last executing test programs: 8.424730994s ago: executing program 3 (id=87): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) (async) remap_file_pages$auto(0x6a2b, 0x3000, 0x2, 0x3, 0x10000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x120) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyye\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541a, r1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x7ffdffffeffd, 0x0) ioctl$auto(r0, 0x227c, r0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1) r2 = syz_clone3(0x0, 0x0) (async) ioctl$auto_TIOCGPTPEER(r1, 0x5441, 0x0) (async) prctl$auto(0x1000, 0x4, 0x0, 0x0, 0x81) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = socket(0xa, 0x5, 0x0) setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x98) (async) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000000)='/dev/radio6\x00', 0x4, 0x101, &(0x7f0000000040)={0xffffffffffff8000, 0x40}) setitimer$auto(0x2, 0x0, 0x0) unshare$auto(0x40000080) (async) socket(0x10, 0x2, 0xc) (async) setpriority$auto(0x9, 0x0, 0x8) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f0000000240)={{0x6, 0x0, 0x0, 0x977c, 0xfffffffb, 0x3ff, 0x8}, &(0x7f00000001c0)=0x4, &(0x7f0000000200)=0x8, 0x2800000000000000, 0x0, 0x2, 0x8001, 0x10000, 0x3, 0x1, 0x4, @inferred=r2, @inferred=r2}) 7.117755233s ago: executing program 1 (id=91): socketpair$auto(0xf19b, 0xc, 0x0, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0xfffffffffffffffa, 0xfffffffffffdffff, 0x7f7, 0x4) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mq_open$auto(0xfffffffffffffffe, 0x1, 0x101, &(0x7f0000000140)={0x6, 0x9, 0x4, 0x9}) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x7f, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x800000003) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) close_range$auto(0x2, r1, 0xff) ioctl$auto(r2, 0x5608, r3) write$auto(r0, &(0x7f0000000200)='/deVv/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0x0, 0x1, 0x948b, 0xffffffffffffffff, 0x3, 0x8, 0x4, 0x9, 0x8000001f, 0x8, 0x6d3e, 0x9, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0xffffffffffffffff, 0x8, 0x1104) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000080)="f9903314fb23667ba70ff7706b60e7c5c97b1d55bb877517edc7010153b6aaac4c4fe3c5c2329af280c7e38c08e79d3cd052348ef7de078e0178a1048e5d142d4cef8b8bda9c04fb09c289cd", 0x80) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x90582, 0x0) r5 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(r5, 0x0, 0x80) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMAXCID(r4, 0x40047451, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 6.605124662s ago: executing program 0 (id=92): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x100000000000005, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r0, 0x80, 0xffffffff, 0x0, 0x4) mmap$auto(0x2, 0xa10004, 0xffb, 0x50, r0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x541d, r0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x1a, 0x3, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xd680000000) 6.448602043s ago: executing program 2 (id=93): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) 6.401658149s ago: executing program 3 (id=94): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), r1) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x4000000000028000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, 0x0, 0x20040894) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000580)={{0x6, 0xee01, 0xffffffffffffffff, 0x400, 0xffffffff, 0x2}, 0x3, 0x5, 0x327d, 0x6, @inferred, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000440)="de72754397c9f8d5071ad28519a4ffac413cbd3e40c11004f2a779aae67661e473fe55e2a58cac89d0e6f2a61bceed0827b5816d224252806f6dbda48941c74a8989cc6c6588de75d81396ffde129cc083f7d63f5d3a3e02f6eb5e7c507c055c7be1db4c0bfc461c50fba7c38b5106704a62133a66789c17f9d14dc583719951ae45b5d47b32eb03dcfaffcfc6aeba009c4c69bbe195093721beb47c63f698af9bc5cbe779cc5663701751f8263ab1f2c2", &(0x7f0000000500)="cff100279c267d712789546fee89bd0b88b60872bc5c73ff5c809ff263b3732ec8696df00ae7cc1a3edcf9cab5a71147428d208454e6e647daa7d5b64a003b2cfb92ccbdc98e00f5a7b57eee5b"}) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000080)="9cbf02ec6b0a31f08e3dade4d9d454c9979a291a1fb3563cc569a3f5e007c2f56d9467d2a633894e6d7a474fee1312dbd7d6bf583e85168593678f2514dbd220bbfeecee0c99f8bd90d145bd3ecf3db98ecca69d4046372d1d6a25a1f4023ce75e9dbb7b1d059971101c1d9619279091820545f55def7e1dbf74dd17ac444339cb896b1c9d4a92ce3606ccbc152e19e87054f7e69ee95c091b55bd23490e3da3715ba0e63ef5216ca4457e2a8010a53bbbab07591c0a374318e208fb9f597cbf94c381e9cc718103f0a587100566d7ec04c9d4ac6caacc3ab264e9462641739323b94f91", 0x8, &(0x7f0000000180)="cfbb06e7894803ad660313895a6f2759e491d8769fe3f0582ed3820634e935708365db44a914dc99ab3de6c9f389ccce9295012cd39835bf8abc003bd47bd50dd4b59f9f45911d03e4d403f0e944ce758050bda0c1cfe277a8f34f87df46665d1f5994bee9d74f69ca48d3c6a46f8f6239934fbcbac2f84325a07bdcf2a8d7832c344d3391c86b243c7511458b242db34c1a2793de64e278c23cf15b13d8432f1a527d69a1b840a86d2cfe50b1673ee10671034ccb56a0d57bf5defee8dafa4d8bd1f65699", 0x2, &(0x7f0000000280)="7f4f89b1d758f4d98e472b64091b609544db766ec64b1f6366fa007fd712a6aa87206162b0bdaaec2ee72c015c21fd803129bcff52a6ee1f5a5edef63b7ba01bd97f7b16aa89d9ca8acd735afe94894f0a3199339e50ac10d9b457c8d6f86970f7b3dbe3b505", &(0x7f0000000300)=0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000006c0)=0x0) sendto$auto(0xffffffffffffffff, &(0x7f0000000600)="6adb371cd8068d21eb66b6365838fb77febb697130c2fcd769a898156907c357df00b9a135f6feaf2852bafb53d6902e5d951bace720f257ef7e24ebee7d9209bcb61c6e197f9589bad3edac56810a6825d48ca02473051be8fce3ec39ae8f47dd496d5b85a4bc1986ca7b37216fde325527aa4de030bd580a87d9b8f741dffe7266cc029d049880e91005fb84844c0ea3df815c0be1658c8c9bfe70583fe328860c5dc8060f907530dce5", 0x40, 0x9c, &(0x7f0000000700)=@nfc={0x27, r6, 0x0, 0x5}, 0xffffff8a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getegid() mlock$auto(0xfbe8, 0x4) 6.033220464s ago: executing program 1 (id=95): openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x22c380, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x4000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 5.545843934s ago: executing program 1 (id=96): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x11, 0x2, 0x1a) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.065113888s ago: executing program 0 (id=97): sysfs$auto(0xe, 0xfffffffffffffffd, 0x100000000001) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) ioctl$auto(0x3, 0x80045439, 