last executing test programs: 6.800644775s ago: executing program 0 (id=65): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000008a0b12d80f84221d71e969f2024ef8b33732d39892342dda884f8079ec03b84729b94a8aff7f8a6cd1115989fccf1191f3d8cfff75790bccd6860756619c50fb0203b23d9f376f316e8a88c543f9085ef2b4d6d802dc6dc49de81e0e4bbe1e5868c0ff081e8f192f48e57d9bd63ea597ddaf7962a5d1f50814dad1a0e83ed627619c70bd04ee2948bfbb80dd28fad54a178327d40df90e64c2b24f73cf445b9e774f8ae7c36b9c76fe558a8cdf13e9dcbbf59861765aa9803035e61644c22c3015bb9cfb", @ANYRES16=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x400c092}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x100, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r3, 0x8000) mprotect$auto(0x0, 0x5, 0x8) r4 = syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0x9, 0x1, r4, 0x5, 0x5) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000006c0)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0xfffffff7, 0x1}, 0xc8, 0x8, 0xffffffff, 0x5, @inferred, @raw=0x4, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) r6 = fcntl$getown(r2, 0x9) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042abd7000ffdbdf250d00000005001200e3000000f2fd1000c0000000080027000200000000001c00", @ANYRES32=r6, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x20008040) 6.785847787s ago: executing program 1 (id=66): pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x11\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) 6.523952003s ago: executing program 1 (id=67): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, &(0x7f0000000100)='\x04bs\x97]\'\x0e\xb4\xdcs>\x01\n\xfb\xff\xf6\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9z\xc6\x8a\xb6\x8d\xf7\xc8)\x8c\x9c\x86w \xc1\x03\x00\x00\x00\x00\x00\x00\x00\xb2\xf7\x9c\x11\x03\x00\x00\x00\x06\xe0\xf8\x98^\x05^\x1dD\x1c\x00\xac\xae\x92j\xf9\xf7\xea\xff\xc6\xab\xe7\xf2\xb5\x06\x0f4\xa4h\xe3xj+oN\xd6\x9d\x95.\xfd 6 \r\v\xb1\x1ee\xb2\x8c\x00\x00\x00\x00\x00\x00\x15\x83\xc1\x94\x85aX\x19|\xd3\x02\xdf\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*h\xc2!\xec\x01\x81mL?\xca\xd8p\xd5kX\x8c1D7wB\x82\x1b\xdai\x14EwD\x8b[j\xf9\xe7\x8fk\xac5\xf1\xfae\x8f\x94\xb5\xf2j\xfc\x0f\x12\xd1yl\xdc\xcf\xc1\xbeC\xcd\xcf\n{\xaa\x11s\x92K\r\xfb[=\xc2\b^w\x14\'\xa1\x19\xb0\xf0\x01 *;\xa7T=\xa5\xd5\\\x06\xf9\xf2\xbc\x1d\xe3\xf4m\xa7\x1d\xe0\x9a\xcf\xc3\xf2\xadI\x8cY8)\x8b\x9a\xc4\x91\xf8\xe0\xef\\\x009\x1b\xa5\x89\xda\x95\xbf2XX|\xbad\xc0\xee\xe8\xd9\x925\xb9\x05\xe3\xba\xac\a*\xbf\x9d%\x12\xb7u\x84X\x8dN\xba\xe6\"\xc3\xab\x9br:\xc5\x03\xb2\x85\x1a\xc5u\x99\xa6\xeai)\n|1]\xc1uX\x9f\xa8\xf5\xb5N\x860\x88\xac\x1b)\xfb\x0fv=Os\xb5\xc9E\x8cl\x9a\xb1\r\x99\xbbJjPk\xad\a\x90\x8e=;:\tA\xd9!\x80a\xe0\xe0\xa8&\xf0\xdb.\xc9q\x8dr\xdeS\x8c\xa0\x00\x1e\xe1\x89\xa7\xc45t\xf0\xb7\x81\x84\x12\xdf\x1eOv\xf1\n\xefU\x1a\xcb\xad>\x17\xde\xa6\xa6,\xdb\x93\xe7\xfae\xd7O\x18\n\x94\b\x13g\xff\x7f', 0x5) r2 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) mmap$auto(0x7ff, 0x3, 0x20000000ffb, 0x8000000008015, 0x3, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/lru_gen\x00', 0x86bc1, 0x0) socket(0x27, 0x80000, 0x7ffffffd) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x38, 0x5, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/greybus/uevent\x00', 0x820080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x2008d, 0x2f, 0x4000000000df, 0x11, r3, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000480), 0x5a140, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.834867857s ago: executing program 3 (id=71): r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="1c002d800400"], 0x38}}, 0x4000000) r4 = socket(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf252a00000020000180140002007767320000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r7, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 4.83182262s ago: executing program 0 (id=79): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) write$auto(r0, 0x0, 0x100) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14050000", @ANYRES16=r2, @ANYBLOB="010326bd7000ffdbdf252d000000"], 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) close_range$auto(0x2, 0x8, 0x0) 4.831124757s ago: executing program 1 (id=72): semget$auto(0x0, 0x13c, 0x1ff) socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) mmap$auto(0x0, 0x10001, 0x9, 0x736, 0xfffefffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, 0x8, 0xfffffffd) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b67, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) 4.404596147s ago: executing program 0 (id=74): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(0x0, 0x149443, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x400, 0x0) mount$auto(0x0, 0x0, 0x0, 0x200, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) ioctl$auto(r1, 0x64d0, 0x40) r2 = fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) sysfs$auto(0x2, 0xf, 0x0) r3 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r5 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@phonet={0x23, 0x3, 0x6, 0x10}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x13c, 0x0, 0x0, 0xd}, 0x5af}, 0x40, 0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a00"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000200)=@bpf_attr_3={0x192b886e, 0x8, 0x2, 0x8b5b, 0x7, 0xca88, 0x1, 0x4001, 0x9, "0818dade9e463859c1e241ea57d56e92", r4, 0x3, r7, 0xfffffff8, 0x0, 0x5, 0x6, 0xfe, 0x47, 0x0, @attach_btf_obj_fd=r6, 0x80000001, 0xffffffff, 0xd4, 0x9, 0x2, r2}, 0xe6) prctl$auto_PR_SET_MM_END_DATA(0xfffffffa, 0x4, r5, 0x0, 0x6) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc020024}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fed9df250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x84) sendmsg$auto_TIPC_NL_PEER_REMOVE(r7, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf2514000000180007801400020000000000000000000000ffff7f000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) 4.332749989s ago: executing program 2 (id=75): mmap$auto(0x0, 0x401, 0xc00000076, 0xfffffffffffffff7, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x20b, 0x0, 0x0, &(0x7f0000000040)={[0x1, 0x100000007, 0x8, 0x8fd6, 0x0, 0x3, 0x8, 0x7f, 0x2, 0xffffffffffffffff, 0xdfe, 0x8, 0x1, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r1, &(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r2, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r2, 0x114, 0xa, 0x0, 0x4) splice$auto(r0, &(0x7f0000000200)=0x2, r2, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x8, 0x5c, 0x4, 0xffff}, &(0x7f0000000440)=0xf8, &(0x7f0000000480)=0x6, 0x2, 0x1000000004, 0xfffffffffffffff8, 0xd3, 0x5, 0xb, 0x101, 0x7, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xcb6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x2, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.203846646s ago: executing program 1 (id=76): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ec070000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497dd2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38aa7c56b416d94066f8a4c6f1fe1fc48c4eda755adb52ef60d249a07bac8e7c2e800ac1c7a57e52aff48d219746d31bab3c429e01c4bbd5d46e9a15af19b2f263b7ae60e60052f89a6d0e74e02d27ad64474f19abfb467bfa835e7a9e89f4792bb33bd0eb478a7521ad9728ce1623a4f32aae2f7e7cf41acf10d79d7e2c0e36ba780fa9a7299d1355bcde4c630cb0a0f9e4e2257330751aba40badc2784cd46e4fab142aee3346248010f83527ab291667f9ccbed3394c7799b5764bb29b394cacf878753df0ff3abdc4e0e7076344148a0a2357e27f80ff93c4ca176378235ad943c1a44bb614aa88c0d7acdb25406e9097956dc40b4b3ce2b0c9601d9443491139fa5f1649f5f74ed343dd98d57e6426bd256da74b073f98c42aa778e1bfd11d09f764b66164e9c53d0fd67fd276d412d7c1e404e51e610a02e697c26b7a7332bd54821ec60500263eb0e8e3720d47b0d71ff16617044ff06335651d397242d03cb96790d3fb1794aa9e3b7f59bcf46139e4ab57a81caa07a4ffbb66b62c4a32ac20c2b126486065ed9782682dc429c935c6a121ccb27bb3024b758025ff2fd52b38e8b2ea904e3cad8861d171dea3d3ec75392032333b50d45b44198a1d711a7e13d801fb8178b3333bb406e5ab63521c4e195d2c0c388c81b57d13c4d5068cdcc71581f4de7853edf0df79bb32bc58f3e18d472c5f2c3856ce3842ab8a6c40f335eaea0b69098b1266f46dd69a2baf1244590b793e2dc60a5d93f0d11947375ab38b36d187358a2c400bbfbca42ac4a67fcf9e215969e385971f0406be40b12b77b15f6042c2b6d5e6e7a35763d35869d541cfeca77c8f6332a19bbb1698ef7642615ffa1e74da3dd355471981362f7792671dbfca093b2eb15904661ca4f50d565e033dd21bf3d9be74289870e00e5b8c3d0e6e848f490748881e9754ffa4af4427a65056584b9b500000003ab42575276b79ff6a203712b66e0a268409769f4ce935892e1acc60376941c4774d23d8fc9ae0aff62069611bbfde512d2d75be1c66a465f5f425db140f505e2ba278120b93ba1a28f8d52381d2dda1804da15a38fcdcfdf7935010cec9ff2926425bd2ebfd1f79c9058acce4107708111992deee55e673bcd43f5b3269882a22033a307671a3df85205c3f0980a9b6ae7ea4077c60a655960e0c4d8e6410d17487b067b4c069c824886616997f1a95d33a833c409312"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port8/location\x00', 0x183042, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x2, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="18000000", @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.2/udc/dummy_udc.2/is_otg\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/17, 0x11) read$auto(r4, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000040)={0x0, 0x7}, 0x5) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) 4.196386446s ago: executing program 3 (id=77): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, 