last executing test programs: 2m44.19931728s ago: executing program 3 (id=652): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D3\x00', 0x282e00, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x401, 0x6, 0x80000000000002, 0x10, 0x2, 0x7ffd) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4b}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300e9ffffff0000a3677347f9", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0x75, 0x6) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) nanosleep$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x87f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\f\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\x06\"}$', 0x5) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x8000004000007c) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(0xffffffffffffffff, 0x5420, &(0x7f0000000300)="613243f707f21bc86b7c3454bf38ff428e1a6f24bcde52c6a6fd2db23cc2281efb60440be11cb493f2e286174fc9646e6909418962b8f1481afec16d145b146f761dffa32006327d0c9affd8a02ec0e566ed4b78c782545247be42b935fbd5e3b89c2a910e27f08a7b2abbef296a46772d3cae2ae1b44e40ac4dfb39a566244f4d844edd7c8eb29550752f48572b0796fe170e98") 2m43.613374642s ago: executing program 3 (id=653): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/tx_queue_len\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000080)=@enable_stats={0x9}, 0x800) 2m43.339177879s ago: executing program 3 (id=654): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="c4502d0000000000001fce", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250400000008000900", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat$auto(r1, &(0x7f0000002700)={0x6, 0x0, 0xfff, 0x600000, 0x0, 0xee00, 0x0, 0xfffffffffffffffe, 0x3, 0x77, 0x4, 0x44, 0x2a8, 0x2, 0x6f, 0x3, 0x100}) r6 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r6, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(r4, &(0x7f0000004ec0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004e80)={&(0x7f00000027c0)={0x2688, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@typed={0x4, 0x147}, @nested={0x84, 0x1, 0x0, 0x1, [@generic, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@mcast2}, @generic="20a5e15dff66e55bb977bb1b6f1d84639cfb93af776ffbcbbeaac97825c359194e3f2733660b5bfc4d9866654507fd00532618fa9331dab5a0c808d3e61ca945f3276e03f55cfe9718aa72ddb841daa707bf68ed1f0cb39051a76b2746b6590c8c57a48ca1a21d7e693140e3"]}]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x25d8, 0x131, 0x0, 0x1, [@NL80211_ATTR_CQM={0x11bf, 0x5e, 0x0, 0x1, [@generic="1f34a1020630fd9fe35a21aaefffb16161f36c382a953e54092ac5f5a53ddfa5da9961c3a30b39abe33e5cb44dcfcf3fec6d22fb81581b52fb495a11ee8117ed86932a532c0d4e4cabdbcaa5a81aaa03f27b", @generic="7e7dfc7860f7d7457935da9683fb13d9d091244adf6e6480c300b4d279122b248553763ec9d62b44a5d73ae32814d93664bba56b07", @nested={0x133, 0x5c, 0x0, 0x1, [@nested={0x4, 0x5e}, @typed={0x8, 0x6a, 0x0, 0x0, @fd}, @nested={0x4, 0x56}, @generic="2d5a2325ebd79b8f4f28bf0de8037654ac27642fee6db46c9a3482b0e7b799986ef897ebc976d342a13b9155cec7e2fc23a8a8dab3696dcd0c2a8cc231e4adb79847528b717ba029252be2e957a044dcfc323d5329613311b531fe1dfcc6ac6cc45746eee23509b63425ffe1f11ebf884880ab6a11f2aefbf4ad98be3e718b34da5581e4b8289c8f5d86809122675b7f2151f280fe79ac50eabe40e70ca6aec41cf2b74f3cf54617ba124e845781e09b788a53f1f978cceba24e81a21704585035d12b34", @nested={0x4, 0xef}, @nested={0x4, 0x3b}, @generic="ac68191aefa980843334cb19d36c13226d17421c858caa2cb9985eff11dcbae6fe5eabc84c0b5cf39707efe88f7e5c655400672507c630b7a87dd01aaab2f8", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@private1}]}, @generic="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"]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6}, @NL80211_ATTR_TX_RATES={0x13fc, 0x5a, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd}, @generic="f3064f854a27b688ad1a345944ef73dc3f90cae637d50b1b89f335ec8f86d2f2f12ce31d5403295882aa501046e3b3af209143b5bf463ef57ac6f5102e17dee0892ec60aafe22e0fc83dcba9eb474108788dd228fea870e6b555fa4482ea517d010692", @typed={0x1004, 0x45, 0x0, 0x0, @binary="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"}, @generic="d6f34682a97e3142d6e7f01b06b21b1d461af290eb8edf049711b6c5c573218e996059df92ba1081b6806e9ffa6748c27592c0e398c19a0f5895a3fc0fdacaf6b74d6824c84ba2186f0326b64aafee7474fb6d9b0b1bbb7798ee12fe246839b914a734a7643222a8476926", @nested={0x242, 0x104, 0x0, 0x1, [@nested={0x4, 0x3ffd}, @generic="aa1772400331e300a398e1c1f24a59163f36e839d66fcc64710cacf08a66d821a9781719796b1fc985846df374746c0e6501cc1785dac7ef6958ff8cf61b58de9c6e58e4efc668a0a1fdbe5351dfa7ede92ba49e104415be30ed212504167b10faf689e9b4c4f5b1d246ce2495156e01d97f288ada26a618af1fe2ba1aec4379413e592c76207cd9aadbfd1c3993529edd8d620e3ceece50610f15fe28b28532307837", @typed={0x4, 0xaa}, @generic="d24261eaf85808739535859fc50e5c60e21c48c246d9a86c03e2f55e557bff2bacff97728182543f946f331d823bdb6faedd0d289047c9ddc70ef775e3b82618c32790b33dda88896ae9", @nested={0x4, 0x131}, @generic="8d791922fdc2d80e71e4e328433f692316fd063575e155e1d02be3117bd03347bf50719a5d45a506ad860c809df5b33df369c452d956ef6cb402db751272fff10a23535508917252c5914faa288e4a03692b17297029385b02b8a5a95c20f9db29", @generic="2f563d40e74a3958c133f18106a16705b22c6594f93d1f8986e6aea926262bac2b8026c7289fee4d7857c0ab1413a137d7dc0de2e403c596030fa165ec2b2d812ce64110d0837ce048690d2ff0b6a76d841c07bb5e5d4c06aafa0957ba244c08292168931d4c27ef447e5f49659edc87bdd6139d1a9e249ca09a5987001eab6240738065a3d39cb2d5623d21ed892ff43add9931c68b1b859cfd1b2acd9883f53684b8deaf339959f91ee06e8555c4bc3b6cc5ffc4bb94d19db83bd6bf2119c1ad0dd067e0f5941cca907767ef23829342a4afcc1b8a13db29ee8d64ff12214988799cd4"]}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x56, 0x0, 0x0, @uid=r5}, @generic="2b3e95f9c4e1ed7cad3a9bc84ddfba3197e394565a537fb7261a9e56b2090a68c0433e0c1ffa1cbee324f93133a1c992a6df5519a000a1f60c41c6fd01d5ccdbd0c4", @generic="5d71453de91132276ff3415df4305cebdd90703c5df9929e6eddd2dca9ac05cb3f8058649b6493d88d265a3a4d6bc42cbf934e63369656685d76aed738896f1a333a36916d70d53feea120ddd8e1b7286930a4854121ce2e45226d6c2934a2af70e317ed6c9dff739bc755be", @nested={0x1a, 0x129, 0x0, 0x1, [@generic="6f0c2adb179d15036d0c20b774c53aeacea094b027af"]}]}]}, @NL80211_ATTR_PMK={0x10, 0xfe, "4dca520da9219180fafa8a7e"}]}, 0x2688}}, 0x0) process_vm_readv$auto(r3, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004f40), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000005040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040025bd7000fbdbdf25130000000500130007000000160002002f6465762f6e766d652d6661627269637300000008001c00", @ANYRES32=r3, @ANYBLOB="08170c00b90400000500290001002167"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x10) 2m42.868543786s ago: executing program 3 (id=656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x415b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, 0x0, 0x800) mmap$auto(0x20000000000000, 0x3, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x14800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0) mmap$auto(0x3, 0x402000e, 0x1, 0x12, r0, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) read$auto(r3, 0x0, 0x5) write$auto(0x3, 0x0, 0xffd8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$auto(r5, 0x0, 0x0) mmap$auto(0x935, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) 2m40.287468933s ago: executing program 3 (id=663): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r0, 0x80045438, r0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r2, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) rseq$auto(0x0, 0xfffefff3, 0x400, 0x9) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) msgctl$auto(0x3, 0xb7, &(0x7f0000000500)={{0x4, 0x0, 0x0, 0x3, 0x418, 0xf, 0x2}, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x8, 0x9, 0x967, 0xc, 0xffffffffffffffff, 0x6, 0x4, 0x11d0, 0x8, @raw=0x5, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_STAT(0x3ff, 0x2, &(0x7f0000000280)={{0x9, 0xee01, 0xee01, 0x4, 0x5, 0x7f, 0x3}, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x1, 0x496, 0xd, 0x100, 0x7, 0x80000001, 0x5, 0xff00, 0x9, @inferred=0x0, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x1, r4, r5, 0x10001, 0xfffffff7, 0x5, 0x6}, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x0, 0x5, 0x9, 0x3, 0x8001, 0x1, 0xf72, 0x8, @inferred=r6, @raw=0x3}) socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) listen$auto(0x3, 0x81) shutdown$auto(0x200000003, 0x2) getresuid$auto(0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffc) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)=ANY=[@ANYBLOB="c0030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08fffd04ec1e09010400e0800400898008009700", @ANYRES32=0x0, @ANYBLOB="080053000a010100040097800400c880970035803e005002c992c6c4bc72f0c7b607cf5d24b21525647d081e9eaeb73abad9b0c3a035503deae0d1d1aa3b274a9f9bd80c74d8d1bcfeb98c904b32ba7ba740d4bcd5db502c0e549e1cf3cb28335b08dca1c7c9c95a1bbe9b20d004967f9393128beb078be9f7fc059040065e9316e075aa0b81176b4505a9aab0d2671a26f4e817abc2d4c0f9664c77f78be4235da507040060800008004a00", @ANYRES32=r7, @ANYBLOB="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"], 0x3c0}, 0x1, 0x0, 0x0, 0x840}, 0x800) unshare$auto(0x40000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r8, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="230027bd7000fedbdf25090000000c0003806c7c6531050001800300000004003861", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) timerfd_create$auto(0x6b, 0x7fff) 2m39.249684206s ago: executing program 3 (id=667): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x415b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, 0x0, 0x800) mmap$auto(0x20000000000000, 0x3, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x14800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0) mmap$auto(0x3, 0x402000e, 0x1, 0x12, r0, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) read$auto(r3, 0x0, 0x5) write$auto(0x3, 0x0, 0xffd8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$auto(r5, 0x0, 0x0) mmap$auto(0x935, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) 2m33.304303071s ago: executing program 1 (id=688): memfd_create$auto(0x0, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vt/parameters/default_grn\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/space\x00', 0x149100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000b40)=""/4096, 0x1000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4c041) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0xfffffe01, 0x22, 0x940, 0x1ffdc, 0x3, 0x40, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x80, 0x1, 0x5, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mlock$auto(0x10, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) 2m32.81982162s ago: executing program 1 (id=691): socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x18, 0x7, &(0x7f0000000180)=@hci={0x1f, 0xdd86, 0x7}, 0x22) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/orangefs/cache_timeout_msecs\x00', 0xb02, 0x0) socket(0x2, 0x1, 0x6) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x1a, 0x8000) setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) r2 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000000)=0x3) getsockopt$auto_SO_BINDTODEVICE(r1, 0x8, 0x19, &(0x7f0000000040)='(+/,]&\x00', &(0x7f0000000080)=0xe0a) sendfile$auto(r2, r1, 0x0, 0x1) 2m32.680301351s ago: executing program 1 (id=693): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) mmap$auto(0x0, 0xa, 0x8000000000de, 0x9b72, 0x5, 0xbd) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) close_range$auto(0x2, 0x8, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1}, 0x6a) write$auto(0x3, 0x0, 0xfdef) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x10d47e, 0x72) socket(0x6, 0x2, 0x2) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) ioctl$auto(r3, 0x4611, r3) 2m31.6258884s ago: executing program 1 (id=696): memfd_create$auto(0x0, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vt/parameters/default_grn\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/space\x00', 0x149100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000b40)=""/4096, 0x1000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0xfffffe01, 0x22, 0x940, 0x1ffdc, 0x3, 0x40, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x1, 0xffffffff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x80, 0x1, 0x5, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mlock$auto(0x10, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) 2m31.025865244s ago: executing program 1 (id=702): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/mpls/conf/veth1_to_team/input\x00', 0x501242, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) readahead$auto(r0, 0x4, 0x4) socket(0x10, 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x801, 0x100) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x1, 0xe5e) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4004050) (async, rerun: 64) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async, rerun: 64) write$auto(0x3, 0x0, 0x100082) (async, rerun: 64) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x4, 0x5, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) (async, rerun: 64) remap_file_pages$auto(0x1, 0x1000, 0xfffffffffffffffe, 0x3, 0x4) mbind$auto(0xfffffffffbffffff, 0x1000c, 0xff, 0x0, 0x4, 0x2) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x49, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="5d5d7c04c8abbc522c915e82c8079443b9684000c2c4268f9fd4bced88adff00b93a1a5cfc02282b3468506bed0a07f8747855667a272b8f23935e84c4c452b18d7d0233faf24dc164489be8b64b5e", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5e9c, 0x400000000000, 0x7, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0xfe3, 0x1, 0x800, 0x7f, 0x800, 0x1, 0x101, 0xb288}, 0x0) (async) mmap$auto(0x3, 0x400205, 0xdf, 0x9b72, 0x2, 0xa000) (async) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) 2m30.796286929s ago: executing program 1 (id=703): mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x56b42, 0x0) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) (async, rerun: 64) read$auto(0x3, 0x0, 0xfffffd2b) (async) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/admmidi2\x00', 0x52f841, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0x2, 0x16) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) (rerun: 64) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) prctl$auto(0x2, 0x6, 0x0, 0xffffffff, 0x9) (async) wait4$auto(0xfffffffffffffffb, 0x0, 0x2, 0xfffffffffffffffc) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff2) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r5, 0x4008af24, r3) 2m24.187012813s ago: executing program 32 (id=667): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x415b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, 0x0, 0x800) mmap$auto(0x20000000000000, 0x3, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x14800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0) mmap$auto(0x3, 0x402000e, 0x1, 0x12, r0, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) read$auto(r3, 0x0, 0x5) write$auto(0x3, 0x0, 0xffd8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$auto(r5, 0x0, 0x0) mmap$auto(0x935, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) 2m15.685643492s ago: executing program 33 (id=703): mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x56b42, 0x0) write$auto(0x3, 0x0, 0x100082) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) (async, rerun: 64) read$auto(0x3, 0x0, 0xfffffd2b) (async) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/admmidi2\x00', 0x52f841, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0x2, 0x16) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) (rerun: 64) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) prctl$auto(0x2, 0x6, 0x0, 0xffffffff, 0x9) (async) wait4$auto(0xfffffffffffffffb, 0x0, 0x2, 0xfffffffffffffffc) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff2) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r5, 0x4008af24, r3) 2m7.528777266s ago: executing program 4 (id=771): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(&(0x7f0000000180)={0x2, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3c, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x4000000000df, 0xd8, 0xffffffffffffffff, 0x300000000000) r3 = socket(0xa, 0x801, 0x84) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) r5 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x80044944, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r5) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x8000000015f4da0a, 0x3, 0xfff, 0x4, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)) 2m6.220447485s ago: executing program 4 (id=773): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, 0x0) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x67c1, 0x7ff) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x67c1, 0x7fc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x10, 0x2, 0x4) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x8200, 0x0) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2m3.156586823s ago: executing program 4 (id=782): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/last_change_ms\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x8000) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x8, 0x100009}, 0x283) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) lstat$auto(0x0, 0x0) ioctl$auto(r1, 0x4, r2) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000240)='!\x00', {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) sendfile$auto(0x1, 0x3, 0x0, 0x74c) setreuid$auto(0x9, 0x1) ioctl$auto_FITHAW(r0, 0xc0045878, 0x9) 2m1.941624481s ago: executing program 4 (id=789): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0xc, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) clone$auto(0x9, 0x2, &(0x7f0000000180)=0xff, &(0x7f0000000240)=0x81, 0x80000001) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0xa0, 0x6, 0x2a00, 0x17, 0xfff, 0x80000, 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x61) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2800f, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r4, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)={0x18, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getpid() ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000080)={"584ba48d76ece054f3e2a460a319987cad0ceefc988c8c706bc3d0485fde20b8", 0xb7f, 0x0, 0xfffffff7, 0x7, 0x5a9, 0xffffffffffffffff}) r5 = wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$auto(0x3e, 0x0, r5, 0x1, 0x0) r6 = getegid() setregid$auto(r6, r6) shmctl$auto_IPC_INFO(0x400f, 0x3, 0x0) fstat$auto(r2, 0x0) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f00000001c0)={"7c72613c8e229496fdcc27deb9b6a3e52c823daf598660cb6a15c0c7f46c8405", 0x2, 0x1, 0xa, 0x8, 0x4, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000540)={0x884000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, &(0x7f0000000400)=""/229, &(0x7f0000000500), 0x0, {r2}}, 0x58) sendmsg$auto_TIPC_NL_LINK_SET(r2, 0x0, 0x4000) 2m0.59719852s ago: executing program 4 (id=793): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop9\x00', 0x0, 0x0) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) (async) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x2, 0x100, 0x0) (async) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x2, 0x100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x8) (async) brk$auto(0x8) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x44002, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x44002, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) (async) fchdir$auto(r3) 1m59.232757087s ago: executing program 4 (id=795): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto_nvmf_dev_fops_fabrics(r1, &(0x7f0000000680)=""/4096, 0x1000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x8983, 0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(0xffffffffffffffff, 0x2, 0x44, &(0x7f0000000180)='\x00', 0x7) 1m44.079246901s ago: executing program 34 (id=795): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto_nvmf_dev_fops_fabrics(r1, &(0x7f0000000680)=""/4096, 0x1000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x8983, 0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(0xffffffffffffffff, 0x2, 0x44, &(0x7f0000000180)='\x00', 0x7) 1m32.324758401s ago: executing program 0 (id=877): r0 = socket(0x2, 0x3, 0xa) unshare$auto(0x20000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') setns(r1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) read$auto_proc_pid_cmdline_ops_base(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x10002, 0xe983, 0x800000003fffffff, 0x12, r2, 0x7) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioperm$auto(0x400, 0x7f, 0xd) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x27, 0x6) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x0, 0x0) ioctl$auto(r4, 0xc0445624, r4) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 1m31.205532511s ago: executing program 0 (id=879): r0 = socket(0x25, 0x1, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x14, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000500), 0x791a81, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000540)=0x1) mmap$auto(0xfffffffffffff5b2, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) shutdown$auto(r0, 0x2) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0xffffffff80503d0a, 0x0) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0x80000) r7 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)=@info={r6, 0xff}, 0x9) sendmmsg$auto(r7, &(0x7f0000000280)={{&(0x7f0000000040)="c0f759e6a7bd57e7ca83beffde80258af4f3cb322e1dcdc5704939d6d22f0b3daac2170dec0e673b975aa5a0b0bef74271ff09fbc8f96bf4984463990e4ee8cb9e8730e0f123639211eba39bee", 0x8e, &(0x7f0000000240)={&(0x7f0000000180)="b471d7c44ca4b5b133a4a3ef1d50135c2ec039d61feff2332c52f9031bb7082d5603d47eb742bf37bd94b2187225e275aae551900a430874a77f2203d1f2d3b676fc06a7a22025eeff8ea55c580b632a0438", 0x7}, 0x5, &(0x7f0000000400)="44d24e0aee2e5a30b2e3723b4d2a6895d2455e39add6cbf3182cba7f01bbdacad6b185ab215f8a95bc38e87fb6b0801f9b59df8c45e118e10d186f9e57ec4a9177194041bd1cae34b4b889fcc6d7053e98060164731356b172891360172d328364a000385ea8af8be883a06f101d5409fcfd0f186bc885726815abe5371f39cd4451f66ae9fa1db31ecf7376b0cba8881dd9c6c53e87542ef391f4ca2f165595e1a13d741bea5af0c424f0c8c0ae98ecbe294db0501e87de7a84f3fe57ec295d6cc5cdfc4236b52300", 0xfffffffffffffffb, 0xc735}, 0x6}, 0xd, 0x632) madvise$auto(0x0, 0x20200, 0x15) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4770d8018", @ANYRESDEC, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0xc0c0) 1m29.873269235s ago: executing program 0 (id=883): mmap$auto(0xa, 0x40009, 0x20000000000df, 0x9b72, 0xffffffffffffffff, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x15, 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x6c0902, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write$auto(r0, 0x0, 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x8, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x2, 0x80000001, 0x10007, 0xb, 0x4, 0x0, 0xa, 0x21ffe, 0x201, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1fa, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008000000, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, 0x0, 0xfffffffffffff801, 0x0, 0xc, 0x0, 0xfffffffffffffffc]}, 0x200, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd0b, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x0, 0xfffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x501080, 0x0) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) 1m28.875668725s ago: executing program 0 (id=886): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x415b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, 0x0, 0x800) mmap$auto(0x20000000000000, 0x3, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x14800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, 0x0) mmap$auto(0x3, 0x402000e, 0x1, 0x12, r0, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x4) 1m28.401100107s ago: executing program 0 (id=887): r0 = socket(0x25, 0x1, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x14, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000500), 0x711240, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000540)=0x1) mmap$auto(0xfffffffffffff5b2, 0x1, 0xdf, 0xeb0, 0x401, 0x80000008000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) shutdown$auto(r0, 0x5) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x60843, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40043d04, 0x0) ioctl$auto(0x3, 0x3, r3) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0x80000) r7 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)=@info={r6, 0xff}, 0x9) sendmmsg$auto(r3, &(0x7f0000000280)={{&(0x7f0000000040)="c0f759e6a7bd57e7ca83beffde80258af4f3cb322e1dcdc5704939d6d22f0b3daac2170dec0e673b975aa5a0b0bef74271ff09fbc8f96bf4984463990e4ee8cb9e8730e0f123639211eba39bee", 0x8e, &(0x7f0000000240)={&(0x7f0000000680)="b471d7c44ca4b5b133a4a3ef1d50135c2ec039d61feff2332c52f9031bb7082d5603d47eb742bf37bd94b2187225e275aae551900a430874a77f2203d1f2d3b676fc06a7a22025eeff8ea55c580b632a0438", 0x7}, 0x5, &(0x7f0000000700)="44d24e0aee2e5a30b2e3723b4d2a6895d2455e39add6cbf3082cba7f01bbdacad6b185ab215f8a95bc38e87fb6b0801f9b59ec4a3aab7df884523ea3e59177194041bd1cae34b4b889fcc6d7053e98060164731356b172891360172d328364a000385ea8af8be883a06f101d5409fcfd0f186bc885726815abe5371f39cd4451f66ae9fa1db31ecf7376b0cba8881dd9c6c53e87542ef391f4ca2f165595e1a13d741bea5af0c8c0ae98ecbe294db0501e87de7a00f3fe57ec295d6cc5cd8b31c515c1e4bb895982cd23bb78c6aa2f614524c49f8c", 0xfffffffffffffffb, 0x4}, 0x6}, 0x40f, 0x632) madvise$auto(0x0, 0x20200, 0x15) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4770d8018", @ANYRESDEC, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0xc0c0) 1m27.11867558s ago: executing program 0 (id=890): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/options\x00', 0x0, 0x0) write$auto(0xca, &(0x7f0000000300)='\x00', 0x10) read$auto(r1, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) mmap$auto(0x6, 0x400008, 0x6, 0x800009b72, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) mmap$auto(0x1, 0x400009, 0xdf, 0x200000009b72, 0xffffffffffffffff, 0xffffffffffffffff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffffbd}, 0x7, 0x2, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1ff, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9aa, 0x6) mmap$auto(0x9, 0x2, 0x4000000000df, 0x40eb5, 0x401, 0x8000) madvise$auto(0x1, 0xc, 0xa) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xeb, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x188}, 0x4}, 0xfffffff3, 0x6) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) 1m11.903640004s ago: executing program 35 (id=890): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket(0x2, 0x3, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/options\x00', 0x0, 0x0) write$auto(0xca, &(0x7f0000000300)='\x00', 0x10) read$auto(r1, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) mmap$auto(0x6, 0x400008, 0x6, 0x800009b72, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) mmap$auto(0x1, 0x400009, 0xdf, 0x200000009b72, 0xffffffffffffffff, 0xffffffffffffffff) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffffbd}, 0x7, 0x2, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1ff, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x9aa, 0x6) mmap$auto(0x9, 0x2, 0x4000000000df, 0x40eb5, 0x401, 0x8000) madvise$auto(0x1, 0xc, 0xa) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xeb, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x188}, 0x4}, 0xfffffff3, 0x6) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) 58.608650753s ago: executing program 7 (id=939): unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x17d0) (async, rerun: 32) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2, 0x0) (async) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/55, 0x37) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd$auto(0x2200000c) (async) socket(0x2, 0x3, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1dc0c301d2cee9ef7d21b10ce7211e6") (async) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) (async, rerun: 32) io_uring_setup$auto(0x1406, 0x0) (rerun: 32) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) (rerun: 64) read$auto_rb_simple_fops_trace(r5, &(0x7f0000000480)=""/147, 0x93) (async) setsockopt$auto_SO_DETACH_FILTER(r2, 0x7, 0x1b, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8000) (async) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r4) (async) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) ioctl$auto(0x3, 0x89e0, 0x91) (async, rerun: 32) ioctl$auto(0x3, 0x89e1, 0x91) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 43.523241456s ago: executing program 36 (id=939): unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x17d0) (async, rerun: 32) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2, 0x0) (async) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/55, 0x37) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd$auto(0x2200000c) (async) socket(0x2, 0x3, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1dc0c301d2cee9ef7d21b10ce7211e6") (async) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) (async, rerun: 32) io_uring_setup$auto(0x1406, 0x0) (rerun: 32) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) (rerun: 64) read$auto_rb_simple_fops_trace(r5, &(0x7f0000000480)=""/147, 0x93) (async) setsockopt$auto_SO_DETACH_FILTER(r2, 0x7, 0x1b, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8000) (async) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r4) (async) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) ioctl$auto(0x3, 0x89e0, 0x91) (async, rerun: 32) ioctl$auto(0x3, 0x89e1, 0x91) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 27.063916545s ago: executing program 2 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_NEW_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf251700000008000300", @ANYBLOB="0400cc0014000201555a808bc121d23066632db2657923d0060010000900000004008700c90048015710807022c0c2cd9f60e8175e3680ed5587df9d76b000000000000000000f5b69f3ea1a016d426990350bd9bd6fd38262baa54b2fd072d0518f1b87ba41c9211073ce95300fdcb09ef9bfdbc4c00392752d5c8303340ff612b8e3d2f5cf10b3a862dfcc9adfd5e802094e05059ae0f14394d349e50d1d877e312778101dda890009b5ad2b9fbe354b0b978ce3ce274d23921d786e6d80eca4acbb55d3bbcd394cf2ff55dd9e9170f180dff39e6322f12f40f2f0d10a5fa46af15e1692059144ef"], 0x168}}, 0x4000041) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x76ef) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r6, 0x4, 0xf, r5, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r9, &(0x7f0000000100)='1', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd) ioctl$auto(0x3, 0xae41, r1) 19.600993608s ago: executing program 5 (id=1081): write$auto(0xffffffffffffffff, 0x0, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) r1 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r1, 0xc, &(0x7f0000000100)="cb53e2354ae3c05d36023e04c464") write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/space\x00', 0x149100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000b40)=""/4096, 0x1000) move_pages$auto(0x1, 0xf53, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3c, 0x0, 0x110) ioctl$auto(r0, 0x8, r2) statmount$auto(0x0, 0x0, 0x7, 0x281) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r4, @new_prog_fd, 0x2c}, 0x92) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mlock$auto(0x10, 0x10) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) 19.140775097s ago: executing program 5 (id=1082): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(0x0, 0x6041, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000080)={&(0x7f0000000040)="0e5165", 0x1}, 0x2, 0x0, 0x2, 0x0) clone3$auto(&(0x7f0000000100)={0x6, 0x7, 0x0, 0x5, 0xd, 0x80000000, 0x3ff, 0x8, 0x2, 0x2, 0x1}, 0x3) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x2e6100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r1, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) epoll_wait$auto(r2, 0x0, 0x9, 0x5) clock_settime$auto(0x0, 0x0) 17.525965958s ago: executing program 5 (id=1084): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_MADV_DODUMP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000600)="f6e3d49c5caffa30c2475ef2d688ab8838bdf7e28723a6bc013613c429619ef04401ebf3025cd85c5a0d8fc45b55e012e98af13e54eec8ab0e9e8134c021a47dd2eb3b57eb795cb697ead278e07ae7ff57755f60d95b98c9f5c4fa1bd0766e02a3c25a9fc5e5bf578e4f42d04a8328a7f2f2f77ab2de728df08aa112e806880729d7cfb2f913d8c5b773e0ba208c38a98eb49ad9c917cc296d157c713b2bc90d88214ca373c0de990e11e109324751af35f3a303b100d5a862e14cef4f0525af9c7d9401131319552061e4e54e157ada49aaf557f3e0919ae42f92c38fd6bac89b89246cce188fc5a446c2fd7eaa1e991a66505e57db1e5555fb6167494f9c7da168c0fdd5bc663d1bc61ea6d6e2aa024a5759c8d317d6869f918c3cc8b1fac55dd700b3589cc8d3d987f8ea8411a2c939dfb122c16664e54704f4582797bac00df3e81bf63f0bc5ff4f9466dd7aad2ec6af6196db8b88d798b2b91dd424b30a5560e5992dd08fdf8075ad1f1eedcb0360386afa4a7339705169ca296c46a4c9915920e0ba5521bb846df117c2950cd1759a7d933576cea6303db3d9b0c08f02a33021a5b158a6670a86d529e7426e200686586fe0bd1db54e0df6c646d5e64c8f6d2cec9994beba8537df57da8cde851012361f546ad10a49bc93a869aba711da7d69ba1a13bdca17250b67a85afe786e81a6aa94cbeb0ec2e6c36a4c5f684682dda5df26678e85bbf81ec97e238e2a43ee17e882607ab240567fe04e076fbba085772454bdae87e3c7082e9e944f8a4b9cdf0b63b99062c48f09722eb6a63265938692ecbc4e2ee65740f64119eea2d4e61a716e5ea25aa78daaa27b09e5a3119b4cbd45d6bc4b1ef7a58fa680acebc74d436cbdd48d9015933ad780bddd10054b2c6c5723d0947ee12d257f4d598d54839875ce83002f5a06a1b2396613dfbdb1f2690d912c659102b5935498c0e6770391fb004a229b2b05a1a6a0564511e360261e549f14ac0590de414a6f7cd93f86e7dfca0c21af45274ac75e6294085ce0c530322c2f887e2977b334a25536c6745733d1e73c2ae09396479271678699bb251a6a7264fa20a3eff6b19d0f9d3926e057dffb10f16707e86ecea4d32ba8d7f02afb9bb69a13243ccef5c9e1b86695dc6b04e65793b6758b9704595cea147009ad23f27e35a9878d881d4c4fc099b5f2de6e0a11a42a48bf8a45dd97900b95e3ef2dd59cbe21c5348085250b30fb6b6420d41c5c5bddaa336d41a14509c3c8009c0985a767170e7dbfe8238716efb76eedd3bc081898723954bd3a0d66813c9e8fb4da48007fee6c7e2de694d98f1e48cef49569c5184a208ab707a216475d9cbfcc8f29a211d924c0936b5aa54a4d5b71928e106615cfba4a87ee390d335f66a134ecc7a61c363e0c5d6a340aa2da73fba601d360c631032874c4a4f866e81a098b784e47b0b6bd7d8901926e0df22b05d78828b207176a36cb98ea9e0a66127aeb9eb69628475fc2faad29e43edef64495cca6ff57a6cda6799ddbbc36d050f77ec2b16fb8c2dd33f102d1cb6cba1a9d790f01411b6df2dae88592d29d3f941946fc90cd9d49113dadd308da7e227d6550a887dd14a0a58288f4e1abb57390b8de83a34023e5d9d202902b91a6a2d464559ae86cf72181ac758e56ecaa76495aaa22ebef6fd9687b6eacdce24c9bad0dee5635f08e2991e8871389a675dbdc8ea4b0e188bcbddac70a63f369638bca5a935a203f364cb0a57e707b5ff076bab39462228e4842f53997e17c8d91cbd43524351b21acbee878737049f1bb9543818dd36664627bc457c034ab1cfbf8e41a53ad14794c525c5dd4ce1275cf341080a5ec342d43e559b5a647722924f145dc860d4dfbbd730fbd248fb585c4030f2970c5552429ce5a0248cfd3a1308e0322debbec91034f0a6fa559896b8792d58510de0922e50b63a477f822ccf87d96741456edf8d586b7e0e181feb0b26e4d780106439b02516e9b4c6aac484192de959f36165ab6af7cdd2c5e7b3f01b050f756d4cf92f385aa9ef9c54ff0a29c55b765bbc715372f63ad58053ce777308adbe38a1456b6c2aa160d93438511d9fbb1aa010cbe33ef2b1b684f6db7326427d3e03ac1384db40b99c905876b165e648d6f9c7aba018297b273a547fdc92f5a88106d359a10193c155e074ad91003633816f6987faf83067c5f624af27a98b7b0aa7d5025537112f0c82e745dc22ba5a30eb55349fcfd30e1a4df55a5888b9379c84db36a31fc7f6c275999586038feb62a43251b562df7cfc6edc73a8a4a978f9a2c039d48c0cd947137c8975eb297ac0d3891113950422e3d62962d330af78212cbec16403448b28d0a653d8fa9b2e245a8069a42cff7e8382726e31891895d5750a5ce1d93e36ee0fe2ae8fa1b4dc9065716ebffe65f92248c97ed2f37b59bb3f689645e496c118160dfba09f596da846a6829f65c45320aef3ff9f8a292da344e4230a30cc22dac94e1145906c87d6dc8a6b95acf6180281ff232e160b80eaf5a8bea9469fd055e4f879398773d48df455dc3c4a101c428e8adc0b5ed9108e9f87e553d8a4a10df53ccae7e44f24b0acbbc877204169060438d64d37cde390530449b8cf236c8c2206ce6705dc1b8aee46f60281a74f2dd714a55eda3b98c8991a888971b84b704720ac2326e65eb3caea64fefa51da16383ac98cc6e323d984265d4f79305e876af8bbb1e78e77e8f60c6aa894ff16d4143902a409fd223a89acc30699dd140b70bc856711bb3671844e2a81d270388c86a69b17acfa15ea70f79fbf7638bd78a47588f6ac6abcaf2a1ee5eea16294e9380119229576e97e1c7066a7a65f7919cb737808bd63731104aa9f8df1feaee8c28d4e2c4a9fe1f523d5b9a3e046e5a46770f95ce36171eca766fc319f717550a9b37ffc4235320d3f49b13866eb70f586c6dbf9ab19e3c0af6b6b14569a6b3604d0afe12a517d285cc030a3b7d9ddf96e8aea4c3380a4dd67feb461d24a5aa6d091d3616cbe6d125e47f80796530d3fa284b5b5951dbd0822211570b9d97e31a4f65845ae91f10688dd4f9c10295e5cfd7e16fc3711140f3eb8c62d22774a9c8cb541447b2f2b0cc43cbf8a709bb19c6da9cf0633f55fd66cdb6235d606c982d7f4553a008ab4e941be22a68ebbb74bf9002c763127bae963821b34b3992c83921748c9a6248be95dfb82e9333c8b758f8bda13bdb3ab340e8624839724e2fb8c29a4f1215348f81b519c68cc28ecaecb710cefe1273057668285b809d9792e7dd653fcc84d2cb1453dbce0c850998b6ea5540f55afed78b3b1d926fcba1c2fe976666622c8bd38b4c265abe0797524741616305db23859b2c855dd99dfec6ff891a8f047c46baa8626a7faf1a2904f9f59db6ae5414c51683a843217a2a58bca8e90048eb59c5c901774ee255ae7636e6fde3c84d342adb251446fdd793f6295c3bb4eca1ab17703787195509ef36c935b2c571086aa1953ba3f3121cfc998a113089941dcbde8e0f554d3ee118700a384178c206f3e7fd3b6bd1cf868c1ef86c28ce36954f14f1fc0d184651220878c5dd930482e1d81f5c8a417d84a109fbe923fe400efee24e0c18cbe50bb2063b81190b6bc67d4cd3635d37ee8f4b563556688a9d9f701a15f0641fbe0b7422da406dcf06784ec56c03b2c6e436d49c19c87c7f9863f2df9f91a698f7675c3d793618f23d995e9b1d3444067aa8f5237a1b23250d03fa75c2f6c7c46247f8443e0f1ee9c61b9a103018268377c770349f30f561d90174e8bab1972eb2d98982c5296883b1e72763bb7fb3bcb888090ec341e51088e01fbaf6df2f50c49bb72aded701feecf7ef82975c7da43dfab35d40e76bc89158da8f8614bc1c5942eff6c2d56c89db6fed4e019f6760ebd5c532bf70bc9c61e1165c75d1352cd4646b5bf6d9dcec3f48d642007d5fdf3fbafaead3cdd92445f732ad1bea54314b399d68e497d9863e950b65af0430752c51a4e08581d4ba1416141268b58ec622a9040ae6371ecc9d194e075336a4af5950d4ae434fcc08324e37e4a4243145f9adee2c95d669b85ad21632c801d9df0a4697140014852b077129df5037fad1c90873e2db8bea2237800871ddeb514862fadadf22a34fea6d99e7ae640ce632098060271ff571eabbd7d90024d74307fa539c88192c90caaf3cbab2b0e2da71c34fda515025a5eaebab65bae77c3c08edc262b6b3f967057a33b197e501db2dbf67fead53dd9d1a1ca61ef0132f57de97839bab9fabd6b5743435b74f78ee49b6994cfc18bd5385e9960cf1818a183304675a94b8318ec98eeb60477a8796b4e92ff1c41f85934b2cb099c7e9bfde664d47d3287914216da30974997505526e5744c2af18c7f996c008fe114dd4875d4caec8fc770f055562ec2e3f04604eea007b594c7320e2d18a142756402f66afc99ab6e916b8d4aac659b5653fe0cdbfebbd4cd2951920f1f184befd43ae6fe860145ea838431688c1a79b1d62410b1053d61cb41f8f735563bc5e53b116d2cb69dd1d79f09c740a4daeb77891ca703b6e569016be321ecd640dd7d8e7f5e85419b973556d744ab2eee52128b1ae419f50e606a0c6d1e22e211544e2b00b8552f5309b9ede483f771b918ed8a2aa5e09b7200561d5072e879c9c98f0360335a6d1c0a80f3dfecddc65095103d0b0dadccfbb91396cb9307bc07d6ef7a3f82cd3af9c8c31ab8b4e24a3074020dca5db38a93d3e95fee69dfcdd91587539dc653d431c76811fd5635b78d66474e383015cc2b809bfd654fb459e382f2ebc63408da5fb652c194c4528c8bdc143419560b1e967029b81ef3f123fd1bf64696f56fa108f9dd1536ad33408069726b3d1759192651f45df5710b3a20fafee5306f1646128856003eb98a6a39aa10378e35bcb78570ab24f5954cfdd64e07f7a6baa7b81056b912a445d263e8ded280fe1c6b25c8c9b4ee057968233f757fe1303f6a3992ac5284315bc50c708c3a8ee973e8ed35558ba935033fb4ef591b2b0e6b2585c54a91f8d65d1dec4574e49d21174f9f6ac11f935e2e9b887cbc438800db9c89f31724533d3beabae721553f87e26ec3aae4ae00f49a56bcac1f8534f348373bb44e9dd40d49c11311348a8ee28251cd78f198f3e725a4df284c8e6fefcb605c31d4dc1f1641d8931fe80a9b6521829bd97bf85b2ac9872d86285aa0220fbaef9bc907cafa35de31cb46b3469bcddad3ed33fb6984d01943d0718e4fb3a2fc2405b619755e5ac729fd04eb34ea1f1f2e0ba75f881e6bc22bacbf0e233df9325662f41206b24031b2892ca1f60482a9538ced801aa4a354eabfc8a31d67eca27c7bb34d492f6e05729ce14b9401e134a7ab6dfe4b8b66a1f0c265b75bec162a76cf0ce4857075a81a9066d237d202220afed6a6751ab3335ec9b2f363ebb658db269017e6d7f95d79ea9f375e7c1ad0aaea5d138171501dfc0f354c55e7dd11b1cd64c28294fc0c1fc599a9afead3d3b94c1a5bee46f5c39adca037fab23cff7dc809f568e0c4ec05643879996d8d985c15557ba7b21e0de079ff523a1e226c8c64ac96b1001d13c791982614fde58a5ec37518f624d9f3b757529a510cffa20cab5555e8cfca8796ba27bfb68fc97f27a4a1a38eb502a4aabceff0a178f2f97ed46e78e45c60f85e07b0e327794907c8c69cac310aa3743ece7f6348eb7423b25d6a02c6b7e7f3e5442233d034c105d8ce701142ca2a98267d9bc68bf32837572ff16e3d0505c0e", 0xc}, 0x8000000000000002, 0x11, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x10000007, 0x3, 0x2, 0x8, 0x3eb, 0x5, 0x9, 0x3000, 0x20000002, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x9, 0x7, 0x0, 0x0, 0x0, [0x0, 0x400000000, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x20008000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x4000, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x7fff]}, 0x7, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000008}, 0x8004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESDEC], 0x1ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000040)={0x0, 0x8d}, 0xfffffffffffffffd, 0x0, 0x7, 0xa505}, 0x800}, 0x400, 0x4004) r1 = socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x9c, 0x0, 0x1, @relative_fd=r1}, 0x96) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_getsetattr$auto(r4, &(0x7f00000001c0)={0x1, 0x10001, 0x0, 0x2dae}, &(0x7f0000000200)={0x1ff, 0x3, 0x2, 0xfffffffffffffffd}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mq_open$auto(&(0x7f0000000280)='\xc1\xe9\x19\xa3\x00', 0x7e, 0x40, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9", 0x1000}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x541200, 0x0) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) syz_clone(0xa08000, 0x0, 0xfffffffffffffd59, 0x0, 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 14.36007264s ago: executing program 5 (id=1087): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) read$auto(r0, 0x0, 0x20) 14.280800539s ago: executing program 2 (id=1088): membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1, 0x6) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0xfffffffb, 0x800) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0xfffffff5, 0x4) (async) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x65, 0xf, "e76f54d513eff140c9f47b8823dd3a4b8ebe48f0474258c540fd767c667bfad1b1bcce24d2cffc88578dbf08c44edc1f61a7544f9bb587458340465178f202d2ad4f40a554db425fe4e488ecdebfc557d824059f79e96bd035362b6e3cee077ac92739cbf4"}, 0x6) read$auto_lockdown_ops_lockdown(r0, &(0x7f0000000080)=""/7, 0x7) (async) setsockopt$auto_SO_MARK(r0, 0x7, 0x24, &(0x7f00000000c0)='\x00', 0x9) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0xa) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x5, 0xffff3836) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x14, 0x9) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1, 0x5) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0xa) recvmmsg$auto(r0, &(0x7f0000000380)={{&(0x7f0000000100)="460f47e96c64ae0a71ee889b17569056b9eb01b56fc7aef46ab181621822221eb4a733447ad3868c2ecafc04b884782f447bed6f7097a13bce0b5168f54188d5c63cf9d4a6c8e1758f66b1319d87edb82fcb38c22578be4d33dadc17cc2c29271a578686a8ae08e823474aa7f8077b25f368232d24cb1727f5412f77d74cbe3b91ff94c91cbab0c1cea8942198b894914c059a4cb319cf1c4a342d2de54efff7aa001142a8272ad2f8e76be9c93eff1675c8951e16784e1d4d05c214ecc761186f36d1471546ab5683f8acc4409ce7595b4ea0", 0x4, &(0x7f0000000300)={&(0x7f0000000200)="e784687cd4d6a44024e96746bebe5c568526e74c3e4d0cb86bd476ce1199c128f40dff87e6290fdfcdc193e1b07c7e3420b12beb53711957ed9dd38eccf4f7dc831c04a1d88bc5a8ac8617cb4f0593e13c71049c4daf678fc1e697a28e88ef3c39da283da8ef96e450dedf4bc00ade4e6d0e41c2967eb3cc2fe2957f1db4fab19e7dde4ce26ef74956cc67bb3a5f911995f63b60f410db75dc004d5d57c76f26e177b146ab2c13a940abd0c3f842d27d042a70e90e9182d20db8081f9830237ea81089f95d86c78dbd29ed655dda9225756f3e1440f5217d77bea3f9db8ec70c3db8c6c656a334d15a6cf397af", 0xa6}, 0x56, &(0x7f0000000340)="59a6c49d019f82fccc3ee43a7e6d1ffdec0035d966d0ef39b1", 0x8, 0xffffff07}, 0x2}, 0x401, 0x7, &(0x7f00000003c0)={0x18, 0x8}) ioctl$auto_BCH_IOCTL_FSCK_ONLINE(r0, 0x4010bc14, &(0x7f0000000400)={0x1, 0x7}) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x6, 0xece7f487) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x6, 0x6) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x6, 0x3) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1dcc, 0x7) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1, 0x7) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0x40) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1, 0x5) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0x6) (async) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000600)={r0, &(0x7f0000000440)="821ad84d0b9104933a7345b346b04a8b5678d59a7eaffee254", 0xffff, &(0x7f0000000480)="35e83a9937b7a9f1a298652f977ca82526c68c1c23d86f044534ebb9bec762f525841a8df0f4192ca988af9ee4ed7fa304ebd8e8013be635b9331448d1d831ed983c3b47202d62beb5d0e7e3b21c43bba33dc3daf751e1f1899d6eea183c27ef370462b1eb3e42e38f021d72cb9a4ad8aedb6cd582bf2b5a3f34ff65dda6dd8988a4a46544965f60302a4ba819f9aef4380d84b1354aeb5f980cc446763441593a06243a61035d8f8f98b42fc76ebcb394a5", 0x5, &(0x7f0000000540)="600e8722fcb33a0c225e94e8e7bfb2cd96e5c1cb761b33cfeaca61b9cd1d65365466097c2b0406875316627b5efd4e06a398d1220a6a61f9230e156f530149b50849c46416ba390e55b732a9af81d2fb7be0b02072155619f1229a2a514ca02c028d760b0d58a973831d548b49b9e6b58be017cc68070dc5e87c5d", &(0x7f00000005c0)=0x8fe}) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000680), r0) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x210, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x3, 0x24000000000}}, @OVS_METER_ATTR_BANDS={0x1c7, 0x4, 0x0, 0x1, [@nested={0x148, 0x30, 0x0, 0x1, [@typed={0x4, 0x118}, @nested={0x4, 0x82}, @generic="1a1d6aa95d9589b70e5c6b4f4ff4f79e9deca06858cbfe94922d7d328ad5ecc9e52f9e9ec87d6f1785ef15b651de4303432c080dc5af6d299f0b9e4bd547e2f9c3c3bdc6f27eddea30bee2df01ef3c1928f3f1cbfdee0e1b0c5a26bf130b2d3bb453b4172fa27504cb11ef89014f4ecbaf46c26e3f7876df3081ae1fcd2a34d175160e7b1e8303b9861729ba2bfd09304d0f4017fe281fd5971706314f82df5bd17a81f19ae23ef6e343e1cc7730d0d22ad382ec609c13f500ddbb599a11cb421696d1ce8336456a62f8a959ad55bac8ebb93c2b1107d4cfa309b2d981dfbc18fe5ca51a6c6c", @nested={0x4, 0xd}, @generic="4e80557bfff283d1167b05bd87e5cdb0d2fddcb200374d8e74eee819fdaaf514bc8a4e1f2625f975a8763f2bfc004ed7deaa3c5a01b2", @typed={0x8, 0xf7, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x4, 0x114}, @generic="eaae763417215b29433d6355f5298c7da7cf3b21947bc7", @typed={0x4, 0x11f}, @generic="702a432eaa2ef1460dc5f14d243b00fa1e9cd6d0dc9984ba571f8f9355bf31845c47b08a9e154d2fc36d6839119bb17c0369e6e9d4f2e3984740a7a7f786b03e25895c7d326e32978fd6b0fe2d6ff12bbc65b0c1231b236347f7d903"]}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x8}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x7}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x7}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0xc040) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0x7f) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x1, 0x6) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x8, 0x3) r2 