last executing test programs: 2m24.953659842s ago: executing program 2 (id=1321): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) shmctl$auto(0x1, 0x6, &(0x7f0000000200)={{0x8001, 0xffffffffffffffff, 0x0, 0xfff, 0x8001, 0xfffffffe, 0x8}, 0x0, 0x9, 0x7, 0x9, @inferred=0xffffffffffffffff, @raw=0x9, 0x1, 0x0, &(0x7f0000000100)="0ede931b63fc46c43ea84b325b3463ebf830a8afbe3c5569168642a4e191c0172b8c25f75f93c60ece468cedc365c4c880e5ee1f1d1aef5bab63b5061370181fc68219798fbd0d05d1c741a2470be1820d8275f669087e5a909fab", &(0x7f0000000180)="f9d6435fb047f33e1de4509b35162b161185121e0ea21d910cef5e4254b9259c5c989487a246975124a60ce75b269ab51136705ef9831e6ab38ff26c7932ea75d9594fb3fc5ab5c366ccd5ed928f70ac035031"}) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0}}, 0x20000020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x400000f4, 0x400, 0x9}]}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0x1a9d02, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) 2m24.374565965s ago: executing program 2 (id=1322): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xad1\xa1\xbb\nd\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x05\x00\x00\x00\x00\x00\x00\x00K\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc55\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBlI\xe2\x17\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00\x00\x00\x00\x00U\xca\\\xc1\xb7\xf1\n\xb9\xc49a6\x80\xc9\xbfk\x1e\xdb\xed\x81{8&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804W\xfa\x86?\x15\xdaQ\fM?\xc2\x99!\xbb\xfe\xb8\xc29\xbc\x15\xde\xd9\xbf\xd7\xef2\xbe\x12B(\xd9\x87\x1d_[\x7f{(\x7fm\x80\xba=\x86t\x1d\x87\xc8JF\xbf\b\xee\xd1\x85\xdb1\x9c\xffiUXL\xb3Ba\x9dy\xe4\xf0\n\x95\xb2\xa40\\Cqi\xba<\x17\x18\xe2\r\xf9Sn\xa6\x83a \x87\x9c\xb6\xc1\x02\x87\xf4\xb9\xb8\xae\x1d\xff\vq\x15\xa8\x98\xbaa\xae\xad\x1d$\xd4\x81\xbd\xd3\xe4\x96\x89l\xfb\xe1\x16\xe6\xa2&4w\x19[\x84\xc4\x19\x1c0+y\xdd\xef\x995\x87U\x0f\x98l\f\xe0\x96\xc1\xc0\xaab\x16\x96\xe0\x12[\xaa\xef\x9e\xafh\x15\xba\xea\xfaAIGl\xab\xca\x0f\tc\x94\xf2(H\xa2\x11', 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xa02}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20080000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 2m20.785368217s ago: executing program 2 (id=1330): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup6/wakeup_count\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x8, &(0x7f0000000040)={&(0x7f0000000000), 0x2000000000001}, 0xabc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x16, &(0x7f0000000040), 0x1) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/status\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/37, 0x25) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x6d}, 0x2, 0x0, 0x0, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) write$auto(0x3, 0x0, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x109b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xff\x05OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 2m19.339673027s ago: executing program 2 (id=1342): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001000)="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", 0x6b1) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xf}, @HSR_A_IF2_AGE={0x8, 0x4, 0x88000001}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getpid() ioctl$auto(0x3, 0x800005411, 0x38) timer_create$auto(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nr0\x00', 0x0}) bpf$auto(0x6, &(0x7f0000000100)=@bpf_attr_0={0x8, 0xb, 0x8, 0x100, 0x5, 0xffffffffffffffff, 0x9, "014395beb4448c00", r1, 0xffffffffffffffff, 0xf1c, 0x4, 0x2, 0x48}, 0x3) 2m17.97916778s ago: executing program 2 (id=1336): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) semctl$auto_IPC_INFO(0x576d, 0x3, 0x3, 0xfffffffffffffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_DP_ATTR_NAME={0xa, 0x1, ',\xb0-^}\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000895) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x1f00, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) process_madvise$auto_MADV_WIPEONFORK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)="feee547da44cd41214cd1d5008ac701b4a4aad89f53035c494e1dd9d16c6a3d7d2ec97db836e390472339fc51cfa6bef13d2a9aee2a86e43b431cfbafa83332aedbc439a7cbed440bb0f3b036a056db78fc2221a127fed37932433af18c2e7e9d4855d56"}, 0x86, 0x12, 0x3) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) r8 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) socket(0x18, 0xa, 0x1) getpeername$auto(0x3, 0x0, 0x0) init_module$auto(0x0, 0xffff9, 0x0) 2m17.409595618s ago: executing program 2 (id=1337): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf2503000000080004", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf25120000001500fe009bc08ae13222a009f4841c49c59e2fdf9a0000004a022a005cb46402330500d8c3eab35461f9999c1d567590c9217d9249429e13b6a073b483f14a0c45dc7cdc38e3ffde949b6f7ca4094fe8dfa620f0ff877f010f360245dfcaf5109ebd0f5b0d24e1d8d6ec717144a301cb707d25bdb444e52e7641457eb7462d3c19023b5f3145012e15483f31d3216f3e4454ffd5434cb0b00cacb9a9122667e44d139fb9f7366ec2f39455f228a9d197dce769de655d49e2b3835d899be59ff431577832f798852201c814301d833f620230b9a2c723affccf286009222c7d4cd251a6a45249e10e40a22807c63f7821a5cda68659b61bfae526e1ec8c967e34dbd8b14db1a123267dbbeae0c68512331e4126d350db5bc24ca001c80727d2a66bff7bb3eedbd34c8aebc8495e66b26e525516e6f2a4500d1ef45f17c9c788fb570f0773ecb331c94bb39f0a32566954a484291cb7e373683763613bb65117983c555f6fc87730c54fef89fcb87ee089a42ccd23f4d6c465299b0c5decaec0d3aef7b4b4f240d196ea7bf0397bce3f13275feb6dc74d6331c58feab81e5df6061caf0ed254b2ae80aea15eb32774bef37bdb5a182221989038057c84cc055284a94e81343c1c0c064c157b9a69dd2b9d64153c3e81f6e6f3270b4d28cbc4b6c4626223253d2469e63041c878f79c9453dae0edb2e403e5823f447eb032f2438364b074cc99b104503755aec0af7935f7544ceec3d2e24a54e0bdeeb529e3dd8ec20708685ffa78cf061c66f77a8ac62b7099d9a785c2f03841710701fe4ef0691fdc35e1a098ff97f47d272356bb11c1d048cc725b9510b90974bf08a1911036ad7300000400b8009f00cd00dc376b35fa504906ce2d6527e6b01c81148fa504900da82b265fc2372ab4623e8af52c89fef7905387375d30742bc5da84efa33c2451c62bf7cd350b8fc26e46d6ac3da00e5ad4b4bdb7b1e73d7e1c855cb08a36683d04fa6e7ca977c128cdd1c301cf0c3578224b8247929433e1961945a0a0746d848225fb3b663c204a3b02fa1862376672eed57692e9eada9f5f80e267799ae4e952c5d8169400"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 2m4.788904382s ago: executing program 1 (id=1365): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) r0 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x4}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/192, 0xc0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) sendfile$auto(r6, r6, 0x0, 0x5) mprotect$auto(0x200000000000, 0x806121, 0x6) 2m2.759018624s ago: executing program 1 (id=1368): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8013) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0d, 0xe, 0x3, 0x4, 0x80000033, 0xfff, 0x6d3e, 0x9, 0x8, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = socket(0x2, 0x80002, 0x73) bind$auto(r4, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) adjtimex$auto(&(0x7f0000000180)={0x7, 0x0, 0x7, 0x5, 0x10000, 0x4, 0x2000, 0x0, 0x8, 0x7fff, 0x9400, {0x6, 0xf}, 0x400, 0x1f, 0xffffffffffffff55, 0x87, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x7, 0xa3f}) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r2, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) 2m2.049041149s ago: executing program 32 (id=1337): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf2503000000080004", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="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"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 2m0.862278981s ago: executing program 1 (id=1374): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="110000000100"/16, 0x10) membarrier$auto(0x2, 0x0, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendfile$auto(r3, r1, &(0x7f0000000040)=0x9, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r4 = socket(0x22, 0x3, 0x1) connect$auto(r4, 0x0, 0x9e7) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), r0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) 1m55.015918893s ago: executing program 1 (id=1387): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x10, 0x2, 0x0) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/ramdisk_pages/ram9\x00', 0x80, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socket(0x1d, 0x2, 0x7) socketpair$auto(0x4004, 0x7, 0x4, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) 1m52.524514515s ago: executing program 1 (id=1380): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r2) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f00000006c0)={0x1d8, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x40, 0x4, "31cd4392f8838e9115ec28995a85a1c673e1044b0934ac854e4c213e34a5cab3ceb82a162a3e05f7c810cc0d450d48e5a66b030f97b3c53e706ad9c1"}, @SEG6_ATTR_SECRET={0x184, 0x4, "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"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x230400, 0x0) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r4, &(0x7f0000002f00)='@[}\x00', 0x2, 0x3) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x400, 0x0) inotify_rm_watch$auto(r1, 0x8001) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/dev_snmp6/syz_tun\x00', 0x171000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7002ffdbdf251000000018000180140002007465616d5f736c6176655f310000000005000d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) unshare$auto(0x40000080) fcntl$auto(0x3, 0x4, 0xa553) 1m51.364880318s ago: executing program 1 (id=1394): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf2503000000080004", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="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"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 1m43.184326988s ago: executing program 4 (id=1403): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r2, 0x0, 0x4000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x90600, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x301802, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) ioctl$auto_TCFLSH2(r4, 0x8924, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000034de248efbac27754f0aac193e12d47583bdce6819286c10ba8233d9930ee7b622e337c96d33468b90dcb54a59b1c6f21c43a4", @ANYBLOB="010628bd7000fedbcf25040000001c00018015000900ef6735f5058af96b26651160dfbb140872000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x1a, 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) 1m42.45031661s ago: executing program 4 (id=1405): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000180)={0xc93a, 0x1}) io_uring_setup$auto(0x12, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x101, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x276, 0xdf, 0xebe, 0xffffffffffffffff, 0x499b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) socket(0x2, 0x3, 0xa) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) symlink$auto(&(0x7f00000000c0)='\\\':.\x00', 0x0) statx$auto(r1, 0x0, 0x1003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) 1m41.821156032s ago: executing program 4 (id=1406): mmap$auto(0x0, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x4000, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000180)="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") r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) write$auto_mousedev_fops_mousedev(r1, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x9, 0x4, 0x8000001, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) wait4$auto(0x0, 0x0, 0x4, 0x0) setreuid$auto(0x9, 0x1) getpriority$auto(0x2, 0x9) pipe$auto(0x0) epoll_create$auto(0x10001) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x10, r2, 0x5f17) socket(0x15, 0x6, 0x7ab0) socket(0x2, 0x1, 0x84) socket(0xf, 0x3, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7, 0x6d3c, 0x5, 0x80]}, 0x0) write$auto(0x1, 0x0, 0x100) 1m38.819110878s ago: executing program 4 (id=1411): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a00000600070000800000080002", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="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"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 1m37.588772566s ago: executing program 4 (id=1413): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(r0, &(0x7f0000000040)=@sco, 0x6a) connect$auto(0x3, 0x0, 0x54) socket(0xa, 0x5, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) socket(0x10, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x4, 0x804, 0x13, 0x46) getsockopt$auto(0xffffffffffffffff, 0xff, 0x90, 0x0, &(0x7f0000000140)=0x3) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x8000000003, 0x62, 0x8000001f, 0x40007, 0x4, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, 0x0, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfffe) 1m36.011565831s ago: executing program 33 (id=1394): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf2503000000080004", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf25120000001500fe009bc08ae13222a009f4841c49c59e2fdf9a0000004a022a005cb46402330500d8c3eab35461f9999c1d567590c9217d9249429e13b6a073b483f14a0c45dc7cdc38e3ffde949b6f7ca4094fe8dfa620f0ff877f010f360245dfcaf5109ebd0f5b0d24e1d8d6ec717144a301cb707d25bdb444e52e7641457eb7462d3c19023b5f3145012e15483f31d3216f3e4454ffd5434cb0b00cacb9a9122667e44d139fb9f7366ec2f39455f228a9d197dce769de655d49e2b3835d899be59ff431577832f798852201c814301d833f620230b9a2c723affccf286009222c7d4cd251a6a45249e10e40a22807c63f7821a5cda68659b61bfae526e1ec8c967e34dbd8b14db1a123267dbbeae0c68512331e4126d350db5bc24ca001c80727d2a66bff7bb3eedbd34c8aebc8495e66b26e525516e6f2a4500d1ef45f17c9c788fb570f0773ecb331c94bb39f0a32566954a484291cb7e373683763613bb65117983c555f6fc87730c54fef89fcb87ee089a42ccd23f4d6c465299b0c5decaec0d3aef7b4b4f240d196ea7bf0397bce3f13275feb6dc74d6331c58feab81e5df6061caf0ed254b2ae80aea15eb32774bef37bdb5a182221989038057c84cc055284a94e81343c1c0c064c157b9a69dd2b9d64153c3e81f6e6f3270b4d28cbc4b6c4626223253d2469e63041c878f79c9453dae0edb2e403e5823f447eb032f2438364b074cc99b104503755aec0af7935f7544ceec3d2e24a54e0bdeeb529e3dd8ec20708685ffa78cf061c66f77a8ac62b7099d9a785c2f03841710701fe4ef0691fdc35e1a098ff97f47d272356bb11c1d048cc725b9510b90974bf08a1911036ad7300000400b8009f00cd00dc376b35fa504906ce2d6527e6b01c81148fa504900da82b265fc2372ab4623e8af52c89fef7905387375d30742bc5da84efa33c2451c62bf7cd350b8fc26e46d6ac3da00e5ad4b4bdb7b1e73d7e1c855cb08a36683d04fa6e7ca977c128cdd1c301cf0c3578224b8247929433e1961945a0a0746d848225fb3b663c204a3b02fa1862376672eed57692e9eada9f5f80e267799ae4e952c5d8169400"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 1m35.999400419s ago: executing program 4 (id=1417): unshare$auto(0x40000080) r0 = socket(0xa, 0x1, 0x84) rseq$auto(0x0, 0x8000, 0x0, 0x6) madvise$auto(0x5, 0xd, 0x7) close_range$auto(r0, 0xffffffffffffffff, 0x3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040), 0x6a) ioctl$auto(0x3, 0xc0485619, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_tables_targets\x00', 0x1802, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r1, 0x5509, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f00000003c0)="b7a53caf1b30b74f97ac3b5c60fc1d905860206af11a0ec35e7e5c46caffe279de8e058103dbe387321e23d5cf1c271465baa482db442a5748c12df967f9c1ce0bd79ec3d67c9f0aff55674e238d4b83e2372ae3a03950aaa641f736e6f9061e5b9af9e2de49f8a01693aa28b5e53dd7d970575e42c6620cff2f6f9bf902968a36b1851ffc2497e410d51f340b92b74f972cd68de180f42bcfc5ac64a8977e242b9ca63c5858f0071db6e24de9bda2dc35957f69a06cc6f385511720a29600b6b8db86be62038110e03ef34b1fadaffc760ca30710a7b237632954060b9ebd27fd3f82f7c7dd8d16dbc800"/250, 0xfa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) fsmount$auto(0x4, 0x0, 0x200003) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r4, r3, 0x0, 0x7) 1m23.78941596s ago: executing program 5 (id=1432): mmap$auto(0x0, 0xa, 0x6, 0x9b72, 0xffffffffffffffff, 0x7ffb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r2, r1, 0x0, 0x1000202) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x240101, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ustat$auto(0x801, 0x0) 1m22.580022742s ago: executing program 5 (id=1434): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x488102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fcntl$auto_F_GETPIPE_SZ(0xffffffffffffffff, 0x408, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) io_uring_setup$auto(0x6, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x100) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000080)="f6af10") openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x400402, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/zone_append_max_bytes\x00', 0x20000, 0x0) 1m21.366908568s ago: executing program 5 (id=1437): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x494580, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4188aea7, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x5, 0x9}]}) r2 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r2, 0x611e) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fcntl$auto_F_SETSIG(r3, 0xa, 0xfffffffffffffeff) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x11, 0x80003, 0x300) 1m20.7030248s ago: executing program 34 (id=1417): unshare$auto(0x40000080) r0 = socket(0xa, 0x1, 0x84) rseq$auto(0x0, 0x8000, 0x0, 0x6) madvise$auto(0x5, 0xd, 0x7) close_range$auto(r0, 0xffffffffffffffff, 0x3) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040), 0x6a) ioctl$auto(0x3, 0xc0485619, 0x38) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_tables_targets\x00', 0x1802, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r1, 0x5509, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f00000003c0)="b7a53caf1b30b74f97ac3b5c60fc1d905860206af11a0ec35e7e5c46caffe279de8e058103dbe387321e23d5cf1c271465baa482db442a5748c12df967f9c1ce0bd79ec3d67c9f0aff55674e238d4b83e2372ae3a03950aaa641f736e6f9061e5b9af9e2de49f8a01693aa28b5e53dd7d970575e42c6620cff2f6f9bf902968a36b1851ffc2497e410d51f340b92b74f972cd68de180f42bcfc5ac64a8977e242b9ca63c5858f0071db6e24de9bda2dc35957f69a06cc6f385511720a29600b6b8db86be62038110e03ef34b1fadaffc760ca30710a7b237632954060b9ebd27fd3f82f7c7dd8d16dbc800"/250, 0xfa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) fsmount$auto(0x4, 0x0, 0x200003) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r4, r3, 0x0, 0x7) 1m18.654577786s ago: executing program 5 (id=1441): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x9, 0x0, 0x7fffffff) getsockopt$auto(r1, 0x6, 0x9, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0x32fa, &(0x7f0000000240)={[0x9, 0x5, 0x3, 0x5, 0x800, 0x2, 0x5, 0x1000, 0x9, 0x9, 0x8, 0x47, 0xd, 0x8, 0x5013, 0x1]}, &(0x7f00000002c0)={[0x9, 0xa, 0x101, 0x2, 0x4, 0x2, 0x8, 0xa, 0x2, 0x69b11ec, 0x62a10e5, 0x9, 0x0, 0x7fffffffffffffff, 0x9, 0x7]}, &(0x7f0000000340)={[0x9, 0x7, 0x1, 0x3, 0xd6b, 0xc, 0x0, 0x1, 0x3b4, 0x1, 0x6b68, 0xeacb, 0x26, 0x99, 0xd5f, 0x3]}, &(0x7f0000000180)={0x8, 0x51a}) pkey_mprotect$auto(0x80000000, 0x0, 0x7, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) fstat$auto(0x2, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r4, 0x80045503, r4) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\xb8\xdb2\xd3\x02\x00\x00\x00\xc7k', 0x7e) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket(0x10, 0x2, 0x0) 1m17.312469115s ago: executing program 5 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, 0x0, 0x4008000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) r2 = socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x8e40, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000080)=""/248, 0xf8) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) setsockopt$auto(r2, 0x29, 0x4e, &(0x7f0000000040)='!