0x0) (async) mmap$auto(0x0, 0x853, 0x2000000000000000, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) (async) socket(0x11, 0x3, 0x1) (async) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001402c72da808bf36158e72166ad80c68c506e03c7eeb3db2a446dd7755aac7e481f2ac6ef44ff2916dc78bc3792b29f5a97570c0eef8ee57f3af6300b9ce056abb1a3c3d94204439bea7f9a3bb4607b61922b73b18486d7f51809d8815850686e40fa2dabc624ac35f5947311fdeb7434885def21a3dfde60f27e0265af93406634ebf2e966257f87d03bb89cb684e4600"/158], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) r3 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/sessionid\x00', 0x0, 0x0) read$auto_proc_sessionid_operations_base(r3, 0x0, 0x0) (async) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) write$auto(0x3, 0x0, 0x5c8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6gretap0/accept_source_route\x00', 0x20141, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x2000017) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) process_mrelease$auto(0x24d, 0xd) (async) read$auto(r4, 0x0, 0x3) 3.953783665s ago: executing program 0 (id=78): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x15, 0xffffffffffffffff, 0x4) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r0, 0xe5a, 0x5) r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000240)=@test={0xffffffffffffffff, 0x9, 0x2, 0x6d, 0x2, 0x8eae, 0x6, 0x3ff, 0x0, 0x7, 0x9, 0x733a, 0x200, 0x0, 0x9}, 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000000c0)={0x4, r1, 0x6, "4c6aaef608a65525edc06901aca62679"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3.647929373s ago: executing program 3 (id=80): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xca, 0x0, 0x4) r0 = mq_open$auto(0x0, 0x60d6, 0x1, 0x0) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x200, 0x43, 0x0, 0x0) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x9c, 0x1, 0x1, @relative_fd, 0x5}, 0x96) adjtimex$auto(0x0) capset$auto(&(0x7f0000000080)={0x8, 0x0}, &(0x7f00000000c0)={0x7, 0x1, 0x8}) prctl$auto_SECCOMP_MODE_FILTER(0x8, 0x2, r3, 0x5, 0xfff) r4 = socket(0x15, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) fremovexattr$auto(r4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x4fc, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x2, 0x28000) r5 = io_uring_setup$auto(0x4, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/snmp\x00', 0x60980, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r7 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x800400b, 0x2000000329, 0x2000000010012, r7, 0x8000) mprotect$auto(0x0, 0x6, 0x2) pread64$auto(r6, 0x0, 0x2, 0x8000) close_range$auto(0x2, r5, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x2) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r5) 3.37017221s ago: executing program 3 (id=81): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x8041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x400008, 0xdc, 0x9b72, r0, 0x7f) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) 3.157798361s ago: executing program 1 (id=82): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) mmap$auto(0x5, 0x8, 0x6, 0x393f, 0xb, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) (async) mremap$auto(0x0, 0x4, 0x3fd6, 0x3, 0x20000000) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x5f) (async) lseek$auto(0x3, 0x20000, 0x1) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x106) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x16, &(0x7f00000000c0)="6916cf7f5534290a29da5b0c615c7c5b6e3668e51be39c64645c4bc13fdc6fdcd0baf7555be00a974afa18bc7090ddc7468312d9430aa90082d4e4312cdb40d41b88d620b56f767217f9445b47dc24e38b546f674d1cc5b87d", 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x72d1c3, 0x0) 2.788976204s ago: executing program 0 (id=83): inotify_init1$auto(0x7ff) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) read$auto(r0, 0x0, 0x80000001) r1 = io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x153180, 0x0) mmap$auto(0x9, 0x6, 0x4000000000df, 0x800000000000eb1, r1, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop5/queue/scheduler\x00', 0x3a3180, 0x0) mmap$auto(0x1000, 0x2000e, 0x4, 0xeb1, r2, 0x10008000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x3e3982, 0x0) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/syscall\x00', 0x80002, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000001c0)=""/245, 0xf5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc2\x00', 0x800, 0x0) socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}, 0x1fe, 0xd) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x6f3e, 0x38) ioctl$auto(0x3, 0x5309, 0x38) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) 2.741143425s ago: executing program 2 (id=84): mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x7ffe) (async) lseek$auto(0xffffffffffffffff, 0x8001, 0x4) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyx1/power/runtime_active_time\x00', 0x80841, 0x0) socket(0x2, 0x3, 0x2) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) (async) prctl$auto(0x10001, 0x4000000000001, 0x0, 0xfffffffffffffffd, 0x10000) (async) socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0xfffffffffffffffe, 0x1, 0xeb1, r0, 0x8000) (async) memfd_create$auto(0x0, 0x5) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x2, 0x0) (async) socket(0xa, 0x801, 0x84) (async) r1 = socket(0xa, 0x3, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x2000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2, 0x801, 0x106) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendfile$auto(r2, r1, &(0x7f0000000080)=0x6b5, 0x48d) (async) io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000fddbdf2503570400"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000006a3abee95aba3549cfc8cabd5a10", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x40) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub4/info\x00', 0xa0000, 0x0) (async) pread64$auto(r0, 0x0, 0x200000000004, 0xfffffffffffffffe) (async) ioctl$auto(0x3, 0x402c542b, 0x38) (async) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) 2.269762922s ago: executing program 2 (id=85): semget$auto(0x0, 0x13c, 0x1ff) socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) socket(0x10, 0x6, 0x80) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x4b67, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) socket$nl_generic(0x10, 0x3, 0x10) 2.128635776s ago: executing program 3 (id=86): r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="1c002d800400"], 0x38}}, 0x4000000) r4 = socket(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MM_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf252a00000020000180140002007767320000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r7, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 2.110142324s ago: executing program 1 (id=87): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(r1, 0x3b84, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, &(0x7f0000000080)=',\xd6{/@){--\xd4\x00', 0x0, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) epoll_create$auto(0x5fd0) io_uring_setup$auto(0x9, &(0x7f0000000100)={0x694f, 0x4, 0x2, 0x80, 0xbf, 0x1, r3, [0x81, 0x1, 0x1], {0xffffffff, 0xb627, 0x1, 0x8, 0x0, 0x1, 0x1, 0xfffffff7, 0xa}, {0x8, 0x9f33, 0xb27, 0x3, 0x9, 0x9, 0xabd, 0x3, 0x9}}) 1.84567937s ago: executing program 2 (id=88): keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) recvmmsg$auto(r1, &(0x7f00000016c0)={{&(0x7f0000001440)="7593b4b83d82b2d6cebeedf2b49e991ae3a323e069387072ff4a91b9a7de88a7fa2212f76b189457d859248c178e3a448d62bf189a90cc4540c3ec5a49ce66fd18a8ac01988efdb402684c5b4d87cbf9ddce080b8e499dcad01e54847ff5fe0e242b3a58e7f62499b3eb55fd071516f3c706c859ded79d940d5cb799abed145c4dd61552066bbaac69136bfe83957bdcc0437ffe9f3e9f0db7ad990f7681c2ce", 0x200, &(0x7f0000000340)={&(0x7f0000001500)="56df49634a18faddaad4ecbbc0338b3760b96df74e4f552948c9e3e938a2cd6b1a2ed565807a718320c156ba12e1a619212072506f219ce0eac13879f6e5679e2a8c49db1adc90e83084d2d95ec0d8d51fed1fc482a24801efc3b60da073b5b6deef533f22380e645429aa7379eb1e3f9282352f4e7683e378373a1670fa983dcb71f3d28ff69a3d1516ae01f9ffdee3928c1292bf4b45f46f68449942eec01d055b5fa5c947f872b500daeeb228d79f", 0x6}, 0x4, &(0x7f00000015c0)="845d61082ff3443e62099fa496ddf3e107cb8279fd13891ddbc618bc9e60fbcae7c772a8fcf3635bb5de9aad8c91fde8b0ee850c5d30ac2ab8f676a430e78186c0a60fcec646c3dc9ea3fdf79659fb8571e81ca0416882b2a2f89cd8a9d96ad4b139c4cc9f7a6448ec28e8f4776599e3d093b0b32d11280212f3d080c36a4a27d9bb8dc8b8f89d8946359e310c6d17b5e32ba488457667c53fc861e1e162055248f99534fa944bd045be179cb2c654f7e6b1cc29fc5fc9859230745732f7e3558f71271b08313b2059cb8ce516cdf1fb6be6d602c596071807de386befcd", 0x5, 0x4}, 0x380000}, 0x6, 0x1, &(0x7f0000001700)={0x1a03, 0x8}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="04002dbd7000fbcddf2503000000834ff75cab9ae99b22c70904c2b78e490c765ea4db9d892b18581f537a7cb6fa8c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x24048894) r4 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x2c0002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r4, 0x5, 0x7, 0xe5, 0x3}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) io_submit$auto(0xa, 0x7, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x8000000008011, 0x3, 0x8000) 1.089242819s ago: executing program 3 (id=89): r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x2e90, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x3, 