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000009c0), r0) sendmsg$auto_NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) membarrier$auto_MEMBARRIER_CMD_GLOBAL(0x1, 0x400, 0x2) 13.815765129s ago: executing program 2 (id=1089): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22682, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) r2 = socket(0x10, 0x6, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) write$auto(r3, &(0x7f0000000000)='/dev/audio1\x00', 0x4) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) 13.422219626s ago: executing program 5 (id=1090): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/nilfs2/features/README\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/6, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x27) read$auto_nvmf_dev_fops_fabrics(r1, &(0x7f0000000680)=""/4096, 0x1000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x7, 0x28000) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x8983, 0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x420f02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(0xffffffffffffffff, 0x2, 0x44, &(0x7f0000000180)='\x00', 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10001, 0xdf, 0x9b76, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 12.005175826s ago: executing program 5 (id=1094): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) ioctl$auto_FS_IOC_ENABLE_VERITY3(r1, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x7, 0x8008, 0x8) r3 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(r3, 0x1, 0x10, 0x0, 0x9) ioctl$auto(r1, 0x6, r0) r4 = io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x8000000000000001, 0x20009, 0xe3, 0x100000eb1, r3, 0x100000000008000) ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000040)="5c8ff392a2ff5b98476e02122859a4343d70023a7bb8546a83d6820f426e805dfe1a4497e5d5ae17b67a408486466a3ab2a99da42e351c2689b3919534") clone$auto(0x6db, 0x1, 0x0, 0x0, 0x7) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 10.973769162s ago: executing program 6 (id=1095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r0) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2575000000080003009697d60323d8f5f74ade6e7a73b0b47ec382b41dbfa1ee4b44b9e514f41c620a000000917e07a1803f6e7e5a1836c98a5aa10b267d769cc739f977b3ba501d8fa164813c925b3722371ce35d0a3c677ccdfacdf8044e479cad0f06a2de8885e7eba974e68dc6bbaa43a9f2f1c5ceff01c17fb4ba54ee7f5d2557015fa37b7ee94749", @ANYRES32=0x0, @ANYBLOB="0c0099000800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400432e0d4a24e0f4d877720000", @ANYRESDEC=r2, @ANYBLOB="010025bd700002dcdf2503000000040008000c0001800800108004000780"], 0x24}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder0\x00', 0x389121, 0x0) prctl$auto(0x51, 0x1, 0x0, 0x40, 0x100000000080000) madvise$auto(0x0, 0x2000040080000003, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='\x00\x00ok', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x3f4f853e, 0x0) r4 = socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=r4, 0x4, @old_prog_fd=r5}, 0xa3) 10.055098556s ago: executing program 8 (id=1096): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a2, 0xffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x98c7) getsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) read$auto(r0, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) prctl$auto(0x38, 0x1, 0x0, 0x0, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x606af2dcef72a6f0, 0x3, 0x80) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) io_cancel$auto(0x7, &(0x7f0000000040)={0x3ff, 0x68e, 0x400010, 0x4, 0x5, r1, 0x7, 0x40000000000000c7, 0x6, 0x0, 0x408e4}, &(0x7f0000000080)={0x2, 0x1a, 0x7, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 9.376419068s ago: executing program 6 (id=1097): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a2, 0xffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x98c7) getsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) read$auto(r1, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) prctl$auto(0x38, 0x1, 0x0, 0x0, 0x7ff) prctl$auto(0x6, 0x0, 0x2, 0x2000000, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) 6.584786348s ago: executing program 6 (id=1098): r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x11, 0x80003, 0x300) r3 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r3, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = open(0x0, 0x261c2, 0x84) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) setsockopt$auto(r0, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x3) r6 = open$dir(&(0x7f0000000340)='./file1/file0\x00', 0x20200, 0x182) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PAUSE_STATS_SRC={0x8, 0x6, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8894}, 0x4000000) fchmodat$auto(r6, &(0x7f00000000c0)='./file1\x00', 0x0) 6.400923258s ago: executing program 8 (id=1099): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8008, 0x100000000}}) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r1, &(0x7f0000000340)='\x00\xc7\xb4(\x03V=\xa4\xb0\xf0\xcf\xad\xcd_M&\x91\xb6*\v\x05;\x9eGy -\x8e\xf3\x00\xe7\xc0\b\x9a\xda\x86B\a\xbc\xea\x05\x0e`\x19\r\xa6\xb1\x05w\x0fh\xea\xae\xa0\xc2\x9a\xd2\xf1\x00\xcb\";\xcdo2U8EJ\x1f\x03\xe5\xc2D\x17\x86\xc1y}\xed\xbaP|\xfe\xc6\xdb\xc9\x86\rB\xc9\xf8\xc6\x05\xc6\xe7\xbc7rb\x19N\xba\xe2|\x8b\xf1FC\x96:\xb7!\x8d\x1f\r\xd9h\xf6B\xaa~\xac$\xde\xdec\x9fI\xcd\xc8Y\xf1W)q\n\xbf\x8d\x1b\x04\xde\x91\xafd\x80\xaf:#\xf2\xe0\xec/\x04;\x1a\xde\x9d\x85\x1a7\xda;\xd7\xf8D\x02\xf7\x8b\xf0\x18nO\x98\x10\xf8\x83\a\xe6\xdeb\x89?2\b\xf1r\xf8\x18\n\xc6\xbc\xe5\a\xfe\xb7\xbe?6\x88\xcc\xe8\x93\xeb1\xa5\xe3b$\xdcm\x99\xf0&\xac)\xc0@c\xb3q\xe6\xec\x8c\xfc\x9a\x14m/\xe3\xbd\x87\xd1\xe0\xa7\xcd\xea\xbf#/.Nr\'\xd9\x06\x00\x00\x00\xa3w~TP\"%L\x90\'\xdd\xd8\x1a\xda\x14\x8d\xa10mt\x9a[\x88\x1b\xb0\xe2\x0f\\\x14', 0x7e91, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video29\x00', 0x823c0, 0x0) ioctl$auto(r2, 0x5646, r2) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60080, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0xb276, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x9b74, 0x7, 0x5) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x408240, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x8) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(r0, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, r3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 6.303631349s ago: executing program 6 (id=1100): write$auto(0xffffffffffffffff, 0x0, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r1) sendmsg$auto_TIPC_NL_PUBL_GET(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x20, r2, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='@+\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/space\x00', 0x149100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000b40)=""/4096, 0x1000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) statmount$auto(0x0, 0x0, 0x7, 0x281) io_uring_setup$auto(0x59, &(0x7f0000000340)={0x7fffffff, 0xd, 0x2, 0x4, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(0x3, 0x5, 0xfffffffb, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mlock$auto(0x10, 0x10) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r0, &(0x7f0000000040)={0x4, 0x8}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) 6.152456963s ago: executing program 2 (id=1101): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2a, 0x2, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = socket(0x23, 0x80805, 0x0) bind$auto(r2, 0x0, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0) socket(0x1a, 0x4, 0x6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc94", 0xc2d) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x2060009, 0x3, 0x40000000000eb2, r0, 0x8000) io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7efffffc, 0xd2, 0x3002, 0x7, 0x7, 0x4006, 0xffffffffffffffff, [0x0, 0x0, 0x4000000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x69cb, 0x6, 0x3}, {0x5, 0x8001, 0x2052, 0x85, 0x2, 0x1a7b874a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x81a, r4, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x40804) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) close_range$auto(0x2, 0xa, 0x0) prctl$auto_PR_SET_MM(0x23, 0x2, r0, 0x7ff, 0x5) 5.433153426s ago: executing program 8 (id=1102): write$auto(0xffffffffffffffff, 0x0, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) r1 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r1, 0xc, &(0x7f0000000100)="cb53e2354ae3c05d36023e04c464") write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/radio_si470x_common/parameters/space\x00', 0x149100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000b40)=""/4096, 0x1000) move_pages$auto(0x1, 0xf53, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3c, 0x0, 0x110) ioctl$auto(r0, 0x8, r2) statmount$auto(0x0, 0x0, 0x7, 0x281) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={r4, @new_prog_fd, 0x2c}, 0x92) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mlock$auto(0x10, 0x10) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x8002, 0x0) 4.729569947s ago: executing program 8 (id=1103): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b6a, 0x7) syz_clone(0x2000011, 0x0, 0xfdd1, 0x0, 0x0, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto(r0, 0x4, r0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20c000, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r1) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x55d881, 0x0) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x100, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) close_range$auto(r4, r5, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x82002, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) fcntl$auto_F_GETPIPE_SZ(r2, 0x408, 0x47) 4.729429658s ago: executing program 6 (id=1104): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/soft\x00', 0x42000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/hsr_slave_1/secure_redirects\x00', 0x1001, 0x0) write$auto(r1, &(0x7f00000000c0)='[*-^\x00', 0x8) read$auto(r0, 0x0, 0x20) 4.206419199s ago: executing program 6 (id=1105): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) ioperm$auto(0x6, 0x5000000, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) prctl$auto(0x8, 0x56, 0x0, 0x6, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) socket(0xf, 0xa, 0x5) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) 3.719522938s ago: executing program 2 (id=1106): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/binderfs/binder1\x00', 0x149883, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)="47f90f2980f919b9d7a8b4c4f4c279139fc0131b9cc8ca8b2e") madvise$auto(0x7a6, 0x2000040080000004, 0xe) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x101000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x5, 0x801, 0x100204) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x426001, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0xd393) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25020000000800010089000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x4000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) setsockopt$auto_SO_OOBINLINE(r4, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xfffffffc) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 2.970032053s ago: executing program 8 (id=1107): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3542, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x40}, 0x2, 0x0, 0x0, 0x8) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xd8b) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xf}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x3}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x10800}, 0x20048090) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r4, 0x0, 0x5, 0x8000400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x88, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x5}, @OVS_FLOW_ATTR_ACTIONS={0x64, 0x2, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @u32=0x2}, @typed={0x6, 0x128, 0x0, 0x0, @str='.\x00'}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xdb, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x20, 0x30, 0x0, 0x1, [@nested={0x4, 0xc5}, @nested={0x4, 0x34}, @typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@empty}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000044) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r6, 0x0, 0x20000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x20000000007, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) 594.868676ms ago: executing program 2 (id=1108): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x3, 0x4, 0x106) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x3, 0x8) socket(0x2, 0x1, 0x0) r2 = epoll_create$auto(0x165) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r3, 0x1, r0, 0x0) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@token_create, 0x6f6) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r3, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r5, &(0x7f0000000040)='/dev/vcsa\x00', 0x7b05, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9", 0x1000}, 0x3) close_range$auto(r4, r5, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x0, 0xfffffff5, 0x10, 0x0) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0502, 0x0) 0s ago: executing program 8 (id=1109): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x18, 0x6, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = pidfd_open$auto(0x0, 0xffffff00) ioctl$auto_BLKFRAGET(r5, 0x1265, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) kernel console output (not intermixed with test programs): ock+0x2b/0x80 [ 221.293500][ T7791] ? __fget_files+0x20e/0x3c0 [ 221.293552][ T7791] ? do_preadv+0x1a6/0x270 [ 221.293579][ T7791] do_preadv+0x1a6/0x270 [ 221.293610][ T7791] ? __pfx_do_preadv+0x10/0x10 [ 221.293652][ T7791] do_syscall_64+0xcd/0x490 [ 221.293698][ T7791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.293726][ T7791] RIP: 0033:0x7f944b78ebe9 [ 221.293749][ T7791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.293775][ T7791] RSP: 002b:00007f94499d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 221.293803][ T7791] RAX: ffffffffffffffda RBX: 00007f944b9c6090 RCX: 00007f944b78ebe9 [ 221.293821][ T7791] RDX: 000000000000000c RSI: 0000200000000240 RDI: 0000000000000007 [ 221.293837][ T7791] RBP: 00007f94499d5090 R08: 0000000000000400 R09: 0000000000000000 [ 221.293854][ T7791] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 221.293870][ T7791] R13: 00007f944b9c6128 R14: 00007f944b9c6090 R15: 00007ffc4cf63d78 [ 221.293907][ T7791] [ 221.623525][ T7791] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 221.632266][ T7802] zswap: compressor not available [ 221.808804][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 221.951428][ T7797] CIFS: VFS: Invalid SecurityFlags: [ 221.984530][ T7813] [U]  [ 221.987361][ T7813] [U] [ 221.990063][ T7813] [U] [ 221.992757][ T7813] [U] [ 222.000883][ T7813] [U] [ 222.003602][ T7813] [U] [ 222.006299][ T7813] [U] [ 222.009249][ T7813] [U] [ 222.026285][ T7813] [U] [ 222.029065][ T7813] [U] [ 222.031799][ T7813] [U] [ 222.034655][ T7813] [U] [ 222.047134][ T7813] [U] [ 222.049871][ T7813] [U] [ 222.053107][ T7813] [U] [ 222.055843][ T7813] [U] [ 222.115990][ T7813] [U] [ 222.118820][ T7813] [U] [ 222.121550][ T7813] [U] [ 222.124285][ T7813] [U] [ 222.148244][ T7802] bond0: (slave bond_slave_1): Releasing backup interface [ 222.157849][ T7813] [U] [ 222.160604][ T7813] [U] [ 222.163302][ T7813] [U] [ 222.166000][ T7813] [U] [ 222.202639][ T7813] [U] [ 222.205424][ T7813] [U] [ 222.208159][ T7813] [U] [ 222.210872][ T7813] [U] [ 222.225801][ T7813] [U] [ 222.228572][ T7813] [U] [ 222.231315][ T7813] [U] [ 222.234051][ T7813] [U] [ 222.255434][ T7813] [U] [ 222.258223][ T7813] [U] [ 222.260969][ T7813] [U] [ 222.263708][ T7813] [U] [ 222.276111][ T7813] [U] [ 222.278890][ T7813] [U] [ 222.281633][ T7813] [U] [ 222.284371][ T7813] [U] [ 222.336588][ T7813] [U] [ 222.339321][ T7813] [U] [ 222.342020][ T7813] [U] [ 222.344814][ T7813] [U] [ 222.350107][ T7813] [U] [ 222.352860][ T7813] [U] [ 222.355574][ T7813] [U] [ 222.358271][ T7813] [U] [ 222.365216][ T5188] Bluetooth: hci0: command 0x0406 tx timeout [ 222.371416][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 222.375660][ T5188] Bluetooth: hci3: command 0x0406 tx timeout [ 222.377522][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 222.451979][ T7813] [U] [ 222.454754][ T7813] [U] [ 222.457490][ T7813] [U] [ 222.460226][ T7813] [U] [ 222.511018][ T7813] [U] [ 222.513799][ T7813] [U] [ 222.516542][ T7813] [U] [ 222.519296][ T7813] [U] [ 222.565463][ T7813] [U] [ 222.568263][ T7813] [U] [ 222.571006][ T7813] [U] [ 222.573748][ T7813] [U] [ 222.599505][ T7813] [U] [ 222.602291][ T7813] [U] [ 222.605029][ T7813] [U] [ 222.607770][ T7813] [U] [ 222.642127][ T7813] [U] [ 222.644907][ T7813] [U] [ 222.647650][ T7813] [U] [ 222.650403][ T7813] [U] [ 222.686362][ T7813] [U] [ 222.689146][ T7813] [U] [ 222.691892][ T7813] [U] [ 222.694692][ T7813] [U] [ 222.730181][ T7813] [U] [ 222.732955][ T7813] [U] [ 222.735687][ T7813] [U] [ 222.738432][ T7813] [U] [ 222.763022][ T7813] [U] [ 222.765891][ T7813] [U] [ 222.768634][ T7813] [U] [ 222.771370][ T7813] [U] [ 222.873637][ T7813] [U] [ 222.934798][ T7842] CIFS: VFS: Invalid SecurityFlags: [ 223.203251][ T7865] ptrace attach of "./syz-executor exec"[7866] was attempted by "./syz-executor exec"[7865] [ 225.087590][ T7885] FAULT_INJECTION: forcing a failure. [ 225.087590][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.127507][ T7885] CPU: 1 UID: 0 PID: 7885 Comm: syz.1.368 Not tainted syzkaller #0 PREEMPT(full) [ 225.127548][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.127564][ T7885] Call Trace: [ 225.127574][ T7885] [ 225.127585][ T7885] dump_stack_lvl+0x16c/0x1f0 [ 225.127634][ T7885] should_fail_ex+0x512/0x640 [ 225.127685][ T7885] _copy_to_user+0x32/0xd0 [ 225.127720][ T7885] simple_read_from_buffer+0xcb/0x170 [ 225.127753][ T7885] proc_fail_nth_read+0x197/0x240 [ 225.127787][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.127821][ T7885] ? rw_verify_area+0xcf/0x6c0 [ 225.127850][ T7885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.127880][ T7885] vfs_read+0x1e4/0xcf0 [ 225.127919][ T7885] ? __pfx___mutex_lock+0x10/0x10 [ 225.127963][ T7885] ? __pfx_vfs_read+0x10/0x10 [ 225.128008][ T7885] ? __fget_files+0x20e/0x3c0 [ 225.128053][ T7885] ksys_read+0x12a/0x250 [ 225.128085][ T7885] ? __pfx_ksys_read+0x10/0x10 [ 225.128131][ T7885] do_syscall_64+0xcd/0x490 [ 225.128179][ T7885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.128207][ T7885] RIP: 0033:0x7f944b78d5fc [ 225.128231][ T7885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.128257][ T7885] RSP: 002b:00007f94499f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.128284][ T7885] RAX: ffffffffffffffda RBX: 00007f944b9c5fa0 RCX: 00007f944b78d5fc [ 225.128302][ T7885] RDX: 000000000000000f RSI: 00007f94499f60a0 RDI: 0000000000000009 [ 225.128319][ T7885] RBP: 00007f94499f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.128336][ T7885] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 225.128352][ T7885] R13: 00007f944b9c6038 R14: 00007f944b9c5fa0 R15: 00007ffc4cf63d78 [ 225.128392][ T7885] [ 225.140110][ T7889] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 225.517920][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 226.089460][ T7926] FAULT_INJECTION: forcing a failure. [ 226.089460][ T7926] name failslab, interval 1, probability 0, space 0, times 0 [ 226.135583][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(full) [ 226.135626][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.135644][ T7926] Call Trace: [ 226.135654][ T7926] [ 226.135665][ T7926] dump_stack_lvl+0x16c/0x1f0 [ 226.135716][ T7926] should_fail_ex+0x512/0x640 [ 226.135762][ T7926] ? fs_reclaim_acquire+0xae/0x150 [ 226.135825][ T7926] ? security_inode_init_security+0x13f/0x390 [ 226.135854][ T7926] should_failslab+0xc2/0x120 [ 226.135895][ T7926] __kmalloc_noprof+0xd2/0x510 [ 226.135948][ T7926] security_inode_init_security+0x13f/0x390 [ 226.135981][ T7926] ? __pfx_shmem_initxattrs+0x10/0x10 [ 226.136027][ T7926] ? __pfx_security_inode_init_security+0x10/0x10 [ 226.136075][ T7926] shmem_mknod+0x22e/0x450 [ 226.136130][ T7926] vfs_mknod+0x5da/0x8e0 [ 226.136170][ T7926] do_mknodat+0x30f/0x5d0 [ 226.136213][ T7926] ? __pfx_do_mknodat+0x10/0x10 [ 226.136246][ T7926] ? getname_flags.part.0+0x1c5/0x550 [ 226.136304][ T7926] __x64_sys_mknod+0x87/0xb0 [ 226.136342][ T7926] do_syscall_64+0xcd/0x490 [ 226.136393][ T7926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.136424][ T7926] RIP: 0033:0x7f33cdb8ebe9 [ 226.136448][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.136477][ T7926] RSP: 002b:00007f33cea71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 226.136505][ T7926] RAX: ffffffffffffffda RBX: 00007f33cddc5fa0 RCX: 00007f33cdb8ebe9 [ 226.136525][ T7926] RDX: 0000000000000801 RSI: 0000000000001001 RDI: 00002000000000c0 [ 226.136541][ T7926] RBP: 00007f33cdc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.136559][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.136576][ T7926] R13: 00007f33cddc6038 R14: 00007f33cddc5fa0 R15: 00007fff9da35958 [ 226.136619][ T7926] [ 226.512848][ T7926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 226.519771][ T7926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 227.548890][ T7953] [U]  [ 227.551767][ T7953] [U] [ 227.554515][ T7953] [U] [ 227.557277][ T7953] [U] [ 227.670256][ T7953] [U] [ 227.673042][ T7953] [U] [ 227.675788][ T7953] [U] [ 227.678533][ T7953] [U] [ 227.694962][ T7960] sp0: Synchronizing with TNC [ 227.778406][ T7953] [U] [ 227.781190][ T7953] [U] [ 227.783931][ T7953] [U] [ 227.786674][ T7953] [U] [ 227.793005][ T7953] [U] [ 227.795766][ T7953] [U] [ 227.798518][ T7953] [U] [ 227.801251][ T7953] [U] [ 227.856025][ T7953] [U] [ 227.858814][ T7953] [U] [ 227.861567][ T7953] [U] [ 227.864325][ T7953] [U] [ 227.936999][ T7953] [U] [ 227.939792][ T7953] [U] [ 227.942554][ T7953] [U] [ 227.945300][ T7953] [U] [ 228.018119][ T7953] [U] [ 228.020904][ T7953] [U] [ 228.023647][ T7953] [U] [ 228.026390][ T7953] [U] [ 228.095897][ T7953] [U] [ 228.098692][ T7953] [U] [ 228.101437][ T7953] [U] [ 228.104179][ T7953] [U] [ 228.189738][ T7953] [U] [ 228.192518][ T7953] [U] [ 228.195258][ T7953] [U] [ 228.197992][ T7953] [U] [ 228.255811][ T7953] [U] [ 228.258616][ T7953] [U] [ 228.261359][ T7953] [U] [ 228.264098][ T7953] [U] [ 228.359598][ T7953] [U] [ 228.420588][ T7997] binder: 7996:7997 ioctl c0306201 0 returned -14 [ 229.629671][ T8023] Invalid ELF header magic: != ELF [ 230.046583][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 231.377322][ T8053] delete_channel: no stack [ 234.341806][ T8119] lo: entered allmulticast mode [ 237.626502][ T8277] vivid-003: ================= START STATUS ================= [ 237.634222][ T8277] vivid-003: Radio HW Seek Mode: Bounded [ 237.681085][ T8277] vivid-003: Radio Programmable HW Seek: false [ 237.855721][ T8277] vivid-003: RDS Rx I/O Mode: Block I/O [ 237.867591][ T8277] vivid-003: Generate RBDS Instead of RDS: false [ 237.910283][ T8277] vivid-003: RDS Reception: true [ 237.934356][ T8277] vivid-003: RDS Program Type: 0 inactive [ 237.977407][ T8277] vivid-003: RDS PS Name: inactive [ 238.052545][ T8294] FAULT_INJECTION: forcing a failure. [ 238.052545][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 238.067399][ T8277] vivid-003: RDS Radio Text: inactive [ 238.089815][ T8294] CPU: 1 UID: 0 PID: 8294 Comm: syz.3.399 Not tainted syzkaller #0 PREEMPT(full) [ 