last executing test programs:

16.39554602s ago: executing program 0 (id=333):
mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x10008000)
r0 = open(0x0, 0x22240, 0x154)
fcntl$auto(r0, 0x400, 0x1)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x141000, 0x81)
settimeofday$auto(&(0x7f0000000040)={0x1000, 0x52c7}, &(0x7f0000000080)={0x748, 0x4e})
close_range$auto(0x2, 0x8, 0x0)
eventfd$auto(0x3)
select$auto(0x3, &(0x7f0000000440)={[0x5, 0x8000000000003, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clone$auto(0xf, 0xfffffffffffffffe, 0x0, 0x0, 0x290000000)
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0)
read$auto(r1, 0x0, 0x39b8)

14.323832151s ago: executing program 0 (id=344):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
epoll_create$auto(0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3)
r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0)
readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180))
ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"})
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
close_range$auto(0x2, 0x8, 0x0)

14.074254052s ago: executing program 3 (id=338):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
modify_ldt$auto(0x1, 0x0, 0x10)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r1, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
sendfile$auto(r3, r3, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setsockopt$auto_SO_INCOMING_CPU(r1, 0x72, 0x31, &(0x7f0000000040)='\x00', 0x81)
close_range$auto(0x2, 0x8, 0x0)

12.005569352s ago: executing program 3 (id=340):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
bind$auto(r0, 0x0, 0x4)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x25, 0x800007, 0xeb1, 0xffffffffffffffff, 0xffffffffffffffff)
socket(0xa, 0x5, 0x0)
getsockopt$auto(r0, 0x5, 0xfca, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
lsm_list_modules$auto(&(0x7f0000000080)=0x1, &(0x7f0000000140)=0x7a28, 0x4b1d)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f700368c", @ANYRES16=0x0, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x48010)
socket$nl_generic(0x10, 0x3, 0x10)

11.948525866s ago: executing program 1 (id=341):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
ioctl$auto_USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000240)={0x88, 0x9, 0x0})
unshare$auto(0x9)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
socket(0x29, 0x1, 0x2)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x11, 0x3, 0x9)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x8000)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r3, 0x0, 0xfff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0)
unshare$auto(0x40000080)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a")
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)

10.312871973s ago: executing program 0 (id=342):
write$auto(0x800000000000c8, 0x0, 0x1a)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0)
shutdown$auto(0x200000003, 0x2)
socket(0xa, 0x801, 0x106)
setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3)
set_mempolicy$auto(0x8003, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0)
r1 = epoll_create$auto(0x3e)
r2 = socket(0xa, 0x2, 0x3a)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r2, 0x8000)
r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0)
io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r3, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9, 0x4}})
keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
mmap$auto(0x1, 0x20009, 0x4000000000e3, 0x17, 0x401, 0x8003)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0xeb1, 0x401, 0x7ffc)
unshare$auto(0x40000080)

10.020262163s ago: executing program 2 (id=343):
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0)
r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0)
listen$auto(r1, 0x611e)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
fcntl$auto_F_SETSIG(r2, 0xa, 0xfffffffffffffeff)
poll$auto(0x0, 0x6, 0x8)
socketpair$auto(0x20, 0x5, 0x4000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x7ffd, 0x12)
madvise$auto(0x0, 0x200007, 0x19)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
read$auto(0x3, 0x0, 0x80)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
r4 = socket(0x11, 0x80003, 0x300)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850)
io_uring_enter$auto(r3, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3)
move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2)
ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0403d08, 0x0)

9.939638144s ago: executing program 1 (id=345):
set_mempolicy$auto(0x80, &(0x7f0000000000)=0xffffffffffffff81, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80091, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
sendfile$auto(r0, r0, &(0x7f0000000040)=0x6, 0x4)
r1 = fsopen$auto(0x0, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)="8dc9fc604f721b4b9b6fb75391e7e39755cc3cb395bbeb92c3807417bf1ff9a25a49c991b8928467fa6892bd2134d2b370b5483301f7f22130c3ebecaa9465c0c6c5641ad82adc8f2b12ca943d4de3658dd514b1fb698e93894b0dd0b3d306c32943eadea51e79b452099c1418bfbec96103e85c850857da852c9c4412a8d0c6907db9ef3ca7895f954c47b90d47baca32a1a2be6dd5c144bd78062790ea1b7ec15c4bfd2e5ef3aea5d501aa35cfe9bff7eee7c2f4", 0xb5)
mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0)
mlockall$auto(0x7)
write$auto_sg_fops_sg(r1, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0)
socketpair$auto(0x7, 0x1fffffe, 0x315, 0x0)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
pselect6$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

9.74946357s ago: executing program 3 (id=346):
r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
socket(0xb, 0xa, 0x0)
mmap$auto(0x0, 0x66a0, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, 0x0)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5453, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
r3 = socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x10, 0x2, 0xc)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xf8}}, 0x10044010)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8804)
write$auto(r0, &(0x7f0000000000)='/dev/audio1\x00', 0x4)

7.671698844s ago: executing program 3 (id=347):
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
mmap$auto(0x0, 0x4020009, 0xe3, 0xfffffffffffffffb, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
munmap$auto(0x2, 0x1a525c0f)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x2, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x42, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xb03840, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/20, 0xfffffcc4)
sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_DEL_RXSA(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x20004010)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/resv_hugepages\x00', 0x40200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/65, 0x41)
setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3)
mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)

7.563689377s ago: executing program 2 (id=348):
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x10, 0x4, 0xffffffc0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, 0x0, 0x7, 0x4008)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0)
pread64$auto(r3, 0x0, 0x8, 0xffff)
madvise$auto(0x0, 0x200007, 0x8)
setresuid$auto(0x2, 0x7, 0x8080)
r4 = socket(0x10, 0x2, 0x6)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="d122e8ff27bd7000fddbd7250600fc00"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)

7.023775757s ago: executing program 0 (id=349):
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x1)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x5, 0x94)
mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0x2)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0)
msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8})
write$auto(r1, 0x0, 0x100082)
close_range$auto(0x2, 0x8, 0x0)

7.020830133s ago: executing program 1 (id=350):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0)
write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0)
socket(0xa, 0x1, 0x100)
ioperm$auto(0x7, 0x5ad2, 0xc)
modify_ldt$auto(0x1, 0x0, 0x10)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r1, 0x0, 0x7ff, 0x400)
socket(0x2, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0)
sendfile$auto(r3, r3, 0x0, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setsockopt$auto_SO_INCOMING_CPU(r1, 0x72, 0x31, &(0x7f0000000040)='\x00', 0x81)
close_range$auto(0x2, 0x8, 0x0)