0x8, 0xe3, 0x9b72, 0x2, 0x8000) gettimeofday$auto(&(0x7f0000000080)={0x0, 0x100}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_MM(0x23, 0x7f, 0xffffffffffffffff, 0x7, 0x397) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x85) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = socket(0xa, 0x2, 0x3a) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000001340)={@_si_pad}, 0x7ff, &(0x7f00000013c0)={{0x9, 0x8}, {0x5, 0xae6}, 0x6, 0x9, 0x8, 0x5, 0x6, 0x9, 0xffffffff00000001, 0x4, 0x8, 0x8, 0x4, 0xfffffffffffffffc, 0x2, 0x2}) clone$auto(0xe, 0xd26b, &(0x7f0000001480)=0xcc, &(0x7f00000014c0)=0xc463, 0x3) syz_clone3(&(0x7f0000001540)={0x208120200, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000001c0), {0x33}, &(0x7f00000002c0)=""/4087, 0xff7, &(0x7f00000012c0)=""/63, &(0x7f0000001500)}, 0x58) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00'}) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) ioprio_set$auto(0x2, 0x800000000, 0x8) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) 1.065531003s ago: executing program 0 (id=90): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(r3, 0x4008af24, r2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000015c0)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r7, r5, 0x9, 0x1, r5, @relative_fd=r4, 0x1}, 0x64) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x8, 0x0, &(0x7f0000000240)=0x202}) 641.728084ms ago: executing program 2 (id=91): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x15, 0xffffffffffffffff, 0x4) r0 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r0, 0xe5a, 0x5) r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000240)=@test={0xffffffffffffffff, 0x9, 0x2, 0x6d, 0x2, 0x8eae, 0x6, 0x3ff, 0x0, 0x7, 0x9, 0x733a, 0x200, 0x0, 0x9}, 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000000c0)={0x4, r1, 0x6, "4c6aaef608a65525edc06901aca62679"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 0s ago: executing program 2 (id=92): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x82c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000580)="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", 0xfdef) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x400000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) getrandom$auto(&(0x7f0000000040)='[(\x00', 0x2, 0x925) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 91.487512][ T5836] cgroup: Unknown subsys name 'net' [ 91.658435][ T5836] cgroup: Unknown subsys name 'cpuset' [ 91.668183][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.415778][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.528687][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.546466][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.554304][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.561912][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.571488][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.579216][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.587256][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.594626][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.604254][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.611600][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.618354][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.620657][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.633613][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.645055][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.658857][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.667802][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.675064][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.676416][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.691131][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.699939][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.257347][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 96.287512][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 96.388121][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 96.405563][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 96.536290][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.543527][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.551344][ T5849] bridge_slave_0: entered allmulticast mode [ 96.559360][ T5849] bridge_slave_0: entered promiscuous mode [ 96.573031][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.580377][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.588066][ T5848] bridge_slave_0: entered allmulticast mode [ 96.596199][ T5848] bridge_slave_0: entered promiscuous mode [ 96.615132][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.622283][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.629555][ T5849] bridge_slave_1: entered allmulticast mode [ 96.636825][ T5849] bridge_slave_1: entered promiscuous mode [ 96.665741][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.673009][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.680915][ T5848] bridge_slave_1: entered allmulticast mode [ 96.689046][ T5848] bridge_slave_1: entered promiscuous mode [ 96.760509][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.798944][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.821892][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.843692][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.850960][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.858254][ T5846] bridge_slave_0: entered allmulticast mode [ 96.866601][ T48] cfg80211: failed to load regulatory.db [ 96.869446][ T5846] bridge_slave_0: entered promiscuous mode [ 96.883474][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.904906][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.912038][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.919541][ T5853] bridge_slave_0: entered allmulticast mode [ 96.927236][ T5853] bridge_slave_0: entered promiscuous mode [ 96.952320][ T5849] team0: Port device team_slave_0 added [ 96.959246][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.966654][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.973829][ T5846] bridge_slave_1: entered allmulticast mode [ 96.981345][ T5846] bridge_slave_1: entered promiscuous mode [ 97.004872][ T5848] team0: Port device team_slave_0 added [ 97.010986][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.018470][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.026046][ T5853] bridge_slave_1: entered allmulticast mode [ 97.033114][ T5853] bridge_slave_1: entered promiscuous mode [ 97.060115][ T5849] team0: Port device team_slave_1 added [ 97.095455][ T5848] team0: Port device team_slave_1 added [ 97.123070][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.185651][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.212184][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.220064][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.246022][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.260525][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.273114][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.309277][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.316356][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.342664][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.373359][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.380598][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.406828][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.420896][ T5853] team0: Port device team_slave_0 added [ 97.433076][ T5853] team0: Port device team_slave_1 added [ 97.454008][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.460979][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.487267][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.527840][ T5846] team0: Port device team_slave_0 added [ 97.553277][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.560542][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.586888][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.600994][ T5846] team0: Port device team_slave_1 added [ 97.625864][ T5849] hsr_slave_0: entered promiscuous mode [ 97.632270][ T5849] hsr_slave_1: entered promiscuous mode [ 97.639751][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.647199][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.674116][ T51] Bluetooth: hci1: command tx timeout [ 97.679704][ T51] Bluetooth: hci3: command tx timeout [ 97.679861][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.729818][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.736817][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.762894][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.763323][ T51] Bluetooth: hci2: command tx timeout [ 97.773845][ T5855] Bluetooth: hci0: command tx timeout [ 97.828306][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.835672][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.861996][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.885496][ T5848] hsr_slave_0: entered promiscuous mode [ 97.891950][ T5848] hsr_slave_1: entered promiscuous mode [ 97.898669][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.909698][ T5848] Cannot create hsr debugfs directory [ 98.032568][ T5853] hsr_slave_0: entered promiscuous mode [ 98.039006][ T5853] hsr_slave_1: entered promiscuous