last executing test programs: 8.052012765s ago: executing program 1 (id=105): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x8000000003, 0xda1, 0x3fd6, 0xb, 0xfffffffffffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x100005, 0xbc3) semtimedop$auto(0x3, &(0x7f0000000000)={0x2, 0x5a, 0x3}, 0x9, &(0x7f0000000100)={0x5}) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6) socket(0x18, 0x5, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0xa) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x84, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) socket(0x2, 0x80802, 0x0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x8810) ioctl$auto_SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080)="ec") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/transparent_hugepage/defrag\x00', 0x8a002, 0x0) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 6.365474363s ago: executing program 3 (id=111): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101480, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x0) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1p\x00', 0x20a02, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='y\x8c', 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB="140e034d8ad74f84258b1bdc2c7859fe3d6146b0ff38359e7414a0b7705728cb7031cb70bc0778910b47c61c89992ae65167e09988acd93d4b51c8c0cc07b9d2b4c9bd590963eebf14c124665dcdd2697953e4ddc9b0596d9bce8067308040d2d1d82fc392c95f4b2c04a9d193c64eef36be9eb1a043256795a53230dd664d79a733c2f6cf95ec9326f6185c5da56d6e2ff6c31f99dd4fd0743ee121e70997686bae872dd9312193fb4ffdc7599d14399d68d20fa43923fa82773a53a01ad6f455e64f4419e3d93ece1ffe5564007b129425b7c096c4af29aa21ec975df35f5d35579e9e0afb75db5b34b751b1232b0b", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20008085}, 0x5e17c1cf55fb2282) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 5.97309655s ago: executing program 2 (id=112): unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/pcm1p/sub3/hw_params\x00', 0x1900, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) read$auto(r0, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) read$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000340)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x801, 0x84) sendmsg$auto_SMC_PNETID_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf2504000000190103002f6465762f6275303031005ee50000000d0003005c267b2e2f7d3a2c000000000d0003002f6465762f6b766d"], 0x50}}, 0x4) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a2037", 0x18) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/notify_window_exits\x00', 0x202, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) 5.813597507s ago: executing program 0 (id=113): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x6, 0xffffffffffffffff) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00"}, 0x6, 0x8, 0x7, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={@inferred=r5, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)="f4", 0x1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x22, 0x2, 0x4) getpeername$auto(0x3, 0x0, 0x0) add_key$auto(&(0x7f0000000040)='\xfe\xff$\x9aS8\x93\xa0\xde\xf3#y\xf9;\xe2B~j\x13\xa8\x83b\xc6hSP\xba', &(0x7f0000000000), 0x0, 0x7aef, 0x30) 4.85811854s ago: executing program 1 (id=114): mmap$auto(0x8, 0x20009, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000240), 0x1}, 0x3) 4.607941725s ago: executing program 2 (id=115): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x8880) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.48215377s ago: executing program 0 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r2) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000240)={{0x80000000, 0xee00, 0xee01, 0x9, 0x9, 0x7, 0x6}, &(0x7f00000001c0)=0x65, &(0x7f0000000200)=0xd5, 0x7, 0x3, 0x400, 0x800000000000, 0x1000, 0x598, 0xf, 0x3, @raw=0x800, @raw=0xd31a}) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\n\x00\x00', @ANYRES16=r3, @ANYBLOB="02002cbd7000ffdbdf250f0000006f03068008001900ac1414aa08006f800400ae802479de828d4146dab26f901488ffb618735b669f600bb238db3b855ac5eba874c151b8efea0473ddbb1220b5ffa43116c44dae368d274466bb483c1916e9681bea7e6c238496768d22325c7124970a6109912cccc9da7803a696587f9bf15405570aa865a62dd2b96d906c7c5a8dc28362e84d37ad70f9cfbaa264bc9f016524d30513e7b6126ed332a3af8ae718864a8b0d53697b08468dec3d60aaccf1bed1c9b8700e33f392d73839f9bb26b6b2ef3304cdfa92f5efd31ed3c8d6004e8042489a3da443b14ba59bfd1137881b4c4740efb2d15a5f3f45db03a706fd78515c5dfb8af3a1330f68e0d15e749e98e22f204e634ca93cb12fc7a5c3817b34814bed23676d05b131a418212fe8d29a9053096fec88129d0a41ddb4e9ae6d3ae384fcf634b81bbc518d50407b8c9f1cd20d4c4cd5b636a7542194817ddecf97ffbd830acac8cf7728115f60cc7a1e19de261900d843a4071f2333223b91276d9df164f2b0fb9338236516a4a31d200b00a8f1e5abdef3b89164a1aae9f42141a3d8ef602bc3b4c95d9e4f754345c2040023800000d3da6de158af3faeeddae5c17416aba12855200a683b6816af7ac0602ff0a51f21829bf128846a775a49118130a6b9ec1fccdf1472caa4a9b0234bda528a5706cdd7efe614250d658aef9e621632c34e842e2d207e5cbad663ffd6f880866b4c15f26b4a5e1dbd2b8d6111e9a6adffdeb5f4cc21810865a70e6cca9c4178575ae34e49ba3a7939e116f47c2c56705bebefafe7c2998f5b46e534a0e87333655c0294ab6cd69cf015b05adc5ffbffd83dde339343a6ece30a0fe335d83f4f075f60b9d88991edcca4be37978f89daf2cda0780ac17ee19727685c9308247ede63030660de97eaa829ef591f8249860994389d44da9d327988cde167ca5840abcecf7cc32d1e1c77a56b2c4d553b48d6810339d84b3002f331f06ad9bcd973e2c3b077e596f6d932dda8ae679d1618f03c3d55e5236cdc7f1c1794185ccc5bf2ff83c3fdb2bc30fbaf582dbb06604c5ac32c46bef2ff245bb956d22465b6e05c6667193a8370885332dbc57b19613ce8113f12fc1ecd07d1782d682af0ce20fd8f09c6c4bab04caa69dbd3ca93a4a2233dfb8c95d97926f2f7233253e8ac474dab71b53bc32400388004005b8004008e8004000a800c00e400c308000000000000040056800400ae0000860503800800628004002c801400ef00fc0100000000000000000000000000009dd0a941ef085167010aaf810a2bf4605d57e27a77f712518c4a0ec8580afb30e48e8bd93aba3b1cdc856cdfd90a1c2d6d7ec58e0c0167cea2825132eb48b462cb6b9a3ae3d7da39c37d7378161852a9d421170f9b001201d46b6d6ad49885bb662bd1607b910951209afa6368c5540e56f5a26dda756e2ace7011266985be8685c95fe039f76d412c77ac66035661a74de055e94f55eed8031752ad8079c446dd186ccde5fb24643f4c84a1cb61c742f099e204859fdf6591b4daac47ac1a4cd55958b26fdd2b01d58096b6994eba4be377cbe5e46919a44f5fe16257e33c94dfc58985d9df23bbef86dbc8fb4c413bc04bf206bd81f46816af639ce568cecf6d0188d0846a35e620192f4a8340eeacdba8e1fa93f9d6c827af222646c78f15ba692b40fe75277d39cad3b0bbbe756fd30bfa86072a573971cfb2deb339782a65c8f062c96981b22b2015301fe6e950f83330e7c131ee73029a83d5ff87279d6584f0b2766c8b1eba3fbd5010139a1ebe221c2733bbac83ca40dc886452e1997a9c6083029f2a9bc94b36803d4a44b3377c84cad23dae76e6de5fb49cbdc79f57e955981070bd0ff123f6b1f918c5ab94c385f995d9452952311094a1541f88724dab785ea1a1e4d652ecf182ae4c97308d34be9cd9ffee620c930065e9f725f3e9492a2b0c00d60062e90000000000000015025c8004007b802a385e9da220395ee1405b68dd5773d4e841d649d12d7dd2eddab1e008ac7bdadf737a382cf78079edbd4205964d886ae00911ece8d99e393d41495161d3a6428f8e3272aa70bb7c88163ace67f37ced948d3ea3ab666a14ec10200e5080a761b4d5410246c6d8f65b9ad67df37328db4f8aa5f84ab884310f7f0ab584cce22efe2bee9cd90e72a384f9fdb1c35acc8a2558ecea4d4976f8e0342009279c37dca5bbc3e1d138a0fa75174bf37c2d70e9d1dbef3747209ec05bdf05b27b880e30d43141bd81dadb439319682e1550ee9235819ef2c24e4351e59617b897789fb72f2743985ccd0d70f05c4264c1810cecb44ab6fcd44bddd6fbcf00140060be67ca902d4ee51fd0ddc43458b988182d24d233c23bddee8d90352a3485600e82b9766a8e855bfd9a620113f5f2cdbb287d8df79c0a0a5e4820c05085be07080caf4bd93157117876ae4ca2f4f4fb6b34f1e2b0628675c45cb5eec6d2ac32a401cb8a39907e1d88310f0bd6f682966b4fc18dedc67e236257b4fc32bb87360fc2b883e0ea95d391c8956f4f042e87d3a3e0e601bc8dfc72e68ada5d4fe4f9cedfbb47a78d20288f1c284fff8c785e4b852ae5123b4f8c1004969bbb11617a49c031e64cf5256e000800820001000000a2068154de58ef62f450409800a74df00421e975070f554491e64924fc25277ced6b9ce378382068b0b689d60800fe00001000000400db800400de800000000400ec000800f20040276c0008008a00000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="4f00de085ed5146f720110b677a9cf7631e17aaf607cb887ab41b3885e2a46e1d0aa0823c6bb94ac86085eb5a9afdc06a4fd7a7049e04bd507c19d7812896614378bed3b6888ff90a0eeab47cb2fddcc6e6379276ef2cc305ff1d0c03383018eb734fb638b6316c14de360da9d368108009500", @ANYRES32=0x0, @ANYBLOB="04000e8004003200080045800400a480007a00000065d5e3f84b2c377fba48fd4ec8d6be71c247bf49127b0677d00ccdb16acd03de307d4c8b28ddaeb4693142c759598b21c91128d71aa755f293056d2c2b4193f621281c5715c6b892a28e606b416562fc9c8e0bbf16f0507634d034fc8645f9822cf4fd96c1840915f70aa21df3afa24c59f0a04706cd0000"], 0xa34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, r0, 0x0) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r6, &(0x7f0000000040)='nbd\x00', 0x4) 4.404494407s ago: executing program 3 (id=117): keyctl$auto_KEYCTL_MOVE(0x1e, 0x6, 0xffffffffffffffff, 0xc, 0x4) mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) clone3$auto(&(0x7f00000000c0)={0x9, 0x2, 0x5, 0x5, 0x7542, 0xa3c2, 0x3ff, 0x4, 0x8, 0x10000, 0x4}, 0x10001) socket(0x25, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 3.991637094s ago: