last executing test programs: 12.675253564s ago: executing program 1 (id=213): exit$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) read$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) mremap$auto(0x8, 0x67, 0x400000000000000, 0xb, 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6a3, 0x15) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) 11.180945255s ago: executing program 1 (id=217): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40) recvmmsg$auto(r0, 0x0, 0x10a, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0x0, 0x0, 0x10) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x141442, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r2, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) 10.105253442s ago: executing program 0 (id=219): r0 = socket(0x1a, 0x2, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5a5) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) unshare$auto(0x20000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x1a1) 9.995023468s ago: executing program 2 (id=220): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x668}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000001c80)={{0xb9, 0xee00, 0xffffffffffffffff, 0x0, 0xf, 0xff, 0x101}, 0x6, 0x4, 0x6, 0x6, @raw=0x5573, @raw=0xf0000000, 0x2, 0x0, &(0x7f0000001b00)="34ea2ec81241f9ec5a3f48ab8c8e6fcec7d01f43f5a91db8516f13d5e0526a14304882637c53ceaa10b59407e43b01a559b980e3c4a3cd6f1569b922a65b1b6fd0f782948b1a945e7bdee06838452dacc8f8dd0c2b765930a2413ad25d736ca72a2bba275aa961c09f87deeb1ac424454f37735b6d2d7d57d65ff59a654c60e8514ec60f2d705aecc806ac0d941de51f48b191ae7f70fea236817c58eb5ea83c4b9819f51d48f8dd5cea3777c0d353e99770bb290e96524f93466fded797", &(0x7f0000001bc0)="3109e8f7c6213adf73a19d22cf3c93231bcd35c9d308fbbd083fdd3967ae486111d149809d09122be5e71b4f453c0d4461e27aef0987308f57709d2d74fb668913a3a92904b5567d296bd684ce0139026e46c31cdd56fc562163bdb1c7e0074ecf073f48da95485cab108a745596682294c513472034471b654b66757f98e761248926da55cb3ebf3ba7c66222867a5d83615569a2be4bef8ff54bd0ad125674d957c9de754e4900d40e317e662009bcc060a95520362ec66a31915a"}) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000001d80)={{0xd, 0xee00, 0xffffffffffffffff, 0x6, 0x3, 0x6, 0x891}, &(0x7f0000001d00)=0x5, &(0x7f0000001d40)=0x3, 0x5, 0x9, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x4, 0x4afa, 0x7ff, @inferred=0xffffffffffffffff, @raw=0x8001}) r2 = getsid$auto(0xffffffffffffffff) prctl$auto(0xbbb, 0xfffffffffffffff7, r2, 0xffff0000000, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r3, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 8.53210815s ago: executing program 2 (id=222): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x81) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, 0x0) r2 = prctl$auto_PR_SET_SECCOMP(0x16, 0x7, 0x0, 0xf446, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0x20eb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x22142, 0x20) write$auto(0x3, 0x0, 0x100082) fremovexattr$auto(r3, &(0x7f0000000180)='-)\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) r4 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000000400)={{0x5, 0xee01, 0xffffffffffffffff, 0x1ff, 0x8, 0x2, 0x3}, &(0x7f0000000300)=0x5, &(0x7f00000003c0)=0x3, 0x78e, 0x4, 0x0, 0x1, 0xa1d7, 0xffff, 0x4, 0x1, @raw=0x7, @raw=0x6}) msgctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000500)={{0x5, 0xee00, 0xffffffffffffffff, 0xe0fa, 0x80000001, 0x5, 0xc}, &(0x7f0000000480)=0x6, &(0x7f00000004c0)=0x9, 0xa, 0x5, 0x4, 0xfff, 0x0, 0x4, 0xffff, 0x80, @raw=0x1, @raw=0x3}) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f0000000580)={0x127c, r5, 