last executing test programs: 3m16.787755981s ago: executing program 32 (id=2447): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)="1d0008000000000000", 0x9) close_range$auto(0x2, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) getrandom$auto(&(0x7f0000000100)=']\'\xa2\\&,]\xfc/\x00', 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x4, 0x6}, 0x200) 2m23.178158397s ago: executing program 33 (id=2665): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x1a3200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf25160000001800018014000244a335006e657483657673696d300000000000895b83bc00050002000000000005"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) kcmp$auto(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [0xd2, 0xfffffffc], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0x20d, 0xfffffff8, 0x18, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0xfffffffffffffffd, 0x6d3e, 0x7, 0x2, 0x8]}, 0x0) capset$auto(0x0, 0x0) select$auto(0x9, &(0x7f0000000180)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x1, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8f, 0x9, 0x8001]}, 0x0, &(0x7f0000000100)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x800, 0x8, 0x1000000004, 0x9b72, 0x2, 0x800000008000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 2m11.167949225s ago: executing program 5 (id=2718): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffff9, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) setsockopt$auto(r1, 0x8001, 0x9, &(0x7f0000000300)='\x00\x90\x01\x17O\xa3\x93X[\xe9L\xa2\f\x9c\x7f\xe8 \x85\xe5\xc4$K\xaa\xe7\x83\x04X[\xa43P\x1e~\x1c\x92\x9a\xd2\x99M/\x94\x94\xc33\xaa\x8b\xd1\x97U9\xee\xd8\x0f\xf2\x85%\xc7\xc6\v`\x8e\x18\x92hGD@\x1c\xf4\x15\x8f\x11{p\xac\xfe\xff\'m\x05\xec\xa1\xbfD#\x00\x1e\xb1N]\xe8\xcd\x8av\x17\x80\x8a|*\xf0\xae7~\xa8!\xcc<\x9b\xa28\xcem\vL\x05\xa1v\x8c\\0xffffffffffffffff, 0x0, 0x7ff, 0x3, 0x1000, 0x8}, 0x5, 0xffffffff80000000, 0x0, 0x1, @inferred=r1, @raw=0x1, 0x4, 0x0, &(0x7f00000001c0)="a01803bfc068114f286a5689d8cafcfd3df914382047c6f1c782242a275fe4bad0c2616dbbdce144a777958c7e13379d82b6ece6c21517b529672d95fb66672403f0ab5c52fc51119ece99a121083ec0ad4edd906597a37eabb427a16632dc8c434eb829", &(0x7f0000000280)="44e669a28d3cff857abf0c93e27e875ffbc1063140afb0999b440700bb7a821766d9a55f2f3d30a57910376dd353abf008735744772d54b055c4ce3b3285b03677afadff42ce53881fdd4a60320a757fc989a1c1f2c615a828815216c05e4f1a14457029fb83b5fe5aab0cc86daf68d9db72057b772e39740fa7a7507c2f16a069cbe04235b4aa13d6bd0f2b57089d"}) shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000005c0)={{0xb068, 0xee00, 0xee01, 0x952a, 0x9, 0x5, 0x7}, 0xfff, 0x2, 0x0, 0x3, @inferred=r1, @inferred=r1, 0x4, 0x0, &(0x7f00000004c0)="649dc43706d759f909", 0x0}) lstat$auto(&(0x7f00000000c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', &(0x7f0000000640)={0x0, 0x2, 0xc76, 0x9, r4, r5, 0x0, 0x1, 0xf, 0x8, 0x5, 0x401, 0x9, 0x0, 0x623d, 0x6, 0xa71}) 2m4.941173224s ago: executing program 5 (id=2738): rt_sigqueueinfo$auto(0x9, 0x8, &(0x7f0000000000)={@siginfo_0_0={0xacb4, 0x5, 0xfffffffa, @_kill={0x4, 0x1}}}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x11) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) close_range$auto(0x2, 0x8, 0x0) pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) bpf$auto(0xfff, &(0x7f0000000040)=@bpf_attr_4={0x1, r3, 0x5, r3}, 0x800) 1m53.294663296s ago: executing program 4 (id=2771): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_ECCGETLAYOUT(0xffffffffffffffff, 0x81484d11, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000000)=0x3ff) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb0/queues/rx-0/rps_flow_cnt\x00', 0x10b142, 0x0) sendfile$auto(r1, r2, 0x0, 0x10001fe) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r4, 0x8926, r4) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230027ad7000fcdbdf2509000000080001009f0035ca055da69ae8e747563eba52fb96702d0c7ce82ba9851301caa7676d5a08b27442510506600dcc949a472955eb", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x48800) ioctl$auto(0x3, 0x4008ae48, 0x38) 1m52.174699806s ago: executing program 4 (id=2775): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 1m50.634510848s ago: executing program 4 (id=2781): open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000600100000"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc00", @ANYRES16=r6, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) mmap$auto(0x8, 0x2, 0xea2, 0x24f0c8f3, r1, 0xda3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(r8, 0x0) 1m49.804418728s ago: executing program 34 (id=2738): rt_sigqueueinfo$auto(0x9, 0x8, &(0x7f0000000000)={@siginfo_0_0={0xacb4, 0x5, 0xfffffffa, @_kill={0x4, 0x1}}}) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x11) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@nl=@unspec, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) close_range$auto(0x2, 0x8, 0x0) pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) bpf$auto(0xfff, &(0x7f0000000040)=@bpf_attr_4={0x1, r3, 0x5, r3}, 0x800) 1m49.480690711s ago: executing program 4 (id=2785): openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/40, 0x28) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) arch_prctl$auto(0x1003, 0xffffffffffffffff) 1m48.794980164s ago: executing program 4 (id=2788): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r0 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_notify$auto(r0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r1, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000002c0)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/flush\x00', 0x2, 0x0) listen$auto(0x3, 0x3) ioctl$auto_BCH_IOCTL_QUERY_UUID(r0, 0x8010bc01, &(0x7f0000000000)={{"5ec5193f301d9e8d3b71254601511e09"}}) 1m47.324256008s ago: executing program 4 (id=2791): r0 = socket(0x1a, 0x2, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5a5) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000004c0)="25e259507fb9509d0ce73d7f3d95f70fb0b24a3e71c5a22312cb4b20c67d837c40bb00766f5a399d2963bb98c87d7c0d37dff2bfebd2b3fb76bbdd59caff3eea77aa81a52333cfe068b2e942ee187872b20cd153be81685a37bcc58b73712aa9a57eb98392c121762623125a8814dcb7dc4dfa345808da34b7505c28c0322152cc1f3c42b8c095891b24ee67cd8e33f1e0ec92d86df456c28af68ba72ab680a5593d9ceef13c2c8eea382ddf3268079d5c64b49a7261de3978f7dcb61c6275a6552b0925d20ff921139c9ee6be0400000090ec8cedee1ceb3ceb7cdcec19e247ba0cca4da18c918992bddf5efdde517cce33174d08e6488052b2bf1a6b40c5611ef4af2bc59f6b6e9e49e22094d6d0e129dc8935f70ef3ced0f98e4f829191f6090c9741ecfe38be1970425785ab03b34f08b7fc906cd619488746b88dbe95bf72215f6ecf26efc16636ab09946555f7dc0f5bd81f7f7f6f01c5ed11011f8dcb4d640176f00fd171c46b0ac82d183258f36b6e0111f076693262e838a619e6f2e13d137e57c13bf90b2e1716fd1cffc0b8c3a2e0f31011342db11007255979ed2b", 0x1a1) 1m43.573382756s ago: executing program 1 (id=2799): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r0 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_notify$auto(r0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r1, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000002c0)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r3, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/flush\x00', 0x2, 0x0) listen$auto(0x3, 0x3) ioctl$auto_BCH_IOCTL_QUERY_UUID(r0, 0x8010bc01, &(0x7f0000000000)={{"5ec5193f301d9e8d3b71254601511e09"}}) 1m42.735905836s ago: executing program 1 (id=2800): close_range$auto(0xffffffffffffffff, 0x8, 0x47) mmap$auto(0x0, 0x42005, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f680, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000003640)='/dev/dsp1\x00', 0x2001, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r2, 0x80044dfb, 0x0) r3 = socket(0x2a, 0x0, 0x2) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000180)=0x5) madvise$auto(0xffffffffffffffff, 0x2, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) r6 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r6, 0x0, 0x4, 0x80000000000006) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) close_range$auto(0x2, 0x8, 0x0) 1m42.553537029s ago: executing program 1 (id=2801): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) listen$auto(0xffffffffffffffff, 0x5ed) socket(0x18, 0x3, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) readv$auto(r1, &(0x7f0000000700)={0x0, 0x9}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) epoll_create$auto(0x3e) r3 = gettid() ioctl$auto_TIOCGICOUNT2(r2, 0x545d, &(0x7f00000001c0)="8ade8f299331301a0b4ec9b4eacc2a28ce32bec101ac09ecefca86e2459e794f84b8be590833b54f4f6577972d3035b438fe4da2c06eb4539657fa609f51376ceaf19d7795feb3f67e14c6c3bbc6be314cc767755b0a7675a08fdb17af6dd675c973ab65afbc09ed75cbd2b3005abc589d80debe16e2e6e259f653102ada6a362d1895d30add2bd7ed6a1065bc480f3c81b5afe41a3f7afdc019c3ffc265c9f72aabe20fa5255410d0d5a292839bbdddf8aac63229eabcd918abbc6578513b707c882accbff7dd43105cd55fdff8c6") rt_sigsuspend$auto(0x0, 0x8) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r5 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r5, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) tkill$auto(r3, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0xffffffffffffffff, 0xd5, 0x2a11) socketpair$auto(0x4, 0xfff, 0x5, &(0x7f0000000100)=0x1) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 1m42.279800304s ago: executing program 1 (id=2803): openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000002e80)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x101040, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/40, 0x28) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) arch_prctl$auto(0x1003, 0xffffffffffffffff) 1m41.634724666s ago: executing program 1 (id=2807): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0) mmap$auto(0x80000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000001) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x153500, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x541100, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x80000001, 0x7, 0xffffffffffffffff, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 1m41.45102023s ago: executing program 1 (id=2808): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = prctl$auto(0x35, 0x8, 0x10, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000000) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r2, 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010326bd7000fcdbdf242d000000180001801400020069705f76746910000000000000000000"], 0x2c}, 0x1, 0x1000000, 0x0, 0x24048012}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0xfdef) 1m32.162917262s ago: executing program 35 (id=2791): r0 = socket(0x1a, 0x2, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5a5) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000004c0)="25e259507fb9509d0ce73d7f3d95f70fb0b24a3e71c5a22312cb4b20c67d837c40bb00766f5a399d2963bb98c87d7c0d37dff2bfebd2b3fb76bbdd59caff3eea77aa81a52333cfe068b2e942ee187872b20cd153be81685a37bcc58b73712aa9a57eb98392c121762623125a8814dcb7dc4dfa345808da34b7505c28c0322152cc1f3c42b8c095891b24ee67cd8e33f1e0ec92d86df456c28af68ba72ab680a5593d9ceef13c2c8eea382ddf3268079d5c64b49a7261de3978f7dcb61c6275a6552b0925d20ff921139c9ee6be0400000090ec8cedee1ceb3ceb7cdcec19e247ba0cca4da18c918992bddf5efdde517cce33174d08e6488052b2bf1a6b40c5611ef4af2bc59f6b6e9e49e22094d6d0e129dc8935f70ef3ced0f98e4f829191f6090c9741ecfe38be1970425785ab03b34f08b7fc906cd619488746b88dbe95bf72215f6ecf26efc16636ab09946555f7dc0f5bd81f7f7f6f01c5ed11011f8dcb4d640176f00fd171c46b0ac82d183258f36b6e0111f076693262e838a619e6f2e13d137e57c13bf90b2e1716fd1cffc0b8c3a2e0f31011342db11007255979ed2b", 0x1a1) 1m26.115682292s ago: executing program 36 (id=2808): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = prctl$auto(0x35, 0x8, 0x10, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000000) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r2, 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010326bd7000fcdbdf242d000000180001801400020069705f76746910000000000000000000"], 0x2c}, 0x1, 0x1000000, 0x0, 0x24048012}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0xfdef) 1m26.108114506s ago: executing program 7 (id=2827): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) read$auto_gpiolib_fops_(r2, &(0x7f0000000240)=""/66, 0x42) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffc318, 0x948b, 0x3, 0x15f4da06, 0x3, 0x40000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0x1, 0x1, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) 1m24.729574043s ago: executing program 7 (id=2840): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020500000000fbdbdf251104208c008a00e00000"], 0x24}}, 0xe943622f4c023d3d) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) remap_file_pages$auto(0x3, 0x8, 0x400, 0xfffffffffffffffb, 0x6c86) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 1m18.269286482s ago: executing program 8 (id=2851): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) 1m17.299969433s ago: executing program 8 (id=2853): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180), 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffffff, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x2a, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) 1m16.413342442s ago: executing program 8 (id=2855): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x40000, 0x0) readv$auto(r0, &(0x7f0000004d80)={&(0x7f0000004cc0), 0x73a5}, 0x4) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0x1d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x80000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r6, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x1a4, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xe1, 0xba, "1816d599272f0ce0b435acec2949834e826aafed6ec2b72babc56c38355f6d27533cd50e46b48a46ec4e11d92eb19f63f5a1f0e94f39669db7e1b40eb89882312723c83f5e26d78a85a6fb6925ce0603d8eeb389fe67298653c288928fa7c4f06c6cd6b39f922200721265536b3ed1b62d63bd0ca38356599143edefe1fa495a5738a5eb04af59c212ad0da4675ce4fce79e8c183512ac460b9b362c7a125c0c28e339f03c4d21f45224606e584fc9f44c4df2750ab214ac5fbe2ed47dbe19bc23b921946e076b4ea60aca4011e12b3631722f821f34b0d454d199972f"}, @NL80211_ATTR_HE_OBSS_PD={0xa4, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6d}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xffffffffffffff65, 