3.454731638s ago: executing program 3 (id=351):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x14d142a943201426, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x20002, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0xfffeffff, 0x0, 0x4, 0x9, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x80c})
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
mmap$auto(0x7, 0x5, 0xffb, 0x8000000808011, 0x3, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$auto(r0, 0xaccd, r2)
getrandom$auto(0x0, 0x80000001, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250300000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
madvise$auto(0x110c230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
getresuid$auto(&(0x7f0000000140)=0x80, &(0x7f00000001c0)=0xfffffff9, &(0x7f0000000200)=0x1ff)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x4})

3.27947184s ago: executing program 2 (id=352):
close_range$auto(0x2, 0x8, 0x0)

2.745029393s ago: executing program 2 (id=353):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)

2.708083115s ago: executing program 1 (id=354):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x14d142a943201426, 0x0)
adjtimex$auto(0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
mmap$auto(0x7, 0x5, 0xffb, 0x8000000808011, 0x3, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$auto(r0, 0xaccd, r2)
getrandom$auto(0x0, 0x80000001, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250300000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
madvise$auto(0x110c230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
getresuid$auto(&(0x7f0000000140)=0x80, &(0x7f00000001c0)=0xfffffff9, &(0x7f0000000200)=0x1ff)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x4})

2.559456579s ago: executing program 2 (id=355):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0)
ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380))
sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x24004054)
r1 = socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff)
mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003c00)={0x1c, r2, 0x5, 0x74bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, &(0x7f0000000040)="d93ca7")
write$auto(r0, &(0x7f0000001100)='\'.@o\xcf::}%/.&+-\x00', 0x1)
write$auto(r4, 0x0, 0xffd8)
r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000000)="1100000000000000001000000000000000", 0x11)
ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000001040)={0x4, r5})
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
io_uring_register$auto_IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000001080)="bfa36e8a41cf4a7903cd8cb5b232fe00841813bdac397709c98c858a36824b499bd91ed2fb094224b4f80eef4dbc1522fe9c114d15b2391e0535863affdb008b44b155ff98e570af60350fbefccfadf72297b2b9018e53dcbe6caf1b6bb5b9c48275", 0x9)
read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82)
r7 = setfsuid$auto(0x0)
setuid$auto(r7)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)

2.07592128s ago: executing program 0 (id=356):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()
ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0)
readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3)
ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0)
ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc)
modify_ldt$auto(0x1, 0x0, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0)
pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400)
inotify_rm_watch$auto(r1, 0x8001)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
getpid()
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
process_mrelease$auto(0xffffffffffffffff, 0x0)

2.075768118s ago: executing program 3 (id=357):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0)
ioperm$auto(0x7, 0x5ad2, 0x8)
mmap$auto(0x80, 0x40009, 0xe2, 0x100009b72, 0x7, 0x28400)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x2c, 0x6}, 0x0, 0x1001)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x1fe, 0x0)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x4000000403c6f2b, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x161342, 0x100)
rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff6, 0x8)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(0x0, 0x400000, 0x1cc)
ioprio_set$auto(0x2, 0x0, 0x208)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x7)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
write$auto(r2, 0x0, 0x7fffffff)
ioctl$auto(0xffffffffffffffff, 0x4b49, 0x9)
ioctl$auto_EVIOCSREP(r0, 0x40084503, 0x0)

2.026457679s ago: executing program 1 (id=358):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0)
pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x2, 0x3)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(0x3, 0x1, 0x90000800000402)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
futex_wake$auto(0x0, 0x0, 0x3, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
write$auto(0x3, 0x0, 0xffd8)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffe, 0x40000000000006, 0x9, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0xdeaa, 0x804})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xa3d9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
epoll_create$auto(0x4)
r3 = socket(0x28, 0x1, 0x1)
openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xac, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x8f, 0x18, "48de3b72bc4f5b080b0b7e812975fe9d72a948ab549af4fe9106388f677f8153713c99915caa4d3cc32855c700a83e6b75f716fac4597cf70c95cbec80239eaeee7a349592c47c8955a07ff5ee08cebfa7f739b27892073a423456b008835f85839e5f78062f20bb9f858e8425271ae90c7e279c57863ab4c1a436749d81379d3f44e8cd800203ef2a7cc3"}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xfffffff7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004053}, 0x20004004)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x7, 0x948b, 0x3, 0x15f4da07, 0xfffffffffffffffe, 0x3, 0x62, 0x8000001f, 0x7, 0x8, 0x9, 0x2, 0x8]}, 0x0)

1.340782194s ago: executing program 2 (id=359):
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000680)=0x4, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"})
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
pread64$auto(r1, 0x0, 0x7ff, 0x400)
socket(0x1a, 0x1, 0x0)
ioctl$auto(0xffffffffffffffff, 0x2, r1)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f00000006c0)="7dd682fe6bfb01f2835a9aa528bc95e102862d85d2e9d8c8da614620892e1bba4736c70e541e93b38045e2a38d551821461000b26660c4b510def730ffb70c5378092b28692febc5e012d42e0c", 0x4d)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101b80, 0x0)
pread64$auto(r4, 0x0, 0xf469, 0xbc3ab41)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd, 0x1, 0xc5e1, 0x3, 0x87, 0x2000000000000002, 0x0, 0x62, 0x8, 0x10, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0)
madvise$auto(0x0, 0x2003f0, 0x17)
ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(0xffffffffffffffff, 0x40084146, &(0x7f0000000040)=0x80000001)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio1\x00', 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)

381.496833ms ago: executing program 1 (id=360):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0xfe, 0x4}}, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x5, 0x0)
r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$auto_ima_measure_policy_ops_ima_fs(r2, 0x0, 0x0)
timerfd_settime$auto(r1, 0xc30, &(0x7f0000000140)={{0x201, 0x9}, {0x10000, 0x7fffffff}}, &(0x7f0000000180)={{0x4b, 0x5}, {0x7, 0x3}})
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), r0)
write$auto(r1, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0)
write$auto(r3, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001)
syncfs$auto(r1)
prlimit64$auto(0x0, 0x7, 0x0, &(0x7f0000000080)={0x3ff})
r4 = socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0xffffffffffffffff, 0x2020007, 0x1000000000000007, 0xeb1, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
setresgid$auto(0x81, 0x800000a0, 0x8)
socket(0x2, 0x2, 0x1)
r5 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
fanotify_init$auto(0x65, 0x2)
r6 = pipe$auto(0x0)
write$auto(0x6, 0x0, 0x100000001)
splice$auto(0x4, 0x0, r6, 0x0, 0x80000001, 0x9)
sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f)
timerfd_gettime$auto(r5, &(0x7f00000001c0)={{0x7, 0x80000000}, {0xa1}})