0xc26, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xbd, 0xcd, "47a0e4b35c8ea5cace46d675aba51d7399e0f7d07cb5d7210791c8e06a7b5fd110735cd5c9e252dd1f4b2943418cd4bade5e3f4fa38822c2b9ada5f956efe6e755c734f5316f41233c18a561e44620708f6cf2fedd14dd343859fa9c319d655f986d46f84c4fcc9ed514437c3729e943c84ef3374f5fd5051604d7ff8303c55d209d067cdaf38edda392827a1e3fae8ce52eaee9461782341c883c65086bcecef79cb46b185fa41dd74b890f88622d7f8c3b544808d3df5655"}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x9}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_CQM={0x116f, 0x5e, 0x0, 0x1, [@generic="cfeccb015cbad86a395bb1b579de68ba0e91ecf11bcc12730b8299dd2803f7fd99a61f80740ee456016713b8e1eb155a83f696abdaa2c8e6c127fbb29decd7a5fa04f161ab5fa332db6af9e9d641c6853b5340ed13d44acde5489da14b4946fc350cb2f44ece29166360d198b5d3e40fb9413185da749481d4315315e238e8a2889b101e784dab46b7343a4324ab56", @nested={0x102f, 0x67, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @u32=0x5a0f3746}, @generic="0b8512d0a835e058b02061", @generic="7211ce218371c859a9804e27294d844801e586b7706e524f39c282adf02fb8cdef00e7dfd22130e2070eb34f2b98667f01f69634015251e41b9f003127863ca04d7a8634fbd9b01416e65cfea89a6722ec814ccf30742bb9fff7c0fac52f682dea5e472d3366960a6962661db7994f18d19c19671267365819565e1174bc1d63a18c875b8e07d861036bdc0089c9bf97af18456336919180263c6184759418b3c4d0243bb208cbfe9bf056c3728d7f89dc69033ab0cead02f5d8dacde5be5ad87595bd8d2baf9ef58e14803e62c7aba7ffbbffac81827f6c8cd3506eb3d87f14a5be837d6779fb6a8cff8cd55a12c866880f2bec5f176a37c2bda8859401b6933640f1f2dbda049e66509ad45c7a85ddfdb9323fb1ef63c737be5d83608347217a9e4ae54fddb54a9c888e21830572340519ea2aa72115683267e4b8662f70660204bcf3549e58cebe0e2dddd5ba08b6be8d2812192987995a2e68901a31d7cd2a574f1ac7cc2997d15f9cded211b878b54d8cc7ba6fbbde123c41bd73c3263803a24e052f8dff4544b44dffe93a6be15ca9951e335eb70197e69fc8f8ab86c98f6031d533235d92dde115ccbdd045ce2ca238df4943f4bc1a6803c9cff5265cb1df6100d356ee2e7604bc30ce4cd112ba61aa1711214649d030dd66008ac35d44eb92a5a68574e017ec77834a1ed169ebe68408b8babae87d604a59bba2af6ab2d15528226bc95f8590e7bfe9f5d34e490a2400ac1c0b8a78dae51ba88ecd9bc036a2d4c74c0082408469a43b95be8b4526f55085e4a0d18595c354c0a64bf58c379aa3558f404aeef54237c9000fc1710d8acfc3fcd339266e2e8fbe51d37bc88daeab83e2833119a95692de9f79d8b2b00ebf89191c6259540d8d0d8adea8799c2c5fe8ea51c3edc68c6c55da42272f99d64f5881711be545e5748626dab95be2dd90f7e472cee7f3e5476360cd724adc3061495fdc5d8a9edbdafc26fd302d74d06b45e04d5e1f8086bb631e0df7f9ca46736809af0784d51530ececb0739e41bc381ee98249b4ac30672fbf2172758a4ec83738069a1d7970ed1862d196391021371183b855d9d324bce73b2b8bd3b50c06f6cf6ebf375f5ecd7d44ce49e306984faf4a129a9ff81947e25435cd56c0e3235746b98c5690f31d7dbaaa634ac9a35cca804f2dd1126b1e66890cd305b823f9bac0c60208977bd73880944601620065a9c89b3a8ac0438b09442fd135fbcc5f9be7aabaef772db71525c0f476fd965e9d3e64b8eae876909280bee3c163c7d480fd52842ad17ff29bc540442cec8d2bedb14f30291223bb2e8edd984684f5f7ba7f7dcdfc508400783a2df7ca9af7f72d72f6aebc277cadebb49eb37eb93b8adb00bf609a603df97e8957109a47d07600684ff4bcd1d5ff6b58cd0c1c3460f097d6ea1a2f53752812b588b1d2a65f81eb94cbe47b32462ebd5e31fe3871ef6b7b0540d2bedd9df3b10d97dd6a34b6e05de4fee4c3f4902c194f5688aa8e1da971f593e2ca7c5e19d2a5b179b8e9668aa9cb27d079cd143d3b4f23954aced25c168469cc8d1b6c26c016f4bea55be04565841f4b92ef5664cc0ccfdd502662ac82b55313146fdbec1ad7dff007d7d093ac9b69ea3f591c684cd3b0061a6c4d1b433e10e94eae3d3637de754a1a5c071d63c04841796c0849f3ab86b152b6bb5128c1ea759e58a1e10c020aa525f53078d93eb0977653e2629ff212e0a8d85a80114ad45002c9b58938ca5d1750aa1924752dc3ac2726cd92d3c