last executing test programs: 10.721498913s ago: executing program 0 (id=732): kexec_load$auto(0x2, 0x8, &(0x7f0000000000)={@kbuf=&(0x7f0000000240)="88d9c42cd4b7b4e089cde7808195b89e4159a3af27c8364b4e4da8c11bff6a1a0b7df0ae0fa745cb6440c3ede6e007d084bc2d3eff1784adc3c2efe77bb4a8f0efe0704f43bda97fd83f3da1058e042e5cb88ce1f6a1fb08a11fbe4bfb2ea89c100d1030e5c1cdc6d81d794c71dda37fbd87793fa0a967e4ce88bd6909bd9a238952eb70c3c161b6ecd97e59528b", 0x8, 0x100000000}, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 9.618614041s ago: executing program 0 (id=737): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) r1 = fcntl$auto(r0, 0x84, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x17, 0x4, 0xbb, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp2\x00', 0xc7f16bff2a10ba01, 0x0) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000080)=@bpf_attr_4={0x0, r1, 0x5, r2}, 0x6) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r4) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) r5 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0x4a082, 0x0) writev$auto(r5, &(0x7f0000000300)={0x0, 0x1}, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000180)={"ef13a5421a8765cadfca437c4d1316833843180bb151ed36e8ce6cb454168d6c", 0x3ff, 0xc5, 0x1000, 0x2, 0x9}) ioctl$auto_BLKTRACESTART(r6, 0x1274, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r7 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r7, 0x0, 0x3) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ttyx2/power/autosuspend_delay_ms\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r8, &(0x7f0000003900)='\t', 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) 9.482144627s ago: executing program 1 (id=739): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8000, 0x1, 0xffbffffc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) shmctl$auto(0x6, 0x3, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x18) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCGUNIT(r5, 0x4004743c, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x14, r3, 0x8000) 8.677173024s ago: executing program 1 (id=743): read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r2) sendmsg$auto_SMC_PNETID_ADD(r0, 0x0, 0x4000001) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 8.289642395s ago: executing program 3 (id=744): read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r1) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4000001) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, 0x0, 0x0) 7.724787254s ago: executing program 1 (id=745): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x3, 0xa) select$auto(0x11fff, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/description\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) sendfile$auto(0x1, r1, 0x0, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r3, 0x707, &(0x7f0000000240)="84b83aa991358b0cffdaf3445cb30f92bcac64d960ffbe8a964f3b5b2a12d10ab29f0dda7e25228bd72f8cf19341cc763727393648c466596e3bd046d0efa7dcb1c149eb1bc7dbe1847d301ef83bfed31c9b38a77391bac9b42a7aad9fd5c80139db5fb90e2b") read$auto(r2, 0x0, 0x7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r5, 0x8004e500, 0x0) unshare$auto(0x40000080) syz_clone(0x100281091, 0x0, 0xffb6, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003557ce860fa656f708f6c04e975a31cdeb4a6e85bd6b5bea068a416cb0cf91644a2d7ae3f2565db112a78f4504f7f6785cc28f5942c104cb9e0b3c2bcf9cc89270058ce8310412715980f44697a3e4de74aeb7bb8cd2a145cfca8721ccb3ecc7101083d6d5b1d2402a6ee4bf1c5163082ae9049d5d1bb881782e5c0eb253c67e6960ebbf17b4f89b48c2bd0d6eafd32a02cf", @ANYRES16=r6, @ANYBLOB="57e72bbd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 7.511826727s ago: executing program 3 (id=746): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8202, 0x0) read$auto(r0, 0x0, 0x0) 6.74736297s ago: executing program 3 (id=747): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0xfeff, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 6.387196555s ago: executing program 1 (id=748): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0), 0x55) setsockopt$auto(r0, 0x100, 0x2, &(0x7f0000000000)='\xda\x00', 0x41) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x40, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x18, 0x6, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) mount$auto(0x0, 0x0, 0x0, 0x8002, 0x0) mincore$auto(0x7, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.386597138s ago: executing program 2 (id=749): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x16b301, 0x0) socket(0x29, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/19, 0x13) ioctl$auto_BLKROSET(r0, 0x125d, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) sendto$auto(0xffffffffffffffff, &(0x7f0000000580)="0e75ef1f547f82b34fe02bf76cc85dcb94af7f2dee6d39b1ea7726359994345fad9132ff7de608fa70ba93ee692ff19e7b95578df0b0cb995c1cc12b9173bc9abc0d2565fa0adfb8a462e1cd8441c1ffa4f37432a354e79a8b08366f9c7614f4c380e59fbd8defbc38d136c1805fe0714ffcfcaf786e74ef928c4491d6c7da81daa5020949bc5d8bd96ee2f4cfee9080eec4a2ab080e4afc06fb7eaa4f7e265bb23549444ebb61d135f22260dd4a", 0x7fff, 0x1, &(0x7f0000000340)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0xcc0) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) pipe$auto(0x0) r5 = signalfd4$auto(r2, &(0x7f0000000040)={0x5e}, 0x6, 0x81) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\b\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fbdbdf25270000000400cc0008000d000010000004001e012a00fc0010a94a6309a585550d065e005a9f743fb87e70352d2306388396dd98c550e613621434452c9a00000800c3000000000004005f00"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) 6.058817206s ago: executing program 0 (id=750): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22a40, 0x145) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x2, 0x200, 0x4, 0x84}, 0x1fe, 0x5) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x3cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3a7, 0x1, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @u32=0x7}, @generic="14eff9e4f0531463b65612256cfcd8754305e6d1f8e42f278f715f61cfe8ae4b9fc6d451c214ff7c306be16a172cfcd98a5a759a9b56f8258c808f988340d247daffaa9dd82e2483c57732aacd49d768c8097ff90f673babfb2412", @nested={0x85, 0x39, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xde}, @generic="fe86e08679b4b7e2a8486246d83d7b05a260a1658b40ce1f2d16a77bc530f65d317b0e83bb6bbcd6bd5e178702205f4c8a8e78f868698fe95082ac4db0add78c68f8cc625c6ce798a5b42961155c830e4971dc7e34cc09f4b448424edc1a639cc4ae36158e4d9ad6e0e64f3378f97f57c22537041a"]}, @generic="a0e2ef5976c2f3a08f16d7f783201afb335b66d1cba19d77334d7fe207faa671d335fb7661b01a9a98cb73d0587dae736acb3638aeecf64bec1e139bf3eac358478e0ca411851e262dcf01da61be89d268ecd9737fecf51e9874323adf4a73c9c167a6d38cf94a15674b599439c37184764107ceb01682d4a37031015d13670bcdd2a84bf0fabc5b9c5b027dc581911be49f02c4fb40c779bc9ef689f454e7d12c57096370cc46de5b0c4d21f4793e", @nested={0x65, 0x116, 0x0, 0x1, [@generic, @nested={0x4, 