0s ago: executing program 0 (id=361):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0xa4e00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x14d142a943201426, 0x0)
adjtimex$auto(0x0)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db)
mmap$auto(0x7, 0x5, 0xffb, 0x8000000808011, 0x3, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$auto(r0, 0xaccd, r2)
getrandom$auto(0x0, 0x80000001, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250300000004"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
madvise$auto(0x110c230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
getresuid$auto(&(0x7f0000000140)=0x80, &(0x7f00000001c0)=0xfffffff9, &(0x7f0000000200)=0x1ff)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r5)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x4})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts.
[   97.927385][ T5825] cgroup: Unknown subsys name 'net'
[   98.064545][ T5825] cgroup: Unknown subsys name 'cpuset'
[   98.073951][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   99.939799][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  102.241750][   T10] cfg80211: failed to load regulatory.db
[  102.512863][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.521221][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.540738][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.544887][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.561775][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.569311][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.570859][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.577359][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  102.593598][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.601200][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.608747][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  102.618225][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  102.636378][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.644256][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  102.644853][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  102.653313][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  102.668127][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.668726][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.690235][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.701284][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.274517][ T5838] chnl_net:caif_netlink_parms(): no params data found
[  103.391086][ T5842] chnl_net:caif_netlink_parms(): no params data found
[  103.502665][ T5847] chnl_net:caif_netlink_parms(): no params data found
[  103.533855][ T5835] chnl_net:caif_netlink_parms(): no params data found
[  103.596916][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.604229][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.612242][ T5838] bridge_slave_0: entered allmulticast mode
[  103.619711][ T5838] bridge_slave_0: entered promiscuous mode
[  103.665109][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.672323][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.679503][ T5838] bridge_slave_1: entered allmulticast mode
[  103.687118][ T5838] bridge_slave_1: entered promiscuous mode
[  103.763621][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.771055][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.778352][ T5842] bridge_slave_0: entered allmulticast mode
[  103.788095][ T5842] bridge_slave_0: entered promiscuous mode
[  103.824905][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.832209][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.839384][ T5842] bridge_slave_1: entered allmulticast mode
[  103.848047][ T5842] bridge_slave_1: entered promiscuous mode
[  103.871274][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.943167][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.950528][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.957798][ T5847] bridge_slave_0: entered allmulticast mode
[  103.965959][ T5847] bridge_slave_0: entered promiscuous mode
[  103.979713][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.035466][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.043180][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.050544][ T5847] bridge_slave_1: entered allmulticast mode
[  104.057850][ T5847] bridge_slave_1: entered promiscuous mode
[  104.078339][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.086097][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.093619][ T5835] bridge_slave_0: entered allmulticast mode
[  104.101203][ T5835] bridge_slave_0: entered promiscuous mode
[  104.111601][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.136952][ T5838] team0: Port device team_slave_0 added
[  104.143966][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.151663][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.159037][ T5835] bridge_slave_1: entered allmulticast mode
[  104.166749][ T5835] bridge_slave_1: entered promiscuous mode
[  104.178193][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.217335][ T5838] team0: Port device team_slave_1 added
[  104.259762][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.274334][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.312181][ T5842] team0: Port device team_slave_0 added
[  104.349772][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.362843][ T5842] team0: Port device team_slave_1 added
[  104.384574][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.391687][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.417943][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.433102][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.491477][ T5847] team0: Port device team_slave_0 added
[  104.498456][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.505753][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.532795][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.574215][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.582846][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.610829][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.624443][ T5847] team0: Port device team_slave_1 added
[  104.666901][ T5835] team0: Port device team_slave_0 added
[  104.674999][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.682358][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.708569][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.711371][ T5844] Bluetooth: hci1: command tx timeout
[  104.719548][ T5841] Bluetooth: hci2: command tx timeout
[  104.725302][ T5844] Bluetooth: hci0: command tx timeout
[  104.742532][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.749604][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.775643][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.789730][ T5835] team0: Port device team_slave_1 added
[  104.795879][ T5844] Bluetooth: hci3: command tx timeout
[  104.846824][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.853989][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.880241][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.914100][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.921229][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.947499][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.960402][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.967392][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.993382][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.011032][ T5838] hsr_slave_0: entered promiscuous mode
[  105.017575][ T5838] hsr_slave_1: entered promiscuous mode
[  105.119259][ T5847] hsr_slave_0: entered promiscuous mode
[  105.126961][ T5847] hsr_slave_1: entered promiscuous mode
[  105.133594][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.141546][ T5847] Cannot create hsr debugfs directory
[  105.153183][ T5842] hsr_slave_0: entered promiscuous mode
[  105.159646][ T5842] hsr_slave_1: entered promiscuous mode
[  105.165992][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.173675][ T5842] Cannot create hsr debugfs directory
[  105.278763][ T5835] hsr_slave_0: entered promiscuous mode
[  105.285415][ T5835] hsr_slave_1: entered promiscuous mode
[  105.292301][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.299892][ T5835] Cannot create hsr debugfs directory
