last executing test programs: 2m30.63785202s ago: executing program 3 (id=3140): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2m29.78206615s ago: executing program 3 (id=3142): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fstatfs$auto(0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r2, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 2m28.788948359s ago: executing program 3 (id=3147): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 2m27.906101518s ago: executing program 3 (id=3150): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) socket(0x15, 0x5, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 2m26.908509972s ago: executing program 3 (id=3154): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x2, 0x2) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4a000, 0x0) ioctl$auto_BLKRASET(r3, 0x1262, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x2800c840) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef30714"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1be0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080040}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) 2m25.871385478s ago: executing program 3 (id=3157): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto(r0, 0x0, 0x3ff) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x4c8202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x40000000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m10.678405175s ago: executing program 32 (id=3157): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto(r0, 0x0, 0x3ff) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x4c8202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x40000000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1m27.712439797s ago: executing program 2 (id=3379): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000001380)="4a02000000", 0x5) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0x275e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) 1m26.076344447s ago: executing program 2 (id=3387): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 1m24.663024614s ago: executing program 2 (id=3393): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1m23.313186671s ago: executing program 2 (id=3399): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) getsockopt$auto(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f00000001c0)=0x7140) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x4ce1) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x40000000029, 0x1, 0xfffffffffffffffe, 0x0) getdents64$auto(0x2, 0xfffffffffffffffe, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 1m22.098880458s ago: executing program 2 (id=3404): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 1m21.313162276s ago: executing program 2 (id=3407): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 1m6.112582797s ago: executing program 33 (id=3407): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 33.409023449s ago: executing program 5 (id=3602): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 32.536496205s ago: executing program 5 (id=3605): mmap$auto(0x3, 0x40000e, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0x0, 0x0) writev$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x100000000df, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8002) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c234000, 0x1, 0x9) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000040), 0x400d01, 0x0) getitimer$auto(0x7f, &(0x7f0000000080)={{0x9, 0x8}, {0x0, 0xfffffffffffffff9}}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80f02, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) msgsnd$auto(0x0, &(0x7f0000000600)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 32.214540302s ago: executing program 5 (id=3608): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 31.161436348s ago: executing program 5 (id=3613): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 30.178112785s ago: executing program 5 (id=3618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "96e300"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) lsm_list_modules$auto(&(0x7f0000000100)=0x101, &(0x7f0000000140)=0x4fc7, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) pread64$auto(r4, 0x0, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 29.790609382s ago: executing program 5 (id=3620): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0xfa) waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt2\x00', 0x600000, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x4a000, 0x0) ioctl$auto_BLKRASET(r1, 0x1262, 0x0) socket(0x2, 0x1, 0x0) r2 = socketpair$auto(0x4200017, 0x5, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) fsmount$auto(r2, 0x2, 0x3) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 14.697880737s ago: executing program 34 (id=3620): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0xfa) waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt2\x00', 0x600000, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x4a000, 0x0) ioctl$auto_BLKRASET(r1, 0x1262, 0x0) socket(0x2, 0x1, 0x0) r2 = socketpair$auto(0x4200017, 0x5, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) fsmount$auto(r2, 0x2, 0x3) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 6.071532635s ago: executing program 4 (id=3722): ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(r2, r0, &(0x7f0000000080)=0x8, 0x3508) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r3, 0x0, 0x41000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x18, 0x4, 0x0) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20040, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x222c8518}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="e70229055399a2"], 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) 5.356983069s ago: executing program 6 (id=3725): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e01060002000100000008001800030000000800190006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 5.344351248s ago: executing program 1 (id=3726): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x973}]}, 0x50}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 4.651891726s ago: executing program 4 (id=3727): writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c05, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 4.308311659s ago: executing program 6 (id=3729): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, 0x0, 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 4.033153346s ago: executing program 0 (id=3730): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 4.027951144s ago: executing program 1 (id=3731): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, 0x0, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 4.005300084s ago: executing program 6 (id=3732): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 3.420944569s ago: executing program 4 (id=3733): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 3.119088862s ago: executing program 4 (id=3734): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, 0x0, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2.982071882s ago: executing program 6 (id=3735): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2.909746358s ago: executing program 0 (id=3736): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x3, 0x38, 0x0, &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "96e300"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) lsm_list_modules$auto(&(0x7f0000000100)=0x101, &(0x7f0000000140)=0x4fc7, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) pread64$auto(r4, 0x0, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 2.838158929s ago: executing program 1 (id=3737): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 2.717858159s ago: executing program 0 (id=3738): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 2.538571802s ago: executing program 6 (id=3739): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 2.13671964s ago: executing program 1 (id=3740): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 2.107701862s ago: executing program 4 (id=3741): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 1.537051565s ago: executing program 6 (id=3742): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/49, 0x31) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f00000001c0)={&(0x7f0000000100)="6044bb67f5459d8e4e1e504b25452ef3e83b0b52c8f49e50044485180830a1ed51282827b917476d5ad380335434bdb1c564508879b5e5d57f2e26b641f809355a93e70dbfaf2f0b63d20cbc16247dc38b5b9a471f4ae0e2e7ba7d1b81eb247c8f12d9dc892059ba5533480195d2cf6ae62b01db81c6a987ae4049f3c8a3792bfa2ffd7fe02e4488d3f8cb44073a7975173dbeb67b1bbce6f6dbdd6b06f4236720ac56b65894942276743116", 0x4}, 0x3) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "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"}) ioctl$auto(0xffffffffffffffff, 0x1403, r1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) 1.5364263s ago: executing program 0 (id=3743): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.061577517s ago: executing program 1 (id=3744): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 992.292285ms ago: executing program 4 (id=3745): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 925.983319ms ago: executing program 0 (id=3746): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x3, 0x38, &(0x7f00000003c0)=',{--$^{\x00', 0x0) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "96e300"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) lsm_list_modules$auto(&(0x7f0000000100)=0x101, &(0x7f0000000140)=0x4fc7, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) pread64$auto(r4, 0x0, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 619.052921ms ago: executing program 0 (id=3747): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 0s ago: executing program 1 (id=3748): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 00 R11: 0000000000000246 R12: 0000000000000000 [ 510.708029][T12957] R13: 0000000000000000 R14: 00007f2ee55b6080 R15: 00007fff57c3f258 [ 510.708065][T12957] [ 510.973443][T12936] kexec: Could not allocate control_code_buffer [ 511.323405][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.330752][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.571369][T13000] FAULT_INJECTION: forcing a failure. [ 512.571369][T13000] name failslab, interval 1, probability 0, space 0, times 0 [ 512.584997][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.3.1791 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 512.585034][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.585052][T13000] Call Trace: [ 512.585061][T13000] [ 512.585071][T13000] dump_stack_lvl+0x16c/0x1f0 [ 512.585113][T13000] should_fail_ex+0x512/0x640 [ 512.585146][T13000] ? fs_reclaim_acquire+0xae/0x150 [ 512.585178][T13000] should_failslab+0xc2/0x120 [ 512.585204][T13000] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 512.585242][T13000] ? security_inode_alloc+0x3b/0x2b0 [ 512.585275][T13000] security_inode_alloc+0x3b/0x2b0 [ 512.585303][T13000] inode_init_always_gfp+0xce4/0x1030 [ 512.585343][T13000] alloc_inode+0x86/0x240 [ 512.585376][T13000] iget_locked+0x2e4/0x830 [ 512.585407][T13000] ? __pfx_iget_locked+0x10/0x10 [ 512.585438][T13000] ? find_held_lock+0x2b/0x80 [ 512.585464][T13000] ? kernfs_root+0xee/0x2a0 [ 512.585504][T13000] kernfs_get_inode+0x48/0x460 [ 512.585538][T13000] kernfs_iop_lookup+0x1a7/0x2d0 [ 512.585573][T13000] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 512.585607][T13000] lookup_open.isra.0+0x4d7/0x1580 [ 512.585647][T13000] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 512.585699][T13000] ? mnt_get_write_access+0x20c/0x300 [ 512.585733][T13000] path_openat+0x893/0x2cb0 [ 512.585779][T13000] ? __pfx_path_openat+0x10/0x10 [ 512.585816][T13000] ? __lock_acquire+0xb8a/0x1c90 [ 512.585852][T13000] do_filp_open+0x20b/0x470 [ 512.585887][T13000] ? __pfx_do_filp_open+0x10/0x10 [ 512.585955][T13000] ? alloc_fd+0x471/0x7d0 [ 512.585998][T13000] do_sys_openat2+0x11b/0x1d0 [ 512.586024][T13000] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.586065][T13000] __x64_sys_openat+0x174/0x210 [ 512.586093][T13000] ? __pfx___x64_sys_openat+0x10/0x10 [ 512.586135][T13000] do_syscall_64+0xcd/0x490 [ 512.586174][T13000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.586200][T13000] RIP: 0033:0x7f2ee538e929 [ 512.586221][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.586247][T13000] RSP: 002b:00007f2ee6251038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.586272][T13000] RAX: ffffffffffffffda RBX: 00007f2ee55b5fa0 RCX: 00007f2ee538e929 [ 512.586289][T13000] RDX: 000000000000a001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 512.586306][T13000] RBP: 00007f2ee5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 512.586323][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.586339][T13000] R13: 0000000000000000 R14: 00007f2ee55b5fa0 R15: 00007fff57c3f258 [ 512.586391][T13000] [ 513.255506][T13005] FAULT_INJECTION: forcing a failure. [ 513.255506][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 513.316882][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.0.1794 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 513.316921][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.316940][T13005] Call Trace: [ 513.316949][T13005] [ 513.316960][T13005] dump_stack_lvl+0x16c/0x1f0 [ 513.317009][T13005] should_fail_ex+0x512/0x640 [ 513.317045][T13005] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 513.317081][T13005] should_failslab+0xc2/0x120 [ 513.317106][T13005] __kmalloc_cache_noprof+0x6a/0x3e0 [ 513.317139][T13005] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 513.317175][T13005] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 513.317204][T13005] ? preempt_count_sub+0x95/0x160 [ 513.317235][T13005] ? trace_contention_end+0xdd/0x130 [ 513.317268][T13005] ? __mutex_lock+0x1ca/0xb90 [ 513.317301][T13005] ? rcu_is_watching+0x12/0xc0 [ 513.317329][T13005] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 513.317360][T13005] ? __pfx___mutex_lock+0x10/0x10 [ 513.317403][T13005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 513.317448][T13005] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 513.317483][T13005] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 513.317514][T13005] ? hook_file_ioctl_common+0x145/0x410 [ 513.317541][T13005] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 513.317571][T13005] ? __fget_files+0x20e/0x3c0 [ 513.317606][T13005] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 