0x5, "01974f83b7bb370b3df208c04671ba3175cb579e8834d276ac2bcbc1d04a7096c799017ae83d244d4fbfadc925308dc59b29f9cf361d5efdcd8de683d268412dc458c3c6b9633a3504434f64cffe4f4247e2d74e846d1bd2d2a67768753654885243eb3647ffb12cb5f90d9e0ff4dd9e35e8db20286e529a6ad7"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xa2}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7fffffffffffffff, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) write$auto(r1, 0x0, 0x5) remap_file_pages$auto(0x4, 0x200000000000002, 0x0, 0x58, 0x5) r8 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) write$auto(r8, &(0x7f0000001080)='\xcb:\x00', 0x2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0xb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0x88c4}, 0x40040) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 1m15.040340307s ago: executing program 8 (id=2857): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r2, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x18, 0x5, 0x5) 1m13.612151136s ago: executing program 8 (id=2859): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0) mmap$auto(0x80000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000001) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0xa, 0x1, 0x100) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x153500, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x541100, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x80000001, 0x7, 0xffffffffffffffff, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 1m12.608772116s ago: executing program 8 (id=2865): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x2e4041, 0x44) fchdir$auto(r4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="94b8501371b7bc8f4b40598e264b628786aee7207da34fd1f14ec5b3b53ccd6151b45f7b7d879b22fc792b49247a34c97cf0509e1dc790cd0f1466014a1c54376076b7bd72221c724ab939a16be989e055ff0716bcf143f572559efa38dd854b070e2a20d18f68fc1e57b0f0ac4f52adee40df957018574f1afc85eed14836659c7eab6cc981615c20e2baa0837925fcd29a7c1be71c81a8fff96ebcb31be020cbb1d8c9268d4b6a2a65ab2b0e86d582ecc0596f132e37e28d559b574b5a731a22799da4b667cf94bcb7504c5c65136539c2b64aac47fa5d3eb16d9f3e33e9933c5a23", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25340000000600140105000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) symlinkat$auto(0x0, r5, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, 0x0, 0xc) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000280)=""/43, 0x2b) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) socket(0x1d, 0x80002, 0x73) 1m9.644984059s ago: executing program 37 (id=2840): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020500000000fbdbdf251104208c008a00e00000"], 0x24}}, 0xe943622f4c023d3d) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) remap_file_pages$auto(0x3, 0x8, 0x400, 0xfffffffffffffffb, 0x6c86) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 57.619967269s ago: executing program 38 (id=2865): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x2e4041, 0x44) fchdir$auto(r4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NL80211_CMD_SET_PMKSA(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="94b8501371b7bc8f4b40598e264b628786aee7207da34fd1f14ec5b3b53ccd6151b45f7b7d879b22fc792b49247a34c97cf0509e1dc790cd0f1466014a1c54376076b7bd72221c724ab939a16be989e055ff0716bcf143f572559efa38dd854b070e2a20d18f68fc1e57b0f0ac4f52adee40df957018574f1afc85eed14836659c7eab6cc981615c20e2baa0837925fcd29a7c1be71c81a8fff96ebcb31be020cbb1d8c9268d4b6a2a65ab2b0e86d582ecc0596f132e37e28d559b574b5a731a22799da4b667cf94bcb7504c5c65136539c2b64aac47fa5d3eb16d9f3e33e9933c5a23", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf25340000000600140105000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) symlinkat$auto(0x0, r5, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, 0x0, 0xc) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000280)=""/43, 0x2b) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) socket(0x1d, 0x80002, 0x73) 46.213600836s ago: executing program 9 (id=2912): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f00000001c0)={0x7fffffff, &(0x7f0000000140)="09c992f401af1f859ebfe90103b3d8a9139d0970cdf0a7a7a9c49d95bdc723a16e08b6ef4d59dc172922fcc13f25246544ded54a668268195253ac0a53667cafbc89ad715d9f68f20bda4f65abaaaac32c0fcacab6304e12f117"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000080)={0x9, 0x11, 0x9, 0x0, 0x3, 0x0}) syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/pid_for_children\x00') r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x43, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x1]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) capset$auto(0x0, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1d, &(0x7f0000000040)='!\x00', 0x1ff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x5, 0x100000003, 0x9, 0x6, 0x1ff, 0x100000000, 0x3, 0x4, 0x401, 0x0, 0x8, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x8000000000000000, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x18f, 0xfffffffffffffff9, 0x3, 0x5a4, 0x1000, 0x80000001, 0x1]}, 0x0, &(0x7f0000000280)={0x10006, 0xcc}) 42.806401511s ago: executing program 9 (id=2917): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x79fe, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x7, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000000300)={0xbd, 0x2, "0200000000000000c32f1a88a7d2ac4f994d42b9ccb04eead5e03d771a33bb03d2d7de959b4fd3cea3ebd9c48b2687fb19852b1da5ab33a6ca4c2b285666489ad5391024feca142d2ce5d558ded9719dea51d787328f8ead177dce68174a0f5524b4ae35369f8a21404d65bd5f6de5969ae3ab017c1bfc19029e678420377d0f040a0177ed0345f589774ee5a94eaa7f61f9b3f5deed725ac61251cf2764951f92e1945bfc2f2a921c06506e166743fbd01a69d364e3a9b990ef201ef5"}, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) rseq$auto(&(0x7f00000005c0)={0x7, 0x6, 0x9, 0xfff, 0xa896, 0xffffffff, "af18c8a1eea866e9840b50cd944973113586d3c13361bac7f306af96f7efff43128e2b8c922b8fb895af349b0e062b81eb9c283c708b70b3acce9ee9cb134a7d7b89f2ffb21780113116e8528cfb4e952a1b38f43f7f7b0488d02d3f54d5f95a2b518d94598435ff9e3cb359f175b4a79e5debbe3437a9ee705e85abac6b17f188af31073da2af00acf600fea4db39bb050ffdfdf770463b"}, 0x584, 0x1, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x401, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r3, 0x1, 0x46, 0x0, 0x94) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r4 = socket(0x80000000000000a, 0x2, 0x0) memfd_secret$auto(0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301001, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) socket(0x29, 0x2, 0x0) 41.630471096s ago: executing program 9 (id=2921): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0xa, 0x2, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b4d, r4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r6, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000003d40)={0x105c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1018, 0x1, 0x0, 0x1, [@typed={0x14, 0x10d, 0x0, 0x0, @ipv6=@private1}, @generic="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"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@typed={0x23, 0x99, 0x0, 0x0, @str='/sys/kernel/debug/sync/sw_sync\x00'}]}]}, 0x105c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) 39.403936652s ago: executing program 9 (id=2926): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x1a3200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf25160000001800018014000244a335006e657483657673696d300000000000895b83bc00050002000000000005"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) kcmp$auto(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [0xd2, 0xfffffffc], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0x20d, 0xfffffff8, 0x18, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0xfffffffffffffffd, 0x6d3e, 0x7, 0x2, 0x8]}, 0x0) capset$auto(0x0, 0x0) select$auto(0x9, &(0x7f0000000180)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x1, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8f, 0x9, 0x8001]}, 0x0, &(0x7f0000000100)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, 0x0) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x800, 0x8, 0x1000000004, 0x9b72, 0x2, 0x800000008000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 38.232292895s ago: executing program 9 (id=2929): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/uevent\x00', 0x1, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001040)='/dev/usbmon7\x00', 0x20e140, 0x0) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000001400), 0x8000, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20440, 0x0) socket(0x15, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 37.557242992s ago: executing program 9 (id=2933): bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x3ffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x41, 0xfffffffffffffff5, 0x15, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff8, 0x100}, 0x800}, 0x19c9, 0x4008) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x4063c2, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024010}, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(0x0, 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0xf6ebbcb41b21fed6, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6e, 0x21, "b0e4ef80dd51ba1b6647b8ed638c2da373d2d1608c3ab7af773fffcac05ecdd03dd1807a3b7aa8d2fc05000000d5977da783e6fb132937ddcbddc02c15644b60f1ccb95e789c425fbe333100473ee6ae7f04a5017d691ca4c571e5aaf8e932cb6bcb599e40848429bad2"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x23, 0x125, "2d37805a57fcf40ecd18387cefe7de26c91beab4081e52835ff283285c2a2b"}, @NL80211_ATTR_MNTR_FLAGS={0x74, 0x17, "d494b7cea36c4c99ed1a0e01909999da439c357cde4d3cd35bd0e51adfcca7aa7b7e77f85499bc19d0c92b376cc0729551c106d4ea62208773566ea6fb7d3dad20c9f744e4fe5066e53773fa8350ff125ab1e2463de8fdbdca85b7a766516c0d047253df0828cdeee5248342a6173c8a"}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x80) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r6 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2002, 0x0) pread64$auto(r6, 0x0, 0x3c02, 0x100007) 35.966528203s ago: executing program 6 (id=2937): r0 = fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x8e}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x180}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @random="b059f9498c50"}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'syz_tun\x00'}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @multicast}, @BATADV_ATTR_ACTIVE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4) 34.897343357s ago: executing program 6 (id=2938): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa09c2, 0xa4) socket(0x2, 0x801, 0x100) r2 = pipe$auto(&(0x7f0000000040)) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r1, 0x8100451b, r1) mmap$auto(0x0, 0x7, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x120, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fb8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r4 = getsockopt$auto(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) getsockopt$auto_SO_RCVBUF(r0, 0x1, 0x8, &(0x7f0000000180)='/dev/ttyprintk\x00', &(0x7f00000001c0)=0x1800000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/power/runtime_suspended_time\x00', 0x101100, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x5, &(0x7f00000000c0)="159e9ff31741ec13378d9a340b2021ec2fb778ea9a9e1852f2d6fdcd8255a3ecb9428fa52fd1b680d64f5354b3fd54dfca38b22f913fe0877ab920ab8651363a0490548d97234035d23a0026df3b3a83050632a0fd9867e46f38f73646d4e8d8aaa98a9f5bcf9c37ef29f7a261cc688633f9cbea699dc9fa51d5ff6108a7f19449b742c63edd5bf3143b10728a062a290351d271ca773d0a1eacb7a2affe22f8975c4f52") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_DISCONNECT(r5, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3ec, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_FREQ_KHZ={0x352, 0x124, 0x0, 0x1, [@generic="16cf85f9e78a9b034d4430c72cd239a9f700dfd11a162cc15ae1df32bcc035de8e8201f6ac05eb62333760363c9e678f3b032e62dfb303b7241f8e54a8e44d2de3f3adfb9f3268deb8cbdff39c0d047ada2c380a38c29256c8c9ec803debfc598a0cb575de58943d94c7c4a011798a9629744819fc34a0a356c28dbb3ed6e16ab1d8686a91f4fde7095e6a41c68bed129834ceb8d69fe735c5075ef95e7b4ab7736840280a5a56adeb5106", @nested={0xd4, 0xb3, 0x0, 0x1, [@typed={0x14, 0x14, 0x0, 0x0, @ipv6=@private0}, @typed={0xba, 0xec, 0x0, 0x0, @binary="d24553d264162eac5bcdbafb80899034b43a79885884848e8603068385e8ad0570a3352b555b0435de4e051b34901c10ce9c1385d18f7ad40a1561a47e08ae936dad4c11e2be46cf7a7e65b91a737cf383781fb0a26a416026a34ee34af89de6154a8d8067040b90d9b5f02516271c9e5436756fcfd01afe0803b7a13e8179945a87d9ddb7153f5963d6f589f932204eee72d77d547cb7b5bc7c6404cf993e659f031a7ed81b056750ce61e6748733220ba941e52939"}]}, @generic="3463c6512cc693041f2361224e89051db11a133ac2c1fc4bfc8cb5e1022c6669ba251c2e0b68ebce6e759d4760619628ec86c1fa7d78b591fa0f5bf795afb556f1c69e38270a62e7c22c8b7dcf3fcb461b9f7d67f08287fa842b5dccb305f43443df21a1936a71953166cd8fb090ef16878ca574d67d", @generic="a8bfdf81ad860df2c9b251e2f5dbdaa810cb93a489bdcf5813c2fb651ab8d395e856bc5a759c9cb177fac927fff599413256708e6f66e28f0a06962ee239dd0bb051b64a50bb0203b3103b13f7787c30ce", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="7b2fcea4943e8a5a4638be73110abafc719cff3a571c3faa406a7f314199773e574199fde9ca76666828e584bfb17cb22fff43baed39cb0ede4c5b6c5a111b5ce67b079377adbe55d509422bbf5ac1a3fd81e9bc4084f281f8e2bdb64494013a7fae147d3854591f42d377c58889ac9c605031e0ffb2f7757ff6fa44536f26000b22fd77c66ccd3f6eec6b85d70e5ba12095e6b5573badd612a58b8597d738de5f9884d5ff9fefbf03c2b3a76f1b4d612f310e75c84350b20446ea08f6304073a29e67955f7c48652f63a2523de305d150ebf08221ac8483204539d9f6761c6c53324032ec8ae76ebc5ab56debdb6cccd09fc795"]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x78, 0xcd, "259d31c4f6c038b5c0fcc2831c1977f34f7e47fe7fea81ea86a2bd0aa8a012bc2a80a15b27d084f65ba44769b616938eb609ccbae4756f6cdf87c3402b100db6d8217102792572b541e4658c316a4b585385e8f4657412526e46fa59982643019c68955b8a5ad2c644a32acbc8234628eff9a671"}, @NL80211_ATTR_EPCS={0x4}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x400c000}, 0x4010) write$auto(0x3, 0x0, 0xfdef) 34.103209917s ago: executing program 6 (id=2941): open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000600100000"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc00", @ANYRES16=r6], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) mmap$auto(0x8, 0x2, 0xea2, 0x24f0c8f3, r1, 0xda3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(r8, 0x0) 32.119705012s ago: executing program 6 (id=2943): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x1c1481, 0x0) mmap$auto(0x0, 0x20009, 0x6013, 0xeb1, r0, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20300, 0x0) r3 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) r4 = bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r3, 0x84, 0x1d, 0x0, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000100)=""/153, 0x99) getpid() r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r1) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x134, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x11e, 0x2, 0x0, 0x1, [@generic="778a5cb9347ab3c4ddf530b1fc0eb15d6628cc7b8a0052e480282c076baead5e2d4561faa6c6f350452f5d1000f1745fd9e4c29f1a77c76d3bd2514dd51c1da1814a7c4e4dcf0c8eced093934b9261b55aafeb0e1466763fb1cf2b9df31a20fcce0405e245f7c30f38d2e147c8af07027c1c721a3fb569", @generic="08f112c4bfbfba9c03beab9be07df9d365c30f1624cccc39735f08c0c5e96834952707f7047c5b68572e315154314c89fa362b8250df0c44387ccc008276d270e83c9e24be078080406fcb4182230fd32d7bb85e7a859d4d3c581a22006e4d0a74f11bdec5b04ac73d7a7b651140dc649749b7b0c34416b3c6fb7cbe47dcf91ba17166746e8d096dcd1bb3522d98ce837030150b97a12450191bae79b9fee3fd22bf2a"]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040004}, 0x404c850) write$auto(r0, &(0x7f0000000180)='7\x00\x00\xec\x007\xfe(\xbd\xb0\x86\xe0K\xcf\xcf\x8d\xf2S6\x9e\x81\xcdc\xd7\x19-7\xc2\x89\x9d\x8cR`\xab6F\xd6O\x8b[\"\x80\xd0\xd2!