mode [ 98.045907][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.053483][ T5853] Cannot create hsr debugfs directory [ 98.139813][ T5846] hsr_slave_0: entered promiscuous mode [ 98.146485][ T5846] hsr_slave_1: entered promiscuous mode [ 98.152540][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.160572][ T5846] Cannot create hsr debugfs directory [ 98.509574][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.523037][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.543102][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.562305][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.606366][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.626220][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.637559][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.669171][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.731385][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.743090][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.754134][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.789539][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.870863][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.882039][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.893224][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.930871][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.990344][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.037721][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.068455][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.075760][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.120613][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.127766][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.156910][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.220011][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.239899][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.263756][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.270905][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.296343][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.303520][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.345024][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.360443][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.389819][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.397044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.426406][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.433570][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.492062][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.530238][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.537457][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.580727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.588040][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.745874][ T5855] Bluetooth: hci3: command tx timeout [ 99.745975][ T51] Bluetooth: hci1: command tx timeout [ 99.770705][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.824545][ T51] Bluetooth: hci2: command tx timeout [ 99.834499][ T51] Bluetooth: hci0: command tx timeout [ 99.902880][ T5849] veth0_vlan: entered promiscuous mode [ 99.953723][ T5849] veth1_vlan: entered promiscuous mode [ 100.079803][ T5849] veth0_macvtap: entered promiscuous mode [ 100.094681][ T5849] veth1_macvtap: entered promiscuous mode [ 100.162707][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.180234][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.209235][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.249089][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.278077][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.287782][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.299548][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.309633][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.350662][ T5846] veth0_vlan: entered promiscuous mode [ 100.378079][ T5846] veth1_vlan: entered promiscuous mode [ 100.419671][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.463868][ T5853] veth0_vlan: entered promiscuous mode [ 100.492891][ T5853] veth1_vlan: entered promiscuous mode [ 100.510086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.522838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.536104][ T5846] veth0_macvtap: entered promiscuous mode [ 100.589959][ T5846] veth1_macvtap: entered promiscuous mode [ 100.613686][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.629447][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.642229][ T5848] veth0_vlan: entered promiscuous mode [ 100.670768][ T5848] veth1_vlan: entered promiscuous mode [ 100.693621][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.721309][ T5853] veth0_macvtap: entered promiscuous mode [ 100.740728][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.742649][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.771743][ T5853] veth1_macvtap: entered promiscuous mode [ 100.810643][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.819594][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.831055][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.840949][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.858330][ T5848] veth0_macvtap: entered promiscuous mode [ 100.880149][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.901204][ T5848] veth1_macvtap: entered promiscuous mode [ 100.923274][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.971261][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.971319][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.971359][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.971398][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.980183][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.032985][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.081875][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.092842][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.101880][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.111228][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.282819][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.296462][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.354556][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.374552][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.383621][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.401573][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.480375][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.510733][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.543096][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.565445][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.671657][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.690781][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.832152][ T51] Bluetooth: hci1: command tx timeout [ 101.832163][ T5855] Bluetooth: hci3: command tx timeout [ 101.870680][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.904164][ T5855] Bluetooth: hci0: command tx timeout [ 101.905121][ T51] Bluetooth: hci2: command tx timeout [ 102.083125][ T5955] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 102.490754][ T5951] FAULT_INJECTION: forcing a failure. [ 102.490754][ T5951] name failslab, interval 1, probability 0, space 0, times 1 [ 102.539739][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.1.2 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 102.539778][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.539799][ T5951] Call Trace: [ 102.539809][ T5951] [ 102.539823][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 102.539863][ T5951] should_fail_ex+0x512/0x640 [ 102.539893][ T5951] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 102.539943][ T5951] should_failslab+0xc2/0x120 [ 102.539977][ T5951] __kmalloc_cache_noprof+0x6a/0x3e0 [ 102.540023][ T5951] ? snd_seq_oss_readq_new+0x4a/0x2c0 [ 102.540075][ T5951] snd_seq_oss_readq_new+0x4a/0x2c0 [ 102.540122][ T5951] snd_seq_oss_open+0x54b/0xa20 [ 102.540165][ T5951] odev_open+0x6f/0x90 [ 102.540195][ T5951] ? __pfx_odev_open+0x10/0x10 [ 102.540226][ T5951] soundcore_open+0x409/0x580 [ 102.540260][ T5951] ? __pfx_soundcore_open+0x10/0x10 [ 102.540290][ T5951] chrdev_open+0x231/0x6a0 [ 102.540323][ T5951] ? __pfx_chrdev_open+0x10/0x10 [ 102.540358][ T5951] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 102.540410][ T5951] do_dentry_open+0x744/0x1c10 [ 102.540441][ T5951] ? __pfx_chrdev_open+0x10/0x10 [ 102.540480][ T5951] vfs_open+0x82/0x3f0 [ 102.540521][ T5951] path_openat+0x1de4/0x2cb0 [ 102.540563][ T5951] ? __pfx_path_openat+0x10/0x10 [ 102.540594][ T5951] ? __lock_acquire+0xb8a/0x1c90 [ 102.540639][ T5951] do_filp_open+0x20b/0x470 [ 102.540675][ T5951] ? __pfx_do_filp_open+0x10/0x10 [ 102.540731][ T5951] ? alloc_fd+0x471/0x7d0 [ 102.540786][ T5951] do_sys_openat2+0x11b/0x1d0 [ 102.540825][ T5951] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.540878][ T5951] __x64_sys_openat+0x174/0x210 [ 102.540918][ T5951] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.540974][ T5951] do_syscall_64+0xcd/0x490 [ 102.541007][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.541037][ T5951] RIP: 0033:0x7f8f98f8e9a9 [ 102.541065][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.541092][ T5951] RSP: 002b:00007f8f99d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.541119][ T5951] RAX: ffffffffffffffda RBX: 00007f8f991b6080 RCX: 00007f8f98f8e9a9 [ 102.541138][ T5951] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 102.541157][ T5951] RBP: 00007f8f99010d69 R08: 0000000000000000 R09: 0000000000000000 [ 102.541174][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.541191][ T5951] R13: 0000000000000000 R14: 00007f8f991b6080 R15: 00007fff8017ba48 [ 102.541227][ T5951] [ 103.341614][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 103.662514][ T5985] FAULT_INJECTION: forcing a failure. [ 103.662514][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 103.680979][ T5985] CPU: 1 UID: 7 PID: 5985 Comm: syz.1.12 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 103.681014][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.681028][ T5985] Call Trace: [ 103.681036][ T5985] [ 103.681046][ T5985] dump_stack_lvl+0x16c/0x1f0 [ 103.681076][ T5985] should_fail_ex+0x512/0x640 [ 103.681103][ T5985] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 103.681133][ T5985] should_failslab+0xc2/0x120 [ 103.681165][ T5985] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 103.681191][ T5985] ? security_inode_alloc+0x3b/0x2b0 [ 103.681227][ T5985] ? sk_prot_alloc+0x60/0x2a0 [ 103.681268][ T5985] sk_prot_alloc+0x60/0x2a0 [ 103.681306][ T5985] sk_alloc+0x36/0xc20 [ 103.681334][ T5985] smc_create+0x114/0x2a0 [ 103.681375][ T5985] __sock_create+0x335/0x8d0 [ 103.681419][ T5985] __sys_socket+0x14d/0x260 [ 103.681458][ T5985] ? __pfx___sys_socket+0x10/0x10 [ 103.681496][ T5985] ? xfd_validate_state+0x61/0x180 [ 103.681530][ T5985] ? __pfx_do_writev+0x10/0x10 [ 103.681587][ T5985] __x64_sys_socket+0x72/0xb0 [ 103.681625][ T5985] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.681651][ T5985] do_syscall_64+0xcd/0x490 [ 103.681682][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.681710][ T5985] RIP: 0033:0x7f8f98f8e9a9 [ 103.681731][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.681756][ T5985] RSP: 002b:00007f8f99d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.681781][ T5985] RAX: ffffffffffffffda RBX: 00007f8f991b6080 RCX: 00007f8f98f8e9a9 [ 103.681798][ T5985] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 103.681814][ T5985] RBP: 00007f8f99010d69 R08: 0000000000000000 R09: 0000000000000000 [ 103.681829][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.681845][ T5985] R13: 0000000000000000 R14: 00007f8f991b6080 R15: 00007fff8017ba48 [ 103.681880][ T5985] [ 103.944864][ T51] Bluetooth: hci3: command tx timeout [ 103.950629][ T51] Bluetooth: hci1: command tx timeout [ 103.993130][ T51] Bluetooth: hci0: command tx timeout [ 103.993176][ T51] Bluetooth: hci2: command tx timeout [ 105.425453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.574758][ T6030] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 105.619658][ T6030] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.649113][ T6030] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 105.694021][ T6030] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 105.733998][ T6030] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 105.769920][ T6030] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 105.780795][ T6010] FAULT_INJECTION: forcing a failure. [ 105.780795][ T6010] name failslab, interval 1, probability 0, space 0, times 0 [ 105.816172][ T6030] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 105.854052][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.3.18 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 105.854090][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.854106][ T6010] Call Trace: [ 105.854114][ T6010] [ 105.854125][ T6010] dump_stack_lvl+0x16c/0x1f0 [ 105.854159][ T6010] should_fail_ex+0x512/0x640 [ 105.854190][ T6010] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 105.854240][ T6010] should_failslab+0xc2/0x120 [ 105.854275][ T6010] __kmalloc_cache_noprof+0x6a/0x3e0 [ 105.854322][ T6010] ? snd_seq_port_connect+0x61/0x550 [ 105.854361][ T6010] snd_seq_port_connect+0x61/0x550 [ 105.854402][ T6010] ? _raw_read_unlock+0x28/0x50 [ 105.854447][ T6010] ? check_subscription_permission.isra.0+0xf5/0x240 [ 105.854489][ T6010] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 105.854529][ T6010] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 105.854583][ T6010] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 105.854623][ T6010] snd_seq_oss_midi_open+0x442/0x660 [ 105.854669][ T6010] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 105.854735][ T6010] snd_seq_oss_synth_setup_midi+0x131/0x580 [ 105.854789][ T6010] snd_seq_oss_open+0x893/0xa20 [ 105.854832][ T6010] odev_open+0x6f/0x90 [ 105.854860][ T6010] ? __pfx_odev_open+0x10/0x10 [ 105.854891][ T6010] soundcore_open+0x409/0x580 [ 105.854926][ T6010] ? __pfx_soundcore_open+0x10/0x10 [ 105.854957][ T6010] chrdev_open+0x231/0x6a0 [ 105.854987][ T6010] ? __pfx_apparmor_file_open+0x10/0x10 [ 105.855032][ T6010] ? __pfx_chrdev_open+0x10/0x10 [ 105.855067][ T6010] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 105.855119][ T6010] do_dentry_open+0x744/0x1c10 [ 105.855149][ T6010] ? __pfx_chrdev_open+0x10/0x10 [ 105.855188][ T6010] vfs_open+0x82/0x3f0 [ 105.855230][ T6010] path_openat+0x1de4/0x2cb0 [ 105.855271][ T6010] ? __pfx_path_openat+0x10/0x10 [ 105.855301][ T6010] ? __lock_acquire+0xb8a/0x1c90 [ 105.855344][ T6010] do_filp_open+0x20b/0x470 [ 105.855378][ T6010] ? __pfx_do_filp_open+0x10/0x10 [ 105.855434][ T6010] ? alloc_fd+0x471/0x7d0 [ 105.855491][ T6010] do_sys_openat2+0x11b/0x1d0 [ 105.855529][ T6010] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.855581][ T6010] __x64_sys_openat+0x174/0x210 [ 105.855620][ T6010] ? __pfx___x64_sys_openat+0x10/0x10 [ 105.855676][ T6010] do_syscall_64+0xcd/0x490 [ 105.855709][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.855738][ T6010] RIP: 0033:0x7fc2ad58e9a9 [ 105.855760][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.855788][ T6010] RSP: 002b:00007fc2ae489038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.855815][ T6010] RAX: ffffffffffffffda RBX: 00007fc2ad7b5fa0 RCX: 00007fc2ad58e9a9 [ 105.855833][ T6010] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 105.855851][ T6010] RBP: 00007fc2ad610d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.855868][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.855882][ T6010] R13: 0000000000000000 R14: 00007fc2ad7b5fa0 R15: 00007ffd617170f8 [ 105.855917][ T6010] [ 105.875886][ T6030] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 106.205508][ T6047] vivid-007: ================= START STATUS ================= [ 106.231356][ T6047] vivid-007: Generate PTS: true [ 106.244260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.245662][ T6047] vivid-007: Generate SCR: true [ 106.273639][ T6047] tpg source WxH: 320x240 (Y'CbCr) [ 106.296471][ T6047] tpg field: 1 [ 106.307001][ T6047] tpg crop: (0,0)/320x240 [ 106.314515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.321750][ T6047] tpg compose: (0,0)/320x240 [ 106.328977][ T6030] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 106.338307][ T6047] tpg colorspace: 8 [ 106.342173][ T6047] tpg transfer function: 0/0 [ 106.346875][ T6047] tpg Y'CbCr encoding: 0/0 [ 106.352258][ T6047] tpg quantization: 0/0 [ 106.357642][ T6047] tpg RGB range: 0/2 [ 106.361592][ T6047] vivid-007: ================== END STATUS ================== [ 106.389266][ T6030] page dumped because: unmovable page [ 106.406423][ T6030] page_owner tracks the page as allocated [ 106.434051][ T6030] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 23, tgid 23 (ksoftirqd/1), ts 77595179591, free_ts 77377811092 [ 106.453669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.597206][ T6030] post_alloc_hook+0x1c0/0x230 [ 106.602141][ T6030] get_page_from_freelist+0x1321/0x3890 [ 106.608090][ T6030] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 106.614397][ T6030] alloc_pages_mpol+0x1fb/0x550 [ 106.623245][ T6030] alloc_pages_noprof+0x131/0x390 [ 106.644942][ T6030] skb_page_frag_refill+0x186/0x5a0 [ 106.652641][ T6030] try_fill_recv+0x7e4/0x28a0 [ 106.658809][ T6030] virtnet_poll+0x198d/0x3c30 [ 106.665122][ T6030] __napi_poll.constprop.0+0xba/0x550 [ 106.665218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.679551][ T6030] net_rx_action+0xa9f/0xfe0 [ 106.685239][ T6030] handle_softirqs+0x219/0x8e0 [ 106.693495][ T6030] run_ksoftirqd+0x3a/0x60 [ 106.699132][ T6030] smpboot_thread_fn+0x3f4/0xae0 [ 106.713270][ T6030] kthread+0x3c5/0x780 [ 106.719845][ T6030] ret_from_fork+0x5d4/0x6f0 [ 106.731663][ T6030] ret_from_fork_asm+0x1a/0x30 [ 106.744154][ T6030] page last free pid 5720 tgid 5720 stack trace: [ 106.764971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.785212][ T6030] __free_frozen_pages+0x7fe/0x1180 [ 106.801567][ T6030] qlist_free_all+0x4d/0x120 [ 106.817632][ T6030] kasan_quarantine_reduce+0x195/0x1e0 [ 106.834098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 106.918155][ T6030] __kasan_slab_alloc+0x69/0x90 [ 106.923070][ T6030] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 107.014915][ T6030] getname_flags.part.0+0x4c/0x550 [ 107.064043][ T6030] getname_flags+0x93/0xf0 [ 107.074069][ T6030] do_sys_openat2+0xb8/0x1d0 [ 107.078832][ T6030] __x64_sys_openat+0x174/0x210 [ 107.083712][ T6030] do_syscall_64+0xcd/0x490 [ 