238.089843][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.089855][ T8294] Call Trace: [ 238.089861][ T8294] [ 238.089868][ T8294] dump_stack_lvl+0x16c/0x1f0 [ 238.089901][ T8294] should_fail_ex+0x512/0x640 [ 238.089930][ T8294] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 238.089951][ T8294] ? __pfx_rescuer_thread+0x10/0x10 [ 238.089980][ T8294] should_failslab+0xc2/0x120 [ 238.090004][ T8294] __kmalloc_cache_noprof+0x6a/0x3e0 [ 238.090023][ T8294] ? lockdep_init_map_type+0x5c/0x280 [ 238.090049][ T8294] ? __kthread_create_on_node+0xce/0x3f0 [ 238.090076][ T8294] ? __pfx_rescuer_thread+0x10/0x10 [ 238.090105][ T8294] __kthread_create_on_node+0xce/0x3f0 [ 238.090131][ T8294] ? __pfx___kthread_create_on_node+0x10/0x10 [ 238.090162][ T8294] ? __pfx_vsnprintf+0x10/0x10 [ 238.090191][ T8294] ? __pfx_rescuer_thread+0x10/0x10 [ 238.090220][ T8294] kthread_create_on_node+0xc7/0x100 [ 238.090244][ T8294] ? __pfx_kthread_create_on_node+0x10/0x10 [ 238.090271][ T8294] ? __pfx_scnprintf+0x10/0x10 [ 238.090312][ T8294] init_rescuer+0x320/0x640 [ 238.090339][ T8294] ? __pfx_init_rescuer+0x10/0x10 [ 238.090380][ T8294] ? wq_adjust_max_active+0x39d/0x4a0 [ 238.090411][ T8294] __alloc_workqueue+0xc37/0x1810 [ 238.090440][ T8294] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 238.090470][ T8294] alloc_workqueue_noprof+0xd2/0x200 [ 238.090495][ T8294] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 238.090526][ T8294] ? __pfx___debug_object_init+0x10/0x10 [ 238.090557][ T8294] nci_register_device+0x511/0xb80 [ 238.090583][ T8294] ? __pfx_nci_register_device+0x10/0x10 [ 238.090615][ T8294] ? lockdep_init_map_type+0x5c/0x280 [ 238.090645][ T8294] virtual_ncidev_open+0x141/0x220 [ 238.090670][ T8294] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 238.090693][ T8294] misc_open+0x35d/0x420 [ 238.090716][ T8294] ? __pfx_misc_open+0x10/0x10 [ 238.090738][ T8294] chrdev_open+0x231/0x6a0 [ 238.090762][ T8294] ? __pfx_apparmor_file_open+0x10/0x10 [ 238.090783][ T8294] ? __pfx_chrdev_open+0x10/0x10 [ 238.090808][ T8294] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 238.090834][ T8294] do_dentry_open+0x97f/0x1530 [ 238.090857][ T8294] ? __pfx_chrdev_open+0x10/0x10 [ 238.090886][ T8294] vfs_open+0x82/0x3f0 [ 238.090916][ T8294] path_openat+0x1de4/0x2cb0 [ 238.090946][ T8294] ? __pfx_path_openat+0x10/0x10 [ 238.090974][ T8294] do_filp_open+0x20b/0x470 [ 238.090996][ T8294] ? __pfx_do_filp_open+0x10/0x10 [ 238.091035][ T8294] ? alloc_fd+0x471/0x7d0 [ 238.091062][ T8294] do_sys_openat2+0x11b/0x1d0 [ 238.091090][ T8294] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.091128][ T8294] __x64_sys_openat+0x174/0x210 [ 238.091157][ T8294] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.091196][ T8294] do_syscall_64+0xcd/0x490 [ 238.091226][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.091244][ T8294] RIP: 0033:0x7f33cdb8ebe9 [ 238.091260][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.091277][ T8294] RSP: 002b:00007f33cea71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.091295][ T8294] RAX: ffffffffffffffda RBX: 00007f33cddc5fa0 RCX: 00007f33cdb8ebe9 [ 238.091307][ T8294] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 238.091318][ T8294] RBP: 00007f33cdc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.091328][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.091339][ T8294] R13: 00007f33cddc6038 R14: 00007f33cddc5fa0 R15: 00007fff9da35958 [ 238.091367][ T8294] [ 238.093668][ T8294] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -ENOMEM [ 238.235677][ T8277] vivid-003: RDS Traffic Announcement: false inactive [ 238.612992][ T8277] vivid-003: RDS Traffic Program: false inactive [ 238.697467][ T8277] vivid-003: RDS Music: false inactive [ 238.715712][ T8277] vivid-003: ================== END STATUS ================== [ 239.739397][ T8359] zswap: compressor not available [ 239.847431][ T8369] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input9 [ 241.636304][ T8427] bond0: option all_slaves_active: invalid value () [ 241.667521][ T8427] bond0: option all_slaves_active: invalid value () [ 243.741990][ T8125] lo: left allmulticast mode [ 246.887969][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 247.050231][ T8667] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 247.302342][ T8675] blkio.reset_stats is deprecated [ 248.163227][ T8697] zswap: compressor 000 not available [ 251.088401][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 251.335213][ T8878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 251.398868][ T8878] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 251.640724][ T8878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 251.734826][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 252.300282][ T30] audit: type=1800 audit(1757341408.842:5): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.440" name="version" dev="configfs" ino=18705 res=0 errno=0 [ 252.617186][ T8944] CIFS: VFS: Invalid SecurityFlags: [ 253.050312][ T8950] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 253.873912][ T8977] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 254.362310][ T8978] ubi0: attaching mtd0 [ 254.429422][ T8978] ubi0: scanning is finished [ 254.434314][ T8978] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 254.790696][ T8978] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 255.715325][ T9006] CIFS: VFS: Invalid SecurityFlags: [ 256.110230][ T9017] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 256.159613][ T9005] zswap: compressor not available [ 256.239537][ T9017] netlink: 25 bytes leftover after parsing attributes in process `syz.0.455'. [ 256.406519][ T9020] mmap: syz.3.456 (9020): VmData 37597184 exceed data ulimit 1025. Update limits or use boot option ignore_rlimit_data. [ 256.502511][ T9024] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 257.207054][ T9069] CIFS: VFS: Invalid SecurityFlags: [ 257.962757][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 258.183799][ T9075] ======================================================= [ 258.183799][ T9075] WARNING: The mand mount option has been deprecated and [ 258.183799][ T9075] and is ignored by this kernel. Remove the mand [ 258.183799][ T9075] option from the mount to silence this warning. [ 258.183799][ T9075] ======================================================= [ 261.240989][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.248412][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.709477][ T9188] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 264.668942][ T9332] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 266.401486][ T9380] zswap: compressor not available [ 267.267910][ T9372] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 267.336882][ T9372] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 268.173678][ T9422] FAULT_INJECTION: forcing a failure. [ 268.173678][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 268.215758][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) [ 268.215800][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.215817][ T9422] Call Trace: [ 268.215828][ T9422] [ 268.215839][ T9422] dump_stack_lvl+0x16c/0x1f0 [ 268.215890][ T9422] should_fail_ex+0x512/0x640 [ 268.215935][ T9422] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 268.215978][ T9422] should_failslab+0xc2/0x120 [ 268.216018][ T9422] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 268.216056][ T9422] ? __d_alloc+0x32/0xae0 [ 268.216109][ T9422] __d_alloc+0x32/0xae0 [ 268.216145][ T9422] ? bpf_lsm_inode_permission+0x9/0x10 [ 268.216191][ T9422] d_alloc+0x4a/0x1e0 [ 268.216231][ T9422] vfs_tmpfile+0x148/0x890 [ 268.216277][ T9422] path_openat+0x1683/0x2cb0 [ 268.216309][ T9422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.216355][ T9422] ? __pfx_path_openat+0x10/0x10 [ 268.216394][ T9422] ? __lock_acquire+0xb97/0x1ce0 [ 268.216441][ T9422] do_filp_open+0x20b/0x470 [ 268.216479][ T9422] ? __pfx_do_filp_open+0x10/0x10 [ 268.216546][ T9422] ? _raw_spin_unlock+0x28/0x50 [ 268.216585][ T9422] ? alloc_fd+0x471/0x7d0 [ 268.216631][ T9422] do_sys_openat2+0x11b/0x1d0 [ 268.216678][ T9422] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.216739][ T9422] __x64_sys_open+0x153/0x1e0 [ 268.216782][ T9422] ? __pfx___x64_sys_open+0x10/0x10 [ 268.216836][ T9422] ? rcu_is_watching+0x12/0xc0 [ 268.216871][ T9422] do_syscall_64+0xcd/0x490 [ 268.216921][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.216951][ T9422] RIP: 0033:0x7f859178ebe9 [ 268.216975][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.217005][ T9422] RSP: 002b:00007f85926a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 268.217035][ T9422] RAX: ffffffffffffffda RBX: 00007f85919c6180 RCX: 00007f859178ebe9 [ 268.217055][ T9422] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 268.217084][ T9422] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.217102][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.217119][ T9422] R13: 00007f85919c6218 R14: 00007f85919c6180 R15: 00007ffd01441748 [ 268.217160][ T9422] [ 270.065417][ T9469] netlink: 'syz.2.504': attribute type 2 has an invalid length. [ 270.363107][ T5874] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 271.513068][ T30] audit: type=1800 audit(1757341428.072:6): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.509" name="members" dev="configfs" ino=19384 res=0 errno=0 [ 271.546701][ T9504] vivid-003: ================= START STATUS ================= [ 271.554780][ T9504] vivid-003: Radio HW Seek Mode: Bounded [ 271.568550][ T9522] sd 0:0:1:0: PR command failed: 1026 [ 271.586398][ T9522] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 271.593128][ T9522] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 271.600405][ T30] audit: type=1326 audit(1757341428.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.0.509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9038ebe9 code=0x0 [ 271.627627][ T9504] vivid-003: Radio Programmable HW Seek: false [ 271.633834][ T9504] vivid-003: RDS Rx I/O Mode: Block I/O [ 271.645723][ T9504] vivid-003: Generate RBDS Instead of RDS: false [ 271.653668][ T9504] vivid-003: RDS Reception: true [ 271.659209][ T9504] vivid-003: RDS Program Type: 0 inactive [ 271.665187][ T9504] vivid-003: RDS PS Name: inactive [ 271.671305][ T9504] vivid-003: RDS Radio Text: inactive [ 271.677370][ T9504] vivid-003: RDS Traffic Announcement: false inactive [ 271.684606][ T9504] vivid-003: RDS Traffic Program: false inactive [ 271.691175][ T9504] vivid-003: RDS Music: false inactive [ 271.698550][ T9504] vivid-003: ================== END STATUS ================== [ 272.631559][ T9561] nfs: Bad value for 'source' [ 272.750666][ T9566] binder: 9565:9566 ioctl c0306201 0 returned -14 [ 274.081462][ T9588] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 274.484797][ T9598] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000880 pfn:0x78000 [ 274.497853][ T9598] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 274.505145][ T9598] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 274.514097][ T9598] raw: ffff888078000880 0000000000000000 00000001ffffffff 0000000000000000 [ 274.525167][ T9598] page dumped because: unmovable page [ 274.530708][ T9598] page_owner tracks the page as allocated [ 274.551506][ T9598] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6001, tgid 6000 (syz.2.12), ts 105203712157, free_ts 104900954747 [ 274.627686][ T9598] post_alloc_hook+0x1c0/0x230 [ 274.634667][ T9598] get_page_from_freelist+0x132b/0x38e0 [ 274.649331][ T9603] binder: 9602:9603 ioctl c0306201 0 returned -14 [ 274.682446][ T9598] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 274.709175][ T9598] alloc_pages_mpol+0x1fb/0x550 [ 274.714133][ T9598] alloc_pages_noprof+0x131/0x390 [ 274.731330][ T9606] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 274.761852][ T5874] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 274.812126][ T9598] brd_submit_bio+0x942/0x1180 [ 274.905562][ T9598] __submit_bio+0x304/0x690 [ 275.008850][ T9598] submit_bio_noacct_nocheck+0x852/0xd30 [ 275.019680][ T9608] netlink: 338 bytes leftover after parsing attributes in process `syz.2.519'. [ 275.054544][ T9598] submit_bio_noacct+0xc20/0x1ed0 [ 275.063867][ T9598] __block_write_full_folio+0x735/0xe00 [ 275.070763][ T9598] block_write_full_folio+0x341/0x400 [ 275.084541][ T9598] blkdev_writepages+0xb8/0x140 [ 275.119156][ T9598] do_writepages+0x27a/0x600 [ 275.125898][ T9598] filemap_fdatawrite_wbc+0x104/0x160 [ 275.181288][ T9598] __filemap_fdatawrite_range+0xb9/0x100 [ 275.225693][ T9598] filemap_write_and_wait_range+0xa3/0x130 [ 275.292894][ T9598] page last free pid 15 tgid 15 stack trace: [ 275.300037][ T9598] __free_frozen_pages+0x7d5/0x10f0 [ 275.307477][ T9598] rcu_core+0x799/0x1530 [ 275.312651][ T9598] handle_softirqs+0x216/0x8e0 [ 275.318149][ T9598] run_ksoftirqd+0x3a/0x60 [ 275.322803][ T9598] smpboot_thread_fn+0x3f7/0xae0 [ 275.328305][ T9598] kthread+0x3c5/0x780 [ 275.332505][ T9598] ret_from_fork+0x5d7/0x6f0 [ 275.338102][ T9598] ret_from_fork_asm+0x1a/0x30 [ 275.574921][ T9618] netlink: 338 bytes leftover after parsing attributes in process `syz.2.519'. [ 276.027267][ T9626] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 276.267558][ T9630] zswap: compressor not available [ 276.347527][ T9638] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000880 pfn:0x78000 [ 276.435737][ T9638] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 276.445999][ T9638] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 276.480671][ T9638] raw: ffff888078000880 0000000000000000 00000001ffffffff 0000000000000000 [ 276.507681][ T9638] page dumped because: unmovable page [ 276.513147][ T9638] page_owner tracks the page as allocated [ 276.531480][ T9638] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6001, tgid 6000 (syz.2.12), ts 105203712157, free_ts 104900954747 [ 276.558437][ T9638] post_alloc_hook+0x1c0/0x230 [ 276.563640][ T9638] get_page_from_freelist+0x132b/0x38e0 [ 276.574547][ T9638] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 276.624816][ T9638] alloc_pages_mpol+0x1fb/0x550 [ 276.673071][ T9638] alloc_pages_noprof+0x131/0x390 [ 276.713241][ T9638] brd_submit_bio+0x942/0x1180 [ 276.740437][ T9638] __submit_bio+0x304/0x690 [ 276.745700][ T9638] submit_bio_noacct_nocheck+0x852/0xd30 [ 276.782443][ T9638] submit_bio_noacct+0xc20/0x1ed0 [ 276.795618][ T9638] __block_write_full_folio+0x735/0xe00 [ 276.806395][ T9638] block_write_full_folio+0x341/0x400 [ 276.832168][ T9638] blkdev_writepages+0xb8/0x140 [ 276.855893][ T9638] do_writepages+0x27a/0x600 [ 276.868714][ T9638] filemap_fdatawrite_wbc+0x104/0x160 [ 276.905988][ T9638] __filemap_fdatawrite_range+0xb9/0x100 [ 276.933936][ T9638] filemap_write_and_wait_range+0xa3/0x130 [ 276.973802][ T9638] page last free pid 15 tgid 15 stack trace: [ 277.000577][ T9638] __free_frozen_pages+0x7d5/0x10f0 [ 277.048189][ T9638] rcu_core+0x799/0x1530 [ 277.077328][ T9638] handle_softirqs+0x216/0x8e0 [ 277.085290][ T9638] run_ksoftirqd+0x3a/0x60 [ 277.110848][ T9638] smpboot_thread_fn+0x3f7/0xae0 [ 277.128905][ T9638] kthread+0x3c5/0x780 [ 277.133068][ T9638] ret_from_fork+0x5d7/0x6f0 [ 277.137805][ T9638] ret_from_fork_asm+0x1a/0x30 [ 278.166278][ T5874] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 279.728663][ T9753] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 282.252504][ T9843] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 282.950531][ T9847] zswap: compressor not available [ 283.617168][ T9872] bond0: option all_slaves_active: invalid value () [ 283.697284][ T9885] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 283.886885][ T9872] CIFS: VFS: Invalid SecurityFlags: 0 [ 283.886885][ T9872] [ 284.463999][ T9929] FAULT_INJECTION: forcing a failure. [ 284.463999][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 284.561615][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.2.552 Not tainted syzkaller #0 PREEMPT(full) [ 284.561657][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.561674][ T9929] Call Trace: [ 284.561684][ T9929] [ 284.561696][ T9929] dump_stack_lvl+0x16c/0x1f0 [ 284.561746][ T9929] should_fail_ex+0x512/0x640 [ 284.561791][ T9929] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 284.561831][ T9929] should_failslab+0xc2/0x120 [ 284.561871][ T9929] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 284.561917][ T9929] ? __d_alloc+0x32/0xae0 [ 284.561960][ T9929] __d_alloc+0x32/0xae0 [ 284.562001][ T9929] d_alloc_parallel+0x111/0x1480 [ 284.562055][ T9929] ? find_held_lock+0x2b/0x80 [ 284.562085][ T9929] ? __d_lookup+0x25c/0x4a0 [ 284.562130][ T9929] ? __pfx_d_alloc_parallel+0x10/0x10 [ 284.562176][ T9929] ? __d_lookup+0x266/0x4a0 [ 284.562218][ T9929] ? lockdep_init_map_type+0x5c/0x280 [ 284.562261][ T9929] ? lockdep_init_map_type+0x5c/0x280 [ 284.562308][ T9929] proc_fill_cache+0x2e6/0x470 [ 284.562345][ T9929] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 284.562386][ T9929] ? __pfx_proc_fill_cache+0x10/0x10 [ 284.562468][ T9929] proc_pident_readdir+0x1bc/0x530 [ 284.562517][ T9929] iterate_dir+0x293/0xaf0 [ 284.562552][ T9929] __x64_sys_getdents+0x13c/0x2b0 [ 284.562582][ T9929] ? __pfx___x64_sys_getdents+0x10/0x10 [ 284.562609][ T9929] ? __x64_sys_openat+0x174/0x210 [ 284.562653][ T9929] ? __pfx_filldir+0x10/0x10 [ 284.562695][ T9929] do_syscall_64+0xcd/0x490 [ 284.562742][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.562772][ T9929] RIP: 0033:0x7f859178ebe9 [ 284.562795][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.562824][ T9929] RSP: 002b:00007f85926c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 284.562852][ T9929] RAX: ffffffffffffffda RBX: 00007f85919c6090 RCX: 00007f859178ebe9 [ 284.562872][ T9929] RDX: 0000000000000c08 RSI: 0000000000000000 RDI: 0000000000000006 [ 284.562888][ T9929] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 284.562906][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.562934][ T9929] R13: 00007f85919c6128 R14: 00007f85919c6090 R15: 00007ffd01441748 [ 284.562975][ T9929] [ 284.792222][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.838626][ T9921] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 285.847836][ T9921] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 286.908290][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'. [ 286.974820][T10028] netlink: 342 bytes leftover after parsing attributes in process `syz.1.558'. [ 287.770635][T10062] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 287.795875][T10066] netlink: 342 bytes leftover after parsing attributes in process `syz.3.560'. [ 288.483349][T10028] ima: policy update failed [ 288.535960][ T30] audit: type=1802 audit(1757341445.092:8): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.558" res=0 errno=0 [ 289.183563][T10136] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 289.412140][T10156] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 289.733204][ T30] audit: type=1800 audit(1757341446.292:9): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.564" name="features" dev="configfs" ino=20079 res=0 errno=0 [ 290.503035][T10177] ima: policy update failed [ 290.530958][ T30] audit: type=1802 audit(1757341447.092:10): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.570" res=0 errno=0 [ 290.742217][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 290.882480][T10189] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 290.977057][T10193] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 291.004488][T10192] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 291.587669][T10213] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 292.057264][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 292.211589][ T30] audit: type=1806 audit(1757341448.772:11): xattr="." res=0 [ 292.493927][T10228] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000880 pfn:0x78000 [ 292.508305][T10228] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 292.526001][T10228] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 292.583467][T10228] raw: ffff888078000880 0000000000000000 00000001ffffffff 0000000000000000 [ 292.664564][T10228] page dumped because: unmovable page [ 292.716185][T10228] page_owner tracks the page as allocated [ 292.743357][T10228] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6001, tgid 6000 (syz.2.12), ts 105203712157, free_ts 104900954747 [ 292.905807][T10228] post_alloc_hook+0x1c0/0x230 [ 292.934272][T10228] get_page_from_freelist+0x132b/0x38e0 [ 292.940217][T10228] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 292.946977][T10228] alloc_pages_mpol+0x1fb/0x550 [ 292.952519][T10228] alloc_pages_noprof+0x131/0x390 [ 292.958587][T10228] brd_submit_bio+0x942/0x1180 [ 292.965994][T10228] __submit_bio+0x304/0x690 [ 292.973997][T10228] submit_bio_noacct_nocheck+0x852/0xd30 [ 292.984374][T10228] submit_bio_noacct+0xc20/0x1ed0 [ 293.110199][T10228] __block_write_full_folio+0x735/0xe00 [ 293.116394][T10228] block_write_full_folio+0x341/0x400 [ 293.122022][T10228] blkdev_writepages+0xb8/0x140 [ 293.127084][T10228] do_writepages+0x27a/0x600 [ 293.131699][T10228] filemap_fdatawrite_wbc+0x104/0x160 [ 293.138040][T10228] __filemap_fdatawrite_range+0xb9/0x100 [ 293.143901][T10228] filemap_write_and_wait_range+0xa3/0x130 [ 293.150306][T10228] page last free pid 15 tgid 15 stack trace: [ 293.161728][T10228] __free_frozen_pages+0x7d5/0x10f0 [ 293.167205][T10228] rcu_core+0x799/0x1530 [ 293.171478][T10228] handle_softirqs+0x216/0x8e0 [ 293.176876][T10228] run_ksoftirqd+0x3a/0x60 [ 293.181340][T10228] smpboot_thread_fn+0x3f7/0xae0 [ 293.186541][T10228] kthread+0x3c5/0x780 [ 293.191117][T10228] ret_from_fork+0x5d7/0x6f0 [ 293.195923][T10228] ret_from_fork_asm+0x1a/0x30 [ 294.689085][T10312] ubi0: attaching mtd0 [ 294.690304][T10312] ubi0: scanning is finished [ 294.690340][T10312] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 294.776934][T10312] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 296.877171][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 296.923255][T10392] geneve1: entered promiscuous mode [ 297.033471][T10392] geneve1: entered allmulticast mode [ 298.335285][T10448] FAULT_INJECTION: forcing a failure. [ 298.335285][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 298.354042][T10448] CPU: 1 UID: 0 PID: 10448 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 298.354094][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.354111][T10448] Call Trace: [ 298.354120][T10448] [ 298.354131][T10448] dump_stack_lvl+0x16c/0x1f0 [ 298.354179][T10448] should_fail_ex+0x512/0x640 [ 298.354222][T10448] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 298.354260][T10448] should_failslab+0xc2/0x120 [ 298.354298][T10448] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 298.354331][T10448] ? __lock_acquire+0xb97/0x1ce0 [ 298.354365][T10448] ? __alloc_skb+0x2b2/0x380 [ 298.354410][T10448] __alloc_skb+0x2b2/0x380 [ 298.354448][T10448] ? __pfx___alloc_skb+0x10/0x10 [ 298.354487][T10448] ? kthread_queue_work+0xa8/0x170 [ 298.354525][T10448] ? find_held_lock+0x2b/0x80 [ 298.354551][T10448] ? find_held_lock+0x2b/0x80 [ 298.354581][T10448] nfc_genl_device_removed+0x7e/0x300 [ 298.354616][T10448] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 298.354650][T10448] ? destroy_workqueue+0x7cd/0xaa0 [ 298.354691][T10448] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 298.354726][T10448] nfc_unregister_device+0x2a/0x330 [ 298.354770][T10448] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 298.354804][T10448] virtual_ncidev_close+0x4b/0xa0 [ 298.354836][T10448] __fput+0x3ff/0xb70 [ 