\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2f212cbd7000c9edd8fa6574a16208000300", @ANYRES32=r6], 0x2c}}, 0x4000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002dbd7000fddbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008894}, 0x0) 1m16.611224713s ago: executing program 0 (id=1445): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x8) mkdir$auto(0x0, 0x8001) mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x6, 0x4, 0x8, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) socket(0x1, 0x1, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) setsockopt$auto(r1, 0x8, 0x7, &(0x7f0000000000)='nfsd\x00', 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) futimesat$auto(r1, &(0x7f0000000080)='./file0\x00', 0x0) 1m15.9766386s ago: executing program 5 (id=1446): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x103a01, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/tracing/tracing_cpumask\x00', 0x88002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x0, 0x0) socket(0x21, 0x2, 0xa) socket(0xa, 0x801, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x801, 0x106) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x110) socket(0x2, 0x2, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 1m14.57854135s ago: executing program 0 (id=1448): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x2, 0x20000020009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x3, r1) socketpair$auto(0x800, 0x6, 0x4, &(0x7f00000001c0)=0x6) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, &(0x7f00000000c0)="8c9086c714930056712c3a5bad8e9a65d606005e9d0c58f7906200b0ddbb47ba840e06f74d5d40980eccbef7be8651903b3ede548e41971342b73769704118bbbe4141aec33ba7f136a9f766ce8ed3396cd701d0cbc787", 0xffffffe2) mmap$auto(0x0, 0x4020009, 0xdb, 0x19, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) unshare$auto(0x40000080) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r3, 0xecd7, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', &(0x7f0000000180)="05794f1b87cd73bed602b0e14241fd96044a8ced6b2c022b6401f8b7ec9facf3b6cceef0ff4f1ff1", 0x4) unshare$auto(0x7fffffff) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0x16, 0xfffffffffffffffa, 0x8000) 1m12.709020527s ago: executing program 0 (id=1450): mmap$auto(0x3, 0x2000d, 0x4000000000db, 0xeb1, 0x401, 0x8400) socket(0x23, 0x1, 0x10) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x800, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x747, 0x5, 0x8fd6, 0x948b, 0x3, 0xe, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x1, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x7f, 0xfbfffffe, 0x5, 0x7fb, 0x4, 0x9}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000700)={{@raw=0x9, 0x7f, 0x2, 0x5, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer=@value=[0x4, 0x80, 0x1, 0x7a3, 0x3, 0xe0, 0xc1, 0x5, 0xd, 0x7f, 0x1, 0x922, 0x15, 0x8, 0x9, 0x25, 0xa, 0xe01, 0xb3b, 0x1, 0x5, 0xd85c, 0x8000000000000000, 0x5, 0xfffffffffffffbff, 0x3, 0xadd0, 0x7, 0x6c275d6c, 0x6, 0x5, 0x3, 0x3, 0x9, 0x7, 0x0, 0x6, 0x0, 0x5, 0x4, 0x4, 0x1000, 0x100000001, 0x0, 0xffff, 0x5, 0x2, 0xc, 0x2, 0x8, 0x7fffffffffffffff, 0x8, 0x6, 0x1000000000000, 0x2, 0x1, 0x0, 0x8, 0x3f, 0x4, 0x8, 0x7, 0x6, 0x9, 0x9, 0xc6b, 0x10001, 0x5, 0x8, 0x8000, 0x1, 0x0, 0x0, 0x5, 0x9cf8, 0xfffffffffffffffa, 0x1, 0x4, 0x3, 0xc6c4, 0x6, 0x3ff, 0xc, 0xa0fa, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0xd, 0x6, 0xfffffffffffffffc, 0x2, 0x8404, 0x3, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x7, 0x8, 0x439, 0x0, 0x4, 0x0, 0x8, 0xb4, 0x7ff, 0x1ff, 0x5, 0x9, 0x0, 0x0, 0x6, 0x4, 0x9, 0x1, 0x6, 0x800, 0x4, 0x6, 0x100, 0x2, 0x8, 0x100000001, 0x80, 0x0, 0x5, 0x7], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) mmap$auto(0xc, 0x120008, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) utimes$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0xe, 0x5}) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x348402, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) 1m10.950467939s ago: executing program 0 (id=1453): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r2, @ANYBLOB="01002abd7000467f4b5be2f4e44ab30108f778d64b44fedbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) socket(0x10, 0x2, 0x0) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) socket(0xa, 0x3, 0x3a) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000010c0)=""/22, 0x16) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_single_file_operations_base(r4, 0x0, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m8.287786057s ago: executing program 0 (id=1456): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x80283, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='0\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) r2 = socket(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x80, 0x81, 0x400}, &(0x7f00000001c0)=0x10000, 0x6, 0x405) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="62af65942ef72f502be8575422ddd6c2555a4edb") r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r3, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) mbind$auto(0x7fffffff, 0x1ff, 0xc000, 0x0, 0x8, 0x6) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r6, 0x8004510b, 0x3) 1m6.826783558s ago: executing program 0 (id=1458): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0xfffffffffffffffc, 0x200006, 0x8, 0x18, 0x602, 0x7) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket(0x2b, 0x1, 0x1) listen$auto(r5, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf25030080c5040008000c000380080003800400180012000100898771dacabf0a312fc0884097effa364d46df62"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) futex$auto(&(0x7f0000000100)=0x2, 0x1, 0x401, &(0x7f0000000200)={0x7ff, 0x80000000}, &(0x7f0000000280)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4138ae84, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m0.553060495s ago: executing program 35 (id=1446): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x103a01, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/tracing/tracing_cpumask\x00', 0x88002, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x0, 0x0) socket(0x21, 0x2, 0xa) socket(0xa, 0x801, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x801, 0x106) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x110) socket(0x2, 0x2, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) 51.500383618s ago: executing program 36 (id=1458): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0xfffffffffffffffc, 0x200006, 0x8, 0x18, 0x602, 0x7) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket(0x2b, 0x1, 0x1) listen$auto(r5, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf25030080c5040008000c000380080003800400180012000100898771dacabf0a312fc0884097effa364d46df62"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) futex$auto(&(0x7f0000000100)=0x2, 0x1, 0x401, &(0x7f0000000200)={0x7ff, 0x80000000}, &(0x7f0000000280)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x485, 0xfffffffffffffffe, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4138ae84, 0x0) close_range$auto(0x2, 0x8, 0x0) 48.240348394s ago: executing program 6 (id=1490): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xad1\xa1\xbb\nd\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x05\x00\x00\x00\x00\x00\x00\x00K\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc55\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBlI\xe2\x17\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00\x00\x00\x00\x00U\xca\\\xc1\xb7\xf1\n\xb9\xc49a6\x80\xc9\xbfk\x1e\xdb\xed\x81{8&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804W\xfa\x86?\x15\xdaQ\fM?\xc2\x99!\xbb\xfe\xb8\xc29\xbc\x15\xde\xd9\xbf\xd7\xef2\xbe\x12B(\xd9\x87\x1d_[\x7f{(\x7fm\x80\xba=\x86t\x1d\x87\xc8JF\xbf\b\xee\xd1\x85\xdb1\x9c\xffiUXL\xb3Ba\x9dy\xe4\xf0\n\x95\xb2\xa40\\Cqi\xba<\x17\x18\xe2\r\xf9Sn\xa6\x83a \x87\x9c\xb6\xc1\x02\x87\xf4\xb9\xb8\xae\x1d\xff\vq\x15\xa8\x98\xbaa\xae\xad\x1d$\xd4\x81\xbd\xd3\xe4\x96\x89l\xfb\xe1\x16\xe6\xa2&4w\x19[\x84\xc4\x19\x1c0+y\xdd\xef\x995\x87U\x0f\x98l\f\xe0\x96\xc1\xc0\xaab\x16\x96\xe0\x12[\xaa\xef\x9e\xafh\x15\xba\xea\xfaAIGl\xab\xca\x0f\tc\x94\xf2(H\xa2\x11', 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20080000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 45.191397829s ago: executing program 6 (id=1494): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xce24) connect$auto(0x3, 0x0, 0x55) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) bpf$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) 43.095414148s ago: executing program 6 (id=1499): mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x10008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x9, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0x2a7be682, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4040aea0, &(0x7f0000000080)={0x2, 0x0, [{0x174, 0x400, 0x9}]}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1c1200, 0x81) settimeofday$auto(0x0, &(0x7f0000000080)={0x7, 0x4e}) open(&(0x7f00000002c0)='./file0\x00', 0x103001, 0x120) futimesat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x7, 0x5, 0x8]}, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xf, 0xfffffffffffffffe, 0x0, 0x0, 0x290000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge0/locktime\x00', 0x101202, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bridge_slave_1/ra_defrtr_metric\x00', 0x101242, 0x0) sendfile$auto(r5, r4, 0x0, 0x48) read$auto(r3, 0x0, 0x39b8) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) r6 = socket(0x2, 0x2, 0x1) sendto$auto(r6, 0x0, 0xb, 0xc, 0x0, 0x1c) 41.92445095s ago: executing program 6 (id=1500): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0xc00000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 36.707805735s ago: executing program 6 (id=1508): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x40000008000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xe8, 0x400008, 0x80000000009, 0x9b76, 0x2, 0x4000040000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x8005, 0x3, 0x1, 0x7, 0x2, 0x73, 0x40, 0x10003, 0x3}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) socket(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0xd, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7fff) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x5, 0x8000000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x27, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000000), 0x1000) socket(0x2, 0x3, 0xa) 34.273273561s ago: executing program 6 (id=1512): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="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"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 19.233915176s ago: executing program 37 (id=1512): unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c031b09f4ed0b396846dfbe7baacf8b0ff747f867268924f8d7997c163d2bf067d031db6979cd4077709637c6628f97bb92e5bed66ab3b9d5efed9982957e137ebb8e75f455868eb4c52f78d3468ba0390411458ca090baf5ae757d9179", @ANYRES16=r4, @ANYBLOB="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"], 0x31c}}, 0x884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/can/reset_stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x3, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd09, &(0x7f00000001c0)) getpid() 16.982367741s ago: executing program 8 (id=1538): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xce24) connect$auto(0x3, 0x0, 0x55) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) bpf$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) 15.727543701s ago: executing program 3 (id=1539): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x56b) socket(0x18, 0x6, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0xaf, 0x8, 0xfffffffffffffffd, 0x15f4da0b, 0x3, 0x400, 0x5e, 0x5, 0x1, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 15.426887083s ago: executing program 8 (id=1541): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) socket(0x2, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/node/has_memory\x00', 0x22100, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4) mlockall$auto(0x5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x8, 0x0) unshare$auto(0x40000080) socket(0x28, 0x80000, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0643, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 11.655311209s ago: executing program 3 (id=1544): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_HDIO_GETGEO(r0, 0x301, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7001400) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8001) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$auto(r2, 0xb21064d1, 0x20000a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x10, 0x9, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='$!.}\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) close_range$auto(r1, r6, 0x7) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket(0x29, 0x6, 0xe64) 10.765513914s ago: executing program 8 (id=1546): exit$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) read$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) mremap$auto(0x8, 0x67, 0x400000000000000, 0xb, 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6a3, 0x15) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) 9.434357782s ago: executing program 8 (id=1547): open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000006"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc00", @ANYRES16=r6, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) mmap$auto(0x8, 0x2, 0xea2, 0x24f0c8f3, r1, 0xda3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(r8, 0x0) 8.241005699s ago: executing program 7 (id=1548): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x8a302, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1d, 0x4bdfada4a3f90019, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x7d, 0x0, 0x0, @binary}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xa, 0x93, 0x0, 0x0, @str='),]-,\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendfile$auto(0x1, 0x3, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 8.149349114s ago: executing program 3 (id=1549): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/27, 0x1b) socket(0xa, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x62001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x500) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec10\x00', 0x80000, 0x0) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000000c0)={0x681, 0x3, 0x1194, 0x7, 0x2, 0xdfffd, "fd1a92d27704b96e537825c438872e5f", 0x9, 0x8, 0x2, 0x4, 0x91, 0x1, 0x5}) r2 = socket(0x1, 0x800, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x1d, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89b1, &(0x7f0000000040)={'bridge_slave_1\x00'}) sysfs$auto(0x1, 0x7, 0x5) sysfs$auto(0x2, 0x0, 0x60) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r5, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) epoll_ctl$auto(0x5, 0x5, r4, 0x0) 7.719373627s ago: executing program 8 (id=1550): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/flags\x00', 0xc080, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/vendor\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x10003, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000001000df28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28cf3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79ba1bf3da559acc8f6adcfd3fd6f78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) read$auto(r0, 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x501841, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x1d3e63, 0x40) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x10', 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="80020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$auto(0x5, 0x20009, 0x7fffffff, 0x13, 0x401, 0x8000) socket(0x10, 0x800, 0x0) socket(0x11, 0x80003, 0x300) socket(0xa, 0x4, 0xfe) 6.945721224s ago: executing program 3 (id=1551): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x1f, 0x3, 0xf1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendto$auto(r2, &(0x7f0000000140)="de43f0c6ac4a89b23d3f8271d62f9c82bc5c73cf1d2a7341106c098e6bd04e5c9ccc7c0a693ca0d34166bf5e0e23a45546f574fae64f2b27e72c77fd722fd81009d69fe9dbef83cbd520cc193d336bda19e7b44c458719e77f98d803a5c459ad5d5feb06219462c867a2917bf353e975376b2e7c4d4043010fcd90b22bd69ef2619ee32bdeade8b1db1191bf3bb178434ac9f46fc2b049b1ca8f8c05ef09c2fa1f67e98c6712007a1c4b62e32fde08c1c0", 0x101, 0x0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x7) read$auto(r1, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', 0x3) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000080)={0x1, 0x8000000000000001, 0x1, 0x1}) poll$auto(&(0x7f00000012c0)={r2, 0x674, 0x6}, 0x0, 0x5) io_uring_register$auto(0xffffffffffffffff, 0xffff5594, 0x0, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) sendfile$auto(r1, r1, 0x0, 0x3fffff) read$auto_force_wakeup_fops_hci_vhci(r0, 0x0, 0x0) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 6.511249594s ago: executing program 8 (id=1552): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000000c0)={0xc, 0xfc, 0x8, 0x9, 0x5, 0x1, 0x9, 0x5, 0x9000000, 0x5, 0x2, 0x5, [{0x10, 0x9, 0x4}, {0x4, 0xa5b, 0x4}, {0x5, 0xfff}, {0xc60, 0xfffffff9, 0x3}]}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x280001, 0x4) pidfd_open$auto(0x1, 0x0) ioctl$auto(0x3, 0x890b, r0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd95, 0x2}, 0x0, 0x7ffffffff000, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000040)=0x5) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x9, 0xf0ee, 0x20009, 0xffff, "790eaa833ec06e5b05001900ffff8eac2c18231f2c8300"}, 0x4, 0x963, 0x6, @inferred, @reserved="183a050882bd5a5ab41fba3bb0b868b754d905b2de57e37f609ab32bf4f29f27ff1338d462739efa10dc063aa678b5337a6182aad80f7d12b2a2ca38922367bba7a429342599386535fda9c00700bcf95818bb97305180ffde6358ec9eef4701ce4629ba7749a7e05884ebc1d45d5d0e5f32e453ec34005613a3311e497dd11d", "6cc1294db90b700228c500000000000000ed142ef6df12bf337ba1183bedbd31b642b4051be5311121c762cb9611cf8e6947a99807bcc100"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mmap$auto(0x3, 0x3fe, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r1, 0x0, r0) mkdirat$auto(r1, &(0x7f0000000040)='./file0\x00', 0x7) socket(0x5, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETOWN_EX(r6, 0xf, 0x40) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.918705249s ago: executing program 7 (id=1553): madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x46, 0x0, 0x18000112) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) ioctl$auto(0x3, 0xae41, r0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x4, 0xffffffc0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) mseal$auto(0x0, 0x7dda, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) statmount$auto(0x0, &(0x7f0000000180)={0xfffffffb, 0xd, 0x9, 0x3, 0x400026, 0x940, 0x1ffdb, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x9, 0xfff, 0xfffffffffffffffc, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8000, 0x100002, 0x8001, 0x1, 0x0, 0x0, [0x0, 0x0, 0xf73, 0x0, 0x0, 0x2000003, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, 0x4]}, 0xfffff7fffffffffa, 0x8000081) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) socket(0x2, 0x3, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) 4.644968453s ago: executing program 3 (id=1554): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x80000000, 0x8df, 0x9b70, 0xffffffffffffffff, 0x228000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ext4/sda1/err_ratelimit_burst\x00', 0x103841, 0x0) write$auto(r0, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f680, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={"2252f65cf820f500000091dc2e2e9d42c14aef1500", 0x10, 0xba, 0x8020, 0x3, 0x100}) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000003640)='/dev/dsp1\x00', 0x2001, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r4, 0x80044dfb, &(0x7f0000000500)="911960bf9b36a45cf1ff9f09a6f6d3af11fa13d7d9a9ec8625b7edfe607215780bceabf40136139859a36a8727dee2f179526d594af88453b688456423734e99ff11dd3d7ee1e1a8c5d855d2ea57f591bec3a19beeeb3604695b57749bc804f061b1c13b72c6359ccb0b0600000069728a37ea4a7681277ebb91118cc7760b40086e4274538f8fe83b872470ba6df7bd998b985a8c69ade0b0cba670491a5acc5ef8d6925a00fc1339fe1c79dbcbdce12172b398ef886a4fa3df855358") ioctl$auto_TIOCGWINSZ2(r2, 0x5413, &(0x7f0000000240)="4b2a13a21b13646e6360ef024bd7bf7d67a1f2e0e1e5070198ef8d767d32c7987e8b9b450fae246d1c3e3bcc40505e201a4fbac26f44f28d8994376d5098388674f09a1443628e8d34c9f7902311797122c1ef3121b2da166688d608aa7edfce5b5bb09a2e36d991875e0f7db6b923b1ec056160facb993aaf3c589c0463932ceded62a397383e4002441110f38f5d9d97387bd4ca6576797ad85e847f65bd25f132f18f45b48c686705b374c825da7d4606") write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000180)=0x5) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x216080, 0x0) r5 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r5, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x69) r7 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64$auto(r7, 0x0, 0x4, 0x80000000000006) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) 4.341519537s ago: executing program 7 (id=1555): socket(0x11, 0x80003, 0x300) r0 = socket(0x1e, 0x804, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) r1 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r1, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/video56/power/runtime_status\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000100)="556819fbe971a96a565f8d7109a27c5469dea3226fcde75b9165bf4d7e756aba65ab01f09fab53f48ede74a568a18b4d0444c79e137b31a01c930ed381588d0f1477cc904b0d7d8f9198d148b4bcb24fc6f1f70a46666568b1b6f6c47479c53144f4751c304b85fc25dd86a98c758c90bd24a4925f3a25820e0ebfef39703284d494e824", 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mmap$auto(0x0, 0x2, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) write$auto(r4, &(0x7f0000000040)='\xce*+#\x00', 0x80) fcntl$auto_F_SETPIPE_SZ(r2, 0x407, 0xffffffffffffffff) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001940), 0x101000, 0x0) preadv$auto(r5, &(0x7f0000001a40)={0x0, 0x7d323aed}, 0x5, 0x4, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote\x00', 0xa901, 0x0) write$auto(r6, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) mbind$auto(0xdf, 0xd4fe3e3, 0x2004, 0x0, 0x80000000, 0x7f) 3.811107306s ago: executing program 9 (id=1534): mmap$auto(0x7f, 0x202000a, 0x3, 0x13, 0xffffffffffffffff, 0x9) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) semctl$auto_GETPID(0x0, 0x4, 0xb, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_getres$auto(0x10, &(0x7f0000000080)={0x5, 0x200}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/node/has_memory\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x0, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xffffffffffffffcf, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x86}, 0x4000841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x2, 0x9}, 0xb26}, 0x3, 0x200) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf257e000100b80b553a6ae159f52e254f4c8f0b0ca879c00b8bca01003a7c714da69a3447904a892e542992238f566445852400f96c49c2256d1c2396da07e4d408852ca3d29c0ac7b74e71fda41d251730edc50a5678dad469208b61612fd394310daf833b6672f1081630a64439340c85964533d84b2d94c51379f06239b5983d"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0x80000003) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB, @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000100)=0x9) 3.219861496s ago: executing program 3 (id=1556): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8300, 0x0) ioctl$auto(r4, 0x8004510b, 0x3) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r1, 0x5420, &(0x7f0000000040)="78dd94c049f56f45c970da6a70463277e016e248ecfa791a823dc78a80cf91a8c2f3880a97d1ea") r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r5, 