executing program 3 (id=118): keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x7, 0x7fff, 0xa, 0x10000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x1, 0x4, 0x9, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x2, 0x10000, 0xff, 0x7f) r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x101000, 0x0) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy17/long_retry_limit\x00', 0xa8000, 0x0) ioctl$auto(r0, 0x10000, r1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xb, 0x4, 0x4, 0x81) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x6, 0xb36, 0x6, 0x1) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '&/('}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xd}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x28008001) read$auto_long_retry_limit_ops_(r1, &(0x7f00000001c0)=""/4096, 0x1000) setsockopt$auto(r1, 0x7ff, 0x5, &(0x7f00000011c0)='nfc\x00', 0x2) syz_clone3(&(0x7f0000001440)={0x40102000, &(0x7f0000001200)=0xffffffffffffffff, &(0x7f0000001240), &(0x7f0000001280)=0x0, {0xd}, &(0x7f00000012c0)=""/56, 0x38, &(0x7f0000001300)=""/232, &(0x7f0000001400)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) process_madvise$auto_MADV_COLLAPSE(r3, &(0x7f0000001500)={&(0x7f00000014c0)="24bedc69439087784242e425044c5c", 0x3000000000}, 0x89, 0x19, 0xa) ioctl$auto(r0, 0x2, r3) read$auto_long_retry_limit_ops_(r1, &(0x7f0000001540)=""/145, 0x91) ioctl$auto(r0, 0x80000001, 0xffffffffffffffff) r5 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x200, 0x0) close_range$auto(r5, r1, 0x8) read$auto_long_retry_limit_ops_(r1, &(0x7f0000001640)=""/191, 0xbf) r6 = fsmount$auto(r5, 0x10000, 0x40) sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x800000}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DISCONNECT(r6, &(0x7f0000001c80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c40)={&(0x7f0000001880)={0x384, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_FTM_RESPONDER={0x360, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "0364d43867e7118692bac128e56a4ae7cbafe7cac7d8c3acb68866f43992772b8cbc57533e93bbe4548169838bd29d9b343e688ecb285903ca29684959140c7018c46e451ce1cca0e7e1be62ca293f2ff574217069ff38e09c11bac98371a1f94a4e96531e71937753a9c5dc07cd70e38a1e55d94fe408719d6c9100c35b6a10dd75a0b1044be0ed"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfe, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "515699d92e0f2cc1f78233487646bc0ba10811835d48305e08fa2f7900c6fb3df746b1350808cd4588675063e7ec5d0c23f612ce81897cbedee9d862a6832a62d90834d41a2cc9f8c4535b841941e2609617b56188759de50edd07f4c1425bdb1ed9ef7794b4b6bbe75186f7708c06aebbd97b1b0959dc1f0ead27bdfbcc413ce3f2c8b04815d0610a32c9027a3e8bda84b8d3749199939687dffcd840dd253e55a8acbc730bf719d3e33501bb07c12b8c9aebff38f53c54"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "6f247e548fbbc63c729fe98793107b5beed13286d78aea52a02f2d1f02c8d0fb614571d55153984d026fae783c266f5e222441302c149a118b1c2e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x49, 0x3, "3ba8f42dbdfbcf4d7cbf9bb5bbfbaf14a2b6e5fd72b676b280c3797a829528cd6fc2c4b2eba1c0458b8d9acfa69c8021ee4d43573158d0e72b78d061b389fa192b70e99bbd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3d, 0x3, "1ffb1a540aafe087c51402644e10bbcd583e48e488f94389a8c7efebf14a7e99897f0d52be53d0b3e8f9d45c41e8a1d2df62f36182a94ee55e"}, @NL80211_FTM_RESP_ATTR_LCI={0x44, 0x2, "51b4600db04303927775ed1e43e3813d50f0a7f4208dd23805fd855234ca7da8de7227b3942a151cf2ffa004deb71f511b0fe113f278190a0362ce9e7f16aab9"}]}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xffffffff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x384}, 0x1, 0x0, 0x0, 0x1}, 0x4400c005) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001d00), r6) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x14, r8, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x48800) msgctl$auto_IPC_RMID(0xa81e, 0x0, &(0x7f0000002000)={{0x0, 0xee01, 0xffffffffffffffff, 0x9, 0x7fff, 0x4, 0x74}, &(0x7f0000001f80)=0x7f, &(0x7f0000001fc0)=0x7, 0x7ff, 0xc000000000000, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x0, 0xfffb, 0x2, 0xd, @inferred=0xffffffffffffffff, @inferred=r4}) lstat$auto(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x7f, 0x2, 0x478, 0x7, 0xee00, 0xffffffffffffffff, 0x0, 0x40, 0x1ed, 0x7, 0x1, 0x8000, 0x80000000, 0x6, 0x3, 0x90000000000, 0x1a8}) capset$auto(&(0x7f0000002200)={0x3ff, r4}, &(0x7f0000002240)={0x401, 0xfff, 0x401}) 3.579490901s ago: executing program 2 (id=119): r0 = fanotify_init$auto(0xba, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) fanotify_mark$auto(r0, 0x205, 0x100002, 0x4, 0x0) read$auto_mon_fops_text_t_mon_text(r0, &(0x7f0000000200)=""/197, 0xc5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo/parameters/nodrop\x00', 0xa3182, 0x0) sendfile$auto(r2, r2, 0x0, 0x100000000) 3.407750363s ago: executing program 3 (id=120): mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x4102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xc, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400100, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, 0x8000006a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x4) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x201, 0x0) close_range$auto(0xffffffffffffffff, 0x8000, 0x0) unshare$auto(0x40000080) socket(0x1d, 0x801, 0xfffffffd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) setsockopt$auto(0xffffffffffffffff, 0x8003, 0x20, 0x0, 0x409) socket(0x2, 0x3, 0x6) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000180)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="e0f99bcc", 0xffffffff}, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.330211595s ago: executing program 0 (id=121): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty8\x00', 0x2b7600, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x1ffffffff, 0xfffdfffffffffffa, 0x1, 0x0, 0x6, 0x0, 0x7, 0x1224578b, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x7f, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010021bd7000fbdbd025020000000c0003000d0000ba0a9eecfd8c8a9aca0008b50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="0500"/14], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x10) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r3, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r4) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.type\x00', 0x1016c1, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400001, 0x1ff, 0x7, 0x22, 0x7185, 0x1ffd7, 0x7, 0x4, 0x9, 0x2, 0x3, 0x2, 0x6, 0xb4, 0x5, 0x8, 0x10003, 0x80, 0x4, 0x2, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) 3.250226907s ago: executing program 1 (id=122): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101480, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x55) shutdown$auto(0x200000003, 0x2) shutdown$auto(0x200000003, 0x0) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1p\x00', 0x20a02, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='y\x8c', 0x2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB="140e034d8ad74f84258b1bdc2c7859fe3d6146b0ff38359e7414a0b7705728cb7031cb70bc0778910b47c61c89992ae65167e09988acd93d4b51c8c0cc07b9d2b4c9bd590963eebf14c124665dcdd2697953e4ddc9b0596d9bce8067308040d2d1d82fc392c95f4b2c04a9d193c64eef36be9eb1a043256795a53230dd664d79a733c2f6cf95ec9326f6185c5da56d6e2ff6c31f99dd4fd0743ee121e70997686bae872dd9312193fb4ffdc7599d14399d68d20fa43923fa82773a53a01ad6f455e64f4419e3d93ece1ffe5564007b129425b7c096c4af29aa21ec975df35f5d35579e9e0afb75db5b34b751b1232b0b", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20008085}, 0x5e17c1cf55fb2282) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 3.141190536s ago: executing program 2 (id=123): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio14\x00', 0x80000, 0x0) ioctl$auto(r0, 0x80885659, r0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x541a, 0x0) (async) ioctl$auto_TCFLSH2(r1, 0x541a, 0x0) 2.444792113s ago: executing program 0 (id=124): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo/parameters/nodrop\x00', 0xa3182, 0x0) sendfile$auto(r0, r0, 0x0, 0x100000000) (fail_nth: 4) 1.743114581s ago: executing program 0 (id=125): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x6, 0xffffffffffffffff) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00"}, 0x6, 0x8, 0x7, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={@inferred=r5, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)="f4", 0x1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x22, 0x2, 0x4) getpeername$auto(0x3, 0x0, 0x0) add_key$auto(&(0x7f0000000040)='\xfe\xff$\x9aS8\x93\xa0\xde\xf3#y\xf9;\xe2B~j\x13\xa8\x83b\xc6hSP\xba', &(0x7f0000000000), 0x0, 0x7aef, 0x30) 1.209711599s ago: executing program 1 (id=126): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x13) 1.156823972s ago: executing program 2 (id=127): mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) r0 = epoll_create$auto(0x6) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio6\x00', 0x105041, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x500, 0x0, 0x4084c}, 