298.354884][T10448] task_work_run+0x14d/0x240 [ 298.354928][T10448] ? __pfx_task_work_run+0x10/0x10 [ 298.354987][T10448] ? __pfx___do_sys_close_range+0x10/0x10 [ 298.355030][T10448] exit_to_user_mode_loop+0xeb/0x110 [ 298.355074][T10448] do_syscall_64+0x3f6/0x490 [ 298.355137][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.355166][T10448] RIP: 0033:0x7f33cdb8ebe9 [ 298.355188][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.355215][T10448] RSP: 002b:00007fff9da35ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 298.355243][T10448] RAX: 0000000000000000 RBX: 0000000000048cdc RCX: 00007f33cdb8ebe9 [ 298.355261][T10448] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 298.355278][T10448] RBP: 00007f33cddc7da0 R08: 0000000000000001 R09: 000000079da35daf [ 298.355295][T10448] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007f33cddc5fac [ 298.355313][T10448] R13: 00007f33cddc5fa0 R14: ffffffffffffffff R15: 00007fff9da35bd0 [ 298.355350][T10448] [ 300.150676][T10534] netlink: 334 bytes leftover after parsing attributes in process `syz.1.607'. [ 301.981837][T10610] FAULT_INJECTION: forcing a failure. [ 301.981837][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 301.981927][T10610] CPU: 1 UID: 0 PID: 10610 Comm: syz.1.610 Not tainted syzkaller #0 PREEMPT(full) [ 301.981963][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.981980][T10610] Call Trace: [ 301.981989][T10610] [ 301.982000][T10610] dump_stack_lvl+0x16c/0x1f0 [ 301.982048][T10610] should_fail_ex+0x512/0x640 [ 301.982092][T10610] ? __kmalloc_noprof+0xbf/0x510 [ 301.982130][T10610] ? copy_splice_read+0x1a8/0xc20 [ 301.982157][T10610] should_failslab+0xc2/0x120 [ 301.982196][T10610] __kmalloc_noprof+0xd2/0x510 [ 301.982230][T10610] ? __pfx___mutex_trylock_common+0x10/0x10 [ 301.982278][T10610] copy_splice_read+0x1a8/0xc20 [ 301.982308][T10610] ? trace_contention_end+0xdd/0x130 [ 301.982356][T10610] ? __pfx_copy_splice_read+0x10/0x10 [ 301.982391][T10610] ? __pfx___mutex_lock+0x10/0x10 [ 301.982448][T10610] ? __fget_files+0x204/0x3c0 [ 301.982484][T10610] ? __pfx_copy_splice_read+0x10/0x10 [ 301.982513][T10610] do_splice_read+0x282/0x370 [ 301.982548][T10610] splice_file_to_pipe+0x109/0x120 [ 301.982584][T10610] do_sendfile+0x400/0xe50 [ 301.982626][T10610] ? __pfx_do_sendfile+0x10/0x10 [ 301.982659][T10610] ? __fget_files+0x20e/0x3c0 [ 301.982702][T10610] __x64_sys_sendfile64+0x1d8/0x220 [ 301.982741][T10610] ? ksys_write+0x1ac/0x250 [ 301.982782][T10610] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 301.982836][T10610] do_syscall_64+0xcd/0x490 [ 301.982883][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.982912][T10610] RIP: 0033:0x7f944b78ebe9 [ 301.982935][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.982964][T10610] RSP: 002b:00007f94499b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 301.982993][T10610] RAX: ffffffffffffffda RBX: 00007f944b9c6180 RCX: 00007f944b78ebe9 [ 301.983011][T10610] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 301.983028][T10610] RBP: 00007f94499b4090 R08: 0000000000000000 R09: 0000000000000000 [ 301.983045][T10610] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 301.983063][T10610] R13: 00007f944b9c6218 R14: 00007f944b9c6180 R15: 00007ffc4cf63d78 [ 301.983103][T10610] [ 302.942625][T10613] tty tty45: ldisc open failed (-12), clearing slot 44 [ 303.200736][T10570] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 303.794837][T10712] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 303.811883][T10712] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 304.336604][T10718] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 304.364622][T10718] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 304.442783][T10718] mkiss: ax0: crc mode is auto. [ 305.145047][T10756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 305.288191][T10756] geneve1: entered promiscuous mode [ 305.329968][T10756] geneve1: entered allmulticast mode [ 305.907031][T10801] FAULT_INJECTION: forcing a failure. [ 305.907031][T10801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.921955][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.2.625 Not tainted syzkaller #0 PREEMPT(full) [ 305.921995][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.922013][T10801] Call Trace: [ 305.922022][T10801] [ 305.922033][T10801] dump_stack_lvl+0x16c/0x1f0 [ 305.922081][T10801] should_fail_ex+0x512/0x640 [ 305.922132][T10801] should_fail_alloc_page+0xe7/0x130 [ 305.922174][T10801] prepare_alloc_pages+0x3c2/0x610 [ 305.922225][T10801] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 305.922265][T10801] ? copy_splice_read+0x1a8/0xc20 [ 305.922294][T10801] ? stack_trace_save+0x8e/0xc0 [ 305.922327][T10801] ? __pfx_stack_trace_save+0x10/0x10 [ 305.922361][T10801] ? stack_depot_save_flags+0x29/0x9c0 [ 305.922414][T10801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.922447][T10801] ? kasan_save_stack+0x42/0x60 [ 305.922479][T10801] ? kasan_save_track+0x14/0x30 [ 305.922511][T10801] ? __kmalloc_noprof+0x223/0x510 [ 305.922541][T10801] ? copy_splice_read+0x1a8/0xc20 [ 305.922566][T10801] ? do_splice_read+0x282/0x370 [ 305.922591][T10801] ? splice_file_to_pipe+0x109/0x120 [ 305.922619][T10801] ? do_sendfile+0x400/0xe50 [ 305.922648][T10801] ? __x64_sys_sendfile64+0x1d8/0x220 [ 305.922685][T10801] ? do_syscall_64+0xcd/0x490 [ 305.922758][T10801] alloc_pages_bulk_noprof+0x71c/0x1410 [ 305.922807][T10801] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 305.922853][T10801] ? trace_kmalloc+0x2b/0xd0 [ 305.922891][T10801] ? __kmalloc_noprof+0x242/0x510 [ 305.922924][T10801] ? __pfx___mutex_trylock_common+0x10/0x10 [ 305.922979][T10801] copy_splice_read+0x1e1/0xc20 [ 305.923019][T10801] ? __pfx_copy_splice_read+0x10/0x10 [ 305.923053][T10801] ? __pfx___mutex_lock+0x10/0x10 [ 305.923107][T10801] ? __fget_files+0x204/0x3c0 [ 305.923143][T10801] ? __pfx_copy_splice_read+0x10/0x10 [ 305.923171][T10801] do_splice_read+0x282/0x370 [ 305.923206][T10801] splice_file_to_pipe+0x109/0x120 [ 305.923242][T10801] do_sendfile+0x400/0xe50 [ 305.923282][T10801] ? __pfx_do_sendfile+0x10/0x10 [ 305.923315][T10801] ? __fget_files+0x20e/0x3c0 [ 305.923358][T10801] __x64_sys_sendfile64+0x1d8/0x220 [ 305.923396][T10801] ? ksys_write+0x1ac/0x250 [ 305.923427][T10801] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 305.923475][T10801] do_syscall_64+0xcd/0x490 [ 305.923519][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.923546][T10801] RIP: 0033:0x7f859178ebe9 [ 305.923569][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.923596][T10801] RSP: 002b:00007f85926c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 305.923623][T10801] RAX: ffffffffffffffda RBX: 00007f85919c6090 RCX: 00007f859178ebe9 [ 305.923642][T10801] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 305.923658][T10801] RBP: 00007f85926c1090 R08: 0000000000000000 R09: 0000000000000000 [ 305.923674][T10801] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 305.923690][T10801] R13: 00007f85919c6128 R14: 00007f85919c6090 R15: 00007ffd01441748 [ 305.923729][T10801] [ 306.803055][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 308.490267][T10961] ICMPv6: process `syz.2.629' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 309.858458][T11034] Invalid ELF header magic: != ELF [ 309.886723][T11044] zswap: compressor not available [ 312.910122][T11145] program syz.2.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.642130][T11210] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 315.283381][T11224] netlink: 146 bytes leftover after parsing attributes in process `syz.3.652'. [ 315.373808][T11226] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 316.385327][T11249] binder: 11248:11249 ioctl c0306201 0 returned -14 [ 316.649628][T11256] FAULT_INJECTION: forcing a failure. [ 316.649628][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 316.700946][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.2.655 Not tainted syzkaller #0 PREEMPT(full) [ 316.700987][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.701003][T11256] Call Trace: [ 316.701012][T11256] [ 316.701022][T11256] dump_stack_lvl+0x16c/0x1f0 [ 316.701069][T11256] should_fail_ex+0x512/0x640 [ 316.701111][T11256] ? fs_reclaim_acquire+0xae/0x150 [ 316.701156][T11256] ? tomoyo_encode2+0x100/0x3e0 [ 316.701193][T11256] should_failslab+0xc2/0x120 [ 316.701231][T11256] __kmalloc_noprof+0xd2/0x510 [ 316.701264][T11256] ? d_absolute_path+0x136/0x1a0 [ 316.701312][T11256] tomoyo_encode2+0x100/0x3e0 [ 316.701359][T11256] tomoyo_encode+0x29/0x50 [ 316.701398][T11256] tomoyo_realpath_from_path+0x18f/0x6e0 [ 316.701453][T11256] tomoyo_path_number_perm+0x245/0x580 [ 316.701487][T11256] ? tomoyo_path_number_perm+0x237/0x580 [ 316.701526][T11256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.701602][T11256] ? hook_file_ioctl_common+0x145/0x410 [ 316.701644][T11256] ? __rcu_read_unlock+0x2bc/0x550 [ 316.701699][T11256] ? __fget_files+0x20e/0x3c0 [ 316.701739][T11256] security_file_ioctl+0x9b/0x240 [ 316.701780][T11256] __x64_sys_ioctl+0xb7/0x210 [ 316.701836][T11256] do_syscall_64+0xcd/0x490 [ 316.701882][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.701912][T11256] RIP: 0033:0x7f859178ebe9 [ 316.701937][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.701965][T11256] RSP: 002b:00007f859267f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.702000][T11256] RAX: ffffffffffffffda RBX: 00007f85919c6270 RCX: 00007f859178ebe9 [ 316.702019][T11256] RDX: 0000000000000000 RSI: 0000000040043d04 RDI: 0000000000000007 [ 316.702036][T11256] RBP: 00007f859267f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.702053][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.702068][T11256] R13: 00007f85919c6308 R14: 00007f85919c6270 R15: 00007ffd01441748 [ 316.702107][T11256] [ 316.702155][T11256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.411490][T11266] bond0: option all_slaves_active: invalid value () [ 319.565261][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 319.603906][T11389] nvme_fabrics: missing parameter 'transport=%s' [ 319.615195][T11389] nvme_fabrics: missing parameter 'nqn=%s' [ 320.576321][T11429] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 320.599263][T11445] syz.1.668 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.154490][T11466] bond0: option all_slaves_active: invalid value () [ 321.476936][T11382] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 321.572080][T11393] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 322.680959][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.689790][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.279458][T11741] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(11) [ 324.683377][T11817] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 325.184485][T11838] binder: 11837:11838 ioctl c0306201 0 returned -14 [ 325.302278][T11831] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 325.502460][T11853] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 325.516770][T11853] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 325.675970][T11853] futex_wake_op: syz.0.685 tries to shift op by -2048; fix this program [ 325.858657][T11872] zswap: compressor not available [ 326.345766][T11881] zswap: compressor not available [ 327.933338][T11951] FAULT_INJECTION: forcing a failure. [ 327.933338][T11951] name failslab, interval 1, probability 0, space 0, times 0 [ 327.956658][T11951] CPU: 0 UID: 0 PID: 11951 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 327.956703][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.956732][T11951] Call Trace: [ 327.956742][T11951] [ 327.956754][T11951] dump_stack_lvl+0x16c/0x1f0 [ 327.956805][T11951] should_fail_ex+0x512/0x640 [ 327.956853][T11951] ? fs_reclaim_acquire+0xae/0x150 [ 327.956901][T11951] ? tomoyo_encode2+0x100/0x3e0 [ 327.956942][T11951] should_failslab+0xc2/0x120 [ 327.956983][T11951] __kmalloc_noprof+0xd2/0x510 [ 327.957030][T11951] tomoyo_encode2+0x100/0x3e0 [ 327.957079][T11951] tomoyo_encode+0x29/0x50 [ 327.957121][T11951] tomoyo_realpath_from_path+0x18f/0x6e0 [ 327.957170][T11951] ? tomoyo_profile+0x47/0x60 [ 327.957203][T11951] tomoyo_path_number_perm+0x245/0x580 [ 327.957239][T11951] ? tomoyo_path_number_perm+0x237/0x580 [ 327.957280][T11951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.957316][T11951] ? futex_wake+0x1ad/0x530 [ 327.957399][T11951] ? find_held_lock+0x2b/0x80 [ 327.957429][T11951] ? hook_file_ioctl_common+0x145/0x410 [ 327.957475][T11951] ? __fget_files+0x20e/0x3c0 [ 327.957517][T11951] security_file_ioctl+0x9b/0x240 [ 327.957559][T11951] __x64_sys_ioctl+0xb7/0x210 [ 327.957610][T11951] do_syscall_64+0xcd/0x490 [ 327.957660][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.957690][T11951] RIP: 0033:0x7f859178ebe9 [ 327.957723][T11951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.957753][T11951] RSP: 002b:00007f85926e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.957781][T11951] RAX: ffffffffffffffda RBX: 00007f85919c5fa0 RCX: 00007f859178ebe9 [ 327.957801][T11951] RDX: 0000200000000100 RSI: 000000004018bc0f RDI: 0000000000000005 [ 327.957819][T11951] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.957836][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.957853][T11951] R13: 00007f85919c6038 R14: 00007f85919c5fa0 R15: 00007ffd01441748 [ 327.957894][T11951] [ 327.957921][T11951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.985618][T11954] CIFS: VFS: Invalid SecurityFlags: [ 328.012416][T11939] zswap: compressor not available [ 328.437076][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'. [ 328.885168][T12011] FAULT_INJECTION: forcing a failure. [ 328.885168][T12011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 328.898790][T12011] CPU: 1 UID: 0 PID: 12011 Comm: syz.1.703 Not tainted syzkaller #0 PREEMPT(full) [ 328.898830][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.898848][T12011] Call Trace: [ 328.898857][T12011] [ 328.898869][T12011] dump_stack_lvl+0x16c/0x1f0 [ 328.898919][T12011] should_fail_ex+0x512/0x640 [ 328.898971][T12011] should_fail_futex+0x4c/0x60 [ 328.899006][T12011] futex_lock_pi_atomic+0x148/0xd50 [ 328.899057][T12011] futex_lock_pi+0x23f/0x7c0 [ 328.899105][T12011] ? __pfx_futex_lock_pi+0x10/0x10 [ 328.899143][T12011] ? __futex_wait+0x24c/0x2f0 [ 328.899219][T12011] ? futex_private_hash_put+0x18a/0x300 [ 328.899263][T12011] ? __pfx_futex_wake_mark+0x10/0x10 [ 328.899321][T12011] ? ksys_write+0x190/0x250 [ 328.899365][T12011] do_futex+0x11a/0x350 [ 328.899404][T12011] ? __pfx_do_futex+0x10/0x10 [ 328.899453][T12011] __x64_sys_futex+0x1e0/0x4c0 [ 328.899501][T12011] ? fput+0x9b/0xd0 [ 328.899541][T12011] ? __pfx___x64_sys_futex+0x10/0x10 [ 328.899579][T12011] ? xfd_validate_state+0x61/0x180 [ 328.899621][T12011] ? __pfx_ksys_write+0x10/0x10 [ 328.899668][T12011] do_syscall_64+0xcd/0x490 [ 328.899717][T12011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.899746][T12011] RIP: 0033:0x7f944b78ebe9 [ 328.899771][T12011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.899800][T12011] RSP: 002b:00007f944990f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 328.899829][T12011] RAX: ffffffffffffffda RBX: 00007f944b9c6630 RCX: 00007f944b78ebe9 [ 328.899848][T12011] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 328.899866][T12011] RBP: 00007f944b811e19 R08: 0000000000000000 R09: 000000008000fff2 [ 328.899884][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.899901][T12011] R13: 00007f944b9c66c8 R14: 00007f944b9c6630 R15: 00007ffc4cf63d78 [ 328.899941][T12011] [ 329.216525][T12017] netlink: 322 bytes leftover after parsing attributes in process `syz.0.705'. [ 329.675619][T12067] futex_wake_op: syz.0.707 tries to shift op by -9; fix this program [ 330.592154][T12076] zswap: compressor not available [ 331.243266][ T5923] smpboot: CPU 1 is now offline [ 331.440085][T12119] CIFS: VFS: Invalid SecurityFlags: 0 [ 331.440085][T12119] [ 332.651856][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 333.145870][T12164] binder: 12162:12164 ioctl c0306201 0 returned -14 [ 334.241416][T12194] zswap: compressor not available [ 335.871720][T12302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.882378][T12302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.892843][T12302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.901949][T12302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.909683][T12302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.488877][T12298] chnl_net:caif_netlink_parms(): no params data found [ 336.678095][T12444] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 336.822503][T12298] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.870736][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.904778][T12298] bridge_slave_0: entered allmulticast mode [ 336.931260][T12298] bridge_slave_0: entered promiscuous mode [ 336.971433][T12298] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.003644][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.043558][T12298] bridge_slave_1: entered allmulticast mode [ 337.076035][T12298] bridge_slave_1: entered promiscuous mode [ 337.247567][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.341369][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.584471][T12298] team0: Port device team_slave_0 added [ 337.624812][T12298] team0: Port device team_slave_1 added [ 337.784658][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.816389][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.875540][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.952532][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.961159][T12302] Bluetooth: hci4: command tx timeout [ 337.979802][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.073453][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.289936][T12298] hsr_slave_0: entered promiscuous mode [ 338.317683][T12298] hsr_slave_1: entered promiscuous mode [ 338.349694][T12298] debugfs: 'hsr0' already exists in 'hsr' [ 338.371255][T12298] Cannot create hsr debugfs directory [ 338.447223][T12619] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 338.988203][T12714] binder: 12712:12714 ioctl c0306201 0 returned -14 [ 339.128541][T12298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.171031][T12298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.219756][T12298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.258052][T12298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.511197][T12298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.591488][T12298] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.630221][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.637391][T11718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.693712][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.700847][T11718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.043786][T12302] Bluetooth: hci4: command tx timeout [ 340.270254][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 340.306632][T12752] geneve1: entered promiscuous mode [ 340.327091][T12752] geneve1: entered allmulticast mode [ 340.363479][T12756] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 340.389663][T12298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.056533][T12298] veth0_vlan: entered promiscuous mode [ 341.097165][T12298] veth1_vlan: entered promiscuous mode [ 341.205932][T12298] veth0_macvtap: entered promiscuous mode [ 341.250555][T12298] veth1_macvtap: entered promiscuous mode [ 341.321886][T12298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.365233][T12298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.420062][T11718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.449614][T11718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.492857][T11718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.543416][T11718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.750326][T11714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.790047][T11714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.879438][T11714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.916972][T11714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.006580][T12790] CIFS: VFS: Invalid SecurityFlags:  [ 342.122845][T11527] Bluetooth: hci4: command tx timeout [ 343.534699][T12842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.541038][T12842] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 343.592662][T12842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.606485][T12842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 343.689501][T12842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.804911][T12302] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 343.824309][T12842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 343.880697][T12842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.929232][T12842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 343.998815][T12842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.047440][T12842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 344.130212][T12842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 344.283686][T11527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.293716][T11527] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.301863][T11527] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.310527][T11527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.318189][T11527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.154718][T12860] chnl_net:caif_netlink_parms(): no params data found [ 345.562851][T12302] Bluetooth: hci1: command 0x0406 tx timeout [ 345.642878][T12302] Bluetooth: hci2: command 0x0406 tx timeout [ 345.724306][T12302] Bluetooth: hci0: command 0x0406 tx timeout [ 345.882919][T12302] Bluetooth: hci3: command 0x0406 tx timeout [ 346.043232][T12302] Bluetooth: hci4: command 0x0c1a tx timeout [ 346.237921][T12860] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.290641][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.343844][T12860] bridge_slave_0: entered allmulticast mode [ 346.364192][T12302] Bluetooth: hci5: command tx timeout [ 346.375811][T12860] bridge_slave_0: entered promiscuous mode [ 346.406230][T12860] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.435035][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.472619][T12860] bridge_slave_1: entered allmulticast mode [ 346.491216][T12860] bridge_slave_1: entered promiscuous mode [ 346.976979][T12860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.028898][T12860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.237586][T13145] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 347.298132][T12860] team0: Port device team_slave_0 added [ 347.348112][T12860] team0: Port device team_slave_1 added [ 347.499579][T13181] binder: 13180:13181 ioctl c0306201 0 returned -14 [ 347.551366][T12860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.583171][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.644096][T12302] Bluetooth: hci1: command 0x0406 tx timeout [ 347.724443][T12302] Bluetooth: hci2: command 0x0406 tx timeout [ 347.739901][T12860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.803491][T12302] Bluetooth: hci0: command 0x0406 tx timeout [ 347.821933][T12860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.862652][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.962747][T12302] Bluetooth: hci3: command 0x0406 tx timeout [ 348.009055][T12860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.122768][T12302] Bluetooth: hci4: command 0x0c1a tx timeout [ 348.315125][T12860] hsr_slave_0: entered promiscuous mode [ 