513.317636][T13005] __x64_sys_ioctl+0x18b/0x210 [ 513.317668][T13005] do_syscall_64+0xcd/0x490 [ 513.317707][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.317731][T13005] RIP: 0033:0x7f77a7d8e929 [ 513.317752][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.317776][T13005] RSP: 002b:00007f77a8c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.317801][T13005] RAX: ffffffffffffffda RBX: 00007f77a7fb5fa0 RCX: 00007f77a7d8e929 [ 513.317819][T13005] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 513.317835][T13005] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.317850][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.317865][T13005] R13: 0000000000000000 R14: 00007f77a7fb5fa0 R15: 00007fff390d59e8 [ 513.317901][T13005] [ 513.628899][ T30] audit: type=1804 audit(4294967328.481:25): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1793" name="/newroot/262/file0" dev="tmpfs" ino=1404 res=1 errno=0 [ 513.650369][ T30] audit: type=1800 audit(4294967328.481:26): pid=13009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1793" name="file0" dev="tmpfs" ino=1404 res=0 errno=0 [ 516.288767][T13051] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 517.758497][T13076] FAULT_INJECTION: forcing a failure. [ 517.758497][T13076] name failslab, interval 1, probability 0, space 0, times 0 [ 517.805361][T13076] CPU: 1 UID: 0 PID: 13076 Comm: syz.2.1807 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 517.805400][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.805415][T13076] Call Trace: [ 517.805424][T13076] [ 517.805434][T13076] dump_stack_lvl+0x16c/0x1f0 [ 517.805475][T13076] should_fail_ex+0x512/0x640 [ 517.805508][T13076] ? __kmalloc_noprof+0xbf/0x510 [ 517.805547][T13076] ? snd_pcm_plugin_build+0x64/0x650 [ 517.805576][T13076] should_failslab+0xc2/0x120 [ 517.805606][T13076] __kmalloc_noprof+0xd2/0x510 [ 517.805649][T13076] ? __mutex_unlock_slowpath+0x91/0x6a0 [ 517.805694][T13076] snd_pcm_plugin_build+0x64/0x650 [ 517.805728][T13076] snd_pcm_plugin_build_rate+0x27c/0x760 [ 517.805765][T13076] ? __pfx_snd_pcm_plugin_build_rate+0x10/0x10 [ 517.805804][T13076] ? snd_pcm_hw_params+0xcd/0x1b40 [ 517.805838][T13076] snd_pcm_plug_format_plugins+0x866/0x1430 [ 517.805873][T13076] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 517.805909][T13076] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 517.805950][T13076] snd_pcm_oss_change_params_locked+0x2dec/0x3a30 [ 517.805995][T13076] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 517.806048][T13076] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 517.806082][T13076] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 517.806113][T13076] ? hook_file_ioctl_common+0x145/0x410 [ 517.806141][T13076] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 517.806173][T13076] ? __fget_files+0x20e/0x3c0 [ 517.806208][T13076] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 517.806239][T13076] __x64_sys_ioctl+0x18b/0x210 [ 517.806271][T13076] do_syscall_64+0xcd/0x490 [ 517.806309][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.806335][T13076] RIP: 0033:0x7f669818e929 [ 517.806356][T13076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.806381][T13076] RSP: 002b:00007f6699074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.806406][T13076] RAX: ffffffffffffffda RBX: 00007f66983b6080 RCX: 00007f669818e929 [ 517.806423][T13076] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 517.806438][T13076] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 517.806453][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.806468][T13076] R13: 0000000000000000 R14: 00007f66983b6080 R15: 00007ffe9d21ecf8 [ 517.806502][T13076] [ 518.057265][T13075] Invalid ELF header magic: != ELF [ 518.588987][T13089] tipc: Started in network mode [ 518.594019][T13089] tipc: Node identity ee00, cluster identity 4711 [ 518.610573][T13089] tipc: Node number set to 60928 [ 518.703401][T13089] Process accounting resumed [ 518.856917][T13098] vivid-007: ================= START STATUS ================= [ 518.872810][T13098] vivid-007: Generate PTS: true [ 518.887849][T13098] vivid-007: Generate SCR: true [ 518.897984][T13098] tpg source WxH: 320x240 (Y'CbCr) [ 518.908235][T13098] tpg field: 1 [ 518.911654][T13098] tpg crop: (0,0)/320x240 [ 518.935985][T13098] tpg compose: (0,0)/320x240 [ 518.940753][T13098] tpg colorspace: 8 [ 518.947083][T13098] tpg transfer function: 0/0 [ 518.957198][T13098] tpg Y'CbCr encoding: 0/0 [ 518.961662][T13098] tpg quantization: 0/0 [ 518.979617][T13098] tpg RGB range: 0/2 [ 518.983574][T13098] vivid-007: ================== END STATUS ================== [ 519.874779][ T30] audit: type=1804 audit(4294967334.981:27): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1815" name="/newroot/440/file0" dev="tmpfs" ino=2355 res=1 errno=0 [ 519.929921][ T30] audit: type=1800 audit(4294967334.981:28): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1815" name="file0" dev="tmpfs" ino=2355 res=0 errno=0 [ 521.196368][T13137] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 952 with max blocks 27 with error 117 [ 521.210351][T13137] EXT4-fs (sda1): This should not happen!! Data will be lost [ 521.210351][T13137] [ 521.381066][T13145] FAULT_INJECTION: forcing a failure. [ 521.381066][T13145] name failslab, interval 1, probability 0, space 0, times 0 [ 521.448972][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.0.1828 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 521.448996][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.449005][T13145] Call Trace: [ 521.449011][T13145] [ 521.449017][T13145] dump_stack_lvl+0x16c/0x1f0 [ 521.449043][T13145] should_fail_ex+0x512/0x640 [ 521.449064][T13145] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 521.449086][T13145] should_failslab+0xc2/0x120 [ 521.449100][T13145] __kmalloc_cache_noprof+0x6a/0x3e0 [ 521.449119][T13145] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 521.449139][T13145] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 521.449156][T13145] ? preempt_count_sub+0x95/0x160 [ 521.449173][T13145] ? trace_contention_end+0xdd/0x130 [ 521.449200][T13145] ? __mutex_lock+0x1ca/0xb90 [ 521.449223][T13145] ? rcu_is_watching+0x12/0xc0 [ 521.449240][T13145] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 521.449258][T13145] ? __pfx___mutex_lock+0x10/0x10 [ 521.449285][T13145] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 521.449312][T13145] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 521.449332][T13145] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 521.449349][T13145] ? hook_file_ioctl_common+0x145/0x410 [ 521.449365][T13145] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 521.449382][T13145] ? __fget_files+0x20e/0x3c0 [ 521.449404][T13145] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 521.449421][T13145] __x64_sys_ioctl+0x18b/0x210 [ 521.449439][T13145] do_syscall_64+0xcd/0x490 [ 521.449461][T13145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.449476][T13145] RIP: 0033:0x7f77a7d8e929 [ 521.449488][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.449502][T13145] RSP: 002b:00007f77a8c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.449517][T13145] RAX: ffffffffffffffda RBX: 00007f77a7fb6080 RCX: 00007f77a7d8e929 [ 521.449527][T13145] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 521.449535][T13145] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 521.449543][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.449551][T13145] R13: 0000000000000000 R14: 00007f77a7fb6080 R15: 00007fff390d59e8 [ 521.449570][T13145] [ 523.905842][T13178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1829'. [ 524.804438][T13198] netlink: set zone limit has 8 unknown bytes [ 527.270843][T13228] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 527.325204][T13228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 527.438812][T13228] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 528.671137][T13270] bond0: option all_slaves_active: invalid value () [ 529.428901][T13288] tipc: Started in network mode [ 529.447151][T13288] tipc: Node identity ee00, cluster identity 4711 [ 529.475612][T13288] tipc: Node number set to 60928 [ 529.583406][T13282] Process accounting resumed [ 532.125333][T13317] FAULT_INJECTION: forcing a failure. [ 532.125333][T13317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.154619][T13317] CPU: 1 UID: 0 PID: 13317 Comm: syz.2.1858 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 532.154662][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.154679][T13317] Call Trace: [ 532.154688][T13317] [ 532.154698][T13317] dump_stack_lvl+0x16c/0x1f0 [ 532.154742][T13317] should_fail_ex+0x512/0x640 [ 532.154782][T13317] should_fail_alloc_page+0xe7/0x130 [ 532.154811][T13317] prepare_alloc_pages+0x3c2/0x610 [ 532.154848][T13317] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 532.154890][T13317] ? __pfx_stack_trace_save+0x10/0x10 [ 532.154918][T13317] ? stack_depot_save_flags+0x28/0xa40 [ 532.154956][T13317] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 532.154995][T13317] ? kasan_save_stack+0x42/0x60 [ 532.155027][T13317] ? kasan_save_stack+0x33/0x60 [ 532.155060][T13317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.155095][T13317] ? __pmd_alloc+0xbf/0x930 [ 532.155130][T13317] ? dup_mmap+0xe88/0x21d0 [ 532.155159][T13317] ? kernel_clone+0xfc/0x960 [ 532.155187][T13317] ? __do_sys_clone+0xce/0x120 [ 532.155215][T13317] ? do_syscall_64+0xcd/0x490 [ 532.155248][T13317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.155294][T13317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.155333][T13317] ? policy_nodemask+0xea/0x4e0 [ 532.155359][T13317] alloc_pages_mpol+0x1fb/0x550 [ 532.155386][T13317] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 532.155407][T13317] ? css_rstat_updated+0x9d/0xd30 [ 532.155444][T13317] alloc_pages_noprof+0x131/0x390 [ 532.155471][T13317] pte_alloc_one+0x1c/0x3a0 [ 532.155508][T13317] __pte_alloc+0x6d/0x3c0 [ 532.155532][T13317] ? __pfx___pte_alloc+0x10/0x10 [ 532.155557][T13317] ? _raw_spin_unlock+0x28/0x50 [ 532.155588][T13317] ? __pmd_alloc+0x3fb/0x930 [ 532.155619][T13317] copy_page_range+0x1aed/0x5740 [ 532.155664][T13317] ? __lock_acquire+0x622/0x1c90 [ 532.155725][T13317] ? __pfx_copy_page_range+0x10/0x10 [ 532.155758][T13317] ? mas_store+0x7a9/0x1160 [ 532.155784][T13317] ? find_held_lock+0x2b/0x80 [ 532.155811][T13317] ? __vma_enter_locked+0x163/0x3f0 [ 532.155863][T13317] dup_mmap+0xe88/0x21d0 [ 532.155906][T13317] ? __pfx_dup_mmap+0x10/0x10 [ 532.155961][T13317] copy_process+0x4081/0x76a0 [ 532.155991][T13317] ? __pfx___futex_wait+0x10/0x10 [ 532.156032][T13317] ? __pfx_copy_process+0x10/0x10 [ 532.156063][T13317] kernel_clone+0xfc/0x960 [ 532.156082][T13317] ? __pfx_kernel_clone+0x10/0x10 [ 532.156121][T13317] __do_sys_clone+0xce/0x120 [ 532.156139][T13317] ? __pfx___do_sys_clone+0x10/0x10 [ 532.156156][T13317] ? ksys_unshare+0x687/0xa40 [ 532.156182][T13317] ? xfd_validate_state+0x61/0x180 [ 532.156208][T13317] do_syscall_64+0xcd/0x490 [ 532.156231][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.156245][T13317] RIP: 0033:0x7f669818e929 [ 532.156258][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.156272][T13317] RSP: 002b:00007f6699094fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 532.156286][T13317] RAX: ffffffffffffffda RBX: 00007f66983b5fa0 RCX: 00007f669818e929 [ 532.156295][T13317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 532.156304][T13317] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 532.156312][T13317] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.156320][T13317] R13: 0000000000000000 R14: 00007f66983b5fa0 R15: 00007ffe9d21ecf8 [ 532.156339][T13317] [ 533.260428][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 533.331375][T13334] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1864'. [ 533.618664][T13346] Invalid ELF header magic: != ELF [ 533.801538][ T1004] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1411 with max blocks 2 with error 117 [ 533.833925][ T1004] EXT4-fs (sda1): This should not happen!! Data will be lost [ 533.833925][ T1004] [ 534.756546][ T30] audit: type=1804 audit(4294967349.871:29): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1871" name="file0" dev="tmpfs" ino=2803 res=1 errno=0 [ 535.637001][ T30] audit: type=1800 audit(4294967350.731:30): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1873" name="dbroot" dev="configfs" ino=39331 res=0 errno=0 [ 535.925094][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 536.802789][T13400] syz.0.1880 (13400): /proc/13399/oom_adj is deprecated, please use /proc/13399/oom_score_adj instead. [ 537.016943][T13400] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 537.084948][T13400] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1880'. [ 537.492849][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 537.520994][T13411] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 537.542278][T13411] netlink: 'syz.2.1884': attribute type 6 has an invalid length. [ 537.851454][T13420] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1404 with max blocks 7 with error 117 [ 538.075585][T13420] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.075585][T13420] [ 539.171896][T13430] Invalid ELF header magic: != ELF [ 540.027652][T13434] Invalid ELF header magic: != ELF                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      syzkaller syzkaller login: [ 609.558378][T14486] Invalid ELF header magic: != ELF [ 610.346558][T14503] Process accounting paused [ 613.056847][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 614.969334][T14563] Invalid ELF header magic: != ELF [ 615.805289][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 615.837388][T14582] geneve1: entered promiscuous mode [ 615.842998][T14582] geneve1: entered allmulticast mode [ 615.855673][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 616.918618][T14595] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1409 with max blocks 4 with error 117 [ 617.031273][T14595] EXT4-fs (sda1): This should not happen!! Data will be lost [ 617.031273][T14595] [ 618.131975][T14617] Invalid ELF header magic: != ELF [ 620.510702][ T3536] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1402 with max blocks 7 with error 117 [ 620.611329][ T3536] EXT4-fs (sda1): This should not happen!! Data will be lost [ 620.611329][ T3536] [ 620.713560][T14653] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2143'. [ 621.173624][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 