107.088353][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.105619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.243398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.831478][ T6089] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 108.849161][ T6091] FAULT_INJECTION: forcing a failure. [ 108.849161][ T6091] name failslab, interval 1, probability 0, space 0, times 0 [ 108.849211][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.0.31 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 108.849248][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.849264][ T6091] Call Trace: [ 108.849273][ T6091] [ 108.849284][ T6091] dump_stack_lvl+0x16c/0x1f0 [ 108.849318][ T6091] should_fail_ex+0x512/0x640 [ 108.849346][ T6091] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 108.849396][ T6091] should_failslab+0xc2/0x120 [ 108.849432][ T6091] __kmalloc_cache_noprof+0x6a/0x3e0 [ 108.849478][ T6091] ? con_insert_unipair+0x1c0/0x270 [ 108.849519][ T6091] con_insert_unipair+0x1c0/0x270 [ 108.849560][ T6091] con_set_unimap+0x3e6/0x640 [ 108.849611][ T6091] vt_ioctl+0x1117/0x30a0 [ 108.849650][ T6091] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.849682][ T6091] ? __pfx_vt_ioctl+0x10/0x10 [ 108.849725][ T6091] ? tomoyo_path_number_perm+0x295/0x580 [ 108.849774][ T6091] ? tomoyo_path_number_perm+0x18d/0x580 [ 108.849815][ T6091] ? do_raw_spin_unlock+0x94/0x230 [ 108.849863][ T6091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.849905][ T6091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.849952][ T6091] ? do_vfs_ioctl+0x523/0x1a60 [ 108.849989][ T6091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.850035][ T6091] ? tty_jobctrl_ioctl+0x152/0xe00 [ 108.850080][ T6091] ? __pfx_vt_ioctl+0x10/0x10 [ 108.850120][ T6091] tty_ioctl+0x661/0x1640 [ 108.850154][ T6091] ? __pfx_tty_ioctl+0x10/0x10 [ 108.850204][ T6091] ? find_held_lock+0x2b/0x80 [ 108.850234][ T6091] ? hook_file_ioctl_common+0x145/0x410 [ 108.850282][ T6091] ? __fget_files+0x20e/0x3c0 [ 108.850334][ T6091] ? __pfx_tty_ioctl+0x10/0x10 [ 108.850368][ T6091] __x64_sys_ioctl+0x18e/0x210 [ 108.850412][ T6091] do_syscall_64+0xcd/0x490 [ 108.850445][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.850474][ T6091] RIP: 0033:0x7f118618e9a9 [ 108.850514][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.850542][ T6091] RSP: 002b:00007f11870bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.850570][ T6091] RAX: ffffffffffffffda RBX: 00007f11863b5fa0 RCX: 00007f118618e9a9 [ 108.850590][ T6091] RDX: 0000000000000038 RSI: 0000000000004b67 RDI: 0000000000000003 [ 108.850619][ T6091] RBP: 00007f1186210d69 R08: 0000000000000000 R09: 0000000000000000 [ 108.850636][ T6091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.850653][ T6091] R13: 0000000000000000 R14: 00007f11863b5fa0 R15: 00007ffeaaea7f78 [ 108.850688][ T6091] [ 108.874198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.882497][ T6089] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.882524][ T6089] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.882561][ T6089] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 108.882606][ T6089] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 108.882635][ T6089] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 108.882662][ T6089] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 108.882691][ T6089] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 108.882719][ T6089] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 108.882737][ T6089] page dumped because: unmovable page [ 108.882752][ T6089] page_owner tracks the page as allocated [ 108.882781][ T6089] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 23, tgid 23 (ksoftirqd/1), ts 77595179591, free_ts 77377811092 [ 108.882830][ T6089] post_alloc_hook+0x1c0/0x230 [ 108.882879][ T6089] get_page_from_freelist+0x1321/0x3890 [ 108.882908][ T6089] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 108.882948][ T6089] alloc_pages_mpol+0x1fb/0x550 [ 108.882981][ T6089] alloc_pages_noprof+0x131/0x390 [ 108.883014][ T6089] skb_page_frag_refill+0x186/0x5a0 [ 108.883054][ T6089] try_fill_recv+0x7e4/0x28a0 [ 108.883097][ T6089] virtnet_poll+0x198d/0x3c30 [ 108.883140][ T6089] __napi_poll.constprop.0+0xba/0x550 [ 108.883167][ T6089] net_rx_action+0xa9f/0xfe0 [ 108.883193][ T6089] handle_softirqs+0x219/0x8e0 [ 108.883226][ T6089] run_ksoftirqd+0x3a/0x60 [ 108.883258][ T6089] smpboot_thread_fn+0x3f4/0xae0 [ 108.883291][ T6089] kthread+0x3c5/0x780 [ 108.883331][ T6089] ret_from_fork+0x5d4/0x6f0 [ 108.883371][ T6089] ret_from_fork_asm+0x1a/0x30 [ 108.883405][ T6089] page last free pid 5720 tgid 5720 stack trace: [ 108.883423][ T6089] __free_frozen_pages+0x7fe/0x1180 [ 108.883467][ T6089] qlist_free_all+0x4d/0x120 [ 108.883492][ T6089] kasan_quarantine_reduce+0x195/0x1e0 [ 108.883531][ T6089] __kasan_slab_alloc+0x69/0x90 [ 108.883577][ T6089] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 108.883606][ T6089] getname_flags.part.0+0x4c/0x550 [ 108.883656][ T6089] getname_flags+0x93/0xf0 [ 108.883716][ T6089] do_sys_openat2+0xb8/0x1d0 [ 108.883753][ T6089] __x64_sys_openat+0x174/0x210 [ 108.883793][ T6089] do_syscall_64+0xcd/0x490 [ 108.883824][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.095407][ T6109] FAULT_INJECTION: forcing a failure. [ 110.095407][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 110.095444][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.1.34 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 110.095469][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.095481][ T6109] Call Trace: [ 110.095487][ T6109] [ 110.095494][ T6109] dump_stack_lvl+0x16c/0x1f0 [ 110.095518][ T6109] should_fail_ex+0x512/0x640 [ 110.095539][ T6109] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 110.095575][ T6109] should_failslab+0xc2/0x120 [ 110.095599][ T6109] __kmalloc_cache_noprof+0x6a/0x3e0 [ 110.095631][ T6109] ? snd_seq_port_connect+0x61/0x550 [ 110.095658][ T6109] snd_seq_port_connect+0x61/0x550 [ 110.095681][ T6109] ? _raw_read_unlock+0x28/0x50 [ 110.095713][ T6109] ? check_subscription_permission.isra.0+0xf5/0x240 [ 110.095742][ T6109] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 110.095771][ T6109] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 110.095809][ T6109] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 110.095837][ T6109] snd_seq_oss_midi_open+0x564/0x660 [ 110.095869][ T6109] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 110.095908][ T6109] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.095928][ T6109] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 110.095964][ T6109] snd_seq_oss_synth_setup_midi+0x131/0x580 [ 110.096001][ T6109] snd_seq_oss_open+0x893/0xa20 [ 110.096040][ T6109] odev_open+0x6f/0x90 [ 110.096062][ T6109] ? __pfx_odev_open+0x10/0x10 [ 110.096084][ T6109] soundcore_open+0x409/0x580 [ 110.096108][ T6109] ? __pfx_soundcore_open+0x10/0x10 [ 110.096130][ T6109] chrdev_open+0x231/0x6a0 [ 110.096152][ T6109] ? __pfx_apparmor_file_open+0x10/0x10 [ 110.096184][ T6109] ? __pfx_chrdev_open+0x10/0x10 [ 110.096208][ T6109] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 110.096244][ T6109] do_dentry_open+0x744/0x1c10 [ 110.096265][ T6109] ? __pfx_chrdev_open+0x10/0x10 [ 110.096292][ T6109] vfs_open+0x82/0x3f0 [ 110.096321][ T6109] path_openat+0x1de4/0x2cb0 [ 110.096349][ T6109] ? __pfx_path_openat+0x10/0x10 [ 110.096370][ T6109] ? __lock_acquire+0xb8a/0x1c90 [ 110.096401][ T6109] do_filp_open+0x20b/0x470 [ 110.096421][ T6109] ? __pfx_do_filp_open+0x10/0x10 [ 110.096459][ T6109] ? alloc_fd+0x471/0x7d0 [ 110.096497][ T6109] do_sys_openat2+0x11b/0x1d0 [ 110.096524][ T6109] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.096561][ T6109] __x64_sys_openat+0x174/0x210 [ 110.096589][ T6109] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.096627][ T6109] do_syscall_64+0xcd/0x490 [ 110.096650][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.096670][ T6109] RIP: 0033:0x7f8f98f8e9a9 [ 110.096686][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.096705][ T6109] RSP: 002b:00007f8f99d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.096723][ T6109] RAX: ffffffffffffffda RBX: 00007f8f991b6080 RCX: 00007f8f98f8e9a9 [ 110.096736][ T6109] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 110.096749][ T6109] RBP: 00007f8f99010d69 R08: 0000000000000000 R09: 0000000000000000 [ 110.096761][ T6109] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 110.096772][ T6109] R13: 0000000000000000 R14: 00007f8f991b6080 R15: 00007fff8017ba48 [ 110.096797][ T6109] [ 110.699540][ T6126] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 111.042049][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.257119][ T6170] FAULT_INJECTION: forcing a failure. [ 113.257119][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 113.288863][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.2.46 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 113.288901][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.288918][ T6170] Call Trace: [ 113.288927][ T6170] [ 113.288938][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 113.288972][ T6170] should_fail_ex+0x512/0x640 [ 113.289001][ T6170] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 113.289051][ T6170] should_failslab+0xc2/0x120 [ 113.289084][ T6170] __kmalloc_cache_noprof+0x6a/0x3e0 [ 