[  105.736534][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.757237][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.776120][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.797213][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.868419][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.881798][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.901563][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.915229][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.018673][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.039479][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.055336][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.084534][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.176495][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.193400][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.214514][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.227108][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.259118][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.335189][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[  106.364261][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.371755][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.389267][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.415578][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.422889][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.517162][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[  106.559228][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.574807][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.582044][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.611277][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.618462][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.652470][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[  106.700096][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.707293][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.719516][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.726776][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.790571][ T5841] Bluetooth: hci1: command tx timeout
[  106.796074][ T5841] Bluetooth: hci0: command tx timeout
[  106.803260][ T5844] Bluetooth: hci2: command tx timeout
[  106.808443][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.824560][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.870273][ T5841] Bluetooth: hci3: command tx timeout
[  106.877997][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.988647][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  107.075186][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.082469][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.113492][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.120800][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.236692][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.438517][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.478711][ T5838] veth0_vlan: entered promiscuous mode
[  107.539859][ T5838] veth1_vlan: entered promiscuous mode
[  107.619941][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.675093][ T5842] veth0_vlan: entered promiscuous mode
[  107.711921][ T5838] veth0_macvtap: entered promiscuous mode
[  107.727669][ T5842] veth1_vlan: entered promiscuous mode
[  107.743824][ T5838] veth1_macvtap: entered promiscuous mode
[  107.792662][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.823562][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.836023][ T5847] veth0_vlan: entered promiscuous mode
[  107.853469][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.863890][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.872881][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.881754][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.905193][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.919898][ T5847] veth1_vlan: entered promiscuous mode
[  107.929056][ T5842] veth0_macvtap: entered promiscuous mode
[  107.946246][ T5842] veth1_macvtap: entered promiscuous mode
[  108.056009][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.088365][ T5847] veth0_macvtap: entered promiscuous mode
[  108.107784][ T5835] veth0_vlan: entered promiscuous mode
[  108.137983][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.153680][ T5847] veth1_macvtap: entered promiscuous mode
[  108.168902][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.178412][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.182182][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.195915][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.201106][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.205251][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.236453][ T5835] veth1_vlan: entered promiscuous mode
[  108.296321][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.307107][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.315770][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.355097][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.415994][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.425718][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.436568][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.446246][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.469353][ T5835] veth0_macvtap: entered promiscuous mode
[  108.477750][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  108.538399][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.540229][ T5835] veth1_macvtap: entered promiscuous mode
[  108.556926][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.619309][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.703824][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.800793][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.822911][ T5929] mmap: syz.0.1 (5929) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.840537][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.855391][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.871197][ T5841] Bluetooth: hci0: command tx timeout
[  108.876712][ T5841] Bluetooth: hci2: command tx timeout
[  108.884935][ T5844] Bluetooth: hci1: command tx timeout
[  108.898516][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.912268][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.945696][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.958048][ T5841] Bluetooth: hci3: command tx timeout
[  109.003059][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  109.094326][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.105082][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.264910][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.298423][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.411939][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.419830][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.799725][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.808839][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.960772][ T5841] Bluetooth: hci2: command tx timeout
[  110.966865][ T5844] Bluetooth: hci1: command tx timeout
[  110.973028][ T5156] Bluetooth: hci0: command tx timeout
[  111.030540][ T5844] Bluetooth: hci3: command tx timeout
[  111.369360][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'.
[  111.379199][ T5964] nbd: must specify a device to reconfigure
[  111.591051][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  111.680954][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.030400][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  114.312681][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'.
[  114.322208][ T5990] nbd: must specify a device to reconfigure
[  115.031529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  115.060859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.070978][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  115.079297][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  115.089460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.098258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.190368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  116.025041][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'.
[  116.075307][ T6016] nbd: must specify a device to reconfigure
[  116.392757][ T6023] Zero length message leads to an empty skb
[  117.873496][ T6039] process 'syz.1.24' launched './file0' with NULL argv: empty string added
[  118.687337][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27'.
[  118.877482][ T6049] nbd: must specify a device to reconfigure
[  120.448832][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'.
[  120.554858][ T6080] nbd: must specify a device to reconfigure
