last executing test programs: 11.164044221s ago: executing program 2 (id=109): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = socket(0x1e, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) read$auto(0x3, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8001}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x48, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x34, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xe80}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x17, 0xb, '/dev/snd/controlC0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000044) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8001}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_PMSR_SUPPORT={0x48, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x34, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0xe80}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}]}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x17, 0xb, '/dev/snd/controlC0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000044) io_uring_enter$auto(r2, 0x243298af, 0x63c8, 0x400, &(0x7f0000000640)="6a637d587668d6cca0890f0b6737cd9e93ee88d71041e52fe13a3bc7bc41c0205a3112428989f850ad32784c1b4209", 0x0) (async) io_uring_enter$auto(r2, 0x243298af, 0x63c8, 0x400, &(0x7f0000000640)="6a637d587668d6cca0890f0b6737cd9e93ee88d71041e52fe13a3bc7bc41c0205a3112428989f850ad32784c1b4209", 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xfc, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe8, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r3}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x2c, 0x5, 0x0, 0x1, [@nested={0x28, 0x63, 0x0, 0x1, [@nested={0x24, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x8, 0xc9, 0x0, 0x1, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}]}]}]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xfc, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe8, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r3}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x2c, 0x5, 0x0, 0x1, [@nested={0x28, 0x63, 0x0, 0x1, [@nested={0x24, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x8, 0xc9, 0x0, 0x1, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}]}]}]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x400c81d) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0xa, 0x5, 0x84) getsockopt$auto(r6, 0x84, 0x7d, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) select$auto(0x1e, &(0x7f0000000240)={[0x1b, 0x5, 0x8, 0x8, 0x0, 0x0, 0x9, 0x10, 0x1, 0x5000000000, 0x4, 0x6, 0x100000001, 0x7, 0x9, 0x4]}, &(0x7f00000002c0)={[0x9, 0x4, 0x1c0000000, 0x3, 0x0, 0x55, 0x9458, 0x2, 0x9, 0x4, 0x0, 0xffff, 0x9c36, 0x26d, 0x0, 0x1]}, &(0x7f0000000340)={[0x3a2, 0xff00000000000000, 0x7f, 0x7, 0x58, 0x2, 0x1c, 0x5, 0x6, 0x8, 0x3, 0x7, 0x8, 0x14fb2a59, 0x0, 0xffffffffffffffff]}, &(0x7f0000000040)={0x8, 0x9b27}) 8.903018964s ago: executing program 2 (id=114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xec2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r5, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r6, 0x0, 0x7, 0x2}, {r0, 0x0, 0x8, 0xd589}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r7 = fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x800, 0x0) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7.432629769s ago: executing program 2 (id=119): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x14, r2, 0xf25, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) mmap$auto(0x4, 0x8, 0xdf, 0xeb1, r0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) socket(0x1e, 0xa, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000000), 0x55) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) open(0x0, 0xeee00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto(0x8000, 0x100006, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0x20004090) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x4836, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) 6.677130354s ago: executing program 3 (id=121): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_MARK(r0, 0x4, 0x24, &(0x7f0000000100)='\x00', 0x2) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0xffffffff, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) munlock$auto(0x6856d0da, 0x5) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x2, 0x1, 0x0) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) pipe$auto(0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.086517345s ago: executing program 3 (id=122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xec2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r4, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r5, 0x0, 0x7, 0x2}, {r0, 0x0, 0x8, 0xd589}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r6 = fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x800, 0x0) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.626291022s ago: executing program 0 (id=125): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) ioctl$auto_MEMERASE64(r0, 0x40104d14, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) r1 = prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890b, 0x38) fsync$auto(r1) r2 = openat2$auto(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0xfff, 0x3}, 0xb50) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout\x00', 0x80002, 0x0) read$auto(r3, &(0x7f0000000000)='/sys/power/pm_freeze_timeout\x00', 0xe0f) ioctl$auto(r3, 0x4, r2) 5.168035545s ago: executing program 2 (id=126): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) r0 = open(0x0, 0x22240, 0x154) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x5, 0xdc, 0x16, r0, 0x8101) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r1, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r2, 0x0, 0x4, 0x6}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf250400000004001d0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0xa, 0x801, 0x84) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) getsockopt$auto(r5, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) 5.10119783s ago: executing program 1 (id=127): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) preadv2$auto(r0, &(0x7f0000001000)={0x0, 0x7ffffffe}, 0x5, 0x800000000000ff, 0x100000007, 0x2d) 5.0256773s ago: executing program 0 (id=128): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xec2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/min_resvport\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r5, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r6, 0x0, 0x7, 0x2}, {r0, 0x0, 0x8, 0xd589}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r7 = fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x800, 0x0) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.859345187s ago: executing program 1 (id=129): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064aa, 0x20000a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/ep_81/type\x00', 0xa0000, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x28202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x202, 0x0) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x0, 0x80007ffffffd) readahead$auto(0xffffffffffffffff, 0x4, 0x4) r4 = io_uring_setup$auto(0x8000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0xc1205531, r4) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.778073869s ago: executing program 3 (id=130): socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3d, 0x1, 0x0, 0x5, 0x20000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001700)={0x13cc, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x13b8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1064, 0x5, 0x0, 0x1, [{0x1060, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xfe4, 0x1, "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"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x350, 0x5, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0xb4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x7}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe9}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x34, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_BW={0x5, 0x5, 0x4}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x2}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x3}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x1}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xc}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5cbb}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x8a, 0x1, "133545fe144249383690d25836a9e1b8e5920d3c13713ee7305edf6be0471098cc202f4a67a0e31975104f0fcf28f0a91d60c491bafd662d5189ef66ec9d55c87e31fce246529a8df8e4c3eaf65f8c4e22dceea70c0fddb7f3123af0530dafcc4115e99b12f090fec7ea0b83a4e11075905f4e0b5ed50036ed89ce55fd1aa9d127afec4444af"}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x17, 0x14, '/dev/snd/controlC0\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x7cbb}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1000}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x3ca}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0x8b}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x9, 0x14, '+$-{\x81'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x7}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x7, 0x13, ',)}'}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x401}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x3}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb7, 0x1, "8716d5aef5b56e84513447c6abc18aa837c5054ab6c21bc51be46ed94173b596123983fbf5b1a1edcc8359d99c3d689565de49e01c9b6411c5b9bddcebe61b11fa6f4e44185e1a6770b8fd64aeee937f669a4bf1111e6aa437e9320a20df685b34c310781668ad99800f4fdb2c4a9b06e1485f2ca869de18269b59d680b4d4050daf89421b7083c965390d58b1135ad0c49a0cba1a6d872f63e8a8b0e1a0606a1ae6fc5bee6d074e3651e2c776b9174bc0ac4f"}]}]}]}]}, 0x13cc}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x6, &(0x7f0000000240)="2ca89c40fcbcc98297b5", 0x3) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000140)='0[.