0x20004010) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000180)={0x60, 0x4000000000000001, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x3, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) (async) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x80, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0x7) (async) iopl$auto(0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x2f2) clone$auto(0x6, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xfb3) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/pcm1p/sub3/hw_params\x00', 0x1900, 0x0) pread64$auto(r5, 0x0, 0xe, 0x100000000007) (async) read$auto(r4, 0x0, 0xe8) (async) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) 946.882561ms ago: executing program 1 (id=128): keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x7, 0x7fff, 0xa, 0x10000) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x1, 0x4, 0x9, 0x4) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x2, 0x10000, 0xff, 0x7f) r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x101000, 0x0) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy17/long_retry_limit\x00', 0xa8000, 0x0) ioctl$auto(r0, 0x10000, r1) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0xb, 0x4, 0x4, 0x81) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x6, 0xb36, 0x6, 0x1) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '&/('}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xd}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x28008001) read$auto_long_retry_limit_ops_(r1, &(0x7f00000001c0)=""/4096, 0x1000) setsockopt$auto(r1, 0x7ff, 0x5, &(0x7f00000011c0)='nfc\x00', 0x2) syz_clone3(&(0x7f0000001440)={0x40102000, &(0x7f0000001200)=0xffffffffffffffff, &(0x7f0000001240), &(0x7f0000001280)=0x0, {0xd}, &(0x7f00000012c0)=""/56, 0x38, &(0x7f0000001300)=""/232, &(0x7f0000001400)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) process_madvise$auto_MADV_COLLAPSE(r3, &(0x7f0000001500)={&(0x7f00000014c0)="24bedc69439087784242e425044c5c", 0x3000000000}, 0x89, 0x19, 0xa) ioctl$auto(r0, 0x2, r3) read$auto_long_retry_limit_ops_(r1, &(0x7f0000001540)=""/145, 0x91) ioctl$auto(r0, 0x80000001, 0xffffffffffffffff) r5 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000001600), 0x200, 0x0) close_range$auto(r5, r1, 0x8) read$auto_long_retry_limit_ops_(r1, &(0x7f0000001640)=""/191, 0xbf) r6 = fsmount$auto(r5, 0x10000, 0x40) sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x800000}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001840), r6) sendmsg$auto_NL80211_CMD_DISCONNECT(r6, &(0x7f0000001c80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c40)={&(0x7f0000001880)={0x384, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_FTM_RESPONDER={0x360, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "0364d43867e7118692bac128e56a4ae7cbafe7cac7d8c3acb68866f43992772b8cbc57533e93bbe4548169838bd29d9b343e688ecb285903ca29684959140c7018c46e451ce1cca0e7e1be62ca293f2ff574217069ff38e09c11bac98371a1f94a4e96531e71937753a9c5dc07cd70e38a1e55d94fe408719d6c9100c35b6a10dd75a0b1044be0ed"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfe, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xbc, 0x2, "515699d92e0f2cc1f78233487646bc0ba10811835d48305e08fa2f7900c6fb3df746b1350808cd4588675063e7ec5d0c23f612ce81897cbedee9d862a6832a62d90834d41a2cc9f8c4535b841941e2609617b56188759de50edd07f4c1425bdb1ed9ef7794b4b6bbe75186f7708c06aebbd97b1b0959dc1f0ead27bdfbcc413ce3f2c8b04815d0610a32c9027a3e8bda84b8d3749199939687dffcd840dd253e55a8acbc730bf719d3e33501bb07c12b8c9aebff38f53c54"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3f, 0x3, "6f247e548fbbc63c729fe98793107b5beed13286d78aea52a02f2d1f02c8d0fb614571d55153984d026fae783c266f5e222441302c149a118b1c2e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x49, 0x3, "3ba8f42dbdfbcf4d7cbf9bb5bbfbaf14a2b6e5fd72b676b280c3797a829528cd6fc2c4b2eba1c0458b8d9acfa69c8021ee4d43573158d0e72b78d061b389fa192b70e99bbd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3d, 0x3, "1ffb1a540aafe087c51402644e10bbcd583e48e488f94389a8c7efebf14a7e99897f0d52be53d0b3e8f9d45c41e8a1d2df62f36182a94ee55e"}, @NL80211_FTM_RESP_ATTR_LCI={0x44, 0x2, "51b4600db04303927775ed1e43e3813d50f0a7f4208dd23805fd855234ca7da8de7227b3942a151cf2ffa004deb71f511b0fe113f278190a0362ce9e7f16aab9"}]}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xffffffff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x384}, 0x1, 0x0, 0x0, 0x1}, 0x4400c005) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001d00), r6) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x14, r8, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x48800) msgctl$auto_IPC_RMID(0xa81e, 0x0, &(0x7f0000002000)={{0x0, 0xee01, 0xffffffffffffffff, 0x9, 0x7fff, 0x4, 0x74}, &(0x7f0000001f80)=0x7f, &(0x7f0000001fc0)=0x7, 0x7ff, 0xc000000000000, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x0, 0xfffb, 0x2, 0xd, @inferred=0xffffffffffffffff, @inferred=r4}) lstat$auto(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x7f, 0x2, 0x478, 0x7, 0xee00, 0xffffffffffffffff, 0x0, 0x40, 0x1ed, 0x7, 0x1, 0x8000, 0x80000000, 0x6, 0x3, 0x90000000000, 0x1a8}) capset$auto(&(0x7f0000002200)={0x3ff, r4}, &(0x7f0000002240)={0x401, 0xfff, 0x401}) 515.637844ms ago: executing program 3 (id=129): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) (fail_nth: 4) 513.969888ms ago: executing program 2 (id=130): mmap$auto(0x8, 0x20009, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000240)="e327262d36408e1c0cf4d9ac8a51616df660eb3e9a0234777d95", 0x1}, 0x3) 424.187547ms ago: executing program 0 (id=131): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = eventfd$auto(0x95f2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r2, 0x929, 0x70bd2c, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6) socketpair$auto(0x9, 0x2, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0xd08, 0x70bd25, 0x25dfdbfd, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x3}, @HSR_A_IFINDEX={0x8, 0x2, r5}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r7 = io_uring_setup$auto(0x5be538fe, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) bpf$auto(0x1, &(0x7f0000000540)=@bpf_attr_11={0x3, 0x800, 0xfff, 0x1, 0x9, 0x5, 0x9, r7}, 0x6f4) r8 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, &(0x7f0000000040), 0x5) prctl$auto_PR_SET_SECCOMP(0x16, 0x2, 0x81, 0x1, 0x10001) 2.071671ms ago: executing program 3 (id=132): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x28880, 0x0) mmap$auto(0x0, 0x2020009, 0x8, 0x16, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0xc1007c00, r0) r1 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x4) io_uring_enter$auto(r1, 0x7, 0x6, 0x8001, &(0x7f0000000140)="152d662ca66e2011aed9a2d41b084f651056a0bbe70b962da2e682148cdcf7700e5ee28d94433737d68b861fc395385c42ef76ad70a4", 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) futex_wake$auto(&(0x7f0000000200)="adf3e16812f6f5afb301a83c3e098ae6c14379abb19459777c9f29ea8f0ec815d90cb26527362c618a1a960f372eb096f067238768b5e2e893698c7dccb67fe2ef8c4519f9e469a945cb59c9c045c75c51438fe1b0f2d544038aa5333555e36e", 0x8, 0x6, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x7, 0x402000d, 0xdf, 0x15, r2, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30080, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288602, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x8, 0x2020009, 0x3, 0xeb1, r3, 0x8000) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r5 = open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) write$auto_trace_options_fops_trace(r5, &(0x7f00000001c0)="2adce9349262", 0x6) r6 = syz_clone(0x80, &(0x7f0000000080)="22680559f5d498e9fed91bf608db513d4f141e395ea4ad1c7bd2ddd61e6b8a7b85becec1d4cf87d470057e1410d4f116149bee66761f7704e34a67689010b1903a3a2d087940ac39405b3bfe7a7f0d4a1ae9a70ec1064d59747a4c597ab214d2235c9e8c4e5af02e88064fecefa21158b1fadd00d3c9908633d454046f460e2680c7eac9be44d4d0f8635e1fc0dbda659f407133a466079b4dd6183b7c461963edd178be468e5d173844d118640201bc36fef6e7d07db0517281e6c5da7e74520f7feeb946d53767ba8e2a6db174475614d5e2044934320c3390b02f4a94eb22053b58a854bd02a305c93641a3bbb1128f9053", 0xf3, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="4c5fe6e9bab2daffa04e5b7788e62c5fc463aa493951565ffd271f8fb39901bc22ea48c7747b561d94706059c9f6105392745bbb14103e1f9884eabf7bb6999e7627170265ad99e469539fbee837a0a1a600e6a3273c8ebada90b2835cfabb999af547e0e1f3d76eb4af491f75038adb1bf24fe2b840add02f000a554f56ceb2df93b81a53a8ecb4d699b0e1f728f30107be27cfd65d21d3cec32ad0e7efb3f54ea7ad9f725fe9b8de3e5402438a84d108abfd9a01bc6a") fcntl$auto(0x3, 0x4e34d, r6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x4) 0s ago: executing program 1 (id=133): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty8\x00', 0x2b7600, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x1ffffffff, 0xfffdfffffffffffa, 0x1, 0x0, 0x6, 0x0, 0x7, 