0b186aa719628f87283343aa2465b25451129effac558d40aa4d20e159ad888e028d38d0208a9e1c7f15682570d4255bb8f5e7309dd354cc8635f5344980111bf0591a8b1a81fe90cec83bad9257d19cac2f5c967c73c93f43f488ffbe48ed9f318270407b19ec2b066444aeabb2ca00ce55da66b06e3e0cfda42a0b1d85361eca1c774b261d715d34456abf0bcd3a89a55b3e3e97612f7944ff30b2eb7be404fa436b0ebfb27d96528bf7b33769923f637facfbdc8189c926be2fbb9cca4c044b27a033e55c2dd2ac350d9f44341c987f18813531c641ac3fb7536e2e4ab253cd33fa1f255cb6084f8a00ea40af88860e689dd3f37f7bf7503bf39795a4809f6ae1f7b177f9a22c8b1ee7da61969581305dd72379c83d947a2ad465d5d75ea02de58ade4f17fd752d7a12392151313b6d7f26d84fa361bd775ae7dfe05f9f7f46e0d18af94b8350b29fec0903d178b68cfa0d87828a9873901a85490d890d5e6d6de2a2a575e137d0e6f9b0424f64462a4eace63889d328e94e2769118788ad10b1ecf95d781e920a298203ea48a61f9ca0cfc2b92bebb13b8074b3c1dd623ff22ff410192e8088a761a706a488964f1c95d1f1775a4f30136a28d8f71b1e8478c81c9a11ade9c055ff9fd67e08dbab40358d5e383bb46fd7656402f59104d986442af76ff9e196ed60fe512cefe83052cdb1771850167c96e38f92a0c57cc396600f52b5a7a36cf5e516e76af92267f41c97b8235e35b6a092a5b86ef0c14dfc458942d89c544c4bd4105e83f6a77f4a8034ddd5dcbbd88e94ef406f5b505259780cac8050b80f027787833883dc3540bbeb831d309e5f9b750258e2310d73cef7a116ea1201b0b6d3b4b9bebfed5e710c5d8ef822c68b7501c8436ddadd66c3532edd60c696524e4163983d36e3319307e27adca234a4d80f5ddb83fb649678b72bda54a7ccba89673e170b936a1e5f5ec66083e26dc47d2051554f9217d7c19cd64d1b537545945818c48bb11becda433edd084faae7748ffabd5ba427a5c7c780a37bb998e8a542247fd0301aba24b482b2588f7326961e23d9cd10e4e283bdcc612985f679089e96c70c42f4d043436bebd43f70da1b15a0a3b1b70d7d8f94407d144120d1ebbe31e9fc7b9940568d8abb092a388403af323e99464a64b3449f6a3a9bd4fb628f7f2fffe7e16ebaf75c002bfc48183b060f1d27b9234717387d637ccf5d196e735f63ff87c24dc1a62b2aef27b67bdb8b498a810d600b43fbdaaca6f5a7e3f5973af9a49f063ae5ea3b6e70c2841dbd261153f7ccb62a227482dbb65002f744b41861bcfca1f190763eae54ed1b5cc51eb03b9018e1d77c41f17be6752a4ebb66e0a394b3d842167e731ec6ee8c6e93bbb12a5c146e3caeb73c8c5516d1a5010683d4f5f1c3b446879a39cf677ad47929f5e64d42601cda28d4abe0e9081a983d14d8525350018855af43bb68b609e321779dd22ac76da86fed7d89ce0fc6c9aafc1eac9d625da31cf288b8c8b0f8474fc1377af1551f947174eaa4eac115f4f1f06f1e7176ad2264bba7ba51087beef2222fe56cbb77ceca4a01b7cf594dfd41ed7a165a112763aef090b1a2760dbc142bce64c0c5be834ae903b73373f25febd9dd71288cba9b78d9b07952de2688e4e79a54f4f16fb2f296bbbf38c1868544b949e7d401f6d61df7a01c54bfae7c471cfaa2ba7070e9318d28c056add23089c86eeb7d7752e3d9d0e99ead009f4083ba5e7e621a9ba5454bd3d56d30caa00753fe613f5601448132093e99cba9b46ed217d06a983c6b7261eed18c11f43ba7310179b750cf6ba089689e4ead854af982646a7a3b219e5e92ca9730be5a61fbe5f34efe17a1b0d73ce5cd24a57446b45857c2c4332a1523b07e3241b1663a6bbfa16795ab89d42733dd7a2811573428dbbd700363fa5afec5e53db0ca011a85b92e72ea4cfebb3ab62e3128997453ade5af2123c7a0bbb42c04e1d28461bbedfe2839fe012c3c1e05e22dffb77791921a7313cb9d3fff2ae3144c5e5e40b60804d7823653bc570ef2b2b80740fc9c9461e1031b1b193f5371747f697e2e11cbbb0c7265084217145c7c4076d2795d8a04497c5b88bb5ebe8677ef469106368b7d5efd84ad0075d0a3cc96698afdf0b16b5bbb17597875c76cf8694181006dccc09f04725c28a2aa20b6dbfce8e702fbd2d11a5b9edd015d1c7fddb88d68fc3b9d271832bc4190017d69a9139f520623263207bd3ab668ed63920caed9b68ada995e49868889a1bf6d8fd5bd163a9030420ce3d7a285a2a8c314b68242b98448f13e10d004ec400a32815df3caad3282139b494a57e55ea8a83ffc40ef632f5fbc923c83817abdbe3cd4dda2dacbb17d2579199f1da5ada0f8badcef15bc7981f138f49a68bf94bad29d6554ca3d42e827fa444dae22769100aa7211454e4e8a1e883b14327ec83fe42326e5673a324d8a2fcd48138b9cf01813afc479226537578571f9061434386effdabd6d29eb1e25c253eee460