0x107}, @generic="b5d2d3bbc4fa7494efc4b684b668bdb79b1c950600fde9b124903b320edfe73c31bc027b5832e9e9eff7e7b6e1f2494c5c5bd11609b71dddb52911fb0c78d0b83d9b1d589f2f6eb514164bf248e5442a3e17f175f8", @typed={0x8, 0x81, 0x0, 0x0, @pid}]}, @typed={0x82, 0x96, 0x0, 0x0, @binary="57a6c0d0691ac4713a93e3ae622fb444db75ea82ae65f71acdca634b5a3d6a2759ebb56c64e8e92cf76225f94163f0cb80fa19b1d0d80f6481c1ff5d38fc3ec42be7d8a80e1e6a03be5511fab2b6b6a76dff0741aa3c068e25aec8018ea113c6a32117af4c18a6fe0994d9d74ada0449fd16edb2798615749f8a66d978cc"}, @nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0x91}]}, @typed={0x20, 0x5a, 0x0, 0x0, @str='/dev/dvb/adapter0/frontend0\x00'}, @generic, @generic="657f15b05e70806a7e9118bb8880180fdb2a58fab61dddddf1051a72de436847aa9b5dd5de92322f869c8f24d82b9fbff8dc49b451d08b04e042e38c0d1c72a9818f95030f17427562b8e7ecaaa21bd019ac9a069ad9f8a152b67b526014b1f39a843643c362b36113acf0e3716a35fd22485660281852edc39a855f6f1ba4a72e4663bb28a1d071ebecaf2bfca5cf50930cc0aeafe35bb6a19308e849342d2c0e85499d526f6a70d5148d02fafe2e61a9a30f68ef09db9e381f1456d3267c2942180eedade6a085d7bfd5d556bc260b255a41bacd21724d088fc33527c17fe2cd801cf8bc429767a1c1f65de748ba384042ce9027"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x800}, 0x8800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) socketpair$auto(0x7, 0xfffffffd, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r2) 6.009813261s ago: executing program 3 (id=751): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040), 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8000, 0x1, 0xffbffffc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) shmctl$auto(0x6, 0x3, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x18) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCGUNIT(r5, 0x4004743c, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x14, r3, 0x8000) 5.324530872s ago: executing program 2 (id=752): r0 = io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe6q\xf9\xa6u\x8eZ\x00\xf8*C]\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\x9a5if\xd0\x8e%g,\xc5\xec\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8) \x15\xce\xd8\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\xe6\xa4Q\x81+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05\xc8\x9f\xe5[\xba\xd2V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xba\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4', 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24004050}, 0x0) ioctl$auto(r1, 0xffffffff, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYBLOB="f931413bd44bd02e459d0d21fdb931e52840d715380b272d0a7d34cce12b365adef3ba85f5a92c11d169f0ae3bd38bfadafafd2108e18a6b30563e6b2b541ac666ba3b4e6972a03e9e566e11986a871efe07bb988fcf9c0e8590620b0eee036b01c9e567ed3ee1936e0050cda406e36d7f794f5dd5929100c6634887b25174c5703a3670064f8383456349423b06218d1d000a28c074b09507fcaedb2e5d3d7d0b45f243ed328c8de968e1573877cfef44f6472214a5fb0cb16ae16d", @ANYRES16=r1, @ANYRES64=r1, @ANYRES16, @ANYRES32=r0, @ANYRES64, @ANYRES16=0x0, @ANYRESHEX], 0x30}}, 0x40008800) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0xbf) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) read$auto(0xffffffffffffffff, &(0x7f0000003580)='\x00', 0x200000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) 4.531320792s ago: executing program 2 (id=753): read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r2) sendmsg$auto_SMC_PNETID_ADD(r0, 0x0, 0x4000001) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 4.495630754s ago: executing program 0 (id=754): openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0xe4ff) 4.248824916s ago: executing program 3 (id=755): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 3.803473973s ago: executing program 2 (id=756): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4605, 0x0) 3.778418503s ago: executing program 0 (id=757): mmap$auto(0x3, 0x2020009, 0x100000001, 0x15, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) mmap$auto(0x7fffffff, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x62800, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0xaf02, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00!\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d000800030003000000060014"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) mmap$auto(0x0, 0x6426, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) 3.442881238s ago: executing program 3 (id=758): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) pread64$auto(r2, 0x0, 0x40000000f42c, 0x585) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) fanotify_init$auto(0x2208, 0x2) 3.045809007s ago: executing program 2 (id=759): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x3, 0xa) select$auto(0x11fff, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/description\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x0) sendfile$auto(0x1, r1, 0x0, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r3, 0x707, &(0x7f0000000240)="84b83aa991358b0cffdaf3445cb30f92bcac64d960ffbe8a964f3b5b2a12d10ab29f0dda7e25228bd72f8cf19341cc763727393648c466596e3bd046d0efa7dcb1c149eb1bc7dbe1847d301ef83bfed31c9b38a77391bac9b42a7aad9fd5c80139db5fb90e2b") read$auto(r2, 0x0, 0x7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r5, 0x8004e500, 0x0) unshare$auto(0x40000080) syz_clone(0x100281091, 0x0, 0xffb6, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003557ce860fa656f708f6c04e975a31cdeb4a6e85bd6b5bea068a416cb0cf91644a2d7ae3f2565db112a78f4504f7f6785cc28f5942c104cb9e0b3c2bcf9cc89270058ce8310412715980f44697a3e4de74aeb7bb8cd2a145cfca8721ccb3ecc7101083d6d5b1d2402a6ee4bf1c5163082ae9049d5d1bb881782e5c0eb253c67e6960ebbf17b4f89b48c2bd0d6eafd32a02cf", @ANYRES16=r6, @ANYBLOB="57e72bbd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.621622386s ago: executing program 1 (id=760): close_range$auto(0x2, 0x8, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6635ba46}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) mmap$auto(0x0, 0x10000, 0x4000000000db, 0x15, r2, 0x8) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x7fffffff) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x3fffffffffd, &(0x7f0000000180)={&(0x7f0000000280), 0x40000000001243}, 0xa, 0x0) r7 = setfsuid$auto(0xee00) setreuid$auto(r7, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0xc, &(0x7f0000000000)={@siginfo_0_0={0xdc7, 0x5ad0, 0xf, @_sigchld={r4, r7, 0x5, 0x5, 0x2}}}, 0x4) mmap$auto(0x0, 0x5, 0x4000000000df, 0x2eb1, 0x401, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8202, 0x0) read$auto(r8, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xa8b, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0xd, 0x80002000400000d, 0xfffffffffffffffc, 0x0, 0x4) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000004) 1.295424294s ago: executing program 0 (id=761): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, r0, 0x8002) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0x0) r2 = prctl$auto(0x1000000003b, 0x8001, 0x4, 0x5, 0x7) madvise$auto(0x7, 