113.289129][ T6170] ? snd_seq_oss_timer_new+0x43/0x230 [ 113.289173][ T6170] snd_seq_oss_timer_new+0x43/0x230 [ 113.289211][ T6170] snd_seq_oss_open+0x5ce/0xa20 [ 113.289254][ T6170] odev_open+0x6f/0x90 [ 113.289304][ T6170] ? __pfx_odev_open+0x10/0x10 [ 113.289339][ T6170] soundcore_open+0x409/0x580 [ 113.289376][ T6170] ? __pfx_soundcore_open+0x10/0x10 [ 113.289409][ T6170] chrdev_open+0x231/0x6a0 [ 113.289440][ T6170] ? __pfx_apparmor_file_open+0x10/0x10 [ 113.289498][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 113.289536][ T6170] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 113.289602][ T6170] do_dentry_open+0x744/0x1c10 [ 113.289632][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 113.289671][ T6170] vfs_open+0x82/0x3f0 [ 113.289712][ T6170] path_openat+0x1de4/0x2cb0 [ 113.289753][ T6170] ? __pfx_path_openat+0x10/0x10 [ 113.289783][ T6170] ? __lock_acquire+0xb8a/0x1c90 [ 113.289828][ T6170] do_filp_open+0x20b/0x470 [ 113.289856][ T6170] ? __pfx_do_filp_open+0x10/0x10 [ 113.289911][ T6170] ? alloc_fd+0x471/0x7d0 [ 113.289967][ T6170] do_sys_openat2+0x11b/0x1d0 [ 113.290005][ T6170] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.290059][ T6170] __x64_sys_openat+0x174/0x210 [ 113.290098][ T6170] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.290153][ T6170] do_syscall_64+0xcd/0x490 [ 113.290185][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.290232][ T6170] RIP: 0033:0x7f08abd8e9a9 [ 113.290269][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.290297][ T6170] RSP: 002b:00007f08acc27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.290324][ T6170] RAX: ffffffffffffffda RBX: 00007f08abfb6080 RCX: 00007f08abd8e9a9 [ 113.290361][ T6170] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 113.290380][ T6170] RBP: 00007f08abe10d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.290398][ T6170] R10: 0000000000006300 R11: 0000000000000246 R12: 0000000000000000 [ 113.290416][ T6170] R13: 0000000000000000 R14: 00007f08abfb6080 R15: 00007ffe678957f8 [ 113.290454][ T6170] [ 113.291062][ T6170] ALSA: seq_oss: can't alloc timer [ 113.736494][ T6164] FAULT_INJECTION: forcing a failure. [ 113.736494][ T6164] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.749779][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.1.47 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 113.749816][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.749832][ T6164] Call Trace: [ 113.749840][ T6164] [ 113.749850][ T6164] dump_stack_lvl+0x16c/0x1f0 [ 113.749884][ T6164] should_fail_ex+0x512/0x640 [ 113.749920][ T6164] get_futex_key+0x1d0/0x1540 [ 113.749956][ T6164] ? __pfx_try_to_wake_up+0x10/0x10 [ 113.749986][ T6164] ? __pfx_get_futex_key+0x10/0x10 [ 113.750016][ T6164] ? plist_check_head+0xa3/0x150 [ 113.750055][ T6164] ? find_held_lock+0x2b/0x80 [ 113.750095][ T6164] futex_wake+0xe7/0x4e0 [ 113.750139][ T6164] ? __pfx_futex_wake+0x10/0x10 [ 113.750184][ T6164] ? vfs_write+0x15d/0x1150 [ 113.750220][ T6164] do_futex+0x1e3/0x350 [ 113.750255][ T6164] ? __pfx_do_futex+0x10/0x10 [ 113.750300][ T6164] __x64_sys_futex+0x1e0/0x4c0 [ 113.750339][ T6164] ? fdget_pos+0x2b8/0x370 [ 113.750384][ T6164] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.750421][ T6164] ? ksys_write+0x1ac/0x250 [ 113.750449][ T6164] ? __pfx_ksys_write+0x10/0x10 [ 113.750499][ T6164] do_syscall_64+0xcd/0x490 [ 113.750549][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.750579][ T6164] RIP: 0033:0x7f8f98f8e9a9 [ 113.750602][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.750630][ T6164] RSP: 002b:00007f8f99dad0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.750671][ T6164] RAX: ffffffffffffffda RBX: 00007f8f991b5fa8 RCX: 00007f8f98f8e9a9 [ 113.750691][ T6164] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f991b5fac [ 113.750710][ T6164] RBP: 00007f8f991b5fa0 R08: 00007f8f99dae000 R09: 0000000000000000 [ 113.750728][ T6164] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f8f991b5fac [ 113.750748][ T6164] R13: 0000000000000000 R14: 00007fff8017b960 R15: 00007fff8017ba48 [ 113.750785][ T6164] [ 114.552705][ T6197] openvswitch: netlink: IPv4 tunnel dst address is zero [ 114.736644][ T6205] FAULT_INJECTION: forcing a failure. [ 114.736644][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 114.753669][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.0.64 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 114.753709][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.753726][ T6205] Call Trace: [ 114.753736][ T6205] [ 114.753747][ T6205] dump_stack_lvl+0x16c/0x1f0 [ 114.753782][ T6205] should_fail_ex+0x512/0x640 [ 114.753811][ T6205] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 114.753847][ T6205] should_failslab+0xc2/0x120 [ 114.753884][ T6205] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 114.753915][ T6205] ? sock_alloc_inode+0x25/0x1c0 [ 114.753957][ T6205] ? __pfx_sock_alloc_inode+0x10/0x10 [ 114.753992][ T6205] sock_alloc_inode+0x25/0x1c0 [ 114.754025][ T6205] alloc_inode+0x61/0x240 [ 114.754059][ T6205] sock_alloc+0x40/0x280 [ 114.754092][ T6205] __sock_create+0xc1/0x8d0 [ 114.754137][ T6205] __sys_socket+0x14d/0x260 [ 114.754180][ T6205] ? __pfx___sys_socket+0x10/0x10 [ 114.754222][ T6205] ? xfd_validate_state+0x61/0x180 [ 114.754269][ T6205] __x64_sys_socket+0x72/0xb0 [ 114.754308][ T6205] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.754335][ T6205] do_syscall_64+0xcd/0x490 [ 114.754367][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.754396][ T6205] RIP: 0033:0x7f118618e9a9 [ 114.754418][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.754445][ T6205] RSP: 002b:00007f11870bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 114.754471][ T6205] RAX: ffffffffffffffda RBX: 00007f11863b5fa0 RCX: 00007f118618e9a9 [ 114.754489][ T6205] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 114.754505][ T6205] RBP: 00007f1186210d69 R08: 0000000000000000 R09: 0000000000000000 [ 114.754522][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.754537][ T6205] R13: 0000000000000000 R14: 00007f11863b5fa0 R15: 00007ffeaaea7f78 [ 114.754578][ T6205] [ 114.851578][ T6208] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 114.968584][ T6205] socket: no more sockets [ 114.991166][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 115.056773][ T6208] .SR: entered promiscuous mode [ 115.196633][ T6214] Invalid ELF header magic: != ELF [ 115.920096][ T6225] ecryptfs_miscdev_write: Invalid packet size [7911] [ 116.126118][ T6220] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 116.147250][ T6229] FAULT_INJECTION: forcing a failure. [ 116.147250][ T6229] name fail_futex, interval 1, probability 0, space 0, times 0 [ 116.183748][ T6229] CPU: 1 UID: 0 PID: 6229 Comm: syz.0.60 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 116.183790][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.183808][ T6229] Call Trace: [ 116.183817][ T6229] [ 116.183828][ T6229] dump_stack_lvl+0x16c/0x1f0 [ 116.183868][ T6229] should_fail_ex+0x512/0x640 [ 116.183915][ T6229] get_futex_key+0x1d0/0x1540 [ 116.183956][ T6229] ? __pfx_get_futex_key+0x10/0x10 [ 116.183991][ T6229] ? __pfx___schedule+0x10/0x10 [ 116.184034][ T6229] ? psi_group_change+0x6dc/0xd20 [ 116.184080][ T6229] futex_wait_setup+0x84/0x510 [ 116.184131][ T6229] __futex_wait+0x194/0x2f0 [ 116.184174][ T6229] ? __pfx___futex_wait+0x10/0x10 [ 116.184229][ T6229] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.184276][ T6229] ? plist_check_head+0xa3/0x150 [ 116.184315][ T6229] ? find_held_lock+0x2b/0x80 [ 116.184355][ T6229] futex_wait+0xe8/0x380 [ 116.184396][ T6229] ? __pfx_futex_wait+0x10/0x10 [ 116.184442][ T6229] ? kmem_cache_free+0x2d1/0x4d0 [ 116.184469][ T6229] ? fd_install+0x225/0x750 [ 116.184509][ T6229] ? putname+0x154/0x1a0 [ 116.184548][ T6229] do_futex+0x229/0x350 [ 116.184582][ T6229] ? __pfx_do_futex+0x10/0x10 [ 116.184625][ T6229] __x64_sys_futex+0x1e0/0x4c0 [ 116.184680][ T6229] ? __x64_sys_openat+0x174/0x210 [ 116.184741][ T6229] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.184789][ T6229] do_syscall_64+0xcd/0x490 [ 116.184820][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.184848][ T6229] RIP: 0033:0x7f118618e9a9 [ 116.184869][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.184912][ T6229] RSP: 002b:00007f11870bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.184938][ T6229] RAX: ffffffffffffffda RBX: 00007f11863b5fa8 RCX: 00007f118618e9a9 [ 116.184958][ T6229] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11863b5fa8 [ 116.184975][ T6229] RBP: 00007f11863b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 116.184993][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11863b5fac [ 116.185011][ T6229] R13: 0000000000000000 R14: 00007ffeaaea7e90 R15: 00007ffeaaea7f78 [ 116.185048][ T6229] [ 116.719787][ T6237] FAULT_INJECTION: forcing a failure. [ 116.719787][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 116.732551][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.1.61 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 116.732592][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.732611][ T6237] Call Trace: [ 116.732621][ T6237] [ 116.732633][ T6237] dump_stack_lvl+0x16c/0x1f0 [ 116.732669][ T6237] should_fail_ex+0x512/0x640 [ 116.732701][ T6237] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 