348.360268][T12860] hsr_slave_1: entered promiscuous mode [ 348.386453][T12860] debugfs: 'hsr0' already exists in 'hsr' [ 348.392201][T12860] Cannot create hsr debugfs directory [ 348.448166][T12302] Bluetooth: hci5: command tx timeout [ 348.634594][T13202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.667372][T13202] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.704003][T13202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.743544][T13202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.762000][T13202] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 348.817564][T13202] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 348.854153][T13202] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 348.911322][T13202] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 349.455422][T12860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 349.550543][T13341] serio: Serial port pty6 [ 349.589932][T12860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.704679][T12860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.755148][T12860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.080135][T12860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.161794][T12860] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.216532][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.223688][T11714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.297821][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.304984][T11714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.499005][T12860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.682782][T12302] Bluetooth: hci2: command 0x0406 tx timeout [ 350.688993][T12302] Bluetooth: hci1: command 0x0406 tx timeout [ 350.763948][T12302] Bluetooth: hci4: command 0x0c1a tx timeout [ 350.770004][T11527] Bluetooth: hci3: command 0x0406 tx timeout [ 350.776635][T11527] Bluetooth: hci0: command 0x0406 tx timeout [ 350.847133][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 350.933567][T13370] bond0: option all_slaves_active: invalid value () [ 351.308437][T12860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.316873][T12860] veth0_vlan: entered promiscuous mode [ 352.402999][T12860] veth1_vlan: entered promiscuous mode [ 352.476909][T13464] bond0: option all_slaves_active: invalid value () [ 352.678436][T12860] veth0_macvtap: entered promiscuous mode [ 352.740125][T12860] veth1_macvtap: entered promiscuous mode [ 352.908500][T12860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.923392][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 352.954499][T12860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.115739][T11690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.161332][T11690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.250068][T11690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.300744][T11690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.492707][T11522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.552594][T11522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.665034][T11717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.702145][T11717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.265205][T13530] CIFS: VFS: Invalid SecurityFlags: 0 [ 354.265205][T13530] [ 355.003993][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 356.222475][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.781'. [ 356.329852][T13637] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 356.551037][T13637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 356.656086][T13389] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 356.656117][T13389] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 356.671053][T13389] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 356.671099][T13389] Bluetooth: hci4: adv larger than maximum supported [ 356.678457][T13389] Bluetooth: hci4: Unknown advertising packet type: 0x3a [ 356.685517][T13389] Bluetooth: hci4: adv larger than maximum supported [ 356.694882][T13389] Bluetooth: hci4: Malformed LE Event: 0x0d [ 357.083996][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 357.174641][T13705] erspan0: entered allmulticast mode [ 357.205942][T13705] usbip-vudc usbip-vudc.0: gadget not bound [ 357.491936][T13723] binder: 13722:13723 ioctl c0306201 0 returned -14 [ 358.395523][T13729] vhci_hcd: invalid port number 23 [ 361.381518][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'. [ 362.220043][T13863] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 362.345296][T13865] nbd: couldn't find device at index 137 [ 363.328407][ T30] audit: type=1800 audit(2114.691:12): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.806" name="members" dev="configfs" ino=30911 res=0 errno=0 [ 363.890281][T13906] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 363.974207][T13876] bond0: option all_slaves_active: invalid value () [ 364.131302][T13917] binder: 13916:13917 ioctl c0306201 0 returned -14 [ 364.886028][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 364.938235][T13938] nfs4: Unknown parameter ' ' [ 365.111036][T13944] binder: 13942:13944 ioctl c0306201 0 returned -14 [ 365.460585][T13949] binder: 13942:13949 ioctl 2287 ffffffffffffffff returned -22 [ 366.430365][T13989] binder: 13986:13989 ioctl c0306201 0 returned -14 [ 369.030006][T13987] ALSA: mixer_oss: invalid OSS volume '' [ 369.432699][T14024] program syz.5.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.682046][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.825'. [ 369.699925][T14036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 369.732381][T14035] geneve1: entered promiscuous mode [ 369.752580][T14035] geneve1: entered allmulticast mode [ 370.865196][T14098] sctp: [Deprecated]: syz.0.829 (pid 14098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.865196][T14098] Use struct sctp_sack_info instead [ 371.638330][T14131] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 372.529099][T14157] Invalid ELF header magic: != ELF [ 372.958300][T14169] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 375.400796][T14222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 376.219422][T11520] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.229314][T11520] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.238783][T11520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.247023][T11520] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.254945][T11520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.670808][T14253] chnl_net:caif_netlink_parms(): no params data found [ 378.038551][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.094295][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.101558][T14253] bridge_slave_0: entered allmulticast mode [ 378.180715][T14253] bridge_slave_0: entered promiscuous mode [ 378.209890][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.241334][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.280639][T14253] bridge_slave_1: entered allmulticast mode [ 378.322398][T14253] bridge_slave_1: entered promiscuous mode [ 378.365425][T11520] Bluetooth: hci6: command tx timeout [ 378.409467][T14538] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 378.535260][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.597963][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.849461][T14253] team0: Port device team_slave_0 added [ 378.896173][T14253] team0: Port device team_slave_1 added [ 379.194432][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.226970][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.338601][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.393984][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.411223][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.464631][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.860755][T14253] hsr_slave_0: entered promiscuous mode [ 379.921936][T14253] hsr_slave_1: entered promiscuous mode [ 379.963097][T14253] debugfs: 'hsr0' already exists in 'hsr' [ 379.968852][T14253] Cannot create hsr debugfs directory [ 380.444144][T11520] Bluetooth: hci6: command tx timeout [ 381.478044][T14253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.555699][T14253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.676735][T14253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.805920][T14253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.484767][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 382.523779][T11520] Bluetooth: hci6: command tx timeout [ 382.548026][T14829] netlink: 194 bytes leftover after parsing attributes in process `syz.0.864'. [ 382.658068][T14253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.811050][T14253] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.941840][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.949025][T11714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.068934][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.076112][T11714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.011270][T14253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.137651][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.144105][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.610605][T11520] Bluetooth: hci6: command tx timeout [ 384.665135][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.868'. [ 385.092210][T14253] veth0_vlan: entered promiscuous mode [ 385.217978][T14253] veth1_vlan: entered promiscuous mode [ 385.431040][T14253] veth0_macvtap: entered promiscuous mode [ 385.484544][T14253] veth1_macvtap: entered promiscuous mode [ 385.508764][T14908] CIFS: VFS: Invalid SecurityFlags: 0 [ 385.508764][T14908] [ 385.585131][T14253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.663861][T14253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.712824][T11522] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.726311][T11718] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.793264][T11718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.975855][T11718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.352968][T11730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.360829][T11730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.548162][T14947] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 386.583857][T11714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.639744][T11714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.013601][T14976] netlink: 19 bytes leftover after parsing attributes in process `syz.6.853'. [ 388.232037][T15035] binder: 15034:15035 ioctl c0306201 0 returned -14 [ 388.268454][T15040] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 388.285680][T15038] binder: 15037:15038 ioctl c0306201 0 returned -14 [ 389.235558][T15051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 389.640697][T15055] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 390.748756][T15100] CIFS: VFS: Invalid SecurityFlags: 0 [ 390.748756][T15100] [ 390.889442][T15096] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 390.989488][T15107] binder: 15106:15107 ioctl c0306201 0 returned -14 [ 391.684064][T15135] capability: warning: `syz.6.888' uses deprecated v2 capabilities in a way that may be insecure [ 393.113668][T15182] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 393.401004][T15193] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 394.760453][ T30] audit: type=1800 audit(2146.121:13): pid=15237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.899" name="dummy_udc" dev="gadgetfs" ino=7263 res=0 errno=0 [ 395.502816][T15266] binder: 15265:15266 ioctl c0306201 0 returned -14 [ 395.864199][T15253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.926053][T15253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.984791][T15253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.990849][T15253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.100356][T15274] CIFS: VFS: Invalid SecurityFlags: 0 [ 396.100356][T15274] [ 396.110501][T15253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 396.137674][T15253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 396.187145][T15253] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 396.243476][T15253] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 396.299696][T15253] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 396.433964][T15255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 397.033205][T15309] FAULT_INJECTION: forcing a failure. [ 397.033205][T15309] name failslab, interval 1, probability 0, space 0, times 0 [ 397.170019][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.2.907 Not tainted syzkaller #0 PREEMPT(full) [ 397.170047][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.170058][T15309] Call Trace: [ 397.170065][T15309] [ 397.170072][T15309] dump_stack_lvl+0x16c/0x1f0 [ 397.170106][T15309] should_fail_ex+0x512/0x640 [ 397.170136][T15309] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 397.170160][T15309] should_failslab+0xc2/0x120 [ 397.170184][T15309] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 397.170206][T15309] ? vma_merge_new_range+0x3ae/0xa50 [ 397.170226][T15309] ? vm_area_alloc+0x1f/0x160 [ 397.170247][T15309] vm_area_alloc+0x1f/0x160 [ 397.170266][T15309] __mmap_region+0xf90/0x27b0 [ 397.170290][T15309] ? finish_task_switch.isra.0+0x21c/0xc10 [ 397.170310][T15309] ? __pfx___mmap_region+0x10/0x10 [ 397.170330][T15309] ? rcu_is_watching+0x12/0xc0 [ 397.170353][T15309] ? rcu_is_watching+0x12/0xc0 [ 397.170371][T15309] ? trace_sched_exit_tp+0xd1/0x120 [ 397.170399][T15309] ? __schedule+0x11a3/0x5de0 [ 397.170424][T15309] ? __lock_acquire+0x62e/0x1ce0 [ 397.170460][T15309] ? __pfx___schedule+0x10/0x10 [ 397.170510][T15309] ? trace_cap_capable+0x18d/0x200 [ 397.170538][T15309] mmap_region+0x1ab/0x3f0 [ 397.170560][T15309] ? __get_unmapped_area+0x267/0x440 [ 397.170589][T15309] do_mmap+0xa3e/0x1210 [ 397.170619][T15309] ? __pfx_do_mmap+0x10/0x10 [ 397.170645][T15309] ? __pfx_down_write_killable+0x10/0x10 [ 397.170668][T15309] vm_mmap_pgoff+0x29e/0x470 [ 397.170698][T15309] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 397.170724][T15309] ? cap_task_prctl+0x2af/0xa80 [ 397.170757][T15309] ? __x64_sys_futex+0x1e0/0x4c0 [ 397.170779][T15309] ? __x64_sys_futex+0x1e9/0x4c0 [ 397.170806][T15309] ksys_mmap_pgoff+0x7d/0x5c0 [ 397.170832][T15309] ? syscall_user_dispatch+0x78/0x140 [ 397.170865][T15309] __x64_sys_mmap+0x125/0x190 [ 397.170896][T15309] do_syscall_64+0xcd/0x490 [ 397.170926][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.170946][T15309] RIP: 0033:0x7f859178ebe9 [ 397.170961][T15309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.170979][T15309] RSP: 002b:00007f859267f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 397.170997][T15309] RAX: ffffffffffffffda RBX: 00007f85919c6270 RCX: 00007f859178ebe9 [ 397.171008][T15309] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 397.171019][T15309] RBP: 00007f8591811e19 R08: 0000000000000002 R09: 0000000000008000 [ 397.171030][T15309] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 397.171041][T15309] R13: 00007f85919c6308 R14: 00007f85919c6270 R15: 00007ffd01441748 [ 397.171064][T15309] [ 397.659906][T13389] Bluetooth: hci1: command 0x0406 tx timeout [ 397.906559][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.908'. [ 397.962635][T13389] Bluetooth: hci2: command 0x0406 tx timeout [ 398.042824][T13389] Bluetooth: hci3: command 0x0406 tx timeout [ 398.048856][T13389] Bluetooth: hci0: command 0x0406 tx timeout [ 398.128635][T13389] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.207470][T13389] Bluetooth: hci6: command 0x0c1a tx timeout [ 398.213589][T11520] Bluetooth: hci5: command 0x0419 tx timeout [ 399.075092][T15348] syz.5.911 (15348): /proc/15346/oom_adj is deprecated, please use /proc/15346/oom_score_adj instead. [ 400.284107][T13389] Bluetooth: hci6: command 0x0c1a tx timeout [ 401.372197][T15390] openvswitch: netlink: IP tunnel dst address not specified [ 401.783571][T15409] FAULT_INJECTION: forcing a failure. [ 401.783571][T15409] name failslab, interval 1, probability 0, space 0, times 0 [ 401.857825][T15409] CPU: 0 UID: 0 PID: 15409 Comm: syz.2.917 Not tainted syzkaller #0 PREEMPT(full) [ 401.857852][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.857863][T15409] Call Trace: [ 401.857869][T15409] [ 401.857876][T15409] dump_stack_lvl+0x16c/0x1f0 [ 401.857908][T15409] should_fail_ex+0x512/0x640 [ 401.857938][T15409] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 401.857963][T15409] should_failslab+0xc2/0x120 [ 401.857988][T15409] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 401.858010][T15409] ? __d_alloc+0x32/0xae0 [ 401.858036][T15409] __d_alloc+0x32/0xae0 [ 401.858061][T15409] path_from_stashed+0x427/0x750 [ 401.858082][T15409] ? do_raw_spin_unlock+0x172/0x230 [ 401.858114][T15409] ns_get_path+0x5f/0x80 [ 401.858134][T15409] proc_ns_get_link+0x121/0x230 [ 401.858156][T15409] ? __pfx_proc_ns_get_link+0x10/0x10 [ 401.858181][T15409] ? atime_needs_update+0x8b/0x710 [ 401.858210][T15409] ? __pfx_proc_ns_get_link+0x10/0x10 [ 401.858233][T15409] step_into+0x1a2c/0x2270 [ 401.858257][T15409] ? __pfx_step_into+0x10/0x10 [ 401.858274][T15409] ? find_held_lock+0x2b/0x80 [ 401.858300][T15409] path_openat+0x6db/0x2cb0 [ 401.858328][T15409] ? __pfx_path_openat+0x10/0x10 [ 401.858355][T15409] do_filp_open+0x20b/0x470 [ 401.858377][T15409] ? __pfx_do_filp_open+0x10/0x10 [ 401.858414][T15409] ? alloc_fd+0x471/0x7d0 [ 401.858439][T15409] do_sys_openat2+0x11b/0x1d0 [ 401.858467][T15409] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.858502][T15409] __x64_sys_openat+0x174/0x210 [ 401.858531][T15409] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.858568][T15409] do_syscall_64+0xcd/0x490 [ 401.858597][T15409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.858615][T15409] RIP: 0033:0x7f859178d550 [ 401.858631][T15409] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 401.858649][T15409] RSP: 002b:00007f85926e1f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 401.858666][T15409] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f859178d550 [ 401.858678][T15409] RDX: 0000000000000002 RSI: 00007f85926e1fa0 RDI: 00000000ffffff9c [ 401.858688][T15409] RBP: 00007f85926e1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 401.858699][T15409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 401.858709][T15409] R13: 00007f85919c6038 R14: 00007f85919c5fa0 R15: 00007ffd01441748 [ 401.858731][T15409] [ 402.477514][T13389] Bluetooth: hci6: command 0x0c1a tx timeout [ 403.316633][T15454] CIFS: VFS: Invalid SecurityFlags: 0 [ 403.316633][T15454] [ 404.065855][T15502] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 404.250446][T15502] FAULT_INJECTION: forcing a failure. [ 404.250446][T15502] name failslab, interval 1, probability 0, space 0, times 0 [ 404.419374][T15502] CPU: 0 UID: 0 PID: 15502 Comm: syz.2.923 Not tainted syzkaller #0 PREEMPT(full) [ 404.419404][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.419414][T15502] Call Trace: [ 404.419421][T15502] [ 404.419428][T15502] dump_stack_lvl+0x16c/0x1f0 [ 404.419461][T15502] should_fail_ex+0x512/0x640 [ 404.419491][T15502] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 404.419516][T15502] should_failslab+0xc2/0x120 [ 404.419541][T15502] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 404.419562][T15502] ? d_instantiate+0x77/0x90 [ 404.419586][T15502] ? alloc_empty_file+0x55/0x1e0 [ 404.419616][T15502] alloc_empty_file+0x55/0x1e0 [ 404.419644][T15502] alloc_file_pseudo+0x13a/0x230 [ 404.419673][T15502] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 404.419709][T15502] ? _raw_spin_unlock+0x28/0x50 [ 404.419732][T15502] ? alloc_fd+0x471/0x7d0 [ 404.419753][T15502] __anon_inode_getfile+0xe8/0x280 [ 404.419776][T15502] ? __init_waitqueue_head+0xca/0x150 [ 404.419808][T15502] do_epoll_create+0x324/0x480 [ 404.419834][T15502] __x64_sys_epoll_create+0x45/0x70 [ 404.419855][T15502] do_syscall_64+0xcd/0x490 [ 404.419885][T15502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.419904][T15502] RIP: 0033:0x7f859178ebe9 [ 404.419919][T15502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.419937][T15502] RSP: 002b:00007f85926c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 404.419954][T15502] RAX: ffffffffffffffda RBX: 00007f85919c6090 RCX: 00007f859178ebe9 [ 404.419966][T15502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 404.419977][T15502] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 404.419988][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.419998][T15502] R13: 00007f85919c6128 R14: 00007f85919c6090 R15: 00007ffd01441748 [ 404.420021][T15502] [ 405.336647][T15562] netlink: 'syz.5.929': attribute type 5 has an invalid length. [ 405.363842][T15562] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 405.371505][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'. [ 407.361051][T15595] zswap: compressor not available [ 408.332051][T11520] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.341382][T11520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 408.352646][T11520] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 408.360919][T11520] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 408.374735][T11520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.698885][T15618] serio: Serial port pty16 [ 408.704920][T15641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.941'. [ 408.815867][T15657] vivid-007: ================= START STATUS ================= [ 408.859041][T15657] vivid-007: Generate PTS: true [ 408.893496][T15657] vivid-007: Generate SCR: true [ 408.898424][T15657] tpg source WxH: 320x240 (Y'CbCr) [ 409.002720][T15657] tpg field: 1 [ 409.006124][T15657] tpg crop: (0,0)/320x240 [ 409.010472][T15657] tpg compose: (0,0)/320x240 [ 409.035245][T15657] tpg colorspace: 8 [ 409.052588][T15657] tpg transfer function: 0/0 [ 409.111208][T15657] tpg Y'CbCr encoding: 0/0 [ 409.209132][T15657] tpg quantization: 0/0 [ 409.268170][T15657] tpg RGB range: 0/2 [ 409.308310][T15657] vivid-007: ================== END STATUS ================== [ 410.444309][T11520] Bluetooth: hci7: command tx timeout [ 411.205902][T15615] chnl_net:caif_netlink_parms(): no params data found [ 411.943604][T15615] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.977955][T15615] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.005858][T15615] bridge_slave_0: entered allmulticast mode [ 412.034020][T15615] bridge_slave_0: entered promiscuous mode [ 412.138145][T15615] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.164218][T15615] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.182129][T15615] bridge_slave_1: entered allmulticast mode [ 412.200028][T15615] bridge_slave_1: entered promiscuous mode [ 412.319732][T15615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.368353][T15615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.490607][T15615] team0: Port device team_slave_0 added [ 412.524787][T11520] Bluetooth: hci7: command tx timeout [ 412.546423][T15615] team0: Port device team_slave_1 added [ 412.727501][T15615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.768841][T15615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.794789][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.891760][T15615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.944311][T15615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.983405][T15615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.009322][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.157611][T15615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.432203][T15615] hsr_slave_0: entered