0x10000000000402) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) semctl$auto(0x0, 0xe3, 0x0, 0x5) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xa, 0x4, 0x1}, 0x6, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00', 0x2) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) futex$auto(&(0x7f00000002c0)=0x3, 0x5, 0x9, 0x0, 0x0, 0xffff7fff) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) socket(0x1f, 0x1, 0x0) read$auto(0x3, 0x0, 0x1f40) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) 4.848007014s ago: executing program 3 (id=98): socket(0x11, 0x80003, 0x300) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0x200, 0x3, 0xffffff4c, @_sigchld={0x0, 0x0, 0x0, 0x0, 0x6}}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) move_pages$auto(0x0, 0xb, 0x0, 0x0, 0x0, 0x400002) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) symlink$auto(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/169, 0xa9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub0/sw_params\x00', 0x101480, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) madvise$auto(0x2000000000, 0x200007, 0x19) close_range$auto(r0, r2, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x4, 0x5}) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044015}, 0x20004855) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) socket(0x3, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 4.729801296s ago: executing program 2 (id=99): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x52) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x52) semctl$auto(0x7, 0xb, 0x80003, 0x8000000000000001) (async) semctl$auto(0x7, 0xb, 0x80003, 0x8000000000000001) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) write$auto(0x3, 0x0, 0x7) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, r1, 0x0, 0x7ffff000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) socket(0x2, 0x801, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x6) (async) epoll_create$auto(0x6) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x134, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x4}, @NFC_ATTR_VENDOR_DATA={0x100, 0x1f, "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"}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0xc001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x80000001, &(0x7f0000000000)=0x8, 0x80000000000003f) 4.066225487s ago: executing program 0 (id=100): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)) (async) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x40040d0) (async) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x40040d0) socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) (async) socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pread64$auto(r1, &(0x7f0000000380)='\x00', 0x8e1c, 0x100) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x4) (async) r2 = socket(0x11, 0x2, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@iter_create={r2, 0x8}, 0xa3) 3.588412582s ago: executing program 0 (id=101): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1fff, 0x0, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xc8}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) 3.524529599s ago: executing program 3 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000003a00)={0x34, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x139, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x8, 0x2d, 0x0, 0x0, @fd}, @generic="5ecb8698ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) pipe$auto(&(0x7f0000000000)=r0) 3.521786232s ago: executing program 1 (id=103): sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000081) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/framebuffer\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0036c370987e15b227590080dfd4f5dcbe76b5a11924392c89ce7505a9bd494761261cdb032ea54fee9992a0995d3a90fea9ddd340", @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001002f66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) unshare$auto(0x40000080) ioperm$auto(0xe4, 0x82f0, 0x942) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) writev$auto(0x1, 0x0, 0x1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fanotify_init$auto(0x3, 0x5) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x171e02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa240, 0x0) ioctl$auto(r5, 0xc0585611, r5) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) 3.257743791s ago: executing program 2 (id=104): openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x22c380, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x4000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 3.13869114s ago: executing program 3 (id=105): unshare$auto(0x40000080) r0 = socket(0x0, 0x6, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r1 = socket(0x9, 0x2, 0x7) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6000c800}, 0x2c0408c0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x0, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)="58fcb282bcbc38bfaef257e019406e8ec445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e9ce53883444996d1721d7f3ae627c6c68118e15b5a753fd37910fbc02d898cfc8254c80582fc6184") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/name\x00', 0x90001, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x20000000f90, 0xffffffffffffffff, 0x28000) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x7ffffffffffffffb, 0x0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dvmrp0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000828bd7000ffdbdf251200000008003100f8ffffff0500120098000000050038000000000004001e000a001800ffffffffffff00fe08000600", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) socket(0x10, 0x2, 0x0) unshare$auto(0x2) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, 0x0, 0x40040) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f00000003c0)={0x7b4, 0x0, 0x2, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7f}, @NL80211_ATTR_IE_RIC={0x705, 0xb2, "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"}, @NL80211_ATTR_MNTR_FLAGS={0x5f, 0x17, "e658df0a8afde64edc4378b75f5eb31cb89a0b45a34a6a63aada98c702530c15b2d97a9d089422bc595543ac8962987c7f188a5fa01b4d24361eeda46bde693d8450aec30e101c390f8fece4b1735f86cab4d2a0d31ec812884347"}, @NL80211_ATTR_MAC_HINT={0x1a, 0xc8, "a8a5ac867b08019b8ff0ccd815646db38d949b6bba78"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x4000}, 0xe4081) 2.965391236s ago: executing program 2 (id=106): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), r1) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x4000000000028000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, 