116.732767][ T6237] should_failslab+0xc2/0x120 [ 116.732803][ T6237] __kmalloc_cache_noprof+0x6a/0x3e0 [ 116.732851][ T6237] ? snd_seq_port_connect+0x61/0x550 [ 116.732893][ T6237] snd_seq_port_connect+0x61/0x550 [ 116.732927][ T6237] ? _raw_read_unlock+0x28/0x50 [ 116.732974][ T6237] ? check_subscription_permission.isra.0+0xf5/0x240 [ 116.733037][ T6237] snd_seq_ioctl_subscribe_port+0x211/0x450 [ 116.733084][ T6237] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 116.733145][ T6237] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 116.733202][ T6237] snd_seq_oss_midi_open+0x564/0x660 [ 116.733255][ T6237] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 116.733327][ T6237] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.733356][ T6237] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.733410][ T6237] snd_seq_oss_synth_setup_midi+0x131/0x580 [ 116.733467][ T6237] snd_seq_oss_open+0x893/0xa20 [ 116.733513][ T6237] odev_open+0x6f/0x90 [ 116.733545][ T6237] ? __pfx_odev_open+0x10/0x10 [ 116.733577][ T6237] soundcore_open+0x409/0x580 [ 116.733615][ T6237] ? __pfx_soundcore_open+0x10/0x10 [ 116.733648][ T6237] chrdev_open+0x231/0x6a0 [ 116.733679][ T6237] ? __pfx_apparmor_file_open+0x10/0x10 [ 116.733727][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 116.733763][ T6237] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 116.733818][ T6237] do_dentry_open+0x744/0x1c10 [ 116.733851][ T6237] ? __pfx_chrdev_open+0x10/0x10 [ 116.733895][ T6237] vfs_open+0x82/0x3f0 [ 116.733941][ T6237] path_openat+0x1de4/0x2cb0 [ 116.733982][ T6237] ? __pfx_path_openat+0x10/0x10 [ 116.734019][ T6237] ? __lock_acquire+0xb8a/0x1c90 [ 116.734067][ T6237] do_filp_open+0x20b/0x470 [ 116.734096][ T6237] ? __pfx_do_filp_open+0x10/0x10 [ 116.734143][ T6237] ? alloc_fd+0x471/0x7d0 [ 116.734201][ T6237] do_sys_openat2+0x11b/0x1d0 [ 116.734236][ T6237] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.734283][ T6237] __x64_sys_openat+0x174/0x210 [ 116.734318][ T6237] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.734366][ T6237] do_syscall_64+0xcd/0x490 [ 116.734394][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.734423][ T6237] RIP: 0033:0x7f8f98f8e9a9 [ 116.734443][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.734467][ T6237] RSP: 002b:00007f8f99dad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.734491][ T6237] RAX: ffffffffffffffda RBX: 00007f8f991b5fa0 RCX: 00007f8f98f8e9a9 [ 116.734507][ T6237] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 116.734523][ T6237] RBP: 00007f8f99010d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.734538][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.734553][ T6237] R13: 0000000000000000 R14: 00007f8f991b5fa0 R15: 00007fff8017ba48 [ 116.734594][ T6237] [ 119.477722][ T6290] ALSA: mixer_oss: invalid OSS volume '' [ 119.554424][ T6295] FAULT_INJECTION: forcing a failure. [ 119.554424][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 119.591778][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.1.72 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 119.591823][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.591842][ T6295] Call Trace: [ 119.591852][ T6295] [ 119.591863][ T6295] dump_stack_lvl+0x16c/0x1f0 [ 119.591900][ T6295] should_fail_ex+0x512/0x640 [ 119.591931][ T6295] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 119.591967][ T6295] should_failslab+0xc2/0x120 [ 119.592003][ T6295] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 119.592033][ T6295] ? rcu_is_watching+0x12/0xc0 [ 119.592065][ T6295] ? getname_flags.part.0+0x4c/0x550 [ 119.592112][ T6295] getname_flags.part.0+0x4c/0x550 [ 119.592158][ T6295] getname_flags+0x93/0xf0 [ 119.592206][ T6295] do_sys_openat2+0xb8/0x1d0 [ 119.592257][ T6295] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.592301][ T6295] ? __pfx___might_resched+0x10/0x10 [ 119.592345][ T6295] __x64_sys_openat+0x174/0x210 [ 119.592391][ T6295] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.592449][ T6295] do_syscall_64+0xcd/0x490 [ 119.592484][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.592515][ T6295] RIP: 0033:0x7f8f98f8e9a9 [ 119.592548][ T6295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.592576][ T6295] RSP: 002b:00007f8f99dad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.592602][ T6295] RAX: ffffffffffffffda RBX: 00007f8f991b5fa0 RCX: 00007f8f98f8e9a9 [ 119.592621][ T6295] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 119.592639][ T6295] RBP: 00007f8f99010d69 R08: 0000000000000000 R09: 0000000000000000 [ 119.592656][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.592672][ T6295] R13: 0000000000000000 R14: 00007f8f991b5fa0 R15: 00007fff8017ba48 [ 119.592716][ T6295] [ 123.887968][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 123.897182][ T6373] Zero length message leads to an empty skb [ 124.388305][ T5855] ================================================================== [ 124.396434][ T5855] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 124.404292][ T5855] Read of size 140 at addr ffffc900042c4000 by task kworker/u9:3/5855 [ 124.412470][ T5855] [ 124.414792][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 124.414817][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.414830][ T5855] Workqueue: hci0 hci_devcd_timeout [ 124.414861][ T5855] Call Trace: [ 124.414868][ T5855] [ 124.414875][ T5855] dump_stack_lvl+0x116/0x1f0 [ 124.414896][ T5855] print_report+0xcd/0x630 [ 124.414918][ T5855] ? __virt_addr_valid+0x81/0x610 [ 124.414941][ T5855] ? hci_devcd_dump+0x142/0x240 [ 124.414969][ T5855] kasan_report+0xe0/0x110 [ 124.414990][ T5855] ? hci_devcd_dump+0x142/0x240 [ 124.415022][ T5855] kasan_check_range+0x100/0x1b0 [ 124.415049][ T5855] __asan_memcpy+0x23/0x60 [ 124.415078][ T5855] hci_devcd_dump+0x142/0x240 [ 124.415108][ T5855] hci_devcd_timeout+0xb5/0x2e0 [ 124.415137][ T5855] ? rcu_is_watching+0x12/0xc0 [ 124.415177][ T5855] process_one_work+0x9cc/0x1b70 [ 124.415227][ T5855] ? __pfx_process_one_work+0x10/0x10 [ 124.415260][ T5855] ? assign_work+0x1a0/0x250 [ 124.415289][ T5855] worker_thread+0x6c8/0xf10 [ 124.415344][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 124.415377][ T5855] kthread+0x3c5/0x780 [ 124.415407][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.415438][ T5855] ? rcu_is_watching+0x12/0xc0 [ 124.415459][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.415489][ T5855] ret_from_fork+0x5d4/0x6f0 [ 124.415518][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.415547][ T5855] ret_from_fork_asm+0x1a/0x30 [ 124.415577][ T5855] [ 124.415584][ T5855] [ 124.563003][ T5855] The buggy address belongs to a vmalloc virtual mapping [ 124.570033][ T5855] Memory state around the buggy address: [ 124.575662][ T5855] ffffc900042c3f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 124.583728][ T5855] ffffc900042c3f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 124.591789][ T5855] >ffffc900042c4000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 124.599845][ T5855] ^ [ 124.603919][ T5855] ffffc900042c4080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 124.611984][ T5855] ffffc900042c4100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 124.620041][ T5855] ================================================================== [ 124.629740][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 124.636959][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: kworker/u9:3 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(full) [ 124.649112][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.659172][ T5855] Workqueue: hci0 hci_devcd_timeout [ 124.664419][ T5855] Call Trace: [ 124.667712][ T5855] [ 124.670649][ T5855] dump_stack_lvl+0x3d/0x1f0 [ 124.675247][ T5855] panic+0x71c/0x800 [ 124.679184][ T5855] ? __pfx_panic+0x10/0x10 [ 124.683614][ T5855] ? mark_held_locks+0x49/0x80 [ 124.688386][ T5855] ? preempt_schedule_thunk+0x16/0x30 [ 124.693767][ T5855] ? hci_devcd_dump+0x142/0x240 [ 124.698636][ T5855] ? preempt_schedule_common+0x44/0xc0 [ 124.704134][ T5855] ? check_panic_on_warn+0x1f/0xb0 [ 124.709263][ T5855] ? hci_devcd_dump+0x142/0x240 [ 124.714141][ T5855] check_panic_on_warn+0xab/0xb0 [ 124.719091][ T5855] end_report+0x107/0x170 [ 124.723424][ T5855] kasan_report+0xee/0x110 [ 124.727854][ T5855] ? hci_devcd_dump+0x142/0x240 [ 124.732730][ T5855] kasan_check_range+0x100/0x1b0 [ 124.737688][ T5855] __asan_memcpy+0x23/0x60 [ 124.742128][ T5855] hci_devcd_dump+0x142/0x240 [ 124.746821][ T5855] hci_devcd_timeout+0xb5/0x2e0 [ 124.751693][ T5855] ? rcu_is_watching+0x12/0xc0 [ 124.756493][ T5855] process_one_work+0x9cc/0x1b70 [ 124.761559][ T5855] ? __pfx_process_one_work+0x10/0x10 [ 124.766965][ T5855] ? assign_work+0x1a0/0x250 [ 124.771575][ T5855] worker_thread+0x6c8/0xf10 [ 124.776193][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 124.781319][ T5855] kthread+0x3c5/0x780 [ 124.785426][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.790050][ T5855] ? rcu_is_watching+0x12/0xc0 [ 124.794821][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.799424][ T5855] ret_from_fork+0x5d4/0x6f0 [ 124.804042][ T5855] ? __pfx_kthread+0x10/0x10 [ 124.808665][ T5855] ret_from_fork_asm+0x1a/0x30 [ 124.813446][ T5855] [ 124.816863][ T5855] Kernel Offset: disabled [ 124.821206][ T5855] Rebooting in 86400 seconds..