030c9c62f557f01032aa0b432fbd1e2f866d77795d28effd577ac7634984e3455a3fc2e11d79cf1960db6ace5e81be72b6e246bb2cee57ddecb69a0b9932de5186ebd552c6e9ee3f596a1187616dbe7f47aaf6a22bd8589e156ce269c8d1b2f40c039e3f0bf7a151d1d131cbc444a71e363c11615354078da316bd6bb84bf1934ad2c4d9c21c4e2ca91885628960ec08bc9b8e7564a1c5361777a78f667fbda6ae7e2c7f269f091537711e9d0ec518f1ccd17e62d2ee4649d5554f713c5894c3be6aa0005e2f65e4b30c06aad4814c695d3ccf41c31b85a8ec34293fac02c4fe22e434d605ab5723283065c41dde645fa992d24603673c0ab47fba7b411f38f54f174cbb4e28fe2321eff5b808a79b3b6ef5cf547a46548ca4948b0e6e3ad64d72f7e1e6d2cb5701b9028739d851c70a69b6ac1357ffe32ca37524e719d73d1d313d5a25f1bde48e696a058790463354323aa86bbc51d7eef0c4b5dc9ebad62436a4a36fe3acd8b65ae5fbf6ec14fa65ae2cca6a2be4eeb45db4a24c275311b86b52abff19e0cd03c9303dc5ae649d9194b83c7ded516e545fcf4a8d1fb41754f6202d9b144e584000b0d5f115ff095f560bfe022c4cc9a945897e0264b15acbaa9fe634e515a7ca92c68360413144d4cdf0fbfdf428dc9866d6975fe53c669b02056cbb92b27ea4f8a8c665c32d7d82bc6fc91278e07708904db98f633b741200924dbf351913b59cb5b8af15b9deddb011b4a2101866410b59ea39f5a6ca11dc7fa04165bf849306b31cc62290b9ae7d672b08dc49f5894f43225471fbdd53fa71ca4bd7c11248640afaa6e01ffb7145a02d24d36ed7cfac8f2c597674a64660deadadc3ac620a890c17d589acea6c91be1df088d39a20311249457bdf6a5495610de7e3fb0e4f8fb87300ddd5d5c89ab20dc8dd71cea9ba534bc6f87cc6247d7a0b0357cb90c7be6156bbface235effecc249637cec6dace31a9ec2d8f30562e43b09f9dd9eab7a874532471bdf80f7bbf14998fca34ae140324bac42d48fb792cabe0a424585b0ec3920b0d1352336907ad15d57e8962ca0283cd570c41bf0d8eeefa181f5ae79bedac8547c2d30e38f0510ad7b62e90aec26e507aa7d8d38501202d175fd294d11f4cebb3210274eabb1635cfb5860c73ff2c8c8f78eec92b24d20a4336d1dc9b5174032e64b86f6dcc7cdb313dbd6c81e764bb619153a88925b7b5dd19209bf9247350111b0053c202317e42829069f141a76106ffa6d647394f0bbdfd55332c85c219742d9c40b417465d7d727a1c4a49f9cd81af306f5f4d80f86b2002803bfeadc0d3bd1086f25e5b7552faa918c743de576c0f269f3a34ca5f63c233753a8d9f6b3cd3e91223d5e66fed881ec502cd36c9558c44ae3a3ab1b3a55f06c8b1f05d0a049d46937f400a81f6896a5550b7958d4d8262b43542b9f2fb5a7e956f2913e2bded02a17fed", @nested={0x4, 0xf9}, @nested={0x4, 0x108}, @nested={0x4, 0x28}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x119}]}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r0}, @nested={0xa3, 0x14c, 0x0, 0x1, [@typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x135, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x97}, @typed={0x4, 0x112}, @typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@remote}, @generic="3022f256e4015e190ed5fbf4858877efbf27228364fce943fc9826fbc74a33495b6912a11b020a4b7df32e9bda54fb458fb9da11d93406012c0e7aa230af198c20e04db12ae778d1068314efe652a7300b8be520a24a7c18ccdd957b81a6a378cbe8207bd125fa"]}]}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}]}, 0x127c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080) r8 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto_configfs_file_operations_configfs_internal(r8, &(0x7f0000000140)="8e", 0x1) io_uring_register$auto(r4, 0x15, 0x0, 0x9) ioctl$auto_NVRAM_SETCKS(r3, 0x7041, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) read$auto(0xffffffffffffffff, 0x0, 0x20) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto(0x3, 0x50434903, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) unshare$auto(0x40000080) 7.930658188s ago: executing program 0 (id=232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 7.737442301s ago: executing program 1 (id=224): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, r0}) ioperm$auto(0x7, 0x1, 0x7) modify_ldt$auto(0x1, 0x0, 