last executing test programs: 10.646031799s ago: executing program 2 (id=1080): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, 0x0, 0x87) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) unshare$auto(0x40000080) 9.723034645s ago: executing program 0 (id=1082): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0xf, 0x3, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/53, 0x35) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x20c2417c, 0xffffffffffffffff, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) select$auto(0x0, &(0x7f0000000140)={[0x8, 0x5, 0xfffffffffffff801, 0x80000000, 0xf47, 0x8, 0x1, 0x1, 0x3, 0x100000001, 0x5b, 0x3ff, 0x2, 0x100000001, 0x9, 0x2]}, &(0x7f0000000240)={[0x3, 0x5, 0xf1d6, 0xfff, 0x8e, 0x2, 0x1, 0x100, 0x7, 0x1, 0x8, 0x6, 0x3ff, 0x6, 0x9, 0x4]}, &(0x7f00000002c0)={[0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x100000001, 0x16, 0x8, 0x4, 0xe, 0x3, 0xc, 0x4, 0x401, 0x6]}, &(0x7f00000000c0)={0x6, 0x8000}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 8.973573073s ago: executing program 3 (id=1084): madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) pipe$auto(0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) socket(0x2, 0x80002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='wg0\x00', 0x2) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x10401, r4, @relative_fd=r5, 0xe600}, 0xf) socket(0x15, 0x5, 0x0) 8.535216298s ago: executing program 0 (id=1085): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0x1d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0400bc800400748008000600b1000080000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) 8.41021302s ago: executing program 3 (id=1086): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0x1d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7000fddbdf252100000008000300af68d7956d0e12b212fa31110206459923d93e6ac69cce53b4f17957f97d0888d3fc2a139bad4d479d0383a58d9c82954826b4ec217d039b9e2d26b898b0f01175c08b0e8e1bafc3d71a60d2d5a4c2ffff9c638e0e75d940d2d21cde82df6eb15a85d40400000000000000ed65de246ef405687508740d590b761637da70307a335baf636f57ef852d496c7923dd16c0b80f9148c0b12cf62785a4ded3da9213da18e88339dd5856b7d70b5508ff733d5e4802cbb4e2e8127e2a50c7699688b50b20c8608170904fa1b2ba3e7b4775c044684beed53af268cf0e74160c43de2b526249f6347a7b1eb7ca4f2384024f7c9106a204cebee50f46936385", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0400bc800400748008000600b1000080000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) 7.314533247s ago: executing program 3 (id=1087): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8013) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0d, 0xe, 0x3, 0x4, 0x80000033, 0xfff, 0x6d3e, 0x9, 0x8, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r2, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) 7.313981434s ago: executing program 1 (id=1095): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x18, r0, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000874}, 0x8c0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) getrandom$auto(0x0, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r4, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80840, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) 7.313456915s ago: executing program 2 (id=1088): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mlockall$auto(0x7) modify_ldt$auto(0x1, 0x0, 0x10) getrandom$auto(0x0, 0x5, 0x80003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x58c) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x129, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5a88314c8e109829}, 0x14) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x10000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 7.289256085s ago: executing program 0 (id=1089): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000040)='{\x00', 0xfff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r2, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/video30/dev_debug\x00', 0x129102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x5, 0x40009, 0xe0, 0x9b72, 0xffffffffffffffff, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop2\x00', 0x200000, 0x0) open(0x0, 0x161342, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) 6.82232295s ago: executing program 1 (id=1090): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0x6, 0x80000, 0x800) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x800, &(0x7f0000000500)={[0x7, 0x80000001, 0x8, 0x7, 0x2, 0x4, 0x155, 0x8, 0x6, 0x5, 0x7, 0x5, 0x9ad, 0x3, 0x8, 0x6]}, &(0x7f0000000580)={[0x3, 0x3ff, 0x101, 0x5, 0x8, 0x40, 0xb7, 0x6e6, 0x9, 0x3ff, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0x7]}, &(0x7f0000000600)={[0x6, 0x0, 0x0, 0x4, 0x282, 0xb1, 0x8, 0x8, 0xfffffffffffffff9, 0x9, 0xfffffffffffffffc, 0x3, 0x3, 0x9f5, 0x0, 0x111]}, &(0x7f0000000340)={0x10000, 0x4}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xd, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) sendto$auto(r4, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, 0x0, 0x3f}, 0x36) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="d47b1cab1fd31e0d040047f1", @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf25060000000c001100657468746f6f6c000800060002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x440440d4) r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 5.678695789s ago: executing program 0 (id=1091): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = getpid() r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xca406, 0x0) pwritev2$auto(r4, &(0x7f00000003c0)={0x0, 0x200}, 0x8000000000000004, 0xffffffffffffffff, 0x4, 0x8) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) bpf$auto(0x0, 0x0, 0x6f3) ioctl$auto_BLKIOMIN(r2, 0x1278, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mlockall$auto(0x3) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r5) semctl$auto_IPC_INFO(0xffc9, 0xfffff801, 0x3, 0xfffffffffffffffa) mlockall$auto(0x5) 5.678110947s ago: executing program 3 (id=1092): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 5.551914901s ago: executing program 1 (id=1093): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5cedd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r1, 0x402c542d, 0x38) getpid() mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto_PTRACE_SINGLEBLOCK(0x21, r3, 0x7, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 5.358930424s ago: executing program 2 (id=1094): socket(0x2, 0x800, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0xf, 0x3, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/53, 0x35) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x20c2417c, 0xffffffffffffffff, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) select$auto(0x0, &(0x7f0000000140)={[0x8, 0x5, 0xfffffffffffff801, 0x80000000, 0xf47, 0x8, 0x1, 0x1, 0x3, 0x100000001, 0x5b, 0x3ff, 0x2, 0x100000001, 0x9, 0x2]}, &(0x7f0000000240)={[0x3, 0x5, 0xf1d6, 0xfff, 0x8e, 0x2, 0x1, 0x100, 0x7, 0x1, 0x8, 0x6, 0x3ff, 0x6, 0x9, 0x4]}, &(0x7f00000002c0)={[0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x100000001, 0x16, 0x8, 0x4, 0xe, 0x3, 0xc, 0x4, 0x401, 0x6]}, &(0x7f00000000c0)={0x6, 0x8000}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 3.736773464s ago: executing program 1 (id=1096): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0x1d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2f212cbd7000fddbdf252100000008000300af68d7956d0e12b212fa31110206459923d93e6ac69cce53b4f17957f97d0888d3fc2a139bad4d479d0383a58d9c82954826b4ec217d039b9e2d26b898b0f01175c08b0e8e1bafc3d71a60d2d5a4c2ffff9c638e0e75d940d2d21cde82df6eb15a85d40400000000000000ed65de246ef405687508740d590b761637da70307a335baf636f57ef852d496c7923dd16c0b80f9148c0b12cf62785a4ded3da9213da18e88339dd5856b7d70b5508ff733d5e4802cbb4e2e8127e2a50c7699688b50b20c8608170904fa1b2ba3e7b4775c044684beed53af268cf0e74160c43de2b526249f6347a7b1eb7ca4f2384024f7c9106a204cebee50f46936385", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0400bc800400748008000600b1000080000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) 3.5740535s ago: executing program 3 (id=1097): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) msgctl$auto_IPC_SET(0x8d0b, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0xee01, 0xd11, 0xfffffff9, 0x1, 0x7}, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0xb7, 0xfffffffffffffffa, 0x58, 0x1, 0x8, 0x9, 0x4f, 0x2000, 0x7f, @inferred, @raw=0x1e80}) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port7/location\x00', 0x0, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20a301, 0x0) r1 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xfffffffffffff3f0, &(0x7f00000003c0)="b5e8ae3241f47aa8e8e3b4f8675786ccca5547373c1711f0956b0f7222958097946f7452dd539d864223b1b3167221c7a7ff5db865abbe8367db846c84aa518e") openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10400, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000004c0)={0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ram14\x00', 0x729102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:12/power/runtime_suspended_time\x00', 0x200, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) pread64$auto(r0, &(0x7f0000000280)=':$\x99%^(+]\'\\!\x00', 0x2, 0x6) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x103, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x2, 0xec, 0x4, 0x2, 0x1, 0x4, 0xfffffffffffffff8}) r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x4800, 0x0) read$auto_tracing_fops_trace(r3, &(0x7f0000000440)=""/219, 0xdb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 3.527198061s ago: executing program 2 (id=1098): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r1, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r2, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) write$auto(r3, 0x0, 0xfffffdef) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 1.945389172s ago: executing program 0 (id=1099): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0180, 0x0) socket(0x1e, 0x1, 0x2000a) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, r1, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x48) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.7/usb24/bDeviceClass\x00', 0x105580, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r5 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) poll$auto(&(0x7f0000000280)={r5, 0xf06d, 0x4}, 0x80, 0x5) 1.944385142s ago: executing program 1 (id=1107): socket(0x2, 0x800, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0xf, 0x3, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/53, 0x35) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x20c2417c, 0xffffffffffffffff, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) select$auto(0x0, &(0x7f0000000140)={[0x8, 0x5, 0xfffffffffffff801, 0x80000000, 0xf47, 0x8, 0x1, 0x1, 0x3, 0x100000001, 0x5b, 0x3ff, 0x2, 0x100000001, 0x9, 0x2]}, &(0x7f0000000240)={[0x3, 0x5, 0xf1d6, 0xfff, 0x8e, 0x2, 0x1, 0x100, 0x7, 0x1, 0x8, 0x6, 0x3ff, 0x6, 0x9, 0x4]}, &(0x7f00000002c0)={[0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x100000001, 0x16, 0x8, 0x4, 0xe, 0x3, 0xc, 0x4, 0x401, 0x6]}, &(0x7f00000000c0)={0x6, 0x8000}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1.94048269s ago: executing program 2 (id=1108): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[@ANYBLOB="36c29976", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf250300000038121c8084100580801000802400048008000200070000000c00030005000000000000000400050004000500040005004700010015498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f800040004800800048004000500041001001fb5becd41368ab779a0b29218e67556fc4604877ebfcbd398c11fb77c35a8bf6e74ddc9b04a9138098aecf779ea7e3d541edf3023425cada97c0dc587c6fa47716dd359907f0a162a0b886614c1a7e9546da002cc83e2ed566b0379129f985c460fbbf435e700a4b5580b8a56632571928f8f21f4d11364a0ef75b476ff3956f1c7da142f79c10a4876ffcc63f2d86a0e69b888fc4f296dee02ad8557cdbfb9f0235a183eca304867b40759629cbc72b1502c43b99766ba6d68b0c0ab3c3f028eac0d0571801e5df2a1d739c243a58bf16cfb3859743e905b7ba869f46438f8ae3034bf72d5e80c5484943de2b70c62ef38e5219cc8006f282faca545419374470f9a70397a1f81bc4623e08269594bbebf9b08b81b87ccaebf876dcaf1fa4562e3163b353cb8ff91dba36cfd929ec300388d9224fe45abcc42e157398da0642301b14d590dd9a490eeb4555c64ae48caedffd84b246834f69dfa63f173ce93ba2775a6f4aba2492fe9d62fcae89dab6719935a28c2d614d93e984df4b3a292e0e5d6754a30e52d52b951092a4df3b6abb5c8b74740d551a77c41d02f0ea667e8acb61eac844c20151dac7c08ae95aed291d11cd81365501d3fb0120e11566f94afe38fb008e05536f93364d00a43b8f486bd9aeed50d5a38947982f5f700f06aa7d6783f30abda22a3c9948a274bfae36f6a66c3229520089d65cbddde93a28dd2a72e93bc6c0d9b98f49c9d771f73b1d4dcb6c06829b15422f0c596401ba563a88ded070e2a05a79c8070085502fb3ca34fc767ff2d3b490bb9a6abc3019eefaa4bd9f345f6b94d597166754c5f95140dc5fa9ce51a7cc3257885d074c7cdfd88bb400fd6dbe2d4a830134967cacad9beaff366bf7e3b0a4fa0526473a70c1f44e343a5b9fadf9fc536113772f0f7b0bf16f9b7a7dd8eaa5f7fd9cf259565247f0e58375156005c30e25691d7f8fbd489af83a18f71a38b1996be1ca10bdcbe8d850603d9b81ba828c907753483e9ff23d1d861c36d8045acadaa640a61357fcf9aed13afdf56d13861dd74ce620e592230d3c8699e9adccf2920614ae13c1e3e88a830f36bfcd40ff7c767995044f2ba1661c5f977d9754c58a0d9dd7aad1fbfd94d36dfc61c532c5cb3093ccc0c125ee0e762469f8680500675d4404db12b7062c19c4f0c81c0de489b5eb725f1d7d4cbe7a1f4b51fe8faffb6a709c0a7a4ae7efe75bc66d6c2e705fbee29c0858d9891735c97a28aa15c16fa0444ac2caeeffae42f1fbf0f17adbc9ee40236a844add60741eb64c722811c6f9fd7d614f9620d6f07914b6e7d5eb5dc3d7d6d5f5323575a7c9f864d9d5793d4ca606ab3234930a32e44d8a08d624861a6b94c72f551e7adc8daee91594175bdba18c663ced5991c0846f1c03a96b5d8f858c10dea4886e12ee90186d2130891eb1b354abb1040dd571589b4b7884b31cff7f8b3cdef5a61bc9644883c852106d9be09e5f4d649c669a64fadd3a9b129ab1c956e33dd5ac7224439feb0ccae51aa092c36b4e8d720170d20c22a49e5919d203b312096d625e4316f141f26a9257af159b3c47e025fa40d0150b7dd969d2ec67c727b81653f679f6ebbf8b3ad9c3b0acf232d1b869982879c4a2722cc1e4f0740e9d0feb661e45c5b081ad0546761e6a025529086ca4d38a4b22193e792bbfe6ceb22be5ca954210d0f93f5e38550054b6ae80e64673158815af6cd6adc3b942b4371d33d9662ac80e3ef2eb4acd44ec66cb6d8948d67c3ba8e578f52ac30ab107723e5ce51c4e6d59b20ba7085fd8dbde58cf9a0bd3385e95db6b56a9a68e3160ad36a93e26dc8b915cd4e4767d3dbd3b74052f55e3a74b1edb1068c973a5ca70809c6aeab8ad627955a815315330c51153dcdcb6e77029b0a3712a9231f0c188659e5bb9f89b6a8fd91536a47db7e5d596fa93f0719502e442417ee11bfcb364c6ddadfc8581ce7779d107d6f7aa8739c3254ce9b1e2dbbc1e75566b6d80817e1820e02e8df220e1c9b2d98a15e9db86c5a32bf52b0f1de1be7636cb21e87d777fa1e7828be02578cac204a8e9c7ca6119aa0bdd165bbf7d0f799f0d2ae118bd9037982c1fed3e223b60cc86f21e8c1d9336cb76cb521bc9791abcd99af0bf70a198de0d678cc8bdc0f74fef28407bf09d93054d5e20f5452fad596ae036bec1109e4541d5cb9d287b5498934fad3963a53030dc2264668467716afee211f4dc8082800be3829050b2e26c447b001c076dda2e2b7f17c96612b0f594b6ef5193c5dc3affa5778896e1e40a3953e5557d39799c312b4126a6086dd85393ed3322a48ca0afb9e5dd96ac9461dc7cfc8b02a23b7a1486ea8c9bb204e39298b1017a67a8c1cf1e0582c6b8d95a611c0053eccc9592e1af600e4386680be35c29acfd9033058a4842006fe429188e6a4783a9bf5fd7d1c36c0530f6a42be785419ef2192ffe02470d376f084a4352cdc7e34b9f4891304499b1e0946832b187762d191d7e9cd9cc9112ad768e5132f804f304a9ba0572d0e1c7eac6ff606baf0f0f2e1c836d9a9f7f01fe748dd5ae7b34ed6d51f6e4c8575de14c8552026c4c82516080d919a706fa62958742cc2843ce88c04a19cb66781f2b75d9a81d3f4f2c078e35bacf3a69dc717b61c9c9557d82bdaa636fe80e37f41d63f2388da0b79555f2b3d2b7b30db6d2837aecd455814118a737d3d2845704f4b8a7156dd582477d0b9f0d2622b1f963d243c73646d35dd25547446fa94f47b63637e37b9c61ed88c97b185f9b8d09ffd768cd1c79ab31ff33e82423872f4b2642a1530a248b1dac5a776d5c5d6381e38f01fe8b23921c7b52175619bfe522c945e45ea5a0d35f35fb7c7f772f32657b8b936de258ab52fcf2bc4973c7d8da82d113bd59831b658c62b6913c9162f66a92bcdba85a33796028c8285083f65eec0168039af09f83e27d94fa22f4a595702cbd51d8f48ad8aff4a74c5fd50922b3eba0341c6718f34f3a59181722e330ccfc7d1997357fbb1c95213b082d6b6f119118bb24a98c2c53de48b8b1bdd9c51c88c89acbcd4de108fb32f4beda27743b4a04e5ebc677862da939c7dfc616e765b79b1359d8e5ae4eeae5cd38954a7b6f8693496bfd2624f1a83182440510d7de981a321ccf81b75ab23317598adcb3bff8454110a056ee64a3b088c3ed6d0cd1d2e7033f872106205e95f171e347f02d9583f59113e49386e30ad92537b577e9822f3ecfc1b1374bf2911f61168f30b8f1e3af513e8248409d25c1d3bc09e93a66fa2c4bb3caaf1f4bc28e730ffd78375136e8c32d9bc26b8958c62aa7912dcdf44bbb6668c872df81c6362a679e57860484f003506ab7e1bd7344261c761bc03a7a0167047c1c07e8e46e9af814ab2b93fbdd8536448ee939188ed5a79c6d5d962efe69afde6999a5d52d71090bcb11a1eacb07185f9f5199d44c9bb5c48a09b28cc10e3f84f04677c3052e57d5426d3f5fa852a8f4ed3c8495a4f79261bbf6d1405c9ee97fe3df651819907bf93e4bd0c0a7d2d454e7ba0e84eada5731bf373ae529a6a1f17f959c77931d2ae261b588e844e8c1deae11cf6bbc1433ecabd2715cca3c7471b6f8de376a72647f7bbe11659adb21af39f0b71ae0aaee207f1811cef018fc70717c38b14948f307302bebca0450c6d1670996a92eebe691e0f7395fc20c554a171472df72761fca5a73a242f15c39b7fe6e4c013d655cdd09e319727758beb367aaadf6e70bfef6f8fce3e7c3848279f88ebe8a10f00dfe8f4dd87f9437b8bfa4b7b1517902cc06887ec5a9b9eef923c0e72e9ff82226ae8bf7cef3b3cf91e0ff8408e62421a4d88875b9f6a9382722d42aaf8fea280198a23eda48f6ddc26411825dbfadd25301735d1f9c74f61b15d3b2181dc9d77a4115c7047b9c6520b55dd2fcf343c4f1cb7cf93c10c0e01e282f28cf54575924024819409c322dce701d88f78c94416ebf4c2275bac8c75299636f3a507b7f933c5e13d853725a5ce8f9ec33de647b87a1d0775d62dfa07fead5253cc18526b5ffd90312ff098b81dd01c59f882b0223e6cf768b2ee0d5e0e8d10a2f5c04aa3b97a3dc92e102b30d60f3f0ff5b6253e49d960bc6b8d3a5daf6f3f4c06fcaa315e8315fe71023875f318934414cfd10fd7625e084b132b1c37b1b3e10777c10a3f9c47cca710012a77bf342bd64ba5fb08e24908cbf07143a49c2acf74d0c4097b0a8c2efcb6dbda4433acd0f1e2ad24cbcb4462aa7ce3d12514d4aaaec95457ec06f197c0df614d484af7987458ed2e33552b7a1cf72a4c4b016e7a7399ef9998bd52f860d2ef0751e7e96ebc472af3e666f7778f8eedb12bbac921eac8436b31ab61d72c259a2473678d88743f0f768c1782ee4702646bf349308712ea8cbad36d90b5c770971a1ff70719cdfdeb01927a561fb67d7cb6a2feec1215bac6eeedfb930d3556b5547a7e1af3199de6929a745c5323dbc34624761bb1beff6508463a5b7cac6d1d0265c733cb609b8cdaa56042d29fb70fa58c64b1fed6028d3a2ee7d6f3046cd980bea9f9e1d82fd9beafe7d66cfcbdd49caa5ea4f43faca173cba614e02f407b5c791e460a3ee590b3780ad8cbab34ff0379cc1f947201e28d0cbfa9cc5beef86ecc7090eac13ff614bf73f24b335fcff38a57bce197f67a5816f3d11bb558f0485b4441fcddb6b33c211f19f263f35462349492e26d5fc8437e09539c06fd6b14f243e0a51cc7ed7482677c5a9e7c864b81ae890e6412b6b387e887c9a70e5470c0d17800bb4e39a971a30151c2d5717a9c1183fc5e43902b25130f5fe2d85a64b77a8e64dc59d0b1e3b022efb9c1cbdfebb071c0fbd09619577bb1e18b488091d5c239589805b8df254db031aaa7751bb0b71bffe4b307ebd8359271c2376f2c75a8bea9808725cca6254f89e211cae70dce4cefa123d29238ecb0057d28eeaaabea6e99ab64ebea4c2c62806e6a9e2bccb96a4d07e816ee378e094acee3a9f31b0d1033634310baef6bc7f5e0870a2f1f7f519861834935b1073f9a5c348a46b3be82932d3cf1823a60fb9d0b269b94e58614b5cca1bf2f47ad4e15a93fce9995e06583c41b84930fc26cfe19e9ce9028c7ed8f6f701ed97a74ff3d3affcacf957946fd675240ea08b362a4c1d15aa0722f4cec99aae7d167c49c6123b1ddc36285804044883676921d8b9feed089851e819b782c1fc4025c44874f1454e53e477838e6ff0a472331da69f8e4efb474db064a4b4325c08b4db60377a142c19512b7d1e9fdcfb599662e5448ef3fed112a62bad364467613c73a3385df9766446627c2658c87b56c069440d4e0406e1220c79c2c99116c3224a7a90fee8b6c04f3ff85cbe993c3bb4f7961a801dd893557cd0be736f17e3fa2c65ecc61b907c9d919612ac73a41f91d88733b5830d135a457b3c13fceb0bd294f412bde878315b32c91529b5d55383a1f79f949a8424865b474d784a7a89153b88fc7ec11589b01b9b1aece6585de4d6dbf329c09f35426525addf3e1aa57dddace18fdb219b5e4b32c29a24de709f180b6ff5578141158f467ee9f0cccb580e5b9929c59e47cc8ff27b8401a934769d99f26cc9a9f66ecd0879df8b5becf0cb9a41006396075455306059a7dce312f4e08c54d13bd5da696b32f2c8efbdaad768e372049a3a58bb8c6972d34f859c4ea29ec46aa7752f5d7e8bd3523a10de8b876cb1d61d143d55a1f343252f0927fd5d853b663a71dbb0fff6a7ff07f9cf1e1eb23e07009ffde16778c6fb0010580380100808000048008000200f7f7ffff08000200ffffffff640001805c0001801c000c8005000b000b000000050001000000000005000a00010000000c00120000000000000000000c000f000c000000000000000c000e0000000000000000000800040000010000060014002b0000000600020009000000040001800400050004000500b3000100adcb04a58b3c2f134a15760485188573b1cab1d6ed2698c24fdf710d4b3aa02e3d7206d8e192d58f52ccb69d864b538b8c63b8931a461b0050253fe028240d8b51489a8d52d59f5088bc258b350f375c597e492406740eed2730170fcc3f336f8984bdd9509765de2517c0b82b11ee8c84f1bfcf02152e5664f172dd6025ddb37ce75221e11f3db64fbf6953ac9b5f7bf14ccddc2e65070aa3eecd7a88c038f6ae9bc539ca6b583f997fcbb21becf70074000080480004800c000300090000000000000004000500080002000400000008000200280600000c00040000000000000000000c00030001000000000000000c000400080000000000000028000480040005000c00040002000000000000000c00030007000000000000000800020001000000"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) rename$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') ioctl$auto_XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000040)=0x1, 0x10001, &(0x7f0000000440)="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", 0x0}) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 1.930309806s ago: executing program 3 (id=1109): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(0x3, 0x0, 0x87) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ppoll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8002) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x305080, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) unshare$auto(0x40000080) 1.201741ms ago: executing program 0 (id=1100): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8013) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0d, 0xe, 0x3, 0x4, 0x80000033, 0xfff, 0x6d3e, 0x9, 0x8, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x24000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r2, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) 200.636µs ago: executing program 1 (id=1101): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1900, 0x0) pread64$auto(r1, 0x0, 0xe, 0x100000000007) read$auto(r0, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8000, 0x6, 0xff}) read$auto_mousedev_fops_mousedev(0xffffffffffffffff, &(0x7f0000000340)=""/167, 0xa7) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x801, 0x84) sendmsg$auto_SMC_PNETID_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf2504000000190103002f6465762f6275303031005ee50000000d0003005c267b2e2f7d3a2c000000000d0003002f6465762f6b766d"], 0x50}}, 0x4) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mtrr\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa20", 0x12) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/notify_window_exits\x00', 0x202, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) 0s ago: executing program 2 (id=1102): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) socket(0x1d, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0400bc800400748008000600b1000080000000000000000000"], 0x164}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.58' (ED25519) to the list of known hosts. [ 80.165657][ T5815] cgroup: Unknown subsys name 'net' [ 80.299660][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.308675][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.822953][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.862401][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.871405][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.896112][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.904091][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.929997][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.934637][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.946273][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.954354][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.956702][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.962870][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.977091][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.981494][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.985108][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.993666][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.000374][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.012954][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.015694][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.023149][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.029779][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.054825][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.625859][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.704006][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.749182][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.800166][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.880429][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.888183][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.895736][ T5824] bridge_slave_0: entered allmulticast mode [ 84.903346][ T5824] bridge_slave_0: entered promiscuous mode [ 84.913136][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.920358][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.927700][ T5824] bridge_slave_1: entered allmulticast mode [ 84.934776][ T5824] bridge_slave_1: entered promiscuous mode [ 85.049318][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.059578][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.068089][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.075388][ T5827] bridge_slave_0: entered allmulticast mode [ 85.083243][ T5827] bridge_slave_0: entered promiscuous mode [ 85.108599][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.118456][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.125784][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.133550][ T5827] bridge_slave_1: entered allmulticast mode [ 85.141881][ T5827] bridge_slave_1: entered promiscuous mode [ 85.161224][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.168756][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.176406][ T5826] bridge_slave_0: entered allmulticast mode [ 85.183359][ T5826] bridge_slave_0: entered promiscuous mode [ 85.242058][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.249617][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.257297][ T5826] bridge_slave_1: entered allmulticast mode [ 85.264324][ T5826] bridge_slave_1: entered promiscuous mode [ 85.275416][ T5824] team0: Port device team_slave_0 added [ 85.294037][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.302884][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.310177][ T5832] bridge_slave_0: entered allmulticast mode [ 85.318304][ T5832] bridge_slave_0: entered promiscuous mode [ 85.338740][ T5824] team0: Port device team_slave_1 added [ 85.358951][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.368912][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.377010][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.384240][ T5832] bridge_slave_1: entered allmulticast mode [ 85.391594][ T5832] bridge_slave_1: entered promiscuous mode [ 85.425144][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.437121][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.491091][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.533494][ T5827] team0: Port device team_slave_0 added [ 85.542605][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.555245][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.562695][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.589591][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.619312][ T5827] team0: Port device team_slave_1 added [ 85.628544][ T5826] team0: Port device team_slave_0 added [ 85.638819][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.648760][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.655833][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.682759][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.699279][ T5826] team0: Port device team_slave_1 added [ 85.781896][ T5832] team0: Port device team_slave_0 added [ 85.799350][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.808309][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.834662][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.848039][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.855141][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.881843][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.907026][ T5832] team0: Port device team_slave_1 added [ 85.913862][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.921697][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.949155][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.993679][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.001048][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.028136][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.062962][ T5824] hsr_slave_0: entered promiscuous mode [ 86.070322][ T5824] hsr_slave_1: entered promiscuous mode [ 86.096963][ T5836] Bluetooth: hci1: command tx timeout [ 86.102559][ T51] Bluetooth: hci2: command tx timeout [ 86.102578][ T5839] Bluetooth: hci0: command tx timeout [ 86.102867][ T5839] Bluetooth: hci3: command tx timeout [ 86.128634][ T5827] hsr_slave_0: entered promiscuous mode [ 86.135251][ T5827] hsr_slave_1: entered promiscuous mode [ 86.141851][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.150626][ T5827] Cannot create hsr debugfs directory [ 86.157020][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.164089][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.192002][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.245729][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.253253][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.279957][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.303361][ T5826] hsr_slave_0: entered promiscuous mode [ 86.310303][ T5826] hsr_slave_1: entered promiscuous mode [ 86.316754][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.324335][ T5826] Cannot create hsr debugfs directory [ 86.483117][ T5832] hsr_slave_0: entered promiscuous mode [ 86.489532][ T5832] hsr_slave_1: entered promiscuous mode [ 86.495586][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.503966][ T5832] Cannot create hsr debugfs directory [ 86.862338][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.909494][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.944341][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.971170][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.017822][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.059659][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.103016][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.123228][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.144079][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.185113][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.196928][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.257161][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.337613][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.352957][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.364104][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.381872][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.502396][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.580537][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.599700][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.607279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.643820][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.650987][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.715751][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.738415][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.763624][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.780223][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.847373][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.854968][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.880340][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.887659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.910625][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.924820][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.949727][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.956960][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.023482][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.030785][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.042182][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.049996][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.062246][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.069403][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.176668][ T5839] Bluetooth: hci3: command tx timeout [ 88.182423][ T5839] Bluetooth: hci2: command tx timeout [ 88.186202][ T5844] Bluetooth: hci1: command tx timeout [ 88.188127][ T5839] Bluetooth: hci0: command tx timeout [ 88.239760][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.316457][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.458830][ T5827] veth0_vlan: entered promiscuous mode [ 88.489738][ T5827] veth1_vlan: entered promiscuous mode [ 88.568926][ T5827] veth0_macvtap: entered promiscuous mode [ 88.590256][ T5827] veth1_macvtap: entered promiscuous mode [ 88.661756][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.715571][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.747869][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.785654][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.799561][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.808626][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.818014][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.890248][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.938582][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.975368][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.988813][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.014473][ T5826] veth0_vlan: entered promiscuous mode [ 89.054411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.065816][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.067822][ T5826] veth1_vlan: entered promiscuous mode [ 89.174983][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.192656][ T5832] veth0_vlan: entered promiscuous mode [ 89.204733][ T5824] veth0_vlan: entered promiscuous mode [ 89.218078][ T5826] veth0_macvtap: entered promiscuous mode [ 89.233529][ T5826] veth1_macvtap: entered promiscuous mode [ 89.249625][ T5832] veth1_vlan: entered promiscuous mode [ 89.260546][ T5824] veth1_vlan: entered promiscuous mode [ 89.361818][ T5824] veth0_macvtap: entered promiscuous mode [ 89.375511][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.399827][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.416932][ T5824] veth1_macvtap: entered promiscuous mode [ 89.435873][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452918][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.462491][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.475970][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.493041][ T5832] veth0_macvtap: entered promiscuous mode [ 89.524733][ T5832] veth1_macvtap: entered promiscuous mode [ 89.544960][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.575623][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.621828][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.631542][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.643969][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.653561][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.684302][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.749892][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.801843][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.814700][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.845668][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.854893][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.935844][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.957486][ T5926] mmap: syz.2.5 (5926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.961272][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.075881][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.090336][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.166916][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.193532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.245576][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.257908][ T5839] Bluetooth: hci0: command tx timeout [ 90.263381][ T5839] Bluetooth: hci1: command