0x1224578b, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x7f, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010021bd7000fbdbd025020000000c0003000d0000ba0a9eecfd8c8a9aca0008b50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="0500"/14], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x10) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r3, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r4) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.type\x00', 0x1016c1, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400001, 0x1ff, 0x7, 0x22, 0x7185, 0x1ffd7, 0x7, 0x4, 0x9, 0x2, 0x3, 0x2, 0x6, 0xb4, 0x5, 0x8, 0x10003, 0x80, 0x4, 0x2, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 98.571591][ T5821] cgroup: Unknown subsys name 'net' [ 98.706478][ T5821] cgroup: Unknown subsys name 'cpuset' [ 98.716622][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.601089][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.244468][ T10] cfg80211: failed to load regulatory.db [ 102.979736][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.988618][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.997280][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.005805][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.015218][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.023702][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.031507][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.038252][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.040011][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.057807][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.065700][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.066412][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.074221][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.081956][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.091102][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.095609][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.105393][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.109048][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.125692][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.134643][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.753798][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 103.848868][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 103.923726][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.010111][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 104.080037][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.089055][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.099449][ T5831] bridge_slave_0: entered allmulticast mode [ 104.107112][ T5831] bridge_slave_0: entered promiscuous mode [ 104.159131][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.166580][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.174168][ T5831] bridge_slave_1: entered allmulticast mode [ 104.181612][ T5831] bridge_slave_1: entered promiscuous mode [ 104.241325][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.250789][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.258287][ T5833] bridge_slave_0: entered allmulticast mode [ 104.267305][ T5833] bridge_slave_0: entered promiscuous mode [ 104.304144][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.311488][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.319078][ T5833] bridge_slave_1: entered allmulticast mode [ 104.326523][ T5833] bridge_slave_1: entered promiscuous mode [ 104.386268][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.401325][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.429303][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.485056][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.507700][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.515306][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.522836][ T5835] bridge_slave_0: entered allmulticast mode [ 104.530216][ T5835] bridge_slave_0: entered promiscuous mode [ 104.538482][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.548247][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.555571][ T5832] bridge_slave_0: entered allmulticast mode [ 104.563240][ T5832] bridge_slave_0: entered promiscuous mode [ 104.600932][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.608505][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.615942][ T5835] bridge_slave_1: entered allmulticast mode [ 104.623568][ T5835] bridge_slave_1: entered promiscuous mode [ 104.630551][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.639528][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.647702][ T5832] bridge_slave_1: entered allmulticast mode [ 104.655999][ T5832] bridge_slave_1: entered promiscuous mode [ 104.665979][ T5831] team0: Port device team_slave_0 added [ 104.676873][ T5833] team0: Port device team_slave_0 added [ 104.732783][ T5831] team0: Port device team_slave_1 added [ 104.740823][ T5833] team0: Port device team_slave_1 added [ 104.753007][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.766566][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.849092][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.863640][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.874135][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.881116][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.908037][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.922535][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.929628][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.955670][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.026851][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.034849][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.061605][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.076060][ T5835] team0: Port device team_slave_0 added [ 105.103945][ T5832] team0: Port device team_slave_0 added [ 105.110970][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.118292][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.123364][ T51] Bluetooth: hci2: command tx timeout [ 105.149372][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.150900][ T5843] Bluetooth: hci3: command tx timeout [ 105.175190][ T5835] team0: Port device team_slave_1 added [ 105.199562][ T5832] team0: Port device team_slave_1 added [ 105.202079][ T5843] Bluetooth: hci1: command tx timeout [ 105.211189][ T51] Bluetooth: hci0: command tx timeout [ 105.303438][ T5831] hsr_slave_0: entered promiscuous mode [ 105.310101][ T5831] hsr_slave_1: entered promiscuous mode [ 105.334552][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.341561][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.367800][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.386734][ T5833] hsr_slave_0: entered promiscuous mode [ 105.393843][ T5833] hsr_slave_1: entered promiscuous mode [ 105.400053][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.408350][ T5833] Cannot create hsr debugfs directory [ 105.437493][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.446134][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.472465][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.486603][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.493682][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.519663][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.531953][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.538966][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.565619][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.793114][ T5832] hsr_slave_0: entered promiscuous mode [ 105.799771][ T5832] hsr_slave_1: entered promiscuous mode [ 105.806831][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.815169][ T5832] Cannot create hsr debugfs directory [ 105.833976][ T5835] hsr_slave_0: entered promiscuous mode [ 105.840997][ T5835] hsr_slave_1: entered promiscuous mode [ 105.847570][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.855407][ T5835] Cannot create hsr debugfs directory [ 106.202775][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.231626][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.245366][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.282233][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.355788][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.371261][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.386419][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.418305][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.515555][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.535645][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.569018][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.602052][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.679259][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.708235][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.721607][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.744038][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.774172][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.863551][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.900794][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.908203][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.925939][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.949931][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.957174][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.005552][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.025632][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.068154][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.075428][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.110147][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.126514][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.133896][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.158242][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.165513][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.205288][ T51] Bluetooth: hci2: command tx timeout [ 107.210787][ T51] Bluetooth: hci3: command tx timeout [ 107.236317][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.243585][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.282073][ T51] Bluetooth: hci0: command tx timeout [ 107.287575][ T51] Bluetooth: hci1: command tx timeout [ 107.401403][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.508514][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.534706][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.542015][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.568401][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.575691][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.884229][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.018597][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.040423][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.058695][ T5831] veth0_vlan: entered promiscuous mode [ 108.088444][ T5831] veth1_vlan: entered promiscuous mode [ 108.203432][ T5832] veth0_vlan: entered promiscuous mode [ 108.224921][ T5831] veth0_macvtap: entered promiscuous mode [ 108.260722][ T5831] veth1_macvtap: entered promiscuous mode [ 108.288484][ T5832] veth1_vlan: entered promiscuous mode [ 108.317347][ T5833] veth0_vlan: entered promiscuous mode [ 108.334664][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.365698][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.398314][ T5833] veth1_vlan: entered promiscuous mode [ 108.412148][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.453772][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.464542][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.474759][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.484226][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.510136][ T5835] veth0_vlan: entered promiscuous mode [ 108.518945][ T5832] veth0_macvtap: entered promiscuous mode [ 108.549372][ T5835] veth1_vlan: entered promiscuous mode [ 108.569907][ T5832] veth1_macvtap: entered promiscuous mode [ 108.638249][ T5833] veth0_macvtap: entered promiscuous mode [ 108.679130][ T5833] veth1_macvtap: entered promiscuous mode [ 108.698117][ T5835] veth0_macvtap: entered promiscuous mode [ 108.737420][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.754833][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.759835][ T5835] veth1_macvtap: entered promiscuous mode [ 108.770603][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.787516][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.827333][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.838929][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.848070][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.857203][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.897615][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.905818][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.920542][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.949584][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.997268][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.018836][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.040494][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.051524][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.060438][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.084273][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.103418][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.143687][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.153184][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.162621][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.171398][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.256737][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.279714][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.287820][ T5843] Bluetooth: hci2: command tx timeout [ 109.295010][ T51] Bluetooth: hci3: command tx timeout [ 109.364496][ T5843] Bluetooth: hci0: command tx timeout [ 109.370099][ T51] Bluetooth: hci1: command tx timeout [ 109.458430][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.475406][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.609996][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.638758][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.799345][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.809808][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.865117][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.873610][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.886957][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.008353][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.034024][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.355694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.422245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.706966][ T5939] mmap: syz.3.4 (5939) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.813499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.814384][ T5945] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.883156][ T5945] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.386856][ T51] Bluetooth: hci3: command tx timeout [ 111.392844][ T51] Bluetooth: hci2: command tx timeout [ 111.403004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.411579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.452394][ T51] Bluetooth: hci1: command tx timeout [ 111.455428][ T5843] Bluetooth: hci0: command tx timeout [ 111.594966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.891900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 111.995429][ T5963] program syz.3.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.194487][ T5963] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.301513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.352399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.361879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.128112][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8'. [ 115.932882][ T5997] FAULT_INJECTION: forcing a failure. [ 115.932882][ T5997] name failslab, interval 1, probability 0, space 0, times 1 [ 115.992005][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.2.13 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 115.992046][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.992067][ T5997] Call Trace: [ 115.992077][ T5997] [ 115.992090][ T5997] dump_stack_lvl+0x16c/0x1f0 [ 115.992143][ T5997] should_fail_ex+0x512/0x640 [ 115.992182][ T5997] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 115.992234][ T5997] should_failslab+0xc2/0x120 [ 115.992260][ T5997] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.992301][ T5997] ? lockdep_init_map_type+0x5c/0x280 [ 115.992336][ T5997] ? seq_open+0x55/0x170 [ 115.992366][ T5997] seq_open+0x55/0x170 [ 115.992393][ T5997] kernfs_fop_open+0x59f/0xda0 [ 115.992422][ T5997] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 115.992465][ T5997] do_dentry_open+0x744/0x1c10 [ 115.992512][ T5997] ? __pfx_kernfs_fop_open+0x10/0x10 [ 115.992553][ T5997] vfs_open+0x82/0x3f0 [ 115.992591][ T5997] path_openat+0x1de4/0x2cb0 [ 115.992651][ T5997] ? __pfx_path_openat+0x10/0x10 [ 115.992698][ T5997] ? __lock_acquire+0xb8a/0x1c90 [ 115.992744][ T5997] do_filp_open+0x20b/0x470 [ 115.992789][ T5997] ? __pfx_do_filp_open+0x10/0x10 [ 115.992885][ T5997] ? alloc_fd+0x471/0x7d0 [ 115.992952][ T5997] do_sys_openat2+0x11b/0x1d0 [ 115.992986][ T5997] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.993036][ T5997] __x64_sys_openat+0x174/0x210 [ 115.993072][ T5997] ? __pfx___x64_sys_openat+0x10/0x10 [ 115.993125][ T5997] do_syscall_64+0xcd/0x490 [ 115.993156][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.993187][ T5997] RIP: 0033:0x7fc16cd8e929 [ 115.993222][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.993248][ T5997] RSP: 002b:00007fc16db9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.993275][ T5997] RAX: ffffffffffffffda RBX: 00007fc16cfb5fa0 RCX: 00007fc16cd8e929 [ 115.993293][ T5997] RDX: 00000000000c0000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 115.993310][ T5997] RBP: 00007fc16ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.993326][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.993342][ T5997] R13: 0000000000000000 R14: 00007fc16cfb5fa0 R15: 00007fff4f04cd98 [ 115.993375][ T5997] [ 116.228645][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.844117][ T6027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18'. [ 119.096985][ T6027] blktrace: Concurrent blktraces are not allowed on ram7 [ 119.889699][ T6036] program syz.1.