promiscuous mode [ 413.487813][T15615] hsr_slave_1: entered promiscuous mode [ 413.524250][T15615] debugfs: 'hsr0' already exists in 'hsr' [ 413.530015][T15615] Cannot create hsr debugfs directory [ 414.607942][T11520] Bluetooth: hci7: command tx timeout [ 414.870347][T15615] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.936884][T15615] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 415.045113][T15615] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 415.099064][T15615] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 415.575482][T15615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.743789][T16192] FAULT_INJECTION: forcing a failure. [ 415.743789][T16192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.806153][T16192] CPU: 0 UID: 0 PID: 16192 Comm: syz.2.957 Not tainted syzkaller #0 PREEMPT(full) [ 415.806181][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.806193][T16192] Call Trace: [ 415.806199][T16192] [ 415.806206][T16192] dump_stack_lvl+0x16c/0x1f0 [ 415.806241][T16192] should_fail_ex+0x512/0x640 [ 415.806282][T16192] ? page_copy_sane+0xcd/0x2d0 [ 415.806302][T16192] copy_folio_from_iter_atomic+0x4d3/0x1ac0 [ 415.806337][T16192] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 415.806360][T16192] ? shmem_write_begin+0x176/0x300 [ 415.806383][T16192] ? __pfx_fault_in_readable+0x10/0x10 [ 415.806410][T16192] ? __pfx_shmem_write_begin+0x10/0x10 [ 415.806434][T16192] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 415.806469][T16192] generic_perform_write+0x221/0x900 [ 415.806498][T16192] ? __pfx_generic_perform_write+0x10/0x10 [ 415.806522][T16192] ? generic_update_time+0xcf/0xf0 [ 415.806546][T16192] ? mnt_put_write_access_file+0x45/0xf0 [ 415.806578][T16192] shmem_file_write_iter+0x10e/0x140 [ 415.806606][T16192] do_iter_readv_writev+0x662/0x9e0 [ 415.806630][T16192] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 415.806663][T16192] vfs_writev+0x35f/0xde0 [ 415.806689][T16192] ? __pfx_vfs_writev+0x10/0x10 [ 415.806709][T16192] ? __mutex_lock+0x1c5/0x1060 [ 415.806744][T16192] ? __pfx___mutex_lock+0x10/0x10 [ 415.806781][T16192] ? __fget_files+0x20e/0x3c0 [ 415.806807][T16192] ? do_writev+0x132/0x340 [ 415.806826][T16192] do_writev+0x132/0x340 [ 415.806845][T16192] ? __pfx_do_writev+0x10/0x10 [ 415.806871][T16192] do_syscall_64+0xcd/0x490 [ 415.806901][T16192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.806920][T16192] RIP: 0033:0x7f859178ebe9 [ 415.806935][T16192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.806953][T16192] RSP: 002b:00007f85926e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 415.806971][T16192] RAX: ffffffffffffffda RBX: 00007f85919c5fa0 RCX: 00007f859178ebe9 [ 415.806983][T16192] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 415.806994][T16192] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 415.807004][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.807015][T16192] R13: 00007f85919c6038 R14: 00007f85919c5fa0 R15: 00007ffd01441748 [ 415.807038][T16192] [ 415.809205][T15615] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.083477][T16045] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.682957][T11520] Bluetooth: hci7: command tx timeout [ 416.777513][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.784847][T11718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.815321][T16210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.821521][T16210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.829216][T16210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.874030][T16210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.888144][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.895327][T11718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.914357][T16210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.930826][T16210] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 416.967950][T16210] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 417.017620][T16210] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 417.067570][T16210] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 417.181746][T16210] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 417.209254][T15615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.293544][T15615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.511384][T16252] delete_channel: no stack [ 417.622902][T16245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 417.628951][T16245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 417.828344][T16245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.958866][T16245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.096037][T16245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 418.102080][T16245] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 418.308839][T16245] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 418.319932][T15615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.363814][T16245] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 419.294884][T15615] veth0_vlan: entered promiscuous mode [ 419.406116][T15615] veth1_vlan: entered promiscuous mode [ 419.617938][T15615] veth0_macvtap: entered promiscuous mode [ 419.644185][T13389] Bluetooth: hci2: command 0x0406 tx timeout [ 419.650227][T13389] Bluetooth: hci1: command 0x0406 tx timeout [ 419.671934][T15615] veth1_macvtap: entered promiscuous mode [ 419.789122][T15615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.877396][T15615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.885408][T13389] Bluetooth: hci0: command 0x0406 tx timeout [ 419.955959][T11690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.965151][T13389] Bluetooth: hci3: command 0x0406 tx timeout [ 420.000338][T11690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.065329][T11690] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.102613][T11690] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.123049][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 420.129072][T13389] Bluetooth: hci4: command 0x0c1a tx timeout [ 420.364532][T13389] Bluetooth: hci6: command 0x0c1a tx timeout [ 420.405670][T11717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.442737][T13389] Bluetooth: hci7: command 0x0c1a tx timeout [ 420.462406][T11717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.516583][T11714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.556439][T11714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.031455][T16423] aoe: could not set interface list: too many interfaces [ 422.523424][T13389] Bluetooth: hci7: command 0x0c1a tx timeout [ 422.637319][T16418] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 423.454714][T16449] FAULT_INJECTION: forcing a failure. [ 423.454714][T16449] name failslab, interval 1, probability 0, space 0, times 0 [ 423.543583][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.2.969 Not tainted syzkaller #0 PREEMPT(full) [ 423.543609][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.543620][T16449] Call Trace: [ 423.543626][T16449] [ 423.543634][T16449] dump_stack_lvl+0x16c/0x1f0 [ 423.543667][T16449] should_fail_ex+0x512/0x640 [ 423.543696][T16449] ? __kmalloc_noprof+0xbf/0x510 [ 423.543720][T16449] ? ops_init+0x77/0x5f0 [ 423.543747][T16449] should_failslab+0xc2/0x120 [ 423.543772][T16449] __kmalloc_noprof+0xd2/0x510 [ 423.543794][T16449] ? __pfx_recent_net_init+0x10/0x10 [ 423.543826][T16449] ops_init+0x77/0x5f0 [ 423.543857][T16449] setup_net+0x10f/0x380 [ 423.543871][T16449] ? lockdep_init_map_type+0x5c/0x280 [ 423.543898][T16449] ? __pfx_setup_net+0x10/0x10 [ 423.543915][T16449] ? debug_mutex_init+0x37/0x70 [ 423.543936][T16449] copy_net_ns+0x2a6/0x5f0 [ 423.543957][T16449] create_new_namespaces+0x3ea/0xa90 [ 423.543984][T16449] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 423.544007][T16449] ksys_unshare+0x45b/0xa40 [ 423.544032][T16449] ? __pfx_ksys_unshare+0x10/0x10 [ 423.544058][T16449] ? xfd_validate_state+0x61/0x180 [ 423.544092][T16449] __x64_sys_unshare+0x31/0x40 [ 423.544117][T16449] do_syscall_64+0xcd/0x490 [ 423.544146][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.544164][T16449] RIP: 0033:0x7f859178ebe9 [ 423.544180][T16449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.544198][T16449] RSP: 002b:00007f85926e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 423.544216][T16449] RAX: ffffffffffffffda RBX: 00007f85919c5fa0 RCX: 00007f859178ebe9 [ 423.544228][T16449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 423.544238][T16449] RBP: 00007f8591811e19 R08: 0000000000000000 R09: 0000000000000000 [ 423.544249][T16449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.544259][T16449] R13: 00007f85919c6038 R14: 00007f85919c5fa0 R15: 00007ffd01441748 [ 423.544282][T16449] [ 423.754697][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.925117][T16459] netlink: 330 bytes leftover after parsing attributes in process `syz.6.970'. [ 423.935797][T16459] mac80211_hwsim hwsim22 ›: renamed from wlan0 (while UP) [ 424.618333][T13389] Bluetooth: hci7: command 0x0c1a tx timeout [ 424.723394][T16477] netlink: 186 bytes leftover after parsing attributes in process `syz.2.972'. [ 424.750922][T13389] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 426.443235][T16566] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 426.844493][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 427.720866][T16657] CIFS: VFS: Invalid SecurityFlags: [ 430.282329][T16849] CIFS: VFS: Invalid SecurityFlags: [ 431.980188][T16880] zswap: compressor not available [ 433.394385][T16903] netlink: 25520 bytes leftover after parsing attributes in process `syz.2.998'. [ 433.434024][T16903] netlink: zone id is out of range [ 433.439157][T16903] netlink: zone id is out of range [ 433.462618][T16903] netlink: zone id is out of range [ 433.467805][T16903] netlink: zone id is out of range [ 433.477927][T16903] netlink: zone id is out of range [ 433.488046][T16903] netlink: zone id is out of range [ 433.504639][T16903] netlink: zone id is out of range [ 433.515255][T16903] netlink: zone id is out of range [ 433.526006][T16903] netlink: zone id is out of range [ 433.538573][T16903] netlink: zone id is out of range [ 434.240260][T16924] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 434.653501][T16943] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1006'. [ 434.706841][T16943] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 435.856948][T16972] FAULT_INJECTION: forcing a failure. [ 435.856948][T16972] name failslab, interval 1, probability 0, space 0, times 0 [ 435.928994][T16972] CPU: 0 UID: 0 PID: 16972 Comm: syz.5.1011 Not tainted syzkaller #0 PREEMPT(full) [ 435.929021][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.929032][T16972] Call Trace: [ 435.929038][T16972] [ 435.929045][T16972] dump_stack_lvl+0x16c/0x1f0 [ 435.929077][T16972] should_fail_ex+0x512/0x640 [ 435.929106][T16972] ? __kvmalloc_node_noprof+0x124/0x620 [ 435.929129][T16972] should_failslab+0xc2/0x120 [ 435.929154][T16972] __kvmalloc_node_noprof+0x137/0x620 [ 435.929174][T16972] ? __lock_acquire+0xb97/0x1ce0 [ 435.929197][T16972] ? seq_read_iter+0x826/0x12c0 [ 435.929218][T16972] ? seq_read_iter+0x826/0x12c0 [ 435.929234][T16972] seq_read_iter+0x826/0x12c0 [ 435.929251][T16972] ? __mutex_trylock_common+0xe9/0x250 [ 435.929284][T16972] kernfs_fop_read_iter+0x40f/0x5a0 [ 435.929301][T16972] ? rw_verify_area+0xcf/0x6c0 [ 435.929322][T16972] vfs_read+0x8bf/0xcf0 [ 435.929346][T16972] ? __pfx___mutex_lock+0x10/0x10 [ 435.929374][T16972] ? __pfx_vfs_read+0x10/0x10 [ 435.929418][T16972] ksys_read+0x12a/0x250 [ 435.929438][T16972] ? __pfx_ksys_read+0x10/0x10 [ 435.929465][T16972] do_syscall_64+0xcd/0x490 [ 435.929495][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.929513][T16972] RIP: 0033:0x7fc6bf58ebe9 [ 435.929528][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.929552][T16972] RSP: 002b:00007fc6c03e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.929570][T16972] RAX: ffffffffffffffda RBX: 00007fc6bf7c6090 RCX: 00007fc6bf58ebe9 [ 435.929582][T16972] RDX: 0000000000001000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 435.929593][T16972] RBP: 00007fc6c03e3090 R08: 0000000000000000 R09: 0000000000000000 [ 435.929603][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.929613][T16972] R13: 00007fc6bf7c6128 R14: 00007fc6bf7c6090 R15: 00007ffd1aec8468 [ 435.929636][T16972] [ 436.449306][T11520] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 436.462015][T16969] zswap: compressor not available [ 436.467393][T11520] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 436.538629][T11520] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 436.612577][T11520] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 436.651267][T11520] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 437.300550][T16975] chnl_net:caif_netlink_parms(): no params data found [ 438.080941][T17148] binder: 17136:17148 ioctl c00c6211 0 returned -14 [ 438.234743][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.266586][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.292146][T16975] bridge_slave_0: entered allmulticast mode [ 438.311817][T16975] bridge_slave_0: entered promiscuous mode [ 438.409466][T16975] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.426341][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.455678][T16975] bridge_slave_1: entered allmulticast mode [ 438.482062][T16975] bridge_slave_1: entered promiscuous mode [ 438.762859][T11520] Bluetooth: hci8: command tx timeout [ 438.786665][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.866613][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.191911][T16975] team0: Port device team_slave_0 added [ 439.210546][T16975] team0: Port device team_slave_1 added [ 439.545383][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.563903][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.632536][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.666895][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.682815][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.756218][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.052339][T17319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.106231][T16975] hsr_slave_0: entered promiscuous mode [ 440.143703][T16975] hsr_slave_1: entered promiscuous mode [ 440.170330][T16975] debugfs: 'hsr0' already exists in 'hsr' [ 440.184223][T17319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.201311][T16975] Cannot create hsr debugfs directory [ 440.279265][T17344] zswap: compressor not available [ 440.378184][T17319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.437688][T17319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.596674][T17319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.734520][T17319] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 440.833269][T17319] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 440.842801][T11520] Bluetooth: hci8: command tx timeout [ 440.926627][T17319] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 441.011612][T17319] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 441.078966][T17319] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 441.167891][T16975] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 441.199764][T16975] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 441.211137][T17319] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 441.244223][T16975] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.298344][T16975] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.374553][T17319] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 441.696069][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.799845][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.894476][T11522] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.901639][T11522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.957411][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.964548][T11522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.130231][T11520] Bluetooth: hci1: command 0x0406 tx timeout [ 442.202897][T11520] Bluetooth: hci2: command 0x0406 tx timeout [ 442.443448][T11520] Bluetooth: hci3: command 0x0406 tx timeout [ 442.449608][T11520] Bluetooth: hci0: command 0x0406 tx timeout [ 442.622539][T11520] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.765875][T11520] Bluetooth: hci5: command 0x0419 tx timeout [ 442.831555][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.924288][T11520] Bluetooth: hci6: command 0x0c1a tx timeout [ 443.084910][T11520] Bluetooth: hci8: command 0x0419 tx timeout [ 443.091010][T13389] Bluetooth: hci7: command 0x0c1a tx timeout [ 443.247810][T17509] CIFS: VFS: Invalid SecurityFlags: 0 [ 443.247810][T17509] [ 444.042214][T17558] zswap: compressor not available [ 444.096367][T16975] veth0_vlan: entered promiscuous mode [ 444.146451][T16975] veth1_vlan: entered promiscuous mode [ 444.261783][T16975] veth0_macvtap: entered promiscuous mode [ 444.336776][T16975] veth1_macvtap: entered promiscuous mode [ 444.421409][T16975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.497452][T16975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.571187][T11730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.606367][T11730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.698858][T11730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.754796][T11730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.844304][T11520] Bluetooth: hci5: command 0x0419 tx timeout [ 445.162434][T11520] Bluetooth: hci8: command 0x0419 tx timeout [ 445.392551][T17587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.411547][T17587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.430574][T17587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.453070][T17587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.477438][T17587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 445.505243][T17587] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 445.541584][T17587] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 445.569352][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.576748][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.583294][T17587] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 445.589340][T17587] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 445.812685][T11712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.821679][T11712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.877706][T17616] CIFS: VFS: Invalid SecurityFlags: 0 [ 445.877706][T17616] [ 445.994445][T11690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.052364][T11690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.080256][T17625] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 446.930874][T17667] random: crng reseeded on system resumption [ 447.013095][T13389] Bluetooth: hci1: command 0x0406 tx timeout [ 447.252891][T17678] FAULT_INJECTION: forcing a failure. [ 447.252891][T17678] name failslab, interval 1, probability 0, space 0, times 0 [ 447.417418][T17678] CPU: 0 UID: 0 PID: 17678 Comm: syz.6.1044 Not tainted syzkaller #0 PREEMPT(full) [ 447.417445][T17678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.417456][T17678] Call Trace: [ 447.417463][T17678] [ 447.417470][T17678] dump_stack_lvl+0x16c/0x1f0 [ 447.417501][T17678] should_fail_ex+0x512/0x640 [ 447.417530][T17678] ? __kvmalloc_node_noprof+0x124/0x620 [ 447.417553][T17678] should_failslab+0xc2/0x120 [ 447.417578][T17678] __kvmalloc_node_noprof+0x137/0x620 [ 447.417598][T17678] ? __lock_acquire+0xb97/0x1ce0 [ 447.417621][T17678] ? seq_read_iter+0x826/0x12c0 [ 447.417642][T17678] ? seq_read_iter+0x826/0x12c0 [ 447.417658][T17678] seq_read_iter+0x826/0x12c0 [ 447.417676][T17678] ? __mutex_trylock_common+0xe9/0x250 [ 447.417708][T17678] kernfs_fop_read_iter+0x40f/0x5a0 [ 447.417725][T17678] ? rw_verify_area+0xcf/0x6c0 [ 447.417746][T17678] vfs_read+0x8bf/0xcf0 [ 447.417769][T17678] ? __pfx___mutex_lock+0x10/0x10 [ 447.417797][T17678] ? __pfx_vfs_read+0x10/0x10 [ 447.417832][T17678] ksys_read+0x12a/0x250 [ 447.417852][T17678] ? __pfx_ksys_read+0x10/0x10 [ 447.417880][T17678] do_syscall_64+0xcd/0x490 [ 447.417909][T17678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.417928][T17678] RIP: 0033:0x7fd08278ebe9 [ 447.417942][T17678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.417960][T17678] RSP: 002b:00007fd0835c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.417978][T17678] RAX: ffffffffffffffda RBX: 00007fd0829c5fa0 RCX: 00007fd08278ebe9 [ 447.417989][T17678] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 447.418000][T17678] RBP: 00007fd0835c7090 R08: 0000000000000000 R09: 0000000000000000 [ 447.418011][T17678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.418021][T17678] R13: 00007fd0829c6038 R14: 00007fd0829c5fa0 R15: 00007fff9d60e108 [ 447.418044][T17678] [ 447.615609][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.980494][T13389] Bluetooth: hci4: command 0x0c1a tx timeout [ 447.988481][T13389] Bluetooth: hci3: command 0x0406 tx timeout [ 447.995353][T13389] Bluetooth: hci0: command 0x0406 tx timeout [ 448.002150][T13389] Bluetooth: hci2: command 0x0406 tx timeout [ 448.008558][T13389] Bluetooth: hci6: command 0x0c1a tx timeout [ 448.014734][T13389] Bluetooth: hci5: command 0x0419 tx timeout [ 448.020776][T13389] Bluetooth: hci8: command 0x0419 tx timeout [ 448.027145][T13389] Bluetooth: hci7: command 0x0c1a tx timeout [ 448.671930][T17706] CIFS: VFS: Invalid SecurityFlags: 0 [ 448.671930][T17706] [ 448.783543][T17709] FAULT_INJECTION: forcing a failure. [ 448.783543][T17709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.895464][T17709] CPU: 0 UID: 0 PID: 17709 Comm: syz.2.1049 Not tainted syzkaller #0 PREEMPT(full) [ 448.895491][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.895501][T17709] Call Trace: [ 448.895508][T17709] [ 448.895515][T17709] dump_stack_lvl+0x16c/0x1f0 [ 448.895549][T17709] should_fail_ex+0x512/0x640 [ 448.895581][T17709] _copy_from_user+0x2e/0xd0 [ 448.895602][T17709] copy_msghdr_from_user+0x98/0x160 [ 448.895630][T17709] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.895668][T17709] ___sys_sendmsg+0xfe/0x1d0 [ 448.895696][T17709] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.895750][T17709] __sys_sendmsg+0x16d/0x220 [ 448.895777][T17709] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.895818][T17709] do_syscall_64+0xcd/0x490 [ 448.895848][T17709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.895867][T17709] RIP: 0033:0x7f859178ebe9 [ 448.895881][T17709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.895899][T17709] RSP: 002b:00007f85926e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.895917][T17709] RAX: ffffffffffffffda RBX: 00007f85919c5fa0 RCX: 00007f859178ebe9 [ 448.895929][T17709] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 448.895940][T17709] RBP: 00007f85926e2090 R08: 0000000000000000 R09: 0000000000000000 [ 448.895950][T17709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.895961][T17709] R13: 00007f85919c6038 R14: 00007f85919c5fa0 R15: 00007ffd01441748 [ 448.895983][T17709] [ 449.057336][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.081388][T17715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 449.163105][T17715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 449.780085][T17729] zswap: compressor not available [ 450.045819][T11520] Bluetooth: hci8: command 0x0419 tx timeout [ 451.582450][T17784] CIFS: VFS: Invalid SecurityFlags: " [ 452.049264][ T30] audit: type=1800 audit(2203.412:14): pid=17798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1060" name="lu_gp_id" dev="configfs" ino=39375 