[\x00', 0xcd04) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="01002bbddbb0000000000000d311"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400000c) 3.361642695s ago: executing program 1 (id=131): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() r1 = pidfd_open$auto(r0, 0x0) process_madvise$auto_MADV_COLD(r1, &(0x7f0000000100)={0x0, 0x37e}, 0x1, 0x14, 0x0) r2 = setfsuid$auto(0x0) setreuid$auto(r2, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYBLOB="b4103c38cbf9ce24d6f5c9d0a0b9", @ANYRES64=r3, @ANYBLOB="c8181118d9a432bf3750d1b209d2633471cd5565f7d320ff8e484c08275e60724ff463a6582fdf27cd1e332023d79a3746ce61fc14001e1a8a0fb7badeafd65a68c231a2c9a2254d1cb986963e7daf8f271182ac614f5a69531c6337283a9a0ce62d364a65d39b6c0a3b80c1b2d659a83796f1", @ANYBLOB="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", @ANYRES32, @ANYRES16=r2], 0x16b0}, 0x1, 0x0, 0x0, 0x8010}, 0x40013) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0xd5) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x100382, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x141a41, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x46c380, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf2516000000050002000f00000020000180140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="8fe6430aeea0730ce2c0bd43aca7aa584d525bed0968652aa52e40138da74c81f708a1449bf80a1650aa7464d6d06e73780e0ace5b348f3ca11a317dbd12308d25820b2a40d2bf81c6c458719e094df42806bd9af8096b"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x1885) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0xb48, 0x5, 0xfffdfffd, 0x0) 3.267162428s ago: executing program 0 (id=132): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = prctl$auto_PR_SCHED_CORE_CREATE(0x9, 0x1, 0xffffffffffffffff, 0x6, 0x5) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000003c0), r1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r2, 0x113, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x40}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x22008098) mmap$auto(0x0, 0x2020009, 0x3, 0x12, r1, 0x7ffc) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x5, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044880) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYRESHEX=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) r5 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r5, 0x0, 0x6, 0x9) listen$auto(0xffffffffffffffff, 0x5ed) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.kmem.limit_in_bytes\x00', 0xc2302, 0x0) sendfile$auto(r7, r4, 0x0, 0x7) read$auto(r6, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0x3, 0x7) socket(0x22, 0x3, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xe4, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0xd0, 0x11, 'u)(\xa0\xb66s\xec\xbe\f\x19\"\xbfW:L\x15\x94\x1a\x06\xb27\b\xb7;\x1eF\xe0 .\xdfB\xbb\xe11\xea\xfdX\x95\xa5\x01\xd62\xf4E\xa5O\x1a\x950\xacJkD\xa39\x11\x11\xb4\xb1,>\xc7\xf97=\xe7\x98\xa9\xefPq\'\xc9\x8doJ$2\xae\xd1\xeaF\xd7os7\xffr\n#\x00\x00\x04\x00\xc3\x9fx\a\xc3f\xb1\xc1i\xa4\xaf8y\xf2\x0f\xa3\xcaa\xaf%\xe1\xd3j;U\xd8t\xc9\xf7\xbf\xbf\xb4$\xbb\x8eM\x17c\x9c\xc2\xbfn\x83\r\xcbY\xb4O(\x05[\x90\x9di\xbb\xd3oC\x1f\a\xd7\x1f\xeb\xb1pBr\x8e\a<\xa7?\x05\xf7UI\x92\xa4pt\x9b\xee\x904\x91\xd8\xa4\xcb\x83o\\\xdf&\xae\xe8\xe9\x80nmy\xf0\r[:\xf2\xf3\x1f\x1d\xa4'}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 2.776781487s ago: executing program 1 (id=133): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x10000}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/i2c/drivers/anx7411/uevent\x00', 0x4207c2, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto_proc_timers_operations_base(r3, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) 2.419189206s ago: executing program 2 (id=134): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/suspend_stats/failed_suspend_noirq\x00', 0x8a100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/38, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0xa, 0x1, 0x100) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip6_tables_names\x00', 0xb00, 0x0) pread64$auto(r2, 0x0, 0xf469, 0xbc3ab41) pread64$auto(r1, 0x0, 0x200000000007ff, 0x400) socket(0x1a, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000340)="feecc4fcf9b67b8cd1d3b8fa15064e15e7d72c736e2153c7dc04b4d79821af6511d5fb6e7316e007d8322be54f3c26cb54c4f32cce426edc96c124c5be2e46567b646ae069d7a3b3d058f3703db5177887f85bdf3e008cdd3f6cbbca5c3282bc3309ce7b9a02cfc1821f2dc3b60591bb83d4ca6efa8d85f28d4c3c5840a0cd8732c9fd9d0daeaa4cabd5ced26e4b4bfb3ca95c56f403dd6bf89b28c2c2d8", 0x9e) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x8401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) 2.408473454s ago: executing program 0 (id=135): pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f00000000c0)={{0x2, 0x4be0}, {0x9, 0x6}}) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x87, 0x6}, 0x10) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) semctl$auto_IPC_STAT(0x0, 0x101, 0x2, 0x200) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) read$auto(r3, 0x0, 0xcefbce6) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x7fff, 0xfffff0b6, 0x5, 0xff, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x0, 0xffff, 0x800, 0x40081, 0x68197}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) 1.853750231s ago: executing program 3 (id=136): setpriority$auto_PRIO_PROCESS(0x0, 0xffffffffffffffff, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r1 = fcntl$auto(0x3, 0x4, 0xa553) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sg0\x00', 0x0, 0x0) (rerun: 32) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r2, 0x5386, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) syz_clone3(&(0x7f0000000200)={0x1000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x41}, &(0x7f0000000140)=""/96, 0x60, &(0x7f0000000bc0)=""/4096, &(0x7f00000001c0)=[0x0, 0x0], 0x2, {r0}}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000280)={{@inferred=r3, 0xe6, 0x26, 0xedd, "4a2f28b7dc6005c1d2341774b0ba0a6875023ea4ecbc697f7e9399867779e98058f3a8e13a2fca6f7645cbe5", @raw=0x6aa1}, 0x1, @bytes=@data="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", "1b053697373980b770aa703ba6eb22bee984022b84c6a882f49a4e52879c4aea57f6ae0147dd593bfb46fd4741914c7167d3d299899ffe210cc2ad3a41ebd44f1c5e770913070edfe9c159ae683f86f69bc32dbf8e48549143192ae6cf60a903870d2c93ee7198d4181d576c72d64b47c790b5f9a61ff643dcb63487a93b6fc6"}) 1.159891349s ago: executing program 1 (id=137): unshare$auto(0x0) mmap$auto(0x0, 0x20009, 0x9, 0xeff, 0x101000000000000, 0x1) mmap$auto(0x800000, 0x8, 0x0, 0x40eb2, 0x401, 0x300000000000) munmap$auto(0x0, 0xffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x10001, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r1, @relative_fd=r2, 0xe5fd}, 0xf) bpf$auto(0x4, &(0x7f00000002c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x7, 0x1621, 0xf870e9f, 0xa4ea, 0x8}, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x100, 0x0) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000040)='\xf3dev/s\xc6\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5, 0x5, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x0, 0x0) sendfile$auto(0x1, r5, 0x0, 0xe01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x0) clock_getres$auto(0xfffffffe, 0x0) r6 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) fsetxattr$auto(r7, &(0x7f0000000100)='\x00', &(0x7f0000000380)="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", 0xffffffff, 0x1000) adjtimex$auto(&(0x7f0000000000)={0xffffeff0, 0x0, 0x7, 0x21f8, 0xe1d, 0x3, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x80000000004, {0x5, 0x2}, 0x8000000252, 0x5, 0x400000003, 0x1, 0x0, 0x4, 0x9, 0x4ac, 0x6, 0x400, 0x7ff}) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) clock_nanosleep$auto(0x0, 0xfe000000, &(0x7f0000000000)={0x2, 0x7}, &(0x7f0000000040)={0x6d88, 0x7}) read$auto(r6, 0x0, 0x0) 771.864773ms ago: executing program 2 (id=138): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x106) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) statmount$auto(0x0, 0x0, 0x1fe, 0xd) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) socket(0x29, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0xa, 0x801, 0x106) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r0, 0x89f0, 0x24) (async) 678.715044ms ago: executing program 1 (id=139): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x0, 0x5, 0x200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x18, 0x80000, 0xff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x9, 0x6d3e, 0x3000000, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) 545.087583ms ago: executing program 3 (id=140): openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_summary\x00', 0x40000, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x5, 0x0, [{0xfffffffc, 0xfffffffd, 0x11cafa94}, {0xb, 0xfffffffb}, {0x6656b665}, {0x6, 0x4, 0x2}, {0x1, 0x6, 0x3}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0x8, 0x2, '$#w\x00'}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, '/dev/kvm\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0xfffe}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x1}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, '/dev/kvm\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000814}, 0x800) (async) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x8000) (async) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000340)=0x3) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0xc4, &(0x7f0000000380)="c13a6b9234d8358c2d247f04d1ba3314d7637e01b42851f7940b8c25b5ec1ce4bcd41b61bfbe5ae5093322826c07ae9058e2d2d46eeaadaadfebdbfdd826e8cbbecc9d93382c5f44d6dbe095376ab82d3b3e10e86c266d0c36f726b0beb8acd11453d117391e14d1f181afdcbd4b69c3081bf693e1ff611d0f81fba0bb765fd76663876df2ca92b2c262a31052ad56a27d9934465ace06fdfd56a2787e10284687ec14e15c86239c349e3683670f909fc414fe7ae3") r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r1) sendmsg$auto_NL80211_CMD_SET_BSS(r3, &(0x7f0000000e40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f00000004c0)={0x938, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IE_RIC={0x729, 