0x0, 0x20040894) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000580)={{0x6, 0xee01, 0xffffffffffffffff, 0x400, 0xffffffff, 0x2}, 0x3, 0x5, 0x327d, 0x6, @inferred, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000440)="de72754397c9f8d5071ad28519a4ffac413cbd3e40c11004f2a779aae67661e473fe55e2a58cac89d0e6f2a61bceed0827b5816d224252806f6dbda48941c74a8989cc6c6588de75d81396ffde129cc083f7d63f5d3a3e02f6eb5e7c507c055c7be1db4c0bfc461c50fba7c38b5106704a62133a66789c17f9d14dc583719951ae45b5d47b32eb03dcfaffcfc6aeba009c4c69bbe195093721beb47c63f698af9bc5cbe779cc5663701751f8263ab1f2c2", &(0x7f0000000500)="cff100279c267d712789546fee89bd0b88b60872bc5c73ff5c809ff263b3732ec8696df00ae7cc1a3edcf9cab5a71147428d208454e6e647daa7d5b64a003b2cfb92ccbdc98e00f5a7b57eee5b"}) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000080)="9cbf02ec6b0a31f08e3dade4d9d454c9979a291a1fb3563cc569a3f5e007c2f56d9467d2a633894e6d7a474fee1312dbd7d6bf583e85168593678f2514dbd220bbfeecee0c99f8bd90d145bd3ecf3db98ecca69d4046372d1d6a25a1f4023ce75e9dbb7b1d059971101c1d9619279091820545f55def7e1dbf74dd17ac444339cb896b1c9d4a92ce3606ccbc152e19e87054f7e69ee95c091b55bd23490e3da3715ba0e63ef5216ca4457e2a8010a53bbbab07591c0a374318e208fb9f597cbf94c381e9cc718103f0a587100566d7ec04c9d4ac6caacc3ab264e9462641739323b94f91", 0x8, &(0x7f0000000180)="cfbb06e7894803ad660313895a6f2759e491d8769fe3f0582ed3820634e935708365db44a914dc99ab3de6c9f389ccce9295012cd39835bf8abc003bd47bd50dd4b59f9f45911d03e4d403f0e944ce758050bda0c1cfe277a8f34f87df46665d1f5994bee9d74f69ca48d3c6a46f8f6239934fbcbac2f84325a07bdcf2a8d7832c344d3391c86b243c7511458b242db34c1a2793de64e278c23cf15b13d8432f1a527d69a1b840a86d2cfe50b1673ee10671034ccb56a0d57bf5defee8dafa4d8bd1f65699", 0x2, &(0x7f0000000280)="7f4f89b1d758f4d98e472b64091b609544db766ec64b1f6366fa007fd712a6aa87206162b0bdaaec2ee72c015c21fd803129bcff52a6ee1f5a5edef63b7ba01bd97f7b16aa89d9ca8acd735afe94894f0a3199339e50ac10d9b457c8d6f86970f7b3dbe3b505", &(0x7f0000000300)=0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000006c0)=0x0) sendto$auto(0xffffffffffffffff, &(0x7f0000000600)="6adb371cd8068d21eb66b6365838fb77febb697130c2fcd769a898156907c357df00b9a135f6feaf2852bafb53d6902e5d951bace720f257ef7e24ebee7d9209bcb61c6e197f9589bad3edac56810a6825d48ca02473051be8fce3ec39ae8f47dd496d5b85a4bc1986ca7b37216fde325527aa4de030bd580a87d9b8f741dffe7266cc029d049880e91005fb84844c0ea3df815c0be1658c8c9bfe70583fe328860c5dc8060f907530dce5", 0x40, 0x9c, &(0x7f0000000700)=@nfc={0x27, r6, 0x0, 0x5}, 0xffffff8a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getegid() mlock$auto(0xfbe8, 0x4) 1.989677688s ago: executing program 1 (id=107): mmap$auto(0x0, 0x20009, 0xdf, 0x18, 0x200000000000404, 0x0) (async) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008015}, 0x24004054) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/153, 0x99) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.0/usb1/bcdDevice\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000940)=""/4096, 0x1000) (async) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x13c, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) (async) r2 = gettid() (async) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) (async) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x6, 0x8, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r4, 0xfffff588, 0x9, 0x2, 0x100000000000200}, 0x7f) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r4, 0x1, &(0x7f00000000c0)) (async) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r5, &(0x7f00000001c0), 0x0) (async) rt_sigqueueinfo$auto(0x0, 0x80, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x42, 0x7e73, @_timer={r2, 0x80000001, @sival_int=0xc3, 0x5}}}) (async) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r7, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000000100000f18abff1fbc88b981c238f9c7f9ea8f53f36ce847e242e500f143be06388fd9233bf78ee4997f9f155190f7bb56389ffca751917cec13b19c69d3cd464045c99415dd4ab221782a2ca178abf311ecc0504a49f66db7360928f1e447958f0f9604d04ca1a9a44a12532f67a82d6f844c1e55b548ec1d152"]) ioctl$auto(r3, 0xffff, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1.427186267s ago: executing program 2 (id=108): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, r0, 0x8000) unshare$auto(0x4000017f) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x400, 0x1, 0xdf, 0x9b72, r1, 0x200000008000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) ioctl$auto(r4, 0x80045519, 0xf15) ioctl$auto(r4, 0x5523, r4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) kill$auto(0x0, 0x101) socket(0xa, 0x5, 0x94) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x22c380, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x4000, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 706.607333ms ago: executing program 1 (id=109): r0 = socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x40002, 0x9, 0x0, 0x10) (async) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) (async) shutdown$auto(0xffffffffffffffff, 0xc3a) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 32) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/hugetlb_optimize_vmemmap\x00', 0xa0202, 0x0) (async) getdents$auto(r2, &(0x7f0000000140)={0x8000, 0x2, 0xfffd, "d212bc1c62f5bc4f55a302ea945459765012e68b7c59a5fbb22cf804a5af4a63d3a8b717288aed66386ff45a202c78cd8d682afce52d4ac9557ef513cdf50ae87353e6c9e3e45e9327b8b33393475f866ff5a7de1cb4c226f9daff5a9aeb43c2cc6d62e6fad09c24143248fabd8a42e46d5b092d6a95eee473dbcbe9a964f669f78fdc92ef04aff7248164781f8de9fa2721742a75e97edcc34cc18662bf91a1b69de579dd9189cf88be662fbf1846ba21c8f32ba4b9cd260a4080295faadad4faae1a4d3d2de6464a7ee3811e759c6c8190db0857d2797762c6f26092b6e9af488f76ac563a"}, 0x4) sendfile$auto(r4, r4, 0x0, 0x7fffe000) (async) r5 = bpf$auto(0xc, &(0x7f0000000080)=@link_update={r3, @new_map_fd, 0x403, @old_map_fd}, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), r6) (async, rerun: 64) sendmsg$auto_WG_CMD_SET_DEVICE(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000005c00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) (rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) getrandom$auto(&(0x7f0000000300)=',}\x00', 0x2, 0x1) (async, rerun: 32) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x800, 0x0) (async, rerun: 32) epoll_wait$auto(r5, &(0x7f0000000280)={0x80, 0x7}, 0x8, 0x9) ioctl$auto_FIOQSIZE(r7, 0x5460, 0x0) mmap$auto(0x1, 0x8, 0x1000000004, 0x20009b72, 0x2, 0x2007ffe) (async) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) (rerun: 64) 606.791468ms ago: executing