0x4008af00, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.761502053s ago: executing program 7 (id=1557): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x5, 0x0) r1 = syz_clone(0x1225411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r1) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) setsockopt$auto(r0, 0x401, 0x5, 0x0, 0x8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008012, 0x3, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r4, &(0x7f0000001680)={&(0x7f0000001480), 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x94, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_TX_TYPES={0x80, 0x3, 0x0, 0x1, [@typed={0x7b, 0x95, 0x0, 0x0, @binary="9a97de7559cf1125eb328d56641e622d4418e2bd69c424c412844dfff21d60d795759d5568cd449fe20cdeefb0e1e50dc84782cd96cddab3e8fde2b4ca0d509bb1fe8e19d2d86648ace804cb063a28f5dc6a0b360daad1fae7ad35135761be28f17dbbb619932288e5b896130ede2cfc35592b2b6767df"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) fchown$auto(r3, 0xe5a, 0x5) readv$auto(r3, 0x0, 0x5) r8 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r8, &(0x7f0000000040)="981c02c843e084", 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000000340)={0x1098, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x1004, 0x125, "28cab717f2d4bc52e0929f57d99fe8f1cf2eb859a7ae893adb0c8bd373ab619ce375100a58c7c44d6826b1fdbe944e6ab4cc4847ac51fd1a8bee28ff5677b876d3bf6e4d1eb8b6341707600905d0b3a07db342682a88340d96625436eda64c6971dfd446d12069b9336824d748f5fe676aa23e3ce8c87f6f352956bdc53195f27dbe601a1f801c7b7d895659f77e9b360f67c36e910a45fff42b4181756d2a8292751cdbbea5d10a9a3b426e05c78e3e0d9165156045b682675c5e1228df38100db5adcbd592ea9ef11b4d95443d182b93d0c642b40728f069f592cce813e149565e160681cdea98fc7e108dbfe3f0a35360d2901bcdd85e7c609808ae856e09379e0f9ac1e7573a3bd4beaabfdc592d273da044c473c74974d4ba0986b982ccd7bc87148017da102a07bb53818aefff02aa4ca154ceef919a936d401c792768c7532b104962cb191e3b5bf0199ce0b1570d578fc97d2c81daae096c3bef30af6c605f84053006a445b5280e3dd76d7d0117f60c888e1b2dd07777cc3074ab0300a48169fc2459fbdfa18fc7765ec0de385fc1efa4aa556b49fa3ce3d56f5d0d72080e8e5c80245355c2fce5a8a3ea6451347481bfbbd41c1ad862f8c9644d49c949aff9d4a37bef9a60651513b03758d6f14d99b15d3274d030323567928804c2bcd2e24bedcf0b49433a8050f40bf280639c66cb72b7f5d9589cc093808d6216397d9bb88042a4edf26d32b08a7dd3d1e350cfae9d27174426d323d6144471c981c476a76990247c6a51d1e0cc41dfe9b5ac959cf1996e8b144902e3a6c067d049bd5c5382a010435397d5dcbfa80a94b5475785bf2eb29850ce8da2184d097b0e254a6486cf0d147a05e30c23e1ffde24b906338e6ae1b1d1899bb99e7351f212224ed34ddb8454827536607edf5fcf48eb2ebbf93fe5ea07a1e53f2ed4949da7addfa75bdf6c72a90442b3880fdbc1b4703817918ebab6a9f9ea8cf50d5c44257b45a2297507853eb0abedc8cbb8eb078697c15312b118f01e2b47a9a2b416360c6c1aced8affe268929b303c8976b862a63ed91edc3368ac5b0ed7b769d689c3f5b0b9d7d51311bc6a28721bf9bf37b4edde06f03aa014c049511e99a8b897eae2661993c193291bc1861ef3fd74290c3797dd05af9190e3639e4c216973d00bb2d62868995ed9ca209e6d34a14c7a2dad82a2be01c70dc5c465a4ac8dfa8a450083eddf96a8756fa8e69fb4674461c53e9be2ccf44e1ce838c9c8ff0b8bb65383a1e0d9f94e86c240b26a89e75fb3fb4761cc3df7517c2c292af87e7a6b2fb59349086125d2145f7bb821fdf2ca1f537775cd3ddba1b7c164031e3387b3b203976681e35d470deb836c2fa720e743a3203d3bd57457efc0ae01f98cbcb5c6d7182bc1b4ff153a7b794890787da14d726b117703921aa3b095f9811113a9f7a1587e412e5428533706d54d7e0c8d2dc1dff16e0b9972a93139006d56a88e5a37522815c5e9d0b666118454942717cd6186083930e0c4964c623aae9f3029314730f664ddba43d548e862ef0b496fada67879f1a7c63ee8a5c35897335604d453e92596dcfcd0ede0f0dd0d81e99c3f973fea566f43d915a7ad0a2ad6d0ff50b93fa534e504bae329f6458de6fd96d67fbd52bb77c2ba9326f08b1e6106fbfb99c07f8bcd322c9af989e5157927b5cfa52def3bf38abadefd39ad3cf285b3bc6409bfd2ce0f134215f236313e216a0f5276c05d3ffe6a6fa7971d5354c652196880650ae42abc8f4336b5ffff79b14479b2c7cfb0039f9f48df6c25e9b2581c1b7cd0df7ddabcbaf7dbde8a8ecd3ef10b22c1872cc9bec7e1dfd62613324ee4d21bf288be73fd6db3e0158d28d56906b3b3676940e778e2992a8c2e8fd59a88843322e5c430c33d38e7a2772815f88be7860a15310122f02047b02a58e1d333a3573241c6cad7fb52ce356480f29dc9c231f015c18d11a137420f66b63a718721fd497e27f26cf4d72dbc0e285af9fb98511cbad476a59e46c84266f75adda29955e5cb54d69c74b3b55dbfcfad8129991c733d8d944ff25f5f2e919373a1fac0291bbed2abf02a77d3d9519446f788eb0fec7cc70c2bfb8adfcb254cb9e7cd92f457aa468e853ca059f1a73ab48a4d50ca5c93024596d8b86e2f246a6aa966d7c2cb28e58217ff1af0f16a28b3d1bb93813a0eab1f828e1efafa0202328f328871b4b4e473d7aa4b5dff7d470a75e2051f57d7fd1663ce0bb5e99249ee9c301eef852c586611e46bd1cb049c31231ce3a5aa3687eee483d32278b39ad21d99e455c72869696469f6f5853e26d60f951394b53deb49640934532b8c1d1f4cd52bfa47b60fa23377b2cba6a39dce07d30d2a268a5eec98a95711cc5b3e518c312c9ec5ea75185bee86b9a74db05708741b03478d8193cf32480c5c9105c481d502ceb3503a6e8220e32c5cb08b3fb3392aaa7f7b02abb1a7c7820eb0329397b0b89034d18181ef45f1c06da222d390677ae5bfdf6d0111bc3d2b7862ae36b0141dd04629d52ed08052ad73a84c102a4e94c70eceb3a0510538b83de3efdc6035b54363f81dce619870553c28337c41d1b958cef4a35ed37f3168a15433a913ee726a2a3bf2b995b6f4b1a5d91bfb3315f2d6af352ff7f56ab3c807b4b6f45d3e89b47528013499ec5fa1bcf780c9c318ccb5ecf3f228214639dd2b987065bae1b1161d73b1d8a727f949e05461761600888353889d7884dca24eea268928469c06301ffacb2229c1910988f46126ed73c736a3f6eb98087c2646d3f03f839aabcb4d451e48598f11f07d70ed83a39e5406f2e484dd4c0fc962f29302fafcb6d5267428977d6f9098c57380370b2c9f3001c54b19582720260e343754fcf08629bd60a114a60975d5719aeb38103f505930810dd3be15212fef813f171bfe1aea77a085d16ab3cad8e90219d23ae7554b45a1c03b0439b9ec684b8a78d21b39d4d610f30573389b83c9330fec18bdf674a8cf0d2c8189825e1513e60033c5620ad8be0f94c737f7006bb532306888afe0cfb3c3103783b2b8e749b3cf3a000c5b9a816ac167c9c27ca4394a7292f657cff108ee1a8a2596b2ddd2ec3a32fda634e00dafbbeebf6ce0be6d438657ac353a31b06697d9afa60cf409bd13c67ec0c1c98e6f1d605ff20f71bb850ad63f28ae40807b2067bc62c3752c098dfcd078ba4e4eb8e42710c3c285199620d102dfb40f5d0e77840618f7aa81cebe88976dcbcec7afb031a405a6efb581f7bc0564913d04fe32a8754bcde1ce3bf0fca2045327e3d148424046045c3c41ba46cf373584f72b887d2c5b825af7c24c65c2981deb8a7341bce37fbbbcc5edad5c7282b4ca85e0600694f4c8bf31a5be12d8c20454fee8d25b5219e4fb98bc22105e13f6d1d78cb345284d2fc899a9220cd8ce652433bbd0de992c330e1361e73b7be1b5a459861e204b3903d5459d8e1bb6d4ca2a1b44e0c42fdc8b6473bc08257613a91b9f42dfa3e41a10b8b6120a8ab4daceeeb6d877dc638bf5aea0f14ded99979d77b682513581a63bdc9d43f5608110d9c45df42d090ed45c0d65806b0412d0f14da1d7465cbbed66117f301f5927aee5f41f47c999bdc7a9f123862fe5760b34f272ce9b484a103bedb3a5b17b46a13fde7213468c37874c4b52bbcf949af61b460c68be844209b8f6ef4f4cb6fda46db9ad9e98f81db51105db3ecd78f4f2a9d32693cb68dd198dffe42aea9dd2ac30256baa96698c6a66639a69b5ed6332028562c2a6e77c71f9762aafd8202b388b9757b8e7670ff13631d26bd40962240406e46eb00a9885947e889c44027550b7d6976ef946bbcf0246e521b64c022b8d993737c67a567de1af5a83efdd9770ec571b340a179ae485d5eae68a832a95aa82b1d71ffb9f2c634f62603b4de9e5222ed277ea1af80e4a75270fe6fbc85101d2b2788e529fb1b23ef99fc368ba57b10efd5db605c9ac9bc3650597bb9e51d0a66ab721693fbabbb3be474caeb637d4b351803eeb4a4981e772be7bf0a3f4e1b059a28b02fefb0c7844e0a8900d45446a0ef09fcf48148ec28d10204f86b1a3cab825129f01155fa2c499c764e6b0c17182d6d56f7e83f93371dbd6eff273d935139e430bb55a5c349f8b6657f1b659e666ab04e73d70de35c7e4e6a75760cd72c2d03613b2925c3df42ed196a1700f8e8a361ba38a54326a6c25f8c6853a1b4dc707759e3b747e33ec93349f1e06707c72098318944b797a6b7ca44df18e52c3d3de792254caad1f7f1cf353418fc9de3e92b5b927d22a86a1499ba72faf997ba4e09835540bd38012b51badd0828b2d27934cbe2f2b2635eb01c5397c53635041ccf1aa1fea5551e56f804c965d30978ed29384f535595ca50c24e63643af8b35b2b5c09186261f3b682f0d017db94fa486ab89d75b0861f8bfe4cb610e82e631455d4bbcae360df2ac7947ee7cb5c30271ced066bb168328f48f3d601bb334402e2f1f8faa71bce933571d9122425b585a2a7a92f195aee05f1ff15e0d0c665f252f56e0e677bd8504abe44bb52a7b115bc843c8d398376cc1a7d6994b532622459ef8bd1844268556c3db62c55f76e85d60f208a1e808ada280a7d1109bd34f18f10f9a9db1942a33acdf768d25aa7ccb4589239b0c8f8b431665775596be4cfead5e3ebc50b322f55c1107e77630ea9e3753f45642b8b1d8f12dc96e1bb254ee1d933c10da70b9daef5cba68ba8e845bd49c8ea5b040486ff2aae240dff26e9ede32b16874bbccd04a1edb586282032fddbdcedbfb4d2f2263e75e13506bc822d94b4b998a01f1bc289f13121d8033f75b16e858719b039a580799cf13108a33eb0e8b226ed4da7593356544df14b47f1969590191e47b5523fb1282e29bfdd35d19759f79ea8f98ef2d3692770b56eee4677b6fa8f4dda55432a5ff7fd29023fad96928865cc134369e976acce5fcf7b51d7cb65bc5f25c46b64f4bfa63153b69264c54e6779403fa825e2af7028e53f02e7068c3798910eaf440440fe88ab2ef081b7fc900ae5ce9b7e586e410e4689237a26116cce91bbbe14b13253d38503c72c8729a3f5bf6680f2449da9dbbe806a1dea58b35fd6e18d0eb0d3c9e5cfd7e39673bb52f5d4bc3443aac2f1e851447f604ebff2605688779be64d407729b5521c9926c1df24ac03479d940780f04d0f86661cf7503b6f5a4e276725f4d35917af14dba570a93e6fe54da6691f31dc8d033e48f13d10f6bc97914c014c77a3faaef8f20cd5caa623578cbd28722a96d34647df1729a7454402bc988a850a43aa115a17daba156fd42af5bb282546ef451847fabbf515061a6aa4a9f0d042c1734c7fe7334f95979e7e8819752cd3fb60c27e1f3d6c6a405589f6a915627adbae104e826588e24f536b96abf11444306a7dba3a735d25633830338ad165683515f4ff687ac13ace72ea6aa9a1d9aa9523524b08b37d1dc9e392fc02d29b6bce7913f9049b5799a3d9f5e00a7b959927691c463cb406273a14aa9c15a6c0d327276b2659f122b61798f6134a5bea5a9ef59780c5b1de6f3689992959b95661ca81d0930e2894fe303a00d9d04f6bb21d22010a19df2c6fd4ec93f34ccc520c1407a38b8a04bf42b1e3721eb96c3349537fe76eadc4fffb081c058c9379ab9fbe4a8cdfe7ff32eb30377623949ccafabbb2309974c8136095e8711b27c3cb63f6d8f83f3548624e485d6eb895f538c1d95604659d2ee9a1d548c6acb2d85261a592b9b91cc836fb5c13beb0"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_SAE_PASSWORD={0x53, 0x115, "903cfae8a0b281f3bdc5efc6426d2ab7da6db680a0319c2c6548e7dd35df9226c389a92119d6479ad5c3b86c18de24ec4af6a14e7d922883dd752b4a28661de0ed21cb7dc123ba7144f029cd37d234"}]}, 0x1098}, 0x1, 0x0, 0x0, 0x80}, 0x20) fspick$auto(0xffffffffffffffff, 0x0, 0x5) 2.228755296s ago: executing program 9 (id=1558): mmap$auto(0x0, 0x3, 0xfffffffffffffff8, 0x200000eb1, 0xfffffffffffffffa, 0x1000000000000006) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x104, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) ioctl$auto_ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000440)={0x3, 0xfffffff8, 0x8, 0x5}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40840, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4082, 0xff2) setsockopt$auto_SO_DEBUG(r2, 0x7, 0x1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) 2.019655539s ago: executing program 7 (id=1559): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x16, 0x7, 0x38000) io_uring_setup$auto(0x400000c, 0x0) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b40)={0x18, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008810) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r2, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c018}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, 0x0, 0xbc102, 0x0) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_OTPSELECT(r5, 0x80044d0d, 0x0) socket(0x2, 0x1, 0x0) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) writev$auto(r6, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) close_range$auto(0xffffffffffffffff, r7, 0x0) 0s ago: executing program 7 (id=1560): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram9/queue/atomic_write_max_bytes\x00', 0x0, 0x0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4002}, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) r1 = socket(0x28, 0x1, 0x0) getsockopt$auto_SO_TXREHASH(r1, 0x1, 0x4a, &(0x7f0000000040)='/proc/thread-self/net/snmp\x00', &(0x7f0000000080)=0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) r3 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r2, 0x4, r2}, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0xc1044a319effffb6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x12a41, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/index\x00', 0x600, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/235, 0xeb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x801, 0x84) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(r3, 0xfffffffffffff000, 0x4000000000002) kernel console output (not intermixed with test programs): common_interrupt+0xbf/0xe0 [ 459.174674][T11827] asm_common_interrupt+0x26/0x40 [ 459.179770][T11827] page last free pid 5751 tgid 5751 stack trace: [ 459.234059][T11827] __free_frozen_pages+0x7fe/0x1180 [ 459.254678][T11827] __folio_put+0x329/0x450 [ 459.273690][T11827] skb_release_data+0x7fb/0x9c0 [ 459.278793][T11827] napi_consume_skb+0x15a/0x220 [ 459.327388][T11827] net_rx_action+0x47f/0xfe0 [ 459.332085][T11827] handle_softirqs+0x219/0x8e0 [ 459.373571][T11827] __irq_exit_rcu+0x109/0x170 [ 459.389896][T11827] irq_exit_rcu+0x9/0x30 [ 459.417903][T11827] common_interrupt+0x66/0xe0 [ 459.422677][T11827] asm_common_interrupt+0x26/0x40 [ 464.195821][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 464.339203][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 464.432077][ T30] audit: type=1800 audit(4294967654.417:14): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1217" name="dbroot" dev="configfs" ino=33423 res=0 errno=0 [ 465.862343][ T30] audit: type=1800 audit(4294967655.827:15): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1220" name="dbroot" dev="configfs" ino=33473 res=0 errno=0 [ 468.420576][T11949] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 472.222354][T11994] FAULT_INJECTION: forcing a failure. [ 472.222354][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 472.345346][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.1.1233 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 472.345380][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.345395][T11994] Call Trace: [ 472.345402][T11994] [ 472.345412][T11994] dump_stack_lvl+0x16c/0x1f0 [ 472.345453][T11994] should_fail_ex+0x512/0x640 [ 472.345487][T11994] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 472.345522][T11994] should_failslab+0xc2/0x120 [ 472.345544][T11994] __kmalloc_cache_noprof+0x6a/0x3e0 [ 472.345575][T11994] ? lockdep_init_map_type+0x5c/0x280 [ 472.345607][T11994] ? qrtr_endpoint_register+0x85/0x500 [ 472.345634][T11994] qrtr_endpoint_register+0x85/0x500 [ 472.345657][T11994] qrtr_tun_open+0x151/0x220 [ 472.345684][T11994] ? __pfx_qrtr_tun_open+0x10/0x10 [ 472.345712][T11994] misc_open+0x35d/0x420 [ 472.345740][T11994] ? __pfx_misc_open+0x10/0x10 [ 472.345768][T11994] chrdev_open+0x231/0x6a0 [ 472.345804][T11994] ? __pfx_apparmor_file_open+0x10/0x10 [ 472.345833][T11994] ? __pfx_chrdev_open+0x10/0x10 [ 472.345878][T11994] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 472.345914][T11994] do_dentry_open+0x744/0x1c10 [ 472.345968][T11994] ? __pfx_chrdev_open+0x10/0x10 [ 472.346011][T11994] vfs_open+0x82/0x3f0 [ 472.346042][T11994] path_openat+0x1de4/0x2cb0 [ 472.346091][T11994] ? __pfx_path_openat+0x10/0x10 [ 472.346127][T11994] ? __lock_acquire+0xb8a/0x1c90 [ 472.346163][T11994] do_filp_open+0x20b/0x470 [ 472.346198][T11994] ? __pfx_do_filp_open+0x10/0x10 [ 472.346254][T11994] ? alloc_fd+0x471/0x7d0 [ 472.346295][T11994] do_sys_openat2+0x11b/0x1d0 [ 472.346321][T11994] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.346359][T11994] __x64_sys_openat+0x174/0x210 [ 472.346391][T11994] ? __pfx___x64_sys_openat+0x10/0x10 [ 472.346431][T11994] do_syscall_64+0xcd/0x490 [ 472.346469][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.346494][T11994] RIP: 0033:0x7fbfd0d8e929 [ 472.346512][T11994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.346536][T11994] RSP: 002b:00007fbfd1b22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.346558][T11994] RAX: ffffffffffffffda RBX: 00007fbfd0fb6080 RCX: 00007fbfd0d8e929 [ 472.346574][T11994] RDX: 0000000000000101 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 472.346588][T11994] RBP: 00007fbfd0e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 472.346603][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.346616][T11994] R13: 0000000000000000 R14: 00007fbfd0fb6080 R15: 00007ffe3433f0a8 [ 472.346646][T11994] [ 473.396496][T12006] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 474.188859][T12018] Invalid ELF header magic: != ELF [ 476.013923][T12038] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1242'. [ 476.308355][T12056] random: crng reseeded on system resumption [ 476.604860][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.762029][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.596701][T12103] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1251'. [ 480.044273][T12071] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 480.405625][T12110] FAULT_INJECTION: forcing a failure. [ 480.405625][T12110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 480.473666][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.0.1252 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 480.473702][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.473717][T12110] Call Trace: [ 480.473724][T12110] [ 480.473734][T12110] dump_stack_lvl+0x16c/0x1f0 [ 480.473775][T12110] should_fail_ex+0x512/0x640 [ 480.473815][T12110] should_fail_alloc_page+0xe7/0x130 [ 480.473841][T12110] prepare_alloc_pages+0x3c2/0x610 [ 480.473874][T12110] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 480.473914][T12110] ? mas_next_slot+0x12d3/0x21b0 [ 480.473953][T12110] ? __up_read+0x1f8/0x750 [ 480.473997][T12110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 480.474038][T12110] ? validate_mm+0x40a/0x570 [ 480.474082][T12110] ? __pfx_validate_mm+0x10/0x10 [ 480.474115][T12110] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.474154][T12110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.474193][T12110] ? policy_nodemask+0xea/0x4e0 [ 480.474218][T12110] alloc_pages_mpol+0x1fb/0x550 [ 480.474242][T12110] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 480.474273][T12110] alloc_pages_noprof+0x131/0x390 [ 480.474297][T12110] __pmd_alloc+0x3b/0x930 [ 480.474327][T12110] __handle_mm_fault+0xaac/0x5490 [ 480.474367][T12110] ? __pfx___handle_mm_fault+0x10/0x10 [ 480.474424][T12110] handle_mm_fault+0x589/0xd10 [ 480.474462][T12110] __get_user_pages+0x589/0x3b80 [ 480.474497][T12110] ? __pfx_mt_find+0x10/0x10 [ 480.474519][T12110] ? __pfx___get_user_pages+0x10/0x10 [ 480.474568][T12110] populate_vma_page_range+0x278/0x3a0 [ 480.474598][T12110] ? __pfx_populate_vma_page_range+0x10/0x10 [ 480.474626][T12110] ? __pfx_find_vma_intersection+0x10/0x10 [ 480.474653][T12110] ? do_mmap+0x69c/0x1210 [ 480.474681][T12110] __mm_populate+0x1d8/0x380 [ 480.474709][T12110] ? __pfx___mm_populate+0x10/0x10 [ 480.474740][T12110] ? up_write+0x1b2/0x520 [ 480.474777][T12110] vm_mmap_pgoff+0x362/0x450 [ 480.474804][T12110] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 480.474833][T12110] ? __x64_sys_futex+0x1e0/0x4c0 [ 480.474861][T12110] ? __x64_sys_futex+0x1e9/0x4c0 [ 480.474893][T12110] ksys_mmap_pgoff+0x7d/0x5c0 [ 480.474917][T12110] ? xfd_validate_state+0x61/0x180 [ 480.474946][T12110] ? __pfx_ksys_write+0x10/0x10 [ 480.474983][T12110] __x64_sys_mmap+0x125/0x190 [ 480.475019][T12110] do_syscall_64+0xcd/0x490 [ 480.475055][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.475086][T12110] RIP: 0033:0x7f83f098e929 [ 480.475105][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.475127][T12110] RSP: 002b:00007f83f1740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 480.475148][T12110] RAX: ffffffffffffffda RBX: 00007f83f0bb5fa0 RCX: 00007f83f098e929 [ 480.475163][T12110] RDX: 00000000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 480.475177][T12110] RBP: 00007f83f0a10ca1 R08: 0000000000000002 R09: 0000000000008000 [ 480.475191][T12110] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 480.475205][T12110] R13: 0000000000000000 R14: 00007f83f0bb5fa0 R15: 00007ffc0e743f98 [ 480.475233][T12110] [ 485.393708][T12170] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1261'. [ 485.671247][T12171] ptp ptp0: new virtual clock ptp1 [ 485.704561][T12171] ptp ptp0: new virtual clock ptp2 [ 485.746089][T12171] ptp ptp0: new virtual clock ptp3 [ 485.766552][T12171] ptp ptp0: guarantee physical clock free running [ 487.370255][ T1332] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 946 with max blocks 8 with error 117 [ 487.483659][ T1332] EXT4-fs (sda1): This should not happen!! Data will be lost [ 487.483659][ T1332] [ 487.898553][T12206] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1268'. [ 488.120882][T12225] FAULT_INJECTION: forcing a failure. [ 488.120882][T12225] name failslab, interval 1, probability 0, space 0, times 0 [ 488.201825][T12225] CPU: 1 UID: 0 PID: 12225 Comm: syz.0.1271 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 488.201859][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.201874][T12225] Call Trace: [ 488.201882][T12225] [ 488.201891][T12225] dump_stack_lvl+0x16c/0x1f0 [ 488.201931][T12225] should_fail_ex+0x512/0x640 [ 488.201966][T12225] ? __kmalloc_noprof+0xbf/0x510 [ 488.202005][T12225] ? lsm_blob_alloc+0x68/0x90 [ 488.202039][T12225] should_failslab+0xc2/0x120 [ 488.202062][T12225] __kmalloc_noprof+0xd2/0x510 [ 488.202109][T12225] lsm_blob_alloc+0x68/0x90 [ 488.202146][T12225] security_sk_alloc+0x30/0x270 [ 488.202173][T12225] sk_prot_alloc+0xfb/0x2a0 [ 488.202200][T12225] sk_alloc+0x36/0xc20 [ 488.202233][T12225] smc_create+0x114/0x2a0 [ 488.202265][T12225] __sock_create+0x338/0x8d0 [ 488.202298][T12225] __sys_socket+0x14d/0x260 [ 488.202329][T12225] ? fput+0x70/0xf0 [ 488.202350][T12225] ? __pfx___sys_socket+0x10/0x10 [ 488.202378][T12225] ? xfd_validate_state+0x61/0x180 [ 488.202410][T12225] ? __pfx_ksys_read+0x10/0x10 [ 488.202449][T12225] __x64_sys_socket+0x72/0xb0 [ 488.202476][T12225] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.202510][T12225] do_syscall_64+0xcd/0x490 [ 488.202548][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.202571][T12225] RIP: 0033:0x7f83f098e929 [ 488.202589][T12225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.202613][T12225] RSP: 002b:00007f83f1740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 488.202636][T12225] RAX: ffffffffffffffda RBX: 00007f83f0bb5fa0 RCX: 00007f83f098e929 [ 488.202651][T12225] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 488.202665][T12225] RBP: 00007f83f0a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 488.202679][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.202693][T12225] R13: 0000000000000000 R14: 00007f83f0bb5fa0 R15: 00007ffc0e743f98 [ 488.202722][T12225] [ 490.117643][T12251] can: request_module (can-proto-5) failed. [ 490.820625][T12274] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 490.820661][T12274] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 490.841743][T12274] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 491.734165][T12285] ptrace attach of "./syz-executor exec"[12288] was attempted by "./syz-executor exec"[12285] [ 492.055915][T12283] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1281'. [ 493.419276][T12304] zswap: compressor not available [ 494.488398][T12327] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1289'. [ 495.159539][T12341] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 495.980520][T12346] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1293'. [ 496.741609][T12367] ima: policy update failed [ 496.769173][ T30] audit: type=1802 audit(4294967686.747:16): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1295" res=0 errno=0 [ 497.090552][T12380] sp0: Synchronizing with TNC [ 498.738691][T12399] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1302'. [ 500.182084][T12401] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1299'. [ 500.836024][T12431] FAULT_INJECTION: forcing a failure. [ 500.836024][T12431] name failslab, interval 1, probability 0, space 0, times 0 [ 500.902501][T12431] CPU: 1 UID: 0 PID: 12431 Comm: syz.1.1307 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 500.902537][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.902552][T12431] Call Trace: [ 500.902559][T12431] [ 500.902569][T12431] dump_stack_lvl+0x16c/0x1f0 [ 500.902610][T12431] should_fail_ex+0x512/0x640 [ 500.902644][T12431] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 500.902684][T12431] should_failslab+0xc2/0x120 [ 500.902707][T12431] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 500.902744][T12431] ? vm_area_dup+0x27/0x8d0 [ 500.902779][T12431] vm_area_dup+0x27/0x8d0 [ 500.902813][T12431] __split_vma+0x18e/0x1070 [ 500.902847][T12431] ? __lock_acquire+0xb8a/0x1c90 [ 500.902881][T12431] ? __pfx___split_vma+0x10/0x10 [ 500.902922][T12431] ? lock_acquire+0x179/0x350 [ 500.902955][T12431] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.902996][T12431] vms_gather_munmap_vmas+0x1c2/0x1310 [ 500.903037][T12431] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 500.903089][T12431] do_vmi_align_munmap+0x27c/0x7d0 [ 500.903128][T12431] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 500.903210][T12431] do_vmi_munmap+0x204/0x3e0 [ 500.903249][T12431] move_vma+0xb67/0x1740 [ 500.903290][T12431] ? __pfx_move_vma+0x10/0x10 [ 500.903329][T12431] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 500.903367][T12431] ? vrm_set_new_addr+0x208/0x290 [ 500.903404][T12431] __do_sys_mremap+0xe07/0x1590 [ 500.903447][T12431] ? __pfx___do_sys_mremap+0x10/0x10 [ 500.903489][T12431] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.903536][T12431] ? __x64_sys_futex+0x1e0/0x4c0 [ 500.903584][T12431] do_syscall_64+0xcd/0x490 [ 500.903622][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.903646][T12431] RIP: 0033:0x7fbfd0d8e929 [ 500.903664][T12431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.903687][T12431] RSP: 002b:00007fbfd1b43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 500.903710][T12431] RAX: ffffffffffffffda RBX: 00007fbfd0fb5fa0 RCX: 00007fbfd0d8e929 [ 500.903725][T12431] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000001000 [ 500.903740][T12431] RBP: 00007fbfd0e10ca1 R08: 0000000100000000 R09: 0000000000000000 [ 500.903755][T12431] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 500.903769][T12431] R13: 0000000000000000 R14: 00007fbfd0fb5fa0 R15: 00007ffe3433f0a8 [ 500.903798][T12431] [ 502.165153][T12442] ovs_: entered promiscuous mode [ 502.951788][T12455] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 928 with max blocks 18 with error 117 [ 503.192290][T12456] futex_wake_op: syz.1.1311 tries to shift op by -9; fix this program [ 503.247997][T12455] EXT4-fs (sda1): This should not happen!! Data will be lost [ 503.247997][T12455] [ 504.007983][T12464] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1312'. [ 506.267193][T12523] ptp ptp0: guarantee physical clock free running [ 507.064327][T12542] FAULT_INJECTION: forcing a failure. [ 507.064327][T12542] name failslab, interval 1, probability 0, space 0, times 0 [ 507.121892][T12542] CPU: 1 UID: 0 PID: 12542 Comm: syz.3.1323 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 507.121925][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.121940][T12542] Call Trace: [ 507.121948][T12542] [ 507.121956][T12542] dump_stack_lvl+0x16c/0x1f0 [ 507.121995][T12542] should_fail_ex+0x512/0x640 [ 507.122028][T12542] ? __kmalloc_noprof+0xbf/0x510 [ 507.122065][T12542] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 507.122094][T12542] should_failslab+0xc2/0x120 [ 507.122116][T12542] __kmalloc_noprof+0xd2/0x510 [ 507.122175][T12542] devlink_fmsg_put_value+0xaa/0x2d0 [ 507.122205][T12542] devlink_fmsg_u8_pair_put+0x19c/0x2f0 [ 507.122233][T12542] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 507.122264][T12542] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 507.122296][T12542] nsim_dev_dummy_fmsg_put+0x39/0x1e0 [ 507.122324][T12542] devlink_health_do_dump+0x240/0x620 [ 507.122357][T12542] devlink_health_report+0x3c9/0x9c0 [ 507.122390][T12542] ? __pfx_devlink_health_report+0x10/0x10 [ 507.122420][T12542] ? _copy_from_user+0x59/0xd0 [ 507.122461][T12542] nsim_dev_health_break_write+0x166/0x210 [ 507.122487][T12542] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 507.122524][T12542] full_proxy_write+0x13c/0x200 [ 507.122555][T12542] ? __pfx_full_proxy_write+0x10/0x10 [ 507.122578][T12542] vfs_write+0x29d/0x1150 [ 507.122617][T12542] ? __pfx___mutex_lock+0x10/0x10 [ 507.122654][T12542] ? __pfx_vfs_write+0x10/0x10 [ 507.122696][T12542] ? __fget_files+0x20e/0x3c0 [ 507.122738][T12542] ksys_write+0x12a/0x250 [ 507.122771][T12542] ? __pfx_ksys_write+0x10/0x10 [ 507.122814][T12542] do_syscall_64+0xcd/0x490 [ 507.122852][T12542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.122877][T12542] RIP: 0033:0x7f2bf638e929 [ 507.122895][T12542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.122918][T12542] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.122940][T12542] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 507.122956][T12542] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 507.122969][T12542] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 507.122984][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.122997][T12542] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 507.123027][T12542] [ 509.058247][T12570] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 509.310772][T12565] Invalid ELF header magic: != ELF [ 509.678133][T12561] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 951 with max blocks 3 with error 117 [ 509.846423][T12561] EXT4-fs (sda1): This should not happen!! Data will be lost [ 509.846423][T12561] [ 510.262698][T12575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 510.744430][T12274] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 510.744465][T12274] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 510.760286][T12274] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 511.554359][T12583] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.853723][T12597] [U] '|~ᶾg$P>Y]F半(ˁ="`F᫦R>F0b@{XMPb桎f;(A\;ѤB" [ 511.909300][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.915790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.936841][T12597] [U] _S^TຑpL4Ywqz>ZD8 [ 511.942118][T12597] [U] *77ƻ&aIhe*93tN\B;5Zs9Ë́/nQ [ 511.951018][T12597] [U] $s&U;LQ [ 512.054021][T12600] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1342'. [ 512.103607][T12597] [U] ջ[";麝c` mOyp T TR ԔyU"{]xpvvay݆Ga+D<[c)NYNTIk=DvFH3`PXH@΂h=l Mɹ* [ 512.190910][T12597] [U] {9|=|DX֗_s^9?jRpp69+ MN [ 512.238717][T12597] [U] Ѫz\hh(b\XGerQI\p9]Q۹Q r\oD+22,c~w Hxc ۴INSBVj]i4!ڌwp93S]@b_ [ 513.309432][T12612] HfR: entered promiscuous mode [ 513.374099][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 513.426522][T12612] HfR: left promiscuous mode [ 515.790968][T12625] tipc: Withdrawal distribution failure [ 515.854500][T12637] FAULT_INJECTION: forcing a failure. [ 515.854500][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 515.905223][T12637] CPU: 1 UID: 0 PID: 12637 Comm: syz.1.1340 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 515.905259][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.905272][T12637] Call Trace: [ 515.905279][T12637] [ 515.905288][T12637] dump_stack_lvl+0x16c/0x1f0 [ 515.905332][T12637] should_fail_ex+0x512/0x640 [ 515.905365][T12637] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 515.905404][T12637] should_failslab+0xc2/0x120 [ 515.905427][T12637] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 515.905461][T12637] ? __proc_create+0xc3/0x8c0 [ 515.905497][T12637] ? __proc_create+0x2ce/0x8c0 [ 515.905537][T12637] __proc_create+0x2ce/0x8c0 [ 515.905575][T12637] ? __pfx___proc_create+0x10/0x10 [ 515.905616][T12637] ? _raw_write_unlock+0x28/0x50 [ 515.905647][T12637] ? proc_register+0x314/0x5f0 [ 515.905671][T12637] proc_create_reg+0x7d/0x180 [ 515.905700][T12637] proc_create_data+0x86/0x110 [ 515.905723][T12637] ? __pfx_proc_create_data+0x10/0x10 [ 515.905747][T12637] ? cache_register_net+0x137/0x5e0 [ 515.905776][T12637] cache_register_net+0x2d6/0x5e0 [ 515.905801][T12637] ip_map_cache_create+0x8b/0x130 [ 515.905839][T12637] ? __pfx_sunrpc_init_net+0x10/0x10 [ 515.905870][T12637] sunrpc_init_net+0x55/0x190 [ 515.905902][T12637] ops_init+0x1e2/0x5f0 [ 515.905942][T12637] setup_net+0x1ff/0x510 [ 515.905977][T12637] ? lockdep_init_map_type+0x5c/0x280 [ 515.906011][T12637] ? __pfx_setup_net+0x10/0x10 [ 515.906049][T12637] ? debug_mutex_init+0x37/0x70 [ 515.906075][T12637] copy_net_ns+0x2a6/0x5f0 [ 515.906101][T12637] create_new_namespaces+0x3ea/0xa90 [ 515.906135][T12637] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 515.906164][T12637] ksys_unshare+0x45b/0xa40 [ 515.906196][T12637] ? __pfx_ksys_unshare+0x10/0x10 [ 515.906229][T12637] ? xfd_validate_state+0x61/0x180 [ 515.906269][T12637] __x64_sys_unshare+0x31/0x40 [ 515.906300][T12637] do_syscall_64+0xcd/0x490 [ 515.906337][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.906361][T12637] RIP: 0033:0x7fbfd0d8e929 [ 515.906378][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.906401][T12637] RSP: 002b:00007fbfd1b43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.906423][T12637] RAX: ffffffffffffffda RBX: 00007fbfd0fb5fa0 RCX: 00007fbfd0d8e929 [ 515.906437][T12637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 515.906451][T12637] RBP: 00007fbfd0e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 515.906465][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.906478][T12637] R13: 0000000000000000 R14: 00007fbfd0fb5fa0 R15: 00007ffe3433f0a8 [ 515.906506][T12637] [ 517.138428][T12646] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1343'. [ 517.301563][T12641] random: crng reseeded on system resumption [ 518.690101][T12672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 519.646532][T12684] sp0: Synchronizing with TNC [ 519.710154][T12687] FAULT_INJECTION: forcing a failure. [ 519.710154][T12687] name failslab, interval 1, probability 0, space 0, times 0 [ 519.758079][T12687] CPU: 1 UID: 0 PID: 12687 Comm: syz.0.1349 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 519.758114][T12687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.758127][T12687] Call Trace: [ 519.758135][T12687] [ 519.758144][T12687] dump_stack_lvl+0x16c/0x1f0 [ 519.758184][T12687] should_fail_ex+0x512/0x640 [ 519.758219][T12687] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 519.758259][T12687] should_failslab+0xc2/0x120 [ 519.758282][T12687] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 519.758319][T12687] ? alloc_inode+0x64/0x240 [ 519.758347][T12687] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 519.758375][T12687] alloc_inode+0x64/0x240 [ 519.758399][T12687] new_inode+0x22/0x1c0 [ 519.758425][T12687] __debugfs_create_file+0x11c/0x6b0 [ 519.758460][T12687] debugfs_create_file_full+0x41/0x60 [ 519.758495][T12687] kvm_dev_ioctl+0x14ff/0x1ad0 [ 519.758527][T12687] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 519.758560][T12687] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 519.758584][T12687] __x64_sys_ioctl+0x18b/0x210 [ 519.758621][T12687] do_syscall_64+0xcd/0x490 [ 519.758658][T12687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.758681][T12687] RIP: 0033:0x7f83f098e929 [ 519.758699][T12687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.758721][T12687] RSP: 002b:00007f83f1740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.758742][T12687] RAX: ffffffffffffffda RBX: 00007f83f0bb5fa0 RCX: 00007f83f098e929 [ 519.758757][T12687] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 519.758771][T12687] RBP: 00007f83f0a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 519.758784][T12687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.758798][T12687] R13: 0000000000000000 R14: 00007f83f0bb5fa0 R15: 00007ffc0e743f98 [ 519.758826][T12687] [ 519.758836][T12687] debugfs: out of free dentries, can not create file 'pages_4k' [ 520.169515][T12693] sp1: Synchronizing with TNC [ 521.915137][T12716] FAULT_INJECTION: forcing a failure. [ 521.915137][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 521.967138][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.1.1353 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 521.967172][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.967186][T12716] Call Trace: [ 521.967194][T12716] [ 521.967203][T12716] dump_stack_lvl+0x16c/0x1f0 [ 521.967242][T12716] should_fail_ex+0x512/0x640 [ 521.967277][T12716] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 521.967322][T12716] should_failslab+0xc2/0x120 [ 521.967343][T12716] __kmalloc_cache_noprof+0x6a/0x3e0 [ 521.967372][T12716] ? __asan_memcpy+0x3c/0x60 [ 521.967399][T12716] ? create_filter_start.constprop.0+0x103/0x300 [ 521.967432][T12716] create_filter_start.constprop.0+0x103/0x300 [ 521.967463][T12716] apply_subsystem_event_filter+0x18d/0x17d0 [ 521.967497][T12716] ? __might_fault+0xe3/0x190 [ 521.967528][T12716] ? __might_fault+0x13b/0x190 [ 521.967560][T12716] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 521.967594][T12716] ? _copy_from_user+0x59/0xd0 [ 521.967631][T12716] subsystem_filter_write+0x95/0x120 [ 521.967661][T12716] ? __pfx_subsystem_filter_write+0x10/0x10 [ 521.967688][T12716] vfs_write+0x29d/0x1150 [ 521.967723][T12716] ? __pfx___mutex_lock+0x10/0x10 [ 521.967756][T12716] ? __pfx_vfs_write+0x10/0x10 [ 521.967794][T12716] ? __fget_files+0x20e/0x3c0 [ 521.967832][T12716] ksys_write+0x12a/0x250 [ 521.967862][T12716] ? __pfx_ksys_write+0x10/0x10 [ 521.967901][T12716] do_syscall_64+0xcd/0x490 [ 521.967936][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.967957][T12716] RIP: 0033:0x7fbfd0d8e929 [ 521.967973][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.967995][T12716] RSP: 002b:00007fbfd1b22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.968015][T12716] RAX: ffffffffffffffda RBX: 00007fbfd0fb6080 RCX: 00007fbfd0d8e929 [ 521.968029][T12716] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 521.968041][T12716] RBP: 00007fbfd0e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 521.968054][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.968066][T12716] R13: 0000000000000000 R14: 00007fbfd0fb6080 R15: 00007ffe3433f0a8 [ 521.968093][T12716] [ 523.168040][T12727] ima: policy update failed [ 523.194952][T12728] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1354'. [ 523.247215][ T30] audit: type=1802 audit(4294967713.217:17): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1355" res=0 errno=0 [ 525.481456][T12758] ptrace attach of "./syz-executor exec"[12760] was attempted by "./syz-executor exec"[12758] [ 525.743809][T12764] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 527.241010][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1367'. [ 527.283874][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.302395][T12779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.404379][T12779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.469315][T12779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.663002][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1369'. [ 529.181847][T12799] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 529.234073][T12801] FAULT_INJECTION: forcing a failure. [ 529.234073][T12801] name failslab, interval 1, probability 0, space 0, times 0 [ 529.256789][T12799] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 529.354303][T12801] CPU: 1 UID: 0 PID: 12801 Comm: syz.0.1370 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 529.354339][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.354354][T12801] Call Trace: [ 529.354361][T12801] [ 529.354371][T12801] dump_stack_lvl+0x16c/0x1f0 [ 529.354424][T12801] should_fail_ex+0x512/0x640 [ 529.354460][T12801] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 529.354500][T12801] should_failslab+0xc2/0x120 [ 529.354526][T12801] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 529.354562][T12801] ? seq_open+0x55/0x170 [ 529.354589][T12801] ? __pfx_show_smaps_rollup+0x10/0x10 [ 529.354621][T12801] seq_open+0x55/0x170 [ 529.354643][T12801] ? __pfx_show_smaps_rollup+0x10/0x10 [ 529.354675][T12801] single_open+0xfc/0x1f0 [ 529.354701][T12801] smaps_rollup_open+0x6f/0x170 [ 529.354730][T12801] do_dentry_open+0x744/0x1c10 [ 529.354767][T12801] ? __pfx_smaps_rollup_open+0x10/0x10 [ 529.354801][T12801] vfs_open+0x82/0x3f0 [ 529.354829][T12801] path_openat+0x1de4/0x2cb0 [ 529.354873][T12801] ? __pfx_path_openat+0x10/0x10 [ 529.354909][T12801] ? __lock_acquire+0xb8a/0x1c90 [ 529.354946][T12801] do_filp_open+0x20b/0x470 [ 529.354981][T12801] ? __pfx_do_filp_open+0x10/0x10 [ 529.355026][T12801] ? __pfx_kfree_link+0x10/0x10 [ 529.355060][T12801] ? alloc_fd+0x471/0x7d0 [ 529.355100][T12801] do_sys_openat2+0x11b/0x1d0 [ 529.355126][T12801] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.355164][T12801] __x64_sys_openat+0x174/0x210 [ 529.355191][T12801] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.355230][T12801] do_syscall_64+0xcd/0x490 [ 529.355268][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.355292][T12801] RIP: 0033:0x7f83f098e929 [ 529.355310][T12801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.355336][T12801] RSP: 002b:00007f83f171f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.355359][T12801] RAX: ffffffffffffffda RBX: 00007f83f0bb6080 RCX: 00007f83f098e929 [ 529.355374][T12801] RDX: 00000000001a3000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 529.355389][T12801] RBP: 00007f83f0a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 529.355408][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.355422][T12801] R13: 0000000000000000 R14: 00007f83f0bb6080 R15: 00007ffc0e743f98 [ 529.355464][T12801] [ 529.359615][T12799] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 531.579053][T12831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 531.594384][T12831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 531.604776][T12831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 531.614130][T12831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 531.622774][T12831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.591328][T12829] chnl_net:caif_netlink_parms(): no params data found [ 532.990077][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.024880][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.032199][T12829] bridge_slave_0: entered allmulticast mode [ 533.076036][T12829] bridge_slave_0: entered promiscuous mode [ 533.096766][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.113674][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.127735][T12829] bridge_slave_1: entered allmulticast mode [ 533.145207][T12829] bridge_slave_1: entered promiscuous mode [ 533.218114][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.249422][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.330450][T12829] team0: Port device team_slave_0 added [ 533.349750][T12829] team0: Port device team_slave_1 added [ 533.413953][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.420969][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.491744][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.514852][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.521872][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.588572][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.665028][T12831] Bluetooth: hci4: command tx timeout [ 533.698648][T12829] hsr_slave_0: entered promiscuous mode [ 533.715076][T12829] hsr_slave_1: entered promiscuous mode [ 533.937244][T12817] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 