0xb2, "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"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x36, 0xbb, "5cb27161b075df39160d48518b0455ce67fbc98b84f36381fb76247845a4148bc5c70bd8fbfef57a1db2314b07dd38692b13"}, @NL80211_ATTR_EMA_RNR_ELEMS={0xfc, 0x145, 0x0, 0x1, [@typed={0x14, 0x67, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xb0, 0x0, 0x0, @u32=0xe04}, @nested={0xc8, 0x8c, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x127}, @typed={0x8, 0x8f, 0x0, 0x0, @str='$#w\x00'}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x140}, @typed={0x9a, 0x48, 0x0, 0x0, @binary="2a1becda866c881ebe5598ac0c36a9cedfb0c402a31857c9084c8409cde85c04c6abc6eacc7dd25b6609b6efd9379d3e6d121105287273f7a1e6f7a82314be158d7848add8c2d6d9d80cb1b43652c80da6b59c56bb1bbfd4f2d7e3d5e78455e7090f6233f26508c378a7b5cc0293b8f258d94b0ff8a90f589cce17d0679c1359b989876d7a7ad5562db9487c74949660faf3465f9ff1"}]}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@private0}]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xb6, 0x129, "e340a2c5a8f46b1dc3ff6a2ee0c7f34b67b25532ee35eeca0a808ca3e7c6c68c766bda054f9ff3b0b3084ead40032da49176c96b7cc2dc65b0508e1d9c7ba11a01060ae6cb715d83be03aaa656150653601191ae5f92a772f0e4d549cbccab84de5338962043fb5081c46c8c1e1ef91544f7f15c541ef12f3b9610f3e78ada594eba4f06cbdf1f0bb567a1f59a25ccc8e0c99c3b3b04f1d8967f4d291e592f77e20f1c79912af7515de614b3db5baf1b587d"}]}, 0x938}, 0x1, 0x0, 0x0, 0x2001}, 0x4000800) (async) ioctl$auto_PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000e80)=0x6) (async) sendmsg$auto_IEEE802154_DEL_IFACE(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, 0x0, 0x804, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x26}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}]}, 0x4c}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001000)='/dev/tty31\x00', 0x280400, 0x0) ioctl$auto_MEMGETBADBLOCK(r2, 0x40084d0b, &(0x7f0000001040)=0x15) (async) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION2(r3, 0x80044100, &(0x7f0000001080)=0x1) (async) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r3, 0x7, &(0x7f00000010c0)='$/\x00', &(0x7f0000001100)="de097395514e7127cc3e9545b92e23c8200cc05f0ae48915c2707af754d5e5d62b90d945c2bfe07b34424f1b653399bca9430b201f2845a7ff6c7b216a3b189db9273568741baed43093797940874c85476363100100cdc5a0d835503abedc3efc584496f815240b0555100632cf4b53169020f1c1a3b0f999c49b5f818fa40c7b81e9575aef5e7f45597de899bdfca04f4544561081", 0x6) (async) setgroups$auto(0x90, &(0x7f00000011c0)=0x4) sendmmsg$auto(r1, &(0x7f0000001380)={{&(0x7f0000001200), 0x10000, &(0x7f0000001280)={&(0x7f0000001240)="c20b2a46842f40feae82488e28743c2a", 0xb4}, 0x6, &(0x7f00000012c0)="b30d908a60c1a75de9b90500e8bb491a1d74e1cfe411e79b5433c29e8d559d08e3aa0df8c6cf56e5c92adb97b271f24a6519653dd8b91138f90b7aa0371ae2854ffc99f0608538cf746dd1f0b9431cbc34615fcd9ea1b182b06e2c7e58df247685c41488f151b7b5bf8802117b7c64992ea812315e23a3771276f0b77be78df43b49e01a3522725210432cad3c3cd1b7796fb49d64", 0xfffffffffffffff1, 0x896f}, 0x9}, 0x0, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001400), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004071) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/fail-nth\x00', 0x2880, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001580), r5) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'veth0_to_hsr\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001600)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001640)={'syzkaller1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001680)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000016c0)={'geneve0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'pim6reg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000001a80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001880)={0x18c, r7, 0x905, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x18c}}, 0x4080000) 529.856851ms ago: executing program 0 (id=141): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) (async) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) read$auto_tap_fops_tap(r0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x1, 0xebe, 0xffffffffffffffff, 0x7ffd) (async) mmap$auto(0x0, 0x400005, 0xdf, 0xdc, 0xffffffffffffffff, 0x4) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x95d, 0x100000001, 0x19, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi7\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x90080, 0x0) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_IMADDTIMER(r2, 0x80044940, &(0x7f0000000140)) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x10, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x42a8a0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r6 = open(0x0, 0x261c2, 0x84) socket(0x2b, 0x1, 0x1) (async) ioctl$auto_SNAPSHOT_UNFREEZE(r6, 0x3302, 0x0) (async) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10, 0x5, 0x1, 0x948b, 0x63b, 0x15f4da0a, 0x2000000000200, 0x3, 0x4, 0x4080000016, 0x1, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) read$auto(r1, 0x0, 0x6) close_range$auto(r3, r6, 0x4000000000002) (async) memfd_create$auto(0x0, 0x12) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) (async) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x541c, r8) 411.949346ms ago: executing program 3 (id=142): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_wait$auto(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x4}, 0x5, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x3e38a2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sysfs$auto(0x2, 0x2, 0x0) unshare$auto(0x40000080) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto(r3, 0x1, r0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$auto(r2, 0x0, 0x81) ioctl$auto_SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r1) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="013ba20788e7a2b47871e9abfeba0029bd70"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0xc, 0x11, 'ethtool\x00'}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r6 = socket(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 0 (id=143): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, 0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0xa2d8, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) socket(0x10, 0x80002, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) ioctl$auto(r4, 0x5609, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 98.545053][ T5825] cgroup: Unknown subsys name 'net' [ 98.680940][ T5825] cgroup: Unknown subsys name 'cpuset' [ 98.690991][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.617748][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.284649][ T24] cfg80211: failed to load regulatory.db [ 102.913948][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.923504][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.931761][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.940444][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.948614][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.957579][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.966117][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.974976][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.983995][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.991783][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.991783][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.008361][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.016359][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.025115][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.033679][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.047569][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.057423][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.065806][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.075098][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.115067][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.653668][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.816999][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 103.894661][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.982098][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 104.048859][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.056151][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.064247][ T5836] bridge_slave_0: entered allmulticast mode [ 104.071977][ T5836] bridge_slave_0: entered promiscuous mode [ 104.129408][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.136905][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.144132][ T5836] bridge_slave_1: entered allmulticast mode [ 104.152215][ T5836] bridge_slave_1: entered promiscuous mode [ 104.181681][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.188907][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.196144][ T5839] bridge_slave_0: entered allmulticast mode [ 104.203847][ T5839] bridge_slave_0: entered promiscuous mode [ 104.247927][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.256812][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.264037][ T5839] bridge_slave_1: entered allmulticast mode [ 104.272305][ T5839] bridge_slave_1: entered promiscuous mode [ 104.317297][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.324648][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.332581][ T5837] bridge_slave_0: entered allmulticast mode [ 104.341031][ T5837] bridge_slave_0: entered promiscuous mode [ 104.367769][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.384930][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.392304][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.399751][ T5837] bridge_slave_1: entered allmulticast mode [ 104.407386][ T5837] bridge_slave_1: entered promiscuous mode [ 