623.001986][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 623.029418][T14693] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2150'. [ 624.437979][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.444523][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.337554][ T30] audit: type=1800 audit(4294967450.424:31): pid=14749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2161" name="dbroot" dev="configfs" ino=50138 res=0 errno=0 [ 627.557688][T14242] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 633.982934][ T5847] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 633.990458][ T5847] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 635.440258][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2182'. [ 638.003066][T14890] ima: policy update failed [ 638.008443][ T30] audit: type=1802 audit(4294967461.114:32): pid=14890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2189" res=0 errno=0 [ 638.055493][T14890] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2189'. [ 639.323199][T14242] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 639.330717][T14242] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 641.251990][T14926] Process accounting resumed [ 650.298097][T15078] FAULT_INJECTION: forcing a failure. [ 650.298097][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 650.346774][T15078] CPU: 0 UID: 0 PID: 15078 Comm: syz.2.2227 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 650.346811][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.346825][T15078] Call Trace: [ 650.346833][T15078] [ 650.346843][T15078] dump_stack_lvl+0x16c/0x1f0 [ 650.346883][T15078] should_fail_ex+0x512/0x640 [ 650.346916][T15078] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 650.346950][T15078] should_failslab+0xc2/0x120 [ 650.346972][T15078] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 650.347004][T15078] ? __kernfs_new_node+0xd2/0x8e0 [ 650.347039][T15078] __kernfs_new_node+0xd2/0x8e0 [ 650.347070][T15078] ? __pfx___kernfs_new_node+0x10/0x10 [ 650.347108][T15078] ? find_held_lock+0x2b/0x80 [ 650.347133][T15078] ? kernfs_root+0xee/0x2a0 [ 650.347172][T15078] kernfs_new_node+0x13c/0x1e0 [ 650.347209][T15078] ? net_ns_get_ownership+0xf8/0x1b0 [ 650.347250][T15078] kernfs_create_dir_ns+0x4c/0x1a0 [ 650.347291][T15078] internal_create_group+0x34d/0xf30 [ 650.347331][T15078] ? __pfx_internal_create_group+0x10/0x10 [ 650.347369][T15078] ? kernfs_create_link+0x1bd/0x240 [ 650.347399][T15078] internal_create_groups+0x9d/0x150 [ 650.347432][T15078] device_add+0xf30/0x1a70 [ 650.347461][T15078] ? __pfx_device_add+0x10/0x10 [ 650.347486][T15078] ? lockdep_init_map_type+0x5c/0x280 [ 650.347521][T15078] ? __init_waitqueue_head+0xca/0x150 [ 650.347564][T15078] netdev_register_kobject+0x182/0x3a0 [ 650.347606][T15078] register_netdevice+0x13dc/0x2270 [ 650.347640][T15078] ? __pfx_register_netdevice+0x10/0x10 [ 650.347675][T15078] __ip_tunnel_create+0x540/0x6e0 [ 650.347705][T15078] ? __pfx___ip_tunnel_create+0x10/0x10 [ 650.347744][T15078] ip_tunnel_init_net+0x22f/0x7d0 [ 650.347775][T15078] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 650.347809][T15078] ? trace_kmalloc+0x2b/0xd0 [ 650.347832][T15078] ? __kmalloc_noprof+0x242/0x510 [ 650.347864][T15078] ? lockdep_init_map_type+0x5c/0x280 [ 650.347901][T15078] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 650.347936][T15078] ops_init+0x1df/0x5f0 [ 650.347974][T15078] setup_net+0x1ff/0x510 [ 650.347994][T15078] ? lockdep_init_map_type+0x5c/0x280 [ 650.348026][T15078] ? __pfx_setup_net+0x10/0x10 [ 650.348051][T15078] ? debug_mutex_init+0x37/0x70 [ 650.348078][T15078] copy_net_ns+0x2a6/0x5f0 [ 650.348107][T15078] create_new_namespaces+0x3ea/0xa90 [ 650.348142][T15078] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 650.348173][T15078] ksys_unshare+0x45b/0xa40 [ 650.348205][T15078] ? __pfx_ksys_unshare+0x10/0x10 [ 650.348237][T15078] ? xfd_validate_state+0x61/0x180 [ 650.348276][T15078] __x64_sys_unshare+0x31/0x40 [ 650.348307][T15078] do_syscall_64+0xcd/0x490 [ 650.348345][T15078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.348369][T15078] RIP: 0033:0x7f669818e929 [ 650.348391][T15078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.348417][T15078] RSP: 002b:00007f6699095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 650.348441][T15078] RAX: ffffffffffffffda RBX: 00007f66983b5fa0 RCX: 00007f669818e929 [ 650.348457][T15078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 650.348472][T15078] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 650.348488][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.348503][T15078] R13: 0000000000000000 R14: 00007f66983b5fa0 R15: 00007ffe9d21ecf8 [ 650.348535][T15078] [ 650.917146][ T995] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1402 with max blocks 7 with error 117 [ 650.929878][ T995] EXT4-fs (sda1): This should not happen!! Data will be lost [ 650.929878][ T995] [ 654.042679][ T5847] Bluetooth: hci1: unexpected event 0x14 length: 11 > 6 [ 654.651093][T15138] FAULT_INJECTION: forcing a failure. [ 654.651093][T15138] name failslab, interval 1, probability 0, space 0, times 0 [ 654.743231][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.0.2238 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 654.743269][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.743283][T15138] Call Trace: [ 654.743291][T15138] [ 654.743302][T15138] dump_stack_lvl+0x16c/0x1f0 [ 654.743341][T15138] should_fail_ex+0x512/0x640 [ 654.743375][T15138] ? __kmalloc_noprof+0xbf/0x510 [ 654.743413][T15138] ? snd_pcm_plugin_build+0x434/0x650 [ 654.743441][T15138] should_failslab+0xc2/0x120 [ 654.743466][T15138] __kmalloc_noprof+0xd2/0x510 [ 654.743500][T15138] ? __mutex_unlock_slowpath+0x91/0x6a0 [ 654.743542][T15138] snd_pcm_plugin_build+0x434/0x650 [ 654.743575][T15138] snd_pcm_plugin_build_linear+0x29d/0x850 [ 654.743608][T15138] ? wake_up_all_idle_cpus+0x165/0x1e0 [ 654.743645][T15138] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 654.743681][T15138] ? snd_pcm_hw_params+0xcd/0x1b40 [ 654.743721][T15138] snd_pcm_plug_format_plugins+0x7f8/0x1430 [ 654.743758][T15138] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 654.743795][T15138] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 654.743836][T15138] snd_pcm_oss_change_params_locked+0x2dec/0x3a30 [ 654.743882][T15138] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 654.743940][T15138] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 654.743982][T15138] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 654.744014][T15138] ? hook_file_ioctl_common+0x145/0x410 [ 654.744043][T15138] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 654.744076][T15138] ? __fget_files+0x20e/0x3c0 [ 654.744113][T15138] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 654.744144][T15138] __x64_sys_ioctl+0x18b/0x210 [ 654.744174][T15138] do_syscall_64+0xcd/0x490 [ 654.744208][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.744231][T15138] RIP: 0033:0x7f77a7d8e929 [ 654.744251][T15138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.744274][T15138] RSP: 002b:00007f77a8c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.744299][T15138] RAX: ffffffffffffffda RBX: 00007f77a7fb6080 RCX: 00007f77a7d8e929 [ 654.744316][T15138] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 654.744332][T15138] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 654.744347][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.744361][T15138] R13: 0000000000000000 R14: 00007f77a7fb6080 R15: 00007fff390d59e8 [ 654.744394][T15138] [ 655.953593][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 3 with error 117 [ 656.019693][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 656.019693][ T36] [ 657.748701][T15180] Invalid ELF header magic: != ELF [ 658.183838][ T5847] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 658.191657][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 658.201129][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:7 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 658.201165][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.201182][ T5847] Workqueue: hci1 hci_rx_work [ 658.201208][ T5847] Call Trace: [ 658.201217][ T5847] [ 658.201228][ T5847] dump_stack_lvl+0x16c/0x1f0 [ 658.201268][ T5847] sysfs_warn_dup+0x7f/0xa0 [ 658.201300][ T5847] sysfs_create_dir_ns+0x24b/0x2b0 [ 658.201332][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 658.201362][ T5847] ? find_held_lock+0x2b/0x80 [ 658.201394][ T5847] ? do_raw_spin_unlock+0x172/0x230 [ 658.201432][ T5847] kobject_add_internal+0x2c4/0x9b0 [ 658.201464][ T5847] kobject_add+0x16e/0x240 [ 658.201488][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 658.201516][ T5847] ? do_raw_spin_unlock+0x172/0x230 [ 658.201551][ T5847] ? kobject_put+0xab/0x5a0 [ 658.201608][ T5847] device_add+0x288/0x1a70 [ 658.201634][ T5847] ? __pfx_dev_set_name+0x10/0x10 [ 658.201664][ T5847] ? __pfx_device_add+0x10/0x10 [ 658.201691][ T5847] ? mgmt_send_event_skb+0x2fb/0x460 [ 658.201737][ T5847] hci_conn_add_sysfs+0x17e/0x230 [ 658.201762][ T5847] le_conn_complete_evt+0x1075/0x1d70 [ 658.201808][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.201840][ T5847] ? bt_warn+0xe4/0x120 [ 658.201871][ T5847] ? __pfx_bt_warn+0x10/0x10 [ 658.201911][ T5847] hci_le_conn_complete_evt+0x23c/0x370 [ 658.201955][ T5847] hci_le_meta_evt+0x354/0x5e0 [ 658.201978][ T5847] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 658.202018][ T5847] hci_event_packet+0x685/0x11c0 [ 658.202053][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.202079][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 658.202118][ T5847] ? kcov_remote_start+0x3c9/0x6d0 [ 658.202152][ T5847] ? lockdep_hardirqs_on+0x7c/0x110 [ 658.202195][ T5847] hci_rx_work+0x2c5/0x16b0 [ 658.202220][ T5847] ? rcu_is_watching+0x12/0xc0 [ 658.202251][ T5847] process_one_work+0x9cc/0x1b70 [ 658.202302][ T5847] ? __pfx_process_one_work+0x10/0x10 [ 658.202347][ T5847] ? assign_work+0x1a0/0x250 [ 658.202385][ T5847] worker_thread+0x6c8/0xf10 [ 658.202436][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 658.202471][ T5847] kthread+0x3c5/0x780 [ 658.202504][ T5847] ? __pfx_kthread+0x10/0x10 [ 658.202539][ T5847] ? rcu_is_watching+0x12/0xc0 [ 658.202564][ T5847] ? __pfx_kthread+0x10/0x10 [ 658.202613][ T5847] ret_from_fork+0x5d4/0x6f0 [ 658.202645][ T5847] ? __pfx_kthread+0x10/0x10 [ 658.202678][ T5847] ret_from_fork_asm+0x1a/0x30 [ 658.202722][ T5847] [ 658.211899][T15192] Invalid ELF header magic: != ELF [ 658.215020][ T5847] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 658.472783][ T5847] Bluetooth: hci1: failed to register connection device [ 661.168238][T15229] Invalid ELF header magic: != ELF [ 663.406595][T15249] delete_channel: no stack [ 665.747051][T15305] Invalid ELF header magic: != ELF [ 665.847653][T15290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 665.885372][T15290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 665.973966][T15290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 666.031307][T15290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 666.037447][T15290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 666.198997][T15290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.218901][T15290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.285479][T15290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.913584][T14242] Bluetooth: hci2: command 0x0406 tx timeout [ 667.264733][T15326] Invalid ELF header magic: != ELF [ 668.045503][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.282798][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 668.993026][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 670.122677][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.354118][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.822272][T15386] random: crng reseeded on system resumption [ 671.072720][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 671.545273][T15366] Process accounting paused [ 671.791124][T15396] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 672.432851][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 673.127520][T15419] random: crng reseeded on system resumption [ 674.413865][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 674.424929][T15429] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2303'. [ 676.211325][T15459] Invalid ELF header magic: != ELF [ 676.284446][T15459] netlink: zone id is out of range [ 676.310144][T15459] netlink: zone id is out of range [ 676.358263][T15459] netlink: zone id is out of range [ 676.367986][T15459] netlink: zone id is out of range [ 676.373204][T15459] netlink: zone id is out of range [ 676.581105][T15461] FAULT_INJECTION: forcing a failure. [ 676.581105][T15461] name failslab, interval 1, probability 0, space 0, times 0 [ 676.656043][T15461] CPU: 0 UID: 0 PID: 15461 Comm: syz.2.2311 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 676.656084][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 676.656112][T15461] Call Trace: [ 676.656122][T15461] [ 676.656132][T15461] dump_stack_lvl+0x16c/0x1f0 [ 676.656175][T15461] should_fail_ex+0x512/0x640 [ 676.656209][T15461] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 676.656246][T15461] should_failslab+0xc2/0x120 [ 676.656270][T15461] __kmalloc_cache_noprof+0x6a/0x3e0 [ 676.656304][T15461] ? slip_open+0x8cc/0x1150 [ 676.656332][T15461] ? kasan_save_track+0x14/0x30 [ 676.656371][T15461] slip_open+0x8cc/0x1150 [ 676.656404][T15461] ? __pfx_n_tty_close+0x10/0x10 [ 676.656435][T15461] ? __pfx_slip_open+0x10/0x10 [ 676.656464][T15461] ? down_write+0x14d/0x200 [ 676.656492][T15461] ? __pfx_slip_open+0x10/0x10 [ 676.656522][T15461] tty_ldisc_open+0x9f/0x120 [ 676.656555][T15461] tty_set_ldisc+0x32b/0x780 [ 676.656611][T15461] tty_ioctl+0xc2e/0x1640 [ 676.656652][T15461] ? __pfx_tty_ioctl+0x10/0x10 [ 676.656701][T15461] ? find_held_lock+0x2b/0x80 [ 676.656727][T15461] ? hook_file_ioctl_common+0x145/0x410 [ 676.656762][T15461] ? __fget_files+0x20e/0x3c0 [ 676.656801][T15461] ? __pfx_tty_ioctl+0x10/0x10 [ 676.656838][T15461] __x64_sys_ioctl+0x18b/0x210 [ 676.656871][T15461] do_syscall_64+0xcd/0x490 [ 676.656911][T15461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.656936][T15461] RIP: 0033:0x7f669818e929 [ 676.656958][T15461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.656984][T15461] RSP: 002b:00007f6699095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.657009][T15461] RAX: ffffffffffffffda RBX: 00007f66983b5fa0 