0x10) ioperm$auto(0x7, 0x6, 0x2) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x2, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x26, 0xa, 0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000092b0f58b30a9af58e298f7b447c30d83a63463c9bb0526019f50cde4", @ANYBLOB="100025bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="080039000700000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity$auto(r2, 0x4, &(0x7f0000000240)=0x6) prctl$auto(0x6, 0x2, r2, 0x4, 0xd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close_range$auto(r1, 0xa, 0x0) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r6, &(0x7f0000000200)="a597d9ce6359203d", 0x8) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 7.652053941s ago: executing program 2 (id=226): exit$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) read$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) mremap$auto(0x8, 0x67, 0x400000000000000, 0xb, 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6a3, 0x15) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) 6.390829186s ago: executing program 2 (id=227): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000180)="4fd10b254dee0cf2b68bb0df9d57ffcf64c7fb663da76b8fde32b55d5cb500f47ce9456c71ebf4ea4c9398b1514a63a174b049eb1482a7995339a589d9e36613ee1ada4e2bb730a5b4046b5614e8527ba5bf4b7824997a84e87aec6edce7b11677ffac508d1d34202b40cb3fbdb715c336b85872efbd54d4197a233f34e246beda8d269b0644f817ed3e0740962dd1aeefe633c211894cf952a76cafc079d9f640d3805b308bfe43df497b48de7688ffb2ed1e8e0a3bb8688b77d1d02c36d4c188dd77cae76210fae4ef43b98c3ed5c1f8a11aff22deed73c0bd59bf5b9eecbb046f21fb4119f7133557ec6a930c68aefe2118703d87473c") write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0xa2d02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) ioctl$auto_PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0xb, &(0x7f0000000040)={0x5, 0x4d, 0x2a}}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) 6.152680657s ago: executing program 3 (id=228): fcntl$auto(0xffffffffffffffff, 0x80000000, 0x1) r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap$auto(0x0, 0x88f, 0xffff, 0x9b72, r0, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x2001, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x40000, 0x0) read$auto(r2, 0x0, 0x100000000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x900, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) iopl$auto(0x2) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) syslog$auto(0x3, 0x0, 0x5) r5 = set_tid_address$auto(0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000080)) mmap$auto(0x9, 0x400008, 0x43, 0x9b72, 0x2, 0x38f8d54d) getdents$auto(r6, 0x0, 0x3f1) 5.228403903s ago: executing program 3 (id=229): exit$auto(0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r3}, 0x36) read$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) mremap$auto(0x8, 0x67, 0x400000000000000, 0xb, 0x7) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdb"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6a3, 0x15) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) 5.135582273s ago: executing program 0 (id=230): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/tracing/error_log\x00', 0x603, 0x0) socketcall$auto(0x37, &(0x7f0000000080)=0x3) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = signalfd$auto(0xffffffff, 0x0, 0x8) fchown$auto(r1, 0x0, 0x0) flock$auto(r0, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) 5.022712312s ago: executing program 1 (id=231): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, r0}) ioperm$auto(0x7, 0x1, 0x7) modify_ldt$auto(0x1, 