[  120.838201][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'.
[  120.913184][ T6086] nbd: must specify a device to reconfigure
[  123.566980][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'.
[  123.648065][ T6117] nbd: must specify a device to reconfigure
[  124.617581][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'.
[  124.878639][ T6133] nbd: must specify a device to reconfigure
[  127.442848][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'.
[  127.461343][ T6170] nbd: must specify a device to reconfigure
[  128.273928][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'.
[  128.381161][ T6180] nbd: must specify a device to reconfigure
[  128.811288][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'.
[  128.972037][ T6185] nbd: must specify a device to reconfigure
[  130.290650][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.55'.
[  130.299517][ T6200] nbd: must specify a device to reconfigure
[  131.044898][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'.
[  131.054270][ T6211] nbd: must specify a device to reconfigure
[  132.607037][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.906871][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'.
[  134.020742][ T6238] nbd: must specify a device to reconfigure
[  134.802546][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'.
[  135.103505][ T6247] nbd: must specify a device to reconfigure
[  135.518809][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'.
[  135.528601][ T6258] nbd: must specify a device to reconfigure
[  135.912640][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'.
[  135.991055][ T6261] nbd: must specify a device to reconfigure
[  139.238382][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'.
[  139.247687][ T6290] nbd: must specify a device to reconfigure
[  141.654686][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'.
[  141.663755][ T6312] nbd: must specify a device to reconfigure
[  143.210881][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  143.217437][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  144.704665][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'.
[  144.817442][ T6350] nbd: must specify a device to reconfigure
[  145.436010][ T6354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'.
[  145.473356][ T6354] nbd: must specify a device to reconfigure
[  145.882842][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.87'.
[  145.893288][ T6359] nbd: must specify a device to reconfigure
[  149.889603][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'.
[  150.040086][ T6393] nbd: must specify a device to reconfigure
[  150.672138][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'.
[  150.801019][ T6395] nbd: must specify a device to reconfigure
[  153.251264][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'.
[  154.071965][ T6418] nbd: must specify a device to reconfigure
[  157.043476][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'.
[  157.540558][ T6451] nbd: must specify a device to reconfigure
[  158.905283][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'.
[  158.971346][ T6466] nbd: must specify a device to reconfigure
[  160.581329][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[  160.590417][ T6475] nbd: must specify a device to reconfigure
[  161.256343][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.110'.
[  161.500620][ T6484] nbd: must specify a device to reconfigure
[  162.486950][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'.
[  162.496517][ T6499] nbd: must specify a device to reconfigure
[  163.100180][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'.
[  163.310558][ T6503] nbd: must specify a device to reconfigure
[  164.021084][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'.
[  164.040328][ T6511] nbd: must specify a device to reconfigure
[  165.021012][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'.
[  165.041487][ T6519] nbd: must specify a device to reconfigure
[  166.291572][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.123'.
[  166.301001][ T6537] nbd: must specify a device to reconfigure
[  167.178597][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'.
[  167.232788][ T6551] nbd: must specify a device to reconfigure
[  168.253389][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'.
[  168.262462][ T6563] nbd: must specify a device to reconfigure
[  168.712073][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.136'.
[  168.798741][ T6565] nbd: must specify a device to reconfigure
[  170.341303][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'.
[  170.350610][ T6590] nbd: must specify a device to reconfigure
[  171.053818][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.137'.
[  171.083612][ T6598] nbd: must specify a device to reconfigure
[  171.731408][ T6604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.138'.
[  171.743450][ T6604] nbd: must specify a device to reconfigure
[  172.431402][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.141'.
[  172.461450][ T6613] nbd: must specify a device to reconfigure
[  173.972577][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'.
[  174.120294][ T6628] nbd: must specify a device to reconfigure
[  174.498926][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'.
[  174.538069][ T6634] nbd: must specify a device to reconfigure
[  176.091344][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'.
[  176.187408][ T6648] nbd: must specify a device to reconfigure
[  179.880534][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'.
[  179.936667][ T6675] nbd: must specify a device to reconfigure
[  180.262893][ T6680] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint).
[  180.773512][ T6682] [U] 
[  180.776472][ T6682] [U] 
[  180.779191][ T6682] [U] 
[  180.781915][ T6682] [U] 
[  180.809049][ T6682] [U] 
[  180.811855][ T6682] [U] 
[  180.814610][ T6682] [U] 
[  180.817366][ T6682] [U] 
[  180.823837][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.154'.
[  180.858851][ T6688] nbd: must specify a device to reconfigure
[  181.058185][ T6682] [U] 
[  181.060973][ T6682] [U] 
[  181.063725][ T6682] [U] 
[  181.066472][ T6682] [U] 
[  181.191783][ T6682] [U] 
[  181.397694][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'.
[  181.430416][ T6693] nbd: must specify a device to reconfigure
[  181.571605][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'.
[  181.600448][ T6699] nbd: must specify a device to reconfigure
[  181.879295][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'.
[  181.888678][ T6709] nbd: must specify a device to reconfigure
[  184.564568][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.162'.
[  184.573804][ T6729] nbd: must specify a device to reconfigure
[  184.662729][ T6724] blktrace: Concurrent blktraces are not allowed on loop2
[  186.414836][ T6752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[  186.470269][ T6752] nbd: must specify a device to reconfigure
[  186.728826][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.168'.
[  186.738097][ T6755] nbd: must specify a device to reconfigure
[  187.369395][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'.
[  187.419571][ T6763] nbd: must specify a device to reconfigure
[  188.325948][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'.
[  188.337441][ T6777] nbd: must specify a device to reconfigure
[  189.327100][ T6791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'.
[  189.350318][ T6791] nbd: must specify a device to reconfigure
[  191.013578][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'.
[  191.060105][ T6807] nbd: must specify a device to reconfigure
[  192.774649][ T6823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'.
[  192.924430][ T6823] nbd: must specify a device to reconfigure
[  193.382352][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.184'.
[  193.526105][ T6832] nbd: must specify a device to reconfigure
[  197.265855][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'.
[  197.285307][ T6874] nbd: must specify a device to reconfigure
[  198.411301][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'.
[  198.490930][ T6889] nbd: must specify a device to reconfigure
[  199.441348][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'.
[  200.282806][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'.
[  200.292789][ T6914] nbd: must specify a device to reconfigure