104.430580][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.486074][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.552953][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.566071][ T5836] team0: Port device team_slave_0 added [ 104.574912][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.582269][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.589669][ T5838] bridge_slave_0: entered allmulticast mode [ 104.597509][ T5838] bridge_slave_0: entered promiscuous mode [ 104.608360][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.633601][ T5836] team0: Port device team_slave_1 added [ 104.644980][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.654658][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.661981][ T5838] bridge_slave_1: entered allmulticast mode [ 104.672420][ T5838] bridge_slave_1: entered promiscuous mode [ 104.681392][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.748607][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.755629][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.781904][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.840757][ T5839] team0: Port device team_slave_0 added [ 104.849607][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.856714][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.883438][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.902825][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.915097][ T5837] team0: Port device team_slave_0 added [ 104.923725][ T5839] team0: Port device team_slave_1 added [ 104.955608][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.980873][ T5837] team0: Port device team_slave_1 added [ 105.016139][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.023548][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.049558][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.066863][ T5840] Bluetooth: hci1: command tx timeout [ 105.123533][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.131243][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.138158][ T5840] Bluetooth: hci0: command tx timeout [ 105.157695][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.163314][ T5852] Bluetooth: hci3: command tx timeout [ 105.186381][ T5838] team0: Port device team_slave_0 added [ 105.193242][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.200528][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.226767][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.237419][ T5852] Bluetooth: hci2: command tx timeout [ 105.250652][ T5836] hsr_slave_0: entered promiscuous mode [ 105.257622][ T5836] hsr_slave_1: entered promiscuous mode [ 105.286099][ T5838] team0: Port device team_slave_1 added [ 105.295273][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.302678][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.328993][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.422398][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.430573][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.458780][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.508677][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.515803][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.542261][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.559185][ T5839] hsr_slave_0: entered promiscuous mode [ 105.565786][ T5839] hsr_slave_1: entered promiscuous mode [ 105.573418][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.581445][ T5839] Cannot create hsr debugfs directory [ 105.639232][ T5837] hsr_slave_0: entered promiscuous mode [ 105.645724][ T5837] hsr_slave_1: entered promiscuous mode [ 105.653102][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.660808][ T5837] Cannot create hsr debugfs directory [ 105.774452][ T5838] hsr_slave_0: entered promiscuous mode [ 105.781485][ T5838] hsr_slave_1: entered promiscuous mode [ 105.788106][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.795715][ T5838] Cannot create hsr debugfs directory [ 106.165350][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.210035][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.242973][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.266372][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.311681][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.336707][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.348940][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.362632][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.483518][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.495619][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.508870][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.521469][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.665771][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.678685][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.692000][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.705723][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.753754][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.782965][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.829508][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.854240][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.874585][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.881906][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.906174][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.913537][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.923673][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.930866][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.982590][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.990187][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.089631][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.136798][ T5852] Bluetooth: hci1: command tx timeout [ 107.172982][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.201413][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.208636][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.219224][ T5840] Bluetooth: hci0: command tx timeout [ 107.224772][ T5852] Bluetooth: hci3: command tx timeout [ 107.250802][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.258083][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.297175][ T5852] Bluetooth: hci2: command tx timeout [ 107.308137][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.390605][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.468662][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.475890][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.544245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.551483][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.644694][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.822323][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.906161][ T5839] veth0_vlan: entered promiscuous mode [ 107.955549][ T5839] veth1_vlan: entered promiscuous mode [ 108.050398][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.090679][ T5836] veth0_vlan: entered promiscuous mode [ 108.098908][ T5839] veth0_macvtap: entered promiscuous mode [ 108.124104][ T5836] veth1_vlan: entered promiscuous mode [ 108.144523][ T5839] veth1_macvtap: entered promiscuous mode [ 108.249984][ T5837] veth0_vlan: entered promiscuous mode [ 108.272339][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.285185][ T5836] veth0_macvtap: entered promiscuous mode [ 108.295242][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.312559][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.323801][ T5836] veth1_macvtap: entered promiscuous mode [ 108.352667][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.364578][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.374959][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.384562][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.398493][ T5837] veth1_vlan: entered promiscuous mode [ 108.446115][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.493936][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.533861][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.543764][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.553333][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.562248][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.608168][ T5837] veth0_macvtap: entered promiscuous mode [ 108.620908][ T5837] veth1_macvtap: entered promiscuous mode [ 108.646738][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.662717][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.714382][ T5838] veth0_vlan: entered promiscuous mode [ 108.757411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.765307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.800111][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.842532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.860313][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.869791][ T5838] veth1_vlan: entered promiscuous mode [ 108.884544][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.897471][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.910764][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.916143][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.921695][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.949795][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.033182][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.044856][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.121889][ T5838] veth0_macvtap: entered promiscuous mode [ 109.156282][ T5838] veth1_macvtap: entered promiscuous mode [ 109.217316][ T5852] Bluetooth: hci1: command tx timeout [ 109.248179][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.296881][ T5852] Bluetooth: hci3: command tx timeout [ 109.302387][ T5840] Bluetooth: hci0: command tx timeout [ 109.307488][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.364789][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.378327][ T5852] Bluetooth: hci2: command tx timeout [ 