534.093399][T12829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.127483][T12829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.148513][T12829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.188443][T12829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.382830][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.425351][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.453717][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.460908][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.495723][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.502886][T12449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.906417][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.394749][T12829] veth0_vlan: entered promiscuous mode [ 535.418535][T12829] veth1_vlan: entered promiscuous mode [ 535.481432][T12829] veth0_macvtap: entered promiscuous mode [ 535.497635][T12829] veth1_macvtap: entered promiscuous mode [ 535.549777][T12829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.574879][T12829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.606366][T12829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.625638][T12829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.643828][T12829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.652571][T12829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.746452][T12831] Bluetooth: hci4: command tx timeout [ 535.851996][T12265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.872846][T12265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.946101][T12265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.959780][T12265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.377488][T12871] warn_alloc: 2 callbacks suppressed [ 536.377504][T12871] syz.3.1388: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 536.496521][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.3.1388 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 536.496555][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.496568][T12871] Call Trace: [ 536.496575][T12871] [ 536.496583][T12871] dump_stack_lvl+0x16c/0x1f0 [ 536.496620][T12871] warn_alloc+0x248/0x3a0 [ 536.496655][T12871] ? __pfx_warn_alloc+0x10/0x10 [ 536.496689][T12871] ? alloc_pages_mpol+0x25a/0x550 [ 536.496711][T12871] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 536.496742][T12871] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 536.496786][T12871] ? kernel_clone+0xfc/0x960 [ 536.496820][T12871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 536.496858][T12871] ? kernel_clone+0xfc/0x960 [ 536.496884][T12871] __vmalloc_node_noprof+0xad/0xf0 [ 536.496911][T12871] ? kernel_clone+0xfc/0x960 [ 536.496940][T12871] copy_process+0x2c70/0x7650 [ 536.496967][T12871] ? __pfx___futex_wait+0x10/0x10 [ 536.497008][T12871] ? __pfx_copy_process+0x10/0x10 [ 536.497036][T12871] ? __pfx_map_create+0x10/0x10 [ 536.497066][T12871] ? __might_fault+0xe3/0x190 [ 536.497101][T12871] ? __futex_hash.constprop.0+0x1e9/0x440 [ 536.497131][T12871] kernel_clone+0xfc/0x960 [ 536.497160][T12871] ? __pfx_kernel_clone+0x10/0x10 [ 536.497203][T12871] __do_sys_clone+0xce/0x120 [ 536.497230][T12871] ? __pfx___do_sys_clone+0x10/0x10 [ 536.497270][T12871] ? xfd_validate_state+0x61/0x180 [ 536.497298][T12871] ? __pfx_do_writev+0x10/0x10 [ 536.497335][T12871] do_syscall_64+0xcd/0x490 [ 536.497369][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.497391][T12871] RIP: 0033:0x7f2bf638e929 [ 536.497407][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.497428][T12871] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 536.497448][T12871] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 536.497462][T12871] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 536.497475][T12871] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 536.497488][T12871] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 536.497501][T12871] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 536.497527][T12871] [ 536.497534][T12871] Mem-Info: [ 537.726193][T12871] active_anon:13775 inactive_anon:16 isolated_anon:0 [ 537.726193][T12871] active_file:19310 inactive_file:44617 isolated_file:0 [ 537.726193][T12871] unevictable:768 dirty:2848 writeback:1536 [ 537.726193][T12871] slab_reclaimable:11253 slab_unreclaimable:108662 [ 537.726193][T12871] mapped:37845 shmem:4770 pagetables:1102 [ 537.726193][T12871] sec_pagetables:0 bounce:0 [ 537.726193][T12871] kernel_misc_reclaimable:0 [ 537.726193][T12871] free:1270199 free_pcp:24970 free_cma:0 [ 537.772727][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.833499][T12831] Bluetooth: hci4: command tx timeout [ 537.997222][T12871] Node 0 active_anon:41528kB inactive_anon:64kB active_file:77292kB inactive_file:179608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152368kB dirty:8356kB writeback:4096kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.163626][T12871] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.340217][T12871] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.417916][T12871] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 538.434667][T12871] Node 0 DMA32 free:1200092kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41468kB inactive_anon:64kB active_file:77292kB inactive_file:162212kB unevictable:1536kB writepending:11460kB present:3129332kB managed:2540344kB mlocked:0kB bounce:0kB free_pcp:76524kB local_pcp:76524kB free_cma:0kB [ 538.503536][T12871] lowmem_reserve[]: 0 0 1 1 1 [ 538.508328][T12871] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 538.648727][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1390'. [ 538.664913][T12871] lowmem_reserve[]: 0 0 0 0 0 [ 538.669716][T12871] Node 1 Normal free:3904240kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13052kB local_pcp:13052kB free_cma:0kB [ 538.818728][T12871] lowmem_reserve[]: 0 0 0 0 0 [ 538.835432][T12871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.895404][T12871] Node 0 DMA32: 3891*4kB (UME) 2145*8kB (UME) 965*16kB (UM) 284*32kB (ME) 81*64kB (UM) 95*128kB (M) 123*256kB (ME) 40*512kB (UM) 2*1024kB (UM) 6*2048kB (UME) 258*4096kB (UM) = 1197668kB [ 538.985648][T12871] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 539.054867][T12871] Node 1 Normal: 221*4kB (UME) 53*8kB (UME) 47*16kB (UME) 245*32kB (UME) 85*64kB (UME) 24*128kB (UME) 4*256kB (UME) 2*512kB (UM) 3*1024kB (UME) 5*2048kB (ME) 945*4096kB (M) = 3904492kB [ 539.164487][T12871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.220545][T12871] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.258372][T12871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.300904][T12871] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.340215][T12871] 61667 total pagecache pages [ 539.358594][T12871] 20 pages in swap cache [ 539.375876][T12871] Free swap = 124928kB [ 539.397959][T12871] Total swap = 124996kB [ 539.422486][T12871] 2097051 pages RAM [ 539.444944][T12871] 0 pages HighMem/MovableOnly [ 539.465739][T12871] 429987 pages reserved [ 539.510721][T12871] 0 pages cma reserved [ 539.904278][T12831] Bluetooth: hci4: command tx timeout [ 541.774606][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1383'. [ 541.948433][T12937] veth1_macvtap: left promiscuous mode [ 543.231675][T12960] [U] QBerf2h] [ 543.296518][T12960] [U] rPt5i}HmԺ9(e\O7MV*n bB+w [ 543.575913][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.617882][T12971] FAULT_INJECTION: forcing a failure. [ 543.617882][T12971] name failslab, interval 1, probability 0, space 0, times 0 [ 543.703573][T12971] CPU: 1 UID: 0 PID: 12971 Comm: syz.0.1393 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 543.703605][T12971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.703618][T12971] Call Trace: [ 543.703625][T12971] [ 543.703633][T12971] dump_stack_lvl+0x16c/0x1f0 [ 543.703670][T12971] should_fail_ex+0x512/0x640 [ 543.703702][T12971] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 543.703739][T12971] should_failslab+0xc2/0x120 [ 543.703760][T12971] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 543.703793][T12971] ? __d_alloc+0x31/0xaa0 [ 543.703831][T12971] __d_alloc+0x31/0xaa0 [ 543.703862][T12971] ? __d_lookup+0x266/0x4a0 [ 543.703888][T12971] d_alloc+0x4a/0x1e0 [ 543.703942][T12971] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 543.703969][T12971] ? lookup_dcache+0x66/0x170 [ 543.703996][T12971] lookup_one_qstr_excl+0x3e/0x120 [ 543.704045][T12971] filename_create+0x1e7/0x4a0 [ 543.704077][T12971] ? __pfx_filename_create+0x10/0x10 [ 543.704107][T12971] ? find_held_lock+0x2b/0x80 [ 543.704130][T12971] ? __might_fault+0xe3/0x190 [ 543.704163][T12971] ? __might_fault+0xe3/0x190 [ 543.704205][T12971] do_symlinkat+0xbe/0x310 [ 543.704241][T12971] ? __pfx_do_symlinkat+0x10/0x10 [ 543.704278][T12971] ? getname_flags.part.0+0x1c5/0x550 [ 543.704310][T12971] __x64_sys_symlink+0x75/0x90 [ 543.704346][T12971] do_syscall_64+0xcd/0x490 [ 543.704383][T12971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.704406][T12971] RIP: 0033:0x7f83f098e929 [ 543.704424][T12971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.704446][T12971] RSP: 002b:00007f83f1740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 543.704467][T12971] RAX: ffffffffffffffda RBX: 00007f83f0bb5fa0 RCX: 00007f83f098e929 [ 543.704482][T12971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 543.704496][T12971] RBP: 00007f83f0a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 543.704509][T12971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.704522][T12971] R13: 0000000000000000 R14: 00007f83f0bb5fa0 R15: 00007ffc0e743f98 [ 543.704551][T12971] [ 543.929430][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.174503][T12974] FAULT_INJECTION: forcing a failure. [ 544.174503][T12974] name failslab, interval 1, probability 0, space 0, times 0 [ 544.193785][T12974] CPU: 1 UID: 0 PID: 12974 Comm: syz.4.1395 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 544.193818][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.193831][T12974] Call Trace: [ 544.193837][T12974] [ 544.193846][T12974] dump_stack_lvl+0x16c/0x1f0 [ 544.193883][T12974] should_fail_ex+0x512/0x640 [ 544.193937][T12974] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 544.193975][T12974] should_failslab+0xc2/0x120 [ 544.194004][T12974] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 544.194038][T12974] ? do_raw_spin_unlock+0x172/0x230 [ 544.194059][T12974] ? copy_process+0x2475/0x7650 [ 544.194090][T12974] ? copy_fs_struct+0x2a0/0x340 [ 544.194116][T12974] copy_process+0x2475/0x7650 [ 544.194146][T12974] ? __pfx___futex_wait+0x10/0x10 [ 544.194190][T12974] ? __pfx_copy_process+0x10/0x10 [ 544.194219][T12974] ? __pfx_map_create+0x10/0x10 [ 544.194252][T12974] ? __might_fault+0xe3/0x190 [ 544.194289][T12974] ? __futex_hash.constprop.0+0x1e9/0x440 [ 544.194320][T12974] kernel_clone+0xfc/0x960 [ 544.194352][T12974] ? __pfx_kernel_clone+0x10/0x10 [ 544.194397][T12974] __do_sys_clone+0xce/0x120 [ 544.194426][T12974] ? __pfx___do_sys_clone+0x10/0x10 [ 544.194469][T12974] ? xfd_validate_state+0x61/0x180 [ 544.194500][T12974] ? __pfx_do_writev+0x10/0x10 [ 544.194539][T12974] do_syscall_64+0xcd/0x490 [ 544.194575][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.194598][T12974] RIP: 0033:0x7f6eaa98e929 [ 544.194616][T12974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.194638][T12974] RSP: 002b:00007f6ea87f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 544.194660][T12974] RAX: ffffffffffffffda RBX: 00007f6eaabb5fa0 RCX: 00007f6eaa98e929 [ 544.194675][T12974] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 544.194688][T12974] RBP: 00007f6eaaa10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 544.194702][T12974] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 544.194716][T12974] R13: 0000000000000000 R14: 00007f6eaabb5fa0 R15: 00007ffc403c07c8 [ 544.194744][T12974] [ 544.416186][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.723793][T12960] [U] 7ϋ Bj$U-X&/?2`%w?ϺŰh\w [ 544.731825][T12960] [U] R!Cu+򳃇.S96b>Ö{ [ 544.781207][T12960] [U] oP=jW5^%W\c _H@~Ί|lO[%ao [ 544.802128][T12960] [U] kUdR_?.Y"?oQqD;`N0QB۲* `@;^'g}5r>LJ+@<ÿcAU`A}}Hi%?`zga/:}?4>A.U>ʭX qn\2q2}ƼcJFQ9mFdÕŲG8y̵eFfq4\Z5<.+7&W^axԅRmw\2LvJe.6 [ 545.167223][T12960] [U] =\2n|OFϊ`zi(k5eĢHW7g"/Mu)*/˓%jRUTmIJ7M5JH [ 545.203791][T12960] [U] QU~A%z [ 545.212211][T12960] [U] o{\UcK!>o{n(x/ [ 545.225263][T12960] [U] PDٛ9&a4 ầ*0.`R~m~(C+y7&O/-RR2 [ 545.261020][T12960] [U] oj3KQu)n·Eb=]$B$6;e [ 545.289206][T12960] [U] P/΂?R~T"Ds6f"~a$wBN< 8|{\yg.LĘ«sX [ 545.327168][T12960] [U] vVt۳z?|M2 [ 545.359262][T12960] [U] Z{:n#c98Jk}G=\fd]*Iїj0[?b2BiET=6` BJcF0#6 rWE([LFᦺ qdI{ qbM{dx*3:ЛU4=`K0I [ 545.473058][T12981] tipc: Started in network mode [ 545.479320][T12981] tipc: Node identity ee00, cluster identity 4711 [ 545.493820][T12981] tipc: Node number set to 60928 [ 545.866865][T12991] FAULT_INJECTION: forcing a failure. [ 545.866865][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 545.929932][T12991] CPU: 1 UID: 0 PID: 12991 Comm: syz.3.1399 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 545.929966][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.929980][T12991] Call Trace: [ 545.929987][T12991] [ 545.929996][T12991] dump_stack_lvl+0x16c/0x1f0 [ 545.930036][T12991] should_fail_ex+0x512/0x640 [ 545.930070][T12991] ? __kmalloc_noprof+0xbf/0x510 [ 545.930118][T12991] ? __register_sysctl_table+0xb3/0x1900 [ 545.930152][T12991] should_failslab+0xc2/0x120 [ 545.930172][T12991] __kmalloc_noprof+0xd2/0x510 [ 545.930210][T12991] __register_sysctl_table+0xb3/0x1900 [ 545.930245][T12991] ? is_module_address+0x5f/0xf0 [ 545.930281][T12991] ? __pfx___register_sysctl_table+0x10/0x10 [ 545.930315][T12991] ? is_module_address+0x69/0xf0 [ 545.930345][T12991] ? register_net_sysctl_sz+0x228/0x3e0 [ 545.930373][T12991] neigh_sysctl_register+0x31f/0x670 [ 545.930404][T12991] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 545.930429][T12991] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 545.930461][T12991] ? inetdev_init+0x245/0x5a0 [ 545.930484][T12991] ? inetdev_event+0xc5f/0x18a0 [ 545.930506][T12991] ? notifier_call_chain+0xbc/0x410 [ 545.930535][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.930587][T12991] devinet_sysctl_register+0xb6/0x200 [ 545.930617][T12991] inetdev_init+0x2b8/0x5a0 [ 545.930644][T12991] inetdev_event+0xc5f/0x18a0 [ 545.930672][T12991] ? ib_netdevice_event+0xfc/0x330 [ 545.930698][T12991] ? __pfx_inetdev_event+0x10/0x10 [ 545.930726][T12991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.930766][T12991] notifier_call_chain+0xbc/0x410 [ 545.930792][T12991] ? __pfx_inetdev_event+0x10/0x10 [ 545.930825][T12991] call_netdevice_notifiers_info+0xbe/0x140 [ 545.930859][T12991] register_netdevice+0x182e/0x2270 [ 545.930884][T12991] ? idr_alloc+0xdd/0x130 [ 545.930913][T12991] ? __pfx_register_netdevice+0x10/0x10 [ 545.930944][T12991] ppp_dev_configure+0x99b/0xc80 [ 545.930978][T12991] ppp_ioctl+0x17e0/0x2660 [ 545.931007][T12991] ? find_held_lock+0x2b/0x80 [ 545.931030][T12991] ? __pfx_ppp_ioctl+0x10/0x10 [ 545.931063][T12991] ? __fget_files+0x20e/0x3c0 [ 545.931099][T12991] ? __pfx_ppp_ioctl+0x10/0x10 [ 545.931127][T12991] __x64_sys_ioctl+0x18b/0x210 [ 545.931157][T12991] do_syscall_64+0xcd/0x490 [ 545.931204][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.931225][T12991] RIP: 0033:0x7f2bf638e929 [ 545.931242][T12991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.931262][T12991] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.931283][T12991] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 545.931297][T12991] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 545.931310][T12991] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 545.931323][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.931335][T12991] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 545.931362][T12991] [ 546.791023][T12998] FAULT_INJECTION: forcing a failure. [ 546.791023][T12998] name failslab, interval 1, probability 0, space 0, times 0 [ 546.894207][T12998] CPU: 1 UID: 0 PID: 12998 Comm: syz.4.1400 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 546.894243][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.894257][T12998] Call Trace: [ 546.894265][T12998] [ 546.894274][T12998] dump_stack_lvl+0x16c/0x1f0 [ 546.894315][T12998] should_fail_ex+0x512/0x640 [ 546.894351][T12998] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 546.894391][T12998] should_failslab+0xc2/0x120 [ 546.894415][T12998] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 546.894449][T12998] ? __proc_create+0xc3/0x8c0 [ 546.894487][T12998] ? __proc_create+0x2ce/0x8c0 [ 546.894528][T12998] __proc_create+0x2ce/0x8c0 [ 546.894567][T12998] ? __pfx___proc_create+0x10/0x10 [ 546.894609][T12998] ? _raw_write_unlock+0x28/0x50 [ 546.894642][T12998] ? proc_register+0x314/0x5f0 [ 546.894666][T12998] proc_create_reg+0x7d/0x180 [ 546.894691][T12998] proc_create_seq_private+0x8e/0x1d0 [ 546.894716][T12998] ? __pfx_proc_create_seq_private+0x10/0x10 [ 546.894757][T12998] xt_proto_init+0x5b8/0xc10 [ 546.894790][T12998] ? __pfx_xt_proto_init+0x10/0x10 [ 546.894819][T12998] ? kasan_save_track+0x14/0x30 [ 546.894854][T12998] ? __kasan_kmalloc+0xaa/0xb0 [ 546.894892][T12998] ? __pfx_ip_tables_net_init+0x10/0x10 [ 546.894935][T12998] ops_init+0x1e2/0x5f0 [ 546.894975][T12998] setup_net+0x1ff/0x510 [ 546.895010][T12998] ? lockdep_init_map_type+0x5c/0x280 [ 546.895044][T12998] ? __pfx_setup_net+0x10/0x10 [ 546.895084][T12998] ? debug_mutex_init+0x37/0x70 [ 546.895110][T12998] copy_net_ns+0x2a6/0x5f0 [ 546.895136][T12998] create_new_namespaces+0x3ea/0xa90 [ 546.895169][T12998] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 546.895199][T12998] ksys_unshare+0x45b/0xa40 [ 546.895232][T12998] ? __pfx_ksys_unshare+0x10/0x10 [ 546.895265][T12998] ? xfd_validate_state+0x61/0x180 [ 546.895306][T12998] __x64_sys_unshare+0x31/0x40 [ 546.895337][T12998] do_syscall_64+0xcd/0x490 [ 546.895375][T12998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.895399][T12998] RIP: 0033:0x7f6eaa98e929 [ 546.895417][T12998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.895439][T12998] RSP: 002b:00007f6ea87d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 546.895461][T12998] RAX: ffffffffffffffda RBX: 00007f6eaabb6080 RCX: 00007f6eaa98e929 [ 546.895476][T12998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 546.895489][T12998] RBP: 00007f6eaaa10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 546.895504][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.895517][T12998] R13: 0000000000000000 R14: 00007f6eaabb6080 R15: 00007ffc403c07c8 [ 546.895546][T12998] [ 548.114726][T13012] [U] F [ 548.146051][T13012] FAULT_INJECTION: forcing a failure. [ 548.146051][T13012] name failslab, interval 1, probability 0, space 0, times 0 [ 548.251185][T13012] CPU: 1 UID: 0 PID: 13012 Comm: syz.4.1403 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 548.251222][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.251237][T13012] Call Trace: [ 548.251246][T13012] [ 548.251255][T13012] dump_stack_lvl+0x16c/0x1f0 [ 548.251296][T13012] should_fail_ex+0x512/0x640 [ 548.251331][T13012] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 548.251370][T13012] should_failslab+0xc2/0x120 [ 548.251394][T13012] __kmalloc_cache_node_noprof+0x6d/0x420 [ 548.251428][T13012] ? alloc_shrinker_info+0xea/0x470 [ 548.251466][T13012] ? alloc_shrinker_info+0x18c/0x470 [ 548.251513][T13012] alloc_shrinker_info+0x18c/0x470 [ 548.251559][T13012] mem_cgroup_css_online+0x217/0x640 [ 548.251606][T13012] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 548.251638][T13012] online_css+0xaf/0x350 [ 548.251670][T13012] cgroup_apply_control_enable+0x702/0xbb0 [ 548.251719][T13012] cgroup_mkdir+0x5e7/0x11f0 [ 548.251761][T13012] ? __pfx_cgroup_mkdir+0x10/0x10 [ 548.251800][T13012] kernfs_iop_mkdir+0x111/0x190 [ 548.251836][T13012] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 548.251860][T13012] vfs_mkdir+0x590/0x8c0 [ 548.251892][T13012] do_mkdirat+0x304/0x3e0 [ 548.251930][T13012] ? __pfx_do_mkdirat+0x10/0x10 [ 548.251968][T13012] ? getname_flags.part.0+0x1c5/0x550 [ 548.251998][T13012] __x64_sys_mkdir+0xef/0x140 [ 548.252035][T13012] do_syscall_64+0xcd/0x490 [ 548.252073][T13012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.252097][T13012] RIP: 0033:0x7f6eaa98e929 [ 548.252116][T13012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.252139][T13012] RSP: 002b:00007f6ea87d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 548.252161][T13012] RAX: ffffffffffffffda RBX: 00007f6eaabb6080 RCX: 00007f6eaa98e929 [ 548.252176][T13012] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 548.252191][T13012] RBP: 00007f6eaaa10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 548.252205][T13012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.252219][T13012] R13: 0000000000000000 R14: 00007f6eaabb6080 R15: 00007ffc403c07c8 [ 548.252249][T13012] [ 548.716134][T13017] FAULT_INJECTION: forcing a failure. [ 548.716134][T13017] name failslab, interval 1, probability 0, space 0, times 0 [ 548.758425][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz.4.1405 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 548.758456][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.758469][T13017] Call Trace: [ 548.758476][T13017] [ 548.758484][T13017] dump_stack_lvl+0x16c/0x1f0 [ 548.758522][T13017] should_fail_ex+0x512/0x640 [ 548.758553][T13017] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 548.758596][T13017] should_failslab+0xc2/0x120 [ 548.758617][T13017] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 548.758651][T13017] ? __d_alloc+0x31/0xaa0 [ 548.758688][T13017] __d_alloc+0x31/0xaa0 [ 548.758720][T13017] ? __d_lookup+0x266/0x4a0 [ 548.758745][T13017] d_alloc+0x4a/0x1e0 [ 548.758780][T13017] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 548.758804][T13017] ? lookup_dcache+0x66/0x170 [ 548.758829][T13017] lookup_one_qstr_excl+0x3e/0x120 [ 548.758854][T13017] filename_create+0x1e7/0x4a0 [ 