0x0, 0x10) ioperm$auto(0x7, 0x6, 0x2) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x2, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x26, 0xa, 0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000092b0f58b30a9af58e298f7b447c30d83a63463c9bb0526019f50cde4428cdc6e", @ANYBLOB="100025bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="080039000700000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity$auto(r2, 0x4, &(0x7f0000000240)=0x6) prctl$auto(0x6, 0x2, r2, 0x4, 0xd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close_range$auto(r1, 0xa, 0x0) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r6, &(0x7f0000000200)="a597d9ce6359203d", 0x8) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 3.897848352s ago: executing program 3 (id=233): r0 = socket(0xa, 0x3, 0x36) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(r1, &(0x7f0000000240)='5\x00\\\x1cj\xf0\xa4\x9cje\xdc\"F\x12', 0x81) capset$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) syz_clone3(&(0x7f0000000500)={0x200248400, &(0x7f0000000200), &(0x7f0000000240), 0x0, {}, &(0x7f00000002c0)=""/111, 0x6f, &(0x7f0000000340)=""/236, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x98) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) 3.742261089s ago: executing program 0 (id=234): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) socket(0x10, 0x2, 0x0) memfd_secret$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) lseek$auto(r2, 0xffffffffffffffff, 0x1) write$auto(r1, 0x0, 0x98c7) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x6) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) 3.730814311s ago: executing program 1 (id=235): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, r0, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) ppoll$auto(&(0x7f0000000140)={r0, 0x4, 0xb}, 0x7f, 0x0, 0x0, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="82", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf250400000005000b002e000000"], 0x1c}}, 0x4044820) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x5, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() mlockall$auto(0x5) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSDEBUG(r3, 0x40047440, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 3.139674331s ago: executing program 2 (id=236): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) 2.541613533s ago: executing program 0 (id=237): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r0, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}}, 0x3, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x1020009, 0x20004000000000df, 0xeb1, r1, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty34\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r3, 0x80dc5521, r2) semctl$auto_GETNCNT(0x0, 0x0, 0xe, 0xa8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x2a, 0x2, 0x0) ioctl$auto(r4, 0x8912, 0x38) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x100110d, 0xffff, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x8}, 0x6, 0x0, 0x4, @inferred, @integer64={0x6, 0x4, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) mmap$auto(0x800000000000001, 0x8020006, 0x4000000002df, 0xeb1, r2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r1) 2.540908312s ago: executing program 3 (id=238): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2eb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = open(0x0, 0x22240, 0x154) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) ioctl$auto(r5, 0x80885659, r5) writev$auto(r4, 0x0, 0x9) fcntl$auto(r3, 