0x8, 0x1a) r3 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/58, 0x3a) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) socket(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r2) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r5, 0x76f7e8bbe2a08c1d, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc17b}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [@nested={0x3a, 0x12d, 0x0, 0x1, [@generic="2d6b9ead195075d0cb35e5ec63bc037884d34d2407d609c9ca808d75b71b97901c256d64f22c02c22016eb830714", @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x4, 0x62, 0x0, 0x0, @binary}]}]}, 0x60}}, 0x20008000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 57.497115ms ago: executing program 2 (id=762): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22a40, 0x145) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x2, 0x200, 0x4, 0x84}, 0x1fe, 0x5) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x3cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3a7, 0x1, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @u32=0x7}, @generic="14eff9e4f0531463b65612256cfcd8754305e6d1f8e42f278f715f61cfe8ae4b9fc6d451c214ff7c306be16a172cfcd98a5a759a9b56f8258c808f988340d247daffaa9dd82e2483c57732aacd49d768c8097ff90f673babfb2412", @nested={0x85, 0x39, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xde}, @generic="fe86e08679b4b7e2a8486246d83d7b05a260a1658b40ce1f2d16a77bc530f65d317b0e83bb6bbcd6bd5e178702205f4c8a8e78f868698fe95082ac4db0add78c68f8cc625c6ce798a5b42961155c830e4971dc7e34cc09f4b448424edc1a639cc4ae36158e4d9ad6e0e64f3378f97f57c22537041a"]}, @generic="a0e2ef5976c2f3a08f16d7f783201afb335b66d1cba19d77334d7fe207faa671d335fb7661b01a9a98cb73d0587dae736acb3638aeecf64bec1e139bf3eac358478e0ca411851e262dcf01da61be89d268ecd9737fecf51e9874323adf4a73c9c167a6d38cf94a15674b599439c37184764107ceb01682d4a37031015d13670bcdd2a84bf0fabc5b9c5b027dc581911be49f02c4fb40c779bc9ef689f454e7d12c57096370cc46de5b0c4d21f4793e", @nested={0x65, 0x116, 0x0, 0x1, [@generic, @nested={0x4, 0x107}, @generic="b5d2d3bbc4fa7494efc4b684b668bdb79b1c950600fde9b124903b320edfe73c31bc027b5832e9e9eff7e7b6e1f2494c5c5bd11609b71dddb52911fb0c78d0b83d9b1d589f2f6eb514164bf248e5442a3e17f175f8", @typed={0x8, 0x81, 0x0, 0x0, @pid}]}, @typed={0x82, 0x96, 0x0, 0x0, @binary="57a6c0d0691ac4713a93e3ae622fb444db75ea82ae65f71acdca634b5a3d6a2759ebb56c64e8e92cf76225f94163f0cb80fa19b1d0d80f6481c1ff5d38fc3ec42be7d8a80e1e6a03be5511fab2b6b6a76dff0741aa3c068e25aec8018ea113c6a32117af4c18a6fe0994d9d74ada0449fd16edb2798615749f8a66d978cc"}, @nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0x91}]}, @typed={0x20, 0x5a, 0x0, 0x0, @str='/dev/dvb/adapter0/frontend0\x00'}, @generic, @generic="657f15b05e70806a7e9118bb8880180fdb2a58fab61dddddf1051a72de436847aa9b5dd5de92322f869c8f24d82b9fbff8dc49b451d08b04e042e38c0d1c72a9818f95030f17427562b8e7ecaaa21bd019ac9a069ad9f8a152b67b526014b1f39a843643c362b36113acf0e3716a35fd22485660281852edc39a855f6f1ba4a72e4663bb28a1d071ebecaf2bfca5cf50930cc0aeafe35bb6a19308e849342d2c0e85499d526f6a70d5148d02fafe2e61a9a30f68ef09db9e381f1456d3267c2942180eedade6a085d7bfd5d556bc260b255a41bacd21724d088fc33527c17fe2cd801cf8bc429767a1c1f65de748ba384042ce9027"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x800}, 0x8800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) socketpair$auto(0x7, 0xfffffffd, 0x1, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r2) 0s ago: executing program 1 (id=763): madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) socket(0xa, 0x801, 0x84) bpf$auto(0x10, 0x0, 0x63a) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/available_tracers\x00', 0xc200, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x15, 0x4, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf251a0000000c00018008000100", @ANYRES32=r1, @ANYBLOB="60ea15e795ae27f23d2c1018469f534c54b51ca16cea8bd4c593512802bbd15e0bc43fdde4b1e15b7a71be5551"], 0x20}}, 0x40000) r5 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8000) ioctl$auto_FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000000000)="fdd835a892e89516da4d277c132ae9b4c792d86b5388da9708234c5a448a181790a08fe79c549e4dfca8037c9518566a757eb2110080f17eeb9e69134ec46eddc238686a6c9eb07e6509125577a7d1ed7e5f95eda78579425197eafc47021baf3664bb2004d17d2ccea9db4e170bf9dcf99d9973200d9855711a0419fdb753416f962ea188baa5800f53c32b42353b1b0563f540de0a3679f0f50606c60be35881f32b130962535a60b4a25d676e4949ff83af25769cb766dfab919654e735e097e4b621f4295788645447e1fe7172ddef6a6853d87c97150a26257bf0c5fe7b957d14e3b7a36ce57b056de84bd9a4") r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x301101, 0x0) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r7, r7, 0x0, 0x400000000003) fcntl$auto(0xff80000000000000, 0x409, 0x3f) kernel console output (not intermixed with test programs): T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.163816][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.181589][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.199205][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.368068][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.381429][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.394598][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.413256][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.487639][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.588167][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.606067][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.625282][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.640379][ T5836] Bluetooth: hci0: command tx timeout [ 113.648309][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.661989][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.710651][ T5836] Bluetooth: hci3: command tx timeout [ 113.721902][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.730274][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.759121][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.773654][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.783227][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.792521][ T5836] Bluetooth: hci1: command tx timeout [ 113.798256][ T5836] Bluetooth: hci2: command tx timeout [ 113.864499][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.919873][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.928399][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.978037][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.986238][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.069818][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.204540][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.274770][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.283620][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.309819][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.318537][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.349677][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.479923][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.514521][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.524274][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.574642][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.583341][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.745600][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.779247][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.957811][ T5834] veth0_vlan: entered promiscuous mode [ 115.027763][ T5832] veth0_vlan: entered promiscuous mode [ 115.057949][ T5832] veth1_vlan: entered promiscuous mode [ 115.085480][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.100253][ T5834] veth1_vlan: entered promiscuous mode [ 115.198422][ T5832] veth0_macvtap: entered promiscuous mode [ 115.211264][ T5832] veth1_macvtap: entered promiscuous mode [ 115.272295][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.302414][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.316926][ T5834] veth0_macvtap: entered promiscuous mode [ 115.345403][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.355566][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.365792][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.376060][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.396936][ T5835] veth0_vlan: entered promiscuous mode [ 115.413957][ T5834] veth1_macvtap: entered promiscuous mode [ 115.434751][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.466397][ T5835] veth1_vlan: entered promiscuous mode [ 115.547936][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.559590][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.577160][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.609800][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.623480][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.642603][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.695639][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.696462][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.711631][ T5836] Bluetooth: hci0: command tx timeout [ 115.717404][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.732073][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.734700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.743303][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.779176][ T5835] veth0_macvtap: entered promiscuous mode [ 115.790793][ T5836] Bluetooth: hci3: command tx timeout [ 115.836717][ T5835] veth1_macvtap: entered promiscuous mode [ 115.865715][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.870826][ T5836] Bluetooth: hci2: command tx timeout [ 115.874668][ T55] Bluetooth: hci1: command tx timeout [ 115.890909][ T5833] veth0_vlan: entered promiscuous mode [ 115.897356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.929556][ T5833] veth1_vlan: entered promiscuous mode [ 115.993532][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.007586][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.018955][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.030176][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.042635][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.085962][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.093430][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.113103][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.125248][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.137913][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.155568][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.163864][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.173861][ T5833] veth0_macvtap: entered promiscuous mode [ 116.180223][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.199022][ T5833] veth1_macvtap: entered promiscuous mode [ 116.219618][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.230404][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.239352][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.252188][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.367926][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.368723][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.377797][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.396954][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.407859][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.419416][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.430334][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.442314][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.454976][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.484572][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.497889][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.515028][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.560711][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.577520][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.594810][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.609894][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.686719][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.700962][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.731911][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.748492][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.883666][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.906175][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.044442][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.075430][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.192928][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.222449][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.369413][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.439687][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.449258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.791880][ T55] Bluetooth: hci0: command tx timeout [ 117.870856][ T55] Bluetooth: hci3: command tx timeout [ 117.911877][ T5920] FAULT_INJECTION: forcing a failure. [ 117.911877][ T5920] name failslab, interval 1, probability 0, space 0, times 1 [ 117.955490][ T55] Bluetooth: hci2: command tx timeout [ 117.961571][ T5836] Bluetooth: hci1: command tx timeout [ 117.992364][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.0.7 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 117.992408][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 117.992438][ T5920] Call Trace: [ 117.992450][ T5920] [ 117.992467][ T5920] dump_stack_lvl+0x16c/0x1f0 [ 117.992525][ T5920] should_fail_ex+0x512/0x640 [ 117.992569][ T5920] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 117.992609][ T5920] should_failslab+0xc2/0x120 [ 117.992650][ T5920] __kmalloc_cache_node_noprof+0x6d/0x420 [ 117.992684][ T5920] ? __alloc_workqueue+0x506/0x1810 [ 117.992729][ T5920] __alloc_workqueue+0x506/0x1810 [ 117.992782][ T5920] alloc_workqueue+0xd2/0x200 [ 117.992824][ T5920] ? __pfx_alloc_workqueue+0x10/0x10 [ 117.992871][ T5920] ? rcu_is_watching+0x12/0xc0 [ 117.992899][ T5920] ? trace_kmalloc+0x2b/0xd0 [ 117.992941][ T5920] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.992988][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.993039][ T5920] ieee80211_register_hw+0x1e18/0x4020 [ 117.993097][ T5920] ? __pfx__raw_spin_unlock_bh+0x1/0x10 [ 117.993136][ T5920] ? __debug_object_init+0x261/0x3d0 [ 117.993174][ T5920] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 117.993235][ T5920] ? find_held_lock+0x2b/0x80 [ 117.993266][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.993310][ T5920] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 117.993346][ T5920] ? __hrtimer_setup+0x176/0x280 [ 117.993395][ T5920] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 117.993482][ T5920] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 117.993546][ T5920] hwsim_new_radio_nl+0xb51/0x12c0 [ 117.993600][ T5920] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.993662][ T5920] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 117.993709][ T5920] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 117.993766][ T5920] genl_family_rcv_msg_doit+0x206/0x2f0 [ 117.993814][ T5920] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.993859][ T5920] ? trace_cap_capable+0x18d/0x200 [ 117.993901][ T5920] ? bpf_lsm_capable+0x9/0x10 [ 117.993933][ T5920] ? security_capable+0x7e/0x260 [ 117.993964][ T5920] ? ns_capable+0xd7/0x110 [ 117.994002][ T5920] genl_rcv_msg+0x55c/0x800 [ 117.994051][ T5920] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.994095][ T5920] ? __pfx___dev_queue_xmit+0x10/0x10 [ 117.994146][ T5920] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 117.994196][ T5920] ? __lock_acquire+0xaa4/0x1ba0 [ 117.994243][ T5920] netlink_rcv_skb+0x16a/0x440 [ 117.994280][ T5920] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.994326][ T5920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.994393][ T5920] ? __pfx_down_read+0x10/0x10 [ 117.994454][ T5920] ? netlink_deliver_tap+0x1ae/0xd30 [ 117.994498][ T5920] genl_rcv+0x28/0x40 [ 117.994535][ T5920] netlink_unicast+0x53a/0x7f0 [ 117.994582][ T5920] ? __pfx_netlink_unicast+0x10/0x10 [ 117.994618][ T5920] ? __lock_acquire+0xaa4/0x1ba0 [ 117.994669][ T5920] netlink_sendmsg+0x8d1/0xdd0 [ 117.994715][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.994767][ T5920] ____sys_sendmsg+0xa95/0xc70 [ 117.994813][ T5920] ? copy_msghdr_from_user+0x10a/0x160 [ 117.994848][ T5920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.994900][ T5920] ? try_to_wake_up+0xa2f/0x1680 [ 117.994937][ T5920] ___sys_sendmsg+0x134/0x1d0 [ 117.994976][ T5920] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.995074][ T5920] __sys_sendmsg+0x16d/0x220 [ 117.995113][ T5920] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.995147][ T5920] ? __x64_sys_futex+0x1e0/0x4c0 [ 117.995192][ T5920] ? rcu_is_watching+0x12/0xc0 [ 117.995233][ T5920] do_syscall_64+0xcd/0x230 [ 117.995281][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.995312][ T5920] RIP: 0033:0x7ffb4bd8e969 [ 117.995337][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.995378][ T5920] RSP: 002b:00007ffb4ccd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.995410][ T5920] RAX: ffffffffffffffda RBX: 00007ffb4bfb5fa0 RCX: 00007ffb4bd8e969 [ 117.995439][ T5920] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 117.995459][ T5920] RBP: 00007ffb4be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.995478][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.995497][ T5920] R13: 0000000000000000 R14: 00007ffb4bfb5fa0 R15: 00007ffd27dcb8c8 [ 117.995539][ T5920] [ 119.494565][ T5943] process 'syz.3.13' launched ':,' with NULL argv: empty string added [ 119.607813][ T5946] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  [ 296.868726][ T8871] FAULT_INJECTION: forcing a failure. [ 296.868726][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.924327][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.1.702 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 296.924373][ T8871] Tainted: [U]=USER [ 296.924382][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 296.924398][ T8871] Call Trace: [ 296.924408][ T8871] [ 296.924420][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 296.924466][ T8871] should_fail_ex+0x512/0x640 [ 296.924515][ T8871] _copy_from_user+0x2e/0xd0 [ 296.924563][ T8871] snd_pcm_oss_write2+0x1c2/0x410 [ 296.924618][ T8871] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 296.924661][ T8871] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 296.924692][ T8871] ? snd_pcm_oss_prepare+0x11e/0x220 [ 296.924741][ T8871] snd_pcm_oss_write+0x711/0xa10 [ 296.924789][ T8871] ? security_file_permission+0x71/0x210 [ 296.924839][ T8871] vfs_write+0x25c/0x1180 [ 296.924866][ T8871] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 296.924921][ T8871] ? __pfx_vfs_write+0x10/0x10 [ 296.924946][ T8871] ? find_held_lock+0x2b/0x80 [ 296.924975][ T8871] ? __fget_files+0x204/0x3c0 [ 296.925028][ T8871] ? __fget_files+0x20e/0x3c0 [ 296.925088][ T8871] ksys_write+0x12a/0x240 [ 296.925117][ T8871] ? __pfx_ksys_write+0x10/0x10 [ 296.925160][ T8871] do_syscall_64+0xcd/0x230 [ 296.925207][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.925238][ T8871] RIP: 0033:0x7fdbf158e969 [ 296.925262][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.925292][ T8871] RSP: 002b:00007fdbf238c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.925321][ T8871] RAX: ffffffffffffffda RBX: 00007fdbf17b6080 RCX: 00007fdbf158e969 [ 296.925341][ T8871] RDX: 00000000000041ec RSI: 0000000000000000 RDI: 0000000000000008 [ 296.925360][ T8871] RBP: 00007fdbf238c090 R08: 0000000000000000 R09: 0000000000000000 [ 296.925379][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.925396][ T8871] R13: 0000000000000001 R14: 00007fdbf17b6080 R15: 00007ffefdd86038 [ 296.925436][ T8871] [ 297.730878][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.707'. syzkaller syzkaller login: [ 298.730206][ T5844] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 301.255908][ T5844] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 303.175564][ T8934] kexec: Could not allocate control_code_buffer [ 304.148735][ T8979] netlink: 158 bytes leftover after parsing attributes in process `syz.0.727'. [ 304.219494][ T8980] FAULT_INJECTION: forcing a failure. [ 304.219494][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 304.326213][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.0.727 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 304.326264][ T8980] Tainted: [U]=USER [ 304.326274][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 304.326298][ T8980] Call Trace: [ 304.326308][ T8980] [ 304.326323][ T8980] dump_stack_lvl+0x16c/0x1f0 [ 304.326373][ T8980] should_fail_ex+0x512/0x640 [ 304.326417][ T8980] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 304.326457][ T8980] should_failslab+0xc2/0x120 [ 304.326496][ T8980] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 