program 0 (id=110): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) setreuid$auto(0x80000000, 0x7fffffffffffffff) ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) keyctl$auto(0x7, 0xfffffffb, 0x2, 0x3e, 0x8) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x422240, 0x1ee) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) write$auto(0x3, 0x0, 0xf) ioctl$auto(0x3, 0x5403, r2) close_range$auto(0x2, 0x8, 0x0) 581.729891ms ago: executing program 3 (id=111): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) (async) write$auto(0x800000000000c8, 0x0, 0x1a) (async, rerun: 64) mmap$auto(0x0, 0xffffffff00000000, 0x40, 0x32d4, 0x10000, 0xffffffffffffffff) (rerun: 64) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0x17, 0x401, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async, rerun: 32) setresuid$auto(0x8, 0x8, 0x0) (async, rerun: 32) bpf$auto(0x13, 0x0, 0x0) fcntl$auto(r0, 0x400, 0x1) (async) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket(0x1, 0x5, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf250b0000000c00058008000100", @ANYRES32=0x0, @ANYBLOB="acfccd712239858af11cdb876e152e1dd119397609d7080a999e4f0469ef20358d12aeac7acf4b4a47ffc254b8a027c71acce0e11fe8c4db3626fa7c57dd708183b658fd39bf187b1f06ae77d4421b7244d4511cb8fac9a198b72376ffe406796cdc13ef18e896f549aebb3108c9971a6a29bea43b552474d6e8ecb9d370c770b347c5ecf5b1dced"], 0x20}}, 0x2000c880) sigaltstack$auto(0x0, 0x0) (async) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) (async) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x90) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x40, 0x0) (async) ioctl$auto(0x3, 0x89e0, 0x38) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) truncate$auto(&(0x7f0000000000)='./file0\x00', 0x3f2ec021) (async, rerun: 32) socket(0xa, 0x3, 0x3a) (rerun: 32) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xb00, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x4, 0x9, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) 365.653879ms ago: executing program 2 (id=112): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) futex_wake$auto(&(0x7f0000000240)="d1b356deeabaa280d883dc964642464046ad037e1519ab75cdd68fcec96b76891bba67d6c8", 0xd, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r2, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x8e\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) mmap$auto(0x6, 0x2020009, 0x86e183694, 0x16, r0, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/sit0/regen_max_retry\x00', 0x800, 0x0) read$auto(r3, 0x0, 0x1ff) setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0x4, 0x6}}, 0x0) unshare$auto(0x40000080) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(0x3, 0x0, 0xfdef) socket(0x2, 0x1, 0xfffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) 0s ago: executing program 0 (id=113): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3ae55be8b5f870918621c10d9e916f6fe4fca6d7515871f05cc91f4246f6515662789a97d863c26cfd02b1cf15933b053fbdab9b22b1", 0xffffff20) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000070, 0x400, 0x2}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 90.634416][ T5817] cgroup: Unknown subsys name 'net' [ 90.731487][ T5817] cgroup: Unknown subsys name 'cpuset' [ 90.741312][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.944210][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.132890][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.141310][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.149710][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.164995][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.173221][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.190645][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.199273][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.207039][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.222424][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.230696][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.277236][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.288738][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.296479][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.306948][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.319766][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.347375][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.360928][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.368914][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.377704][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.389401][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.848416][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.919438][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 96.015189][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 96.155087][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.162759][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.170404][ T5833] bridge_slave_0: entered allmulticast mode [ 96.177702][ T5833] bridge_slave_0: entered promiscuous mode [ 96.197495][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.215591][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.223056][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.231117][ T5833] bridge_slave_1: entered allmulticast mode [ 96.238701][ T5833] bridge_slave_1: entered promiscuous mode [ 96.283851][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.291901][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.299633][ T5826] bridge_slave_0: entered allmulticast mode [ 96.306763][ T5826] bridge_slave_0: entered promiscuous mode [ 96.343941][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.351352][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.359221][ T5826] bridge_slave_1: entered allmulticast mode [ 96.366377][ T5826] bridge_slave_1: entered promiscuous mode [ 96.410724][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.465481][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.504490][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.512030][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.519376][ T5830] bridge_slave_0: entered allmulticast mode [ 96.526565][ T5830] bridge_slave_0: entered promiscuous mode [ 96.552172][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.573333][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.581020][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.588816][ T5830] bridge_slave_1: entered allmulticast mode [ 96.596066][ T5830] bridge_slave_1: entered promiscuous mode [ 96.606084][ T5833] team0: Port device team_slave_0 added [ 96.615090][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.668582][ T5833] team0: Port device team_slave_1 added [ 96.686093][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.693836][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.701156][ T5838] bridge_slave_0: entered allmulticast mode [ 96.709821][ T5838] bridge_slave_0: entered promiscuous mode [ 96.734150][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.760291][ T5826] team0: Port device team_slave_0 added [ 96.766952][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.774820][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.783019][ T5838] bridge_slave_1: entered allmulticast mode [ 96.792996][ T5838] bridge_slave_1: entered promiscuous mode [ 96.820064][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.844874][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.852030][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.879780][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.893794][ T5826] team0: Port device team_slave_1 added [ 96.932812][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.940159][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.967291][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.009440][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.047039][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.054125][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.080382][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.094611][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.107247][ T5830] team0: Port device team_slave_0 added [ 97.115708][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.122869][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.148829][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.190292][ T5830] team0: Port device team_slave_1 added [ 97.191705][ T980] cfg80211: failed to load regulatory.db [ 97.250672][ T5838] team0: Port device team_slave_0 added [ 97.264244][ T5833] hsr_slave_0: entered promiscuous mode [ 97.270433][ T51] Bluetooth: hci0: command tx timeout [ 97.270711][ T5829] Bluetooth: hci1: command tx timeout [ 97.283714][ T5833] hsr_slave_1: entered promiscuous mode [ 97.305586][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.312666][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.338937][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.350054][ T5829] Bluetooth: hci2: command tx timeout [ 97.353173][ T5838] team0: Port device team_slave_1 added [ 97.407850][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.414942][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.428349][ T5829] Bluetooth: hci3: command tx timeout [ 97.442057][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.460166][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.467238][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.494071][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.531041][ T5826] hsr_slave_0: entered promiscuous mode [ 97.538009][ T5826] hsr_slave_1: entered promiscuous mode [ 97.544324][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.552395][ T5826] Cannot create hsr debugfs directory [ 97.572993][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.580349][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.606878][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.772117][ T5830] hsr_slave_0: entered promiscuous mode [ 97.778942][ T5830] hsr_slave_1: entered promiscuous mode [ 97.785138][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.792892][ T5830] Cannot create hsr debugfs directory [ 97.822972][ T5838] hsr_slave_0: entered promiscuous mode [ 97.830012][ T5838] hsr_slave_1: entered promiscuous mode [ 97.837045][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.844730][ T5838] Cannot create hsr debugfs directory [ 98.258643][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.272181][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.298711][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.326341][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.402783][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.422982][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.452269][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.463820][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.549520][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.562951][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.587927][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.606099][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.700553][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.726290][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.753443][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.761319][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.798168][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.825627][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.852940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.860340][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.904273][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.911524][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.015704][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.036669][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.135135][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.206579][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.213893][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.245443][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.302190][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.309440][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.340703][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.348885][ T5829] Bluetooth: hci1: command tx timeout [ 99.354441][ T5829] Bluetooth: hci0: command tx timeout [ 99.373166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.380450][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.426472][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.433771][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.455667][ T5829] Bluetooth: hci2: command tx timeout [ 99.474260][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.507850][ T5829] Bluetooth: hci3: command tx timeout [ 99.552896][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.560757][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.591692][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.598949][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.676279][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.883255][ T5833] veth0_vlan: entered promiscuous mode [ 99.915548][ T5833] veth1_vlan: entered promiscuous mode [ 100.056640][ T5833] veth0_macvtap: entered promiscuous mode [ 100.122013][ T5833] veth1_macvtap: entered promiscuous mode [ 100.199309][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.245024][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.283950][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.296398][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.305836][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.315244][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.333174][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.356824][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.447244][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.547382][ T5830] veth0_vlan: entered promiscuous mode [ 100.574566][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.583055][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.654293][ T5826] veth0_vlan: entered promiscuous mode [ 100.661411][ T5830] veth1_vlan: entered promiscuous mode [ 100.689581][ T5838] veth0_vlan: entered promiscuous mode [ 100.692171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.705401][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.705530][ T5838] veth1_vlan: entered promiscuous mode [ 100.725788][ T5826] veth1_vlan: entered promiscuous mode [ 100.833055][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.841133][ T5830] veth0_macvtap: entered promiscuous mode [ 100.872876][ T5826] veth0_macvtap: entered promiscuous mode [ 100.893241][ T5830] veth1_macvtap: entered promiscuous mode [ 100.918340][ T5826] veth1_macvtap: entered promiscuous mode [ 100.931966][ T5838] veth0_macvtap: entered promiscuous mode [ 100.961032][ T5838] veth1_macvtap: entered promiscuous mode [ 101.013724][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.053654][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.074956][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.085476][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.111942][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.133374][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149309][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.176275][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.204978][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.227098][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236595][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.249659][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.260972][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.283791][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.318037][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.326830][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.337209][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.347056][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.432544][ T5829] Bluetooth: hci1: command tx timeout [ 101.432559][ T51] Bluetooth: hci0: command tx timeout [ 101.508622][ T5829] Bluetooth: hci2: command tx timeout [ 101.516008][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.581031][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.588040][ T5829] Bluetooth: hci3: command tx timeout [ 101.599903][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.660193][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.680847][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.764750][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.777411][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.820833][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.835149][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.955566][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.971451][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.005596][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.062615][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.511368][ T5829] Bluetooth: hci0: command tx timeout [ 103.511368][ T51] Bluetooth: hci1: command tx timeout [ 103.588642][ T51] Bluetooth: hci2: command tx timeout [ 103.667842][ T51] Bluetooth: hci3: command tx timeout [ 103.938269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! syzkaller syzkaller login: [ 104.968001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.977926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 104.987930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.006183][ T5930] Zero length message leads to an empty skb [ 105.988214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.388386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.027996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.036255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.045861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.437974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.603497][ T5950] netlink: 342 bytes leftover after parsing attributes in process `syz.2.12'. [ 107.755187][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 107.877465][ T5948] nfs4: Unknown parameter '€' [ 109.337983][ T5968] mkiss: ax0: crc mode is auto. [ 109.952967][ T5978] vivid-003: ================= START STATUS ================= [ 109.966674][ T5978] vivid-003: Radio HW Seek Mode: Bounded [ 109.973508][ T5978] vivid-003: Radio Programmable HW Seek: false [ 109.983849][ T5978] vivid-003: RDS Rx I/O Mode: Block I/O [ 110.000841][ T5978] vivid-003: Generate RBDS Instead of RDS: false [ 110.011380][ T5978] vivid-003: RDS Reception: true [ 110.016426][ T5978] vivid-003: RDS Program Type: 0 inactive [ 110.031270][ T5978] vivid-003: RDS PS Name: inactive [ 110.047651][ T5978] vivid-003: RDS Radio Text: inactive [ 110.053425][ T5978] vivid-003: RDS Traffic Announcement: false inactive [ 110.113539][ T5978] vivid-003: RDS Traffic Program: false inactive [ 110.128838][ T5978] vivid-003: RDS Music: false inactive [ 110.160746][ T5978] vivid-003: ================== END STATUS ================== [ 113.008272][ T6012] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 113.165220][ T6022] FAULT_INJECTION: forcing a failure. [ 113.165220][ T6022] name failslab, interval 1, probability 0, space 0, times 1 [ 113.178353][ T6023] mmap: syz.1.27 (6023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.211339][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.3.28 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 