U] [ 262.054229][ T7907] [U] [ 262.056961][ T7907] [U] [ 262.059679][ T7907] [U] [ 262.062392][ T7907] [U] [ 262.065533][ T7907] [U] [ 262.068264][ T7907] [U] [ 262.070986][ T7907] [U] [ 262.073700][ T7907] [U] [ 262.076640][ T7907] [U] [ 262.079367][ T7907] [U] [ 262.082060][ T7907] [U] [ 262.084738][ T7907] [U] [ 262.482197][ T7907] [U] [ 262.484974][ T7907] [U] [ 262.487700][ T7907] [U] [ 262.490421][ T7907] [U] [ 262.613423][ T7907] [U] [ 262.616185][ T7907] [U] [ 262.618913][ T7907] [U] [ 262.621645][ T7907] [U] [ 262.701645][ T7907] [U] [ 262.704403][ T7907] [U] [ 262.707118][ T7907] [U] [ 262.767845][ T7900] [U] [ 262.770723][ T7907] [U] [ 263.381678][ T7934] device-mapper: ioctl: Invalid ioctl structure: name , dev 4 [ 263.459213][ T30] audit: type=1800 audit(6044937195.300:2): pid=7934 uid=13 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="dmabuf" dev="dmabuf" ino=2 res=0 errno=0 [ 264.537267][ T7943] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 264.822020][ T7940] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 265.642633][ T7958] netlink: 334 bytes leftover after parsing attributes in process `syz.3.421'. [ 266.248227][ T7969] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 266.387006][ T7965] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 267.319734][ T7984] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 268.364762][ T7773] syz.0.381 (7773) used greatest stack depth: 18680 bytes left [ 268.430950][ T8002] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 269.848691][ T8043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 270.971698][ T8058] netlink: 342 bytes leftover after parsing attributes in process `syz.0.435'. [ 271.061057][ T8058] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 271.087055][ T8058] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 271.133112][ T8058] netlink: 'syz.0.435': attribute type 7 has an invalid length. [ 271.142850][ T8064] Process accounting resumed [ 271.203322][ T8058] netlink: 214 bytes leftover after parsing attributes in process `syz.0.435'. [ 272.346906][ T8088] program syz.0.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.819385][ T8099] ================================================================== [ 272.819402][ T8099] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 272.819441][ T8099] Write of size 8 at addr ffffc90003a09000 by task syz.2.441/8099 [ 272.819463][ T8099] [ 272.819479][ T8099] CPU: 1 UID: 0 PID: 8099 Comm: syz.2.441 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 272.819511][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.819531][ T8099] Call Trace: [ 272.819538][ T8099] [ 272.819551][ T8099] dump_stack_lvl+0x116/0x1f0 [ 272.819591][ T8099] print_report+0xcd/0x680 [ 272.819626][ T8099] ? __virt_addr_valid+0x81/0x610 [ 272.819656][ T8099] ? sys_fillrect+0x15d4/0x17b0 [ 272.819683][ T8099] kasan_report+0xe0/0x110 [ 272.819706][ T8099] ? sys_fillrect+0x15d4/0x17b0 [ 272.819738][ T8099] sys_fillrect+0x15d4/0x17b0 [ 272.819771][ T8099] ? __pfx_sys_fillrect+0x10/0x10 [ 272.819810][ T8099] ? __pfx_bit_putcs+0x10/0x10 [ 272.819831][ T8099] ? bit_cursor+0xeca/0x17e0 [ 272.819856][ T8099] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 272.819889][ T8099] bit_clear+0x17a/0x220 [ 272.819912][ T8099] ? __pfx_bit_clear+0x10/0x10 [ 272.819934][ T8099] ? __pfx___might_resched+0x10/0x10 [ 272.819959][ T8099] ? fb_get_color_depth+0x120/0x250 [ 272.819994][ T8099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.820031][ T8099] ? __pfx_bit_clear+0x10/0x10 [ 272.820052][ T8099] __fbcon_clear+0x600/0x780 [ 272.820090][ T8099] fbcon_scroll+0x48b/0x690 [ 272.820126][ T8099] con_scroll+0x45f/0x690 [ 272.820163][ T8099] do_con_write+0x5560/0x8280 [ 272.820196][ T8099] ? __pfx_do_con_write+0x10/0x10 [ 272.820226][ T8099] con_write+0x23/0xb0 [ 272.820247][ T8099] n_tty_write+0x40f/0x1160 [ 272.820281][ T8099] ? __pfx_n_tty_write+0x10/0x10 [ 272.820307][ T8099] ? rcu_is_watching+0x12/0xc0 [ 272.820331][ T8099] ? __pfx_woken_wake_function+0x10/0x10 [ 272.820369][ T8099] ? kfree+0x24f/0x4d0 [ 272.820406][ T8099] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 272.820535][ T8099] ? __pfx_n_tty_write+0x10/0x10 [ 272.820568][ T8099] file_tty_write.constprop.0+0x504/0x9b0 [ 272.820622][ T8099] redirected_tty_write+0xd4/0x150 [ 272.820660][ T8099] vfs_write+0x6c4/0x1150 [ 272.820694][ T8099] ? __pfx_redirected_tty_write+0x10/0x10 [ 272.820732][ T8099] ? __pfx_vfs_write+0x10/0x10 [ 272.820763][ T8099] ? find_held_lock+0x2b/0x80 [ 272.820797][ T8099] ksys_write+0x12a/0x250 [ 272.820829][ T8099] ? __pfx_ksys_write+0x10/0x10 [ 272.820866][ T8099] do_syscall_64+0xcd/0x490 [ 