109.386132][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.441375][ T5931] netlink: set zone limit has 8 unknown bytes [ 109.489174][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.516359][ T5935] mmap: syz.1.2 (5935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.528858][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.542653][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.560033][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.599666][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.609366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.912532][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.972013][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.204484][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.237319][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.326889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.825757][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.109661][ T5956] Zero length message leads to an empty skb [ 111.185774][ T5958] netlink: zone id is out of range [ 111.207804][ T5958] netlink: zone id is out of range [ 111.228983][ T5954] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 111.272514][ T5958] netlink: zone id is out of range [ 111.302290][ T5852] Bluetooth: hci1: command tx timeout [ 111.327421][ T5958] netlink: zone id is out of range [ 111.332629][ T5958] netlink: zone id is out of range [ 111.338042][ T5958] netlink: zone id is out of range [ 111.343208][ T5958] netlink: zone id is out of range [ 111.348503][ T5958] netlink: zone id is out of range [ 111.353659][ T5958] netlink: zone id is out of range [ 111.376862][ T5852] Bluetooth: hci3: command tx timeout [ 111.382304][ T5852] Bluetooth: hci0: command tx timeout [ 111.457067][ T5852] Bluetooth: hci2: command tx timeout [ 111.466569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.885454][ T5958] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 112.300219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.313891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.817063][ T5974] netlink: 330 bytes leftover after parsing attributes in process `syz.1.11'. [ 112.861685][ T5974] ›: renamed from hsr0 (while UP) [ 112.921009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.533335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.496958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.866677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 114.968992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 115.072167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.259379][ T6002] can: request_module (can-proto-3) failed. [ 119.288984][ T30] audit: type=1800 audit(6044419807.644:2): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.27" name="lu_gp_id" dev="configfs" ino=8254 res=0 errno=0 [ 119.547493][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 119.632652][ T6055] ipvlan0: entered allmulticast mode [ 119.680808][ T6055] veth0_vlan: entered allmulticast mode [ 121.028716][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.292352][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 121.654769][ T6089] ======================================================= [ 121.654769][ T6089] WARNING: The mand mount option has been deprecated and [ 121.654769][ T6089] and is ignored by this kernel. Remove the mand [ 121.654769][ T6089] option from the mount to silence this warning. [ 121.654769][ T6089] ======================================================= [ 122.581161][ T6104] FAULT_INJECTION: forcing a failure. [ 122.581161][ T6104] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 122.760561][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.0.38 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 122.760605][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.760627][ T6104] Call Trace: [ 122.760642][ T6104] [ 122.760658][ T6104] dump_stack_lvl+0x16c/0x1f0 [ 122.760717][ T6104] should_fail_ex+0x512/0x640 [ 122.760772][ T6104] should_fail_alloc_page+0xe7/0x130 [ 122.760804][ T6104] prepare_alloc_pages+0x3c2/0x610 [ 122.760850][ T6104] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 122.760910][ T6104] ? __lock_acquire+0x622/0x1c90 [ 122.760958][ T6104] ? arch_stack_walk+0xa6/0x100 [ 122.761007][ T6104] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.761092][ T6104] ? __lock_acquire+0xb8a/0x1c90 [ 122.761131][ T6104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.761183][ T6104] ? policy_nodemask+0xea/0x4e0 [ 122.761217][ T6104] alloc_pages_mpol+0x1fb/0x550 [ 122.761249][ T6104] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.761289][ T6104] ? __pfx___pollwait+0x10/0x10 [ 122.761328][ T6104] alloc_pages_noprof+0x131/0x390 [ 122.761360][ T6104] get_free_pages_noprof+0x10/0xb0 [ 122.761392][ T6104] __pollwait+0x295/0x490 [ 122.761434][ T6104] ? __pfx___pollwait+0x10/0x10 [ 122.761471][ T6104] unix_dgram_poll+0x7f/0x770 [ 122.761518][ T6104] ? __pfx_unix_dgram_poll+0x10/0x10 [ 122.761562][ T6104] sock_poll+0x15d/0x510 [ 122.761603][ T6104] ? __pfx_sock_poll+0x10/0x10 [ 122.761641][ T6104] do_select+0xd3a/0x17e0 [ 122.761714][ T6104] ? __pfx_do_select+0x10/0x10 [ 122.761758][ T6104] ? __pfx___pollwait+0x10/0x10 [ 122.761804][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.761847][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.761891][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.761936][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.761980][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.762025][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.762075][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.762119][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.762164][ T6104] ? __pfx_pollwake+0x10/0x10 [ 122.762208][ T6104] ? find_held_lock+0x2b/0x80 [ 122.762237][ T6104] ? __might_fault+0xe3/0x190 [ 122.762280][ T6104] ? __might_fault+0xe3/0x190 [ 122.762321][ T6104] ? __might_fault+0x13b/0x190 [ 122.762383][ T6104] ? core_sys_select+0x453/0xc10 [ 122.762422][ T6104] core_sys_select+0x453/0xc10 [ 122.762476][ T6104] ? __pfx_core_sys_select+0x10/0x10 [ 122.762527][ T6104] ? proc_fail_nth_write+0x9f/0x250 [ 122.762602][ T6104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.762645][ T6104] kern_select+0x15d/0x1e0 [ 122.762687][ T6104] ? __pfx_kern_select+0x10/0x10 [ 122.762736][ T6104] ? __pfx_ksys_write+0x10/0x10 [ 122.762789][ T6104] __x64_sys_select+0xbd/0x160 [ 122.762830][ T6104] ? do_syscall_64+0x91/0x490 [ 122.762857][ T6104] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.762904][ T6104] do_syscall_64+0xcd/0x490 [ 122.762936][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.762967][ T6104] RIP: 0033:0x7fd65558e929 [ 122.763004][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.763034][ T6104] RSP: 002b:00007fd6563fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 122.763079][ T6104] RAX: ffffffffffffffda RBX: 00007fd6557b6160 RCX: 00007fd65558e929 [ 122.763100][ T6104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 122.763117][ T6104] RBP: 00007fd6563fa090 R08: 0000000000000000 R09: 0000000000000000 [ 122.763134][ T6104] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 122.763152][ T6104] R13: 0000000000000001 R14: 00007fd6557b6160 R15: 00007ffe46ff2898 [ 122.763192][ T6104] [ 123.290127][ T6109] random: crng reseeded on system resumption [ 123.391245][ T6112] Unrecognized hibernate image header format! [ 123.434974][ T6112] PM: hibernation: Image mismatch: architecture specific data [ 123.888427][ T6109] Restarting kernel threads ... [ 123.958109][ T6109] Done restarting kernel threads. [ 124.035233][ T6120] netlink: 7 bytes leftover after parsing attributes in process `syz.2.43'. [ 125.136772][ T5852] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 125.136815][ T5852] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 125.152106][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 125.152174][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 125.160265][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 125.167416][ T5852] Bluetooth: hci0: Malformed LE Event: 0x0d [ 125.606135][ T6138] FAULT_INJECTION: forcing a failure. [ 125.606135][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 125.620089][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.1.46 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 125.620128][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.620147][ T6138] Call Trace: [ 125.620157][ T6138] [ 125.620169][ T6138] dump_stack_lvl+0x16c/0x1f0 [ 125.620223][ T6138] should_fail_ex+0x512/0x640 [ 125.620268][ T6138] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.620320][ T6138] should_failslab+0xc2/0x120 [ 125.620349][ T6138] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.620395][ T6138] ? __proc_create+0xc3/0x8c0 [ 125.620443][ T6138] ? __proc_create+0x2ce/0x8c0 [ 125.620498][ T6138] __proc_create+0x2ce/0x8c0 [ 125.620549][ T6138] ? __pfx___proc_create+0x10/0x10 [ 125.620596][ T6138] ? __lock_acquire+0x622/0x1c90 [ 125.620651][ T6138] proc_create_reg+0x7d/0x180 [ 125.620687][ T6138] proc_create_net_data+0x8e/0x1b0 [ 125.620749][ T6138] ? __pfx_proc_create_net_data+0x10/0x10 [ 125.620815][ T6138] ? __pfx_phonet_init_net+0x10/0x10 [ 125.620851][ T6138] phonet_init_net+0x66/0x120 [ 125.620884][ T6138] ops_init+0x1df/0x5f0 [ 125.620922][ T6138] setup_net+0x1ff/0x510 [ 125.620953][ T6138] ? lockdep_init_map_type+0x5c/0x280 [ 125.620998][ T6138] ? __pfx_setup_net+0x10/0x10 [ 125.621034][ T6138] ? debug_mutex_init+0x37/0x70 [ 125.621069][ T6138] copy_net_ns+0x2a6/0x5f0 [ 125.621111][ T6138] create_new_namespaces+0x3ea/0xa90 [ 125.621157][ T6138] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 125.621197][ T6138] ksys_unshare+0x45b/0xa40 [ 125.621239][ T6138] ? __pfx_ksys_unshare+0x10/0x10 [ 125.621282][ T6138] ? xfd_validate_state+0x61/0x180 [ 125.621335][ T6138] __x64_sys_unshare+0x31/0x40 [ 125.621376][ T6138] do_syscall_64+0xcd/0x490 [ 125.621409][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.621442][ T6138] RIP: 0033:0x7f458f18e929 [ 125.621467][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.621499][ T6138] RSP: 002b:00007f4590008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 125.621529][ T6138] RAX: ffffffffffffffda RBX: 00007f458f3b6080 RCX: 00007f458f18e929 [ 125.621549][ T6138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 125.621568][ T6138] RBP: 00007f458f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 125.621587][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.621605][ T6138] R13: 0000000000000000 R14: 00007f458f3b6080 R15: 00007fff1d5058d8 [ 125.621647][ T6138] [ 127.503118][ T6151] can: request_module (can-proto-5) failed. [ 128.736826][ T6162] FAULT_INJECTION: forcing a failure. [ 128.736826][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.822953][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.3.51 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 128.822997][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.823015][ T6162] Call Trace: [ 128.823026][ T6162] [ 128.823037][ T6162] dump_stack_lvl+0x16c/0x1f0 [ 128.823093][ T6162] should_fail_ex+0x512/0x640 [ 128.823146][ T6162] core_sys_select+0x4c5/0xc10 [ 128.823199][ T6162] ? __pfx_core_sys_select+0x10/0x10 [ 128.823250][ T6162] ? proc_fail_nth_write+0x9f/0x250 [ 128.823336][ T6162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.823376][ T6162] kern_select+0x15d/0x1e0 [ 128.823417][ T6162] ? __pfx_kern_select+0x10/0x10 [ 128.823466][ T6162] ? __pfx_ksys_write+0x10/0x10 [ 128.823518][ T6162] __x64_sys_select+0xbd/0x160 [ 128.823559][ T6162] ? do_syscall_64+0x91/0x490 [ 128.823588][ T6162] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.823635][ T6162] do_syscall_64+0xcd/0x490 [ 128.823667][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.823699][ T6162] RIP: 0033:0x7f03c958e929 [ 128.823724][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.823752][ T6162] RSP: 002b:00007f03ca42c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 128.823781][ T6162] RAX: ffffffffffffffda RBX: 00007f03c97b6160 RCX: 00007f03c958e929 [ 128.823801][ T6162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 128.823817][ T6162] RBP: 00007f03ca42c090 R08: 0000000000000000 R09: 0000000000000000 [ 128.823835][ T6162] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 128.823852][ T6162] R13: 0000000000000001 R14: 00007f03c97b6160 R15: 00007ffcb1b5f5d8 [ 128.823891][ T6162] [ 128.999496][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.984610][ T6185] netlink: 'syz.1.55': attribute type 11 has an invalid length. [ 129.992695][ T6185] netlink: 'syz.1.55': attribute type 11 has an invalid length. [ 130.000812][ T6185] netlink: 'syz.1.55': attribute type 11 has an invalid length. [ 130.013678][ T6185] netlink: 'syz.1.55': attribute type 11 has an invalid length. [ 130.732781][ T6185] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 130.743432][ T6185] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.751214][ T6185] page_type: f2(table) [ 130.755475][ T6185] raw: 00fff00000000000 0000000000000000 0000000000000000 0000000000000000 [ 130.770868][ T6185] raw: 0000000000000000 ffff888078df12a0 00000001f2000000 0000000000000000 [ 130.781003][ T6185] page dumped because: unmovable page [ 130.791169][ T6185] page_owner tracks the page as allocated [ 130.813831][ T6185] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5822, tgid 5822 (sshd-session), ts 93766631432, free_ts 88487626590 [ 130.874629][ T6185] post_alloc_hook+0x1c0/0x230 [ 130.944271][ T6185] get_page_from_freelist+0x1321/0x3890 [ 130.990754][ T6185] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 131.017755][ T6185] alloc_pages_mpol+0x1fb/0x550 [ 131.034922][ T6185] alloc_pages_noprof+0x131/0x390 [ 131.051949][ T6185] __pmd_alloc+0x3b/0x930 [ 131.062994][ T6185] __handle_mm_fault+0xaac/0x5490 [ 131.071278][ T6185] handle_mm_fault+0x589/0xd10 [ 131.076124][ T6185] do_user_addr_fault+0x7a6/0x1370 [ 131.122615][ T6185] exc_page_fault+0x5c/0xb0 [ 131.135194][ T6185] asm_exc_page_fault+0x26/0x30 [ 131.140705][ T6185] page last free pid 0 tgid 0 stack trace: [ 131.153283][ T6185] __free_frozen_pages+0x7fe/0x1180 [ 131.174493][ T6185] rcu_core+0x79c/0x14e0 [ 131.207260][ T6185] handle_softirqs+0x219/0x8e0 [ 131.216745][ T6185] __irq_exit_rcu+0x109/0x170 [ 131.221607][ T6185] irq_exit_rcu+0x9/0x30 [ 131.231782][ T6185] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 131.239196][ T6185] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.190224][ T6200] netlink: 25 bytes leftover after parsing attributes in process `syz.0.57'. [ 133.833430][ T6226] netlink: 334 bytes leftover after parsing attributes in process `syz.0.64'. [ 134.620023][ T6235] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.784390][ T6264] Invalid ELF header magic: != ELF [ 135.803741][ T6262] Invalid ELF header magic: != ELF [ 135.965564][ T6264] netlink: 330 bytes leftover after parsing attributes in process `syz.0.72'. [ 136.943683][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 137.025775][ T6284] net_ratelimit: 28 callbacks suppressed [ 137.025802][ T6284] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 137.042348][ T6284] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.541282][ T6279] hsr_slave_0 (unregistering): left promiscuous mode [ 139.417529][ T6304] netlink: 'syz.2.80': attribute type 11 has an invalid length. [ 139.510022][ T6304] netlink: 'syz.2.80': attribute type 11 has an invalid length. [ 139.522986][ T6304] netlink: 'syz.2.80': attribute type 11 has an invalid length. [ 139.552931][ T6304] netlink: 'syz.2.80': attribute type 11 has an invalid length. [ 140.859218][ T6317] FAULT_INJECTION: forcing a failure. [ 140.859218][ T6317] name failslab, interval 1, probability 0, space 0, times 0 [ 140.956766][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: syz.1.83 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 140.956814][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.956833][ T6317] Call Trace: [ 140.956844][ T6317] [ 140.956857][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 140.956916][ T6317] should_fail_ex+0x512/0x640 [ 140.956965][ T6317] ? fs_reclaim_acquire+0xae/0x150 [ 140.957009][ T6317] should_failslab+0xc2/0x120 [ 140.957040][ T6317] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 140.957089][ T6317] ? security_inode_alloc+0x3b/0x2b0 [ 140.957132][ T6317] security_inode_alloc+0x3b/0x2b0 [ 140.957169][ T6317] inode_init_always_gfp+0xce4/0x1030 [ 140.957222][ T6317] alloc_inode+0x86/0x240 [ 140.957255][ T6317] sock_alloc+0x40/0x280 [ 140.957291][ T6317] __sock_create+0xc1/0x8d0 [ 140.957340][ T6317] __sys_socket+0x14d/0x260 [ 140.957382][ T6317] ? __pfx___sys_socket+0x10/0x10 [ 140.957425][ T6317] ? xfd_validate_state+0x61/0x180 [ 140.957464][ T6317] ? fd_install+0x244/0x750 [ 140.957524][ T6317] __x64_sys_socket+0x72/0xb0 [ 140.957564][ T6317] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.957614][ T6317] do_syscall_64+0xcd/0x490 [ 140.957649][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.957682][ T6317] RIP: 0033:0x7f458f18e929 [ 140.957708][ T6317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.957739][ T6317] RSP: 002b:00007f4590029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 140.957769][ T6317] RAX: ffffffffffffffda RBX: 00007f458f3b5fa0 RCX: 00007f458f18e929 [ 140.957789][ T6317] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 140.957807][ T6317] RBP: 00007f458f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 140.957827][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.957845][ T6317] R13: 0000000000000000 R14: 00007f458f3b5fa0 R15: 00007fff1d5058d8 [ 140.957885][ T6317] [ 140.957925][ T6317] socket: no more sockets [ 141.517165][ T6303] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 141.685061][ T6303] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 141.693609][ T6303] page_type: f2(table) [ 141.703022][ T6303] raw: 00fff00000000000 0000000000000000 0000000000000000 0000000000000000 [ 141.712157][ T6303] raw: 0000000000000000 ffff888078df12a0 00000001f2000000 0000000000000000 [ 141.721340][ T6303] page dumped because: unmovable page [ 141.727329][ T6303] page_owner tracks the page as allocated [ 141.733096][ T6303] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5822, tgid 5822 (sshd-session), ts 93766631432, free_ts 88487626590 [ 141.752780][ T6303] post_alloc_hook+0x1c0/0x230 [ 141.758238][ T6303] get_page_from_freelist+0x1321/0x3890 [ 141.806367][ T6303] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 141.806461][ T6303] alloc_pages_mpol+0x1fb/0x550 [ 141.806483][ T6303] alloc_pages_noprof+0x131/0x390 [ 141.806504][ T6303] __pmd_alloc+0x3b/0x930 [ 141.806529][ T6303] __handle_mm_fault+0xaac/0x5490 [ 141.806560][ T6303] handle_mm_fault+0x589/0xd10 [ 141.806590][ T6303] do_user_addr_fault+0x7a6/0x1370 [ 141.806623][ T6303] exc_page_fault+0x5c/0xb0 [ 141.806659][ T6303] asm_exc_page_fault+0x26/0x30 [ 141.806682][ T6303] page last free pid 0 tgid 0 stack trace: [ 141.806696][ T6303] __free_frozen_pages+0x7fe/0x1180 [ 141.806726][ T6303] rcu_core+0x79c/0x14e0 [ 141.806762][ T6303] handle_softirqs+0x219/0x8e0 [ 141.806787][ T6303] __irq_exit_rcu+0x109/0x170 [ 141.806810][ T6303] irq_exit_rcu+0x9/0x30 [ 141.806834][ T6303] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 141.806870][ T6303] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.858302][ T6333] FAULT_INJECTION: forcing a failure. [ 141.858302][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 141.858368][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.3.86 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 141.858399][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.858413][ T6333] Call Trace: [ 141.858420][ T6333] [ 141.858429][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 141.858479][ T6333] should_fail_ex+0x512/0x640 [ 141.858526][ T6333] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 141.858578][ T6333] should_failslab+0xc2/0x120 [ 141.858609][ T6333] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 141.858659][ T6333] ? sk_prot_alloc+0x60/0x2a0 [ 141.858699][ T6333] sk_prot_alloc+0x60/0x2a0 [ 141.858738][ T6333] sk_alloc+0x36/0xc20 [ 141.858786][ T6333] inet6_create+0x381/0x1300 [ 141.858821][ T6333] ? inet6_create+0x7f/0x1300 [ 141.858858][ T6333] __sock_create+0x338/0x8d0 [ 141.858905][ T6333] inet_ctl_sock_create+0x94/0x230 [ 141.858952][ T6333] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 141.858993][ T6333] ? lockdep_init_map_type+0x5c/0x280 [ 141.859038][ T6333] ? do_init_timer+0xc9/0x110 [ 141.859076][ T6333] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 141.859130][ T6333] sctp_ctrlsock_init+0x40/0xf0 [ 141.859159][ T6333] ops_init+0x1df/0x5f0 [ 141.859194][ T6333] setup_net+0x1ff/0x510 [ 141.859224][ T6333] ? lockdep_init_map_type+0x5c/0x280 [ 141.859268][ T6333] ? __pfx_setup_net+0x10/0x10 [ 141.859303][ T6333] ? debug_mutex_init+0x37/0x70 [ 141.859337][ T6333] copy_net_ns+0x2a6/0x5f0 [ 141.859387][ T6333] create_new_namespaces+0x3ea/0xa90 [ 141.859432][ T6333] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 141.859471][ T6333] ksys_unshare+0x45b/0xa40 [ 141.859512][ T6333] ? __pfx_ksys_unshare+0x10/0x10 [ 141.859555][ T6333] ? xfd_validate_state+0x61/0x180 [ 141.859608][ T6333] __x64_sys_unshare+0x31/0x40 [ 141.859647][ T6333] do_syscall_64+0xcd/0x490 [ 141.859681][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.859707][ T6333] RIP: 0033:0x7f03c958e929 [ 141.859726][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.859749][ T6333] RSP: 002b:00007f03ca44d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.859772][ T6333] RAX: ffffffffffffffda RBX: 00007f03c97b6080 RCX: 00007f03c958e929 [ 141.859787][ T6333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 141.859802][ T6333] RBP: 00007f03c9610b39 R08: 0000000000000000 R09: 0000000000000000 [ 141.859816][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.859830][ T6333] R13: 0000000000000000 R14: 00007f03c97b6080 R15: 00007ffcb1b5f5d8 [ 141.859860][ T6333] [ 143.227771][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.335739][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.663514][ T6354] FAULT_INJECTION: forcing a failure. [ 143.663514][ T6354] name failslab, interval 1, probability 0, space 0, times 0 [ 143.705155][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.1.90 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 143.705204][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.705224][ T6354] Call Trace: [ 143.705235][ T6354] [ 143.705248][ T6354] dump_stack_lvl+0x16c/0x1f0 [ 143.705316][ T6354] should_fail_ex+0x512/0x640 [ 143.705364][ T6354] ? __kmalloc_noprof+0xbf/0x510 [ 143.705414][ T6354] ? realloc_user_queue+0x270/0x310 [ 143.705454][ T6354] should_failslab+0xc2/0x120 [ 143.705485][ T6354] __kmalloc_noprof+0xd2/0x510 [ 143.705543][ T6354] realloc_user_queue+0x270/0x310 [ 143.705585][ T6354] ? __pfx_snd_timer_user_open+0x10/0x10 [ 143.705626][ T6354] snd_timer_user_open+0xfc/0x180 [ 143.705666][ T6354] snd_open+0x1fe/0x450 [ 143.705699][ T6354] ? __pfx_snd_open+0x10/0x10 [ 143.705731][ T6354] chrdev_open+0x231/0x6a0 [ 143.705786][ T6354] ? __pfx_chrdev_open+0x10/0x10 [ 143.705839][ T6354] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 143.705889][ T6354] do_dentry_open+0x744/0x1c10 [ 143.705938][ T6354] ? __pfx_chrdev_open+0x10/0x10 [ 143.705997][ T6354] vfs_open+0x82/0x3f0 [ 143.706038][ T6354] path_openat+0x1de4/0x2cb0 [ 143.706097][ T6354] ? __pfx_path_openat+0x10/0x10 [ 143.706149][ T6354] ? __lock_acquire+0xb8a/0x1c90 [ 143.706197][ T6354] do_filp_open+0x20b/0x470 [ 143.706249][ T6354] ? __pfx_do_filp_open+0x10/0x10 [ 143.706330][ T6354] ? alloc_fd+0x471/0x7d0 [ 143.706383][ T6354] do_sys_openat2+0x11b/0x1d0 [ 143.706418][ T6354] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.706470][ T6354] __x64_sys_openat+0x174/0x210 [ 143.706508][ T6354] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.706562][ T6354] do_syscall_64+0xcd/0x490 [ 143.706597][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.706629][ T6354] RIP: 0033:0x7f458f18e929 [ 143.706655][ T6354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.706686][ T6354] RSP: 002b:00007f4590029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.706716][ T6354] RAX: ffffffffffffffda RBX: 00007f458f3b5fa0 RCX: 00007f458f18e929 [ 143.706736][ T6354] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 143.706756][ T6354] RBP: 00007f458f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 143.706775][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.706793][ T6354] R13: 0000000000000000 R14: 00007f458f3b5fa0 R15: 00007fff1d5058d8 [ 143.706831][ T6354] [ 145.606744][ T6372] netlink: 'syz.2.92': attribute type 11 has an invalid length. [ 145.614439][ T6372] netlink: 'syz.2.92': attribute type 11 has an invalid length. [ 145.628037][ T6372] netlink: 'syz.2.92': attribute type 11 has an invalid length. [ 145.711630][ T6372] netlink: 'syz.2.92': attribute type 11 has an invalid length. [ 146.551472][ T6373] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 146.565222][ T6373] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 146.626369][ T6373] page_type: f2(table) [ 146.642434][ T6373] raw: 00fff00000000000 0000000000000000 0000000000000000 0000000000000000 [ 146.662280][ T6373] raw: 0000000000000000 ffff888078df12a0 00000001f2000000 0000000000000000 [ 146.676347][ T6373] page dumped because: unmovable page [ 146.708043][ T6373] page_owner tracks the page as allocated [ 146.715229][ T6373] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5822, tgid 5822 (sshd-session), ts 93766631432, free_ts 88487626590 [ 146.734432][ T6373] post_alloc_hook+0x1c0/0x230 [ 146.768924][ T6373] get_page_from_freelist+0x1321/0x3890 [ 146.774672][ T6373] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 146.781768][ T6373] alloc_pages_mpol+0x1fb/0x550 [ 146.788736][ T6373] alloc_pages_noprof+0x131/0x390 [ 146.798936][ T6373] __pmd_alloc+0x3b/0x930 [ 146.803434][ T6373] __handle_mm_fault+0xaac/0x5490 [ 146.809114][ T6373] handle_mm_fault+0x589/0xd10 [ 146.816703][ T6373] do_user_addr_fault+0x7a6/0x1370 [ 146.826361][ T6373] exc_page_fault+0x5c/0xb0 [ 146.836403][ T6373] asm_exc_page_fault+0x26/0x30 [ 146.841481][ T6373] page last free pid 0 tgid 0 stack trace: [ 146.847608][ T6373] __free_frozen_pages+0x7fe/0x1180 [ 146.896438][ T6373] rcu_core+0x79c/0x14e0 [ 146.955437][ T6373] handle_softirqs+0x219/0x8e0 [ 146.976600][ T6373] __irq_exit_rcu+0x109/0x170 [ 146.981532][ T6373] irq_exit_rcu+0x9/0x30 [ 146.985866][ T6373] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 147.001870][ T6373] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.760229][ T6392] netlink: 146 bytes leftover after parsing attributes in process `syz.1.95'. [ 151.889935][ T6440] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 151.981469][ T6441] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 158.992208][ T6561] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 159.022641][ T6561] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 159.242488][ T6561] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 159.250445][ T6561] netlink: 'syz.3.130': attribute type 11 has an invalid length. [ 160.033810][ T6564] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 160.067633][ T6564] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 160.081335][ T6564] page_type: f2(table) [ 160.102051][ T6564] raw: 00fff00000000000 0000000000000000 0000000000000000 0000000000000000 [ 160.134383][ T6564] raw: 0000000000000000 ffff888078df12a0 00000001f2000000 0000000000000000 [ 160.159832][ T6564] page dumped because: unmovable page [ 160.168137][ T6564] page_owner tracks the page as allocated [ 160.252347][ T6564] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5822, tgid 5822 (sshd-session), ts 93766631432, free_ts 88487626590 [ 160.330196][ T6564] post_alloc_hook+0x1c0/0x230 [ 160.352175][ T6564] get_page_from_freelist+0x1321/0x3890 [ 160.357872][ T6564] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 160.444298][ T6564] alloc_pages_mpol+0x1fb/0x550 [ 160.519482][ T6564] alloc_pages_noprof+0x131/0x390 [ 160.576870][ T6564] __pmd_alloc+0x3b/0x930 [ 160.617496][ T6564] __handle_mm_fault+0xaac/0x5490 [ 160.624652][ T6564] handle_mm_fault+0x589/0xd10 [ 160.629761][ T6564] do_user_addr_fault+0x7a6/0x1370 [ 160.657675][ T6564] exc_page_fault+0x5c/0xb0 [ 160.671899][ T6564] asm_exc_page_fault+0x26/0x30 [ 160.678144][ T6564] page last free pid 0 tgid 0 stack trace: [ 160.758041][ T6564] __free_frozen_pages+0x7fe/0x1180 [ 160.782324][ T6564] rcu_core+0x79c/0x14e0 [ 160.805829][ T6564] handle_softirqs+0x219/0x8e0 [ 160.810744][ T6564] __irq_exit_rcu+0x109/0x170 [ 160.815902][ T6564] irq_exit_rcu+0x9/0x30 [ 160.822021][ T6564] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 160.887045][ T6564] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.262519][ T6587] FAULT_INJECTION: forcing a failure. [ 161.262519][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 161.333960][ T6587] CPU: 0 UID: 0 PID: 6587 Comm: syz.0.135 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 161.334007][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.334027][ T6587] Call Trace: [ 161.334038][ T6587] [ 161.334050][ T6587] dump_stack_lvl+0x16c/0x1f0 [ 161.334106][ T6587] should_fail_ex+0x512/0x640 [ 161.334152][ T6587] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 161.334207][ T6587] should_failslab+0xc2/0x120 [ 161.334240][ T6587] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 161.334287][ T6587] ? rcu_is_watching+0x12/0xc0 [ 161.334319][ T6587] ? get_random_u64+0x57c/0x7d0 [ 161.334356][ T6587] ? prepare_creds+0x2c/0x7d0 [ 161.334408][ T6587] prepare_creds+0x2c/0x7d0 [ 161.334457][ T6587] copy_creds+0xa7/0xa50 [ 161.334519][ T6587] copy_process+0xff6/0x76a0 [ 161.334560][ T6587] ? __pfx___futex_wait+0x10/0x10 [ 161.334605][ T6587] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.334653][ T6587] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.334717][ T6587] ? __pfx_copy_process+0x10/0x10 [ 161.334777][ T6587] kernel_clone+0xfc/0x960 [ 161.334819][ T6587] ? __pfx_kernel_clone+0x10/0x10 [ 161.334869][ T6587] ? up_write+0x1b2/0x520 [ 161.334927][ T6587] ? 