113.211378][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.211394][ T6022] Call Trace: [ 113.211403][ T6022] [ 113.211414][ T6022] dump_stack_lvl+0x16c/0x1f0 [ 113.211458][ T6022] should_fail_ex+0x512/0x640 [ 113.211501][ T6022] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 113.211545][ T6022] should_failslab+0xc2/0x120 [ 113.211595][ T6022] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 113.211632][ T6022] ? alloc_empty_file+0x55/0x1e0 [ 113.211683][ T6022] alloc_empty_file+0x55/0x1e0 [ 113.211728][ T6022] path_openat+0xda/0x2cb0 [ 113.211762][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.211801][ T6022] ? __pfx_path_openat+0x10/0x10 [ 113.211838][ T6022] ? __lock_acquire+0xb8a/0x1c90 [ 113.211874][ T6022] do_filp_open+0x20b/0x470 [ 113.211910][ T6022] ? __pfx_do_filp_open+0x10/0x10 [ 113.211973][ T6022] ? alloc_fd+0x471/0x7d0 [ 113.212013][ T6022] do_sys_openat2+0x11b/0x1d0 [ 113.212039][ T6022] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.212082][ T6022] ? find_held_lock+0x2b/0x80 [ 113.212126][ T6022] __x64_sys_openat+0x174/0x210 [ 113.212154][ T6022] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.212199][ T6022] do_syscall_64+0xcd/0x490 [ 113.212240][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.212267][ T6022] RIP: 0033:0x7faa0c98e969 [ 113.212292][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.212318][ T6022] RSP: 002b:00007faa0d712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.212347][ T6022] RAX: ffffffffffffffda RBX: 00007faa0cbb5fa0 RCX: 00007faa0c98e969 [ 113.212367][ T6022] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.212385][ T6022] RBP: 00007faa0ca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 113.212402][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.212418][ T6022] R13: 0000000000000000 R14: 00007faa0cbb5fa0 R15: 00007ffd5866b508 [ 113.212456][ T6022] [ 113.578375][ T6015] netlink: 330 bytes leftover after parsing attributes in process `syz.2.26'. [ 113.620872][ T6015] : renamed from bond0 (while UP) [ 113.954257][ T6028] program syz.1.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.290854][ T6033] process 'syz.2.29' launched './file0' with NULL argv: empty string added [ 115.188988][ T6039] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 115.953446][ T6040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 117.269134][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 119.160616][ T6069] FAULT_INJECTION: forcing a failure. [ 119.160616][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.202556][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.1.35 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 119.202597][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.202613][ T6069] Call Trace: [ 119.202623][ T6069] [ 119.202631][ T6069] dump_stack_lvl+0x16c/0x1f0 [ 119.202661][ T6069] should_fail_ex+0x512/0x640 [ 119.202694][ T6069] _copy_from_user+0x2e/0xd0 [ 119.202715][ T6069] copy_msghdr_from_user+0x98/0x160 [ 119.202742][ T6069] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.202772][ T6069] ? __lock_acquire+0x622/0x1c90 [ 119.202795][ T6069] ___sys_recvmsg+0xdb/0x1a0 [ 119.202820][ T6069] ? __pfx____sys_recvmsg+0x10/0x10 [ 119.202849][ T6069] ? find_held_lock+0x2b/0x80 [ 119.202912][ T6069] do_recvmmsg+0x2fe/0x750 [ 119.202956][ T6069] ? __pfx_do_recvmmsg+0x10/0x10 [ 119.203004][ T6069] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 119.203057][ T6069] ? __fget_files+0x20e/0x3c0 [ 119.203097][ T6069] __x64_sys_recvmmsg+0x22a/0x280 [ 119.203125][ T6069] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 119.203158][ T6069] do_syscall_64+0xcd/0x490 [ 119.203185][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.203203][ T6069] RIP: 0033:0x7f5dd0f8e969 [ 119.203218][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.203235][ T6069] RSP: 002b:00007f5dd1e9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 119.203252][ T6069] RAX: ffffffffffffffda RBX: 00007f5dd11b5fa0 RCX: 00007f5dd0f8e969 [ 119.203263][ T6069] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.203274][ T6069] RBP: 00007f5dd1e9b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.203284][ T6069] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 119.203293][ T6069] R13: 0000000000000000 R14: 00007f5dd11b5fa0 R15: 00007ffef11860c8 [ 119.203315][ T6069] [ 123.101755][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 129.548595][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 129.818402][ T6216] bond0: (slave bond_slave_0): Releasing backup interface [ 131.630757][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 132.254967][ T6270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.879146][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 133.950751][ T6305] capability: warning: `syz.2.84' uses 32-bit capabilities (legacy support in use) [ 134.462131][ T6316] vivid-003: ================= START STATUS ================= [ 134.517482][ T6319] syz.3.87 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 134.569758][ T6316] vivid-003: Radio HW Seek Mode: Bounded [ 134.578249][ T6316] vivid-003: Radio Programmable HW Seek: false [ 134.611434][ T6316] vivid-003: RDS Rx I/O Mode: Block I/O [ 134.761465][ T6316] vivid-003: Generate RBDS Instead of RDS: false [ 134.967814][ T6316] vivid-003: RDS Reception: true [ 134.976699][ T6316] vivid-003: RDS Program Type: 0 inactive [ 134.994103][ T6316] vivid-003: RDS PS Name: inactive [ 135.013521][ T6316] vivid-003: RDS Radio Text: inactive [ 135.076857][ T6316] vivid-003: RDS Traffic Announcement: false inactive [ 135.101859][ T6316] vivid-003: RDS Traffic Program: false inactive [ 135.109180][ T6316] vivid-003: RDS Music: false inactive [ 135.114860][ T6316] vivid-003: ================== END STATUS ================== [ 137.799100][ T6369] futex_wake_op: syz.0.97 tries to shift op by -9; fix this program [ 138.178072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.187254][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.287457][ T6375] ubi0: attaching mtd0 [ 138.292440][ T6375] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 138.617228][ T6379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.125057][ T6374] kexec: Could not allocate control_code_buffer [ 139.173830][ T6388] netlink: zone id is out of range [ 139.999076][ T30] audit: type=1800 audit(1748885956.520:2): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.105" name="dummy_udc" dev="gadgetfs" ino=5423 res=0 errno=0 [ 140.019211][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.915100][ T6419] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.152102][ T6435] FAULT_INJECTION: forcing a failure. [ 142.152102][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 142.219706][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.0.110 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 142.219750][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.219768][ T6435] Call Trace: [ 142.219777][ T6435] [ 142.219788][ T6435] dump_stack_lvl+0x16c/0x1f0 [ 142.219834][ T6435] should_fail_ex+0x512/0x640 [ 142.219877][ T6435] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 142.219919][ T6435] should_failslab+0xc2/0x120 [ 142.219961][ T6435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 142.219994][ T6435] ? mark_held_locks+0x49/0x80 [ 142.220023][ T6435] ? key_alloc+0x3e0/0x1390 [ 142.220066][ T6435] key_alloc+0x3e0/0x1390 [ 142.220120][ T6435] ? __pfx_key_alloc+0x10/0x10 [ 142.220158][ T6435] ? __pfx_key_default_cmp+0x10/0x10 [ 142.220202][ T6435] ? __pfx_keyring_search_iterator+0x10/0x10 [ 142.220250][ T6435] keyring_alloc+0x44/0xc0 [ 142.220298][ T6435] look_up_user_keyrings+0x510/0x760 [ 142.220339][ T6435] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 142.220391][ T6435] lookup_user_key+0x1a3/0x1300 [ 142.220433][ T6435] ? __pfx_lookup_user_key+0x10/0x10 [ 142.220466][ T6435] ? do_futex+0x122/0x350 [ 142.220504][ T6435] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 142.220549][ T6435] ? fput+0x70/0xf0 [ 142.220605][ T6435] keyctl_keyring_clear+0x24/0x1a0 [ 142.220638][ T6435] __do_sys_keyctl+0x355/0x590 [ 142.220673][ T6435] do_syscall_64+0xcd/0x490 [ 142.220716][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.220744][ T6435] RIP: 0033:0x7f8754f8e969 [ 142.220769][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.220798][ T6435] RSP: 002b:00007f8755e04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 142.220826][ T6435] RAX: ffffffffffffffda RBX: 00007f87551b5fa0 RCX: 00007f8754f8e969 [ 142.220843][ T6435] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 142.220861][ T6435] RBP: 00007f8755010ab1 R08: 0000000000000008 R09: 0000000000000000 [ 142.220876][ T6435] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 142.220894][ T6435] R13: 0000000000000000 R14: 00007f87551b5fa0 R15: 00007ffe146ff3f8 [ 142.220932][ T6435] [ 142.505818][ T6435] [U]  [ 142.542575][ T6444] ================================================================== [ 142.550904][ T6444] BUG: KASAN: wild-memory-access in get_futex_key+0x595/0x1540 [ 142.558570][ T6444] Read of size 8 at addr 1fffffff809c0bf8 by task syz.2.112/6444 [ 142.566335][ T6444] [ 142.568697][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.2.112 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 142.568734][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.568749][ T6444] Call Trace: [ 142.568757][ T6444] [ 142.568766][ T6444] dump_stack_lvl+0x116/0x1f0 [ 142.568803][ T6444] kasan_report+0xe0/0x110 [ 142.568836][ T6444] ? get_futex_key+0x595/0x1540 [ 142.568877][ T6444] kasan_check_range+0x100/0x1b0 [ 142.568898][ T6444] get_futex_key+0x595/0x1540 [ 142.568934][ T6444] ? __pfx_get_futex_key+0x10/0x10 [ 142.568971][ T6444] ? do_futex+0x122/0x350 [ 142.568994][ T6444] futex_wake+0xea/0x530 [ 142.569022][ T6444] ? __pfx_futex_wake+0x10/0x10 [ 142.569050][ T6444] ? xfd_validate_state+0x61/0x180 [ 142.569076][ T6444] __x64_sys_futex_wake+0x23d/0x2b0 [ 142.569100][ T6444] do_syscall_64+0xcd/0x490 [ 142.569132][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.569155][ T6444] RIP: 0033:0x7fd72498e969 [ 142.569173][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.569196][ T6444] RSP: 002b:00007fd725715038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 142.569219][ T6444] RAX: ffffffffffffffda RBX: 00007fd724bb5fa0 RCX: 00007fd72498e969 [ 142.569234][ T6444] RDX: 0000000000000003 RSI: 000000000000000d RDI: 0000200000000240 [ 142.569248][ T6444] RBP: 00007fd724a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.569263][ T6444] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 142.569277][ T6444] R13: 0000000000000000 R14: 00007fd724bb5fa0 R15: 00007ffc51361568 [ 142.569299][ T6444] [ 142.569307][ T6444] ================================================================== [ 142.746250][ T6444] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.753520][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.2.112 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 142.765120][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.775223][ T6444] Call Trace: [ 142.778551][ T6444] [ 142.781529][ T6444] dump_stack_lvl+0x3d/0x1f0 [ 142.786186][ T6444] panic+0x71c/0x800 [ 142.790144][ T6444] ? __pfx_panic+0x10/0x10 [ 142.794610][ T6444] ? rcu_is_watching+0x12/0xc0 [ 142.799440][ T6444] ? irqentry_exit+0x3b/0x90 [ 142.804177][ T6444] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.809450][ T6444] ? preempt_schedule_thunk+0x16/0x30 [ 142.814888][ T6444] ? get_futex_key+0x595/0x1540 [ 142.819814][ T6444] ? preempt_schedule_common+0x44/0xc0 [ 142.825346][ T6444] ? get_futex_key+0x595/0x1540 [ 142.830280][ T6444] check_panic_on_warn+0xab/0xb0 [ 142.835297][ T6444] end_report+0x107/0x170 [ 142.839798][ T6444] kasan_report+0xee/0x110 [ 142.844294][ T6444] ? get_futex_key+0x595/0x1540 [ 142.849339][ T6444] kasan_check_range+0x100/0x1b0 [ 142.854354][ T6444] get_futex_key+0x595/0x1540 [ 142.859291][ T6444] ? __pfx_get_futex_key+0x10/0x10 [ 142.864477][ T6444] ? do_futex+0x122/0x350 [ 142.869050][ T6444] futex_wake+0xea/0x530 [ 142.873370][ T6444] ? __pfx_futex_wake+0x10/0x10 [ 142.878395][ T6444] ? xfd_validate_state+0x61/0x180 [ 142.883578][ T6444] __x64_sys_futex_wake+0x23d/0x2b0 [ 142.888846][ T6444] do_syscall_64+0xcd/0x490 [ 142.893425][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.899380][ T6444] RIP: 0033:0x7fd72498e969 [ 142.904001][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.923761][ T6444] RSP: 002b:00007fd725715038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c6 [ 142.932239][ T6444] RAX: ffffffffffffffda RBX: 00007fd724bb5fa0 RCX: 00007fd72498e969 [ 142.940356][ T6444] RDX: 0000000000000003 RSI: 000000000000000d RDI: 0000200000000240 [ 142.948387][ T6444] RBP: 00007fd724a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 142.956414][ T6444] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 142.964441][ T6444] R13: 0000000000000000 R14: 00007fd724bb5fa0 R15: 00007ffc51361568 [ 142.972482][ T6444] [ 142.975710][ T6444] Kernel Offset: disabled [ 142.980044][ T6444] Rebooting in 86400 seconds..