548.758884][T13017] ? __pfx_filename_create+0x10/0x10 [ 548.758911][T13017] ? find_held_lock+0x2b/0x80 [ 548.758933][T13017] ? __might_fault+0xe3/0x190 [ 548.758964][T13017] ? __might_fault+0xe3/0x190 [ 548.759020][T13017] do_symlinkat+0xbe/0x310 [ 548.759058][T13017] ? __pfx_do_symlinkat+0x10/0x10 [ 548.759095][T13017] ? getname_flags.part.0+0x1c5/0x550 [ 548.759128][T13017] __x64_sys_symlink+0x75/0x90 [ 548.759166][T13017] do_syscall_64+0xcd/0x490 [ 548.759204][T13017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.759228][T13017] RIP: 0033:0x7f6eaa98e929 [ 548.759246][T13017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.759269][T13017] RSP: 002b:00007f6ea87f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 548.759291][T13017] RAX: ffffffffffffffda RBX: 00007f6eaabb5fa0 RCX: 00007f6eaa98e929 [ 548.759306][T13017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 548.759320][T13017] RBP: 00007f6eaaa10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 548.759334][T13017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.759348][T13017] R13: 0000000000000000 R14: 00007f6eaabb5fa0 R15: 00007ffc403c07c8 [ 548.759377][T13017] [ 553.169265][T13040] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 555.851008][T13085] FAULT_INJECTION: forcing a failure. [ 555.851008][T13085] name failslab, interval 1, probability 0, space 0, times 0 [ 555.915966][T13085] CPU: 1 UID: 0 PID: 13085 Comm: syz.3.1418 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 555.915999][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.916012][T13085] Call Trace: [ 555.916020][T13085] [ 555.916028][T13085] dump_stack_lvl+0x16c/0x1f0 [ 555.916067][T13085] should_fail_ex+0x512/0x640 [ 555.916101][T13085] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 555.916140][T13085] should_failslab+0xc2/0x120 [ 555.916162][T13085] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 555.916201][T13085] ? __proc_create+0xc3/0x8c0 [ 555.916238][T13085] ? __proc_create+0x2ce/0x8c0 [ 555.916278][T13085] __proc_create+0x2ce/0x8c0 [ 555.916316][T13085] ? __pfx___proc_create+0x10/0x10 [ 555.916353][T13085] ? __lock_acquire+0x622/0x1c90 [ 555.916393][T13085] proc_create_reg+0x7d/0x180 [ 555.916417][T13085] proc_create_net_data+0x8e/0x1b0 [ 555.916440][T13085] ? __pfx_proc_create_net_data+0x10/0x10 [ 555.916464][T13085] ? lockdep_init_map_type+0x5c/0x280 [ 555.916501][T13085] nfnl_log_net_init+0xe1/0x1c0 [ 555.916538][T13085] ? __pfx_nfnl_log_net_init+0x10/0x10 [ 555.916573][T13085] ops_init+0x1e2/0x5f0 [ 555.916612][T13085] setup_net+0x1ff/0x510 [ 555.916646][T13085] ? lockdep_init_map_type+0x5c/0x280 [ 555.916679][T13085] ? __pfx_setup_net+0x10/0x10 [ 555.916717][T13085] ? debug_mutex_init+0x37/0x70 [ 555.916743][T13085] copy_net_ns+0x2a6/0x5f0 [ 555.916769][T13085] create_new_namespaces+0x3ea/0xa90 [ 555.916802][T13085] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 555.916831][T13085] ksys_unshare+0x45b/0xa40 [ 555.916870][T13085] ? __pfx_ksys_unshare+0x10/0x10 [ 555.916903][T13085] ? xfd_validate_state+0x61/0x180 [ 555.916943][T13085] __x64_sys_unshare+0x31/0x40 [ 555.916975][T13085] do_syscall_64+0xcd/0x490 [ 555.917015][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.917038][T13085] RIP: 0033:0x7f2bf638e929 [ 555.917056][T13085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.917078][T13085] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.917100][T13085] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 555.917115][T13085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 555.917128][T13085] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 555.917142][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.917156][T13085] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 555.917184][T13085] [ 556.767497][T12274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 556.816307][T12274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 556.844117][T12274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 556.916418][T12274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 556.949289][T12274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.997962][T13087] chnl_net:caif_netlink_parms(): no params data found [ 558.496031][T13087] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.527305][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.558849][T13087] bridge_slave_0: entered allmulticast mode [ 558.602220][T13087] bridge_slave_0: entered promiscuous mode [ 558.635453][T13087] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.683584][T13087] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.690872][T13087] bridge_slave_1: entered allmulticast mode [ 558.754097][T13087] bridge_slave_1: entered promiscuous mode [ 558.987769][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.027767][T12274] Bluetooth: hci5: command tx timeout [ 559.037774][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.262491][T13087] team0: Port device team_slave_0 added [ 559.315752][T13087] team0: Port device team_slave_1 added [ 559.528211][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.544523][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.689756][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.756439][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.778732][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.233527][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.255318][T13115] ALSA: mixer_oss: invalid OSS volume '0' [ 560.338255][T13115] ALSA: mixer_oss: invalid OSS volume '' [ 560.479086][T13087] hsr_slave_0: entered promiscuous mode [ 560.505887][T13087] hsr_slave_1: entered promiscuous mode [ 560.544709][T13087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.552312][T13087] Cannot create hsr debugfs directory [ 561.103599][T12274] Bluetooth: hci5: command tx timeout [ 561.367669][T13087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.417558][T13087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.447941][T13087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.473123][T13087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.633735][T13087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.879769][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.922239][T12265] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.929449][T12265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.005679][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.012921][T12265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.183691][T12274] Bluetooth: hci5: command tx timeout [ 563.208957][T13087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.972942][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.096373][T13157] FAULT_INJECTION: forcing a failure. [ 564.096373][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 564.219284][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.0.1428 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 564.219319][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.219334][T13157] Call Trace: [ 564.219341][T13157] [ 564.219350][T13157] dump_stack_lvl+0x16c/0x1f0 [ 564.219391][T13157] should_fail_ex+0x512/0x640 [ 564.219426][T13157] ? fs_reclaim_acquire+0xae/0x150 [ 564.219457][T13157] should_failslab+0xc2/0x120 [ 564.219479][T13157] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 564.219516][T13157] ? security_inode_alloc+0x3b/0x2b0 [ 564.219546][T13157] security_inode_alloc+0x3b/0x2b0 [ 564.219572][T13157] inode_init_always_gfp+0xce4/0x1030 [ 564.219611][T13157] alloc_inode+0x86/0x240 [ 564.219635][T13157] new_inode+0x22/0x1c0 [ 564.219661][T13157] __debugfs_create_file+0x11c/0x6b0 [ 564.219696][T13157] debugfs_create_file_full+0x41/0x60 [ 564.219731][T13157] kvm_dev_ioctl+0x14ff/0x1ad0 [ 564.219763][T13157] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 564.219795][T13157] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 564.219819][T13157] __x64_sys_ioctl+0x18b/0x210 [ 564.219849][T13157] do_syscall_64+0xcd/0x490 [ 564.219887][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.219910][T13157] RIP: 0033:0x7f83f098e929 [ 564.219928][T13157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.219950][T13157] RSP: 002b:00007f83f1740038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.219972][T13157] RAX: ffffffffffffffda RBX: 00007f83f0bb5fa0 RCX: 00007f83f098e929 [ 564.219987][T13157] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 564.220001][T13157] RBP: 00007f83f0a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 564.220014][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.220028][T13157] R13: 0000000000000000 R14: 00007f83f0bb5fa0 R15: 00007ffc0e743f98 [ 564.220057][T13157] [ 564.220095][T13157] debugfs: out of free dentries, can not create file 'pages_4k' [ 565.087194][T13087] veth0_vlan: entered promiscuous mode [ 565.135287][T13087] veth1_vlan: entered promiscuous mode [ 565.237365][T13087] veth0_macvtap: entered promiscuous mode [ 565.263665][T12274] Bluetooth: hci5: command tx timeout [ 565.316616][T13087] veth1_macvtap: entered promiscuous mode [ 565.377025][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.439910][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.534257][T13087] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.554783][T13087] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.577453][T13087] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.597841][T13087] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.830518][T13161] kexec: Could not allocate control_code_buffer [ 565.876922][T12273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.910768][T12273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.035149][T12265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.053658][T12265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.754968][T13182] zswap: compressor not available [ 567.660751][T13200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 568.087228][T13201] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 568.823687][T13177] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 570.154956][T12269] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1392 with max blocks 2 with error 117 [ 570.212910][T12269] EXT4-fs (sda1): This should not happen!! Data will be lost [ 570.212910][T12269] [ 570.935655][T13235] FAULT_INJECTION: forcing a failure. [ 570.935655][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 571.113919][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.3.1439 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 571.113952][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.113966][T13235] Call Trace: [ 571.113973][T13235] [ 571.113982][T13235] dump_stack_lvl+0x16c/0x1f0 [ 571.114020][T13235] should_fail_ex+0x512/0x640 [ 571.114053][T13235] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 571.114091][T13235] should_failslab+0xc2/0x120 [ 571.114112][T13235] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 571.114146][T13235] ? mem_cgroup_css_alloc+0x5c/0x1e80 [ 571.114178][T13235] mem_cgroup_css_alloc+0x5c/0x1e80 [ 571.114214][T13235] cgroup_apply_control_enable+0x4b0/0xbb0 [ 571.114258][T13235] cgroup_mkdir+0x5e7/0x11f0 [ 571.114296][T13235] ? __pfx_cgroup_mkdir+0x10/0x10 [ 571.114331][T13235] kernfs_iop_mkdir+0x111/0x190 [ 571.114364][T13235] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 571.114385][T13235] vfs_mkdir+0x590/0x8c0 [ 571.114415][T13235] do_mkdirat+0x304/0x3e0 [ 571.114449][T13235] ? __pfx_do_mkdirat+0x10/0x10 [ 571.114483][T13235] ? getname_flags.part.0+0x1c5/0x550 [ 571.114511][T13235] __x64_sys_mkdir+0xef/0x140 [ 571.114544][T13235] do_syscall_64+0xcd/0x490 [ 571.114579][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.114601][T13235] RIP: 0033:0x7f2bf638e929 [ 571.114618][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.114639][T13235] RSP: 002b:00007f2bf71d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 571.114659][T13235] RAX: ffffffffffffffda RBX: 00007f2bf65b6080 RCX: 00007f2bf638e929 [ 571.114680][T13235] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 571.114693][T13235] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 571.114706][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.114719][T13235] R13: 0000000000000000 R14: 00007f2bf65b6080 R15: 00007ffe0c00ea38 [ 571.114746][T13235] [ 571.768626][T12831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.828420][T12831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 571.875094][T12831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 571.963474][T12831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 571.977504][T12831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.889328][T13237] chnl_net:caif_netlink_parms(): no params data found [ 573.350270][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.358809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.799626][T13237] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.852666][T13237] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.874183][T13237] bridge_slave_0: entered allmulticast mode [ 573.904217][T13237] bridge_slave_0: entered promiscuous mode [ 573.949169][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.968093][T13237] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.991667][T13237] bridge_slave_1: entered allmulticast mode [ 574.018633][T13237] bridge_slave_1: entered promiscuous mode [ 574.063984][T12831] Bluetooth: hci6: command tx timeout [ 574.321921][T13237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.382165][T13237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.554835][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1444'. [ 574.619901][T13237] team0: Port device team_slave_0 added [ 574.668389][T13237] team0: Port device team_slave_1 added [ 574.762993][T13276] binder: 13273:13276 ioctl c018620c 0 returned -1 [ 574.893671][T13237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.918897][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.015886][T13237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.180607][T13237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.207497][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.300781][T13237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.472507][T13237] hsr_slave_0: entered promiscuous mode [ 575.515137][T13237] hsr_slave_1: entered promiscuous mode [ 575.521358][T13237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.583879][T13237] Cannot create hsr debugfs directory [ 576.143771][T12831] Bluetooth: hci6: command tx timeout [ 576.542157][T13237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 576.597153][T13237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 576.651877][T13237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 576.665879][T13286] vhci_hcd: invalid port number 16 [ 576.683002][T13286] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 576.695330][T13237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.231858][T13237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.314315][T13237] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.354932][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.362131][T12269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.423041][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.430226][T12269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.224653][T12831] Bluetooth: hci6: command tx timeout [ 578.260072][T13237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.216376][T13237] veth0_vlan: entered promiscuous mode [ 579.318515][T13237] veth1_vlan: entered promiscuous mode [ 579.432584][T13237] veth0_macvtap: entered promiscuous mode [ 579.487469][T13237] veth1_macvtap: entered promiscuous mode [ 579.666402][T13237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.703299][T13237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.751754][T13237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.786975][T13237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.827182][T13237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.848113][T13237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.097843][T12449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.169016][T12449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.259026][T12276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.289125][T12276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.304394][T12831] Bluetooth: hci6: command tx timeout [ 580.682139][T13347] FAULT_INJECTION: forcing a failure. [ 580.682139][T13347] name failslab, interval 1, probability 0, space 0, times 0 [ 580.734442][T13347] CPU: 1 UID: 0 PID: 13347 Comm: syz.6.1438 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 580.734477][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.734491][T13347] Call Trace: [ 580.734498][T13347] [ 580.734507][T13347] dump_stack_lvl+0x16c/0x1f0 [ 580.734546][T13347] should_fail_ex+0x512/0x640 [ 580.734580][T13347] ? fs_reclaim_acquire+0xae/0x150 [ 580.734610][T13347] should_failslab+0xc2/0x120 [ 580.734632][T13347] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 580.734668][T13347] ? security_inode_alloc+0x3b/0x2b0 [ 580.734698][T13347] security_inode_alloc+0x3b/0x2b0 [ 580.734724][T13347] inode_init_always_gfp+0xce4/0x1030 [ 580.734762][T13347] alloc_inode+0x86/0x240 [ 580.734786][T13347] new_inode+0x22/0x1c0 [ 580.734820][T13347] __debugfs_create_file+0x11c/0x6b0 [ 580.734856][T13347] debugfs_create_file_full+0x41/0x60 [ 580.734890][T13347] kvm_dev_ioctl+0x14ff/0x1ad0 [ 580.734922][T13347] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 580.734954][T13347] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 580.734977][T13347] __x64_sys_ioctl+0x18b/0x210 [ 580.735007][T13347] do_syscall_64+0xcd/0x490 [ 580.735044][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.735067][T13347] RIP: 0033:0x7f7a24f8e929 [ 580.735084][T13347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.735106][T13347] RSP: 002b:00007f7a25ecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.735128][T13347] RAX: ffffffffffffffda RBX: 00007f7a251b5fa0 RCX: 00007f7a24f8e929 [ 580.735143][T13347] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 580.735160][T13347] RBP: 00007f7a25010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 580.735174][T13347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.735187][T13347] R13: 0000000000000000 R14: 00007f7a251b5fa0 R15: 00007ffe0a840b38 [ 580.735215][T13347] [ 580.738243][T13347] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 582.713204][T13364] FAULT_INJECTION: forcing a failure. [ 582.713204][T13364] name failslab, interval 1, probability 0, space 0, times 0 [ 582.797318][T13364] CPU: 1 UID: 0 PID: 13364 Comm: syz.3.1455 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 582.797365][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.797379][T13364] Call Trace: [ 582.797387][T13364] [ 582.797396][T13364] dump_stack_lvl+0x16c/0x1f0 [ 582.797436][T13364] should_fail_ex+0x512/0x640 [ 582.797470][T13364] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 582.797508][T13364] should_failslab+0xc2/0x120 [ 582.797530][T13364] __kmalloc_cache_node_noprof+0x6d/0x420 [ 582.797565][T13364] ? alloc_shrinker_info+0x18c/0x470 [ 582.797601][T13364] ? kasan_save_track+0x14/0x30 [ 582.797638][T13364] alloc_shrinker_info+0x18c/0x470 [ 582.797683][T13364] mem_cgroup_css_online+0x217/0x640 [ 582.797713][T13364] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 582.797744][T13364] online_css+0xaf/0x350 [ 582.797775][T13364] cgroup_apply_control_enable+0x702/0xbb0 [ 582.797821][T13364] cgroup_mkdir+0x5e7/0x11f0 [ 582.797862][T13364] ? __pfx_cgroup_mkdir+0x10/0x10 [ 582.797918][T13364] kernfs_iop_mkdir+0x111/0x190 [ 582.797955][T13364] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 582.797980][T13364] vfs_mkdir+0x590/0x8c0 [ 582.798013][T13364] do_mkdirat+0x304/0x3e0 [ 582.798051][T13364] ? __pfx_do_mkdirat+0x10/0x10 [ 582.798090][T13364] ? getname_flags.part.0+0x1c5/0x550 [ 582.798121][T13364] __x64_sys_mkdir+0xef/0x140 [ 582.798158][T13364] do_syscall_64+0xcd/0x490 [ 582.798197][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.798221][T13364] RIP: 0033:0x7f2bf638e929 [ 582.798239][T13364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.798263][T13364] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 582.798285][T13364] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 582.798301][T13364] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 582.798316][T13364] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 582.798330][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.798356][T13364] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 582.798386][T13364] [ 584.798609][T13384] FAULT_INJECTION: forcing a failure. [ 584.798609][T13384] name failslab, interval 1, probability 0, space 0, times 0 [ 584.798644][T13384] CPU: 1 UID: 0 PID: 13384 Comm: syz.6.1459 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 584.798673][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 584.798687][T13384] Call Trace: [ 584.798694][T13384] [ 584.798703][T13384] dump_stack_lvl+0x16c/0x1f0 [ 584.798753][T13384] should_fail_ex+0x512/0x640 [ 584.798803][T13384] ? __kmalloc_noprof+0xbf/0x510 [ 584.798839][T13384] ? copy_splice_read+0x1a8/0xba0 [ 584.798866][T13384] should_failslab+0xc2/0x120 [ 584.798888][T13384] __kmalloc_noprof+0xd2/0x510 [ 584.798929][T13384] copy_splice_read+0x1a8/0xba0 [ 584.798957][T13384] ? __pfx_pipe_to_null+0x10/0x10 [ 584.798983][T13384] ? __pfx_copy_splice_read+0x10/0x10 [ 584.799022][T13384] ? pipe_unlock+0x4a/0x70 [ 584.799054][T13384] ? __pfx_splice_from_pipe+0x10/0x10 [ 584.799090][T13384] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 584.799130][T13384] ? __pfx_copy_splice_read+0x10/0x10 [ 584.799156][T13384] do_splice_read+0x285/0x370 [ 584.799186][T13384] splice_direct_to_actor+0x2a1/0xa30 [ 584.799216][T13384] ? __pfx_direct_splice_actor+0x10/0x10 [ 584.799250][T13384] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 584.799286][T13384] do_splice_direct+0x174/0x240 [ 584.799314][T13384] ? __pfx_do_splice_direct+0x10/0x10 [ 584.799342][T13384] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 584.799371][T13384] ? bpf_lsm_file_permission+0x9/0x10 [ 584.799394][T13384] ? security_file_permission+0x71/0x210 [ 584.799423][T13384] ? rw_verify_area+0xcf/0x680 [ 584.799452][T13384] do_sendfile+0xb06/0xe50 [ 584.799486][T13384] ? __pfx_do_sendfile+0x10/0x10 [ 584.799519][T13384] ? __x64_sys_futex+0x1e0/0x4c0 [ 584.799544][T13384] ? __x64_sys_futex+0x1e9/0x4c0 [ 584.799573][T13384] __x64_sys_sendfile64+0x1d8/0x220 [ 584.799594][T13384] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 584.799622][T13384] do_syscall_64+0xcd/0x490 [ 584.799657][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.799678][T13384] RIP: 0033:0x7f7a24f8e929 [ 584.799694][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.799715][T13384] RSP: 002b:00007f7a25eae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 584.799735][T13384] RAX: ffffffffffffffda RBX: 00007f7a251b6080 RCX: 00007f7a24f8e929 [ 584.799767][T13384] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 584.799780][T13384] RBP: 00007f7a25010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 584.799793][T13384] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 584.799807][T13384] R13: 0000000000000000 R14: 00007f7a251b6080 R15: 00007ffe0a840b38 [ 584.799835][T13384] [ 586.904722][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 589.201099][T13437] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 591.365813][T13442] random: crng reseeded on system resumption [ 591.448074][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1472'. [ 591.650420][T12274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 591.660105][T12274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 591.668948][T12274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 591.678736][T12274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 591.695674][T12274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 591.826788][T13445] hub 8-0:1.0: USB hub found [ 591.883840][T13445] hub 8-0:1.0: 1 port detected [ 592.116910][T13438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.187356][T13438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.494489][T13447] chnl_net:caif_netlink_parms(): no params data found [ 592.787188][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.811702][T13447] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.843203][T13447] bridge_slave_0: entered allmulticast mode [ 592.867863][T13447] bridge_slave_0: entered promiscuous mode [ 592.883614][T13463] Invalid ELF header magic: != ELF [ 592.892381][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.915701][T13447] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.949576][T13447] bridge_slave_1: entered allmulticast mode [ 592.976414][T13447] bridge_slave_1: entered promiscuous mode [ 593.138542][T13447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.189760][T13447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.359272][T13447] team0: Port device team_slave_0 added [ 593.396810][T13447] team0: Port device team_slave_1 added [ 593.457235][T13447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.477092][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.534050][T13447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.565370][T13447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.572372][T13447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.643611][T13447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.746279][T12274] Bluetooth: hci7: command tx timeout [ 593.765162][T13447] hsr_slave_0: entered promiscuous mode [ 593.781345][T13447] hsr_slave_1: entered promiscuous mode [ 593.794153][T13447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.811939][T13447] Cannot create hsr debugfs directory [ 594.318414][T13447] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 594.357125][T13474] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 594.379894][T13447] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 594.431072][T13447] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 594.474267][T13447] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 594.887253][T13447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.980920][T13447] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.052158][T12265] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.059395][T12265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.167517][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.174716][T12265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.824130][T12274] Bluetooth: hci7: command tx timeout [ 595.978377][T13447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.851459][T13447] veth0_vlan: entered promiscuous mode [ 596.892242][T13447] veth1_vlan: entered promiscuous mode [ 596.991597][T13447] veth0_macvtap: entered promiscuous mode [ 597.066182][T13447] veth1_macvtap: entered promiscuous mode [ 597.131433][T13447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.177911][T13447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.217828][T13447] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.259310][T13447] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.286302][T13447] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.323511][T13447] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.561355][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 597.596309][T12265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.619000][T12265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.644296][T13516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.651774][T13516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.696165][T13516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.715561][T13516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.839680][T12449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.854401][T12449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.904468][T12274] Bluetooth: hci7: command tx timeout [ 598.378361][T13525] Invalid ELF header magic: != ELF [ 599.353331][T13533] netlink: 'syz.6.1485': attribute type 4 has an invalid length. [ 599.385149][T13533] netlink: 'syz.6.1485': attribute type 5 has an invalid length. [ 599.392916][T13533] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1485'. [ 599.984528][T12274] Bluetooth: hci7: command tx timeout [ 600.021342][T13527] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 600.021342][T13527] The task syz.3.1484 (13527) triggered the difference, watch for misbehavior. [ 600.699781][T12831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 600.712804][T12831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 600.720865][T12831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 600.740218][T12831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 600.749095][T12831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 600.888280][T13547] FAULT_INJECTION: forcing a failure. [ 600.888280][T13547] name failslab, interval 1, probability 0, space 0, times 0 [ 600.967195][T13547] CPU: 1 UID: 0 PID: 13547 Comm: syz.6.1495 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 600.967231][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.967245][T13547] Call Trace: [ 600.967253][T13547] [ 600.967261][T13547] dump_stack_lvl+0x16c/0x1f0 [ 600.967302][T13547] should_fail_ex+0x512/0x640 [ 600.967335][T13547] ? __kmalloc_noprof+0xbf/0x510 [ 600.967373][T13547] ? memcg_list_lru_alloc+0x4e9/0x740 [ 600.967408][T13547] should_failslab+0xc2/0x120 [ 600.967429][T13547] __kmalloc_noprof+0xd2/0x510 [ 600.967462][T13547] ? __lock_acquire+0x622/0x1c90 [ 600.967499][T13547] memcg_list_lru_alloc+0x4e9/0x740 [ 600.967542][T13547] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 600.967586][T13547] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 600.967629][T13547] __memcg_slab_post_alloc_hook+0x133/0x960 [ 600.967659][T13547] ? kasan_save_track+0x14/0x30 [ 600.967696][T13547] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 600.967733][T13547] ? alloc_inode+0x64/0x240 [ 600.967757][T13547] ? __pfx_rpc_fill_super+0x10/0x10 [ 600.967808][T13547] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 600.967834][T13547] alloc_inode+0x64/0x240 [ 600.967859][T13547] new_inode+0x22/0x1c0 [ 600.967884][T13547] ? __pfx_rpc_fill_super+0x10/0x10 [ 600.967917][T13547] rpc_fill_super+0x19c/0x840 [ 600.967950][T13547] ? sget_fc+0x808/0xc20 [ 600.967983][T13547] ? __pfx_set_anon_super_fc+0x10/0x10 [ 600.968015][T13547] ? __pfx_rpc_fill_super+0x10/0x10 [ 600.968048][T13547] get_tree_keyed+0x10b/0x1d0 [ 600.968083][T13547] vfs_get_tree+0x8b/0x340 [ 600.968123][T13547] vfs_cmd_create+0xd7/0x2a0 [ 600.968145][T13547] __do_sys_fsconfig+0x7b8/0xbe0 [ 600.968169][T13547] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 600.968205][T13547] do_syscall_64+0xcd/0x490 [ 600.968242][T13547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.968270][T13547] RIP: 0033:0x7f7a24f8e929 [ 600.968288][T13547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.968310][T13547] RSP: 002b:00007f7a25eae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 600.968331][T13547] RAX: ffffffffffffffda RBX: 00007f7a251b6080 RCX: 00007f7a24f8e929 [ 600.968346][T13547] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 600.968359][T13547] RBP: 00007f7a25010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 600.968373][T13547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.968387][T13547] R13: 0000000000000000 R14: 00007f7a251b6080 R15: 00007ffe0a840b38 [ 600.968415][T13547] [ 601.226790][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.033936][T13544] chnl_net:caif_netlink_parms(): no params data found [ 602.376133][T13553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 602.661850][T13544] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.681658][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.693685][T13544] bridge_slave_0: entered allmulticast mode [ 602.714232][T13544] bridge_slave_0: entered promiscuous mode [ 602.729862][T13544] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.794095][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.805879][T12831] Bluetooth: hci8: command tx timeout [ 602.826215][T13544] bridge_slave_1: entered allmulticast mode [ 602.883981][T13544] bridge_slave_1: entered promiscuous mode [ 603.865017][T13544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.928250][T13544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.441110][T13544] team0: Port device team_slave_0 added [ 604.607186][T13544] team0: Port device team_slave_1 added [ 604.780420][T13544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.790793][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.824641][T13544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.868051][T12831] Bluetooth: hci8: command tx timeout [ 604.887022][T13544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.894357][T13544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.936582][T13544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.097120][T13544] hsr_slave_0: entered promiscuous mode [ 605.125213][T13544] hsr_slave_1: entered promiscuous mode [ 605.131440][T13544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.169662][T13544] Cannot create hsr debugfs directory [ 606.037619][T13544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.088716][T13544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 606.121834][T13544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 606.184126][T13544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.527238][T13544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.620987][T13544] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.690781][T12273] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.698035][T12273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.777975][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.785268][T12449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.945842][T12831] Bluetooth: hci8: command tx timeout [ 607.780607][T13544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.024051][T12831] Bluetooth: hci8: command tx timeout [ 609.129417][T13544] veth0_vlan: entered promiscuous mode [ 609.195665][T13544] veth1_vlan: entered promiscuous mode [ 609.347332][T13544] veth0_macvtap: entered promiscuous mode [ 609.350692][T13544] veth1_macvtap: entered promiscuous mode [ 609.411383][T13544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.443637][T13544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.456699][T13544] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.456771][T13544] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.456810][T13544] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.456841][T13544] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.836739][T13418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.836797][T13418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.038069][T13418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.038094][T13418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.114212][T13687] binder: 13677:13687 ioctl c018620c 0 returned -22 [ 615.187839][T13688] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 917 with max blocks 37 with error 117 [ 615.339869][T13688] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.339869][T13688] [ 617.035661][T13705] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1393 with max blocks 1 with error 117 [ 617.234456][T13705] EXT4-fs (sda1): This should not happen!! Data will be lost [ 617.234456][T13705] [ 618.012545][T13703] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 618.810394][T13723] Invalid ELF header magic: != ELF [ 621.384329][T13743] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input15 [ 625.014061][T13788] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 627.383066][T13820] Invalid ELF header magic: != ELF [ 628.526098][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1526'. [ 629.339018][T13839] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1530'. [ 629.977949][T13839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.001224][T13839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.025411][T13839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.060771][T13839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 630.086203][T13839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 630.112768][T13839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 630.174075][T13839] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 630.247739][T13839] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 630.267574][T13839] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 630.324504][T13839] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 630.359110][T13839] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 630.390156][T13839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 630.425975][T13839] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 630.454344][T13839] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 630.483981][T13839] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 630.498930][T13839] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 630.533679][T13839] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 630.553656][T13839] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 630.598501][T13839] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 631.181592][T13839] CPU0 is offline. [ 631.584945][T12831] Bluetooth: hci0: command 0x0c1a tx timeout [ 632.063987][T12274] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.070143][T12274] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.077524][T12831] Bluetooth: hci3: command 0x0c1a tx timeout [ 632.145506][T13867] Bluetooth: hci4: command 0x0c1a tx timeout [ 632.227921][T13418] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1382 with max blocks 12 with error 117 [ 632.313581][T13867] Bluetooth: hci5: command 0x0c1a tx timeout [ 632.390218][T13867] Bluetooth: hci6: command 0x0c1a tx timeout [ 632.403519][T13418] EXT4-fs (sda1): This should not happen!! Data will be lost [ 632.403519][T13418] [ 632.464201][T13867] Bluetooth: hci7: command 0x0c1a tx timeout [ 632.543861][T13867] Bluetooth: hci8: command 0x0c1a tx timeout [ 632.631009][T13867] Bluetooth: hci7: unexpected event 0x1d length: 10 > 5 [ 633.137600][T13871] FAULT_INJECTION: forcing a failure. [ 633.137600][T13871] name failslab, interval 1, probability 0, space 0, times 0 [ 633.157633][T13871] CPU: 1 UID: 0 PID: 13871 Comm: syz.7.1535 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 633.157664][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.157691][T13871] Call Trace: [ 633.157698][T13871] [ 633.157706][T13871] dump_stack_lvl+0x16c/0x1f0 [ 633.157743][T13871] should_fail_ex+0x512/0x640 [ 633.157780][T13871] should_failslab+0xc2/0x120 [ 633.157802][T13871] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 633.157837][T13871] ? __alloc_skb+0x2b2/0x380 [ 633.157873][T13871] __alloc_skb+0x2b2/0x380 [ 633.157903][T13871] ? __pfx___alloc_skb+0x10/0x10 [ 633.157932][T13871] ? rt6_nlmsg_size+0xaf/0x450 [ 633.157954][T13871] ? rt6_get_route_info+0x970/0x9e0 [ 633.157978][T13871] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 633.158013][T13871] inet6_rt_notify+0x10d/0x4b0 [ 633.158047][T13871] fib6_del+0xf5a/0x1770 [ 633.158076][T13871] ? __pfx_fib6_del+0x10/0x10 [ 633.158100][T13871] ? fib6_ifdown+0xcd/0x8f0 [ 633.158126][T13871] fib6_clean_node+0x424/0x5b0 [ 633.158149][T13871] ? __pfx_fib6_clean_node+0x10/0x10 [ 633.158182][T13871] fib6_walk_continue+0x44f/0x8d0 [ 633.158221][T13871] fib6_walk+0x182/0x370 [ 633.158255][T13871] ? __pfx_fib6_ifdown+0x10/0x10 [ 633.158274][T13871] fib6_clean_tree+0xd4/0x110 [ 633.158308][T13871] ? __pfx_fib6_clean_tree+0x10/0x10 [ 633.158347][T13871] ? __pfx_fib6_clean_node+0x10/0x10 [ 633.158368][T13871] ? __pfx_fib6_ifdown+0x10/0x10 [ 633.158397][T13871] ? __pfx_fib6_ifdown+0x10/0x10 [ 633.158417][T13871] __fib6_clean_all+0x107/0x2d0 [ 633.158457][T13871] rt6_disable_ip+0x2ec/0x990 [ 633.158505][T13871] ? __mutex_trylock_common+0xe9/0x250 [ 633.158547][T13871] ? __pfx___mutex_trylock_common+0x10/0x10 [ 633.158582][T13871] ? __pfx_rt6_disable_ip+0x10/0x10 [ 633.158616][T13871] ? rcu_is_watching+0x12/0xc0 [ 633.158646][T13871] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 633.158673][T13871] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 633.158715][T13871] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 633.158750][T13871] addrconf_notify+0x220/0x19e0 [ 633.158777][T13871] ? ip6mr_device_event+0x1bc/0x230 [ 633.158811][T13871] notifier_call_chain+0xbc/0x410 [ 633.158837][T13871] ? __pfx_addrconf_notify+0x10/0x10 [ 633.158870][T13871] call_netdevice_notifiers_info+0xbe/0x140 [ 633.158898][T13871] __dev_notify_flags+0x1f7/0x2e0 [ 633.158933][T13871] ? __pfx___dev_notify_flags+0x10/0x10 [ 633.158971][T13871] ? __pfx___dev_change_flags+0x10/0x10 [ 633.159014][T13871] netif_change_flags+0x108/0x160 [ 633.159052][T13871] dev_change_flags+0xba/0x250 [ 633.159077][T13871] flags_store+0x187/0x1e0 [ 633.159108][T13871] ? __pfx_flags_store+0x10/0x10 [ 633.159139][T13871] ? find_held_lock+0x2b/0x80 [ 633.159167][T13871] ? __pfx_flags_store+0x10/0x10 [ 633.159196][T13871] dev_attr_store+0x55/0x80 [ 633.159218][T13871] ? __pfx_dev_attr_store+0x10/0x10 [ 633.159240][T13871] sysfs_kf_write+0xef/0x150 [ 633.159270][T13871] kernfs_fop_write_iter+0x351/0x510 [ 633.159294][T13871] ? __pfx_sysfs_kf_write+0x10/0x10 [ 633.159325][T13871] iter_file_splice_write+0x91c/0x1150 [ 633.159374][T13871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.159411][T13871] ? __pfx_copy_splice_read+0x10/0x10 [ 633.159457][T13871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.159490][T13871] direct_splice_actor+0x18f/0x6c0 [ 633.159530][T13871] splice_direct_to_actor+0x345/0xa30 [ 633.159563][T13871] ? __pfx_direct_splice_actor+0x10/0x10 [ 633.159612][T13871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 633.159668][T13871] do_splice_direct+0x174/0x240 [ 633.159699][T13871] ? __pfx_do_splice_direct+0x10/0x10 [ 633.159730][T13871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 633.159765][T13871] ? rw_verify_area+0xcf/0x680 [ 633.159797][T13871] do_sendfile+0xb06/0xe50 [ 633.159834][T13871] ? __pfx_do_sendfile+0x10/0x10 [ 633.159870][T13871] ? __x64_sys_futex+0x1e0/0x4c0 [ 633.159897][T13871] ? __x64_sys_futex+0x1e9/0x4c0 [ 633.159929][T13871] __x64_sys_sendfile64+0x1d8/0x220 [ 633.159952][T13871] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 633.159984][T13871] do_syscall_64+0xcd/0x490 [ 633.160021][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.160045][T13871] RIP: 0033:0x7f46a2b8e929 [ 633.160063][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.160085][T13871] RSP: 002b:00007f46a394e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 633.160106][T13871] RAX: ffffffffffffffda RBX: 00007f46a2db5fa0 RCX: 00007f46a2b8e929 [ 633.160121][T13871] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 633.160134][T13871] RBP: 00007f46a2c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 633.160148][T13871] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 633.160161][T13871] R13: 0000000000000000 R14: 00007f46a2db5fa0 R15: 00007ffef158bcf8 [ 633.160202][T13871] [ 634.296871][T13867] Bluetooth: hci4: command 0x0c1a tx timeout [ 634.400314][T13867] Bluetooth: hci5: command 0x0c1a tx timeout [ 634.432904][T13886] Invalid ELF header magic: != ELF [ 634.545519][T13867] Bluetooth: hci6: command 0x0c1a tx timeout [ 634.551603][T13867] Bluetooth: hci7: command 0x0c1a tx timeout [ 634.632623][T12266] Bluetooth: hci8: command 0x0c1a tx timeout [ 634.814151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.820648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.450560][T13867] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 635.474657][T13867] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 635.482699][T13867] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 635.500831][T13867] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 635.508985][T13867] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 635.926046][T13910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 635.950124][T13916] bridge0: port 3(batadv0) entered blocking state [ 635.983614][T13916] bridge0: port 3(batadv0) entered disabled state [ 635.990301][T13916] batadv0: entered allmulticast mode [ 636.080152][T13916] batadv0: entered promiscuous mode [ 636.107876][T13916] bridge0: port 3(batadv0) entered blocking state [ 636.114467][T13916] bridge0: port 3(batadv0) entered forwarding state [ 636.311352][T13867] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.467011][T13867] Bluetooth: hci5: command 0x0c1a tx timeout [ 636.623672][T13867] Bluetooth: hci7: command 0x0c1a tx timeout [ 636.629755][T12266] Bluetooth: hci6: command 0x0c1a tx timeout [ 636.636253][T13914] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 636.706074][T13867] Bluetooth: hci8: command 0x0c1a tx timeout [ 637.014644][T13901] chnl_net:caif_netlink_parms(): no params data found [ 637.583627][T13867] Bluetooth: hci9: command tx timeout [ 638.179908][T13901] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.244935][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.252445][T13901] bridge_slave_0: entered allmulticast mode [ 638.360923][T13901] bridge_slave_0: entered promiscuous mode [ 638.414979][T13901] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.422255][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.494199][T13901] bridge_slave_1: entered allmulticast mode [ 638.522454][T13901] bridge_slave_1: entered promiscuous mode [ 638.802108][T13901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.898703][T13901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.460731][T13901] team0: Port device team_slave_0 added [ 639.651962][T13901] team0: Port device team_slave_1 added [ 639.664299][T13867] Bluetooth: hci9: command tx timeout [ 639.893073][T13913] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 640.012459][T13901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.012480][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.012536][T13901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.030763][T13901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.030782][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.030837][T13901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.132855][T13976] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 640.178064][T13974] vivid-003: ================= START STATUS ================= [ 640.178094][T13974] vivid-003: Radio HW Seek Mode: Bounded [ 640.178126][T13974] vivid-003: Radio Programmable HW Seek: false [ 640.178148][T13974] vivid-003: RDS Rx I/O Mode: Block I/O [ 640.178170][T13974] vivid-003: Generate RBDS Instead of RDS: false [ 640.178192][T13974] vivid-003: RDS Reception: true [ 640.178213][T13974] vivid-003: RDS Program Type: 0 inactive [ 640.178240][T13974] vivid-003: RDS PS Name: inactive [ 640.178266][T13974] vivid-003: RDS Radio Text: inactive [ 640.178291][T13974] vivid-003: RDS Traffic Announcement: false inactive [ 640.178317][T13974] vivid-003: RDS Traffic Program: false inactive [ 640.178343][T13974] vivid-003: RDS Music: false inactive [ 640.178368][T13974] vivid-003: ================== END STATUS ================== [ 640.263415][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.456872][T13901] hsr_slave_0: entered promiscuous mode [ 640.462117][T13901] hsr_slave_1: entered promiscuous mode [ 640.462839][T13901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.462919][T13901] Cannot create hsr debugfs directory [ 640.528371][T13981] ubi0: attaching mtd0 [ 640.541960][T13981] ubi0: scanning is finished [ 640.542005][T13981] ubi0: empty MTD device detected [ 640.542068][T13981] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 640.811089][T13983] Invalid ELF header magic: != ELF [ 640.879922][T13981] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 641.026799][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.303294][T13981] Invalid ELF header magic: != ELF [ 641.492722][T13901] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 641.534863][T13901] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 641.548262][T13901] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 641.574641][T13901] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 641.745067][T13867] Bluetooth: hci9: command tx timeout [ 642.008709][T13901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.060692][T13901] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.101197][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.101346][T12269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.127665][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.127753][T12265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.247817][T13901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.760868][T14014] netlink: 'syz.7.1548': attribute type 1 has an invalid length. [ 643.829416][T13867] Bluetooth: hci9: command tx timeout [ 644.006157][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1550'. [ 644.417439][T14033] FAULT_INJECTION: forcing a failure. [ 644.417439][T14033] name failslab, interval 1, probability 0, space 0, times 0 [ 644.566021][T14033] CPU: 1 UID: 0 PID: 14033 Comm: syz.3.1551 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 644.566056][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 644.566071][T14033] Call Trace: [ 644.566078][T14033] [ 644.566086][T14033] dump_stack_lvl+0x16c/0x1f0 [ 644.566125][T14033] should_fail_ex+0x512/0x640 [ 644.566160][T14033] ? fs_reclaim_acquire+0xae/0x150 [ 644.566190][T14033] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 644.566222][T14033] should_failslab+0xc2/0x120 [ 644.566244][T14033] __kmalloc_noprof+0xd2/0x510 [ 644.566285][T14033] tomoyo_realpath_from_path+0xc2/0x6e0 [ 644.566320][T14033] ? tomoyo_profile+0x47/0x60 [ 644.566359][T14033] tomoyo_path_number_perm+0x245/0x580 [ 644.566384][T14033] ? tomoyo_path_number_perm+0x237/0x580 [ 644.566414][T14033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 644.566477][T14033] ? __might_fault+0xe3/0x190 [ 644.566510][T14033] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 644.566540][T14033] ? hook_file_ioctl_common+0x145/0x410 [ 644.566568][T14033] ? __x64_sys_futex+0x1e0/0x4c0 [ 644.566596][T14033] ? __x64_sys_futex+0x1e9/0x4c0 [ 644.566633][T14033] security_file_ioctl+0x9b/0x240 [ 644.566663][T14033] __x64_sys_ioctl+0xb7/0x210 [ 644.566692][T14033] do_syscall_64+0xcd/0x490 [ 644.566729][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.566752][T14033] RIP: 0033:0x7f2bf638e929 [ 644.566770][T14033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.566792][T14033] RSP: 002b:00007f2bf71f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.566814][T14033] RAX: ffffffffffffffda RBX: 00007f2bf65b5fa0 RCX: 00007f2bf638e929 [ 644.566829][T14033] RDX: 0000200000000080 RSI: 0000000080184132 RDI: 0000000000000005 [ 644.566843][T14033] RBP: 00007f2bf6410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 644.566857][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.566870][T14033] R13: 0000000000000000 R14: 00007f2bf65b5fa0 R15: 00007ffe0c00ea38 [ 644.566917][T14033] [ 644.567233][T14033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 645.189922][T13901] veth0_vlan: entered promiscuous mode [ 645.381869][T13901] veth1_vlan: entered promiscuous mode [ 645.494867][T14045] FAULT_INJECTION: forcing a failure. [ 645.494867][T14045] name failslab, interval 1, probability 0, space 0, times 0 [ 645.552756][T13901] veth0_macvtap: entered promiscuous mode [ 645.603134][T14045] CPU: 1 UID: 0 PID: 14045 Comm: syz.7.1553 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 645.603169][T14045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.603183][T14045] Call Trace: [ 645.603191][T14045] [ 645.603200][T14045] dump_stack_lvl+0x16c/0x1f0 [ 645.603241][T14045] should_fail_ex+0x512/0x640 [ 645.603275][T14045] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 645.603315][T14045] should_failslab+0xc2/0x120 [ 645.603338][T14045] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 645.603418][T14045] ? d_instantiate+0x77/0x90 [ 645.603437][T14045] ? alloc_empty_file+0x55/0x1e0 [ 645.603466][T14045] alloc_empty_file+0x55/0x1e0 [ 645.603491][T14045] alloc_file_pseudo+0x13a/0x230 [ 645.603518][T14045] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 645.603551][T14045] ioctx_alloc+0x5ab/0x2120 [ 645.603592][T14045] ? find_held_lock+0x2b/0x80 [ 645.603617][T14045] ? __pfx_ioctx_alloc+0x10/0x10 [ 645.603644][T14045] ? __might_fault+0x13b/0x190 [ 645.603686][T14045] __x64_sys_io_setup+0xc9/0x210 [ 645.603719][T14045] do_syscall_64+0xcd/0x490 [ 645.603755][T14045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.603779][T14045] RIP: 0033:0x7f46a2b8e929 [ 645.603797][T14045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.603819][T14045] RSP: 002b:00007f46a394e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 645.603840][T14045] RAX: ffffffffffffffda RBX: 00007f46a2db5fa0 RCX: 00007f46a2b8e929 [ 645.603856][T14045] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 645.603869][T14045] RBP: 00007f46a2c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 645.603883][T14045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.603896][T14045] R13: 0000000000000000 R14: 00007f46a2db5fa0 R15: 00007ffef158bcf8 [ 645.603924][T14045] [ 646.054517][T13901] veth1_macvtap: entered promiscuous mode [ 646.132257][T13901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.177279][T13901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.235157][T13901] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.263480][T13901] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.304088][T13901] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.312825][T13901] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.691923][T12269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.756152][T12269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.897924][T12269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.921384][T12269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.095150][T14091] vivid-003: ================= START STATUS ================= [ 648.122246][T14091] vivid-003: Radio HW Seek Mode: Bounded [ 648.148687][T14091] vivid-003: Radio Programmable HW Seek: false [ 648.178908][T14091] vivid-003: RDS Rx I/O Mode: Block I/O [ 648.198831][T14091] vivid-003: Generate RBDS Instead of RDS: false [ 648.229098][T14082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.244864][T14082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.260343][T14091] vivid-003: RDS Reception: true [ 648.300349][T14082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.344528][T14082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.362948][T14091] vivid-003: RDS Program Type: 0 inactive [ 648.384002][T14082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 648.401418][T14082] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 648.437992][T14082] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 648.453605][T14091] vivid-003: RDS PS Name: inactive [ 648.467746][T14082] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 648.514139][T14082] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 648.543708][T14091] vivid-003: RDS Radio Text: inactive [ 648.549346][T14091] vivid-003: RDS Traffic Announcement: false inactive [ 648.560276][T14082] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 648.576585][T14082] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 648.659687][T14082] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 648.678521][T14082] CPU0 is offline. [ 648.744870][T14091] vivid-003: RDS Traffic Program: false inactive [ 648.925974][T14091] vivid-003: RDS Music: false inactive [ 648.931578][T14091] vivid-003: ================== END STATUS ================== [ 649.983513][T13867] Bluetooth: hci0: command 0x0c1a tx timeout [ 650.306425][T13867] Bluetooth: hci1: command 0x0c1a tx timeout [ 650.384006][T13867] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.390132][T13867] Bluetooth: hci3: command 0x0c1a tx timeout [ 650.396272][T12266] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.469174][T13867] Bluetooth: hci6: command 0x0c1a tx timeout [ 650.476674][T12831] Bluetooth: hci5: command 0x0c1a tx timeout [ 650.543925][T13867] Bluetooth: hci9: command 0x0c1a tx timeout [ 650.550150][T12831] Bluetooth: hci8: command 0x0c1a tx timeout [ 650.556260][T12266] Bluetooth: hci7: command 0x0c1a tx timeout [ 651.427029][ T31] INFO: task kworker/u8:3:37 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 651.488416][ T31] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 651.563469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 651.572317][ T31] task:kworker/u8:3 state:D stack:24504 pid:37 tgid:37 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 651.759803][ T31] Workqueue: netns cleanup_net [ 651.766227][T14127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1560'. [ 651.883722][ T31] Call Trace: [ 651.887123][ T31] [ 651.890099][ T31] __schedule+0x116a/0x5de0 [ 652.623621][T13867] Bluetooth: hci9: command 0x0c1a tx timeout [ 652.633181][ T31] ? __lock_acquire+0x622/0x1c90 [ 652.654339][ T31] ? __pfx___schedule+0x10/0x10 [ 652.674648][T14127] batadv0: left allmulticast mode [ 652.686934][ T31] ? find_held_lock+0x2b/0x80 [ 652.734496][ T31] ? schedule+0x2d7/0x3a0 [ 652.743565][ T31] schedule+0xe7/0x3a0 [ 652.752210][T14127] batadv0: left promiscuous mode [ 652.772254][ T31] schedule_timeout+0x257/0x290 [ 652.799793][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 652.817896][T14123] caif:caif_disconnect_client(): nothing to disconnect [ 652.861985][ T31] ? mark_held_locks+0x49/0x80 [ 652.913510][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.923764][T14127] bridge0: port 3(batadv0) entered disabled state [ 652.964168][ T31] __wait_for_common+0x2fc/0x4e0 [ 653.011377][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 653.074324][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 653.136724][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.142065][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 653.203884][ T31] __flush_workqueue+0x3e2/0x1230 [ 653.209030][ T31] ? __pfx___might_resched+0x10/0x10 [ 653.245374][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 653.250980][ T31] rxrpc_destroy_all_locals+0x40/0x180 [ 653.283486][ T31] rxrpc_exit_net+0x8b/0xc0 [ 653.288106][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 653.313465][ T31] ops_undo_list+0x2ee/0xab0 [ 653.318194][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 653.334069][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 653.348735][ T31] cleanup_net+0x408/0x890 [ 653.363472][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 653.368516][ T31] ? rcu_is_watching+0x12/0xc0 [ 653.387494][ T31] process_one_work+0x9cf/0x1b70 [ 653.392555][ T31] ? __pfx_batadv_nc_worker+0x10/0x10 [ 653.398549][ T31] ? __pfx_process_one_work+0x10/0x10 [ 653.404237][ T31] ? assign_work+0x1a0/0x250 [ 653.408908][ T31] worker_thread+0x6c8/0xf10 [ 653.416409][ T31] ? __pfx_worker_thread+0x10/0x10 [ 653.421616][ T31] kthread+0x3c2/0x780 [ 653.426160][ T31] ? __pfx_kthread+0x10/0x10 [ 653.430837][ T31] ? rcu_is_watching+0x12/0xc0 [ 653.435984][ T31] ? __pfx_kthread+0x10/0x10 [ 653.445051][ T31] ret_from_fork+0x5d7/0x6f0 [ 653.449727][ T31] ? __pfx_kthread+0x10/0x10 [ 653.454745][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.459600][ T31] [ 653.540469][T14127] bridge_slave_1: left allmulticast mode [ 653.579619][ T31] [ 653.579619][ T31] Showing all locks held in the system: [ 653.592570][T14127] bridge_slave_1: left promiscuous mode [ 653.635177][T14127] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.649025][ T31] 1 lock held by khungtaskd/31: [ 653.677975][ T31] #0: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 653.733445][ T31] 3 locks held by kworker/u8:3/37: [ 653.738622][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 653.788288][ T31] #1: ffffc90000ad7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 653.832270][ T31] #2: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 653.853584][ T31] 3 locks held by kworker/1:3/5830: [ 653.858846][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 653.900368][ T31] #1: ffffc90003e5fd10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 653.923513][ T31] #2: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 653.943457][ T31] 1 lock held by syz.2.1337/12616: [ 653.948620][ T31] #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 653.973448][ T31] 1 lock held by syz.1.1394/12918: [ 653.978615][ T31] #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 654.033456][ T31] 2 locks held by getty/13006: [ 654.038386][ T31] #0: ffff888031d950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 654.068280][ T31] #1: ffffc900043932f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 654.078779][ T31] 1 lock held by syz.4.1417/13080: [ 654.084092][ T31] #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 654.093809][ T31] 1 lock held by syz.5.1446/13277: [ 654.098930][ T31] #0: ffff888042b4d008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 654.111690][ T31] 1 lock held by syz.0.1458/13381: [ 654.122337][ T31] #0: ffff888042b3ac08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 654.135267][ T31] 1 lock held by syz.6.1512/13707: [ 654.140396][ T31] #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 654.150151][ T31] 1 lock held by syz-executor/13901: [ 654.156085][ T31] #0: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 654.168656][ T31] 1 lock held by syz.8.1552/14040: [ 654.174001][ T31] #0: ffffffff9034e550 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 654.183681][ T31] 1 lock held by syz.3.1556/14089: [ 654.188813][ T31] #0: ffffffff8e5d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 654.199244][ T31] 2 locks held by syz.7.1560/14127: [ 654.206554][ T31] #0: ffffffff903645a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x277/0xa80 [ 654.215828][ T31] #1: ffffffff8e5d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 654.232518][T14127] bridge_slave_0: left allmulticast mode [ 654.266635][T14127] bridge_slave_0: left promiscuous mode [ 654.272295][ T31] [ 654.277866][ T31] ============================================= [ 654.277866][ T31] [ 654.293910][T14127] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.328667][ T31] NMI backtrace for cpu 1 [ 654.328685][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 654.328718][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.328731][ T31] Call Trace: [ 654.328738][ T31] [ 654.328747][ T31] dump_stack_lvl+0x116/0x1f0 [ 654.328785][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 654.328809][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 654.328840][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.328872][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 654.328901][ T31] watchdog+0xf70/0x12c0 [ 654.328939][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.328970][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.329003][ T31] ? __kthread_parkme+0x19e/0x250 [ 654.329032][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.329064][ T31] kthread+0x3c2/0x780 [ 654.329096][ T31] ? __pfx_kthread+0x10/0x10 [ 654.329129][ T31] ? rcu_is_watching+0x12/0xc0 [ 654.329152][ T31] ? __pfx_kthread+0x10/0x10 [ 654.329185][ T31] ret_from_fork+0x5d7/0x6f0 [ 654.329214][ T31] ? __pfx_kthread+0x10/0x10 [ 654.329246][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.329283][ T31] [ 654.329300][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 654.454525][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 654.466345][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 654.476416][ T31] Call Trace: [ 654.479702][ T31] [ 654.482641][ T31] dump_stack_lvl+0x3d/0x1f0 [ 654.487261][ T31] panic+0x71c/0x800 [ 654.491172][ T31] ? __pfx_panic+0x10/0x10 [ 654.495604][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 654.500554][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 654.506295][ T31] ? irq_work_queue+0xce/0x100 [ 654.511078][ T31] ? watchdog+0xdda/0x12c0 [ 654.515513][ T31] ? watchdog+0xdcd/0x12c0 [ 654.519951][ T31] watchdog+0xdeb/0x12c0 [ 654.524225][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.528925][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.534160][ T31] ? __kthread_parkme+0x19e/0x250 [ 654.539205][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.543901][ T31] kthread+0x3c2/0x780 [ 654.548005][ T31] ? __pfx_kthread+0x10/0x10 [ 654.552631][ T31] ? rcu_is_watching+0x12/0xc0 [ 654.557422][ T31] ? __pfx_kthread+0x10/0x10 [ 654.562047][ T31] ret_from_fork+0x5d7/0x6f0 [ 654.566661][ T31] ? __pfx_kthread+0x10/0x10 [ 654.571290][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.576089][ T31] [ 654.579201][ T31] Kernel Offset: disabled [ 654.583537][ T31] Rebooting in 86400 seconds..