304.326531][ T8980] ? ptlock_alloc+0x1f/0x70 [ 304.326566][ T8980] ptlock_alloc+0x1f/0x70 [ 304.326597][ T8980] pte_alloc_one+0x6d/0x380 [ 304.326632][ T8980] do_pte_missing+0x1c0b/0x3fb0 [ 304.326663][ T8980] ? do_raw_spin_unlock+0x172/0x230 [ 304.326715][ T8980] ? __pmd_alloc+0x3c2/0x870 [ 304.326760][ T8980] ? find_held_lock+0x2b/0x80 [ 304.326802][ T8980] __handle_mm_fault+0x103d/0x2a40 [ 304.326847][ T8980] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.326902][ T8980] ? find_vma+0xbf/0x140 [ 304.326946][ T8980] ? __pfx_find_vma+0x10/0x10 [ 304.326995][ T8980] handle_mm_fault+0x3fe/0xad0 [ 304.327036][ T8980] do_user_addr_fault+0x7a6/0x1370 [ 304.327077][ T8980] ? rcu_is_watching+0x12/0xc0 [ 304.327110][ T8980] exc_page_fault+0x5c/0xc0 [ 304.327152][ T8980] asm_exc_page_fault+0x26/0x30 [ 304.327183][ T8980] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 304.327217][ T8980] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 304.327248][ T8980] RSP: 0018:ffffc9000b74f7d8 EFLAGS: 00050206 [ 304.327273][ T8980] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 304.327293][ T8980] RDX: ffffed10057c2701 RSI: 0000000000000000 RDI: ffff88802be13740 [ 304.327312][ T8980] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10057c2700 [ 304.327331][ T8980] R10: ffff88802be13803 R11: 0000000000000000 R12: 0000000000000000 [ 304.327350][ T8980] R13: ffffc9000b74fd60 R14: 00000000000000c4 R15: ffff88802be13740 [ 304.327393][ T8980] _copy_from_iter+0x391/0x15b0 [ 304.327445][ T8980] ? __alloc_skb+0x200/0x380 [ 304.327479][ T8980] ? __pfx__copy_from_iter+0x10/0x10 [ 304.327531][ T8980] ? __lock_acquire+0xaa4/0x1ba0 [ 304.327583][ T8980] netlink_sendmsg+0x829/0xdd0 [ 304.327631][ T8980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.327687][ T8980] ____sys_sendmsg+0xa95/0xc70 [ 304.327734][ T8980] ? copy_msghdr_from_user+0x10a/0x160 [ 304.327770][ T8980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.327829][ T8980] ? __pfx__kstrtoull+0x10/0x10 [ 304.327875][ T8980] ___sys_sendmsg+0x134/0x1d0 [ 304.327914][ T8980] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.327970][ T8980] ? find_held_lock+0x2b/0x80 [ 304.328028][ T8980] __sys_sendmmsg+0x200/0x420 [ 304.328070][ T8980] ? __pfx___sys_sendmmsg+0x10/0x10 [ 304.328121][ T8980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.328186][ T8980] ? fput+0x70/0xf0 [ 304.328223][ T8980] ? ksys_write+0x1b9/0x240 [ 304.328253][ T8980] ? __pfx_ksys_write+0x10/0x10 [ 304.328280][ T8980] ? rcu_is_watching+0x12/0xc0 [ 304.328317][ T8980] __x64_sys_sendmmsg+0x9c/0x100 [ 304.328352][ T8980] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.328393][ T8980] do_syscall_64+0xcd/0x230 [ 304.328441][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.328473][ T8980] RIP: 0033:0x7ffb4bd8e969 [ 304.328498][ T8980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.328528][ T8980] RSP: 002b:00007ffb4ccaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.328556][ T8980] RAX: ffffffffffffffda RBX: 00007ffb4bfb6080 RCX: 00007ffb4bd8e969 [ 304.328577][ T8980] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 304.328596][ T8980] RBP: 00007ffb4ccaf090 R08: 0000000000000000 R09: 0000000000000000 [ 304.328615][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.328633][ T8980] R13: 0000000000000000 R14: 00007ffb4bfb6080 R15: 00007ffd27dcb8c8 [ 304.328675][ T8980] [ 305.003527][ T8985] FAULT_INJECTION: forcing a failure. [ 305.003527][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 305.016324][ T8985] CPU: 1 UID: 0 PID: 8985 Comm: syz.1.729 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 305.016370][ T8985] Tainted: [U]=USER [ 305.016380][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 305.016405][ T8985] Call Trace: [ 305.016415][ T8985] [ 305.016427][ T8985] dump_stack_lvl+0x16c/0x1f0 [ 305.016476][ T8985] should_fail_ex+0x512/0x640 [ 305.016520][ T8985] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 305.016559][ T8985] should_failslab+0xc2/0x120 [ 305.016598][ T8985] __kmalloc_cache_node_noprof+0x6d/0x420 [ 305.016632][ T8985] ? lockdep_init_map_type+0x5c/0x280 [ 305.016672][ T8985] ? __alloc_workqueue+0x694/0x1810 [ 305.016716][ T8985] __alloc_workqueue+0x694/0x1810 [ 305.016764][ T8985] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 305.016810][ T8985] alloc_workqueue+0xd2/0x200 [ 305.016849][ T8985] ? __pfx_alloc_workqueue+0x10/0x10 [ 305.016902][ T8985] ? __pfx___debug_object_init+0x10/0x10 [ 305.016946][ T8985] nci_register_device+0x21e/0xb80 [ 305.016989][ T8985] ? __pfx_nci_register_device+0x10/0x10 [ 305.017033][ T8985] ? lockdep_init_map_type+0x5c/0x280 [ 305.017083][ T8985] virtual_ncidev_open+0x141/0x220 [ 305.017131][ T8985] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 305.017175][ T8985] misc_open+0x35a/0x420 [ 305.017225][ T8985] ? __pfx_misc_open+0x10/0x10 [ 305.017272][ T8985] chrdev_open+0x231/0x6a0 [ 305.017305][ T8985] ? __pfx_apparmor_file_open+0x10/0x10 [ 305.017346][ T8985] ? __pfx_chrdev_open+0x10/0x10 [ 305.017383][ T8985] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 305.017447][ T8985] do_dentry_open+0x741/0x1c10 [ 305.017480][ T8985] ? __pfx_chrdev_open+0x10/0x10 [ 305.017521][ T8985] vfs_open+0x82/0x3f0 [ 305.017568][ T8985] path_openat+0x1e5e/0x2d40 [ 305.017616][ T8985] ? __pfx_path_openat+0x10/0x10 [ 305.017657][ T8985] do_filp_open+0x20b/0x470 [ 305.017689][ T8985] ? __pfx_do_filp_open+0x10/0x10 [ 305.017751][ T8985] ? alloc_fd+0x471/0x7d0 [ 305.017813][ T8985] do_sys_openat2+0x11b/0x1d0 [ 305.017855][ T8985] ? __pfx_do_sys_openat2+0x10/0x10 [ 305.017901][ T8985] ? __fget_files+0x20e/0x3c0 [ 305.017956][ T8985] __x64_sys_openat+0x174/0x210 [ 305.018000][ T8985] ? __pfx___x64_sys_openat+0x10/0x10 [ 305.018041][ T8985] ? ksys_write+0x1b9/0x240 [ 305.018087][ T8985] do_syscall_64+0xcd/0x230 [ 305.018135][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.018166][ T8985] RIP: 0033:0x7fdbf158e969 [ 305.018192][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.018222][ T8985] RSP: 002b:00007fdbf23ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 305.018251][ T8985] RAX: ffffffffffffffda RBX: 00007fdbf17b5fa0 RCX: 00007fdbf158e969 [ 305.018272][ T8985] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 305.018292][ T8985] RBP: 00007fdbf23ad090 R08: 0000000000000000 R09: 0000000000000000 [ 305.018311][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.018329][ T8985] R13: 0000000000000001 R14: 00007fdbf17b5fa0 R15: 00007ffefdd86038 [ 305.018371][ T8985] [ 305.476996][ T5844] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 306.601012][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.735'. [ 307.249268][ T9017] can: request_module (can-proto-0) failed. [ 307.725751][ T5844] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 309.363245][ T9054] FAULT_INJECTION: forcing a failure. [ 309.363245][ T9054] name failslab, interval 1, probability 0, space 0, times 0 [ 309.383826][ T9054] CPU: 