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.899291][ T6036] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 122.154754][ T6065] netlink: 'syz.2.26': attribute type 21 has an invalid length. [ 122.173613][ T6065] netlink: 334 bytes leftover after parsing attributes in process `syz.2.26'. [ 123.656462][ T6080] program syz.3.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.763995][ T6080] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.468667][ T6084] Zero length message leads to an empty skb [ 124.889628][ T6096] program syz.1.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.901608][ T6096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 125.366435][ T6091] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 125.732814][ T6104] program syz.3.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.759459][ T6104] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 126.000252][ T6108] FAULT_INJECTION: forcing a failure. [ 126.000252][ T6108] name failslab, interval 1, probability 0, space 0, times 0 [ 126.077762][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.1.33 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 126.077809][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.077827][ T6108] Call Trace: [ 126.077837][ T6108] [ 126.077849][ T6108] dump_stack_lvl+0x16c/0x1f0 [ 126.077902][ T6108] should_fail_ex+0x512/0x640 [ 126.077945][ T6108] ? __kmalloc_noprof+0xbf/0x510 [ 126.077992][ T6108] ? sk_prot_alloc+0x1a8/0x2a0 [ 126.078045][ T6108] should_failslab+0xc2/0x120 [ 126.078077][ T6108] __kmalloc_noprof+0xd2/0x510 [ 126.078135][ T6108] sk_prot_alloc+0x1a8/0x2a0 [ 126.078175][ T6108] sk_alloc+0x36/0xc20 [ 126.078223][ T6108] __netlink_create+0x5e/0x2c0 [ 126.078270][ T6108] ? __wake_up+0x3f/0x60 [ 126.078323][ T6108] netlink_create+0x39e/0x620 [ 126.078352][ T6108] ? __pfx_genl_bind+0x10/0x10 [ 126.078389][ T6108] ? __pfx_genl_unbind+0x10/0x10 [ 126.078423][ T6108] ? __pfx_genl_release+0x10/0x10 [ 126.078466][ T6108] __sock_create+0x338/0x8d0 [ 126.078514][ T6108] __sys_socket+0x14d/0x260 [ 126.078558][ T6108] ? __pfx___sys_socket+0x10/0x10 [ 126.078600][ T6108] ? do_user_addr_fault+0x843/0x1370 [ 126.078651][ T6108] __x64_sys_socket+0x72/0xb0 [ 126.078689][ T6108] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.078736][ T6108] do_syscall_64+0xcd/0x490 [ 126.078768][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.078801][ T6108] RIP: 0033:0x7fe62d590847 [ 126.078827][ T6108] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.078857][ T6108] RSP: 002b:00007fe62e487fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 126.078895][ T6108] RAX: ffffffffffffffda RBX: 00007fe62d7b5fa0 RCX: 00007fe62d590847 [ 126.078916][ T6108] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 126.078934][ T6108] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 126.078952][ T6108] R10: 0000200000000a00 R11: 0000000000000286 R12: 0000000000000000 [ 126.078970][ T6108] R13: 0000000000000000 R14: 00007fe62d7b5fa0 R15: 00007ffec4c38f88 [ 126.079010][ T6108] [ 126.290483][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.761285][ T6101] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 127.523410][ T6125] blktrace: Concurrent blktraces are not allowed on ram7 [ 128.233096][ T6132] program syz.1.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.286369][ T6132] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.636610][ T6128] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 130.978459][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.2.43'. [ 131.157060][ T6165] blktrace: Concurrent blktraces are not allowed on ram7 [ 132.542862][ T6183] program syz.1.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.589334][ T6183] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.045133][ T6180] blktrace: Concurrent blktraces are not allowed on ram7 [ 134.612959][ T6202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.51'. [ 134.903325][ T6204] blktrace: Concurrent blktraces are not allowed on ram7 [ 135.478562][ T6213] program syz.3.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.603276][ T6213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 137.059500][ T6230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.54'. [ 137.565518][ T6226] blktrace: Concurrent blktraces are not allowed on ram7 [ 138.154773][ T6244] netlink: 48 bytes leftover after parsing attributes in process `syz.2.58'. [ 138.304947][ T6244] blktrace: Concurrent blktraces are not allowed on ram7 [ 139.915284][ T6261] program syz.2.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.924772][ T6261] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.213316][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.219889][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.601634][ T6310] FAULT_INJECTION: forcing a failure. [ 143.601634][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 143.614712][ T6310] CPU: 0 UID: 0 PID: 6310 Comm: syz.3.69 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 143.614753][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.614770][ T6310] Call Trace: [ 143.614780][ T6310] [ 143.614791][ T6310] dump_stack_lvl+0x16c/0x1f0 [ 143.614845][ T6310] should_fail_ex+0x512/0x640 [ 143.614890][ T6310] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 143.614942][ T6310] should_failslab+0xc2/0x120 [ 143.614971][ T6310] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 143.615019][ T6310] ? alloc_empty_file+0x55/0x1e0 [ 143.615057][ T6310] alloc_empty_file+0x55/0x1e0 [ 143.615091][ T6310] path_openat+0xda/0x2cb0 [ 143.615134][ T6310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.615181][ T6310] ? __pfx_path_openat+0x10/0x10 [ 143.615229][ T6310] ? __lock_acquire+0xb8a/0x1c90 [ 143.615276][ T6310] do_filp_open+0x20b/0x470 [ 143.615323][ T6310] ? __pfx_do_filp_open+0x10/0x10 [ 143.615405][ T6310] ? alloc_fd+0x471/0x7d0 [ 143.615458][ T6310] do_sys_openat2+0x11b/0x1d0 [ 143.615492][ T6310] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.615533][ T6310] ? __fget_files+0x20e/0x3c0 [ 143.615581][ T6310] __x64_sys_openat+0x174/0x210 [ 143.615616][ T6310] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.615650][ T6310] ? ksys_write+0x1ac/0x250 [ 143.615706][ T6310] do_syscall_64+0xcd/0x490 [ 143.615737][ T6310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.615766][ T6310] RIP: 0033:0x7f38d5b8e929 [ 143.615789][ T6310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.615817][ T6310] RSP: 002b:00007f38d6a18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.615846][ T6310] RAX: ffffffffffffffda RBX: 00007f38d5db6320 RCX: 00007f38d5b8e929 [ 143.615865][ T6310] RDX: 0000000000000204 RSI: 0000200000001580 RDI: ffffffffffffff9c [ 143.615884][ T6310] RBP: 00007f38d6a18090 R08: 0000000000000000 R09: 0000000000000000 [ 143.615900][ T6310] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000001 [ 143.615917][ T6310] R13: 0000000000000001 R14: 00007f38d5db6320 R15: 00007ffe2baedb18 [ 143.615956][ T6310] [ 145.504377][ T6324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.72'. [ 145.652793][ T6324] blktrace: Concurrent blktraces are not allowed on ram7 [ 145.693830][ T6330] FAULT_INJECTION: forcing a failure. [ 145.693830][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 145.751865][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz.0.75 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 145.751906][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.751922][ T6330] Call Trace: [ 145.751931][ T6330] [ 145.751942][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 145.751998][ T6330] should_fail_ex+0x512/0x640 [ 145.752044][ T6330] ? __kvmalloc_node_noprof+0x124/0x620 [ 145.752094][ T6330] should_failslab+0xc2/0x120 [ 145.752121][ T6330] __kvmalloc_node_noprof+0x137/0x620 [ 145.752167][ T6330] ? seq_read_iter+0x826/0x12c0 [ 145.752202][ T6330] ? __lock_acquire+0xb8a/0x1c90 [ 145.752251][ T6330] ? seq_read_iter+0x826/0x12c0 [ 145.752284][ T6330] seq_read_iter+0x826/0x12c0 [ 145.752323][ T6330] ? __mutex_trylock_common+0xe9/0x250 [ 145.752377][ T6330] kernfs_fop_read_iter+0x40f/0x5a0 [ 145.752408][ T6330] ? rw_verify_area+0xcf/0x680 [ 145.752451][ T6330] vfs_read+0x8bf/0xc60 [ 145.752499][ T6330] ? __pfx___mutex_lock+0x10/0x10 [ 145.752549][ T6330] ? __pfx_vfs_read+0x10/0x10 [ 145.752618][ T6330] ksys_read+0x12a/0x250 [ 145.752660][ T6330] ? __pfx_ksys_read+0x10/0x10 [ 145.752716][ T6330] do_syscall_64+0xcd/0x490 [ 145.752747][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.752779][ T6330] RIP: 