\xc5\xdf\x8c&\xbd\x12\xb0\xa9v\vK\xfe+\xfb4\x02l\t5:a\xbf\xaf\xe3VX\x8d/l\f\xef\x1c\xc9\x13\xf6\x86\xb9N\xeeq\'\xb8\xb0\xa4\xd8\x94\xb8\xbc\b1\xc5\xb7\xca\x8e\x94\x0e\xc9\x99C\x97\xc2]\x80,\xaa\xf5\x17\xacn\x05\xbd\xdd\x89\x93\xb8\'\xc2f\xcf\x8d\xaa\x00\xd5\x91\x9f\x96\xc6\xa4\'N\xebE\x8b', 0x2) 30.855976163s ago: executing program 6 (id=2947): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1000000e, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c031db6cc3aee3cbb3a195437eba5113c6a3071e58e9a3a66ed28644467721b58aca15bedd3638e4cd76a60dafea2c369a38bd619c0d065fe8a54df9e76040000ffe2000000cb6ba3443adc00919a89ef46024f5daa6b9fdadbbf752f3c134c83ec5abe1e1955573536b1498c7943a26084204c14ffee46a02e9074813a00000000ed7600000000", @ANYRES16, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x2005c810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) rmdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r3) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) 27.879655356s ago: executing program 6 (id=2953): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x319) memfd_create$auto(0x0, 0xe) socket(0xa, 0x1, 0x0) socketpair$auto(0x21, 0x7, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write$auto(0x3, 0x0, 0xffd8) 26.751994793s ago: executing program 2 (id=2957): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x0, 0x0) r1 = prctl$auto(0x3e, 0x3, 0x0, 0x8, 0x80000000000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x2) setitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000080)={{0x8000, 0x5000000000000}, {0x400290, 0x10001}}, &(0x7f00000000c0)={{0x100000001}, {0x7, 0x8}}) socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x20000002, 0xf8, r0, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x0, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000200), 0x50d183, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe5e7) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xffffffffffffffff, 0x8000) timer_create$auto(0x1, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r4, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x80a00, 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS2(r5, 0xc0406619, &(0x7f0000000280)={{0x8}, 0x6}) madvise$auto(0x0, 0x4, 0x15) socket(0x29, 0xa, 0xfffffe01) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/cable#0\x00', 0x121c00, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) 25.530057442s ago: executing program 2 (id=2959): symlink$auto(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001200)='./file0\x00') lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5) mmap$auto(0x0, 0xc, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) open(0x0, 0x60842, 0x208) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='\xf6@\xdb\x18\x0f', 0x200, &(0x7f0000000000)="2aaea12a15a8ebc702717c5d7d") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x5, 0x1, 0x4, 0x3, 0x9) madvise$auto(0x0, 0x200007, 0x19) writev$auto(0x1, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r1, 0x0, 0x80000001, 0x4) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = prctl$auto_SIGCONT(0x6, 0x12, 0xffffffffffffffff, 0x7, 0x1ff) ioctl$auto(0xffffffffffffffff, 0x8004b50c, r2) 24.680738751s ago: executing program 2 (id=2960): r0 = fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x8e}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x180}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @random="b059f9498c50"}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'syz_tun\x00'}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @multicast}, @BATADV_ATTR_ACTIVE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4) 24.29722418s ago: executing program 2 (id=2962): open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x44) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:2/max_ratio_fine\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000600100000"]) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc00", @ANYRES16=r6], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) mmap$auto(0x8, 0x2, 0xea2, 0x24f0c8f3, r1, 0xda3) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(r8, 0x0) 23.564511026s ago: executing program 2 (id=2964): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/comm\x00', 0x82500, 0x0) pread64$auto(r0, &(0x7f0000000200)='{\x00', 0x1, 0x1) mmap$auto(0x5eb3, 0x4000b, 0x80000da12, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x808, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x18) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) gettid() mmap$auto(0x1000000000000002, 0x7, 0x7, 0xeb3, r1, 0x7ffe) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb3) write$auto(r4, &(0x7f0000000080)='7\x00\\\x98s\xa0\x04|3\"k\x00\x00\x03Y\x00\x00\x00\x00\x01\x00\x00\x00\x00', 0x5) madvise$auto(0x8, 0xfe, 0x10000) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim7/psample/out_tc_occ_max\x00', 0x0, 0x0) 22.98122363s ago: executing program 2 (id=2965): fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 22.358007444s ago: executing program 39 (id=2933): bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x3ffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x41, 0xfffffffffffffff5, 0x15, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff8, 0x100}, 0x800}, 0x19c9, 0x4008) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4c041) r1 = socket(0xf, 0x5, 0xf) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x4063c2, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024010}, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(0x0, 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) pidfd_open$auto(0xffffffffffffffff, 0x5) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0xf6ebbcb41b21fed6, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6e, 0x21, "b0e4ef80dd51ba1b6647b8ed638c2da373d2d1608c3ab7af773fffcac05ecdd03dd1807a3b7aa8d2fc05000000d5977da783e6fb132937ddcbddc02c15644b60f1ccb95e789c425fbe333100473ee6ae7f04a5017d691ca4c571e5aaf8e932cb6bcb599e40848429bad2"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xe}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x23, 0x125, "2d37805a57fcf40ecd18387cefe7de26c91beab4081e52835ff283285c2a2b"}, @NL80211_ATTR_MNTR_FLAGS={0x74, 0x17, "d494b7cea36c4c99ed1a0e01909999da439c357cde4d3cd35bd0e51adfcca7aa7b7e77f85499bc19d0c92b376cc0729551c106d4ea62208773566ea6fb7d3dad20c9f744e4fe5066e53773fa8350ff125ab1e2463de8fdbdca85b7a766516c0d047253df0828cdeee5248342a6173c8a"}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x80) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) r6 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2002, 0x0) pread64$auto(r6, 0x0, 0x3c02, 0x100007) 12.581666523s ago: executing program 40 (id=2953): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000015c0)="3995586495c3ec927131b8b0d4cbfe44868003f083bfd46bf5e48ea564f3fa4a2b7f20eb701dc295526d0d072b25dd02c55a928e46f9be50117e30cd1a403e9e689b8edb526c7930783ae89bff230695c8834dc9d216f2fea6bbd0d1b17d03bfdee8421480585ed27b7e587f245379b69bfa42a3c78dbba1676806eb25a401eb1e972e8ca9315809147cb15dbb9e1fc70be47e562885c71180184726fc3201afeec1406155d5c97109eb86430220175b677d6f4f82629a09fe417feaf2a68c7529666f276cc3ad85a067e1c805f09f2094a680ee790ec8e93b8ff4716ec2ee2c4a103875d73bedbf319910a684e56f24598100a2b14944c56b62f0e94ec0245233d6dc5d914ebcf287a7e4a517c0f1522546d5cf59f07392cc7127311a475897b36834eae277c8d3339b47b1ca3a67a66e332cccce56a550b42a35d36fad8ee35640d639895fb1f120e596866ea5d005324b4a160fe151d2bc526b46db509be97fafc7af316343d4ad2c22eaeae27093897a51c0b77f2bc7dfa40c8abf5b7041d18121018662e0d5d174ebbb774210113ec04cdcc2db45aff900043146cb849498356232081d3057acfccaa1bc71a920d8475c82712f085bd85c37a0301cc69df54d8df3e2601443cd0a35ac8f58ad61200e202080a42f8894554e206e1aecd33031adbd446e7f2c2197374bd4e5ebdca3d7b232f408d39d8a5f29d5742ec9cb0fe5a94d7cb8b04f5970fd45cf50803a2793257baec8e5ad44ac89a447ae5424752f706c665cd89e0013794e0bc72954814ce08a9c9169b9e4c62ce2a2c9b1a35429864589fa1ad963018eea9b807e82acbec4516d8b1fe05a853451f200cb0a9a8aafdfd9fb73c30475034012da95216a829f4a6e05cf38b93cd286dee42d9c13aa65c2de79157d35ecac37af9d5d369b641068fa45b2f253014105fbb6e078adcc9c9f483c0cbeeae19c03554c614c18e5ff3449fb1cd6127ccd7c1ec03088091b5bdddacf0184da30dbdcf4a9d3629737f155809d027cacd3f65a509104fd40af15748c72ad430445b309bf8de2f7b7af88d6430c80ff4468bd347dd594da9ee4390807bd7adc8910a22cf68b8a30497e352cb017c1af91", 0x319) memfd_create$auto(0x0, 0xe) socket(0xa, 0x1, 0x0) socketpair$auto(0x21, 0x7, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write$auto(0x3, 0x0, 0xffd8) 11.437537776s ago: executing program 3 (id=2989): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x11, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x15, 0x5, 0x0) mmap$auto(0x4, 0x400008, 0xe1, 0x9b72, 0x2, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x800000000009) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000006c}, 0xc, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="f8060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00f800010000000000000004007880040029800800c200", @ANYRES32=r0, @ANYBLOB="00000f9dbc44dfac6469364152e4881450baa94390ac4bcadc5a78fd62c6a476591340218690eb21d944d48e9b4506b0f9ef95c9b56f187207f45408ec7216e4ff3f333ebfb9fd6473d88f15d8e57f221d07e9e8aa76c1e430d306ed804a944b45c53ac41b20dbd4b921309c1e155528c58a28f418565dbe5a07791e3d56102590cfcc5245f4760c7d8476e8420abfd19599a1235c1cd4566e5639b998fa87c86d56fbfc1b7227c4ba3c6df85e024197aa48fd1d904140a549a45e76a00fdab971940d0800ee00", @ANYRES32=0x0, @ANYBLOB="0000009500ba00793c13f731d8307988681c1169f82002cd3bfa51a0925c98812e75efbbe129ce2510cecafbe1e2873cab5b9b9e5a9679a8f2e8fe481bcc34f54fad163923bd4c60a7fec9794cc7869fe12ec5711652d04bb1d94276a53608f3e66cf543798098a67cd87da7728c84df42cb44b598cb26906a37f5180d193545371381ae66c809477ba8166c7a94c2338a4e21a212759ed100000006004f01ffff00000800270005000000"], 0x6f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x101142, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acb", 0xbb6) socket(0x5, 0x6, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2a, 0x3, 0x2000000000ebe, r3, 0x7ffc) mmap$auto(0xffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r4, r5, 0x0) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000080)={0x0, 0x82ed0e3}, 0x1) 8.150849463s ago: executing program 0 (id=2991): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x6, 0x4, 0x8201, 0x2, 0x808, 0xc, 0x5933, 0x4000000002, 0x3}, 0x6f4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy7\x00', 0x2, 0x0) ioctl$auto_TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)="05") bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf4e379f37c5b8231}, 0x10000) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) dup$auto(r4) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a6f72cb22c"], 0x1368}, 0x1, 0x0, 0x0, 0x80000}, 0x20000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x39) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x490602, 0x0) read$auto(r5, 0x0, 0x20) mincore$auto(0x0, 0x1, 0xfffffffffffffffc) fsconfig$auto_FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)="89d183e4d1ae19693cab8147481f4142ac0c612c5dc042d861f643f260d4199596463ef2dc", 0x2) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x50, 0x602, 0x300000000000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"77b223906bc09888ab88dc2f5396d956e2c955d7c76b09f926dc17cc477ab958", 0x5, 0x3, 0x68b3, 0xf, 0x7fff, 0xffffffffffffffff}) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) socket(0x2, 0x1, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 7.794874368s ago: executing program 5 (id=2987): mmap$auto(0x4, 0x4, 0x8000000000007d5, 0xeb4, 0xfffffffffffffffa, 0x6) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) r0 = socket(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="0c000205844b50efc376669f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r3, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r6, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x28, r7, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x3, 0x0, 0x3, 0x8000000000000011, r8, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r3) socket(0x1f, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 7.736326508s ago: executing program 41 (id=2965): fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 7.656186031s ago: executing program 0 (id=2993): unshare$auto(0x40000080) clock_settime$auto(0x26c, &(0x7f0000000000)={0x100000004, 0x8}) adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0x8, 0x100000001, 0x7f, 0x0, 0x2, 0x0, 0xe, 0x0, 0x10001, {0xf, 0x6}, 0x7ffffffffffffffe, 0x3a9d, 0x5, 0xf, 0x0, 0x6, 0x1, 0xd, 0x8, 0x5, 0x1015c8}) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, 