[  200.741926][ T6912] ptp ptp0: new virtual clock ptp1
[  200.785049][ T6912] ptp ptp0: new virtual clock ptp2
[  200.839212][ T6912] ptp ptp0: new virtual clock ptp3
[  200.921252][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'.
[  201.023365][ T6912] ptp ptp0: guarantee physical clock free running
[  201.030422][ T6927] nbd: must specify a device to reconfigure
[  202.191830][ T6943] FAULT_INJECTION: forcing a failure.
[  202.191830][ T6943] name failslab, interval 1, probability 0, space 0, times 1
[  202.210581][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.0.208 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  202.210625][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  202.210649][ T6943] Call Trace:
[  202.210663][ T6943]  <TASK>
[  202.210679][ T6943]  dump_stack_lvl+0x16c/0x1f0
[  202.210720][ T6943]  should_fail_ex+0x512/0x640
[  202.210771][ T6943]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  202.210830][ T6943]  should_failslab+0xc2/0x120
[  202.210863][ T6943]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  202.210930][ T6943]  ? devinet_init_net+0xeb/0x910
[  202.210981][ T6943]  kmemdup_noprof+0x29/0x60
[  202.211031][ T6943]  devinet_init_net+0xeb/0x910
[  202.211077][ T6943]  ? __pfx_devinet_init_net+0x10/0x10
[  202.211122][ T6943]  ops_init+0x1df/0x5f0
[  202.211162][ T6943]  setup_net+0x1ff/0x510
[  202.211194][ T6943]  ? lockdep_init_map_type+0x5c/0x280
[  202.211239][ T6943]  ? __pfx_setup_net+0x10/0x10
[  202.211278][ T6943]  ? debug_mutex_init+0x37/0x70
[  202.211316][ T6943]  copy_net_ns+0x2a6/0x5f0
[  202.211358][ T6943]  create_new_namespaces+0x3ea/0xa90
[  202.211403][ T6943]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  202.211443][ T6943]  ksys_unshare+0x45b/0xa40
[  202.211487][ T6943]  ? __pfx_ksys_unshare+0x10/0x10
[  202.211531][ T6943]  ? xfd_validate_state+0x61/0x180
[  202.211587][ T6943]  __x64_sys_unshare+0x31/0x40
[  202.211630][ T6943]  do_syscall_64+0xcd/0x490
[  202.211667][ T6943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.211701][ T6943] RIP: 0033:0x7f042a38e929
[  202.211740][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.211771][ T6943] RSP: 002b:00007f042b160038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  202.211806][ T6943] RAX: ffffffffffffffda RBX: 00007f042a5b5fa0 RCX: 00007f042a38e929
[  202.211825][ T6943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  202.211843][ T6943] RBP: 00007f042a410b39 R08: 0000000000000000 R09: 0000000000000000
[  202.211861][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.211879][ T6943] R13: 0000000000000000 R14: 00007f042a5b5fa0 R15: 00007ffc18141678
[  202.211921][ T6943]  </TASK>
[  202.438408][    C1] vkms_vblank_simulate: vblank timer overrun
[  203.851322][ T6954] FAULT_INJECTION: forcing a failure.
[  203.851322][ T6954] name failslab, interval 1, probability 0, space 0, times 0
[  203.898890][ T6954] CPU: 1 UID: 0 PID: 6954 Comm: syz.1.211 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  203.898937][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.898956][ T6954] Call Trace:
[  203.898967][ T6954]  <TASK>
[  203.898979][ T6954]  dump_stack_lvl+0x16c/0x1f0
[  203.899015][ T6954]  should_fail_ex+0x512/0x640
[  203.899070][ T6954]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  203.899119][ T6954]  should_failslab+0xc2/0x120
[  203.899152][ T6954]  __kmalloc_cache_noprof+0x6a/0x3e0
[  203.899195][ T6954]  ? lockdep_init_map_type+0x5c/0x280
[  203.899237][ T6954]  ? qrtr_endpoint_register+0x85/0x500
[  203.899279][ T6954]  qrtr_endpoint_register+0x85/0x500
[  203.899318][ T6954]  qrtr_tun_open+0x151/0x220
[  203.899361][ T6954]  ? __pfx_qrtr_tun_open+0x10/0x10
[  203.899403][ T6954]  misc_open+0x35d/0x420
[  203.899447][ T6954]  ? __pfx_misc_open+0x10/0x10
[  203.899488][ T6954]  chrdev_open+0x234/0x6a0
[  203.899520][ T6954]  ? __pfx_chrdev_open+0x10/0x10
[  203.899552][ T6954]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  203.899618][ T6954]  do_dentry_open+0x741/0x1c10
[  203.899668][ T6954]  ? __pfx_chrdev_open+0x10/0x10
[  203.899706][ T6954]  vfs_open+0x82/0x3f0
[  203.899747][ T6954]  path_openat+0x1de4/0x2cb0
[  203.899808][ T6954]  ? __pfx_path_openat+0x10/0x10
[  203.899860][ T6954]  ? __lock_acquire+0xb8a/0x1c90
[  203.899908][ T6954]  do_filp_open+0x20b/0x470
[  203.899960][ T6954]  ? __pfx_do_filp_open+0x10/0x10
[  203.900032][ T6954]  ? alloc_fd+0x471/0x7d0
[  203.900087][ T6954]  do_sys_openat2+0x11b/0x1d0
[  203.900125][ T6954]  ? __pfx_do_sys_openat2+0x10/0x10
[  203.900178][ T6954]  __x64_sys_openat+0x174/0x210
[  203.900216][ T6954]  ? __pfx___x64_sys_openat+0x10/0x10
[  203.900269][ T6954]  do_syscall_64+0xcd/0x490
[  203.900305][ T6954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.900336][ T6954] RIP: 0033:0x7f9ddd78e929
[  203.900360][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.900390][ T6954] RSP: 002b:00007f9ddb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  203.900419][ T6954] RAX: ffffffffffffffda RBX: 00007f9ddd9b5fa0 RCX: 00007f9ddd78e929
[  203.900439][ T6954] RDX: 0000000000000101 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  203.900458][ T6954] RBP: 00007f9ddd810b39 R08: 0000000000000000 R09: 0000000000000000
[  203.900476][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.900493][ T6954] R13: 0000000000000000 R14: 00007f9ddd9b5fa0 R15: 00007ffee196fed8
[  203.900532][ T6954]  </TASK>
[  204.152307][    C1] vkms_vblank_simulate: vblank timer overrun
[  204.220033][ T6957] syz.0.210 uses obsolete (PF_INET,SOCK_PACKET)
[  204.636656][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  204.645333][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  204.839892][ T6975] : Can't lookup blockdev
[  204.926059][ T6977] netlink: 'syz.2.214': attribute type 1 has an invalid length.
[  205.161606][ T6977] netlink: zone id is out of range
[  205.252133][ T6977] netlink: zone id is out of range
[  205.257446][ T6977] netlink: zone id is out of range
[  205.263586][ T6977] netlink: zone id is out of range
[  205.268888][ T6977] netlink: zone id is out of range
[  205.274818][ T6977] netlink: zone id is out of range
[  205.301015][ T6977] netlink: zone id is out of range
[  205.343276][ T6977] netlink: zone id is out of range
[  205.401782][ T6977] netlink: zone id is out of range
[  205.407040][ T6977] netlink: zone id is out of range
[  209.225148][ T7028] random: crng reseeded on system resumption
[  212.414515][ T7061] =======================================================
[  212.414515][ T7061] WARNING: The mand mount option has been deprecated and
[  212.414515][ T7061]          and is ignored by this kernel. Remove the mand
[  212.414515][ T7061]          option from the mount to silence this warning.
[  212.414515][ T7061] =======================================================
[  213.555017][ T7082] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.232'.
[  217.324302][ T7130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  218.074560][ T7131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  219.301327][ T7150] ubi0: attaching mtd0
[  219.340484][ T7150] ubi0: scanning is finished
[  219.345150][ T7150] ubi0: empty MTD device detected
[  221.015947][ T7150] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  221.164185][ T7150] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  221.250153][ T7150] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  221.259434][ T7150] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  221.443849][ T7150] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  221.521773][ T7150] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  221.654735][ T7150] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3242207765
[  221.704093][ T7150] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  221.833507][ T7165] ubi0: background thread "ubi_bgt0d" started, PID 7165
[  222.518478][ T7176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  222.814074][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'.
[  223.044104][ T7171] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  223.085885][ T7159] could not allocate digest TFM handle 
[  224.023063][ T7178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  225.330248][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'.