0033:0x7f740118e929 [ 145.752803][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.752832][ T6330] RSP: 002b:00007f740209f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.752865][ T6330] RAX: ffffffffffffffda RBX: 00007f74013b5fa0 RCX: 00007f740118e929 [ 145.752885][ T6330] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 145.752902][ T6330] RBP: 00007f740209f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.752919][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.752936][ T6330] R13: 0000000000000000 R14: 00007f74013b5fa0 R15: 00007ffe95a176f8 [ 145.752976][ T6330] [ 145.989348][ T6334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'. [ 146.017681][ T6334] netlink: 120 bytes leftover after parsing attributes in process `syz.2.77'. [ 146.432446][ T6343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.79'. [ 147.481910][ T6342] blktrace: Concurrent blktraces are not allowed on ram7 [ 148.104822][ T6358] syz.0.82 (6358) used greatest stack depth: 19800 bytes left [ 149.293671][ T6369] blktrace: Concurrent blktraces are not allowed on ram7 [ 150.636897][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 150.722588][ T6404] netlink: 350 bytes leftover after parsing attributes in process `syz.0.93'. [ 152.216360][ T6419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.96'. [ 152.899757][ T6418] blktrace: Concurrent blktraces are not allowed on ram7 [ 153.387715][ T6448] program syz.1.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.400105][ T6448] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.493720][ T6451] program syz.0.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.503399][ T6451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 153.690142][ T6456] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 153.755277][ T6434] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 154.365332][ T6465] FAULT_INJECTION: forcing a failure. [ 154.365332][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.491865][ T6465] CPU: 1 UID: 0 PID: 6465 Comm: syz.2.104 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 154.491906][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.491923][ T6465] Call Trace: [ 154.491933][ T6465] [ 154.491945][ T6465] dump_stack_lvl+0x16c/0x1f0 [ 154.491996][ T6465] should_fail_ex+0x512/0x640 [ 154.492046][ T6465] _copy_from_user+0x2e/0xd0 [ 154.492094][ T6465] kstrtouint_from_user+0xd6/0x1d0 [ 154.492132][ T6465] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 154.492167][ T6465] ? __lock_acquire+0xb8a/0x1c90 [ 154.492224][ T6465] proc_fail_nth_write+0x83/0x250 [ 154.492271][ T6465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.492320][ T6465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 154.492355][ T6465] vfs_write+0x29d/0x1150 [ 154.492405][ T6465] ? __pfx___mutex_lock+0x10/0x10 [ 154.492452][ T6465] ? __pfx_vfs_write+0x10/0x10 [ 154.492507][ T6465] ? __fget_files+0x20e/0x3c0 [ 154.492560][ T6465] ksys_write+0x12a/0x250 [ 154.492604][ T6465] ? __pfx_ksys_write+0x10/0x10 [ 154.492661][ T6465] do_syscall_64+0xcd/0x490 [ 154.492692][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.492723][ T6465] RIP: 0033:0x7fc16cd8d3df [ 154.492747][ T6465] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 154.492776][ T6465] RSP: 002b:00007fc16db7a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 154.492805][ T6465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16cd8d3df [ 154.492835][ T6465] RDX: 0000000000000001 RSI: 00007fc16db7a0a0 RDI: 0000000000000004 [ 154.492851][ T6465] RBP: 00007fc16db7a090 R08: 0000000000000000 R09: 0000000000000000 [ 154.492868][ T6465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 154.492884][ T6465] R13: 0000000000000001 R14: 00007fc16cfb6080 R15: 00007fff4f04cd98 [ 154.492922][ T6465] [ 155.695113][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.110'. [ 156.058441][ T6488] blktrace: Concurrent blktraces are not allowed on ram7 [ 156.781097][ T6496] blktrace: Concurrent blktraces are not allowed on ram7 [ 156.889766][ T6496] FAULT_INJECTION: forcing a failure. [ 156.889766][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 156.927173][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz.2.112 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 156.927226][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.927245][ T6496] Call Trace: [ 156.927254][ T6496] [ 156.927267][ T6496] dump_stack_lvl+0x16c/0x1f0 [ 156.927330][ T6496] should_fail_ex+0x512/0x640 [ 156.927381][ T6496] ? __kmalloc_noprof+0xbf/0x510 [ 156.927431][ T6496] ? constrain_params_by_rules+0x175/0xca0 [ 156.927473][ T6496] should_failslab+0xc2/0x120 [ 156.927503][ T6496] __kmalloc_noprof+0xd2/0x510 [ 156.927558][ T6496] ? lock_acquire+0x179/0x350 [ 156.927605][ T6496] constrain_params_by_rules+0x175/0xca0 [ 156.927645][ T6496] ? register_lock_class+0x41/0x4c0 [ 156.927688][ T6496] ? mark_held_locks+0x49/0x80 [ 156.927739][ T6496] ? __lock_acquire+0xb8a/0x1c90 [ 156.927784][ T6496] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 156.927835][ T6496] ? __mutex_trylock_common+0xe9/0x250 [ 156.927895][ T6496] ? rcu_is_watching+0x12/0xc0 [ 156.927927][ T6496] ? snd_interval_refine+0x2fa/0x580 [ 156.927983][ T6496] snd_pcm_hw_refine+0x7de/0xad0 [ 156.928037][ T6496] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 156.928114][ T6496] ? do_raw_spin_lock+0x12c/0x2b0 [ 156.928170][ T6496] ? mark_held_locks+0x49/0x80 [ 156.928223][ T6496] snd_pcm_hw_params+0x3e4/0x1b40 [ 156.928265][ T6496] ? snd_pcm_hw_param_last+0x306/0x710 [ 156.928302][ T6496] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 156.928344][ T6496] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 156.928392][ T6496] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 156.928437][ T6496] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 156.928480][ T6496] ? __asan_memset+0x23/0x50 [ 156.928529][ T6496] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 156.928575][ T6496] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 156.928638][ T6496] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 156.928717][ T6496] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 156.928767][ T6496] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 156.928809][ T6496] ? hook_file_ioctl_common+0x145/0x410 [ 156.928848][ T6496] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 156.928891][ T6496] ? __fget_files+0x20e/0x3c0 [ 156.928946][ T6496] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 156.928988][ T6496] __x64_sys_ioctl+0x18b/0x210 [ 156.929035][ T6496] do_syscall_64+0xcd/0x490 [ 156.929067][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.929108][ T6496] RIP: 0033:0x7fc16cd8e929 [ 156.929135][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.929170][ T6496] RSP: 002b:00007fc16db9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.929201][ T6496] RAX: ffffffffffffffda RBX: 00007fc16cfb5fa0 RCX: 00007fc16cd8e929 [ 156.929221][ T6496] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 156.929240][ T6496] RBP: 00007fc16ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.929269][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.929285][ T6496] R13: 0000000000000000 R14: 00007fc16cfb5fa0 R15: 00007fff4f04cd98 [ 156.929323][ T6496] [ 157.359295][ T6505] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.375672][ T6505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.756664][ T6499] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 158.156950][ T6515] netlink: 314 bytes leftover after parsing attributes in process `syz.2.115'. [ 159.215369][ T6532] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 159.453291][ T6538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.121'. [ 159.884595][ T6539] blktrace: Concurrent blktraces are not allowed on ram7 [ 160.024723][ T6544] process 'syz.2.123' launched ':,' with NULL argv: empty string added [ 160.260037][ T6554] FAULT_INJECTION: forcing a failure. [ 160.260037][ T6554] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 160.313402][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.0.124 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 160.313447][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.313464][ T6554] Call Trace: [ 160.313474][ T6554] [ 160.313485][ T6554] dump_stack_lvl+0x16c/0x1f0 [ 160.313540][ T6554] should_fail_ex+0x512/0x640 [ 160.313594][ T6554] should_fail_alloc_page+0xe7/0x130 [ 160.313626][ T6554] prepare_alloc_pages+0x3c2/0x610 [ 160.313685][ T6554] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 160.313731][ T6554] ? copy_splice_read+0x1a8/0xba0 [ 160.313768][ T6554] ? stack_trace_save+0x8e/0xc0 [ 160.313800][ T6554] ? __pfx_stack_trace_save+0x10/0x10 [ 160.313830][ T6554] ? stack_depot_save_flags+0x28/0xa40 [ 160.313878][ T6554] ? bpf_ksym_find+0x124/0x1c0 [ 160.313913][ T6554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.313960][ T6554] ? kasan_save_stack+0x33/0x60 [ 160.314002][ T6554] ? __kasan_kmalloc+0xaa/0xb0 [ 160.314044][ T6554] ? copy_splice_read+0x1a8/0xba0 [ 160.314077][ T6554] ? do_splice_read+0x282/0x370 [ 160.314108][ T6554] ? splice_direct_to_actor+0x2a1/0xa30 [ 160.314147][ T6554] ? do_splice_direct+0x174/0x240 [ 160.314180][ T6554] ? do_sendfile+0xb06/0xe50 [ 160.314220][ T6554] ? __x64_sys_sendfile64+0x1d8/0x220 [ 160.314244][ T6554] ? do_syscall_64+0xcd/0x490 [ 160.314299][ T6554] alloc_pages_bulk_noprof+0x71c/0x1410 [ 160.314359][ T6554] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 160.314422][ T6554] ? trace_kmalloc+0x2b/0xd0 [ 160.314453][ T6554] ? __kmalloc_noprof+0x242/0x510 [ 160.314510][ T6554] copy_splice_read+0x1e1/0xba0 [ 160.314555][ T6554] ? __pfx_copy_splice_read+0x10/0x10 [ 160.314600][ T6554] ? look_up_lock_class+0x59/0x150 [ 160.314650][ T6554] ? lockdep_init_map_type+0x5c/0x280 [ 160.314691][ T6554] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 160.314735][ T6554] ? __pfx_copy_splice_read+0x10/0x10 [ 160.314775][ T6554] do_splice_read+0x282/0x370 [ 160.314815][ T6554] splice_direct_to_actor+0x2a1/0xa30 [ 160.314859][ T6554] ? __pfx_direct_splice_actor+0x10/0x10 [ 160.314903][ T6554] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 160.314943][ T6554] ? get_pid_task+0xfc/0x250 [ 160.314995][ T6554] do_splice_direct+0x174/0x240 [ 160.315032][ T6554] ? __pfx_do_splice_direct+0x10/0x10 [ 160.315074][ T6554] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 160.315116][ T6554] ? rw_verify_area+0xcf/0x680 [ 160.315161][ T6554] do_sendfile+0xb06/0xe50 [ 160.315225][ T6554] ? __pfx_do_sendfile+0x10/0x10 [ 160.315286][ T6554] ? __fget_files+0x20e/0x3c0 [ 160.315335][ T6554] __x64_sys_sendfile64+0x1d8/0x220 [ 160.315365][ T6554] ? ksys_write+0x1ac/0x250 [ 160.315409][ T6554] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 160.315447][ T6554] do_syscall_64+0xcd/0x490 [ 160.315480][ T6554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.315509][ T6554] RIP: 0033:0x7f740118e929 [ 160.315531][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.315557][ T6554] RSP: 002b:00007f740209f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 160.315588][ T6554] RAX: ffffffffffffffda RBX: 00007f74013b5fa0 RCX: 00007f740118e929 [ 160.315605][ T6554] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 160.315622][ T6554] RBP: 00007f740209f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.315637][ T6554] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.315653][ T6554] R13: 0000000000000000 R14: 00007f74013b5fa0 R15: 00007ffe95a176f8 [ 160.315694][ T6554] [ 161.242289][ T6562] program syz.0.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.312006][ T6562] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 161.598595][ T6558] snd_aloop snd_aloop.0: control 1:262152:7:ͺΈθ:0 is already present [ 162.218186][ T6583] FAULT_INJECTION: forcing a failure. [ 162.218186][ T6583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.272703][ T6583] CPU: 1 UID: 0 PID: 6583 Comm: syz.3.129 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 162.272746][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.272763][ T6583] Call Trace: [ 162.272773][ T6583] [ 162.272784][ T6583] dump_stack_lvl+0x16c/0x1f0 [ 162.272837][ T6583] should_fail_ex+0x512/0x640 [ 162.272886][ T6583] _copy_to_user+0x32/0xd0 [ 162.272938][ T6583] simple_read_from_buffer+0xcb/0x170 [ 162.272980][ T6583] proc_fail_nth_read+0x197/0x270 [ 162.273017][ T6583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.273055][ T6583] ? rw_verify_area+0xcf/0x680 [ 162.273088][ T6583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.273117][ T6583] vfs_read+0x1e4/0xc60 [ 162.273154][ T6583] ? __pfx___mutex_lock+0x10/0x10 [ 162.273199][ T6583] ? __pfx_vfs_read+0x10/0x10 [ 162.273245][ T6583] ? __fget_files+0x20e/0x3c0 [ 162.273294][ T6583] ksys_read+0x12a/0x250 [ 162.273326][ T6583] ? __pfx_ksys_read+0x10/0x10 [ 162.273364][ T6583] ? fput+0x70/0xf0 [ 162.273393][ T6583] do_syscall_64+0xcd/0x490 [ 162.273416][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.273443][ T6583] RIP: 0033:0x7f38d5b8d33c [ 162.273464][ T6583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.273488][ T6583] RSP: 002b:00007f38d6a9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.273511][ T6583] RAX: ffffffffffffffda RBX: 00007f38d5db5fa0 RCX: 00007f38d5b8d33c [ 162.273529][ T6583] RDX: 000000000000000f RSI: 00007f38d6a9c0a0 RDI: 0000000000000004 [ 162.273543][ T6583] RBP: 00007f38d6a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 162.273559][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.273575][ T6583] R13: 0000000000000000 R14: 00007f38d5db5fa0 R15: 00007ffe2baedb18 [ 162.273611][ T6583] [ 162.627215][ T6593] ================================================================== [ 162.635357][ T6593] BUG: KASAN: wild-memory-access in get_futex_key+0x595/0x1540 [ 162.642987][ T6593] Read of size 8 at addr 1fffffff86a6f560 by task syz.3.132/6593 [ 162.650767][ T6593] [ 162.653146][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.3.132 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 162.653190][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.653208][ T6593] Call Trace: [ 162.653219][ T6593] [ 162.653231][ T6593] dump_stack_lvl+0x116/0x1f0 [ 162.653287][ T6593] kasan_report+0xe0/0x110 [ 162.653319][ T6593] ? get_futex_key+0x595/0x1540 [ 162.653359][ T6593] kasan_check_range+0x100/0x1b0 [ 162.653396][ T6593] get_futex_key+0x595/0x1540 [ 162.653433][ T6593] ? __pfx_get_futex_key+0x10/0x10 [ 162.653472][ T6593] ? do_futex+0x122/0x350 [ 162.653512][ T6593] futex_wake+0xea/0x530 [ 162.653554][ T6593] ? find_held_lock+0x2b/0x80 [ 162.653586][ T6593] ? __pfx_futex_wake+0x10/0x10 [ 162.653634][ T6593] ? xfd_validate_state+0x61/0x180 [ 162.653680][ T6593] __x64_sys_futex_wake+0x23d/0x2b0 [ 162.653723][ T6593] do_syscall_64+0xcd/0x490 [ 162.653753][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.653787][ T6593] RIP: 0033:0x7f38d5b8e929 [ 162.653812][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.653843][ T6593] RSP: 002b:00007f38d6a9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 162.653873][ T6593] RAX: ffffffffffffffda RBX: 00007f38d5db5fa0 RCX: 00007f38d5b8e929 [ 162.653893][ T6593] RDX: 0000000000000006 RSI: 0000000000000008 RDI: 0000200000000200 [ 162.653912][ T6593] RBP: 00007f38d5c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 162.653930][ T6593] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 162.653948][ T6593] R13: 0000000000000000 R14: 00007f38d5db5fa0 R15: 00007ffe2baedb18 [ 162.653996][ T6593] [ 162.654007][ T6593] ================================================================== [ 162.938529][ T6596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.133'. [ 163.012014][ T6593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.019311][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.3.132 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 163.031388][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.041496][ T6593] Call Trace: [ 163.044827][ T6593] [ 163.047800][ T6593] dump_stack_lvl+0x3d/0x1f0 [ 163.052463][ T6593] panic+0x71c/0x800 [ 163.056431][ T6593] ? __pfx_panic+0x10/0x10 [ 163.060905][ T6593] ? rcu_is_watching+0x12/0xc0 [ 163.065734][ T6593] ? irqentry_exit+0x3b/0x90 [ 163.070448][ T6593] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.075735][ T6593] ? preempt_schedule_thunk+0x16/0x30 [ 163.081182][ T6593] ? get_futex_key+0x595/0x1540 [ 163.086088][ T6593] ? preempt_schedule_common+0x44/0xc0 [ 163.091619][ T6593] ? get_futex_key+0x595/0x1540 [ 163.096524][ T6593] check_panic_on_warn+0xab/0xb0 [ 163.101548][ T6593] end_report+0x107/0x170 [ 163.105968][ T6593] kasan_report+0xee/0x110 [ 163.110429][ T6593] ? get_futex_key+0x595/0x1540 [ 163.115351][ T6593] kasan_check_range+0x100/0x1b0 [ 163.120342][ T6593] get_futex_key+0x595/0x1540 [ 163.125075][ T6593] ? __pfx_get_futex_key+0x10/0x10 [ 163.130245][ T6593] ? do_futex+0x122/0x350 [ 163.134636][ T6593] futex_wake+0xea/0x530 [ 163.138961][ T6593] ? find_held_lock+0x2b/0x80 [ 163.143698][ T6593] ? __pfx_futex_wake+0x10/0x10 [ 163.148620][ T6593] ? xfd_validate_state+0x61/0x180 [ 163.153796][ T6593] __x64_sys_futex_wake+0x23d/0x2b0 [ 163.159056][ T6593] do_syscall_64+0xcd/0x490 [ 163.163612][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.169554][ T6593] RIP: 0033:0x7f38d5b8e929 [ 163.174011][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.193664][ T6593] RSP: 002b:00007f38d6a9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 163.202143][ T6593] RAX: ffffffffffffffda RBX: 00007f38d5db5fa0 RCX: 00007f38d5b8e929 [ 163.210157][ T6593] RDX: 0000000000000006 RSI: 0000000000000008 RDI: 0000200000000200 [ 163.218170][ T6593] RBP: 00007f38d5c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.226187][ T6593] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 163.234204][ T6593] R13: 0000000000000000 R14: 00007f38d5db5fa0 R15: 00007ffe2baedb18 [ 163.242246][ T6593] [ 163.245629][ T6593] Kernel Offset: disabled [ 163.249973][ T6593] Rebooting in 86400 seconds..