1 UID: 0 PID: 9054 Comm: syz.1.745 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 309.383880][ T9054] Tainted: [U]=USER [ 309.383890][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 309.383911][ T9054] Call Trace: [ 309.383921][ T9054] [ 309.383934][ T9054] dump_stack_lvl+0x16c/0x1f0 [ 309.383985][ T9054] should_fail_ex+0x512/0x640 [ 309.384031][ T9054] ? __kmalloc_noprof+0xbf/0x510 [ 309.384069][ T9054] ? lsm_blob_alloc+0x68/0x90 [ 309.384118][ T9054] should_failslab+0xc2/0x120 [ 309.384158][ T9054] __kmalloc_noprof+0xd2/0x510 [ 309.384215][ T9054] lsm_blob_alloc+0x68/0x90 [ 309.384264][ T9054] security_sk_alloc+0x30/0x270 [ 309.384300][ T9054] sk_prot_alloc+0x1c7/0x2a0 [ 309.384348][ T9054] sk_alloc+0x36/0xc20 [ 309.384382][ T9054] __netlink_create+0x5e/0x2c0 [ 309.384417][ T9054] __netlink_kernel_create+0xed/0x750 [ 309.384460][ T9054] ? __pfx___netlink_kernel_create+0x10/0x10 [ 309.384510][ T9054] ? __pfx_crypto_netlink_init+0x10/0x10 [ 309.384563][ T9054] crypto_netlink_init+0xb7/0x140 [ 309.384609][ T9054] ? cpus_read_unlock+0x83/0x150 [ 309.384645][ T9054] ? __pfx_crypto_netlink_init+0x10/0x10 [ 309.384688][ T9054] ? __nf_register_net_hook+0x371/0x730 [ 309.384722][ T9054] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 309.384768][ T9054] ? nf_register_net_hook+0x117/0x160 [ 309.384802][ T9054] ? nf_register_net_hooks+0xb1/0xd0 [ 309.384838][ T9054] ops_init+0x1df/0x5f0 [ 309.384903][ T9054] setup_net+0x21e/0x850 [ 309.384947][ T9054] ? __pfx_setup_net+0x10/0x10 [ 309.384984][ T9054] ? lockdep_init_map_type+0x5c/0x280 [ 309.385029][ T9054] ? __pfx_down_read_killable+0x10/0x10 [ 309.385086][ T9054] ? debug_mutex_init+0x37/0x70 [ 309.385122][ T9054] copy_net_ns+0x2a6/0x5f0 [ 309.385181][ T9054] create_new_namespaces+0x3ea/0xad0 [ 309.385229][ T9054] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 309.385271][ T9054] ksys_unshare+0x45b/0xa40 [ 309.385316][ T9054] ? __pfx_ksys_unshare+0x10/0x10 [ 309.385359][ T9054] ? xfd_validate_state+0x5d/0x180 [ 309.385415][ T9054] ? rcu_is_watching+0x12/0xc0 [ 309.385455][ T9054] __x64_sys_unshare+0x31/0x40 [ 309.385499][ T9054] do_syscall_64+0xcd/0x230 [ 309.385547][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.385579][ T9054] RIP: 0033:0x7fdbf158e969 [ 309.385604][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.385635][ T9054] RSP: 002b:00007fdbf238c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.385664][ T9054] RAX: ffffffffffffffda RBX: 00007fdbf17b6080 RCX: 00007fdbf158e969 [ 309.385686][ T9054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 309.385706][ T9054] RBP: 00007fdbf1610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 309.385725][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.385745][ T9054] R13: 0000000000000000 R14: 00007fdbf17b6080 R15: 00007ffefdd86038 [ 309.385785][ T9054] [ 310.520607][ T9066] binder: 9065:9066 ioctl c0306201 0 returned -14 [ 311.450805][ T5844] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 311.645004][ T9078] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 313.229488][ T9106] random: crng reseeded on system resumption [ 314.335118][ T9118] nbd: must specify a size in bytes for the device [ 316.774596][ T9133] ================================================================== [ 316.782913][ T9133] BUG: KFENCE: use-after-free read in dvb_device_open+0xee/0x3b0 [ 316.782913][ T9133] [ 316.792891][ T9133] Use-after-free read at 0xffff88823bf40018 (in kfence-#159): [ 316.800398][ T9133] dvb_device_open+0xee/0x3b0 [ 316.805142][ T9133] chrdev_open+0x231/0x6a0 [ 316.809613][ T9133] do_dentry_open+0x741/0x1c10 [ 316.814429][ T9133] vfs_open+0x82/0x3f0 [ 316.818558][ T9133] path_openat+0x1e5e/0x2d40 [ 316.823266][ T9133] do_filp_open+0x20b/0x470 [ 316.827828][ T9133] do_sys_openat2+0x11b/0x1d0 [ 316.832582][ T9133] __x64_sys_openat+0x174/0x210 [ 316.837497][ T9133] do_syscall_64+0xcd/0x230 [ 316.842067][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.848015][ T9133] [ 316.850378][ T9133] kfence-#159: 0xffff88823bf40000-0xffff88823bf400d7, size=216, cache=kmalloc-256 [ 316.850378][ T9133] [ 316.861796][ T9133] allocated by task 1 on cpu 0 at 29.655402s (287.206392s ago): [ 316.869530][ T9133] dvb_register_device+0x1e4/0x2370 [ 316.874801][ T9133] dvb_register_frontend+0x5a6/0x880 [ 316.880160][ T9133] vidtv_bridge_probe+0x459/0xa90 [ 316.885243][ T9133] platform_probe+0xff/0x1f0 [ 316.889912][ T9133] really_probe+0x23e/0xa90 [ 316.894469][ T9133] __driver_probe_device+0x1de/0x440 [ 316.899807][ T9133] driver_probe_device+0x4c/0x1b0 [ 316.904879][ T9133] __driver_attach+0x283/0x580 [ 316.909671][ T9133] bus_for_each_dev+0x13b/0x1d0 [ 316.914562][ T9133] bus_add_driver+0x2e9/0x690 [ 316.919265][ T9133] driver_register+0x15c/0x4b0 [ 316.924076][ T9133] vidtv_bridge_init+0x45/0x80 [ 316.928876][ T9133] do_one_initcall+0x120/0x6e0 [ 316.933670][ T9133] kernel_init_freeable+0x5c2/0x900 [ 316.938895][ T9133] kernel_init+0x1c/0x2b0 [ 316.943243][ T9133] ret_from_fork+0x45/0x80 [ 316.947712][ T9133] ret_from_fork_asm+0x1a/0x30 [ 316.952510][ T9133] [ 316.954849][ T9133] freed by task 9078 on cpu 1 at 311.908670s (5.046178s ago): [ 316.962355][ T9133] dvb_device_put.part.0+0x60/0x90 [ 316.967519][ T9133] dvb_device_open+0x2a4/0x3b0 [ 316.972342][ T9133] chrdev_open+0x231/0x6a0 [ 316.976788][ T9133] do_dentry_open+0x741/0x1c10 [ 316.981576][ T9133] vfs_open+0x82/0x3f0 [ 316.985675][ T9133] path_openat+0x1e5e/0x2d40 [ 316.990285][ T9133] do_filp_open+0x20b/0x470 [ 316.994807][ T9133] do_sys_openat2+0x11b/0x1d0 [ 316.999512][ T9133] __x64_sys_openat+0x174/0x210 [ 317.004394][ T9133] do_syscall_64+0xcd/0x230 [ 317.008926][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.014842][ T9133] [ 317.017185][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.2.762 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 317.028933][ T9133] Tainted: [U]=USER [ 317.032749][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 317.042820][ T9133] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 317.048329][ T9133] Code: 0f 84 3f 02 00 00 e8 31 2c f4 f9 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 77 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 00 2c f4 f9 4c 89 ea 48 [ 317.067970][ T9133] RSP: 0018:ffffc90005077920 EFLAGS: 00010246 [ 317.074083][ T9133] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c7a3000 [ 317.082078][ T9133] RDX: 1ffff110477e8003 RSI: ffffffff87c6809f RDI: ffff88823bf40018 [ 317.090077][ T9133] RBP: ffff88823bf40000 R08: 0000000000000001 R09: fffffbfff1f41d3d [ 317.098099][ T9133] R10: ffffffff8fa0e9ef R11: 0000000000000000 R12: ffff8880333dddc0 [ 317.106113][ T9133] R13: ffffffff87c67fd0 R14: ffff88802a38b5c0 R15: ffff8880333dde08 [ 317.114120][ T9133] FS: 00007fd4fcff66c0(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000 [ 317.123087][ T9133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.129707][ T9133] CR2: ffff88823bf40018 CR3: 0000000040dee000 