RCX: 00007f669818e929 [ 676.657035][T15461] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000a [ 676.657051][T15461] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 676.657067][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.657083][T15461] R13: 0000000000000000 R14: 00007f66983b5fa0 R15: 00007ffe9d21ecf8 [ 676.657119][T15461] [ 676.876145][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.682407][T15476] Invalid ELF header magic: != ELF [ 679.084603][T15488] Invalid ELF header magic: != ELF [ 679.106849][T15486] Invalid ELF header magic: != ELF [ 681.417499][ T995] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 951 with max blocks 28 with error 117 [ 681.444518][ T995] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.444518][ T995] [ 682.321527][T15533] Invalid ELF header magic: != ELF [ 684.373274][T15559] Invalid ELF header magic: != ELF [ 685.889195][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.904916][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.514858][ T1004] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 3 with error 117 [ 686.579376][ T1004] EXT4-fs (sda1): This should not happen!! Data will be lost [ 686.579376][ T1004] [ 687.379136][T15591] FAULT_INJECTION: forcing a failure. [ 687.379136][T15591] name failslab, interval 1, probability 0, space 0, times 0 [ 687.430569][T15591] CPU: 0 UID: 0 PID: 15591 Comm: syz.2.2335 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 687.430607][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 687.430623][T15591] Call Trace: [ 687.430631][T15591] [ 687.430642][T15591] dump_stack_lvl+0x16c/0x1f0 [ 687.430683][T15591] should_fail_ex+0x512/0x640 [ 687.430726][T15591] should_failslab+0xc2/0x120 [ 687.430752][T15591] __kmalloc_cache_noprof+0x6a/0x3e0 [ 687.430784][T15591] ? __pfx___might_resched+0x10/0x10 [ 687.430810][T15591] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 687.430844][T15591] __hw_addr_add_ex+0x3c9/0x7c0 [ 687.430880][T15591] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 687.430908][T15591] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 687.430960][T15591] ? __pfx_do_setup+0x10/0x10 [ 687.430982][T15591] dev_addr_init+0x161/0x250 [ 687.431014][T15591] ? __pfx_dev_addr_init+0x10/0x10 [ 687.431056][T15591] alloc_netdev_mqs+0x3d2/0x1570 [ 687.431095][T15591] ? ovs_vport_alloc+0x2a0/0x3d0 [ 687.431124][T15591] internal_dev_create+0x8a/0x520 [ 687.431151][T15591] ovs_vport_add+0x144/0x4d0 [ 687.431189][T15591] new_vport+0x16/0x1d0 [ 687.431219][T15591] ovs_dp_cmd_new+0x6ba/0xe60 [ 687.431261][T15591] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 687.431300][T15591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 687.431330][T15591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 687.431365][T15591] genl_family_rcv_msg_doit+0x209/0x2f0 [ 687.431398][T15591] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 687.431429][T15591] ? trace_cap_capable+0x18d/0x200 [ 687.431459][T15591] ? bpf_lsm_capable+0x9/0x10 [ 687.431487][T15591] ? security_capable+0x7e/0x260 [ 687.431523][T15591] ? ns_capable+0xd7/0x110 [ 687.431550][T15591] genl_rcv_msg+0x55c/0x800 [ 687.431582][T15591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.431611][T15591] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 687.431657][T15591] netlink_rcv_skb+0x158/0x420 [ 687.431684][T15591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 687.431715][T15591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 687.431759][T15591] ? netlink_deliver_tap+0x1ae/0xd30 [ 687.431791][T15591] genl_rcv+0x28/0x40 [ 687.431817][T15591] netlink_unicast+0x53a/0x7f0 [ 687.431850][T15591] ? __pfx_netlink_unicast+0x10/0x10 [ 687.431889][T15591] netlink_sendmsg+0x8d1/0xdd0 [ 687.431923][T15591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.431973][T15591] ____sys_sendmsg+0xa98/0xc70 [ 687.432005][T15591] ? copy_msghdr_from_user+0x10a/0x160 [ 687.432042][T15591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.432080][T15591] ? __pfx_futex_wake_mark+0x10/0x10 [ 687.432122][T15591] ___sys_sendmsg+0x134/0x1d0 [ 687.432160][T15591] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.432194][T15591] ? __lock_acquire+0x622/0x1c90 [ 687.432272][T15591] __sys_sendmsg+0x16d/0x220 [ 687.432309][T15591] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.432343][T15591] ? __x64_sys_futex+0x1e0/0x4c0 [ 687.432394][T15591] do_syscall_64+0xcd/0x490 [ 687.432432][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.432459][T15591] RIP: 0033:0x7f669818e929 [ 687.432480][T15591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.432505][T15591] RSP: 002b:00007f6699095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.432531][T15591] RAX: ffffffffffffffda RBX: 00007f66983b5fa0 RCX: 00007f669818e929 [ 687.432548][T15591] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 687.432565][T15591] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 687.432580][T15591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.432599][T15591] R13: 0000000000000000 R14: 00007f66983b5fa0 R15: 00007ffe9d21ecf8 [ 687.432630][T15591] [ 687.559096][T15594] Invalid ELF header magic: != ELF [ 688.191029][T15605] FAULT_INJECTION: forcing a failure. [ 688.191029][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 688.266110][T15607] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input24 [ 688.302709][T15605] CPU: 0 UID: 0 PID: 15605 Comm: syz.0.2338 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 688.302747][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 688.302764][T15605] Call Trace: [ 688.302772][T15605] [ 688.302782][T15605] dump_stack_lvl+0x16c/0x1f0 [ 688.302824][T15605] should_fail_ex+0x512/0x640 [ 688.302856][T15605] ? __kmalloc_noprof+0xbf/0x510 [ 688.302893][T15605] ? ptp_open+0x103/0x520 [ 688.302918][T15605] should_failslab+0xc2/0x120 [ 688.302940][T15605] __kmalloc_noprof+0xd2/0x510 [ 688.302981][T15605] ptp_open+0x103/0x520 [ 688.303014][T15605] ? __pfx_ptp_open+0x10/0x10 [ 688.303053][T15605] ? __pfx_ptp_open+0x10/0x10 [ 688.303080][T15605] posix_clock_open+0x17b/0x290 [ 688.303108][T15605] ? __pfx_posix_clock_open+0x10/0x10 [ 688.303133][T15605] chrdev_open+0x231/0x6a0 [ 688.303166][T15605] ? __pfx_apparmor_file_open+0x10/0x10 [ 688.303195][T15605] ? __pfx_chrdev_open+0x10/0x10 [ 688.303232][T15605] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 688.303271][T15605] do_dentry_open+0x744/0x1c10 [ 688.303307][T15605] ? __pfx_chrdev_open+0x10/0x10 [ 688.303348][T15605] vfs_open+0x82/0x3f0 [ 688.303378][T15605] path_openat+0x1de4/0x2cb0 [ 688.303424][T15605] ? __pfx_path_openat+0x10/0x10 [ 688.303459][T15605] ? __lock_acquire+0xb8a/0x1c90 [ 688.303495][T15605] do_filp_open+0x20b/0x470 [ 688.303529][T15605] ? __pfx_do_filp_open+0x10/0x10 [ 688.303587][T15605] ? alloc_fd+0x471/0x7d0 [ 688.303641][T15605] do_sys_openat2+0x11b/0x1d0 [ 688.303669][T15605] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.303712][T15605] __x64_sys_openat+0x174/0x210 [ 688.303740][T15605] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.303783][T15605] do_syscall_64+0xcd/0x490 [ 688.303819][T15605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.303844][T15605] RIP: 0033:0x7f77a7d8e929 [ 688.303865][T15605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.303890][T15605] RSP: 002b:00007f77a8c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.303914][T15605] RAX: ffffffffffffffda RBX: 00007f77a7fb6080 RCX: 00007f77a7d8e929 [ 688.303931][T15605] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 688.303946][T15605] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 688.303961][T15605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.303976][T15605] R13: 0000000000000000 R14: 00007f77a7fb6080 R15: 00007fff390d59e8 [ 688.304010][T15605] [ 689.918166][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'. [ 690.473411][T15630] Invalid ELF header magic: != ELF [ 693.216847][T15671] Invalid ELF header magic: != ELF [ 694.034057][T15687] FAULT_INJECTION: forcing a failure. [ 694.034057][T15687] name failslab, interval 1, probability 0, space 0, times 0 [ 694.076278][T15687] CPU: 1 UID: 0 PID: 15687 Comm: syz.0.2353 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 694.076322][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.076338][T15687] Call Trace: [ 694.076347][T15687] [ 694.076356][T15687] dump_stack_lvl+0x16c/0x1f0 [ 694.076399][T15687] should_fail_ex+0x512/0x640 [ 694.076432][T15687] ? __kmalloc_noprof+0xbf/0x510 [ 694.076470][T15687] ? mpi_alloc_limb_space+0x31/0x60 [ 694.076497][T15687] should_failslab+0xc2/0x120 [ 694.076522][T15687] __kmalloc_noprof+0xd2/0x510 [ 694.076564][T15687] mpi_alloc_limb_space+0x31/0x60 [ 694.076594][T15687] mpi_powm+0xbe2/0x1bf0 [ 694.076632][T15687] ? kasan_quarantine_put+0x10a/0x240 [ 694.076670][T15687] ? __pfx_mpi_powm+0x10/0x10 [ 694.076697][T15687] ? kfree+0x2b4/0x4d0 [ 694.076724][T15687] ? mpi_free+0xe1/0x160 [ 694.076757][T15687] ? mpi_free+0xe1/0x160 [ 694.076788][T15687] rsa_enc+0x1fe/0x3b0 [ 694.076824][T15687] ? __pfx_rsa_enc+0x10/0x10 [ 694.076858][T15687] ? __virt_addr_valid+0x81/0x610 [ 694.076882][T15687] ? __phys_addr+0xe8/0x180 [ 694.076906][T15687] ? sg_init_one+0xf5/0x1b0 [ 694.076940][T15687] rsassa_pkcs1_verify+0x502/0xb60 [ 694.076977][T15687] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 694.077022][T15687] ? rsa_max_size+0xd/0x70 [ 694.077066][T15687] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 694.077097][T15687] public_key_verify_signature+0x672/0x970 [ 694.077132][T15687] ? __pfx_public_key_verify_signature+0x10/0x10 [ 694.077190][T15687] x509_check_for_self_signed+0x31a/0x500 [ 694.077228][T15687] x509_cert_parse+0x5f8/0x900 [ 694.077255][T15687] ? kasan_save_stack+0x42/0x60 [ 694.077286][T15687] ? kasan_save_stack+0x33/0x60 [ 694.077316][T15687] ? kasan_save_track+0x14/0x30 [ 694.077352][T15687] pkcs7_extract_cert+0xa4/0x320 [ 694.077390][T15687] asn1_ber_decoder+0xc5f/0x1df0 [ 694.077442][T15687] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 694.077505][T15687] pkcs7_parse_message+0x288/0x720 [ 694.077543][T15687] verify_pkcs7_signature+0x30/0xa0 [ 694.077572][T15687] valid_regdb+0x215/0x590 [ 694.077601][T15687] ? __pfx___mutex_lock+0x10/0x10 [ 694.077640][T15687] ? __pfx_valid_regdb+0x10/0x10 [ 694.077676][T15687] reg_reload_regdb+0x11e/0x460 [ 694.077705][T15687] ? __pfx_reg_reload_regdb+0x10/0x10 [ 694.077735][T15687] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 694.077767][T15687] ? nl80211_pre_doit+0x1b0/0xb10 [ 694.077806][T15687] genl_family_rcv_msg_doit+0x209/0x2f0 [ 694.077840][T15687] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 694.077869][T15687] ? rcu_is_watching+0x12/0xc0 [ 694.077906][T15687] ? bpf_lsm_capable+0x9/0x10 [ 694.077936][T15687] ? security_capable+0x7e/0x260 [ 694.077981][T15687] genl_rcv_msg+0x55c/0x800 [ 694.078016][T15687] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.078057][T15687] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 694.078091][T15687] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 694.078117][T15687] ? __pfx_nl80211_post_doit+0x10/0x10 [ 694.078156][T15687] ? __lock_acquire+0x622/0x1c90 [ 694.078193][T15687] netlink_rcv_skb+0x158/0x420 [ 694.078220][T15687] ? __pfx_genl_rcv_msg+0x10/0x10 [ 694.078251][T15687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 694.078291][T15687] ? netlink_deliver_tap+0x1ae/0xd30 [ 694.078315][T15687] ? is_vmalloc_addr+0x86/0xa0 [ 694.078352][T15687] genl_rcv+0x28/0x40 [ 694.078377][T15687] netlink_unicast+0x53a/0x7f0 [ 694.078409][T15687] ? __pfx_netlink_unicast+0x10/0x10 [ 694.078446][T15687] netlink_sendmsg+0x8d1/0xdd0 [ 694.078478][T15687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.078519][T15687] ____sys_sendmsg+0xa98/0xc70 [ 694.078549][T15687] ? copy_msghdr_from_user+0x10a/0x160 [ 694.078584][T15687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.078609][T15687] ? preempt_schedule_thunk+0x16/0x30 [ 694.078646][T15687] ? try_to_wake_up+0xa2f/0x1680 [ 694.078677][T15687] ___sys_sendmsg+0x134/0x1d0 [ 694.078715][T15687] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.078748][T15687] ? __lock_acquire+0x622/0x1c90 [ 694.078825][T15687] __sys_sendmsg+0x16d/0x220 [ 694.078861][T15687] ? __pfx___sys_sendmsg+0x10/0x10 [ 694.078895][T15687] ? __x64_sys_futex+0x1e0/0x4c0 [ 694.078947][T15687] do_syscall_64+0xcd/0x490 [ 694.078985][T15687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.079010][T15687] RIP: 0033:0x7f77a7d8e929 [ 694.079040][T15687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.079065][T15687] RSP: 002b:00007f77a8c90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.079091][T15687] RAX: ffffffffffffffda RBX: 00007f77a7fb5fa0 RCX: 00007f77a7d8e929 [ 694.079108][T15687] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 694.079123][T15687] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 694.079138][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.079153][T15687] R13: 0000000000000000 R14: 00007f77a7fb5fa0 R15: 00007fff390d59e8 [ 694.079187][T15687] [ 694.590776][T15682] Invalid ELF header magic: != ELF [ 696.418703][T15704] Invalid ELF header magic: != ELF [ 700.723901][T15752] Invalid ELF header magic: != ELF [ 701.963545][T15729] Process accounting resumed [ 702.355038][T15772] Invalid ELF header magic: != ELF [ 703.507232][T15779] Invalid ELF header magic: != ELF [ 704.658615][T15798] Invalid ELF header magic: != ELF [ 705.304340][T15807] Invalid ELF header magic: != ELF [ 705.488602][T15816] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 706.083000][T15824] Invalid ELF header magic: != ELF [ 707.296200][T15836] tipc: Started in network mode [ 707.306194][T15836] tipc: Node identity ee00, cluster identity 4711 [ 707.335654][T15836] tipc: Node number set to 60928 [ 710.497861][T15871] Invalid ELF header magic: != ELF [ 711.196777][T15884] Invalid ELF header magic: != ELF [ 711.953585][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 951 with max blocks 28 with error 117 [ 712.026332][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 712.026332][ T36] [ 715.371852][T15942] Invalid ELF header magic: != ELF [ 715.857242][T15950] Invalid ELF header magic: != ELF [ 716.457307][T15965] tipc: Started in network mode [ 716.471893][T15965] tipc: Node identity ee00, cluster identity 4711 [ 716.484841][T15965] tipc: Node number set to 60928 [ 716.647352][T15960] Invalid ELF header magic: != ELF [ 716.832022][T15968] Invalid ELF header magic: != ELF [ 717.074363][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 