0x0) adjtimex$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x42) read$auto(r2, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002600)=ANY=[@ANYBLOB='-\x00\x00', @ANYRES16=r4, @ANYBLOB="010628bd7000fedbcf25040000001c00018015000900ee670872f7ce40bda82b9039f0e60f757f00000004000800"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x10}, 0x3) unshare$auto(0x8) socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x20000000000000, 0x7, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/vlan/vlan0\x00', 0x4800, 0x0) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, 0x0, 0x0) close_range$auto(r2, r1, 0x7) set_mempolicy_home_node$auto(0x0, 0x10001, 0x0, 0x0) 6.489795141s ago: executing program 0 (id=2994): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f0000000240)='#(//\x00', 0x356) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000080)='#(//\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, 0x0) mmap$auto(0x6, 0x8000000000000000, 0x40, 0x14, 0xffffffffffffffff, 0x5) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x10, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) mmap$auto(0x2, 0xa, 0xb, 0x19, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700000dcdf2512000000180001801400020076657468305f746f5f627269646765000800090000000000e3709954414043719e70ce2954bfed3bd7793039db05cbc4ddb68e222b81e8b8eaf00fac2cc5b371ade5c82012c6ee7d444ea2829d5754376b3aff7ffc0c221213903f14d98b8e7943847ae721961e3e6d6bf4e2fc1390c42fde438ec4813205a8ab7aaa60cfd2b9c0b01fb7d1413f6e9565824cf47b8fc56e94cc4d339faad1edcf1ea5a49fc63e2029e562d28306b9f793d45254182d04d776b079b15b04cbc66432e54ec2e1c105b36bcb55090057a17c73560ee74a54c864940dc2d0574436dc009aefa1fb53"], 0x34}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) 6.441367319s ago: executing program 3 (id=2995): openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mknod$auto(&(0x7f0000000240)='./file0\x00', 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x7, 0x2, 0x1d49, 0x9b72, r2, 0x820008000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mseal$auto(0x0, 0x7dda, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES8=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) socket(0x28, 0x2, 0xd) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r4 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x54) socketpair$auto(0x0, 0x3a, 0x4, 0x0) getsockopt$auto(r4, 0x84, 0x1f, 0x0, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000100)=""/153, 0x99) 5.53793486s ago: executing program 3 (id=2996): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 4.24658036s ago: executing program 0 (id=2997): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x25, 0x3, 0x101) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x0, 0x0) getgroups$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x800000000002, 0x9, 0x507f, 0x11, r1, 0xf31) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x3) signalfd4$auto(0xffffffff, 0x0, 0x5, 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x100, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x400c010) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x6, 0xea1, 0x4, 0x5, 0x1000, 0x100000000, 0x9, 0x10, 0x0, 0x40, 0xe, 0x5, 0x101, 0x100, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.158507209s ago: executing program 3 (id=2998): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="fc060000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf2504000000100001800400168008005c00", @ANYRES32=r2, @ANYBLOB="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"/1809], 0x6fc}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="1200", @ANYRESHEX=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40880}, 0x40004) recvmmsg$auto(r2, &(0x7f00000001c0)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x7ff}, 0x4000000000000005, 0x0, 0x400009, 0x8}, 0xa}, 0x10a, 0x200008, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffc, 0x2c, 0x6, 0x8}, 0x202bf50, 0x1, 0x0, 0x62c0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x350404, 0x0) socket(0xa, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x38000, &(0x7f00000005c0)=@info={r3, 0x2, 0x81}, 0xe) move_mount$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/hugetlb.2MB.numa_stat\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/17, 0x11) bpf$auto(0x8, &(0x7f0000000240)=@bpf_attr_3={0xa787, 0x6, 0x1, 0x9, 0xf6, 0x3, 0x5e7, 0x6, 0xfffffff5, "eda7b68bf0f387651b87894b3e9d841b", r4, 0x6, r1, 0x0, 0x0, 0x5, 0xf, 0x6, 0x5, 0x5, @attach_btf_obj_fd=r0, 0x100, 0x9, 0x2, 0x3ff, 0xfffffff9, r1, r5}, 0x401) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000080)=0x9) r6 = socket(0x2b, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@generic={0x1d, "ebb364a8daf166512452be85082d"}, 0x7f) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000380)="80ee62d673d525c10b231157c521f769625c3ef0125f07c8d3c2eb7d0e5616d1e2d7d72d550cf36e67b0ef9aaac469df00126258500e4f2c42d6fd764764938ffb1777377a6e0fd7be4d91b5a6ffdbaa85001d84f6757a5882a4006672030fc1ced3d7a92cbc", 0x2166, 0x0, 0x9, 0x0, 0x28, 0xb}, 0x800006}, 0x5, 0x20000000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) 2.520397943s ago: executing program 3 (id=2999): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) r3 = socket(0x1e, 0x6, 0xb9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m?\x7f\xc2{[\xc9\xd0[|\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x8d\xe8\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcb', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRESHEX=r2, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x3ff, 0x900000000a, 0x11, r2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) msgsnd$auto(0x3, &(0x7f0000000000)={0x6, 0x3}, 0x3, 0x1ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x20e000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x1, r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x7, 0xcac8873, 0x11) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages$auto(0x8, 0xda, 0x5, 0x4, 0x4) 2.028158842s ago: executing program 0 (id=3000): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", "213ea76652ad28e8b96ec5ed5243aea3", "25222c3aac25ccff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799448a9576c948fc3fb995daec2f1fc9170a70b4b71b44f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f17a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d615979b05547405d7e633a060cdb0fc80f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) r1 = getpgid(0x0) pidfd_open$auto(r1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x80000001, "a2b8e85fc56865ba529faa0000000000000000000000692a240000008000", @raw=0x6}, 0x6, 0x5, 0x7, @inferred=r1, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d4c89bee7005c5affd5ab891b44e48364e8de3f344584996c31f9ae16c6c4f062d38f590125ed264000000000000000000000000000000000000000600", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x6, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000003600)=""/4110, 0x100e) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x6}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x876c5, 0x8, 0x100000000}}) setsockopt$auto_SO_BSDCOMPAT(r0, 0x7f, 0xe, &(0x7f00000018c0)='\x00', 0x4) mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0xe7ff, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe984, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_ctl$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x2) connect$auto(0x4, 0x0, 0x10) r5 = pidfd_open$auto(0x0, 0xfffffffe) sendmsg$auto_CGROUPSTATS_CMD_GET(r5, 0x0, 0x44) r6 = prctl$auto(0x1000000003b, 0xffb, r2, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) bpf$auto(0x4, 0x0, 0xa4) r7 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r7, &(0x7f0000000240)=""/80, 0x50) sendfile$auto(r6, r7, &(0x7f0000000000)=0x3, 0x2) unshare$auto(0x40000080) 158.918484ms ago: executing program 0 (id=3001): unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/pcm1p/sub3/hw_params\x00', 0x1900, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) read$auto(r0, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) read$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000340)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x801, 0x84) sendmsg$auto_SMC_PNETID_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf2504000000190103002f6465762f6275303031005ee50000000d0003005c267b2e2f7d3a2c000000000d0003002f6465762f6b766d"], 0x50}}, 0x4) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a2037", 0x18) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/notify_window_exits\x00', 0x202, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) 0s ago: executing program 3 (id=3002): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x11, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x15, 0x5, 0x0) mmap$auto(0x4, 0x400008, 0xe1, 0x9b72, 0x2, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x800000000009) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000006c}, 0xc, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="f8060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00f800010000000000000004007880040029800800c200", @ANYRES32=r0, @ANYBLOB="00000f9dbc44dfac6469364152e4881450baa94390ac4bcadc5a78fd62c6a476591340218690eb21d944d48e9b4506b0f9ef95c9b56f187207f45408ec7216e4ff3f333ebfb9fd6473d88f15d8e57f221d07e9e8aa76c1e430d306ed804a944b45c53ac41b20dbd4b921309c1e155528c58a28f418565dbe5a07791e3d56102590cfcc5245f4760c7d8476e8420abfd19599a1235c1cd4566e5639b998fa87c86d56fbfc1b7227c4ba3c6df85e024197aa48fd1d904140a549a45e76a00fdab971940d0800ee00", @ANYRES32=0x0, @ANYBLOB="0000009500ba00793c13f731d8307988681c1169f82002cd3bfa51a0925c98812e75efbbe129ce2510cecafbe1e2873cab5b9b9e5a9679a8f2e8fe481bcc34f54fad163923bd4c60a7fec9794cc7869fe12ec5711652d04bb1d94276a53608f3e66cf543798098a67cd87da7728c84df42cb44b598cb26906a37f5180d193545371381ae66c809477ba8166c7a94c2338a4e21a212759ed100000006004f01ffff00000800270005000000"], 0x6f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x101142, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000e00)="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", 0xbb6) socket(0x5, 0x6, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2a, 0x3, 0x2000000000ebe, r3, 0x7ffc) mmap$auto(0xffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r4, r5, 0x0) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000080)={0x0, 0x82ed0e3}, 0x1) kernel console output (not intermixed with test programs): ][T17315] [ 814.546433][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 814.589452][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 815.246458][T17366] ieee80211 phy227: Selected rate control algorithm 'minstrel_ht' [ 816.876221][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'. [ 816.909611][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.917056][T17401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.000823][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.025466][T17407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.033752][T17407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 817.049691][T17407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 817.058144][T17407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 817.066995][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 817.077027][T17407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.119672][T17401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.634272][T17406] chnl_net:caif_netlink_parms(): no params data found [ 817.776496][T17417] ubi: mtd0 is already attached to ubi0 [ 817.997014][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.025340][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.054404][T17406] bridge_slave_0: entered allmulticast mode [ 818.074118][T17406] bridge_slave_0: entered promiscuous mode [ 818.090524][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.127236][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.164712][T17406] bridge_slave_1: entered allmulticast mode [ 818.193812][T17406] bridge_slave_1: entered promiscuous mode [ 818.245408][T17430] ieee80211 phy228: Selected rate control algorithm 'minstrel_ht' [ 818.337184][T17432] caif:caif_disconnect_client(): nothing to disconnect [ 818.486148][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.697730][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.797590][T17406] team0: Port device team_slave_0 added [ 818.833873][T17406] team0: Port device team_slave_1 added [ 818.890187][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.897188][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.011149][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.053249][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.080698][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.119628][T17407] Bluetooth: hci3: command tx timeout [ 819.193997][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.301696][T17406] hsr_slave_0: entered promiscuous mode [ 819.324372][T17406] hsr_slave_1: entered promiscuous mode [ 819.418113][T17447] caif:caif_disconnect_client(): nothing to disconnect [ 819.923932][T17406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 819.996613][T17406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 820.038923][T17406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 820.092063][T17406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 820.449623][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.481361][T17471] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2533'. [ 820.512649][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.567691][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.574928][ T4817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.645834][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.653062][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.177705][T17407] Bluetooth: hci3: command tx timeout [ 821.190252][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.251349][T17482] ieee80211 phy229: Selected rate control algorithm 'minstrel_ht' [ 821.552898][T17488] FAULT_INJECTION: forcing a failure. [ 821.552898][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 821.619629][T17488] CPU: 0 UID: 0 PID: 17488 Comm: syz.2.2536 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 821.619670][T17488] Tainted: [U]=USER [ 821.619678][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.619692][T17488] Call Trace: [ 821.619700][T17488] [ 821.619709][T17488] dump_stack_lvl+0x16c/0x1f0 [ 821.619747][T17488] should_fail_ex+0x512/0x640 [ 821.619784][T17488] should_failslab+0xc2/0x120 [ 821.619807][T17488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 821.619839][T17488] ? percpu_ref_init+0xec/0x410 [ 821.619869][T17488] ? __pfx_blkg_release+0x10/0x10 [ 821.619893][T17488] percpu_ref_init+0xec/0x410 [ 821.619920][T17488] ? kasan_save_track+0x14/0x30 [ 821.619956][T17488] blkg_alloc+0xea/0xb00 [ 821.619980][T17488] blkcg_init_disk+0x51/0x160 [ 821.620007][T17488] __alloc_disk_node+0x299/0x630 [ 821.620043][T17488] __blk_mq_alloc_disk+0x89/0x120 [ 821.620077][T17488] loop_add+0x49e/0xb70 [ 821.620103][T17488] ? do_vfs_ioctl+0x523/0x1a60 [ 821.620142][T17488] ? __pfx_loop_add+0x10/0x10 [ 821.620178][T17488] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 821.620211][T17488] ? rcu_is_watching+0x12/0xc0 [ 821.620234][T17488] ? __fget_files+0x204/0x3c0 [ 821.620264][T17488] loop_control_ioctl+0x13e/0x630 [ 821.620289][T17488] ? __pfx_loop_control_ioctl+0x10/0x10 [ 821.620316][T17488] ? __pfx_loop_control_ioctl+0x10/0x10 [ 821.620341][T17488] __x64_sys_ioctl+0x18b/0x210 [ 821.620366][T17488] do_syscall_64+0xcd/0x490 [ 821.620399][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.620420][T17488] RIP: 0033:0x7f51ba78e929 [ 821.620436][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.620457][T17488] RSP: 002b:00007f51bb6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.620477][T17488] RAX: ffffffffffffffda RBX: 00007f51ba9b5fa0 RCX: 00007f51ba78e929 [ 821.620491][T17488] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 821.620505][T17488] RBP: 00007f51ba810b39 R08: 0000000000000000 R09: 0000000000000000 [ 821.620518][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.620530][T17488] R13: 0000000000000000 R14: 00007f51ba9b5fa0 R15: 00007ffedc682068 [ 821.620550][T17488] [ 822.307085][T17406] veth0_vlan: entered promiscuous mode [ 822.328901][T17406] veth1_vlan: entered promiscuous mode [ 822.396999][T17406] veth0_macvtap: entered promiscuous mode [ 822.439422][T17406] veth1_macvtap: entered promiscuous mode [ 822.510550][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.589130][T17504] FAULT_INJECTION: forcing a failure. [ 822.589130][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 822.625246][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.649317][T17504] CPU: 0 UID: 0 PID: 17504 Comm: syz.0.2540 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 822.649358][T17504] Tainted: [U]=USER [ 822.649366][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.649379][T17504] Call Trace: [ 822.649386][T17504] [ 822.649394][T17504] dump_stack_lvl+0x16c/0x1f0 [ 822.649434][T17504] should_fail_ex+0x512/0x640 [ 822.649471][T17504] should_failslab+0xc2/0x120 [ 822.649493][T17504] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 822.649528][T17504] ? trace_kmem_cache_alloc+0x28/0xc0 [ 822.649583][T17504] ? sk_prot_alloc+0x60/0x2a0 [ 822.649609][T17504] sk_prot_alloc+0x60/0x2a0 [ 822.649633][T17504] sk_alloc+0x36/0xc20 [ 822.649665][T17504] __vsock_create.constprop.0+0x3c/0xbb0 [ 822.649698][T17504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 822.649735][T17504] vsock_create+0x139/0x500 [ 822.649770][T17504] __sock_create+0x338/0x8d0 [ 822.649799][T17504] __sys_socket+0x14d/0x260 [ 822.649825][T17504] ? __pfx___sys_socket+0x10/0x10 [ 822.649852][T17504] ? xfd_validate_state+0x61/0x180 [ 822.649887][T17504] __x64_sys_socket+0x72/0xb0 [ 822.649914][T17504] do_syscall_64+0xcd/0x490 [ 822.649950][T17504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.649974][T17504] RIP: 0033:0x7f99bf78e929 [ 822.649991][T17504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.650014][T17504] RSP: 002b:00007f99c054c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 822.650036][T17504] RAX: ffffffffffffffda RBX: 00007f99bf9b5fa0 RCX: 00007f99bf78e929 [ 822.650051][T17504] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 822.650065][T17504] RBP: 00007f99bf810b39 R08: 0000000000000000 R09: 0000000000000000 [ 822.650079][T17504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.650093][T17504] R13: 0000000000000000 R14: 00007f99bf9b5fa0 R15: 00007ffd10f5e4f8 [ 822.650115][T17504] [ 822.871316][T17505] ubi: mtd0 is already attached to ubi0 [ 823.246443][T17407] Bluetooth: hci3: command tx timeout [ 823.279989][T17406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.297256][T17406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.331414][T17406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.362249][T17406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.532161][T17406] ieee80211 phy230: Selected rate control algorithm 'minstrel_ht' [ 823.656291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.666365][T17406] ieee80211 phy231: Selected rate control algorithm 'minstrel_ht' [ 823.700035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.802605][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.844867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.101829][T17520] sp0: Synchronizing with TNC [ 824.152856][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2544'. [ 824.538582][T17527] ieee80211 phy232: Selected rate control algorithm 'minstrel_ht' [ 824.953139][T17534] caif:caif_disconnect_client(): nothing to disconnect [ 825.316320][T17407] Bluetooth: hci3: command tx timeout [ 825.936640][ T30] audit: type=1804 audit(6047529772.585:12): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2552" name="/newroot/2/file0" dev="tmpfs" ino=29 res=1 errno=0 [ 826.055838][ T30] audit: type=1800 audit(6047529772.626:13): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2552" name="file0" dev="tmpfs" ino=29 res=0 errno=0 [ 826.257689][T17565] ieee80211 phy233: Selected rate control algorithm 'minstrel_ht' [ 827.198391][T17574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2555'. [ 827.317660][T17574] veth1_macvtap: left promiscuous mode [ 827.476017][T17586] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2558'. [ 827.485438][T17584] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2557'. [ 829.617723][T17630] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2566'. [ 830.503002][T17407] Bluetooth: hci2: unexpected event 0x3e length: 1020 > 260 [ 830.503030][T17407] Bluetooth: hci2: unexpected subevent 0x01 length: 1019 > 18 [ 830.990909][T17659] ieee80211 phy234: Selected rate control algorithm 'minstrel_ht' [ 831.926267][T17679] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 831.942415][T17678] ieee80211 phy235: Selected rate control algorithm 'minstrel_ht' [ 832.226994][T17682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 832.782929][T17694] ieee80211 phy236: Selected rate control algorithm 'minstrel_ht' [ 833.763486][T17712] FAULT_INJECTION: forcing a failure. [ 833.763486][T17712] name failslab, interval 1, probability 0, space 0, times 0 [ 833.763522][T17712] CPU: 0 UID: 0 PID: 17712 Comm: syz.2.2582 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 833.763557][T17712] Tainted: [U]=USER [ 833.763564][T17712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 833.763578][T17712] Call Trace: [ 833.763584][T17712] [ 833.763592][T17712] dump_stack_lvl+0x16c/0x1f0 [ 833.763629][T17712] should_fail_ex+0x512/0x640 [ 833.763665][T17712] should_failslab+0xc2/0x120 [ 833.763687][T17712] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 833.763722][T17712] ? sctp_get_port_local+0x51e/0x1610 [ 833.763749][T17712] sctp_get_port_local+0x51e/0x1610 [ 833.763774][T17712] ? __pfx_sctp_get_port_local+0x10/0x10 [ 833.763794][T17712] ? lock_release+0x201/0x2f0 [ 833.763827][T17712] ? sctp_bind_addr_match+0x19d/0x300 [ 833.763863][T17712] sctp_do_bind+0x223/0x700 [ 833.763891][T17712] sctp_connect_new_asoc+0x5fd/0x790 [ 833.763920][T17712] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 833.763955][T17712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.763995][T17712] ? sctp_get_af_specific+0x62/0x70 [ 833.764018][T17712] __sctp_connect+0x3f3/0xc60 [ 833.764046][T17712] ? do_raw_spin_lock+0x12c/0x2b0 [ 833.764083][T17712] ? __pfx___sctp_connect+0x10/0x10 [ 833.764109][T17712] ? sctp_inet_connect+0xac/0x200 [ 833.764135][T17712] ? sctp_inet_connect+0xac/0x200 [ 833.764161][T17712] ? rcu_is_watching+0x12/0xc0 [ 833.764184][T17712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 833.764219][T17712] ? __pfx_sctp_inet_connect+0x10/0x10 [ 833.764245][T17712] sctp_inet_connect+0x15f/0x200 [ 833.764272][T17712] __sys_connect_file+0x141/0x1a0 [ 833.764303][T17712] __sys_connect+0x13b/0x160 [ 833.764330][T17712] ? __pfx___sys_connect+0x10/0x10 [ 833.764364][T17712] ? xfd_validate_state+0x61/0x180 [ 833.764406][T17712] ? __pfx___do_sys_close_range+0x10/0x10 [ 833.764442][T17712] __x64_sys_connect+0x72/0xb0 [ 833.764469][T17712] do_syscall_64+0xcd/0x490 [ 833.764503][T17712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.764525][T17712] RIP: 0033:0x7f51ba78e929 [ 833.764541][T17712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.764562][T17712] RSP: 002b:00007f51bb6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 833.764582][T17712] RAX: ffffffffffffffda RBX: 00007f51ba9b5fa0 RCX: 00007f51ba78e929 [ 833.764596][T17712] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 833.764610][T17712] RBP: 00007f51ba810b39 R08: 0000000000000000 R09: 0000000000000000 [ 833.764623][T17712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.764636][T17712] R13: 0000000000000000 R14: 00007f51ba9b5fa0 R15: 00007ffedc682068 [ 833.764656][T17712] [ 835.812949][T17734] ieee80211 phy237: Selected rate control algorithm 'minstrel_ht' [ 835.844938][T17736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2586'. [ 835.962574][T17740] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 835.970444][T17740] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 835.979474][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2587'. [ 836.082895][T17736] hsr_slave_0 (unregistering): left promiscuous mode [ 836.388095][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'. [ 837.120335][T17770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 837.632730][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'. [ 837.644429][T17780] FAULT_INJECTION: forcing a failure. [ 837.644429][T17780] name failslab, interval 1, probability 0, space 0, times 0 [ 837.699155][T17777] nfs4: Unknown parameter '€' [ 837.704748][T17780] CPU: 0 UID: 0 PID: 17780 Comm: syz.4.2596 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 837.704782][T17780] Tainted: [U]=USER [ 837.704789][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.704801][T17780] Call Trace: [ 837.704808][T17780] [ 837.704815][T17780] dump_stack_lvl+0x16c/0x1f0 [ 837.704851][T17780] should_fail_ex+0x512/0x640 [ 837.704884][T17780] should_failslab+0xc2/0x120 [ 837.704904][T17780] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 837.704938][T17780] ? alloc_inode+0x64/0x240 [ 837.704959][T17780] ? __pfx_rpc_fill_super+0x10/0x10 [ 837.704989][T17780] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 837.705012][T17780] alloc_inode+0x64/0x240 [ 837.705033][T17780] new_inode+0x22/0x1c0 [ 837.705054][T17780] ? __pfx_rpc_fill_super+0x10/0x10 [ 837.705083][T17780] rpc_fill_super+0x19c/0x840 [ 837.705111][T17780] ? sget_fc+0x808/0xc20 [ 837.705139][T17780] ? __pfx_set_anon_super_fc+0x10/0x10 [ 837.705165][T17780] ? __pfx_rpc_fill_super+0x10/0x10 [ 837.705194][T17780] get_tree_keyed+0x10b/0x1d0 [ 837.705223][T17780] vfs_get_tree+0x8b/0x340 [ 837.705247][T17780] vfs_cmd_create+0xd7/0x2a0 [ 837.705266][T17780] __do_sys_fsconfig+0x7b8/0xbe0 [ 837.705286][T17780] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 837.705312][T17780] do_syscall_64+0xcd/0x490 [ 837.705344][T17780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.705365][T17780] RIP: 0033:0x7f1534b8e929 [ 837.705381][T17780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.705420][T17780] RSP: 002b:00007f1535916038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 837.705442][T17780] RAX: ffffffffffffffda RBX: 00007f1534db6080 RCX: 00007f1534b8e929 [ 837.705457][T17780] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 837.705471][T17780] RBP: 00007f1534c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 837.705496][T17780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.705509][T17780] R13: 0000000000000000 R14: 00007f1534db6080 R15: 00007ffdc0fbb978 [ 837.705529][T17780] [ 837.921584][ C0] vkms_vblank_simulate: vblank timer overrun [ 838.808951][T17781] Process accounting resumed [ 838.988965][T17800] ieee80211 phy238: Selected rate control algorithm 'minstrel_ht' [ 839.006890][T17801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2600'. [ 839.063300][T17801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.087479][T17801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.204546][T17801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.303230][T17801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.628477][T17788] caif:caif_disconnect_client(): nothing to disconnect [ 840.339412][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 840.427178][T17825] FAULT_INJECTION: forcing a failure. [ 840.427178][T17825] name failslab, interval 1, probability 0, space 0, times 0 [ 840.476898][T17825] CPU: 0 UID: 0 PID: 17825 Comm: syz.4.2605 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 840.476933][T17825] Tainted: [U]=USER [ 840.476939][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.476951][T17825] Call Trace: [ 840.476957][T17825] [ 840.476964][T17825] dump_stack_lvl+0x16c/0x1f0 [ 840.476999][T17825] should_fail_ex+0x512/0x640 [ 840.477031][T17825] should_failslab+0xc2/0x120 [ 840.477051][T17825] __kmalloc_cache_noprof+0x6a/0x3e0 [ 840.477079][T17825] ? tomoyo_init_log+0x197/0x2140 [ 840.477108][T17825] tomoyo_init_log+0x197/0x2140 [ 840.477135][T17825] ? __kasan_kmalloc+0xaa/0xb0 [ 840.477164][T17825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.477200][T17825] ? __pfx_tomoyo_init_log+0x10/0x10 [ 840.477227][T17825] ? tomoyo_profile+0x47/0x60 [ 840.477257][T17825] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 