CR4: 00000000003526f0 [ 317.137802][ T9133] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.145801][ T9133] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.153803][ T9133] Call Trace: [ 317.157112][ T9133] [ 317.160076][ T9133] ? __pfx_dvb_device_open+0x10/0x10 [ 317.165432][ T9133] chrdev_open+0x231/0x6a0 [ 317.169886][ T9133] ? __pfx_apparmor_file_open+0x10/0x10 [ 317.175481][ T9133] ? __pfx_chrdev_open+0x10/0x10 [ 317.180550][ T9133] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 317.187392][ T9133] do_dentry_open+0x741/0x1c10 [ 317.192213][ T9133] ? __pfx_chrdev_open+0x10/0x10 [ 317.197194][ T9133] vfs_open+0x82/0x3f0 [ 317.201306][ T9133] path_openat+0x1e5e/0x2d40 [ 317.205936][ T9133] ? __pfx_path_openat+0x10/0x10 [ 317.211003][ T9133] do_filp_open+0x20b/0x470 [ 317.215538][ T9133] ? __pfx_do_filp_open+0x10/0x10 [ 317.220616][ T9133] ? alloc_fd+0x471/0x7d0 [ 317.225005][ T9133] do_sys_openat2+0x11b/0x1d0 [ 317.229727][ T9133] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.234969][ T9133] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.240222][ T9133] __x64_sys_openat+0x174/0x210 [ 317.245120][ T9133] ? __pfx___x64_sys_openat+0x10/0x10 [ 317.250542][ T9133] ? rcu_is_watching+0x12/0xc0 [ 317.255347][ T9133] do_syscall_64+0xcd/0x230 [ 317.259897][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.265824][ T9133] RIP: 0033:0x7fd4ff18e969 [ 317.270278][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.289946][ T9133] RSP: 002b:00007fd4fcff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.298405][ T9133] RAX: ffffffffffffffda RBX: 00007fd4ff3b5fa0 RCX: 00007fd4ff18e969 [ 317.306405][ T9133] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 317.314411][ T9133] RBP: 00007fd4ff210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 317.322417][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.330414][ T9133] R13: 0000000000000000 R14: 00007fd4ff3b5fa0 R15: 00007ffe3bd73d78 [ 317.338433][ T9133] [ 317.341475][ T9133] ================================================================== [ 317.349577][ T9133] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 317.357342][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.2.762 Tainted: G U 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 317.369147][ T9133] Tainted: [U]=USER [ 317.372972][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 317.383059][ T9133] Call Trace: [ 317.386361][ T9133] [ 317.389314][ T9133] dump_stack_lvl+0x3d/0x1f0 [ 317.393946][ T9133] panic+0x71c/0x800 [ 317.397891][ T9133] ? __pfx_panic+0x10/0x10 [ 317.402443][ T9133] ? __pfx__printk+0x10/0x10 [ 317.407080][ T9133] check_panic_on_warn+0xab/0xb0 [ 317.412065][ T9133] kfence_report_error+0x5e1/0xd90 [ 317.417218][ T9133] ? __pfx_kfence_report_error+0x10/0x10 [ 317.422976][ T9133] ? dvb_device_open+0xee/0x3b0 [ 317.427868][ T9133] ? chrdev_open+0x231/0x6a0 [ 317.432488][ T9133] ? do_dentry_open+0x741/0x1c10 [ 317.437449][ T9133] ? vfs_open+0x82/0x3f0 [ 317.441723][ T9133] ? path_openat+0x1e5e/0x2d40 [ 317.446509][ T9133] ? do_filp_open+0x20b/0x470 [ 317.451215][ T9133] ? do_sys_openat2+0x11b/0x1d0 [ 317.456104][ T9133] ? __x64_sys_openat+0x174/0x210 [ 317.461168][ T9133] ? do_syscall_64+0xcd/0x230 [ 317.465887][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.472051][ T9133] ? do_syscall_64+0xcd/0x230 [ 317.476770][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.482884][ T9133] kfence_handle_page_fault+0x1f6/0x5c0 [ 317.488476][ T9133] page_fault_oops+0x7b7/0xb80 [ 317.493289][ T9133] ? __pfx_page_fault_oops+0x10/0x10 [ 317.498635][ T9133] ? find_held_lock+0x2b/0x80 [ 317.503337][ T9133] ? is_prefetch.constprop.0+0x9c/0x510 [ 317.508927][ T9133] ? search_bpf_extables+0x1c2/0x320 [ 317.514247][ T9133] ? bpf_ksym_find+0x124/0x1c0 [ 317.519055][ T9133] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 317.525089][ T9133] ? fixup_exception+0x10c/0xaf0 [ 317.530069][ T9133] kernelmode_fixup_or_oops.constprop.0+0xb8/0xe0 [ 317.536537][ T9133] __bad_area_nosemaphore+0x399/0x6a0 [ 317.541957][ T9133] ? spurious_kernel_fault+0x233/0x3c0 [ 317.547472][ T9133] do_kern_addr_fault+0x5b/0x80 [ 317.552354][ T9133] exc_page_fault+0xb1/0xc0 [ 317.556904][ T9133] asm_exc_page_fault+0x26/0x30 [ 317.561798][ T9133] RIP: 0010:dvb_device_open+0xee/0x3b0 [ 317.567299][ T9133] Code: 0f 84 3f 02 00 00 e8 31 2c f4 f9 48 8d 7d 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 77 02 00 00 <4c> 8b 6d 18 4d 85 ed 0f 84 0e 02 00 00 e8 00 2c f4 f9 4c 89 ea 48 [ 317.586952][ T9133] RSP: 0018:ffffc90005077920 EFLAGS: 00010246 [ 317.593052][ T9133] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c7a3000 [ 317.601045][ T9133] RDX: 1ffff110477e8003 RSI: ffffffff87c6809f RDI: ffff88823bf40018 [ 317.609065][ T9133] RBP: ffff88823bf40000 R08: 0000000000000001 R09: fffffbfff1f41d3d [ 317.617070][ T9133] R10: ffffffff8fa0e9ef R11: 0000000000000000 R12: ffff8880333dddc0 [ 317.625073][ T9133] R13: ffffffff87c67fd0 R14: ffff88802a38b5c0 R15: ffff8880333dde08 [ 317.633086][ T9133] ? __pfx_dvb_device_open+0x10/0x10 [ 317.638436][ T9133] ? dvb_device_open+0xcf/0x3b0 [ 317.643332][ T9133] ? __pfx_dvb_device_open+0x10/0x10 [ 317.648652][ T9133] chrdev_open+0x231/0x6a0 [ 317.653098][ T9133] ? __pfx_apparmor_file_open+0x10/0x10 [ 317.658678][ T9133] ? __pfx_chrdev_open+0x10/0x10 [ 317.663651][ T9133] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 317.670470][ T9133] do_dentry_open+0x741/0x1c10 [ 317.675298][ T9133] ? __pfx_chrdev_open+0x10/0x10 [ 317.680284][ T9133] vfs_open+0x82/0x3f0 [ 317.684406][ T9133] path_openat+0x1e5e/0x2d40 [ 317.689037][ T9133] ? __pfx_path_openat+0x10/0x10 [ 317.694017][ T9133] do_filp_open+0x20b/0x470 [ 317.698550][ T9133] ? __pfx_do_filp_open+0x10/0x10 [ 317.703626][ T9133] ? alloc_fd+0x471/0x7d0 [ 317.708047][ T9133] do_sys_openat2+0x11b/0x1d0 [ 317.712761][ T9133] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.718002][ T9133] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.723255][ T9133] __x64_sys_openat+0x174/0x210 [ 317.728144][ T9133] ? __pfx___x64_sys_openat+0x10/0x10 [ 317.733559][ T9133] ? rcu_is_watching+0x12/0xc0 [ 317.738357][ T9133] do_syscall_64+0xcd/0x230 [ 317.742902][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.748822][ T9133] RIP: 0033:0x7fd4ff18e969 [ 317.753261][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.773001][ T9133] RSP: 002b:00007fd4fcff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.781545][ T9133] RAX: ffffffffffffffda RBX: 00007fd4ff3b5fa0 RCX: 00007fd4ff18e969 [ 317.789539][ T9133] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 317.797542][ T9133] RBP: 00007fd4ff210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 317.805557][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.813569][ T9133] R13: 0000000000000000 R14: 00007fd4ff3b5fa0 R15: 00007ffe3bd73d78 [ 317.821686][ T9133] [ 317.825060][ T9133] Kernel Offset: disabled [ 317.829779][ T9133] Rebooting in 86400 seconds..