3 with error 117 [ 717.087495][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 717.087495][ T12] [ 717.753118][T15982] Invalid ELF header magic: != ELF [ 718.232266][T15996] random: crng reseeded on system resumption [ 720.137551][T16013] Invalid ELF header magic: != ELF [ 720.722434][T16020] Invalid ELF header magic: != ELF [ 722.243275][T16047] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 947 with max blocks 4 with error 117 [ 722.276487][T16047] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.276487][T16047] [ 722.326175][T16041] Invalid ELF header magic: != ELF [ 722.633944][T16046] Invalid ELF header magic: != ELF [ 723.489086][T16062] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input25 [ 723.533563][T16064] FAULT_INJECTION: forcing a failure. [ 723.533563][T16064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.582048][T16064] CPU: 1 UID: 0 PID: 16064 Comm: syz.2.2424 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 723.582085][T16064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.582101][T16064] Call Trace: [ 723.582108][T16064] [ 723.582114][T16064] dump_stack_lvl+0x16c/0x1f0 [ 723.582142][T16064] should_fail_ex+0x512/0x640 [ 723.582167][T16064] _copy_to_user+0x32/0xd0 [ 723.582190][T16064] proc_pid_cmdline_read+0x51b/0x900 [ 723.582210][T16064] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 723.582229][T16064] ? rw_verify_area+0xcf/0x680 [ 723.582247][T16064] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 723.582266][T16064] vfs_read+0x1e4/0xc60 [ 723.582288][T16064] ? __pfx___mutex_lock+0x10/0x10 [ 723.582310][T16064] ? __pfx_vfs_read+0x10/0x10 [ 723.582334][T16064] ? __fget_files+0x20e/0x3c0 [ 723.582360][T16064] ksys_read+0x12a/0x250 [ 723.582379][T16064] ? __pfx_ksys_read+0x10/0x10 [ 723.582404][T16064] do_syscall_64+0xcd/0x490 [ 723.582426][T16064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.582441][T16064] RIP: 0033:0x7f669818e929 [ 723.582453][T16064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.582467][T16064] RSP: 002b:00007f6699095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.582481][T16064] RAX: ffffffffffffffda RBX: 00007f66983b5fa0 RCX: 00007f669818e929 [ 723.582490][T16064] RDX: 000000000000009f RSI: 0000200000000040 RDI: 0000000000000007 [ 723.582499][T16064] RBP: 00007f6698210b39 R08: 0000000000000000 R09: 0000000000000000 [ 723.582507][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.582515][T16064] R13: 0000000000000000 R14: 00007f66983b5fa0 R15: 00007ffe9d21ecf8 [ 723.582533][T16064] [ 723.950552][T16068] Invalid ELF header magic: != ELF [ 725.788723][T16097] Invalid ELF header magic: != ELF [ 726.754371][T16106] Invalid ELF header magic: != ELF [ 728.263470][T16127] FAULT_INJECTION: forcing a failure. [ 728.263470][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 728.291044][T16127] CPU: 1 UID: 0 PID: 16127 Comm: syz.3.2435 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 728.291084][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.291098][T16127] Call Trace: [ 728.291111][T16127] [ 728.291121][T16127] dump_stack_lvl+0x16c/0x1f0 [ 728.291163][T16127] should_fail_ex+0x512/0x640 [ 728.291195][T16127] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 728.291237][T16127] should_failslab+0xc2/0x120 [ 728.291261][T16127] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 728.291295][T16127] ? sctp_auth_shkey_create+0x15c/0x210 [ 728.291319][T16127] ? __d_alloc+0x31/0xaa0 [ 728.291359][T16127] __d_alloc+0x31/0xaa0 [ 728.291397][T16127] d_alloc_pseudo+0x1c/0xc0 [ 728.291423][T16127] alloc_file_pseudo+0xcf/0x230 [ 728.291468][T16127] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 728.291498][T16127] ? alloc_fd+0x471/0x7d0 [ 728.291535][T16127] sock_alloc_file+0x50/0x210 [ 728.291561][T16127] __sys_socket+0x1c0/0x260 [ 728.291593][T16127] ? __pfx___sys_socket+0x10/0x10 [ 728.291619][T16127] ? xfd_validate_state+0x61/0x180 [ 728.291648][T16127] ? __pfx_do_writev+0x10/0x10 [ 728.291687][T16127] __x64_sys_socket+0x72/0xb0 [ 728.291713][T16127] ? lockdep_hardirqs_on+0x7c/0x110 [ 728.291748][T16127] do_syscall_64+0xcd/0x490 [ 728.291785][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.291812][T16127] RIP: 0033:0x7f2ee538e929 [ 728.291840][T16127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.291866][T16127] RSP: 002b:00007f2ee6251038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 728.291890][T16127] RAX: ffffffffffffffda RBX: 00007f2ee55b5fa0 RCX: 00007f2ee538e929 [ 728.291908][T16127] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 728.291922][T16127] RBP: 00007f2ee5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 728.291937][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.291952][T16127] R13: 0000000000000000 R14: 00007f2ee55b5fa0 R15: 00007fff57c3f258 [ 728.291986][T16127] [ 729.647520][T16134] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1384 with max blocks 29 with error 117 [ 729.692711][T16134] EXT4-fs (sda1): This should not happen!! Data will be lost [ 729.692711][T16134] [ 729.735666][T16143] Invalid ELF header magic: != ELF [ 731.586019][T16170] Invalid ELF header magic: != ELF [ 732.778736][T16174] Process accounting paused [ 733.817954][T16202] Invalid ELF header magic: != ELF [ 735.887274][T16230] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2453'. [ 736.071132][T16233] Invalid ELF header magic: != ELF [ 736.700522][T16245] Invalid ELF header magic: != ELF [ 740.369861][T16298] Invalid ELF header magic: != ELF [ 740.685009][T16308] Invalid ELF header magic: != ELF [ 740.928027][T16322] Invalid ELF header magic: != ELF [ 742.353621][T15938] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 974 with max blocks 5 with error 117 [ 742.439106][T15938] EXT4-fs (sda1): This should not happen!! Data will be lost [ 742.439106][T15938] [ 742.886054][T16333] Invalid ELF header magic: != ELF [ 743.116552][T16339] Invalid ELF header magic: != ELF [ 747.318822][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.325352][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.742048][T16405] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2483'. [ 747.790047][T16405] netlink: 102 bytes leftover after parsing attributes in process `syz.1.2483'. [ 748.971857][T16423] Invalid ELF header magic: != ELF [ 750.466351][T16435] Invalid ELF header magic: != ELF [ 754.695191][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 754.873124][ T5847] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 756.471667][T16513] Invalid ELF header magic: != ELF [ 757.259043][T16522] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 758.558124][ T5847] Bluetooth: hci2: unexpected event 0x14 length: 11 > 6 [ 759.367660][T16555] random: crng reseeded on system resumption [ 760.216297][T16574] Invalid ELF header magic: != ELF [ 760.373315][T16581] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 972 with max blocks 7 with error 117 [ 760.393051][T16581] EXT4-fs (sda1): This should not happen!! Data will be lost [ 760.393051][T16581] [ 760.562732][T16581] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2517'. [ 761.944173][T16594] can: request_module (can-proto-0) failed. [ 762.646824][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 762.889978][T16600] veth1_macvtap: left promiscuous mode [ 763.341428][T16600] Process accounting resumed [ 763.691692][T16592] kexec: Could not allocate control_code_buffer [ 763.894691][T16621] Invalid ELF header magic: != ELF [ 766.098554][T16634] kafs: addr_prefs: Invalid Command [ 766.352364][T16639] Invalid ELF header magic: != ELF [ 769.388845][T16685] Invalid ELF header magic: != ELF [ 772.511064][T16737] Invalid ELF header magic: != ELF [ 772.843874][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 976 with max blocks 3 with error 117 [ 772.898122][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 772.898122][ T12] [ 775.073231][T16762] Invalid ELF header magic: != ELF [ 775.702371][T16767] Invalid ELF header magic: != ELF [ 775.780507][T16772] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2563'. [ 775.858465][T16772] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2563'. [ 775.937867][T16778] random: crng reseeded on system resumption [ 777.594892][T16793] Invalid ELF header magic: != ELF [ 779.344481][T16826] Invalid ELF header magic: != ELF [ 779.381875][T16827] Invalid ELF header magic: != ELF [ 779.813150][T16838] Invalid ELF header magic: != ELF [ 781.871598][T16861] Invalid ELF header magic: != ELF [ 783.136287][T16878] Invalid ELF header magic: != ELF [ 784.039285][T16889] Invalid ELF header magic: != ELF [ 784.858605][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 785.009787][T16911] Invalid ELF header magic: != ELF [ 786.463444][T16926] Invalid ELF header magic: != ELF [ 786.515546][T16923] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 969 with max blocks 10 with error 117 [ 786.528308][T16923] EXT4-fs (sda1): This should not happen!! Data will be lost [ 786.528308][T16923] [ 789.105394][T16962] Invalid ELF header magic: != ELF [ 789.396681][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2587'. [ 790.040419][T16974] Invalid ELF header magic: != ELF [ 791.620056][T16996] Invalid ELF header magic: != ELF [ 794.006732][T17009] Process accounting paused [ 794.311516][T17033] Invalid ELF header magic: != ELF [ 794.533835][T17042] Invalid ELF header magic: != ELF [ 796.416985][T17073] Invalid ELF header magic: != ELF [ 796.743764][T17076] Invalid ELF header magic: != ELF [ 798.646903][T17097] Invalid ELF header magic: != ELF [ 801.005466][ T5847] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 801.919052][T17135] Invalid ELF header magic: != ELF [ 801.971071][T17136] Invalid ELF header magic: != ELF [ 802.150483][T17147] Invalid ELF header magic: != ELF [ 803.393243][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 976 with max blocks 3 with error 117 [ 803.451963][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 803.451963][ T12] [ 804.082138][T17168] Invalid ELF header magic: != ELF [ 806.548872][T17197] Invalid ELF header magic: != ELF [ 808.500031][T17223] Invalid ELF header magic: != ELF [ 808.619457][T17228] Invalid ELF header magic: != ELF [ 808.757726][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.764215][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.840623][T17238] kafs: addr_prefs: Invalid Command [ 811.331307][T17266] Invalid ELF header magic: != ELF [ 811.820786][T17271] Invalid ELF header magic: != ELF [ 812.829843][T17283] Invalid ELF header magic: != ELF [ 816.674216][T17339] Invalid ELF header magic: != ELF [ 817.200832][T17351] Invalid ELF header magic: != ELF [ 818.110710][T17361] Invalid ELF header magic: != ELF [ 818.150968][T17367] Invalid ELF header magic: != ELF [ 821.095779][T17405] Invalid ELF header magic: != ELF [ 821.531245][T17410] Invalid ELF header magic: != ELF [ 825.978566][T17443] Process accounting resumed [ 828.151699][T17498] Invalid ELF header magic: != ELF [ 829.133407][T17508] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 966 with max blocks 13 with error 117 [ 829.155539][T17508] EXT4-fs (sda1): This should not happen!! Data will be lost [ 829.155539][T17508] [ 829.346464][T17517] FAULT_INJECTION: forcing a failure. [ 829.346464][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 829.403245][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.3.2698 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 829.403285][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.403300][T17517] Call Trace: [ 829.403310][T17517] [ 829.403321][T17517] dump_stack_lvl+0x16c/0x1f0 [ 829.403367][T17517] should_fail_ex+0x512/0x640 [ 829.403400][T17517] ? __kmalloc_noprof+0xbf/0x510 [ 829.403439][T17517] ? ops_init+0x77/0x5f0 [ 829.403474][T17517] should_failslab+0xc2/0x120 [ 829.403499][T17517] __kmalloc_noprof+0xd2/0x510 [ 829.403532][T17517] ? lockdep_init_map_type+0x5c/0x280 [ 829.403574][T17517] ops_init+0x77/0x5f0 [ 829.403617][T17517] setup_net+0x1ff/0x510 [ 829.403640][T17517] ? lockdep_init_map_type+0x5c/0x280 [ 829.403675][T17517] ? __pfx_setup_net+0x10/0x10 [ 829.403702][T17517] ? debug_mutex_init+0x37/0x70 [ 829.403731][T17517] copy_net_ns+0x2a6/0x5f0 [ 829.403761][T17517] create_new_namespaces+0x3ea/0xa90 [ 829.403816][T17517] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 829.403849][T17517] ksys_unshare+0x45b/0xa40 [ 829.403883][T17517] ? __pfx_ksys_unshare+0x10/0x10 [ 829.403917][T17517] ? xfd_validate_state+0x61/0x180 [ 829.403959][T17517] __x64_sys_unshare+0x31/0x40 [ 829.403990][T17517] do_syscall_64+0xcd/0x490 [ 829.404029][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.404055][T17517] RIP: 0033:0x7f2ee538e929 [ 829.404078][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.404104][T17517] RSP: 002b:00007f2ee6230038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 829.404129][T17517] RAX: ffffffffffffffda RBX: 00007f2ee55b6080 RCX: 00007f2ee538e929 [ 829.404147][T17517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 829.404163][T17517] RBP: 00007f2ee5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 829.404179][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.404194][T17517] R13: 0000000000000000 R14: 00007f2ee55b6080 R15: 00007fff57c3f258 [ 829.404227][T17517] [ 830.100085][T17523] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1374 with max blocks 35 with error 117 [ 830.180254][T17523] EXT4-fs (sda1): This should not happen!! Data will be lost [ 830.180254][T17523] [ 835.818953][T17590] FAULT_INJECTION: forcing a failure. [ 835.818953][T17590] name failslab, interval 1, probability 0, space 0, times 0 [ 835.818981][T17590] CPU: 0 UID: 0 PID: 17590 Comm: syz.0.2709 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 835.819000][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 835.819009][T17590] Call Trace: [ 835.819014][T17590] [ 835.819020][T17590] dump_stack_lvl+0x16c/0x1f0 [ 835.819045][T17590] should_fail_ex+0x512/0x640 [ 835.819066][T17590] ? __kmalloc_noprof+0xbf/0x510 [ 835.819088][T17590] ? ops_init+0x77/0x5f0 [ 835.819109][T17590] should_failslab+0xc2/0x120 [ 835.819123][T17590] __kmalloc_noprof+0xd2/0x510 [ 835.819142][T17590] ? lockdep_init_map_type+0x5c/0x280 [ 835.819167][T17590] ops_init+0x77/0x5f0 [ 835.819201][T17590] setup_net+0x1ff/0x510 [ 835.819214][T17590] ? lockdep_init_map_type+0x5c/0x280 [ 835.819234][T17590] ? __pfx_setup_net+0x10/0x10 [ 835.819249][T17590] ? debug_mutex_init+0x37/0x70 [ 835.819266][T17590] copy_net_ns+0x2a6/0x5f0 [ 835.819283][T17590] create_new_namespaces+0x3ea/0xa90 [ 835.819304][T17590] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 835.819322][T17590] ksys_unshare+0x45b/0xa40 [ 835.819342][T17590] ? __pfx_ksys_unshare+0x10/0x10 [ 835.819361][T17590] ? xfd_validate_state+0x61/0x180 [ 835.819385][T17590] __x64_sys_unshare+0x31/0x40 [ 835.819404][T17590] do_syscall_64+0xcd/0x490 [ 835.819427][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.819442][T17590] RIP: 0033:0x7f77a7d8e929 [ 835.819455][T17590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.819469][T17590] RSP: 002b:00007f77a8c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 835.819483][T17590] RAX: ffffffffffffffda RBX: 00007f77a7fb6080 RCX: 00007f77a7d8e929 [ 835.819493][T17590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 835.819501][T17590] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 835.819510][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.819519][T17590] R13: 0000000000000000 R14: 00007f77a7fb6080 R15: 00007fff390d59e8 [ 835.819537][T17590] [ 838.685193][T17623] Invalid ELF header magic: != ELF [ 843.464855][T17680] Invalid ELF header magic: != ELF [ 844.210248][T17691] Invalid ELF header magic: != ELF [ 849.206748][T17737] Invalid ELF header magic: != ELF [ 849.229731][T17737] netlink: zone id is out of range [ 849.266321][T17737] netlink: zone id is out of range [ 849.414251][T17737] netlink: zone id is out of range [ 849.523578][T17739] hub 8-0:1.0: USB hub found [ 849.547110][T17739] hub 8-0:1.0: 1 port detected [ 849.573327][T17737] netlink: zone id is out of range [ 849.682746][T17737] netlink: zone id is out of range [ 850.448325][T17752] Invalid ELF header magic: != ELF [ 850.475842][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 850.544738][T17761] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2743'. [ 852.636434][T17781] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1408 with max blocks 5 with error 117 [ 852.678857][T17781] EXT4-fs (sda1): This should not happen!! Data will be lost [ 852.678857][T17781] [ 854.194049][T17803] Invalid ELF header magic: != ELF [ 854.443870][T17805] Invalid ELF header magic: != ELF [ 855.957483][T17828] Invalid ELF header magic: != ELF [ 855.966523][T17834] Invalid ELF header magic: != ELF [ 856.000722][T17834] netlink: zone id is out of range [ 856.028090][T17834] netlink: zone id is out of range [ 856.109050][T17834] netlink: zone id is out of range [ 856.142574][T17834] netlink: zone id is out of range [ 856.188915][T17834] netlink: zone id is out of range [ 856.465393][T17836] [U] [ 856.468204][T17836] [U] [ 856.470885][T17836] [U] [ 856.473575][T17836] [U] [ 856.485012][T17836] [U] [ 856.487763][T17836] [U] [ 856.490493][T17836] [U] [ 856.493215][T17836] [U] [ 856.516681][T17836] [U] [ 856.519439][T17836] [U] [ 856.522146][T17836] [U] [ 856.524852][T17836] [U] [ 856.812927][T17836] [U] [ 856.815778][T17836] [U] [ 856.818493][T17836] [U] [ 856.821202][T17836] [U] [ 857.084021][T17836] [U] [ 857.086772][T17836] [U] [ 857.089459][T17836] [U] [ 857.092134][T17836] [U] [ 857.147963][T17836] [U] [ 857.150724][T17836] [U] [ 857.153447][T17836] [U] [ 857.156176][T17836] [U] [ 857.240535][T17836] [U] [ 857.243301][T17836] [U] [ 857.246039][T17836] [U] [ 857.248778][T17836] [U] [ 857.307296][T17836] [U] [ 857.310070][T17836] [U] [ 857.312796][T17836] [U] [ 857.315519][T17836] [U] [ 857.422998][T17836] [U] [ 857.887741][T17837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.897248][T17837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 857.922775][T17837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 858.130860][T17837] Process accounting paused [ 858.673301][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 859.053791][T17870] Invalid ELF header magic: != ELF [ 859.470029][T17875] random: crng reseeded on system resumption [ 859.953393][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.959473][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 861.279771][T17906] FAULT_INJECTION: forcing a failure. [ 861.279771][T17906] name failslab, interval 1, probability 0, space 0, times 0 [ 861.295914][T17906] CPU: 1 UID: 0 PID: 17906 Comm: syz.0.2772 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 861.295956][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 861.295972][T17906] Call Trace: [ 861.295982][T17906] [ 861.295994][T17906] dump_stack_lvl+0x16c/0x1f0 [ 861.296037][T17906] should_fail_ex+0x512/0x640 [ 861.296072][T17906] ? fs_reclaim_acquire+0xae/0x150 [ 861.296106][T17906] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 861.296140][T17906] should_failslab+0xc2/0x120 [ 861.296167][T17906] __kmalloc_noprof+0xd2/0x510 [ 861.296212][T17906] tomoyo_realpath_from_path+0xc2/0x6e0 [ 861.296256][T17906] tomoyo_check_open_permission+0x2ab/0x3c0 [ 861.296289][T17906] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 861.296356][T17906] ? find_held_lock+0x2b/0x80 [ 861.296404][T17906] tomoyo_file_open+0x6b/0x90 [ 861.296444][T17906] security_file_open+0x84/0x1e0 [ 861.296478][T17906] do_dentry_open+0x596/0x1c10 [ 861.296525][T17906] vfs_open+0x82/0x3f0 [ 861.296558][T17906] path_openat+0x1de4/0x2cb0 [ 861.296606][T17906] ? __pfx_path_openat+0x10/0x10 [ 861.296643][T17906] ? __lock_acquire+0xb8a/0x1c90 [ 861.296680][T17906] do_filp_open+0x20b/0x470 [ 861.296716][T17906] ? __pfx_do_filp_open+0x10/0x10 [ 861.296777][T17906] ? alloc_fd+0x471/0x7d0 [ 861.296828][T17906] do_sys_openat2+0x11b/0x1d0 [ 861.296857][T17906] ? __pfx_do_sys_openat2+0x10/0x10 [ 861.296896][T17906] __x64_sys_openat+0x174/0x210 [ 861.296925][T17906] ? __pfx___x64_sys_openat+0x10/0x10 [ 861.296967][T17906] do_syscall_64+0xcd/0x490 [ 861.297008][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.297036][T17906] RIP: 0033:0x7f77a7d8e929 [ 861.297058][T17906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.297084][T17906] RSP: 002b:00007f77a8c90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 861.297109][T17906] RAX: ffffffffffffffda RBX: 00007f77a7fb5fa0 RCX: 00007f77a7d8e929 [ 861.297128][T17906] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 861.297145][T17906] RBP: 00007f77a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 861.297161][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.297177][T17906] R13: 0000000000000000 R14: 00007f77a7fb5fa0 R15: 00007fff390d59e8 [ 861.297212][T17906] [ 861.298059][T17906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 861.570016][T17902] Invalid ELF header magic: != ELF [ 863.684004][T17928] Invalid ELF header magic: != ELF [ 864.113327][T15938] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 969 with max blocks 10 with error 117 [ 864.212566][T15938] EXT4-fs (sda1): This should not happen!! Data will be lost [ 864.212566][T15938] [ 865.485333][T17946] random: crng reseeded on system resumption [ 867.448245][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.461561][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.485958][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.492793][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.509261][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.521951][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.536100][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.612766][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.979919][T17992] Invalid ELF header magic: != ELF [ 869.351126][T18015] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1369 with max blocks 44 with error 117 [ 869.391303][T18015] EXT4-fs (sda1): This should not happen!! Data will be lost [ 869.391303][T18015] [ 870.199038][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.205675][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.077174][T18028] Invalid ELF header magic: != ELF [ 871.758485][T18039] hub 8-0:1.0: USB hub found [ 871.813805][T18039] hub 8-0:1.0: 1 port detected [ 872.589976][T18044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 872.599237][T18044] team_slave_0: entered allmulticast mode [ 874.623540][T18072] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 874.623540][T18072] M' is too long [ 874.668283][T18072] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 874.668283][T18072] W ' is too long [ 875.011835][T18077] Invalid ELF header magic: != ELF [ 877.125699][T18109] Invalid ELF header magic: != ELF [ 877.316866][T18107] Invalid ELF header magic: != ELF [ 879.339459][T18140] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 880.447579][T18135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 880.456560][T18135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 880.502886][T18135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 881.604594][T18173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.202636][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 882.512627][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 882.592600][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 882.764029][ T30] audit: type=1800 audit(4294967713.878:33): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2830" name="members" dev="configfs" ino=133130 res=0 errno=0 [ 883.647020][T18181] random: crng reseeded on system resumption [ 884.498682][T18209] Invalid ELF header magic: != ELF [ 886.016404][T18229] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2838'. [ 886.044254][T18229] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2838'. [ 887.269338][T18244] Invalid ELF header magic: != ELF [ 888.419799][T18241] Process accounting resumed [ 889.101695][T18283] Invalid ELF header magic: != ELF [ 889.891203][T18293] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 967 with max blocks 12 with error 117 [ 889.917045][T18293] EXT4-fs (sda1): This should not happen!! Data will be lost [ 889.917045][T18293] [ 891.491202][T18305] Invalid ELF header magic: != ELF [ 892.595620][T18323] Invalid ELF header magic: != ELF [ 894.754065][ T3449] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1379 with max blocks 30 with error 117 [ 894.856364][ T3449] EXT4-fs (sda1): This should not happen!! Data will be lost [ 894.856364][ T3449] [ 897.486290][T18399] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 897.486290][T18399] M' is too long [ 897.532642][T18399] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 897.532642][T18399] W ' is too long [ 897.934482][T18407] Invalid ELF header magic: != ELF [ 899.965229][ T3449] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1381 with max blocks 32 with error 117 [ 900.007617][ T3449] EXT4-fs (sda1): This should not happen!! Data will be lost [ 900.007617][ T3449] [ 901.452414][T18443] Invalid ELF header magic: != ELF [ 901.687065][T18456] netlink: 'syz.0.2889': attribute type 2 has an invalid length. [ 902.686534][T18465] Invalid ELF header magic: != ELF [ 906.360942][T18529] Invalid ELF header magic: != ELF [ 906.554189][T18521] Invalid ELF header magic: != ELF [ 906.858011][T18523] Invalid ELF header magic: != ELF [ 908.810449][T18559] Invalid ELF header magic: != ELF [ 910.562785][T18565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 910.569339][T18565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 910.578325][T18565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.952619][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 912.609300][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 912.615477][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 912.648792][T18605] Invalid ELF header magic: != ELF [ 914.648167][T18638] Invalid ELF header magic: != ELF [ 915.022602][T18630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.028781][T18630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 915.042928][T18630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 916.544885][T18665] Invalid ELF header magic: != ELF [ 916.914404][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 917.072632][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 917.073428][T18609] Bluetooth: hci3: command 0x0c1a tx timeout [ 918.006316][T18695] Invalid ELF header magic: != ELF [ 918.016610][T18694] Invalid ELF header magic: != ELF [ 919.443257][T18692] Process accounting paused [ 920.310645][T18734] Invalid ELF header magic: != ELF [ 921.131412][T18736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.162837][T18736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 921.173403][T18736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 922.834151][T18609] Bluetooth: hci2: command 0x0406 tx timeout [ 923.242704][T18609] Bluetooth: hci1: command 0x0c1a tx timeout [ 923.242712][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 924.325175][T18787] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 943 with max blocks 36 with error 117 [ 924.338738][T18787] EXT4-fs (sda1): This should not happen!! Data will be lost [ 924.338738][T18787] [ 925.313202][ T3536] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1390 with max blocks 19 with error 117 [ 925.353875][ T3536] EXT4-fs (sda1): This should not happen!! Data will be lost [ 925.353875][ T3536] [ 926.416094][T18823] Invalid ELF header magic: != ELF [ 926.485261][T18824] Invalid ELF header magic: != ELF [ 926.864006][T18827] Invalid ELF header magic: != ELF [ 929.329611][T18869] Invalid ELF header magic: != ELF [ 929.756687][T18876] Invalid ELF header magic: != ELF [ 930.283941][T18884] Invalid ELF header magic: != ELF [ 931.451545][T18905] Invalid ELF header magic: != ELF [ 931.636696][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.643186][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.206769][T18925] Invalid ELF header magic: != ELF [ 934.003119][T18937] Invalid ELF header magic: != ELF [ 934.347476][T18944] sd 0:0:1:0: PR command failed: 1026 [ 934.389482][T18944] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 934.469640][T18944] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 935.524638][T18955] Invalid ELF header magic: != ELF [ 936.297556][T18976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3005'. [ 936.865565][T18984] Invalid ELF header magic: != ELF [ 940.822308][T19038] Invalid ELF header magic: != ELF [ 945.051459][T19102] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1389 with max blocks 24 with error 117 [ 945.119841][T19102] EXT4-fs (sda1): This should not happen!! Data will be lost [ 945.119841][T19102] [ 945.436271][T19104] syz.1.3038 (19104): attempted to duplicate a private mapping with mremap. This is not supported. [ 947.061208][T19116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 947.107707][T19116] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 