tx timeout [ 90.269188][ T51] Bluetooth: hci2: command tx timeout [ 90.269414][ T5839] Bluetooth: hci3: command tx timeout [ 90.296022][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.372238][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.372263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.551690][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 90.580041][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.610804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.294450][ T5940] hub 8-0:1.0: USB hub found [ 91.342306][ T5940] hub 8-0:1.0: 1 port detected [ 91.565744][ T5944] WARNING! power/level is deprecated; use power/control instead [ 91.596640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 91.614276][ T5948] .SR: entered promiscuous mode [ 91.721038][ T5949] Invalid ELF header magic: != ELF [ 91.786823][ T5954] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 91.953679][ T1208] cfg80211: failed to load regulatory.db [ 92.156944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.165583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.239192][ T5956] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 92.317248][ T5959] Zero length message leads to an empty skb [ 92.336033][ T5839] Bluetooth: hci2: command tx timeout [ 92.337047][ T5844] Bluetooth: hci1: command tx timeout [ 92.341467][ T5839] Bluetooth: hci0: command tx timeout [ 92.347360][ T51] Bluetooth: hci3: command tx timeout [ 92.747471][ T5956] netlink: 186 bytes leftover after parsing attributes in process `syz.2.7'. [ 92.752840][ T5949] could not allocate digest TFM handle [ 92.796224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.819006][ T5948] could not allocate digest TFM handle [ 92.886818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.927757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.146348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.162540][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.182141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.191159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.202489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.496958][ T5975] Invalid ELF header magic: != ELF [ 93.544896][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.887004][ T6042] Invalid ELF header magic: != ELF [ 101.273952][ T6102] Invalid ELF header magic: != ELF [ 103.837931][ T6146] hub 8-0:1.0: USB hub found [ 103.842816][ T6146] hub 8-0:1.0: 1 port detected [ 104.637915][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 104.694053][ T6139] veth1_macvtap: left promiscuous mode [ 107.002062][ T6182] ======================================================= [ 107.002062][ T6182] WARNING: The mand mount option has been deprecated and [ 107.002062][ T6182] and is ignored by this kernel. Remove the mand [ 107.002062][ T6182] option from the mount to silence this warning. [ 107.002062][ T6182] ======================================================= [ 110.922597][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'. [ 111.042302][ T6223] veth1_macvtap: left promiscuous mode [ 121.170567][ T6362] Invalid ELF header magic: != ELF [ 125.719304][ T6424] Invalid ELF header magic: != ELF [ 125.768868][ T6425] random: crng reseeded on system resumption [ 129.345482][ T6475] Invalid ELF header magic: != ELF [ 132.423208][ T6496] hub 8-0:1.0: USB hub found [ 132.504446][ T6496] hub 8-0:1.0: 1 port detected [ 132.919784][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938362][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.691173][ T6568] hub 8-0:1.0: USB hub found [ 137.786701][ T6568] hub 8-0:1.0: 1 port detected [ 143.332276][ T6624] ubi0: attaching mtd0 [ 143.341287][ T6624] ubi0: scanning is finished [ 143.364014][ T6624] ubi0: empty MTD device detected [ 143.924379][ T6624] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 143.988298][ T6624] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 144.043560][ T6624] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 144.113888][ T6624] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 144.251951][ T6624] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 144.312845][ T6624] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 144.361693][ T6624] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 313459648 [ 144.425516][ T6624] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 144.448037][ T6644] ubi0: background thread "ubi_bgt0d" started, PID 6644 [ 148.501587][ T6696] syz.2.157 (6696) used greatest stack depth: 17976 bytes left [ 150.362434][ T6715] ubi: mtd0 is already attached to ubi0 [ 155.880788][ T6778] random: crng reseeded on system resumption [ 157.310591][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 157.947868][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 158.011826][ T5834] udevd[5834]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 159.453642][ T6818] process 'syz.0.180' launched './file0' with NULL argv: empty string added [ 160.376151][ T6824] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[6824] [ 163.309228][ T6882] hub 8-0:1.0: USB hub found [ 163.329762][ T6882] hub 8-0:1.0: 1 port detected [ 167.855649][ T6955] netlink: 94 bytes leftover after parsing attributes in process `syz.1.203'. [ 169.269660][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 169.812282][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 170.816163][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 175.788058][ T7075] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[7075] [ 176.759848][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 177.856798][ T5834] udevd[5834]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 181.642603][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 182.690039][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 183.628027][ T7217] Console: switching to colour VGA+ 80x25 [ 183.877280][ T7214] Console: switching to colour frame buffer device 128x48 [ 189.169020][ T7309] Console: switching to colour VGA+ 80x25 [ 189.514147][ T7307] Console: switching to colour frame buffer device 128x48 [ 193.848911][ T7370] ubi: mtd0 is already attached to ubi0 [ 194.353737][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.360924][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.630383][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 197.323442][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 197.417993][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 200.998955][ T7484] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/gy3:0 is already present [ 206.656849][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 206.663210][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 206.670285][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 206.677224][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 207.903733][ T7578] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/gy3:0 is already present [ 215.954715][ T7659] random: crng reseeded on system resumption [ 217.267760][ T7677] snd_aloop snd_aloop.0: control 16781581:65533:6:'x?F/gy3:0 is already present [ 219.807489][ T7725] FAULT_INJECTION: forcing a failure. [ 219.807489][ T7725] name failslab, interval 1, probability 0, space 0, times 1 [ 219.913644][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.0.318 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 219.913672][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.913684][ T7725] Call Trace: [ 219.913690][ T7725] [ 219.913699][ T7725] dump_stack_lvl+0x16c/0x1f0 [ 219.913738][ T7725] should_fail_ex+0x512/0x640 [ 219.913758][ T7725] ? __kmalloc_node_noprof+0xc5/0x500 [ 219.913783][ T7725] should_failslab+0xc2/0x120 [ 219.913797][ T7725] __kmalloc_node_noprof+0xd8/0x500 [ 219.913818][ T7725] ? lockdep_init_map_type+0x5c/0x280 [ 219.913837][ T7725] ? mempool_init_node+0x13c/0x760 [ 219.913852][ T7725] ? __init_waitqueue_head+0xca/0x150 [ 219.913874][ T7725] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 219.913889][ T7725] mempool_init_node+0x13c/0x760 [ 219.913905][ T7725] ? __pfx_xa_load+0x10/0x10 [ 219.913921][ T7725] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 219.913935][ T7725] ? __pfx_mempool_free_slab+0x10/0x10 [ 219.913950][ T7725] mempool_init_noprof+0x3a/0x50 [ 219.913967][ T7725] bioset_init+0x37a/0x880 [ 219.913982][ T7725] ? __pfx_bioset_init+0x10/0x10 [ 219.914003][ T7725] __alloc_disk_node+0x83/0x630 [ 219.914025][ T7725] __blk_mq_alloc_disk+0x89/0x120 [ 219.914046][ T7725] nbd_dev_add+0x4a0/0xbc0 [ 219.914075][ T7725] ? __pfx_nbd_dev_add+0x10/0x10 [ 219.914107][ T7725] ? bpf_lsm_capable+0x9/0x10 [ 219.914126][ T7725] ? __radix_tree_lookup+0x21f/0x2c0 [ 219.914150][ T7725] nbd_genl_connect+0x8b0/0x1c20 [ 219.914175][ T7725] ? __pfx_nbd_genl_connect+0x10/0x10 [ 219.914198][ T7725] ? __nla_parse+0x40/0x60 [ 219.914214][ T7725] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 219.914234][ T7725] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 219.914256][ T7725] genl_family_rcv_msg_doit+0x206/0x2f0 [ 219.914275][ T7725] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.914293][ T7725] ? genl_get_cmd+0x194/0x580 [ 219.914315][ T7725] ? __radix_tree_lookup+0x21f/0x2c0 [ 219.914337][ T7725] genl_rcv_msg+0x55c/0x800 [ 219.914357][ T7725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.914375][ T7725] ? __pfx_nbd_genl_connect+0x10/0x10 [ 219.914403][ T7725] netlink_rcv_skb+0x155/0x420 [ 219.914418][ T7725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.914436][ T7725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.914459][ T7725] ? netlink_deliver_tap+0x1ae/0xd30 [ 219.914476][ T7725] genl_rcv+0x28/0x40 [ 219.914490][ T7725] netlink_unicast+0x53a/0x7f0 [ 219.914508][ T7725] ? __pfx_netlink_unicast+0x10/0x10 [ 219.914528][ T7725] netlink_sendmsg+0x8d1/0xdd0 [ 219.914546][ T7725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.914568][ T7725] ____sys_sendmsg+0xa95/0xc70 [ 219.914586][ T7725] ? copy_msghdr_from_user+0x10a/0x160 [ 219.914606][ T7725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.914621][ T7725] ? preempt_schedule_thunk+0x16/0x30 [ 219.914642][ T7725] ? try_to_wake_up+0xa2f/0x1680 [ 219.914674][ T7725] ___sys_sendmsg+0x134/0x1d0 [ 219.914697][ T7725] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.914717][ T7725] ? __lock_acquire+0x622/0x1c90 [ 219.914760][ T7725] __sys_sendmsg+0x16d/0x220 [ 219.914782][ T7725] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.914803][ T7725] ? __x64_sys_futex+0x1e0/0x4c0 [ 219.914831][ T7725] do_syscall_64+0xcd/0x490 [ 219.914855][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.914869][ T7725] RIP: 0033:0x7fe9b038e929 [ 219.914891][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.914908][ T7725] RSP: 002b:00007fe9b1242038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.914922][ T7725] RAX: ffffffffffffffda RBX: 00007fe9b05b6080 RCX: 00007fe9b038e929 [ 219.914932][ T7725] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000005 [ 219.914940][ T7725] RBP: 00007fe9b0410b39 R08: 0000000000000000 R09: 0000000000000000 [ 219.914949][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.914957][ T7725] R13: 0000000000000000 R14: 00007fe9b05b6080 R15: 00007ffe2bdbab08 [ 219.914976][ T7725] [ 220.550710][ T7725] nbd: failed to add new device [ 224.328269][ T7783] FAULT_INJECTION: forcing a failure. [ 224.328269][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 224.346528][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.1.334 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 224.346564][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.346579][ T7783] Call Trace: [ 224.346588][ T7783] [ 224.346597][ T7783] dump_stack_lvl+0x16c/0x1f0 [ 224.346640][ T7783] should_fail_ex+0x512/0x640 [ 224.346674][ T7783] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 224.346714][ T7783] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 224.346741][ T7783] should_failslab+0xc2/0x120 [ 224.346767][ T7783] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 224.346800][ T7783] ? mempool_init_node+0x320/0x760 [ 224.346826][ T7783] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 