0xfffffffd, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r7, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) 1.444040229s ago: executing program 3 (id=239): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x668, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x639, 0x33, "afa6e0335f4a2c0c9b03ed037529ed1f8c19df0534c0c618363857d371dfe3575f074ed09281c32a0f2392027bee6d0506bdc9f52f16c9cddce2ee2bf411b5c37071c69297cbc252870e10ae089076ebd6ce5e42336573f7457224fb6e4d5cbc4b2847351ae8b9723b261b5876aa693b1f99786a8aff10d220aadda3c7f68a53903dbf2891b524fb9d9f1935f6873af22229e32a71276fac61cfbb99a0e9896735a111f46a73d9141b874444d253c3bcc98c2eddc451cb222af5ff8bdf0222e89524e44e1550d57f65061818b2e64ed23cbadd4cd35c4e675a6c76c93487649d5e120e876eef7d33bda62ec8ff4194ac957e81ef9aea0f96d44b4d7d28d0a90f3f3f1ab2302188a33eba4baeb8a36328ff04c2f77de5f5c1a202b358ced0d7ea41158c3745dc867e377ecadeccfcd5b8b519bef4dabe08dc5d923fb1a0bcfb63eb4c8e2143c4d2132e5e9c82712afab78723dc43d092eeb8a1bf619dd7d7c27b9785b953d4506d0d5207f3e8b76284b7749045ca2b5f062013c53f35be3e4489a1b8e3232314c86fbe18a58751f0b58219c53c1907daa47745badd8947431a66134913519262c65969aae0a78e040810ad130354b65c729754e9af226114904d39c5b24eaf02702067fdae7ae01c7fb58aa834b3d815caabb1761ba0d83cf8d53502a268b63fc3501fb67ded5c1b1482367ee4f5214303dc652abe046ce1abf20a3f49e1036026d77c132d332e98878ea17bd994e882becd6fc52d9fd91260ef25c204390f2c88c9e8cccd2d3f51bb9a93f0765f02dd8422bd3715b1205811f72ef91397fd5ab58f60cd10542ef3fa257e6cb0c311287b1af50dac0fb5614eaa5e67563c8efd9e89bb8fc2d7c6c4f64e95768bed149a69a345aadb64c89bb9e4bec361d74bef891543a5c8ba242c434b476bad123aece2a552ad43999907b425f4df57d3e4ca2c2b865568e619be2ef134718b47b6055a0bcc8ea64ff4ebc05339f5481e3c6fceadbd6f4126ccca4fb0e6b2303c4ec0d591cb45a076706a700ff34ad1c569fd11674bcbab1228132f1bfe192d138f25ec2520da501ed6e583492447734f69fa581e64a96f90582f9d757e391c0d33ce8250cc7c9e0d3651801cb285c9eee5bd0224d388dddf8527e49ca9030fd7955e93e3365f9602b4a4ef1aaca177e44e7f1142c8ec0015f2b505a775afe9ae820df18adaad4b3924d8033965991fe1e59acbbad440bc64b3198a4eae215fd32283be418b6ee791a89eaf386422aed1ca9a18a0220f88a7609d536ffd7db73c9654cbe7a7835668771f8f2f98d58cf1d60cff1004ee2fb4c394bf3b48d0232866d382ceeae8f340bddb3ac677edc560982312ac13bf765db179a235e47ec0747d428fe273fda500641154f168cad55351172f93a970ccf26626ec89d52f64d89f0d7456212854f35542794264126abf75567f56cf0081de22def6305d279b2aabdb91ac0813ccd0a4e87dd63b3188cc10a3eee94e7af67e2ab5070bc5e639a204af69b49aef29b61c7efd1a9f4b6bc51659aeb399b34cf21dc827259991979828515c776d86f06cf69ea710e6be91ec0ea9e46e9d08e07ad2ab67a4b43e2d0763a4673a8002df95761309b011b25a6effab4da60e599c27e263394328da81b0af4ebcd6d838c1a9ff729482681115b4964be42bb4b8d8855c71450e9c48999e195227f41eb0fde516123e1da39f0db125045c3e5dadbfba05b329cf3d02dbd9fa01c75856ee233ef96b5e61f845560c640758d3883bb7ca2da85c9c5c15dc0f4033bc8140ec0965f91a4be0692c0348a3cc38fbac8a0e6db18433aeb3f05921c5cf614be4754f76c9e3323026a646d89a7a894e1b493a999af49864886b6ed68ce635ba2eeff167e99ac5fa5696aca29f1517b47f460151ca4b9afb34cc5ffbeb037ece8de9d223d8a1124b6c0ce000928070c021dc17499c9313264903ccc5ba90f9b0eb3c1617cb53c8192a7e2d12c566c83ac35ee265bd5bafb2b3208af0cc938e8306a45b50ccd17ee5e59fbfcf30c09185c2d84db35e05190a3251c097c288d5bfd800f2fc5e60aaaaa7bb297e39e40dfc35da14b1ffa060ed3f02722f35e345e7ad453e6758b5ec8ef2ebd3a57413a1ea68df9684dc4dda5bdeaf81ec602fee0057dfa42fe9bcd7f571e906b31c4044c07070a0cdfab85594b18c54691b269a23e39fcbcb48eb4aab9b7950f145d87c750a5bd301ef6c1816aee61ac31b"}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x9}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}]}, 