947.145132][T19116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 947.872586][T18609] Bluetooth: hci2: command 0x0406 tx timeout [ 947.977589][T19138] Invalid ELF header magic: != ELF [ 949.156442][T18609] Bluetooth: hci1: command 0x0c1a tx timeout [ 949.162656][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 949.192065][T19157] Invalid ELF header magic: != ELF [ 950.250616][T19162] Process accounting resumed [ 951.647078][T19181] Invalid ELF header magic: != ELF [ 953.718598][T19206] Invalid ELF header magic: != ELF [ 955.653528][ T1004] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 972 with max blocks 7 with error 117 [ 955.715823][ T1004] EXT4-fs (sda1): This should not happen!! Data will be lost [ 955.715823][ T1004] [ 956.427661][T19245] Invalid ELF header magic: != ELF [ 959.153560][T19254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 959.216964][T19254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 959.273809][T19254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 960.512845][T18609] Bluetooth: hci2: command 0x0406 tx timeout [ 960.833321][ T3449] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1412 with max blocks 1 with error 117 [ 960.887072][ T3449] EXT4-fs (sda1): This should not happen!! Data will be lost [ 960.887072][ T3449] [ 961.027900][T19309] Invalid ELF header magic: != ELF [ 961.232623][T18609] Bluetooth: hci3: command 0x0c1a tx timeout [ 961.315468][T19314] Bluetooth: hci1: command 0x0c1a tx timeout [ 963.580697][T19362] Invalid ELF header magic: != ELF [ 966.677068][T19406] Invalid ELF header magic: != ELF [ 968.983142][T19446] Invalid ELF header magic: != ELF [ 969.099401][T19452] Invalid ELF header magic: != ELF [ 969.782366][T19467] Invalid ELF header magic: != ELF [ 971.448354][T19499] Invalid ELF header magic: != ELF [ 972.934216][T19524] Invalid ELF header magic: != ELF [ 973.523763][T19543] Invalid ELF header magic: != ELF [ 973.593925][T19531] GUP no longer grows the stack in syz.2.3132 (19531): 14000-401000 (4000) [ 973.603008][T19531] CPU: 0 UID: 0 PID: 19531 Comm: syz.2.3132 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 973.603030][T19531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.603040][T19531] Call Trace: [ 973.603047][T19531] [ 973.603053][T19531] dump_stack_lvl+0x16c/0x1f0 [ 973.603080][T19531] gup_vma_lookup+0x1d2/0x220 [ 973.603097][T19531] __get_user_pages+0x271/0x3b80 [ 973.603120][T19531] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 973.603143][T19531] ? kasan_save_stack+0x42/0x60 [ 973.603165][T19531] ? __pfx___get_user_pages+0x10/0x10 [ 973.603182][T19531] ? register_lock_class+0x41/0x4c0 [ 973.603203][T19531] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 973.603225][T19531] ? do_syscall_64+0xcd/0x490 [ 973.603252][T19531] __gup_longterm_locked+0x20d/0x1840 [ 973.603272][T19531] ? __lock_acquire+0xb8a/0x1c90 [ 973.603294][T19531] ? __pfx___gup_longterm_locked+0x10/0x10 [ 973.603320][T19531] pin_user_pages_remote+0xed/0x140 [ 973.603338][T19531] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 973.603354][T19531] ? mm_access+0x22d/0x2e0 [ 973.603378][T19531] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 973.603410][T19531] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 973.603442][T19531] ? iovec_from_user+0xbb/0x140 [ 973.603475][T19531] ? iovec_from_user+0xbb/0x140 [ 973.603499][T19531] process_vm_rw+0x216/0x2c0 [ 973.603524][T19531] ? __pfx_process_vm_rw+0x10/0x10 [ 973.603552][T19531] ? task_mm_cid_work+0x37b/0x910 [ 973.603574][T19531] ? __pfx_task_mm_cid_work+0x10/0x10 [ 973.603597][T19531] ? xfd_validate_state+0x61/0x180 [ 973.603618][T19531] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 973.603642][T19531] ? do_syscall_64+0x91/0x490 [ 973.603662][T19531] ? lockdep_hardirqs_on+0x7c/0x110 [ 973.603686][T19531] do_syscall_64+0xcd/0x490 [ 973.603721][T19531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.603746][T19531] RIP: 0033:0x7f669818e929 [ 973.603769][T19531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.603791][T19531] RSP: 002b:00007f6699074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 973.603807][T19531] RAX: ffffffffffffffda RBX: 00007f66983b6080 RCX: 00007f669818e929 [ 973.603817][T19531] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000098c [ 973.603826][T19531] RBP: 00007f6698210b39 R08: 0000000000000003 R09: 0000000000000000 [ 973.603835][T19531] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 973.603845][T19531] R13: 0000000000000000 R14: 00007f66983b6080 R15: 00007ffe9d21ecf8 [ 973.603864][T19531] [ 973.866878][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.805362][T19591] Invalid ELF header magic: != ELF [ 976.977081][T19595] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 979.469652][T19640] Invalid ELF header magic: != ELF [ 980.575890][T19659] Invalid ELF header magic: != ELF [ 980.990875][T19650] Process accounting paused [ 981.234837][T19670] Invalid ELF header magic: != ELF [ 983.007635][T19698] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k 1 [ 996.075152][T19319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 996.085039][T19319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 996.099510][T19319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 996.108077][T19319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 996.339740][T19844] chnl_net:caif_netlink_parms(): no params data found [ 996.453451][T19844] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.462220][T19844] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.481240][T19844] bridge_slave_0: entered allmulticast mode [ 996.491405][T19844] bridge_slave_0: entered promiscuous mode [ 996.500638][T19844] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.510009][T19844] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.518026][T19844] bridge_slave_1: entered allmulticast mode [ 996.526050][T19844] bridge_slave_1: entered promiscuous mode [ 996.561817][T19844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.575617][T19844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.707843][T19844] team0: Port device team_slave_0 added [ 996.736800][T19844] team0: Port device team_slave_1 added [ 996.868837][T19861] Invalid ELF header magic: != ELF [ 996.950965][T19844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.962565][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.018124][T19844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.037692][T19844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.052622][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.081130][T19844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.210301][T19844] hsr_slave_0: entered promiscuous mode [ 997.217483][T19844] hsr_slave_1: entered promiscuous mode [ 997.476118][T19844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 997.486005][T19844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 997.509838][T19844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 997.531448][T19844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 997.670723][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.717087][T19844] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.739301][T19349] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.746429][T19349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.778710][T19349] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.785829][T19349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.194422][T19319] Bluetooth: hci4: command tx timeout [ 998.545039][T19844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.932829][T19902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 999.190525][T19844] veth0_vlan: entered promiscuous mode [ 999.210108][T19844] veth1_vlan: entered promiscuous mode [ 999.266805][T19844] veth0_macvtap: entered promiscuous mode [ 999.288534][T19844] veth1_macvtap: entered promiscuous mode [ 999.316497][T19844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.356495][T19844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.372238][T19844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.394467][T19844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.423660][T19844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.457745][T19844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.555513][T19326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.565837][T19326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.611503][T19349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.621250][T19349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.290451][T19319] Bluetooth: hci4: command tx timeout [ 1002.363139][T19319] Bluetooth: hci4: command tx timeout [ 1003.653839][T19971] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1004.061726][T19972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1004.433174][T19319] Bluetooth: hci4: command tx timeout [ 1005.943591][T20002] Invalid ELF header magic: != ELF [ 1010.169173][T20082] Invalid ELF header magic: != ELF [ 1011.606780][T20100] Process accounting resumed [ 1012.051061][T20122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1012.156418][T20122] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k 1 [ 1059.958515][T19314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1059.966552][T19314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1059.975068][T19314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1059.987540][T19314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1060.587878][T20982] chnl_net:caif_netlink_parms(): no params data found [ 1061.579729][T20982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.682549][T20982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.722871][T20982] bridge_slave_0: entered allmulticast mode [ 1061.755218][T20982] bridge_slave_0: entered promiscuous mode [ 1061.819847][T20982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.833507][T20982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.842335][T20982] bridge_slave_1: entered allmulticast mode [ 1061.896710][T20982] bridge_slave_1: entered promiscuous mode [ 1062.027118][T20982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.039493][T19314] Bluetooth: hci5: command tx timeout [ 1062.042173][T20982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.320615][T20982] team0: Port device team_slave_0 added [ 1062.417616][T20982] team0: Port device team_slave_1 added [ 1062.497403][T20982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.509977][T20982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.652770][T20982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.675730][T20982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.763254][T20982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.857212][T20982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.070073][T20982] hsr_slave_0: entered promiscuous mode [ 1063.089347][T20982] hsr_slave_1: entered promiscuous mode [ 1063.103956][T20982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.112309][T20982] Cannot create hsr debugfs directory [ 1063.123336][T21014] Invalid ELF header magic: != ELF [ 1063.918845][T21027] Invalid ELF header magic: != ELF [ 1064.027014][T20982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1064.068742][T20982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1064.098307][T20982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1064.116811][T19314] Bluetooth: hci5: command tx timeout [ 1064.159614][T20982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.809779][T20982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.930715][T20982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.037268][T19889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.044482][T19889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.339466][T19889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.346659][T19889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.766257][T21063] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k/[k/[k/[k/[k 1 [ 1111.577852][T19314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1111.591263][T19314] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1111.599476][T19314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1111.607159][T19314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1112.321548][T21864] chnl_net:caif_netlink_parms(): no params data found [ 1112.339415][T21857] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1397 with max blocks 16 with error 117 [ 1112.388956][T21857] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1112.388956][T21857] [ 1112.807786][T21864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.831237][T21864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.851153][T21864] bridge_slave_0: entered allmulticast mode [ 1112.860224][T21864] bridge_slave_0: entered promiscuous mode [ 1112.870093][T21864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.883025][T21864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.890459][T21864] bridge_slave_1: entered allmulticast mode [ 1112.911112][T21864] bridge_slave_1: entered promiscuous mode [ 1113.002003][T21864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.028281][T21864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.240731][T21864] team0: Port device team_slave_0 added [ 1113.273156][T21864] team0: Port device team_slave_1 added [ 1113.434983][T21864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.441987][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.468332][T21864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.486956][T21864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.494087][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.520151][T21864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.598470][T21864] hsr_slave_0: entered promiscuous mode [ 1113.605848][T21864] hsr_slave_1: entered promiscuous mode [ 1113.612595][T21864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.622806][T21864] Cannot create hsr debugfs directory [ 1113.713517][T19314] Bluetooth: hci6: command tx timeout [ 1114.167687][T21864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1114.195312][T21864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1114.222864][T21864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1114.244903][T21864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1114.553321][T21864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.592283][T21864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.732910][T19534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.740027][T19534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.776038][T19534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.783189][T19534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.575954][T21864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.795565][T19314] Bluetooth: hci6: command tx timeout [ 1115.966612][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.975028][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.375980][T21864] veth0_vlan: entered promiscuous mode [ 1116.395553][T21864] veth1_vlan: entered promiscuous mode [ 1116.418622][T21864] veth0_macvtap: entered promiscuous mode [ 1116.512284][T21864] veth1_macvtap: entered promiscuous mode [ 1116.628860][T21864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.682403][T21864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.706068][T21864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.722375][T21864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.754817][T21864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.782612][T21864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.927037][T19327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.969348][T19327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.037917][T21945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.078193][T21945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.873307][T19319] Bluetooth: hci6: command tx timeout [ 1119.954702][T19314] Bluetooth: hci6: command tx timeout [ 1121.141626][T22034] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1125.674028][ T31] task:kworker/u10:0 state:D stack:26952 pid:19313 tgid:19313 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1125.741741][ T31] Workqueue: netns cleanup_net [ 1125.767210][ T31] Call Trace: [ 1125.770553][ T31] [ 1125.793550][ T31] __schedule+0x116a/0x5de0 [ 1125.839118][ T31] ? __pfx___schedule+0x10/0x10 [ 1125.857300][ T31] ? find_held_lock+0x2b/0x80 [ 1125.889918][ T31] ? schedule+0x2d7/0x3a0 [ 1125.910667][ T31] schedule+0xe7/0x3a0 [ 1125.932202][ T31] schedule_timeout+0x257/0x290 [ 1125.983066][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1125.988665][ T31] ? mark_held_locks+0x49/0x80 [ 1125.993622][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1125.998919][ T31] __wait_for_common+0x2ff/0x4e0 [ 1126.004536][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1126.010003][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1126.016971][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.031691][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1126.044988][ T31] __flush_workqueue+0x3e2/0x1230 [ 1126.050219][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1126.056297][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 1126.061768][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1126.073579][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1126.080707][ T31] rds_tcp_listen_stop+0x104/0x150 [ 1126.102653][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.142198][ T31] rds_tcp_exit_net+0xcb/0x810 [ 1126.147806][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.153550][ T31] ? __pfx___might_resched+0x10/0x10 [ 1126.158930][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.164737][ T31] ops_undo_list+0x2eb/0xab0 [ 1126.169431][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1126.190273][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 1126.232681][ T31] cleanup_net+0x408/0x890 [ 1126.238247][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1126.252721][ T31] ? rcu_is_watching+0x12/0xc0 [ 1126.257524][ T31] process_one_work+0x9cc/0x1b70 [ 1126.282712][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1126.299481][ T31] ? assign_work+0x1a0/0x250 [ 1126.310176][ T31] worker_thread+0x6c8/0xf10 [ 1126.319740][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1126.329810][ T31] kthread+0x3c5/0x780 [ 1126.339952][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.350089][ T31] ? rcu_is_watching+0x12/0xc0 [ 1126.360161][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.370278][ T31] ret_from_fork+0x5d4/0x6f0 [ 1126.380383][ T31] ? __pfx_kthread+0x10/0x10 [ 1126.390499][ T31] ret_from_fork_asm+0x1a/0x30 [ 1126.399968][ T31] [ 1126.441029][ T31] INFO: task syz.3.3157:19654 blocked for more than 144 seconds. [ 1126.522601][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 1126.530303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.560438][ T31] task:syz.3.3157 state:D stack:25544 pid:19654 tgid:19648 ppid:8400 task_flags:0x400140 flags:0x00004006 [ 1126.572750][ T31] Call Trace: [ 1126.576059][ T31] [ 1126.579010][ T31] __schedule+0x116a/0x5de0 [ 1126.583615][ T31] ? __lock_acquire+0x622/0x1c90 [ 1126.588580][ T31] ? __pfx___schedule+0x10/0x10 [ 1126.593846][ T31] ? find_held_lock+0x2b/0x80 [ 1126.598569][ T31] ? schedule+0x2d7/0x3a0 [ 1126.603536][ T31] schedule+0xe7/0x3a0 [ 1126.607646][ T31] schedule_timeout+0x257/0x290 [ 1126.612546][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1126.618379][ T31] ? mark_held_locks+0x49/0x80 [ 1126.623423][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.628663][ T31] __wait_for_common+0x2ff/0x4e0 [ 1126.633764][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1126.639259][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1126.644889][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1126.650130][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1126.656297][ T31] __flush_workqueue+0x3e2/0x1230 [ 1126.661370][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1126.666926][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 1126.672251][ T31] ? release_sock+0x21/0x220 [ 1126.677534][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1126.683116][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 1126.688423][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1126.693983][ T31] rds_tcp_listen_stop+0x104/0x150 [ 1126.699130][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.704576][ T31] rds_tcp_exit_net+0xcb/0x810 [ 1126.709370][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.714902][ T31] ? __pfx___might_resched+0x10/0x10 [ 1126.720218][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1126.725740][ T31] ops_undo_list+0x2eb/0xab0 [ 1126.730368][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1126.735586][ T31] ? ops_init+0x2fa/0x5f0 [ 1126.740081][ T31] setup_net+0x2e1/0x510 [ 1126.744414][ T31] ? __pfx_setup_net+0x10/0x10 [ 1126.749275][ T31] ? debug_mutex_init+0x37/0x70 [ 1126.754273][ T31] copy_net_ns+0x2a6/0x5f0 [ 1126.758714][ T31] create_new_namespaces+0x3ea/0xa90 [ 1126.764084][ T31] copy_namespaces+0x468/0x560 [ 1126.768881][ T31] copy_process+0x2822/0x76a0 [ 1126.773717][ T31] ? __pfx_copy_process+0x10/0x10 [ 1126.778892][ T31] kernel_clone+0xfc/0x960 [ 1126.783408][ T31] ? __pfx_kernel_clone+0x10/0x10 [ 1126.788473][ T31] __do_sys_clone+0xce/0x120 [ 1126.793140][ T31] ? __pfx___do_sys_clone+0x10/0x10 [ 1126.798373][ T31] ? xfd_validate_state+0x61/0x180 [ 1126.803536][ T31] ? __pfx_do_writev+0x10/0x10 [ 1126.808341][ T31] do_syscall_64+0xcd/0x490 [ 1126.812941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.818865][ T31] RIP: 0033:0x7f2ee538e929 [ 1126.823417][ T31] RSP: 002b:00007f2ee622ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1126.831861][ T31] RAX: ffffffffffffffda RBX: 00007f2ee55b6080 RCX: 00007f2ee538e929 [ 1126.840148][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040100000 [ 1126.851019][ T31] RBP: 00007f2ee5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1126.859744][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1126.867872][ T31] R13: 0000000000000000 R14: 00007f2ee55b6080 R15: 00007fff57c3f258 [ 1126.875934][ T31] [ 1126.899485][ T31] [ 1126.899485][ T31] Showing all locks held in the system: [ 1126.922584][ T31] 1 lock held by ksoftirqd/1/23: [ 1126.927584][ T31] #0: ffff8880b843a418 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1126.992963][ T31] 3 locks held by kworker/1:0/24: [ 1126.998055][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1127.032547][ T31] #1: ffffc900001e7d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1127.042322][ T31] #2: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1127.112556][ T31] 1 lock held by khungtaskd/31: [ 1127.117551][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1127.156068][ T31] 1 lock held by syz-executor/5830: [ 1127.161351][ T31] 1 lock held by syz-executor/5831: [ 1127.196528][ T31] 2 locks held by getty/14450: [ 1127.201353][ T31] #0: ffff88814c9ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1127.232800][ T31] #1: ffffc900037f12f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1127.258499][ T31] 3 locks held by kworker/u10:0/19313: [ 1127.272521][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1127.292564][ T31] #1: ffffc9000b5a7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1127.332558][ T31] #2: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1127.342000][ T31] 1 lock held by syz.3.3157/19654: [ 1127.372546][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1127.382061][ T31] 1 lock held by syz.2.3407/20729: [ 1127.422529][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1127.432051][ T31] 1 lock held by syz.5.3620/21609: [ 1127.442513][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1127.452007][ T31] 3 locks held by syz-executor/21864: [ 1127.489500][ T31] #0: ffff88809a430d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1127.499523][ T31] #1: ffff88809a430078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1127.509580][ T31] #2: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1127.521315][ T31] [ 1127.524230][ T31] ============================================= [ 1127.524230][ T31] [ 1127.550479][ T31] NMI backtrace for cpu 1 [ 1127.550499][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1127.550530][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1127.550543][ T31] Call Trace: [ 1127.550551][ T31] [ 1127.550560][ T31] dump_stack_lvl+0x116/0x1f0 [ 1127.550598][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1127.550624][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1127.550656][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1127.550685][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1127.550708][ T31] watchdog+0xf70/0x12c0 [ 1127.550739][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.550764][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1127.550795][ T31] ? __kthread_parkme+0x19e/0x250 [ 1127.550821][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.550846][ T31] kthread+0x3c5/0x780 [ 1127.550874][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.550905][ T31] ? rcu_is_watching+0x12/0xc0 [ 1127.550926][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.550956][ T31] ret_from_fork+0x5d4/0x6f0 [ 1127.550982][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.551009][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.551044][ T31] [ 1127.551058][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1127.678914][ C0] NMI backtrace for cpu 0 [ 1127.678933][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1127.678963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1127.678978][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1127.679017][ C0] Code: 4b 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 5e 2d 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1127.679040][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 1127.679060][ C0] RAX: 0000000000916625 RBX: 0000000000000000 RCX: ffffffff8b7cac29 [ 1127.679077][ C0] RDX: 0000000000000000 RSI: ffffffff8de13876 RDI: ffffffff8c1565a0 [ 1127.679093][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 1127.679109][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 1127.679124][ C0] R13: ffffffff8e297780 R14: ffffffff90a82d50 R15: 0000000000000000 [ 1127.679141][ C0] FS: 0000000000000000(0000) GS:ffff888124760000(0000) knlGS:0000000000000000 [ 1127.679164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.679181][ C0] CR2: 000055aee5e7e000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1127.679197][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1127.679212][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1127.679228][ C0] Call Trace: [ 1127.679236][ C0] [ 1127.679244][ C0] default_idle+0x13/0x20 [ 1127.679267][ C0] default_idle_call+0x6d/0xb0 [ 1127.679290][ C0] do_idle+0x391/0x510 [ 1127.679316][ C0] ? __pfx_do_idle+0x10/0x10 [ 1127.679340][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1127.679370][ C0] cpu_startup_entry+0x4f/0x60 [ 1127.679394][ C0] rest_init+0x16b/0x2b0 [ 1127.679417][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1127.679442][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1127.679473][ C0] start_kernel+0x3ee/0x4d0 [ 1127.679501][ C0] x86_64_start_reservations+0x18/0x30 [ 1127.679530][ C0] x86_64_start_kernel+0x130/0x190 [ 1127.679558][ C0] common_startup_64+0x13e/0x148 [ 1127.679603][ C0] [ 1127.693327][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1127.693349][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1127.693380][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1127.693397][ T31] Call Trace: [ 1127.693406][ T31] [ 1127.693417][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1127.693457][ T31] panic+0x71c/0x800 [ 1127.693490][ T31] ? __pfx_panic+0x10/0x10 [ 1127.693520][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1127.693555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1127.693586][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1127.693617][ T31] ? watchdog+0xdda/0x12c0 [ 1127.693649][ T31] ? watchdog+0xdcd/0x12c0 [ 1127.693686][ T31] watchdog+0xdeb/0x12c0 [ 1127.693725][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.693757][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1127.693792][ T31] ? __kthread_parkme+0x19e/0x250 [ 1127.693823][ T31] ? __pfx_watchdog+0x10/0x10 [ 1127.693856][ T31] kthread+0x3c5/0x780 [ 1127.693889][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.693923][ T31] ? rcu_is_watching+0x12/0xc0 [ 1127.693948][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.693981][ T31] ret_from_fork+0x5d4/0x6f0 [ 1127.694012][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.694044][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.694085][ T31] [ 1128.021754][ T31] Kernel Offset: disabled [ 1128.026080][ T31] Rebooting in 86400 seconds..