224.346852][ T7783] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 224.346876][ T7783] mempool_init_node+0x320/0x760 [ 224.346910][ T7783] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 224.346935][ T7783] ? __pfx_mempool_free_slab+0x10/0x10 [ 224.346961][ T7783] mempool_init_noprof+0x3a/0x50 [ 224.347006][ T7783] bioset_init+0x37a/0x880 [ 224.347033][ T7783] ? __pfx_bioset_init+0x10/0x10 [ 224.347074][ T7783] __alloc_disk_node+0x83/0x630 [ 224.347126][ T7783] __blk_mq_alloc_disk+0x89/0x120 [ 224.347164][ T7783] nbd_dev_add+0x4a0/0xbc0 [ 224.347202][ T7783] ? __pfx_nbd_dev_add+0x10/0x10 [ 224.347258][ T7783] ? bpf_lsm_capable+0x9/0x10 [ 224.347290][ T7783] ? __radix_tree_lookup+0x21f/0x2c0 [ 224.347331][ T7783] nbd_genl_connect+0x8b0/0x1c20 [ 224.347375][ T7783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 224.347412][ T7783] ? __nla_parse+0x40/0x60 [ 224.347441][ T7783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 224.347473][ T7783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 224.347513][ T7783] genl_family_rcv_msg_doit+0x206/0x2f0 [ 224.347547][ T7783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.347578][ T7783] ? genl_get_cmd+0x194/0x580 [ 224.347618][ T7783] ? __radix_tree_lookup+0x21f/0x2c0 [ 224.347658][ T7783] genl_rcv_msg+0x55c/0x800 [ 224.347693][ T7783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.347725][ T7783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 224.347770][ T7783] netlink_rcv_skb+0x155/0x420 [ 224.347794][ T7783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.347826][ T7783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.347867][ T7783] ? netlink_deliver_tap+0x1ae/0xd30 [ 224.347896][ T7783] genl_rcv+0x28/0x40 [ 224.347921][ T7783] netlink_unicast+0x53a/0x7f0 [ 224.347951][ T7783] ? __pfx_netlink_unicast+0x10/0x10 [ 224.347988][ T7783] netlink_sendmsg+0x8d1/0xdd0 [ 224.348021][ T7783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.348059][ T7783] ____sys_sendmsg+0xa95/0xc70 [ 224.348085][ T7783] ? copy_msghdr_from_user+0x10a/0x160 [ 224.348125][ T7783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.348159][ T7783] ? __pfx_futex_wake_mark+0x10/0x10 [ 224.348197][ T7783] ___sys_sendmsg+0x134/0x1d0 [ 224.348232][ T7783] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.348261][ T7783] ? __lock_acquire+0x622/0x1c90 [ 224.348330][ T7783] __sys_sendmsg+0x16d/0x220 [ 224.348362][ T7783] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.348393][ T7783] ? __x64_sys_futex+0x1e0/0x4c0 [ 224.348437][ T7783] do_syscall_64+0xcd/0x490 [ 224.348472][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.348494][ T7783] RIP: 0033:0x7f046178e929 [ 224.348513][ T7783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.348533][ T7783] RSP: 002b:00007f0462573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.348555][ T7783] RAX: ffffffffffffffda RBX: 00007f04619b6080 RCX: 00007f046178e929 [ 224.348570][ T7783] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000005 [ 224.348585][ T7783] RBP: 00007f0461810b39 R08: 0000000000000000 R09: 0000000000000000 [ 224.348598][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.348611][ T7783] R13: 0000000000000000 R14: 00007f04619b6080 R15: 00007ffe3c0d9428 [ 224.348642][ T7783] [ 224.740191][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.817257][ T7783] nbd: failed to add new device [ 225.619148][ T7795] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                           [ 277.941766][ T8434] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 277.995398][ T8434] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 278.043852][ T8434] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 278.092536][ T8434] page_type: f5(slab) syzkaller syzkaller login: [ 278.106809][ T8434] raw: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 278.147288][ T8438] [ 278.161185][ T8434] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 278.187510][ T8434] head: 00fff00000000040 ffff88801b842140 dead000000000122 0000000000000000 [ 278.200767][ T8434] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 278.240116][ T8434] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 278.300276][ T8434] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 278.337956][ T8434] page dumped because: unmovable page [ 278.354626][ T8434] page_owner tracks the page as allocated [ 278.395140][ T8434] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 263370870943, free_ts 263267304697 [ 278.465846][ T8434] post_alloc_hook+0x1c0/0x230 [ 278.470712][ T8434] get_page_from_freelist+0x1321/0x3890 [ 278.559785][ T8434] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 278.639998][ T8434] alloc_pages_mpol+0x1fb/0x550 [ 278.729653][ T8434] new_slab+0x23b/0x330 [ 278.736266][ T8434] ___slab_alloc+0xd9c/0x1940 [ 278.740986][ T8434] __slab_alloc.constprop.0+0x56/0xb0 [ 278.746448][ T8434] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 278.752960][ T8434] kmalloc_reserve+0xef/0x2c0 [ 278.757924][ T8434] __alloc_skb+0x166/0x380 [ 278.762485][ T8434] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 278.768476][ T8434] process_one_work+0x9cc/0x1b70 [ 278.773648][ T8434] worker_thread+0x6c8/0xf10 [ 278.778514][ T8434] kthread+0x3c5/0x780 [ 278.784468][ T8434] ret_from_fork+0x5d4/0x6f0 [ 278.789183][ T8434] ret_from_fork_asm+0x1a/0x30 [ 278.794075][ T8434] page last free pid 8254 tgid 8253 stack trace: [ 278.873012][ T8434] __free_frozen_pages+0x7fe/0x1180 [ 278.886787][ T8434] __put_partials+0x16d/0x1c0 [ 278.915152][ T8434] qlist_free_all+0x4d/0x120 [ 278.973634][ T8434] kasan_quarantine_reduce+0x195/0x1e0 [ 278.980093][ T8434] __kasan_slab_alloc+0x69/0x90 [ 278.985019][ T8434] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 278.995947][ T8434] xas_split_alloc+0x11c/0x490 [ 279.000797][ T8434] __folio_split+0xca8/0x48d0 [ 279.006932][ T8434] split_folio_to_list+0x9b/0x180 [ 279.015683][ T8434] shmem_writeout+0x608/0x13b0 [ 279.023765][ T8434] pageout+0x38f/0xa50 [ 279.028048][ T8434] shrink_folio_list+0x2f4d/0x3fc0 [ 279.035949][ T8434] reclaim_folio_list+0xda/0x5d0 [ 279.040951][ T8434] reclaim_pages+0x47b/0x650 [ 279.052707][ T8434] madvise_cold_or_pageout_pte_range+0x16d5/0x2180 [ 279.059762][ T8434] walk_pgd_range+0xc56/0x1f60 [ 279.748415][ T8458] Invalid ELF header magic: != ELF [ 281.290965][ T8479] Invalid ELF header magic: != ELF [ 281.714156][ T8484] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 282.169102][ T8487] netlink: 186 bytes leftover after parsing attributes in process `syz.0.458'. [ 282.890317][ T8495] can: request_module (can-proto-0) failed. [ 283.044644][ T8485] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 283.286834][ T8502] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 283.930732][ T8490] kexec: Could not allocate control_code_buffer [ 284.183960][ T8510] [ 284.361530][ T8516] random: crng reseeded on system resumption [ 284.572782][ T8511] FAULT_INJECTION: forcing a failure. [ 284.572782][ T8511] name failslab, interval 1, probability 0, space 0, times 0 [ 284.647557][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.1.461 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 284.647591][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.647605][ T8511] Call Trace: [ 284.647613][ T8511] [ 284.647623][ T8511] dump_stack_lvl+0x16c/0x1f0 [ 284.647665][ T8511] should_fail_ex+0x512/0x640 [ 284.647698][ T8511] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 284.647736][ T8511] should_failslab+0xc2/0x120 [ 284.647761][ T8511] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 284.647796][ T8511] ? seq_open+0x55/0x170 [ 284.647825][ T8511] ? __pfx_snd_info_seq_show+0x10/0x10 [ 284.647848][ T8511] seq_open+0x55/0x170 [ 284.647869][ T8511] ? __pfx_snd_info_seq_show+0x10/0x10 [ 284.647894][ T8511] single_open+0xfc/0x1f0 [ 284.647919][ T8511] snd_info_text_entry_open+0x175/0x2a0 [ 284.647948][ T8511] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 284.647972][ T8511] ? trace_kmem_cache_alloc+0x28/0xc0 [ 284.647996][ T8511] ? __pfx_apparmor_file_open+0x10/0x10 [ 284.648026][ T8511] ? proc_reg_open+0x21d/0x610 [ 284.648060][ T8511] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 284.648087][ T8511] proc_reg_open+0x289/0x610 [ 284.648132][ T8511] do_dentry_open+0x741/0x1c10 [ 284.648171][ T8511] ? __pfx_proc_reg_open+0x10/0x10 [ 284.648211][ T8511] vfs_open+0x82/0x3f0 [ 284.648243][ T8511] path_openat+0x1de4/0x2cb0 [ 284.648288][ T8511] ? __pfx_path_openat+0x10/0x10 [ 284.648322][ T8511] ? __lock_acquire+0xb8a/0x1c90 [ 284.648357][ T8511] do_filp_open+0x20b/0x470 [ 284.648390][ T8511] ? __pfx_do_filp_open+0x10/0x10 [ 284.648448][ T8511] ? alloc_fd+0x471/0x7d0 [ 284.648485][ T8511] do_sys_openat2+0x11b/0x1d0 [ 284.648511][ T8511] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.648552][ T8511] __x64_sys_openat+0x174/0x210 [ 284.648580][ T8511] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.648622][ T8511] do_syscall_64+0xcd/0x490 [ 284.648662][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.648688][ T8511] RIP: 0033:0x7f046178e929 [ 284.648710][ T8511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.648734][ T8511] RSP: 002b:00007f0462573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.648759][ T8511] RAX: ffffffffffffffda RBX: 00007f04619b6080 RCX: 00007f046178e929 [ 284.648776][ T8511] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 284.648793][ T8511] RBP: 00007f0461810b39 R08: 0000000000000000 R09: 0000000000000000 [ 284.648809][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.648824][ T8511] R13: 0000000000000000 R14: 00007f04619b6080 R15: 00007ffe3c0d9428 [ 284.648857][ T8511] [ 285.753738][ T8518] Restarting kernel threads ... [ 285.765152][ T8518] Done restarting kernel threads. [ 289.471691][ T8577] can: request_module (can-proto-0) failed. [ 289.644780][ T8587] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 293.472014][ T8640] .SR: entered promiscuous mode [ 293.523728][ T8640] Invalid ELF header magic: != ELF [ 294.632141][ T8640] could not allocate digest TFM handle [ 294.637966][ T8649] could not allocate digest TFM handle [ 296.684216][ T8701] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 297.286634][ T8704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 297.482594][ T8708] netlink: 186 bytes leftover after parsing attributes in process `syz.1.492'. [ 298.222196][ T8722] .SR: entered promiscuous mode [ 298.403619][ T8726] Invalid ELF header magic: != ELF [ 298.540238][ T8724] Invalid ELF header magic: != ELF [ 299.186369][ T8722] could not allocate digest TFM handle [ 299.239794][ T8724] could not allocate digest TFM handle [ 301.799702][ T8771] can: request_module (can-proto-0) failed. [ 301.929928][ T8789] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 303.140211][ T8808] capability: warning: `syz.1.508' uses 32-bit capabilities (legacy support in use) [ 313.039209][ T8961] random: crng reseeded on system resumption [ 313.092154][ T8955] Invalid ELF header magic: != ELF [ 314.621201][ T8961] Restarting kernel threads ... [ 314.671609][ T8961] Done restarting kernel threads. [ 317.220637][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227056][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.829928][ T9056] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 319.649989][ T9058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 319.854119][ T9062] netlink: 186 bytes leftover after parsing attributes in process `syz.3.547'. [ 321.198270][ T9088] random: crng reseeded on system resumption [ 322.116439][ T9086] sctp: failed to load transform for md5: -2 [ 322.585418][ T9107] Invalid ELF header magic: != ELF [ 322.753429][ T9088] Restarting kernel threads ... [ 322.759481][ T9088] Done restarting kernel threads. [ 323.301343][ T9122] ima: policy update failed [ 323.333463][ T30] audit: type=1802 audit(4294967383.285:2): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.558" res=0 errno=0 [ 323.363919][ T9122] netlink: 25 bytes leftover after parsing attributes in process `syz.0.558'. [ 325.183616][ T9153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 