840.477282][T17825] tomoyo_supervisor+0x302/0x13b0 [ 840.477316][T17825] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 840.477356][T17825] ? tomoyo_check_path_acl+0xad/0x210 [ 840.477379][T17825] ? tomoyo_check_acl+0x1f7/0x410 [ 840.477400][T17825] tomoyo_path_permission+0x270/0x3b0 [ 840.477424][T17825] tomoyo_check_open_permission+0x37b/0x3c0 [ 840.477448][T17825] ? init_file+0x93/0x4c0 [ 840.477466][T17825] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 840.477491][T17825] ? do_sys_openat2+0x11b/0x1d0 [ 840.477513][T17825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.477542][T17825] ? rcu_is_watching+0x12/0xc0 [ 840.477571][T17825] ? do_raw_spin_lock+0x12c/0x2b0 [ 840.477604][T17825] ? path_get+0x61/0x80 [ 840.477621][T17825] ? rcu_is_watching+0x12/0xc0 [ 840.477643][T17825] tomoyo_file_open+0x6b/0x90 [ 840.477675][T17825] security_file_open+0x84/0x1e0 [ 840.477701][T17825] do_dentry_open+0x596/0x1c10 [ 840.477734][T17825] vfs_open+0x82/0x3f0 [ 840.477756][T17825] path_openat+0x1de4/0x2cb0 [ 840.477788][T17825] ? __pfx_path_openat+0x10/0x10 [ 840.477820][T17825] do_filp_open+0x20b/0x470 [ 840.477848][T17825] ? __pfx_do_filp_open+0x10/0x10 [ 840.477885][T17825] ? alloc_fd+0x471/0x7d0 [ 840.477917][T17825] do_sys_openat2+0x11b/0x1d0 [ 840.477939][T17825] ? __pfx_do_sys_openat2+0x10/0x10 [ 840.477965][T17825] __x64_sys_openat+0x174/0x210 [ 840.477987][T17825] ? __pfx___x64_sys_openat+0x10/0x10 [ 840.478015][T17825] do_syscall_64+0xcd/0x490 [ 840.478046][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.478066][T17825] RIP: 0033:0x7f1534b8e929 [ 840.478081][T17825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.478101][T17825] RSP: 002b:00007f1535937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 840.478120][T17825] RAX: ffffffffffffffda RBX: 00007f1534db5fa0 RCX: 00007f1534b8e929 [ 840.478133][T17825] RDX: 0000000000048400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 840.478146][T17825] RBP: 00007f1534c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 840.478160][T17825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.478172][T17825] R13: 0000000000000000 R14: 00007f1534db5fa0 R15: 00007ffdc0fbb978 [ 840.478208][T17825] [ 841.334223][T17835] caif:caif_disconnect_client(): nothing to disconnect [ 841.394046][T17847] kAFS: No cell specified [ 841.595931][T17853] ieee80211 phy239: Selected rate control algorithm 'minstrel_ht' [ 841.674314][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'. [ 842.128836][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2615'. [ 842.479562][T17870] ieee80211 phy240: Selected rate control algorithm 'minstrel_ht' [ 842.803532][T17884] ieee80211 phy241: Selected rate control algorithm 'minstrel_ht' [ 843.304578][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 843.681727][T17900] ieee80211 phy242: Selected rate control algorithm 'minstrel_ht' [ 844.094978][T11096] Bluetooth: hci2: unexpected event 0x3d length: 3 < 14 [ 845.354307][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 845.477749][T17940] ieee80211 phy243: Selected rate control algorithm 'minstrel_ht' [ 846.358171][T17955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2631'. [ 846.588818][T17955] veth1_macvtap: left promiscuous mode [ 846.762373][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 847.154021][T17973] ieee80211 phy244: Selected rate control algorithm 'minstrel_ht' [ 847.944481][T17979] FAULT_INJECTION: forcing a failure. [ 847.944481][T17979] name fail_futex, interval 1, probability 0, space 0, times 0 [ 848.023480][T17979] CPU: 0 UID: 0 PID: 17979 Comm: syz.0.2638 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 848.023521][T17979] Tainted: [U]=USER [ 848.023528][T17979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 848.023543][T17979] Call Trace: [ 848.023550][T17979] [ 848.023559][T17979] dump_stack_lvl+0x16c/0x1f0 [ 848.023598][T17979] should_fail_ex+0x512/0x640 [ 848.023645][T17979] get_futex_key+0x1d0/0x1540 [ 848.023672][T17979] ? __pfx_get_futex_key+0x10/0x10 [ 848.023701][T17979] futex_wake+0xe7/0x4e0 [ 848.023734][T17979] ? __pfx_futex_wake+0x10/0x10 [ 848.023764][T17979] ? rcu_is_watching+0x12/0xc0 [ 848.023792][T17979] do_futex+0x1e3/0x350 [ 848.023818][T17979] ? __pfx_do_futex+0x10/0x10 [ 848.023846][T17979] ? __pfx___might_resched+0x10/0x10 [ 848.023871][T17979] __x64_sys_futex+0x1e0/0x4c0 [ 848.023899][T17979] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 848.023928][T17979] ? __pfx___x64_sys_futex+0x10/0x10 [ 848.023956][T17979] ? xfd_validate_state+0x61/0x180 [ 848.023985][T17979] ? __pfx___do_sys_close_range+0x10/0x10 [ 848.024022][T17979] do_syscall_64+0xcd/0x490 [ 848.024056][T17979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.024079][T17979] RIP: 0033:0x7f99bf78e929 [ 848.024100][T17979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.024123][T17979] RSP: 002b:00007f99c054c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 848.024145][T17979] RAX: ffffffffffffffda RBX: 00007f99bf9b5fa8 RCX: 00007f99bf78e929 [ 848.024160][T17979] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f99bf9b5fac [ 848.024174][T17979] RBP: 00007f99bf9b5fa0 R08: 00007f99c054d000 R09: 0000000000000000 [ 848.024188][T17979] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99bf9b5fac [ 848.024201][T17979] R13: 0000000000000000 R14: 00007ffd10f5e410 R15: 00007ffd10f5e4f8 [ 848.024221][T17979] [ 849.357613][T11096] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      [ 958.388172][T19459] PM: hibernation: Basic memory bitmaps created [ 958.426155][T19436] team0: Port device team_slave_0 added [ 958.506692][T19436] team0: Port device team_slave_1 added [ 958.531078][T19452] PM: hibernation: Basic memory bitmaps freed [ 958.621177][T19436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.651213][T19436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.763939][T19436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.807324][T19436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.831836][T19436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.930958][T19436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.146084][T19436] hsr_slave_0: entered promiscuous mode [ 959.175215][T19436] hsr_slave_1: entered promiscuous mode [ 959.202272][T19436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.239115][T19436] Cannot create hsr debugfs directory [ 959.552966][T19436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.636867][T19436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.724595][T19436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.812126][T19436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.075599][T19436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 960.109956][T19436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 960.151044][T19436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 960.188451][T19436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 960.213875][T17407] Bluetooth: hci6: command tx timeout [ 960.450244][T19436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.544065][T19436] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.606776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.614615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.692032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.699877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.873050][T19436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.558350][T19436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.721117][T19436] veth0_vlan: entered promiscuous mode [ 961.793413][T19436] veth1_vlan: entered promiscuous mode [ 961.909984][T19436] veth0_macvtap: entered promiscuous mode [ 961.939450][T19496] Process accounting resumed [ 961.979545][T19436] veth1_macvtap: entered promiscuous mode [ 962.054821][T19436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.118063][T19436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.188629][T19436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.217665][T19436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.275054][T19436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.285615][T17407] Bluetooth: hci6: command tx timeout [ 962.332589][T19436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.490828][T19436] ieee80211 phy280: Selected rate control algorithm 'minstrel_ht' [ 962.633996][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.646826][T19436] ieee80211 phy281: Selected rate control algorithm 'minstrel_ht' [ 962.688939][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.807516][ T6606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.858315][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.355186][T17407] Bluetooth: hci6: command tx timeout [ 965.420596][T19533] vivid-003: ================= START STATUS ================= [ 965.993570][T19533] vivid-003: Radio HW Seek Mode: Bounded [ 966.160407][T19533] vivid-003: Radio Programmable HW Seek: false [ 966.391560][T19533] vivid-003: RDS Rx I/O Mode: Block I/O [ 966.415621][T19533] vivid-003: Generate RBDS Instead of RDS: false [ 966.604498][T19533] vivid-003: RDS Reception: true [ 966.697518][T19533] vivid-003: RDS Program Type: 0 inactive [ 966.849279][T19533] vivid-003: RDS PS Name: inactive [ 967.124331][T19533] vivid-003: RDS Radio Text: inactive [ 967.406613][T19533] vivid-003: RDS Traffic Announcement: false inactive [ 967.879064][T19533] vivid-003: RDS Traffic Program: false inactive [ 968.421095][T19533] vivid-003: RDS Music: false inactive [ 968.427207][T19533] vivid-003: ================== END STATUS ================== [ 969.530295][T19607] ptrace attach of "./syz-executor exec"[19279] was attempted by "./syz-executor exec"[19607] [ 970.812676][T19621] netlink: 'syz.3.2919': attribute type 4 has an invalid length. [ 970.868349][T19621] netlink: 'syz.3.2919': attribute type 5 has an invalid length. [ 970.930838][T19621] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2919'. [ 972.217478][T19643] ieee80211 phy282: Selected rate control algorithm 'minstrel_ht' [ 973.018437][T19649] ieee80211 phy283: Selected rate control algorithm 'minstrel_ht' [ 973.718199][T19663] ieee80211 phy284: Selected rate control algorithm 'minstrel_ht' [ 973.792691][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2926'. [ 974.663424][T19667] delete_channel: no stack [ 976.652050][T19711] ieee80211 phy285: Selected rate control algorithm 'minstrel_ht' [ 977.666867][T19723] random: crng reseeded on system resumption [ 977.769220][T19723] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 977.907266][T19723] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 978.091260][T19723] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 978.224006][T19723] PM: hibernation: Basic memory bitmaps created [ 978.459954][T19723] PM: hibernation: Basic memory bitmaps freed [ 978.975650][T19737] ieee80211 phy286: Selected rate control algorithm 'minstrel_ht' [ 979.614861][T19740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 981.489434][T19768] openvswitch: ovs_ÿþ: Dropping previously announced user features [ 981.905829][ T30] audit: type=1800 audit(6047529937.372:15): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2945" name="dbroot" dev="configfs" ino=107434 res=0 errno=0 [ 982.761842][T19784] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 982.795796][T19784] Unable to find swap-space signature [ 982.883135][T19784] vhci_hcd: invalid port number 16 [ 982.908791][T19784] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 984.204283][T19803] ieee80211 phy287: Selected rate control algorithm 'minstrel_ht' [ 985.314034][T19818] ubi: mtd0 is already attached to ubi0 [ 985.350490][T19818] ubi0: detaching mtd0 [ 985.369844][T19818] ubi0: mtd0 is detached [ 985.404539][T19820] netlink: 'syz.2.2955': attribute type 4 has an invalid length. [ 985.446478][T19820] netlink: 'syz.2.2955': attribute type 5 has an invalid length. [ 985.478105][T19820] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2955'. [ 986.651026][T19846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 986.991144][T19848] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 987.797782][T19861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 988.664600][T19876] ieee80211 phy288: Selected rate control algorithm 'minstrel_ht' [ 989.486232][T19887] FAULT_INJECTION: forcing a failure. [ 989.486232][T19887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.548072][T19887] CPU: 0 UID: 0 PID: 19887 Comm: syz.2.2964 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 989.548113][T19887] Tainted: [U]=USER [ 989.548122][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.548136][T19887] Call Trace: [ 989.548148][T19887] [ 989.548157][T19887] dump_stack_lvl+0x16c/0x1f0 [ 989.548195][T19887] should_fail_ex+0x512/0x640 [ 989.548247][T19887] strncpy_from_user+0x3b/0x2e0 [ 989.548279][T19887] getname_flags.part.0+0x8f/0x550 [ 989.548307][T19887] getname_flags+0x93/0xf0 [ 989.548338][T19887] do_sys_openat2+0xb8/0x1d0 [ 989.548362][T19887] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.548393][T19887] __x64_sys_openat+0x174/0x210 [ 989.548419][T19887] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.548451][T19887] do_syscall_64+0xcd/0x490 [ 989.548487][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.548511][T19887] RIP: 0033:0x7f51ba78e929 [ 989.548528][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.548551][T19887] RSP: 002b:00007f51bb686038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.548573][T19887] RAX: ffffffffffffffda RBX: 00007f51ba9b6080 RCX: 00007f51ba78e929 [ 989.548590][T19887] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 989.548605][T19887] RBP: 00007f51ba810b39 R08: 0000000000000000 R09: 0000000000000000 [ 989.548619][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.548633][T19887] R13: 0000000000000000 R14: 00007f51ba9b6080 R15: 00007ffedc682068 [ 989.548654][T19887] [ 989.729968][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.401283][T19883] base_sock_release(ffff88805c05b000) sk=ffff888028df5000 [ 990.909087][T19900] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 990.917363][T19900] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 