[  226.430398][ T7216] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  227.196432][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  227.203044][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  227.209125][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  227.215227][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  227.806685][ T7217] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  228.084562][ T7232] can: request_module (can-proto-3) failed.
[  231.791480][ T7256] ubi: mtd0 is already attached to ubi0
[  233.033276][ T7251] size and base must be multiples of 4 kiB
[  233.059735][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.3.258 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  233.059782][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  233.059801][ T7251] Call Trace:
[  233.059812][ T7251]  <TASK>
[  233.059826][ T7251]  dump_stack_lvl+0x16c/0x1f0
[  233.059864][ T7251]  mtrr_del+0xd1/0x110
[  233.059921][ T7251]  mtrr_ioctl+0x922/0xcf0
[  233.059962][ T7251]  ? __pfx_mtrr_ioctl+0x10/0x10
[  233.060009][ T7251]  ? find_held_lock+0x2b/0x80
[  233.060053][ T7251]  ? __fget_files+0x20e/0x3c0
[  233.060102][ T7251]  ? __pfx_mtrr_ioctl+0x10/0x10
[  233.060144][ T7251]  proc_reg_unlocked_ioctl+0x226/0x320
[  233.060193][ T7251]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  233.060249][ T7251]  __x64_sys_ioctl+0x18b/0x210
[  233.060293][ T7251]  do_syscall_64+0xcd/0x490
[  233.060329][ T7251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.060363][ T7251] RIP: 0033:0x7f0e0278e929
[  233.060389][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.060420][ T7251] RSP: 002b:00007f0e035a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.060449][ T7251] RAX: ffffffffffffffda RBX: 00007f0e029b6080 RCX: 00007f0e0278e929
[  233.060470][ T7251] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009
[  233.060488][ T7251] RBP: 00007f0e02810b39 R08: 0000000000000000 R09: 0000000000000000
[  233.060506][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.060524][ T7251] R13: 0000000000000000 R14: 00007f0e029b6080 R15: 00007fff0ee74998
[  233.060564][ T7251]  </TASK>
[  234.942363][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[  238.575078][ T7314] Console: switching to colour VGA+ 80x25
[  238.632141][ T7311] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input11
[  238.898035][ T7314] Console: switching to colour frame buffer device 128x48
[  239.430996][ T7324] can: request_module (can-proto-3) failed.
[  239.927828][ T7337] netlink: 'syz.3.274': attribute type 11 has an invalid length.
[  240.083687][ T7337] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  242.813880][ T7372] capability: warning: `syz.1.282' uses 32-bit capabilities (legacy support in use)
[  242.897528][ T7372] HfR: entered promiscuous mode
[  244.588605][ T7387] netlink: 342 bytes leftover after parsing attributes in process `syz.2.284'.
[  245.276316][ T7386] Invalid ELF header magic: != ELF
[  248.022774][ T7424] ubi: mtd0 is already attached to ubi0
[  248.254515][ T7424] size and base must be multiples of 4 kiB
[  248.260602][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.1.291 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  248.260645][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  248.260668][ T7424] Call Trace:
[  248.260684][ T7424]  <TASK>
[  248.260699][ T7424]  dump_stack_lvl+0x16c/0x1f0
[  248.260737][ T7424]  mtrr_del+0xd1/0x110
[  248.260777][ T7424]  mtrr_ioctl+0x922/0xcf0
[  248.260818][ T7424]  ? __pfx_mtrr_ioctl+0x10/0x10
[  248.260866][ T7424]  ? find_held_lock+0x2b/0x80
[  248.260908][ T7424]  ? __fget_files+0x20e/0x3c0
[  248.260954][ T7424]  ? __pfx_mtrr_ioctl+0x10/0x10
[  248.260993][ T7424]  proc_reg_unlocked_ioctl+0x226/0x320
[  248.261042][ T7424]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  248.261097][ T7424]  __x64_sys_ioctl+0x18b/0x210
[  248.261147][ T7424]  do_syscall_64+0xcd/0x490
[  248.261182][ T7424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.261215][ T7424] RIP: 0033:0x7f9ddd78e929
[  248.261240][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.261269][ T7424] RSP: 002b:00007f9ddb5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  248.261299][ T7424] RAX: ffffffffffffffda RBX: 00007f9ddd9b6160 RCX: 00007f9ddd78e929
[  248.261319][ T7424] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009
[  248.261336][ T7424] RBP: 00007f9ddd810b39 R08: 0000000000000000 R09: 0000000000000000
[  248.261354][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.261371][ T7424] R13: 0000000000000000 R14: 00007f9ddd9b6160 R15: 00007ffee196fed8
[  248.261410][ T7424]  </TASK>
[  248.483580][ T7426] HfR: entered promiscuous mode
[  251.371136][ T7464] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input12
[  252.064490][ T7473] net_ratelimit: 96 callbacks suppressed
[  252.064509][ T7473] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  252.449333][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'.
[  252.540709][ T7477] nbd: must specify a device to reconfigure
[  255.033459][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.307'.
[  255.109519][ T7502] nbd: must specify a device to reconfigure
[  255.448964][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'.
[  255.569606][ T7513] nbd: must specify a device to reconfigure
[  256.179580][ T7525] netlink: 342 bytes leftover after parsing attributes in process `syz.3.311'.
[  257.402995][ T7529] Invalid ELF header magic: != ELF
[  260.005619][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'.
[  260.276301][ T7560] can: request_module (can-proto-3) failed.
[  260.380363][ T7555] nbd: must specify a device to reconfigure
[  261.216032][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'.
[  261.293379][ T7569] nbd: must specify a device to reconfigure
[  261.538594][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'.
[  261.578691][ T7576] nbd: must specify a device to reconfigure
[  261.833317][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'.
[  261.992536][ T7568] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  262.581218][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'.
[  262.658021][ T7592] nbd: must specify a device to reconfigure
[  262.885668][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[  263.714394][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'.
[  263.723690][ T7605] nbd: must specify a device to reconfigure
[  266.069958][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  266.077515][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  267.316940][ T7643] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  268.402856][ T7652] ubi: mtd0 is already attached to ubi0
[  268.464788][ T7647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  268.646634][ T7652] size and base must be multiples of 4 kiB
[  268.653107][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.2.334 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  268.653139][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  268.653153][ T7652] Call Trace:
[  268.653160][ T7652]  <TASK>
[  268.653168][ T7652]  dump_stack_lvl+0x16c/0x1f0
[  268.653197][ T7652]  mtrr_del+0xd1/0x110
[  268.653226][ T7652]  mtrr_ioctl+0x922/0xcf0
[  268.653256][ T7652]  ? __pfx_mtrr_ioctl+0x10/0x10
[  268.653291][ T7652]  ? find_held_lock+0x2b/0x80
[  268.653321][ T7652]  ? __fget_files+0x20e/0x3c0
[  268.653357][ T7652]  ? __pfx_mtrr_ioctl+0x10/0x10
[  268.653386][ T7652]  proc_reg_unlocked_ioctl+0x226/0x320
[  268.653422][ T7652]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  268.653462][ T7652]  __x64_sys_ioctl+0x18b/0x210
[  268.653493][ T7652]  do_syscall_64+0xcd/0x490
[  268.653536][ T7652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.653561][ T7652] RIP: 0033:0x7f149f58e929
[  268.653579][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.653602][ T7652] RSP: 002b:00007f14a0367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  268.653624][ T7652] RAX: ffffffffffffffda RBX: 00007f149f7b6080 RCX: 00007f149f58e929
[  268.653639][ T7652] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009
[  268.653654][ T7652] RBP: 00007f149f610b39 R08: 0000000000000000 R09: 0000000000000000
[  268.653679][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.653705][ T7652] R13: 0000000000000000 R14: 00007f149f7b6080 R15: 00007ffca29b2208
[  268.653734][ T7652]  </TASK>
[  268.817584][    C0] vkms_vblank_simulate: vblank timer overrun
[  271.216308][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  274.013961][   T30] audit: type=1800 audit(6044310741.738:2): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.346" name="dbroot" dev="configfs" ino=19099 res=0 errno=0