325.586858][ T9154] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 325.960741][ T9156] netlink: 186 bytes leftover after parsing attributes in process `syz.3.566'. [ 326.433132][ T9161] can: request_module (can-proto-0) failed. [ 327.412908][ T9178] random: crng reseeded on system resumption [ 327.435949][ T9171] can: request_module (can-proto-0) failed. [ 327.514687][ T9176] Invalid ELF header magic: != ELF [ 327.550044][ T9183] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 329.311388][ T9204] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 329.444438][ T9178] Restarting kernel threads ... [ 329.482955][ T9178] Done restarting kernel threads. [ 329.730689][ T9210] netlink: 186 bytes leftover after parsing attributes in process `syz.1.577'. [ 329.799493][ T9212] can: request_module (can-proto-0) failed. [ 330.391615][ T9206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 330.742318][ T9225] Invalid ELF header magic: != ELF [ 331.616251][ T9197] kexec: Could not allocate control_code_buffer [ 333.482848][ T9264] .SR: entered promiscuous mode [ 333.584227][ T9262] can: request_module (can-proto-0) failed. [ 333.659348][ T9264] Invalid ELF header magic: != ELF [ 333.685410][ T9268] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 334.841598][ T9264] could not allocate digest TFM handle [ 334.877648][ T9267] could not allocate digest TFM handle [ 336.780506][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 339.945416][ T9337] can: request_module (can-proto-0) failed. [ 340.018583][ T9337] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 343.325126][ T9395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 343.888451][ T30] audit: type=1800 audit(4294967403.835:3): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.611" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 344.139769][ T9400] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 344.780309][ T9402] netlink: 186 bytes leftover after parsing attributes in process `syz.3.612'. [ 347.157611][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 349.210859][ T9463] can: request_module (can-proto-0) failed. [ 349.365026][ T9467] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 350.392488][ T9477] can: request_module (can-proto-0) failed. [ 350.461960][ T9480] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 351.714869][ T9484] can: request_module (can-proto-0) failed. [ 351.830190][ T9495] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 353.084151][ T9506] can: request_module (can-proto-0) failed. [ 353.169076][ T9506] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 353.417144][ T9513] can: request_module (can-proto-0) failed. [ 353.457473][ T9511] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 353.988698][ T9505] sctp: failed to load transform for md5: -2 [ 354.352110][ T9532] can: request_module (can-proto-0) failed. [ 354.669973][ T9536] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 355.327280][ T9546] can: request_module (can-proto-0) failed. [ 355.433881][ T9550] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 357.109387][ T9575] Invalid ELF header magic: != ELF [ 360.635033][ T9635] can: request_module (can-proto-0) failed. [ 360.680857][ T9642] Invalid ELF header magic: != ELF [ 360.688320][ T9635] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input39 [ 360.881706][ T9629] sp0: Synchronizing with TNC [ 361.306041][ T9649] Invalid ELF header magic: != ELF [ 361.572506][ T9652] tipc: Started in network mode [ 361.580108][ T9652] tipc: Node identity ee00, cluster identity 4711 [ 361.626192][ T9652] tipc: Node number set to 60928 [ 361.739211][ T9651] Process accounting resumed [ 364.168707][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 364.432209][ T9702] can: request_module (can-proto-0) failed. [ 364.504802][ T9702] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 365.262209][ T9722] can: request_module (can-proto-0) failed. [ 365.429487][ T9728] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 365.695057][ T9736] can: request_module (can-proto-0) failed. [ 365.755161][ T9736] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 367.057426][ T9749] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 367.635222][ T9750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 367.683780][ T9756] can: request_module (can-proto-0) failed. [ 367.878434][ T9761] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 368.007675][ T9751] netlink: 186 bytes leftover after parsing attributes in process `syz.0.680'. [ 368.989710][ T9772] openvswitch: .SR: Dropping previously announced user features [ 369.120151][ T9775] Invalid ELF header magic: != ELF [ 369.809072][ T9775] could not allocate digest TFM handle [ 369.809136][ T9772] could not allocate digest TFM handle [ 369.825903][ T9793] can: request_module (can-proto-0) failed. [ 370.035735][ T9793] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 371.226194][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 371.420305][ T9817] hsr_slave_0 (unregistering): left promiscuous mode [ 373.025048][ T9836] can: request_module (can-proto-0) failed. [ 373.065265][ T9840] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 374.930359][ T9861] can: request_module (can-proto-0) failed. [ 374.967800][ T9869] program syz.0.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.979501][ T9869] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 375.112565][ T9873] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 376.343170][ T9890] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input49 [ 376.436258][ T9894] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 376.475253][ T9884] can: request_module (can-proto-0) failed. [ 376.499790][ T9886] can: request_module (can-proto-0) failed. [ 378.666184][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678778][ T9920] random: crng reseeded on system resumption [ 378.688735][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.050858][ T30] audit: type=1800 audit(4294967438.955:4): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.710" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 379.546657][ T9912] syz.0.705 (9912): attempted to duplicate a private mapping with mremap. This is not supported. [ 380.252570][ T9937] can: request_module (can-proto-0) failed. [ 380.368784][ T9943] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 380.693527][ T9944] can: request_module (can-proto-0) failed. [ 380.852592][ T9944] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 381.924884][ T9955] can: request_module (can-proto-0) failed. [ 382.186646][ T9959] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 382.740483][ T9964] can: request_module (can-proto-0) failed. [ 382.755620][ T9970] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input55 [ 383.207816][ T9972] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 383.965370][ T9978] can: request_module (can-proto-0) failed. [ 384.025457][ T9978] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input56 [ 384.075434][ T9988] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input57 [ 384.115165][ T9984] can: request_module (can-proto-0) failed. [ 385.253852][ T9999] can: request_module (can-proto-0) failed. [ 385.291898][ T9999] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 385.957752][T10016] can: request_module (can-proto-0) failed. [ 386.067621][T10021] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input59 [ 386.654473][T10029] can: request_module (can-proto-0) failed. [ 386.725400][T10032] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input60 [ 387.528701][T10038] can: request_module (can-proto-0) failed. [ 387.584342][T10038] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input61 [ 390.152896][ T7120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.330171][ T7120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.709108][ T7120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.793797][T10088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 391.119189][T10090] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 391.376649][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.389079][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.399071][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.419798][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.433467][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.433584][ T7120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.067484][ T7120] bridge_slave_1: left allmulticast mode [ 392.073445][ T7120] bridge_slave_1: left promiscuous mode [ 392.085280][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.117682][ T7120] bridge_slave_0: left allmulticast mode [ 392.166870][ T7120] bridge_slave_0: left promiscuous mode [ 392.180712][T10102] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 392.195439][T10099] can: request_module (can-proto-0) failed. [ 392.197817][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.243421][T10099] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input64 [ 393.339479][ T7120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.352817][ T7120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.363556][ T7120] bond0 (unregistering): Released all slaves [ 393.535960][ T51] Bluetooth: hci1: command tx timeout [ 393.571842][ T7120] .SR: left promiscuous mode [ 394.095992][ T7120] tipc: Left network mode [ 394.312920][T10095] chnl_net:caif_netlink_parms(): no params data found syzkaller syzkaller login: [ 395.347217][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.424441][T10154] can: request_module (can-proto-0) failed. [ 395.440892][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.463159][T10095] bridge_slave_0: entered allmulticast mode [ 395.478487][T10095] bridge_slave_0: entered promiscuous mode [ 395.487360][T10154] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input65 [ 395.616070][ T51] Bluetooth: hci1: command tx timeout [ 395.627880][ T7120] hsr_slave_0: left promiscuous mode [ 395.650945][ T7120] hsr_slave_1: left promiscuous mode [ 395.672093][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.720044][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.769296][ T7120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.833054][ T7120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.137890][ T7120] veth1_macvtap: left promiscuous mode [ 396.150407][ T7120] veth0_macvtap: left promiscuous mode [ 396.166122][ T7120] veth1_vlan: left promiscuous mode [ 396.172034][ T7120] veth0_vlan: left promiscuous mode [ 396.281546][T10161] Invalid ELF header magic: != ELF [ 397.111530][ T7120] team0 (unregistering): Port device team_slave_1 removed [ 397.213455][ T7120] team0 (unregistering): Port device team_slave_0 removed [ 397.706089][ T51] Bluetooth: hci1: command tx timeout [ 397.756291][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.764680][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.785478][T10095] bridge_slave_1: entered allmulticast mode [ 397.798140][T10095] bridge_slave_1: entered promiscuous mode [ 397.970590][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 397.985102][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.018853][T10173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 398.141472][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.189328][T10176] hub 8-0:1.0: USB hub found [ 398.204108][T10176] hub 8-0:1.0: 1 port detected [ 398.359605][T10095] team0: Port device team_slave_0 added [ 398.367883][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 398.406644][T10095] team0: Port device team_slave_1 added [ 398.538934][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.552692][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.594519][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.633918][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.647450][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.688491][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.114807][T10196] can: request_module (can-proto-0) failed. [ 399.154146][T10195] Invalid ELF header magic: != ELF [ 