0xffffffff81000000 [ 161.334951][ T6587] __do_sys_clone+0xce/0x120 [ 161.334990][ T6587] ? __pfx___do_sys_clone+0x10/0x10 [ 161.335028][ T6587] ? __pfx_aa_get_newest_label+0x10/0x10 [ 161.335064][ T6587] ? 0xffffffff81000000 [ 161.335102][ T6587] ? xfd_validate_state+0x61/0x180 [ 161.335143][ T6587] ? bpf_lsm_capable+0x9/0x10 [ 161.335198][ T6587] do_syscall_64+0xcd/0x490 [ 161.335232][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.335264][ T6587] RIP: 0033:0x7fd65558e929 [ 161.335288][ T6587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.335319][ T6587] RSP: 002b:00007fd65641b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 161.335349][ T6587] RAX: ffffffffffffffda RBX: 00007fd6557b6080 RCX: 00007fd65558e929 [ 161.335371][ T6587] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 161.335391][ T6587] RBP: 00007fd655610b39 R08: 0000000000000009 R09: 0000000000000000 [ 161.335412][ T6587] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.335431][ T6587] R13: 0000000000000000 R14: 00007fd6557b6080 R15: 00007ffe46ff2898 [ 161.335459][ T6587] ? 0xffffffff81000000 [ 161.335508][ T6587] [ 163.165963][ T6626] netlink: 504 bytes leftover after parsing attributes in process `syz.3.142'. [ 163.295335][ T6624] netlink: 504 bytes leftover after parsing attributes in process `syz.3.142'. [ 163.795124][ T6634] [ 163.797509][ T6634] ====================================================== [ 163.804562][ T6634] WARNING: possible circular locking dependency detected [ 163.811627][ T6634] 6.15.0-syzkaller-13804-g939f15e640f1 #0 Not tainted [ 163.818433][ T6634] ------------------------------------------------------ [ 163.825503][ T6634] syz.0.143/6634 is trying to acquire lock: [ 163.831532][ T6634] ffffffff8e52ea68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 163.841222][ T6634] [ 163.841222][ T6634] but task is already holding lock: [ 163.848627][ T6634] ffff888025eda7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 163.859973][ T6634] [ 163.859973][ T6634] which lock already depends on the new lock. [ 163.859973][ T6634] [ 163.870421][ T6634] [ 163.870421][ T6634] the existing dependency chain (in reverse order) is: [ 163.879472][ T6634] [ 163.879472][ T6634] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 163.888165][ T6634] blk_alloc_queue+0x619/0x760 [ 163.893516][ T6634] blk_mq_alloc_queue+0x175/0x290 [ 163.899170][ T6634] __blk_mq_alloc_disk+0x29/0x120 [ 163.904785][ T6634] loop_add+0x49e/0xb70 [ 163.909518][ T6634] loop_init+0x164/0x270 [ 163.914352][ T6634] do_one_initcall+0x120/0x6e0 [ 163.919690][ T6634] kernel_init_freeable+0x5c2/0x900 [ 163.925481][ T6634] kernel_init+0x1c/0x2b0 [ 163.930393][ T6634] ret_from_fork+0x5d4/0x6f0 [ 163.935569][ T6634] ret_from_fork_asm+0x1a/0x30 [ 163.940909][ T6634] [ 163.940909][ T6634] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 163.948201][ T6634] fs_reclaim_acquire+0x102/0x150 [ 163.953815][ T6634] prepare_alloc_pages+0x162/0x610 [ 163.959513][ T6634] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 163.966006][ T6634] __alloc_pages_noprof+0xb/0x1b0 [ 163.971602][ T6634] pcpu_populate_chunk+0x110/0xb00 [ 163.977306][ T6634] pcpu_alloc_noprof+0x86a/0x1470 [ 163.982923][ T6634] xt_percpu_counter_alloc+0x13e/0x1b0 [ 163.988972][ T6634] find_check_entry.constprop.0+0xbc/0x9b0 [ 163.995383][ T6634] translate_table+0xc98/0x1720 [ 164.000825][ T6634] ipt_register_table+0x102/0x430 [ 164.006447][ T6634] iptable_mangle_table_init+0x40/0x60 [ 164.012499][ T6634] xt_find_table_lock+0x2e1/0x520 [ 164.018118][ T6634] xt_request_find_table_lock+0x28/0xf0 [ 164.024258][ T6634] get_info+0x190/0x610 [ 164.029040][ T6634] do_ipt_get_ctl+0x169/0xa10 [ 164.034309][ T6634] nf_getsockopt+0x7c/0xe0 [ 164.039309][ T6634] ip_getsockopt+0x18c/0x1e0 [ 164.044490][ T6634] tcp_getsockopt+0xa1/0x100 [ 164.049747][ T6634] do_sock_getsockopt+0x3fc/0x800 [ 164.055361][ T6634] __sys_getsockopt+0x123/0x1b0 [ 164.060817][ T6634] __x64_sys_getsockopt+0xbd/0x160 [ 164.066526][ T6634] do_syscall_64+0xcd/0x490 [ 164.071626][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.078110][ T6634] [ 164.078110][ T6634] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 164.085928][ T6634] __lock_acquire+0x126f/0x1c90 [ 164.091387][ T6634] lock_acquire+0x179/0x350 [ 164.096487][ T6634] __mutex_lock+0x199/0xb90 [ 164.101564][ T6634] pcpu_alloc_noprof+0xb4c/0x1470 [ 164.107181][ T6634] blk_stat_alloc_callback+0xc8/0x280 [ 164.114281][ T6634] wbt_init+0xac/0x540 [ 164.119042][ T6634] queue_wb_lat_store+0x354/0x3d0 [ 164.124662][ T6634] queue_attr_store+0x279/0x320 [ 164.130112][ T6634] sysfs_kf_write+0xf2/0x150 [ 164.135286][ T6634] kernfs_fop_write_iter+0x351/0x510 [ 164.141164][ T6634] vfs_write+0x6c4/0x1150 [ 164.146085][ T6634] ksys_write+0x12a/0x250 [ 164.151017][ T6634] do_syscall_64+0xcd/0x490 [ 164.156097][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.162551][ T6634] [ 164.162551][ T6634] other info that might help us debug this: [ 164.162551][ T6634] [ 164.172806][ T6634] Chain exists of: [ 164.172806][ T6634] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 164.172806][ T6634] [ 164.186512][ T6634] Possible unsafe locking scenario: [ 164.186512][ T6634] [ 164.193985][ T6634] CPU0 CPU1 [ 164.199366][ T6634] ---- ---- [ 164.204751][ T6634] lock(&q->q_usage_counter(io)#18); [ 164.210170][ T6634] lock(fs_reclaim); [ 164.216716][ T6634] lock(&q->q_usage_counter(io)#18); [ 164.224657][ T6634] lock(pcpu_alloc_mutex); [ 164.229204][ T6634] [ 164.229204][ T6634] *** DEADLOCK *** [ 164.229204][ T6634] [ 164.237378][ T6634] 6 locks held by syz.0.143/6634: [ 164.242432][ T6634] #0: ffff88802a6e5b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 164.251563][ T6634] #1: ffff888036aec428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 164.260629][ T6634] #2: ffff8880342eb088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 164.270449][ T6634] #3: ffff8881427890f8 (kn->active#93){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 164.280533][ T6634] #4: ffff888025eda7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 164.292291][ T6634] #5: ffff888025eda800 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 164.304314][ T6634] [ 164.304314][ T6634] stack backtrace: [ 164.310253][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.0.143 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 164.310288][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.310304][ T6634] Call Trace: [ 164.310315][ T6634] [ 164.310325][ T6634] dump_stack_lvl+0x116/0x1f0 [ 164.310373][ T6634] print_circular_bug+0x275/0x350 [ 164.310409][ T6634] check_noncircular+0x14c/0x170 [ 164.310446][ T6634] __lock_acquire+0x126f/0x1c90 [ 164.310486][ T6634] lock_acquire+0x179/0x350 [ 164.310520][ T6634] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 164.310559][ T6634] ? __pfx___might_resched+0x10/0x10 [ 164.310590][ T6634] ? ksys_write+0x12a/0x250 [ 164.310627][ T6634] ? do_syscall_64+0xcd/0x490 [ 164.310650][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.310679][ T6634] __mutex_lock+0x199/0xb90 [ 164.310702][ T6634] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 164.310739][ T6634] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 164.310776][ T6634] ? __pfx___mutex_lock+0x10/0x10 [ 164.310808][ T6634] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 164.310843][ T6634] pcpu_alloc_noprof+0xb4c/0x1470 [ 164.310885][ T6634] ? __pfx_wbt_data_dir+0x10/0x10 [ 164.310925][ T6634] ? __pfx_wb_timer_fn+0x10/0x10 [ 164.310950][ T6634] blk_stat_alloc_callback+0xc8/0x280 [ 164.310976][ T6634] ? kasan_save_track+0x14/0x30 [ 164.311016][ T6634] wbt_init+0xac/0x540 [ 164.311044][ T6634] queue_wb_lat_store+0x354/0x3d0 [ 164.311088][ T6634] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 164.311132][ T6634] ? __mutex_trylock_common+0xe9/0x250 [ 164.311169][ T6634] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 164.311211][ T6634] queue_attr_store+0x279/0x320 [ 164.311253][ T6634] ? __pfx_queue_attr_store+0x10/0x10 [ 164.311294][ T6634] ? __lock_acquire+0x622/0x1c90 [ 164.311337][ T6634] ? find_held_lock+0x2b/0x80 [ 164.311361][ T6634] ? sysfs_file_kobj+0xe4/0x290 [ 164.311394][ T6634] ? __pfx_queue_attr_store+0x10/0x10 [ 164.311437][ T6634] sysfs_kf_write+0xf2/0x150 [ 164.311469][ T6634] kernfs_fop_write_iter+0x351/0x510 [ 164.311495][ T6634] ? __pfx_sysfs_kf_write+0x10/0x10 [ 164.311528][ T6634] vfs_write+0x6c4/0x1150 [ 164.311565][ T6634] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 164.311599][ T6634] ? __pfx___mutex_lock+0x10/0x10 [ 164.311622][ T6634] ? __pfx_vfs_write+0x10/0x10 [ 164.311669][ T6634] ksys_write+0x12a/0x250 [ 164.311706][ T6634] ? __pfx_ksys_write+0x10/0x10 [ 164.311748][ T6634] do_syscall_64+0xcd/0x490 [ 164.311772][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.311798][ T6634] RIP: 0033:0x7fd65558e929 [ 164.311820][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.311846][ T6634] RSP: 002b:00007fd65641b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.311870][ T6634] RAX: ffffffffffffffda RBX: 00007fd6557b6080 RCX: 00007fd65558e929 [ 164.311888][ T6634] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000004 [ 164.311903][ T6634] RBP: 00007fd655610b39 R08: 0000000000000000 R09: 0000000000000000 [ 164.311919][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.311934][ T6634] R13: 0000000000000000 R14: 00007fd6557b6080 R15: 00007ffe46ff2898 [ 164.311958][ T6634] [ 164.666052][ T6623] tipc: can't start tipc receive workqueue