990.927048][T19900] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 990.935783][T19900] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 990.944231][T19900] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 991.141644][T19897] openvswitch: netlink: Key 0 has unexpected len 1540 expected 0 [ 991.203175][T19899] chnl_net:caif_netlink_parms(): no params data found [ 991.307392][T19899] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.318249][T19899] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.327057][T19899] bridge_slave_0: entered allmulticast mode [ 991.341236][T19899] bridge_slave_0: entered promiscuous mode [ 991.349939][T19899] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.360933][T19899] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.369253][T19899] bridge_slave_1: entered allmulticast mode [ 991.379230][T19899] bridge_slave_1: entered promiscuous mode [ 991.403249][T19899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.424743][T19899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.457821][T19899] team0: Port device team_slave_0 added [ 991.467250][T19899] team0: Port device team_slave_1 added [ 991.488936][T19899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.502580][T19899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.546965][T19899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.581812][T19899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.610036][T19899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.692353][T19899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.763010][T19899] hsr_slave_0: entered promiscuous mode [ 991.776420][T19899] hsr_slave_1: entered promiscuous mode [ 991.787163][T19899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.798183][T19899] Cannot create hsr debugfs directory [ 991.933542][T19899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.997906][T19899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.150061][T19899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.173122][T19899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.200234][T19899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.228502][T19899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.287833][T17407] Bluetooth: hci4: command 0x0406 tx timeout [ 992.404175][T19899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.453622][T19899] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.479912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.487770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.542678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.550517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.819530][T19899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.900100][T19899] veth0_vlan: entered promiscuous mode [ 992.930179][T19899] veth1_vlan: entered promiscuous mode [ 992.978400][T19899] veth0_macvtap: entered promiscuous mode [ 993.006408][T17407] Bluetooth: hci8: command tx timeout [ 993.023338][T19899] veth1_macvtap: entered promiscuous mode [ 993.063759][T19899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.082388][T19899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.110143][T19899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.140040][T19899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.172596][T19899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.189811][T19899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.274409][T19899] ieee80211 phy289: Selected rate control algorithm 'minstrel_ht' [ 993.358070][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.375719][T19899] ieee80211 phy290: Selected rate control algorithm 'minstrel_ht' [ 993.395328][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.475535][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.508579][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.043488][T19936] netlink: 'syz.0.2967': attribute type 1 has an invalid length. [ 994.398823][T19938] Loading of unsigned module is rejected [ 994.661872][T19943] ieee80211 phy291: Selected rate control algorithm 'minstrel_ht' [ 995.073206][T17407] Bluetooth: hci8: command tx timeout [ 995.342716][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.349679][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.455461][T19955] netlink: 'syz.0.2973': attribute type 1 has an invalid length. [ 996.095100][T19968] caif:caif_disconnect_client(): nothing to disconnect [ 997.141821][T17407] Bluetooth: hci8: command tx timeout [ 998.018353][T19987] netlink: 'syz.3.2979': attribute type 4 has an invalid length. [ 998.046588][T19987] netlink: 'syz.3.2979': attribute type 5 has an invalid length. [ 998.068134][T19987] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2979'. [ 998.117193][T19991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 998.125998][T19991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 998.155917][T19991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 998.185130][T19991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 998.204659][T19991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 998.228971][T19991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 998.260225][T19991] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 998.284322][T19991] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 998.307657][T19991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 998.324504][T19991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 998.352810][T19991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 998.378708][T19991] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 998.400783][T19991] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 998.422581][T19991] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 998.441778][T19991] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 998.460799][T19991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 998.481715][T19991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 998.524985][T19991] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 998.542999][T19991] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 998.563813][T19991] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1000.166497][T17407] Bluetooth: hci2: command 0x0c1a tx timeout [ 1000.173150][T19900] Bluetooth: hci1: command 0x0c1a tx timeout [ 1000.180429][T11096] Bluetooth: hci0: command 0x0c1a tx timeout [ 1000.245981][T11096] Bluetooth: hci5: command 0x0c1a tx timeout [ 1000.252632][T19900] Bluetooth: hci4: command 0x0406 tx timeout [ 1000.326078][T11096] Bluetooth: hci3: command 0x0c1a tx timeout [ 1000.408798][T11096] Bluetooth: hci7: command 0x0c1a tx timeout [ 1000.484545][T11096] Bluetooth: hci6: command 0x0c1a tx timeout [ 1000.563845][T11096] Bluetooth: hci8: command 0x0c1a tx timeout [ 1001.114215][T19900] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1001.125578][T19900] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1001.137332][T19900] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1001.147799][T19900] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1001.157310][T19900] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1001.543555][T20024] chnl_net:caif_netlink_parms(): no params data found [ 1001.741316][T20024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.767910][T20024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.776492][T20031] FAULT_INJECTION: forcing a failure. [ 1001.776492][T20031] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.807418][T20024] bridge_slave_0: entered allmulticast mode [ 1001.825834][T20024] bridge_slave_0: entered promiscuous mode [ 1001.857751][T20024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.888013][T20024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.911783][T20024] bridge_slave_1: entered allmulticast mode [ 1001.929908][T20031] CPU: 0 UID: 0 PID: 20031 Comm: syz.3.2989 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1001.929949][T20031] Tainted: [U]=USER [ 1001.929957][T20031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.929973][T20031] Call Trace: [ 1001.929980][T20031] [ 1001.929990][T20031] dump_stack_lvl+0x16c/0x1f0 [ 1001.930030][T20031] should_fail_ex+0x512/0x640 [ 1001.930068][T20031] should_failslab+0xc2/0x120 [ 1001.930092][T20031] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1001.930129][T20031] ? __d_alloc+0x31/0xaa0 [ 1001.930168][T20031] __d_alloc+0x31/0xaa0 [ 1001.930216][T20031] d_alloc_pseudo+0x1c/0xc0 [ 1001.930242][T20031] alloc_file_pseudo+0xcf/0x230 [ 1001.930285][T20031] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1001.930310][T20031] ? alloc_fd+0x471/0x7d0 [ 1001.930342][T20031] sock_alloc_file+0x50/0x210 [ 1001.930380][T20031] __sys_socket+0x1c0/0x260 [ 1001.930405][T20031] ? fput+0x70/0xf0 [ 1001.930425][T20031] ? __pfx___sys_socket+0x10/0x10 [ 1001.930451][T20031] ? xfd_validate_state+0x61/0x180 [ 1001.930482][T20031] ? __pfx_ksys_write+0x10/0x10 [ 1001.930517][T20031] __x64_sys_socket+0x72/0xb0 [ 1001.930554][T20031] do_syscall_64+0xcd/0x490 [ 1001.930588][T20031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.930610][T20031] RIP: 0033:0x7fa7e598e929 [ 1001.930625][T20031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.930646][T20031] RSP: 002b:00007fa7e6866038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1001.930667][T20031] RAX: ffffffffffffffda RBX: 00007fa7e5bb6080 RCX: 00007fa7e598e929 [ 1001.930682][T20031] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 1001.930695][T20031] RBP: 00007fa7e5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1001.930708][T20031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.930721][T20031] R13: 0000000000000000 R14: 00007fa7e5bb6080 R15: 00007fff88856e58 [ 1001.930741][T20031] [ 1001.957309][T20024] bridge_slave_1: entered promiscuous mode [ 1002.003230][T20024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.004856][T20024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.129914][T20024] team0: Port device team_slave_0 added [ 1002.131495][T20024] team0: Port device team_slave_1 added [ 1002.182609][T20024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.182639][T20024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.182691][T20024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.183571][T20024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.183585][T20024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.183634][T20024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.273509][T20024] hsr_slave_0: entered promiscuous mode [ 1002.274137][T20024] hsr_slave_1: entered promiscuous mode [ 1002.284963][T20024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.284986][T20024] Cannot create hsr debugfs directory [ 1002.319209][T11096] Bluetooth: hci5: command 0x0c1a tx timeout [ 1002.319245][T11096] Bluetooth: hci4: command 0x0406 tx timeout [ 1002.394728][T19900] Bluetooth: hci3: command 0x0c1a tx timeout [ 1002.474074][T19900] Bluetooth: hci7: command 0x0c1a tx timeout [ 1002.534551][T20024] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.558994][T19900] Bluetooth: hci6: command 0x0c1a tx timeout [ 1002.575017][T20024] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.618855][T20024] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.633443][T19900] Bluetooth: hci8: command 0x0c1a tx timeout [ 1002.662147][T20024] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.830850][T20024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1002.836684][T20024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1002.846398][T20024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.848374][T20024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1003.027848][T20024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.058136][T20024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.073241][ T4817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.073319][ T4817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.092663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.092736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.129414][T20024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1003.129439][T20024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.225692][T19900] Bluetooth: hci9: command tx timeout [ 1003.522739][T20024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.387669][T19900] Bluetooth: hci5: command 0x0c1a tx timeout [ 1004.463647][T19900] Bluetooth: hci3: command 0x0c1a tx timeout [ 1004.544246][T19900] Bluetooth: hci7: command 0x0c1a tx timeout [ 1004.623154][T19900] Bluetooth: hci6: command 0x0c1a tx timeout [ 1004.651726][T20024] veth0_vlan: entered promiscuous mode [ 1004.670135][T20024] veth1_vlan: entered promiscuous mode [ 1004.705525][T19900] Bluetooth: hci8: command 0x0c1a tx timeout [ 1004.718785][T20024] veth0_macvtap: entered promiscuous mode [ 1004.721093][T20024] veth1_macvtap: entered promiscuous mode [ 1004.766896][T20024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.772653][T20024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.790488][T20024] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.790522][T20024] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.790563][T20024] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.790591][T20024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.842704][T20024] ieee80211 phy292: Selected rate control algorithm 'minstrel_ht' [ 1004.932605][T20024] ieee80211 phy293: Selected rate control algorithm 'minstrel_ht' [ 1004.959573][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.959595][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.034618][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.034638][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.269420][T19900] Bluetooth: hci9: command tx timeout [ 1005.918132][T11096] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1005.918401][T11096] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1005.918615][T11096] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1005.922644][T11096] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1005.923115][T11096] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1006.465770][T20082] chnl_net:caif_netlink_parms(): no params data found [ 1007.327886][T19900] Bluetooth: hci9: command tx timeout [ 1007.964784][T19900] Bluetooth: hci10: command tx timeout [ 1008.960630][T20082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.974500][T20082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.001975][T20082] bridge_slave_0: entered allmulticast mode [ 1009.018918][T20082] bridge_slave_0: entered promiscuous mode [ 1009.055306][T20082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.071232][T20082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.100314][T20082] bridge_slave_1: entered allmulticast mode [ 1009.120351][T20082] bridge_slave_1: entered promiscuous mode [ 1009.302901][T20082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.349695][T20082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.396783][T19900] Bluetooth: hci9: command tx timeout [ 1009.444534][T20082] team0: Port device team_slave_0 added [ 1009.494124][T20082] team0: Port device team_slave_1 added [ 1009.629721][T20082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.671744][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.786448][T20082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.848994][T20082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.872130][T20082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.993955][T20082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.043242][T19900] Bluetooth: hci10: command tx timeout [ 1010.123328][T20082] hsr_slave_0: entered promiscuous mode [ 1010.153131][T20082] hsr_slave_1: entered promiscuous mode [ 1010.184258][T20082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.210846][T20082] Cannot create hsr debugfs directory [ 1010.669039][T20082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.181017][T20082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.377243][T20082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.468918][T20082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.650067][T20082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1011.736582][T20082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1011.763545][T20082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1011.823851][T20082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1012.064855][T20082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.106499][T19900] Bluetooth: hci10: command tx timeout [ 1012.150988][T20082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.235414][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.243273][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.299069][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.306910][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.827306][T20148] blktrace: Concurrent blktraces are not allowed on ram7 [ 1012.841811][T20082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.864266][T20148] FAULT_INJECTION: forcing a failure. [ 1012.864266][T20148] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.941219][T20148] CPU: 0 UID: 0 PID: 20148 Comm: syz.0.3001 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1012.941256][T20148] Tainted: [U]=USER [ 1012.941264][T20148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.941277][T20148] Call Trace: [ 1012.941284][T20148] [ 1012.941292][T20148] dump_stack_lvl+0x16c/0x1f0 [ 1012.941327][T20148] should_fail_ex+0x512/0x640 [ 1012.941361][T20148] ? constrain_params_by_rules+0x175/0xca0 [ 1012.941386][T20148] should_failslab+0xc2/0x120 [ 1012.941406][T20148] __kmalloc_noprof+0xd2/0x510 [ 1012.941448][T20148] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1012.941477][T20148] constrain_params_by_rules+0x175/0xca0 [ 1012.941501][T20148] ? arch_stack_walk+0xa6/0x100 [ 1012.941526][T20148] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1012.941549][T20148] ? stack_trace_save+0x8e/0xc0 [ 1012.941574][T20148] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.941599][T20148] ? kfree+0x2b4/0x4d0 [ 1012.941624][T20148] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1012.941648][T20148] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 1012.941674][T20148] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1012.941698][T20148] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1012.941721][T20148] ? snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1012.941743][T20148] ? __x64_sys_ioctl+0x18b/0x210 [ 1012.941767][T20148] ? do_syscall_64+0xcd/0x490 [ 1012.941798][T20148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.941820][T20148] ? snd_interval_refine+0x2fa/0x580 [ 1012.941850][T20148] snd_pcm_hw_refine+0x7de/0xad0 [ 1012.941881][T20148] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1012.941912][T20148] snd_pcm_hw_param_last+0x32d/0x710 [ 1012.941936][T20148] snd_pcm_hw_param_near.constprop.0+0x570/0x8e0 [ 1012.941962][T20148] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1012.941987][T20148] ? __asan_memset+0x23/0x50 [ 1012.942014][T20148] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1012.942038][T20148] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 1012.942067][T20148] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1012.942097][T20148] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1012.942120][T20148] ? rcu_is_watching+0x12/0xc0 [ 1012.942152][T20148] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1012.942178][T20148] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1012.942201][T20148] ? __fget_files+0x204/0x3c0 [ 1012.942230][T20148] ? hook_file_ioctl_common+0x145/0x410 [ 1012.942253][T20148] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1012.942278][T20148] ? __fget_files+0x20e/0x3c0 [ 1012.942308][T20148] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1012.942332][T20148] __x64_sys_ioctl+0x18b/0x210 [ 1012.942358][T20148] do_syscall_64+0xcd/0x490 [ 1012.942391][T20148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.942413][T20148] RIP: 0033:0x7fc97d38e929 [ 1012.942429][T20148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.942450][T20148] RSP: 002b:00007fc97e162038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.942471][T20148] RAX: ffffffffffffffda RBX: 00007fc97d5b5fa0 RCX: 00007fc97d38e929 [ 1012.942486][T20148] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1012.942500][T20148] RBP: 00007fc97d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1012.942513][T20148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.942527][T20148] R13: 0000000000000000 R14: 00007fc97d5b5fa0 R15: 00007ffc8dd19d68 [ 1012.942547][T20148] [ 1013.399712][T20152] FAULT_INJECTION: forcing a failure. [ 1013.399712][T20152] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.414769][T20152] CPU: 0 UID: 0 PID: 20152 Comm: syz.3.3002 Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1013.414807][T20152] Tainted: [U]=USER [ 1013.414815][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1013.414830][T20152] Call Trace: [ 1013.414838][T20152] [ 1013.414846][T20152] dump_stack_lvl+0x16c/0x1f0 [ 1013.414883][T20152] should_fail_ex+0x512/0x640 [ 1013.414920][T20152] should_failslab+0xc2/0x120 [ 1013.414941][T20152] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1013.414978][T20152] ? __d_alloc+0x31/0xaa0 [ 1013.415015][T20152] __d_alloc+0x31/0xaa0 [ 1013.415051][T20152] d_alloc_pseudo+0x1c/0xc0 [ 1013.415076][T20152] alloc_file_pseudo+0xcf/0x230 [ 1013.415101][T20152] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1013.415126][T20152] ? alloc_fd+0x471/0x7d0 [ 1013.415158][T20152] sock_alloc_file+0x50/0x210 [ 1013.415195][T20152] __sys_socket+0x1c0/0x260 [ 1013.415220][T20152] ? fput+0x70/0xf0 [ 1013.415240][T20152] ? __pfx___sys_socket+0x10/0x10 [ 1013.415266][T20152] ? xfd_validate_state+0x61/0x180 [ 1013.415297][T20152] ? __pfx_ksys_write+0x10/0x10 [ 1013.415333][T20152] __x64_sys_socket+0x72/0xb0 [ 1013.415359][T20152] do_syscall_64+0xcd/0x490 [ 1013.415395][T20152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.415419][T20152] RIP: 0033:0x7fa7e598e929 [ 1013.415436][T20152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.415460][T20152] RSP: 002b:00007fa7e6887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1013.415482][T20152] RAX: ffffffffffffffda RBX: 00007fa7e5bb5fa0 RCX: 00007fa7e598e929 [ 1013.415498][T20152] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 1013.415512][T20152] RBP: 00007fa7e5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1013.415526][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.415548][T20152] R13: 0000000000000000 R14: 00007fa7e5bb5fa0 R15: 00007fff88856e58 [ 1013.415570][T20152] [ 1013.698949][ T31] INFO: task syz-executor:5845 blocked for more than 143 seconds. [ 1013.719357][ T31] Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 1013.739817][ T31] Blocked by coredump. [ 1013.744940][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1013.755439][ T31] task:syz-executor state:D stack:22744 pid:5845 tgid:5845 ppid:1 task_flags:0x40014c flags:0x00004002 [ 1013.790727][ T31] Call Trace: [ 1013.794376][ T31] [ 1013.797600][ T31] __schedule+0x116a/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1013.850888][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1013.856867][ T31] ? __pfx___schedule+0x10/0x10 [ 1013.910311][ T31] ? shrinker_free+0xfe/0x430 [ 1013.944177][ T31] ? deactivate_locked_super+0x94/0x1a0 [ 1013.953333][ T31] ? deactivate_super+0xde/0x100 [ 1013.958800][ T31] ? cleanup_mnt+0x225/0x450 [ 1013.985777][ T31] ? task_work_run+0x150/0x240 [ 1014.001076][ T31] ? schedule+0x2d7/0x3a0 [ 1014.005895][ T31] ? rcu_is_watching+0x12/0xc0 [ 1014.019861][ T31] ? lock_release+0x201/0x2f0 [ 1014.025064][ T31] schedule+0xe7/0x3a0 [ 1014.059217][ T31] schedule_preempt_disabled+0x13/0x30 [ 1014.065713][ T31] __mutex_lock+0x6c7/0xb90 [ 1014.099128][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1014.105002][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1014.128063][ T31] ? net_generic+0xea/0x2a0 [ 1014.139202][ T31] ? rcu_is_watching+0x12/0xc0 [ 1014.144592][ T31] ? lock_release+0x201/0x2f0 [ 1014.178582][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1014.184460][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1014.242104][T19900] Bluetooth: hci10: command tx timeout [ 1014.278459][ T31] nfsd_umount+0x48/0xe0 [ 1014.283222][ T31] deactivate_locked_super+0xbe/0x1a0 [ 1014.367873][ T31] deactivate_super+0xde/0x100 [ 1014.373629][ T31] cleanup_mnt+0x225/0x450 [ 1014.397521][ T31] task_work_run+0x150/0x240 [ 1014.402639][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1014.425826][ T31] ? switch_task_namespaces+0xeb/0x100 [ 1014.447022][ T31] do_exit+0x86c/0x2bd0 [ 1014.451653][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1014.466930][ T31] ? __pfx_do_exit+0x10/0x10 [ 1014.472570][ T31] ? do_group_exit+0x1c3/0x2a0 [ 1014.490715][ T31] ? rcu_is_watching+0x12/0xc0 [ 1014.496029][ T31] ? rcu_is_watching+0x12/0xc0 [ 1014.531820][ T31] do_group_exit+0xd3/0x2a0 [ 1014.549208][ T31] __x64_sys_exit_group+0x3e/0x50 [ 1014.554793][ T31] x64_sys_call+0x1530/0x1730 [ 1014.573732][ T31] do_syscall_64+0xcd/0x490 [ 1014.579641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.594423][ T31] RIP: 0033:0x7f99bf78e929 [ 1014.608940][ T31] RSP: 002b:00007ffd10f5e758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1014.634685][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99bf78e929 [ 1014.668399][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1014.681693][ T31] RBP: 00007f99bf81230f R08: 00007ffd10f5c4f6 R09: 00000000000927c0 [ 1014.705771][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 1014.714579][ T31] R13: 00000000000927c0 R14: 00000000000d1092 R15: 00007ffd10f5e910 [ 1014.733500][ T31] [ 1014.811163][ T31] INFO: lockdep is turned off. [ 1014.847345][ T31] NMI backtrace for cpu 0 [ 1014.847365][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1014.847394][ T31] Tainted: [U]=USER [ 1014.847401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1014.847413][ T31] Call Trace: [ 1014.847419][ T31] [ 1014.847427][ T31] dump_stack_lvl+0x116/0x1f0 [ 1014.847461][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1014.847482][ T31] ? watchdog+0xd79/0x12c0 [ 1014.847512][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1014.847546][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1014.847570][ T31] watchdog+0xf70/0x12c0 [ 1014.847600][ T31] ? __pfx_watchdog+0x10/0x10 [ 1014.847628][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.847657][ T31] ? __kthread_parkme+0x19e/0x250 [ 1014.847682][ T31] ? __pfx_watchdog+0x10/0x10 [ 1014.847711][ T31] kthread+0x3c2/0x780 [ 1014.847738][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.847767][ T31] ? rcu_is_watching+0x12/0xc0 [ 1014.847788][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.847816][ T31] ret_from_fork+0x5d7/0x6f0 [ 1014.847843][ T31] ? __pfx_kthread+0x10/0x10 [ 1014.847871][ T31] ret_from_fork_asm+0x1a/0x30 [ 1014.847898][ T31] [ 1014.847912][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1014.990057][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1015.004775][ T31] Tainted: [U]=USER [ 1015.008957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1015.020019][ T31] Call Trace: [ 1015.023625][ T31] [ 1015.026849][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1015.031920][ T31] panic+0x71c/0x800 [ 1015.036217][ T31] ? __pfx_panic+0x10/0x10 [ 1015.041100][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1015.046541][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1015.052850][ T31] ? irq_work_queue+0xce/0x100 [ 1015.058118][ T31] ? watchdog+0xdda/0x12c0 [ 1015.062994][ T31] ? watchdog+0xdcd/0x12c0 [ 1015.067882][ T31] watchdog+0xdeb/0x12c0 [ 1015.072566][ T31] ? __pfx_watchdog+0x10/0x10 [ 1015.077743][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.083497][ T31] ? __kthread_parkme+0x19e/0x250 [ 1015.089052][ T31] ? __pfx_watchdog+0x10/0x10 [ 1015.094232][ T31] kthread+0x3c2/0x780 [ 1015.098724][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.103788][ T31] ? rcu_is_watching+0x12/0xc0 [ 1015.109031][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.114097][ T31] ret_from_fork+0x5d7/0x6f0 [ 1015.119176][ T31] ? __pfx_kthread+0x10/0x10 [ 1015.124244][ T31] ret_from_fork_asm+0x1a/0x30 [ 1015.129501][ T31] [ 1015.132918][ T31] Kernel Offset: disabled [ 1015.137676][ T31] Rebooting in 86400 seconds..