399.170761][T10095] hsr_slave_0: entered promiscuous mode [ 399.186777][T10095] hsr_slave_1: entered promiscuous mode [ 399.193398][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.215907][T10095] Cannot create hsr debugfs directory [ 399.788408][ T51] Bluetooth: hci1: command tx timeout [ 400.204327][T10210] hub 8-0:1.0: USB hub found [ 400.233527][T10210] hub 8-0:1.0: 1 port detected [ 400.701982][T10227] can: request_module (can-proto-0) failed. [ 400.887627][T10235] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input68 [ 401.817997][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 401.981726][T10254] can: request_module (can-proto-0) failed. [ 402.115260][T10251] hsr_slave_0 (unregistering): left promiscuous mode [ 402.386372][T10095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.401031][T10095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.427493][T10095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.472168][T10095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.879673][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.933065][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.978289][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.985422][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.029894][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.037146][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.181532][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.905045][T10293] Invalid ELF header magic: != ELF [ 403.914781][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.302914][T10095] veth0_vlan: entered promiscuous mode [ 404.445229][T10306] can: request_module (can-proto-0) failed. [ 404.491560][T10095] veth1_vlan: entered promiscuous mode [ 404.650616][T10095] veth0_macvtap: entered promiscuous mode [ 404.687383][T10095] veth1_macvtap: entered promiscuous mode [ 404.751597][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.243080][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.342134][T10095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.356359][T10095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.365172][T10095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.383234][T10095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.949538][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.989144][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.181960][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.212957][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.585164][T10347] can: request_module (can-proto-0) failed. [ 406.661654][T10347] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input71 [ 406.696482][T10354] can: request_module (can-proto-0) failed. [ 407.971920][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 408.353376][T10382] hsr_slave_0 (unregistering): left promiscuous mode [ 411.415734][T10439] random: crng reseeded on system resumption [ 412.864157][T10475] can: request_module (can-proto-0) failed. [ 414.208385][T10498] can: request_module (can-proto-0) failed. [ 414.332902][T10498] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input74 [ 414.948557][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 414.992258][T10503] misc userio: No port type given on /dev/userio [ 415.234495][T10511] hub 8-0:1.0: USB hub found [ 415.262304][T10511] hub 8-0:1.0: 1 port detected [ 415.328742][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 415.976216][T10521] can: request_module (can-proto-0) failed. [ 417.269461][T10528] random: crng reseeded on system resumption [ 418.478180][T10557] can: request_module (can-proto-0) failed. [ 419.565358][T10576] can: request_module (can-proto-0) failed. [ 420.168603][T10587] can: request_module (can-proto-0) failed. [ 423.685581][T10636] can: request_module (can-proto-0) failed. [ 423.693514][T10641] can: request_module (can-proto-0) failed. [ 426.438735][T10686] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 487.348013][T11585] dump_stack_lvl+0x16c/0x1f0 [ 487.348042][T11585] should_fail_ex+0x512/0x640 [ 487.348067][T11585] get_futex_key+0x1d0/0x1540 [ 487.348087][T11585] ? __pfx_get_futex_key+0x10/0x10 [ 487.348103][T11585] ? do_user_addr_fault+0x829/0x1370 [ 487.348127][T11585] futex_wake+0xea/0x530 [ 487.348149][T11585] ? __pfx_futex_wake+0x10/0x10 [ 487.348167][T11585] ? __lock_acquire+0xb8a/0x1c90 [ 487.348194][T11585] do_futex+0x1e3/0x350 [ 487.348211][T11585] ? __pfx_do_futex+0x10/0x10 [ 487.348226][T11585] ? __might_fault+0xe3/0x190 [ 487.348252][T11585] mm_release+0x24e/0x300 [ 487.348268][T11585] do_exit+0x68b/0x2bd0 [ 487.348290][T11585] ? __pfx_do_exit+0x10/0x10 [ 487.348308][T11585] ? do_raw_spin_lock+0x12c/0x2b0 [ 487.348328][T11585] ? find_held_lock+0x2b/0x80 [ 487.348345][T11585] do_group_exit+0xd3/0x2a0 [ 487.348365][T11585] get_signal+0x2673/0x26d0 [ 487.348387][T11585] ? __pfx_get_signal+0x10/0x10 [ 487.348402][T11585] ? do_futex+0x122/0x350 [ 487.348419][T11585] ? __pfx_do_futex+0x10/0x10 [ 487.348439][T11585] arch_do_signal_or_restart+0x8f/0x790 [ 487.348456][T11585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 487.348476][T11585] ? __x64_sys_poll+0x123/0x450 [ 487.348496][T11585] ? __pfx___x64_sys_poll+0x10/0x10 [ 487.348519][T11585] exit_to_user_mode_loop+0x84/0x110 [ 487.348542][T11585] do_syscall_64+0x3f6/0x490 [ 487.348566][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.348580][T11585] RIP: 0033:0x7fd18a38e929 [ 487.348593][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.348607][T11585] RSP: 002b:00007fd18b1ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 487.348621][T11585] RAX: fffffffffffffe00 RBX: 00007fd18a5b6088 RCX: 00007fd18a38e929 [ 487.348630][T11585] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd18a5b6088 [ 487.348638][T11585] RBP: 00007fd18a5b6080 R08: 0000000000000000 R09: 0000000000000000 [ 487.348653][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd18a5b608c [ 487.348661][T11585] R13: 0000000000000000 R14: 00007fff1e68db20 R15: 00007fff1e68dc08 [ 487.348679][T11585] [ 489.367943][T11627] random: crng reseeded on system resumption [ 490.325236][T11633] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 490.558423][T11639] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input112 [ 491.090290][T11640] can: request_module (can-proto-0) failed. [ 491.143524][T11645] can: request_module (can-proto-0) failed. [ 491.238440][T11650] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input113 [ 492.648348][T11670] can: request_module (can-proto-0) failed. [ 492.671878][T11670] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input114 [ 494.194674][T11687] ip_vti0: entered allmulticast mode [ 496.299561][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'. [ 498.022554][T11768] Invalid ELF header magic: != ELF [ 498.819744][T11779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 498.907568][T11779] team0: Port device team_slave_0 removed [ 500.672322][T11795] can: request_module (can-proto-0) failed. [ 500.828370][T11795] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input115 [ 501.403785][T11803] FAULT_INJECTION: forcing a failure. [ 501.403785][T11803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 501.419102][T11803] CPU: 1 UID: 0 PID: 11803 Comm: syz.2.1006 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 501.419138][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.419153][T11803] Call Trace: [ 501.419162][T11803] [ 501.419171][T11803] dump_stack_lvl+0x16c/0x1f0 [ 501.419215][T11803] should_fail_ex+0x512/0x640 [ 501.419254][T11803] should_fail_alloc_page+0xe7/0x130 [ 501.419282][T11803] prepare_alloc_pages+0x3c2/0x610 [ 501.419311][T11803] ? rcu_is_watching+0x12/0xc0 [ 501.419342][T11803] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 501.419385][T11803] ? rcu_is_watching+0x12/0xc0 [ 501.419410][T11803] ? trace_mm_page_alloc+0x11f/0x1a0 [ 501.419440][T11803] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 501.419476][T11803] ? stack_trace_save+0x8e/0xc0 [ 501.419504][T11803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 501.419553][T11803] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 501.419588][T11803] ? __get_vm_area_node+0x1ca/0x330 [ 501.419615][T11803] ? vmap+0x135/0x320 [ 501.419639][T11803] ? relay_open_buf.part.0+0x445/0xc80 [ 501.419668][T11803] ? relay_open+0x653/0xad0 [ 501.419694][T11803] ? do_blk_trace_setup+0x503/0xb50 [ 501.419718][T11803] ? blk_trace_setup+0xed/0x1b0 [ 501.419742][T11803] ? blk_trace_ioctl+0x146/0x280 [ 501.419768][T11803] ? blkdev_ioctl+0x108/0x6d0 [ 501.419815][T11803] alloc_pages_bulk_noprof+0x71c/0x1410 [ 501.419853][T11803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.419892][T11803] ? policy_nodemask+0xea/0x4e0 [ 501.419921][T11803] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 501.419959][T11803] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 501.420000][T11803] kasan_populate_vmalloc+0xf1/0x1f0 [ 501.420042][T11803] alloc_vmap_area+0x959/0x29c0 [ 501.420084][T11803] ? __pfx_alloc_vmap_area+0x10/0x10 [ 501.420122][T11803] __get_vm_area_node+0x1ca/0x330 [ 501.420155][T11803] ? relay_open_buf.part.0+0x445/0xc80 [ 501.420186][T11803] get_vm_area_caller+0x71/0xa0 [ 501.420215][T11803] ? relay_open_buf.part.0+0x445/0xc80 [ 501.420247][T11803] vmap+0x135/0x320 [ 501.420275][T11803] ? __pfx_vmap+0x10/0x10 [ 501.420300][T11803] ? trace_kmalloc+0x2b/0xd0 [ 501.420324][T11803] ? relay_open_buf.part.0+0x194/0xc80 [ 501.420363][T11803] relay_open_buf.part.0+0x445/0xc80 [ 501.420408][T11803] relay_open+0x653/0xad0 [ 501.420439][T11803] ? debugfs_create_file_full+0x41/0x60 [ 501.420475][T11803] do_blk_trace_setup+0x503/0xb50 [ 501.420509][T11803] blk_trace_setup+0xed/0x1b0 [ 501.420537][T11803] ? __pfx_blk_trace_setup+0x10/0x10 [ 501.420564][T11803] ? __pfx_snprintf+0x10/0x10 [ 501.420617][T11803] blk_trace_ioctl+0x146/0x280 [ 501.420646][T11803] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 501.420681][T11803] ? find_held_lock+0x2b/0x80 [ 501.420706][T11803] ? hook_file_ioctl_common+0x145/0x410 [ 501.420738][T11803] blkdev_ioctl+0x108/0x6d0 [ 501.420767][T11803] ? __pfx_blkdev_ioctl+0x10/0x10 [ 501.420809][T11803] ? __pfx_blkdev_ioctl+0x10/0x10 [ 501.420842][T11803] __x64_sys_ioctl+0x18e/0x210 [ 501.420876][T11803] do_syscall_64+0xcd/0x490 [ 501.420918][T11803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.420944][T11803] RIP: 0033:0x7fd18a38e929 [ 501.420965][T11803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.420988][T11803] RSP: 002b:00007fd18b20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.421012][T11803] RAX: ffffffffffffffda RBX: 00007fd18a5b5fa0 RCX: 00007fd18a38e929 [ 501.421029][T11803] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 501.421045][T11803] RBP: 00007fd18a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 501.421060][T11803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.421074][T11803] R13: 0000000000000000 R14: 00007fd18a5b5fa0 R15: 00007fff1e68dc08 [ 501.421109][T11803] [ 501.800284][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.806672][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.890364][T11848] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input116 [ 503.962663][T11836] can: request_module (can-proto-0) failed. [ 507.800261][T11893] can: request_module (can-proto-0) failed. [ 507.863496][T11892] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input117 [ 508.142551][T11902] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input118 [ 508.341306][T11905] can: request_module (can-proto-0) failed. [ 509.170511][T11928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 509.532230][T11928] team0: Port device team_slave_0 removed [ 512.480385][T11948] ptrace attach of "./syz-executor exec"[10095] was attempted by "./syz-executor exec"[11948] [ 513.858322][T11973] Bluetooth: hci1: command 0x0406 tx timeout [ 515.084072][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 515.363014][T12015] team0: Port device team_slave_0 removed [ 516.156506][T12034] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input119 [ 516.185126][T12025] can: request_module (can-proto-0) failed. [ 