272.820891][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.820917][ T8099] RIP: 0033:0x7f51d598e929 [ 272.820938][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.820962][ T8099] RSP: 002b:00007f51d3391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.820986][ T8099] RAX: ffffffffffffffda RBX: 00007f51d5bb6240 RCX: 00007f51d598e929 [ 272.821004][ T8099] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 272.821020][ T8099] RBP: 00007f51d5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.821036][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.821050][ T8099] R13: 0000000000000001 R14: 00007f51d5bb6240 R15: 00007ffe1e7d6a08 [ 272.821075][ T8099] [ 272.821084][ T8099] [ 272.821097][ T8099] The buggy address ffffc90003a09000 belongs to a vmalloc virtual mapping [ 272.821111][ T8099] Memory state around the buggy address: [ 272.821124][ T8099] ffffc90003a08f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 272.821142][ T8099] ffffc90003a08f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 272.821160][ T8099] >ffffc90003a09000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 272.821173][ T8099] ^ [ 272.821186][ T8099] ffffc90003a09080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 272.821203][ T8099] ffffc90003a09100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 272.821216][ T8099] ================================================================== [ 272.821282][ T8099] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 272.821300][ T8099] CPU: 1 UID: 0 PID: 8099 Comm: syz.2.441 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 272.821333][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.821348][ T8099] Call Trace: [ 272.821357][ T8099] [ 272.821366][ T8099] dump_stack_lvl+0x3d/0x1f0 [ 272.821403][ T8099] panic+0x71c/0x800 [ 272.821436][ T8099] ? __pfx_panic+0x10/0x10 [ 272.821469][ T8099] ? preempt_schedule_thunk+0x16/0x30 [ 272.821500][ T8099] ? sys_fillrect+0x15d4/0x17b0 [ 272.821528][ T8099] ? preempt_schedule_common+0x44/0xc0 [ 272.821568][ T8099] ? sys_fillrect+0x15d4/0x17b0 [ 272.821607][ T8099] check_panic_on_warn+0xab/0xb0 [ 272.821646][ T8099] end_report+0x107/0x170 [ 272.821686][ T8099] kasan_report+0xee/0x110 [ 272.821711][ T8099] ? sys_fillrect+0x15d4/0x17b0 [ 272.821746][ T8099] sys_fillrect+0x15d4/0x17b0 [ 272.821781][ T8099] ? __pfx_sys_fillrect+0x10/0x10 [ 272.821813][ T8099] ? __pfx_bit_putcs+0x10/0x10 [ 272.821835][ T8099] ? bit_cursor+0xeca/0x17e0 [ 272.821860][ T8099] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 272.821896][ T8099] bit_clear+0x17a/0x220 [ 272.821920][ T8099] ? __pfx_bit_clear+0x10/0x10 [ 272.821944][ T8099] ? __pfx___might_resched+0x10/0x10 [ 272.821970][ T8099] ? fb_get_color_depth+0x120/0x250 [ 272.822006][ T8099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.822047][ T8099] ? __pfx_bit_clear+0x10/0x10 [ 272.822070][ T8099] __fbcon_clear+0x600/0x780 [ 272.822111][ T8099] fbcon_scroll+0x48b/0x690 [ 272.822147][ T8099] con_scroll+0x45f/0x690 [ 272.822186][ T8099] do_con_write+0x5560/0x8280 [ 272.822221][ T8099] ? __pfx_do_con_write+0x10/0x10 [ 272.822256][ T8099] con_write+0x23/0xb0 [ 272.822280][ T8099] n_tty_write+0x40f/0x1160 [ 272.822317][ T8099] ? __pfx_n_tty_write+0x10/0x10 [ 272.822345][ T8099] ? rcu_is_watching+0x12/0xc0 [ 272.822372][ T8099] ? __pfx_woken_wake_function+0x10/0x10 [ 272.822412][ T8099] ? kfree+0x24f/0x4d0 [ 272.822442][ T8099] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 272.822483][ T8099] ? __pfx_n_tty_write+0x10/0x10 [ 272.822513][ T8099] file_tty_write.constprop.0+0x504/0x9b0 [ 272.822557][ T8099] redirected_tty_write+0xd4/0x150 [ 272.822603][ T8099] vfs_write+0x6c4/0x1150 [ 272.822640][ T8099] ? __pfx_redirected_tty_write+0x10/0x10 [ 272.822684][ T8099] ? __pfx_vfs_write+0x10/0x10 [ 272.822718][ T8099] ? find_held_lock+0x2b/0x80 [ 272.822754][ T8099] ksys_write+0x12a/0x250 [ 272.822789][ T8099] ? __pfx_ksys_write+0x10/0x10 [ 272.822829][ T8099] do_syscall_64+0xcd/0x490 [ 272.822854][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.822882][ T8099] RIP: 0033:0x7f51d598e929 [ 272.822902][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.822928][ T8099] RSP: 002b:00007f51d3391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 272.822955][ T8099] RAX: ffffffffffffffda RBX: 00007f51d5bb6240 RCX: 00007f51d598e929 [ 272.822973][ T8099] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 272.822991][ T8099] RBP: 00007f51d5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.823009][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.823025][ T8099] R13: 0000000000000001 R14: 00007f51d5bb6240 R15: 00007ffe1e7d6a08 [ 272.823052][ T8099] [ 272.823317][ T8099] Kernel Offset: disabled