[  274.044129][ T7725] FAULT_INJECTION: forcing a failure.
[  274.044129][ T7725] name failslab, interval 1, probability 0, space 0, times 0
[  274.092229][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: syz.3.346 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  274.092273][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.092290][ T7725] Call Trace:
[  274.092300][ T7725]  <TASK>
[  274.092311][ T7725]  dump_stack_lvl+0x16c/0x1f0
[  274.092349][ T7725]  should_fail_ex+0x512/0x640
[  274.092398][ T7725]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  274.092450][ T7725]  should_failslab+0xc2/0x120
[  274.092486][ T7725]  __kmalloc_cache_noprof+0x6a/0x3e0
[  274.092535][ T7725]  ? snd_pcm_oss_change_params_locked+0x247/0x3a30
[  274.092586][ T7725]  snd_pcm_oss_change_params_locked+0x247/0x3a30
[  274.092652][ T7725]  ? __might_resched+0x5/0x5e0
[  274.092693][ T7725]  ? trace_contention_end+0xdd/0x130
[  274.092739][ T7725]  ? __mutex_lock+0x1ca/0xb90
[  274.092773][ T7725]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  274.092819][ T7725]  ? __pfx___mutex_lock+0x10/0x10
[  274.092866][ T7725]  ? find_held_lock+0x2b/0x80
[  274.092904][ T7725]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  274.092955][ T7725]  snd_pcm_oss_ioctl+0x31aa/0x37a0
[  274.092995][ T7725]  ? find_held_lock+0x2b/0x80
[  274.093026][ T7725]  ? hook_file_ioctl_common+0x145/0x410
[  274.093064][ T7725]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  274.093110][ T7725]  ? __fget_files+0x20e/0x3c0
[  274.093162][ T7725]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  274.093206][ T7725]  __x64_sys_ioctl+0x18b/0x210
[  274.093249][ T7725]  do_syscall_64+0xcd/0x490
[  274.093285][ T7725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.093316][ T7725] RIP: 0033:0x7f0e0278e929
[  274.093342][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.093372][ T7725] RSP: 002b:00007f0e035c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  274.093402][ T7725] RAX: ffffffffffffffda RBX: 00007f0e029b5fa0 RCX: 00007f0e0278e929
[  274.093432][ T7725] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000005
[  274.093450][ T7725] RBP: 00007f0e02810b39 R08: 0000000000000000 R09: 0000000000000000
[  274.093469][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.093487][ T7725] R13: 0000000000000000 R14: 00007f0e029b5fa0 R15: 00007fff0ee74998
[  274.093527][ T7725]  </TASK>
[  276.421148][ T7745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[  277.957140][ T7746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  278.592512][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[  280.606499][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'.
[  280.615752][ T7770] nbd: must specify a device to reconfigure
[  281.240626][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'.
[  281.279999][ T7777] nbd: must specify a device to reconfigure
[  283.786579][ T7806] ptp ptp0: delete virtual clock ptp3
[  283.824021][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.361'.
[  283.873930][ T7811] nbd: must specify a device to reconfigure
[  283.881368][ T7806] 
[  283.883746][ T7806] ============================================
[  283.889941][ T7806] WARNING: possible recursive locking detected
[  283.896121][ T7806] 6.15.0-syzkaller-13743-g8630c59e9936 #0 Not tainted
[  283.902915][ T7806] --------------------------------------------
[  283.909118][ T7806] syz.1.360/7806 is trying to acquire lock:
[  283.915029][ T7806] ffff88807cbf6868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_clock_unregister+0x21/0x250
[  283.925012][ T7806] 
[  283.925012][ T7806] but task is already holding lock:
[  283.932473][ T7806] ffff88802fa0e868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0
[  283.942020][ T7806] 
[  283.942020][ T7806] other info that might help us debug this:
[  283.950108][ T7806]  Possible unsafe locking scenario:
[  283.950108][ T7806] 
[  283.957758][ T7806]        CPU0
[  283.961095][ T7806]        ----
[  283.964391][ T7806]   lock(&ptp->n_vclocks_mux);
[  283.969183][ T7806]   lock(&ptp->n_vclocks_mux);
[  283.973976][ T7806] 
[  283.973976][ T7806]  *** DEADLOCK ***
[  283.973976][ T7806] 
[  283.982136][ T7806]  May be due to missing lock nesting notation
[  283.982136][ T7806] 
[  283.990472][ T7806] 5 locks held by syz.1.360/7806:
[  283.995514][ T7806]  #0: ffff888027fb4638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  284.004637][ T7806]  #1: ffff888035e44428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  284.013696][ T7806]  #2: ffff888032f2b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  284.023511][ T7806]  #3: ffff888030065c38 (kn->active#74){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  284.033592][ T7806]  #4: ffff88802fa0e868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0
[  284.043575][ T7806] 
[  284.043575][ T7806] stack backtrace:
[  284.049480][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.1.360 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) 
[  284.049514][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  284.049531][ T7806] Call Trace:
[  284.049541][ T7806]  <TASK>
[  284.049551][ T7806]  dump_stack_lvl+0x116/0x1f0
[  284.049580][ T7806]  print_deadlock_bug+0x1e9/0x240
[  284.049629][ T7806]  __lock_acquire+0x1106/0x1c90
[  284.049671][ T7806]  lock_acquire+0x179/0x350
[  284.049706][ T7806]  ? ptp_clock_unregister+0x21/0x250
[  284.049749][ T7806]  ? __pfx___might_resched+0x10/0x10
[  284.049777][ T7806]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  284.049807][ T7806]  __mutex_lock+0x199/0xb90
[  284.049832][ T7806]  ? ptp_clock_unregister+0x21/0x250
[  284.049867][ T7806]  ? prepare_to_wait_event+0xd0/0x6a0
[  284.049899][ T7806]  ? ptp_clock_unregister+0x21/0x250
[  284.049935][ T7806]  ? __pfx___mutex_lock+0x10/0x10
[  284.049959][ T7806]  ? synchronize_rcu_expedited+0x3b9/0x460
[  284.050006][ T7806]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  284.050047][ T7806]  ? ptp_clock_unregister+0x21/0x250
[  284.050080][ T7806]  ptp_clock_unregister+0x21/0x250
[  284.050115][ T7806]  ptp_vclock_unregister+0x11a/0x160
[  284.050157][ T7806]  unregister_vclock+0x108/0x1a0
[  284.050195][ T7806]  ? __pfx_unregister_vclock+0x10/0x10
[  284.050232][ T7806]  device_for_each_child_reverse+0x133/0x1a0
[  284.050272][ T7806]  ? __pfx_device_for_each_child_reverse+0x10/0x10
[  284.050310][ T7806]  ? __pfx_kstrtouint+0x10/0x10
[  284.050348][ T7806]  n_vclocks_store+0x4b6/0x6d0
[  284.050388][ T7806]  ? __pfx_n_vclocks_store+0x10/0x10
[  284.050426][ T7806]  ? find_held_lock+0x2b/0x80
[  284.050454][ T7806]  ? __pfx_n_vclocks_store+0x10/0x10
[  284.050491][ T7806]  dev_attr_store+0x58/0x80
[  284.050517][ T7806]  ? __pfx_dev_attr_store+0x10/0x10
[  284.050544][ T7806]  sysfs_kf_write+0xef/0x150
[  284.050578][ T7806]  kernfs_fop_write_iter+0x351/0x510
[  284.050606][ T7806]  ? __pfx_sysfs_kf_write+0x10/0x10
[  284.050640][ T7806]  vfs_write+0x6c7/0x1150
[  284.050680][ T7806]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  284.050710][ T7806]  ? __pfx___mutex_lock+0x10/0x10
[  284.050736][ T7806]  ? __pfx_vfs_write+0x10/0x10
[  284.050792][ T7806]  ksys_write+0x12a/0x250
[  284.050830][ T7806]  ? __pfx_ksys_write+0x10/0x10
[  284.050886][ T7806]  do_syscall_64+0xcd/0x490
[  284.050912][ T7806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.050938][ T7806] RIP: 0033:0x7f9ddd78e929
[  284.050959][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.050984][ T7806] RSP: 002b:00007f9ddb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  284.051008][ T7806] RAX: ffffffffffffffda RBX: 00007f9ddd9b5fa0 RCX: 00007f9ddd78e929
[  284.051025][ T7806] RDX: 0000000000080001 RSI: 00002000000003c0 RDI: 0000000000000006
[  284.051040][ T7806] RBP: 00007f9ddd810b39 R08: 0000000000000000 R09: 0000000000000000
[  284.051056][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.051071][ T7806] R13: 0000000000000000 R14: 00007f9ddd9b5fa0 R15: 00007ffee196fed8
[  284.051095][ T7806]  </TASK>
[  284.353899][    C0] vkms_vblank_simulate: vblank timer overrun
[  284.404950][ T7807] ima: policy update failed
[  284.411854][   T30] audit: type=1802 audit(6044310752.143:3): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.360" res=0 errno=0
[  284.425445][ T7806] ptp ptp0: delete virtual clock ptp2
[  284.439578][ T7806] ptp ptp0: delete virtual clock ptp1
[  284.448700][ T7806] ptp ptp0: only physical clock in use now