521.878544][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'. [ 522.104192][T12095] team0: Port device team_slave_0 removed [ 522.112270][T12107] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input120 [ 522.136956][T12099] can: request_module (can-proto-0) failed. [ 522.211208][T12108] Invalid ELF header magic: != ELF [ 525.065331][T12138] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input121 [ 525.214009][T12133] can: request_module (can-proto-0) failed. [ 526.709069][T12154] can: request_module (can-proto-0) failed. [ 526.728568][T12154] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input122 [ 527.995181][T12175] can: request_module (can-proto-0) failed. [ 529.126991][T12168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.133815][T12168] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.154923][T12168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.161727][T12168] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 529.182007][T12168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.196771][T12168] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.251526][T12168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.259750][T12168] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.446767][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'. [ 529.779428][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 530.206114][T12206] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input123 [ 530.223178][T12192] can: request_module (can-proto-0) failed. [ 530.271790][T12203] Invalid ELF header magic: != ELF [ 531.237045][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 531.250097][T11973] Bluetooth: hci2: command 0x0406 tx timeout [ 531.296141][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 531.857565][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 532.202986][T12220] sd 0:0:1:0: PR command failed: 1026 [ 532.215227][T12220] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 532.245109][T12220] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 533.295987][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 533.299351][T11973] Bluetooth: hci2: command 0x0406 tx timeout [ 533.376038][T11973] Bluetooth: hci1: command 0x0406 tx timeout [ 534.340706][T12268] can: request_module (can-proto-0) failed. [ 534.340766][T12267] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input124 [ 535.234772][T12273] Invalid ELF header magic: != ELF [ 538.010729][T12314] can: request_module (can-proto-0) failed. [ 538.071603][T12313] can: request_module (can-proto-0) failed. [ 538.091908][T12314] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input125 [ 538.236181][T12313] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input126 [ 540.058780][T12339] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1090'. [ 542.706620][T12378] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input127 [ 542.772672][T12376] can: request_module (can-proto-0) failed. [ 542.956734][T12385] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1097'. [ 546.280210][T12421] FAULT_INJECTION: forcing a failure. [ 546.280210][T12421] name failslab, interval 1, probability 0, space 0, times 0 [ 546.309426][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.1.1101 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 546.309462][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.309477][T12421] Call Trace: [ 546.309485][T12421] [ 546.309496][T12421] dump_stack_lvl+0x16c/0x1f0 [ 546.309539][T12421] should_fail_ex+0x512/0x640 [ 546.309581][T12421] ? __kmalloc_noprof+0xbf/0x510 [ 546.309618][T12421] ? tracepoint_add_func+0x2a6/0xea0 [ 546.309654][T12421] should_failslab+0xc2/0x120 [ 546.309677][T12421] __kmalloc_noprof+0xd2/0x510 [ 546.309717][T12421] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 546.309747][T12421] tracepoint_add_func+0x2a6/0xea0 [ 546.309782][T12421] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 546.309819][T12421] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 546.309848][T12421] tracepoint_probe_register+0xbf/0x100 [ 546.309885][T12421] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 546.309920][T12421] ? __pfx_blk_add_trace_rq_issue+0x10/0x10 [ 546.309951][T12421] ? relay_open+0x62e/0xad0 [ 546.309987][T12421] blk_register_tracepoints+0x48/0x380 [ 546.310024][T12421] do_blk_trace_setup+0x933/0xb50 [ 546.310057][T12421] blk_trace_setup+0xed/0x1b0 [ 546.310085][T12421] ? __pfx_blk_trace_setup+0x10/0x10 [ 546.310111][T12421] ? __pfx_snprintf+0x10/0x10 [ 546.310165][T12421] blk_trace_ioctl+0x146/0x280 [ 546.310193][T12421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 546.310226][T12421] ? find_held_lock+0x2b/0x80 [ 546.310250][T12421] ? hook_file_ioctl_common+0x145/0x410 [ 546.310282][T12421] blkdev_ioctl+0x108/0x6d0 [ 546.310311][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 546.310344][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 546.310374][T12421] __x64_sys_ioctl+0x18e/0x210 [ 546.310406][T12421] do_syscall_64+0xcd/0x490 [ 546.310444][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.310469][T12421] RIP: 0033:0x7f046178e929 [ 546.310490][T12421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.310513][T12421] RSP: 002b:00007f0462594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.310537][T12421] RAX: ffffffffffffffda RBX: 00007f04619b5fa0 RCX: 00007f046178e929 [ 546.310561][T12421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 546.310577][T12421] RBP: 00007f0461810b39 R08: 0000000000000000 R09: 0000000000000000 [ 546.310593][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.310608][T12421] R13: 0000000000000000 R14: 00007f04619b5fa0 R15: 00007ffe3c0d9428 [ 546.310644][T12421] [ 546.310815][T12421] ------------[ cut here ]------------ [ 546.467299][T12424] can: request_module (can-proto-0) failed. [ 546.471697][T12421] WARNING: CPU: 0 PID: 12421 at kernel/trace/blktrace.c:1080 blk_register_tracepoints+0x2be/0x380 [ 546.592929][T12421] Modules linked in: [ 546.597190][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.1.1101 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 546.607611][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.619404][T12421] RIP: 0010:blk_register_tracepoints+0x2be/0x380 [ 546.626058][T12421] Code: c3 89 c6 e8 c4 12 f8 ff 85 db 0f 85 ca 00 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 0f 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 55 17 f8 ff 90 0f 0b 90 e9 b4 fd ff ff [ 546.645803][T12421] RSP: 0018:ffffc90018d27c28 EFLAGS: 00010287 [ 546.651885][T12421] RAX: 000000000002febe RBX: 00000000fffffff4 RCX: ffffc90004e39000 [ 546.659897][T12421] RDX: 0000000000080000 RSI: ffffffff81c3729d RDI: 0000000000000005 [ 546.668400][T12421] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 546.677193][T12421] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000000000ff [ 546.685219][T12421] R13: 0000000000002000 R14: ffff888026434478 R15: ffffc90018d27cf4 [ 546.693301][T12421] FS: 00007f04625946c0(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 546.702395][T12421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.709173][T12421] CR2: 0000001b2fef0ff8 CR3: 00000000771c0000 CR4: 00000000003526f0 [ 546.717329][T12421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.725720][T12421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.733984][T12421] Call Trace: [ 546.737488][T12421] [ 546.740459][T12421] do_blk_trace_setup+0x933/0xb50 [ 546.745805][T12421] blk_trace_setup+0xed/0x1b0 [ 546.750494][T12421] ? __pfx_blk_trace_setup+0x10/0x10 [ 546.755857][T12421] ? __pfx_snprintf+0x10/0x10 [ 546.760569][T12421] blk_trace_ioctl+0x146/0x280 [ 546.765907][T12421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 546.771217][T12421] ? find_held_lock+0x2b/0x80 [ 546.776383][T12421] ? hook_file_ioctl_common+0x145/0x410 [ 546.781941][T12421] blkdev_ioctl+0x108/0x6d0 [ 546.786507][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 546.791555][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 546.796721][T12421] __x64_sys_ioctl+0x18e/0x210 [ 546.801507][T12421] do_syscall_64+0xcd/0x490 [ 546.806076][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.811985][T12421] RIP: 0033:0x7f046178e929 [ 546.816500][T12421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.836386][T12421] RSP: 002b:00007f0462594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.844811][T12421] RAX: ffffffffffffffda RBX: 00007f04619b5fa0 RCX: 00007f046178e929 [ 546.852977][T12421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 546.860996][T12421] RBP: 00007f0461810b39 R08: 0000000000000000 R09: 0000000000000000 [ 546.869591][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.878082][T12421] R13: 0000000000000000 R14: 00007f04619b5fa0 R15: 00007ffe3c0d9428 [ 546.886479][T12421] [ 546.889532][T12421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 546.896809][T12421] CPU: 0 UID: 0 PID: 12421 Comm: syz.1.1101 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 546.907283][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.917340][T12421] Call Trace: [ 546.920625][T12421] [ 546.923552][T12421] dump_stack_lvl+0x3d/0x1f0 [ 546.928154][T12421] panic+0x71c/0x800 [ 546.932053][T12421] ? __pfx_panic+0x10/0x10 [ 546.936472][T12421] ? show_trace_log_lvl+0x29b/0x3e0 [ 546.941685][T12421] ? blk_register_tracepoints+0x2be/0x380 [ 546.947414][T12421] check_panic_on_warn+0xab/0xb0 [ 546.952361][T12421] __warn+0xf6/0x3c0 [ 546.956286][T12421] ? blk_register_tracepoints+0x2be/0x380 [ 546.962019][T12421] report_bug+0x3c3/0x580 [ 546.966349][T12421] ? blk_register_tracepoints+0x2be/0x380 [ 546.972089][T12421] handle_bug+0x184/0x210 [ 546.976438][T12421] exc_invalid_op+0x17/0x50 [ 546.981059][T12421] asm_exc_invalid_op+0x1a/0x20 [ 546.986013][T12421] RIP: 0010:blk_register_tracepoints+0x2be/0x380 [ 546.992705][T12421] Code: c3 89 c6 e8 c4 12 f8 ff 85 db 0f 85 ca 00 00 00 5b e9 76 17 f8 ff e8 71 17 f8 ff 90 0f 0b 90 e9 76 fd ff ff e8 63 17 f8 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 55 17 f8 ff 90 0f 0b 90 e9 b4 fd ff ff [ 547.012410][T12421] RSP: 0018:ffffc90018d27c28 EFLAGS: 00010287 [ 547.018496][T12421] RAX: 000000000002febe RBX: 00000000fffffff4 RCX: ffffc90004e39000 [ 547.026501][T12421] RDX: 0000000000080000 RSI: ffffffff81c3729d RDI: 0000000000000005 [ 547.034476][T12421] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 547.042449][T12421] R10: 00000000fffffff4 R11: 0000000000000001 R12: 00000000000000ff [ 547.050448][T12421] R13: 0000000000002000 R14: ffff888026434478 R15: ffffc90018d27cf4 [ 547.058488][T12421] ? blk_register_tracepoints+0x2bd/0x380 [ 547.064231][T12421] ? blk_register_tracepoints+0x2bd/0x380 [ 547.069976][T12421] do_blk_trace_setup+0x933/0xb50 [ 547.075019][T12421] blk_trace_setup+0xed/0x1b0 [ 547.079722][T12421] ? __pfx_blk_trace_setup+0x10/0x10 [ 547.085015][T12421] ? __pfx_snprintf+0x10/0x10 [ 547.089726][T12421] blk_trace_ioctl+0x146/0x280 [ 547.095121][T12421] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 547.100441][T12421] ? find_held_lock+0x2b/0x80 [ 547.105138][T12421] ? hook_file_ioctl_common+0x145/0x410 [ 547.110697][T12421] blkdev_ioctl+0x108/0x6d0 [ 547.115196][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 547.120242][T12421] ? __pfx_blkdev_ioctl+0x10/0x10 [ 547.125296][T12421] __x64_sys_ioctl+0x18e/0x210 [ 547.130058][T12421] do_syscall_64+0xcd/0x490 [ 547.134566][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.140490][T12421] RIP: 0033:0x7f046178e929 [ 547.144894][T12421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.164682][T12421] RSP: 002b:00007f0462594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.173280][T12421] RAX: ffffffffffffffda RBX: 00007f04619b5fa0 RCX: 00007f046178e929 [ 547.181487][T12421] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 547.189460][T12421] RBP: 00007f0461810b39 R08: 0000000000000000 R09: 0000000000000000 [ 547.197421][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.205499][T12421] R13: 0000000000000000 R14: 00007f04619b5fa0 R15: 00007ffe3c0d9428 [ 547.213573][T12421] [ 547.216853][T12421] Kernel Offset: disabled [ 547.221181][T12421] Rebooting in 86400 seconds..