res=0 errno=0 [ 456.616370][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1073'. [ 456.866138][T17974] bond0: option all_slaves_active: invalid value () [ 457.004597][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1073'. [ 457.564557][T18012] FAULT_INJECTION: forcing a failure. [ 457.564557][T18012] name failslab, interval 1, probability 0, space 0, times 0 [ 457.651769][T18012] CPU: 0 UID: 0 PID: 18012 Comm: syz.5.1074 Not tainted syzkaller #0 PREEMPT(full) [ 457.651796][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.651808][T18012] Call Trace: [ 457.651813][T18012] [ 457.651820][T18012] dump_stack_lvl+0x16c/0x1f0 [ 457.651853][T18012] should_fail_ex+0x512/0x640 [ 457.651881][T18012] ? fs_reclaim_acquire+0xae/0x150 [ 457.651910][T18012] ? ima_alloc_init_template+0x19d/0x720 [ 457.651933][T18012] should_failslab+0xc2/0x120 [ 457.651956][T18012] __kmalloc_noprof+0xd2/0x510 [ 457.651978][T18012] ? __print_lock_name+0x41/0xe0 [ 457.652000][T18012] ima_alloc_init_template+0x19d/0x720 [ 457.652040][T18012] ? take_dentry_name_snapshot+0x319/0x7d0 [ 457.652071][T18012] ima_store_measurement+0x1eb/0x5c0 [ 457.652096][T18012] ? __pfx_ima_store_measurement+0x10/0x10 [ 457.652120][T18012] ? vfs_getxattr_alloc+0xec/0x340 [ 457.652146][T18012] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 457.652169][T18012] process_measurement+0x1ddb/0x23e0 [ 457.652204][T18012] ? __pfx_process_measurement+0x10/0x10 [ 457.652224][T18012] ? kasan_save_stack+0x33/0x60 [ 457.652244][T18012] ? __kasan_slab_alloc+0x89/0x90 [ 457.652266][T18012] ? security_file_alloc+0x34/0x2b0 [ 457.652290][T18012] ? init_file+0x93/0x4c0 [ 457.652319][T18012] ? find_held_lock+0x2b/0x80 [ 457.652364][T18012] ima_file_mmap+0x1b1/0x1d0 [ 457.652383][T18012] ? __pfx_ima_file_mmap+0x10/0x10 [ 457.652408][T18012] security_mmap_file+0x88c/0x990 [ 457.652434][T18012] vm_mmap_pgoff+0xec/0x470 [ 457.652464][T18012] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 457.652487][T18012] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 457.652516][T18012] ? hugetlbfs_get_inode+0x31f/0x730 [ 457.652543][T18012] ksys_mmap_pgoff+0x1c8/0x5c0 [ 457.652573][T18012] __x64_sys_mmap+0x125/0x190 [ 457.652604][T18012] do_syscall_64+0xcd/0x490 [ 457.652633][T18012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.652651][T18012] RIP: 0033:0x7fc6bf58ebe9 [ 457.652667][T18012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.652685][T18012] RSP: 002b:00007fc6c0404038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 457.652702][T18012] RAX: ffffffffffffffda RBX: 00007fc6bf7c5fa0 RCX: 00007fc6bf58ebe9 [ 457.652714][T18012] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 457.652725][T18012] RBP: 00007fc6bf611e19 R08: 0000000000000401 R09: 0000300000000000 [ 457.652736][T18012] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 457.652746][T18012] R13: 00007fc6bf7c6038 R14: 00007fc6bf7c5fa0 R15: 00007ffd1aec8468 [ 457.652769][T18012] [ 457.653976][ T30] audit: type=1804 audit(2209.023:15): pid=18012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.1074" name="anon_hugepage" dev="hugetlbfs" ino=39913 res=0 errno=0 [ 457.869557][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.983067][T18019] FAULT_INJECTION: forcing a failure. [ 457.983067][T18019] name fail_futex, interval 1, probability 0, space 0, times 0 [ 458.021063][T18019] CPU: 0 UID: 8 PID: 18019 Comm: syz.6.1076 Not tainted syzkaller #0 PREEMPT(full) [ 458.021093][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.021104][T18019] Call Trace: [ 458.021110][T18019] [ 458.021118][T18019] dump_stack_lvl+0x16c/0x1f0 [ 458.021150][T18019] should_fail_ex+0x512/0x640 [ 458.021193][T18019] get_futex_key+0x1d0/0x1560 [ 458.021218][T18019] ? __pfx_get_futex_key+0x10/0x10 [ 458.021240][T18019] ? futex_private_hash_put+0x176/0x300 [ 458.021268][T18019] futex_wake+0xea/0x530 [ 458.021293][T18019] ? futex_wait+0x120/0x380 [ 458.021320][T18019] ? __pfx_futex_wait+0x10/0x10 [ 458.021348][T18019] ? __pfx_futex_wake+0x10/0x10 [ 458.021385][T18019] do_futex+0x1e3/0x350 [ 458.021409][T18019] ? __pfx_do_futex+0x10/0x10 [ 458.021435][T18019] ? __pfx_sched_core_share_pid+0x10/0x10 [ 458.021459][T18019] __x64_sys_futex+0x1e0/0x4c0 [ 458.021486][T18019] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.021510][T18019] ? __pfx___do_sys_prctl+0x10/0x10 [ 458.021546][T18019] do_syscall_64+0xcd/0x490 [ 458.021576][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.021594][T18019] RIP: 0033:0x7fd08278ebe9 [ 458.021609][T18019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.021628][T18019] RSP: 002b:00007fd0835c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.021645][T18019] RAX: ffffffffffffffda RBX: 00007fd0829c5fa8 RCX: 00007fd08278ebe9 [ 458.021657][T18019] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0829c5fac [ 458.021668][T18019] RBP: 00007fd0829c5fa0 R08: 00007fd0835c8000 R09: 0000000000000000 [ 458.021679][T18019] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 458.021690][T18019] R13: 00007fd0829c6038 R14: 00007fff9d60e020 R15: 00007fff9d60e108 [ 458.021712][T18019] [ 458.447580][T18048] program syz.5.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.084997][T18064] zswap: compressor not available [ 460.474405][T18079] FAULT_INJECTION: forcing a failure. [ 460.474405][T18079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.623253][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1083'. [ 460.701756][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.6.1083 Not tainted syzkaller #0 PREEMPT(full) [ 460.701782][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.701793][T18079] Call Trace: [ 460.701799][T18079] [ 460.701806][T18079] dump_stack_lvl+0x16c/0x1f0 [ 460.701837][T18079] should_fail_ex+0x512/0x640 [ 460.701870][T18079] _copy_from_iter+0x29f/0x1720 [ 460.701892][T18079] ? __alloc_skb+0x200/0x380 [ 460.701918][T18079] ? __pfx__copy_from_iter+0x10/0x10 [ 460.701940][T18079] ? __pfx___might_resched+0x10/0x10 [ 460.701958][T18079] ? __lock_acquire+0xb97/0x1ce0 [ 460.701988][T18079] netlink_sendmsg+0x829/0xdd0 [ 460.702021][T18079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.702051][T18079] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 460.702075][T18079] ____sys_sendmsg+0xa95/0xc70 [ 460.702097][T18079] ? copy_msghdr_from_user+0x10a/0x160 [ 460.702124][T18079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.702164][T18079] ___sys_sendmsg+0x134/0x1d0 [ 460.702193][T18079] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.702246][T18079] __sys_sendmsg+0x16d/0x220 [ 460.702274][T18079] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.702315][T18079] do_syscall_64+0xcd/0x490 [ 460.702345][T18079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.702363][T18079] RIP: 0033:0x7fd08278ebe9 [ 460.702377][T18079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.702396][T18079] RSP: 002b:00007fd0835c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.702414][T18079] RAX: ffffffffffffffda RBX: 00007fd0829c5fa0 RCX: 00007fd08278ebe9 [ 460.702425][T18079] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 460.702436][T18079] RBP: 00007fd0835c7090 R08: 0000000000000000 R09: 0000000000000000 [ 460.702447][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.702457][T18079] R13: 00007fd0829c6038 R14: 00007fd0829c5fa0 R15: 00007fff9d60e108 [ 460.702479][T18079] [ 460.907200][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.040318][T18081] geneve1: entered promiscuous mode [ 462.045554][T18081] geneve1: entered allmulticast mode [ 462.375125][T18118] __vm_enough_memory: pid: 18118, comm: syz.6.1085, bytes: 4398046511104 not enough memory for the allocation [ 467.961900][T18222] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1091'. [ 468.021221][ T30] audit: type=1800 audit(2219.394:16): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1089" name="dbroot" dev="configfs" ino=40265 res=0 errno=0 [ 468.531963][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1095'. [ 470.281969][T18262] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1097'. [ 472.148279][T18255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.230268][T18255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.311955][T18255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.318020][T18255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.410328][T18255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.416392][T18255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 472.545742][T18255] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 472.607218][T18255] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 472.658929][T18255] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 473.313218][T18276] netlink: 'syz.6.1100': attribute type 2 has an invalid length. [ 473.738578][T18280] zswap: compressor not available [ 474.207609][T11520] Bluetooth: hci1: command 0x0406 tx timeout [ 474.281338][T11520] Bluetooth: hci2: command 0x0406 tx timeout [ 474.360846][T11520] Bluetooth: hci3: command 0x0406 tx timeout [ 474.366907][T11520] Bluetooth: hci0: command 0x0406 tx timeout [ 474.418898][T18291] zswap: compressor not available [ 474.438777][T11520] Bluetooth: hci5: command 0x0419 tx timeout [ 474.444829][T13389] Bluetooth: hci4: command 0x0c1a tx timeout [ 474.599516][T11520] Bluetooth: hci6: command 0x0c1a tx timeout [ 474.679239][T11520] Bluetooth: hci8: command 0x0419 tx timeout [ 474.685270][T11520] Bluetooth: hci7: command 0x0c1a tx timeout [ 475.791534][T18317] binder: 18314:18317 ioctl c0306201 200000000300 returned -14 [ 475.951902][T18302] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 477.249043][T18338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 479.478743][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 479.486922][ T31] Not tainted syzkaller #0 [ 479.497001][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.543030][ T31] task:kworker/u8:0 state:D stack:25128 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 479.609588][ T31] Workqueue: netns cleanup_net [ 479.614410][ T31] Call Trace: [ 479.617706][ T31] [ 479.685699][ T31] __schedule+0x1190/0x5de0 [ 479.700481][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 479.705507][ T31] ? __pfx___schedule+0x10/0x10 [ 479.768815][ T31] ? find_held_lock+0x2b/0x80 [ 479.773732][ T31] ? schedule+0x2d7/0x3a0 [ 479.818026][ T31] schedule+0xe7/0x3a0 [ 479.848263][ T31] schedule_timeout+0x257/0x290 [ 479.853157][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 479.908042][ T31] ? mark_held_locks+0x49/0x80 [ 479.923222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.968511][ T31] __wait_for_common+0x2fc/0x4e0 [ 479.989495][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 480.025735][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 480.048031][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.053288][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 480.168867][ T31] __flush_workqueue+0x3e2/0x1230 [ 480.174119][ T31] ? __pfx___might_resched+0x10/0x10 [ 480.262039][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 480.267579][ T31] rxrpc_destroy_all_locals+0x40/0x180 [ 480.330941][ T31] rxrpc_exit_net+0x8b/0xc0 [ 480.335513][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 480.388036][ T31] ops_undo_list+0x2eb/0xab0 [ 480.392692][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 480.397806][ T31] ? cleanup_net+0x334/0x890 [ 480.447948][ T31] ? idr_destroy+0x62/0x2e0 [ 480.474090][ T31] cleanup_net+0x408/0x890 [ 480.498058][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 480.503030][ T31] ? rcu_is_watching+0x12/0xc0 [ 480.507826][ T31] process_one_work+0x9cf/0x1b70 [ 480.544736][ T31] ? __pfx_process_one_work+0x10/0x10 [ 480.587962][ T31] ? assign_work+0x1a0/0x250 [ 480.592596][ T31] worker_thread+0x6c8/0xf10 [ 480.597195][ T31] ? __pfx_worker_thread+0x10/0x10 [ 480.655764][ T31] kthread+0x3c5/0x780 [ 480.667925][ T31] ? __pfx_kthread+0x10/0x10 [ 480.672586][ T31] ? rcu_is_watching+0x12/0xc0 [ 480.677352][ T31] ? __pfx_kthread+0x10/0x10 [ 480.707905][ T31] ret_from_fork+0x5d7/0x6f0 [ 480.712539][ T31] ? __pfx_kthread+0x10/0x10 [ 480.717135][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.762489][ T31] [ 480.777988][ T31] INFO: task syz.3.667:11468 blocked for more than 144 seconds. [ 480.785644][ T31] Not tainted syzkaller #0 [ 480.828542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.893306][ T31] task:syz.3.667 state:D stack:27144 pid:11468 tgid:11421 ppid:5866 task_flags:0x400140 flags:0x00004006 [ 480.947859][ T31] Call Trace: [ 480.951168][ T31] [ 480.954097][ T31] __schedule+0x1190/0x5de0 [ 480.977884][ T31] ? __pfx___schedule+0x10/0x10 [ 480.982780][ T31] ? find_held_lock+0x2b/0x80 [ 480.987454][ T31] ? schedule+0x2d7/0x3a0 [ 481.028012][ T31] schedule+0xe7/0x3a0 [ 481.032131][ T31] schedule_timeout+0x257/0x290 [ 481.036994][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 481.087850][ T31] ? mark_held_locks+0x49/0x80 [ 481.092660][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.128435][ T31] __wait_for_common+0x2fc/0x4e0 [ 481.140381][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 481.166982][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 481.173495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.197820][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 481.203663][ T31] __flush_workqueue+0x3e2/0x1230 [ 481.227838][ T31] ? find_held_lock+0x2b/0x80 [ 481.232564][ T31] ? find_held_lock+0x2b/0x80 [ 481.237242][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 481.287873][ T31] ? queue_work_on+0x12a/0x1f0 [ 481.292672][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.318846][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 481.324817][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 481.358398][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 481.364433][ T31] rxrpc_exit_net+0x7b/0xc0 [ 481.401505][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 481.406776][ T31] ops_undo_list+0x2eb/0xab0 [ 481.427823][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 481.432961][ T31] ? ops_init+0x2fa/0x5f0 [ 481.437309][ T31] setup_net+0x1f1/0x380 [ 481.474942][ T31] ? lockdep_set_lock_cmp_fn+0xc1/0xe0 [ 481.489999][ T31] ? __pfx_setup_net+0x10/0x10 [ 481.494781][ T31] ? debug_mutex_init+0x37/0x70 [ 481.508199][ T31] copy_net_ns+0x2a6/0x5f0 [ 481.512659][ T31] create_new_namespaces+0x3ea/0xa90 [ 481.528021][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 481.533673][ T31] ksys_unshare+0x45b/0xa40 [ 481.555372][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 481.566352][ T31] ? xfd_validate_state+0x61/0x180 [ 481.587814][ T31] __x64_sys_unshare+0x31/0x40 [ 481.592615][ T31] do_syscall_64+0xcd/0x490 [ 481.597136][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.617945][ T31] RIP: 0033:0x7f33cdb8ebe9 [ 481.622409][ T31] RSP: 002b:00007f33cea0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 481.638059][ T31] RAX: ffffffffffffffda RBX: 00007f33cddc6270 RCX: 00007f33cdb8ebe9 [ 481.646061][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 481.679491][ T31] RBP: 00007f33cdc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 481.687491][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.717886][ T31] R13: 00007f33cddc6308 R14: 00007f33cddc6270 R15: 00007fff9da35958 [ 481.725930][ T31] [ 481.767801][ T31] INFO: task syz.1.703:11984 blocked for more than 145 seconds. [ 481.775503][ T31] Not tainted syzkaller #0 [ 481.852173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 481.897756][ T31] task:syz.1.703 state:D stack:26680 pid:11984 tgid:11979 ppid:5865 task_flags:0x400140 flags:0x00004006 [ 481.957976][ T31] Call Trace: [ 481.961298][ T31] [ 481.986791][ T31] __schedule+0x1190/0x5de0 [ 481.994937][ T31] ? __pfx___schedule+0x10/0x10 [ 482.047721][ T31] ? find_held_lock+0x2b/0x80 [ 482.052448][ T31] ? schedule+0x2d7/0x3a0 [ 482.056813][ T31] schedule+0xe7/0x3a0 [ 482.097913][ T31] schedule_timeout+0x257/0x290 [ 482.102806][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 482.148314][ T31] ? mark_held_locks+0x49/0x80 [ 482.153137][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.187702][ T31] __wait_for_common+0x2fc/0x4e0 [ 482.222517][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 482.258279][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 482.263775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.307689][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 482.313538][ T31] __flush_workqueue+0x3e2/0x1230 [ 482.357841][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 482.363366][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 482.387748][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 482.393935][ T31] rxrpc_release+0x2a7/0x6a0 [ 482.407669][ T31] sock_release+0x91/0x1d0 [ 482.412115][ T31] afs_open_socket+0x334/0x400 [ 482.416898][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 482.442828][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 482.457680][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 482.464138][ T31] afs_net_init+0x825/0xb00 [ 482.476832][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 482.487662][ T31] ops_init+0x1df/0x5f0 [ 482.491855][ T31] setup_net+0x10f/0x380 [ 482.496097][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 482.518641][ T31] ? __pfx_setup_net+0x10/0x10 [ 482.523538][ T31] ? debug_mutex_init+0x37/0x70 [ 482.537916][ T31] copy_net_ns+0x2a6/0x5f0 [ 482.542709][ T31] create_new_namespaces+0x3ea/0xa90 [ 482.567662][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 482.573352][ T31] ksys_unshare+0x45b/0xa40 [ 482.588214][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 482.593266][ T31] ? xfd_validate_state+0x61/0x180 [ 482.617878][ T31] __x64_sys_unshare+0x31/0x40 [ 482.622700][ T31] do_syscall_64+0xcd/0x490 [ 482.627216][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.647644][ T31] RIP: 0033:0x7f944b78ebe9 [ 482.652074][ T31] RSP: 002b:00007f9449972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 482.678968][ T31] RAX: ffffffffffffffda RBX: 00007f944b9c6360 RCX: 00007f944b78ebe9 [ 482.694762][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 482.705997][ T31] RBP: 00007f944b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 482.714192][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.722800][ T31] R13: 00007f944b9c63f8 R14: 00007f944b9c6360 R15: 00007ffc4cf63d78 [ 482.731177][ T31] [ 482.784607][ T31] [ 482.784607][ T31] Showing all locks held in the system: [ 482.805759][ T31] 1 lock held by pool_workqueue_/3: [ 482.818202][ T31] #0: ffffffff8e5cc678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 482.838148][ T31] 3 locks held by kworker/u8:0/12: [ 482.843277][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 482.877635][ T31] #1: ffffc90000117d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 482.897630][ T31] #2: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 482.926744][ T31] 1 lock held by khungtaskd/31: [ 482.931650][ T31] #0: ffffffff8e5c10e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 482.957641][ T31] 1 lock held by syz.3.667/11468: [ 482.962677][ T31] #0: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 482.988665][ T31] 3 locks held by kworker/u10:11/11718: [ 482.994224][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 483.028180][ T31] #1: ffffc9000395fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 483.047753][ T31] #2: ffffffff90388208 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 483.056851][ T31] 1 lock held by syz.1.703/11984: [ 483.077689][ T31] #0: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 483.087134][ T31] 1 lock held by syz.4.795/13824: [ 483.113090][ T31] #0: ffff88804e722008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 483.138144][ T31] 1 lock held by syz.0.890/15155: [ 483.143182][ T31] #0: ffff8880506f9408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 483.178275][ T31] 2 locks held by getty/15693: [ 483.183143][ T31] #0: ffff8880349be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 483.215542][ T31] #1: ffffc9000374b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 483.241367][ T31] 1 lock held by syz.7.939/16360: [ 483.246412][ T31] #0: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 483.267833][ T31] 1 lock held by syz.5.1094/18223: [ 483.272981][ T31] #0: ffff888081ca2008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 483.304771][ T31] 1 lock held by syz.6.1105/18310: [ 483.310331][ T31] #0: ffffffff90388208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 483.325135][ T31] 1 lock held by syz.2.1108/18374: [ 483.332217][ T31] #0: ffffffff90388208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 483.341414][ T31] 1 lock held by syz.8.1109/18406: [ 483.346536][ T31] #0: ffffffff90388208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 483.383030][ T31] [ 483.385390][ T31] ============================================= [ 483.385390][ T31] [ 483.407020][ T31] NMI backtrace for cpu 0 [ 483.407038][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 483.407059][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.407069][ T31] Call Trace: [ 483.407075][ T31] [ 483.407082][ T31] dump_stack_lvl+0x116/0x1f0 [ 483.407113][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 483.407133][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 483.407160][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 483.407188][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 483.407212][ T31] watchdog+0xf0e/0x1260 [ 483.407242][ T31] ? __pfx_watchdog+0x10/0x10 [ 483.407267][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.407295][ T31] ? __kthread_parkme+0x19e/0x250 [ 483.407319][ T31] ? __pfx_watchdog+0x10/0x10 [ 483.407345][ T31] kthread+0x3c5/0x780 [ 483.407371][ T31] ? __pfx_kthread+0x10/0x10 [ 483.407398][ T31] ? rcu_is_watching+0x12/0xc0 [ 483.407417][ T31] ? __pfx_kthread+0x10/0x10 [ 483.407452][ T31] ret_from_fork+0x5d7/0x6f0 [ 483.407478][ T31] ? __pfx_kthread+0x10/0x10 [ 483.407510][ T31] ret_from_fork_asm+0x1a/0x30 [ 483.407542][ T31] [ 483.523282][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.645798][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 483.652679][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 483.661799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.671860][ T31] Call Trace: [ 483.675133][ T31] [ 483.678069][ T31] dump_stack_lvl+0x3d/0x1f0 [ 483.682671][ T31] vpanic+0x6e8/0x7a0 [ 483.686657][ T31] ? __pfx_vpanic+0x10/0x10 [ 483.691172][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 483.697074][ T31] panic+0xca/0xd0 [ 483.700801][ T31] ? __pfx_panic+0x10/0x10 [ 483.705236][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 483.710611][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 483.716764][ T31] ? watchdog+0xd78/0x1260 [ 483.721185][ T31] ? watchdog+0xd6b/0x1260 [ 483.725618][ T31] watchdog+0xd89/0x1260 [ 483.729882][ T31] ? __pfx_watchdog+0x10/0x10 [ 483.734571][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.739773][ T31] ? __kthread_parkme+0x19e/0x250 [ 483.744887][ T31] ? __pfx_watchdog+0x10/0x10 [ 483.749573][ T31] kthread+0x3c5/0x780 [ 483.753649][ T31] ? __pfx_kthread+0x10/0x10 [ 483.758257][ T31] ? rcu_is_watching+0x12/0xc0 [ 483.763018][ T31] ? __pfx_kthread+0x10/0x10 [ 483.767612][ T31] ret_from_fork+0x5d7/0x6f0 [ 483.772305][ T31] ? __pfx_kthread+0x10/0x10 [ 483.776904][ T31] ret_from_fork_asm+0x1a/0x30 [ 483.781680][ T31] [ 483.784757][ T31] Kernel Offset: disabled [ 483.789079][ T31] Rebooting in 86400 seconds..