0x668}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) userfaultfd$auto(0x1) socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x406040, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000240)={r1, 0x0, 0xd7, 0x6, 0x401, 0x0, [0x7, 0x2, 0x9, 0x2b, 0x9, 0x10]}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) 379.755455ms ago: executing program 2 (id=240): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x9, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x25c000, 0x14) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 378.583901ms ago: executing program 0 (id=248): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, r0}) ioperm$auto(0x7, 0x1, 0x7) modify_ldt$auto(0x1, 0x0, 0x10) ioperm$auto(0x7, 0x6, 0x2) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x2, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x26, 0xa, 0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000092b0f58b30a9af58e298f7b447c30d83a63463c9bb0526019f50cde4428c", @ANYBLOB="100025bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="080039000700000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity$auto(r2, 0x4, &(0x7f0000000240)=0x6) prctl$auto(0x6, 0x2, r2, 0x4, 0xd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close_range$auto(r1, 0xa, 0x0) r6 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r6, &(0x7f0000000200)="a597d9ce6359203d", 0x8) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 362.513917ms ago: executing program 1 (id=241): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r2, 0x0, 0x4000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x90600, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x301802, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) ioctl$auto_TCFLSH2(r4, 0x8924, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYBLOB="010628bd7000fedbcf25040000001c00018015000900ef6735f5058af96b26651160dfbb140872000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x11, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff25be, 0x0, 0x23c, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x1e, 0x2, 0x0) 0s ago: executing program 3 (id=242): socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x135281, 0x0) socket(0xa, 0x5, 0x3) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="13ffffdecaf15512845237709703908ea4203884fed9ba9b4160e99b38e7773cfc57871f664ebcc5a93703bab10fa7ef41c4eabc8fd5a3e6d2790c906827b55043560c510c442a0283a1ef8249ec541e378c032d920c026b633287777e71280dc1fbf2eefb9f11d59006e19ebc3d5fd26a84ccd5de260c9f37942e0ef86ccbcd6564de0b0aadd6d2c560f584a8134066a360d36b0155bbe5ab6f6bb7610043ca0d2a6e7fcb6afaabfd8c71618663035444d396b5f5f259037f2967be015b2d92c6dafc464a0f381432c62634636678f226dd9bf8dcaff9da48d7f9f79cf44db1947c58abc7ce24baefd1090363875bed26aaf0498de20321eca438b493cf073a41582f1ab5a0a111d59443c392f968b4040cd2c6fc812f777250b00192783d", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2565000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x48050) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x16, 0x46) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x51, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101a81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x200, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8, 0x7, 0x400006d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0xffffffffffffffff, 0x57, r1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getpid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. syzkaller login: [ 97.580444][ T5834] cgroup: Unknown subsys name 'net' [ 97.719937][ T5834] cgroup: Unknown subsys name 'cpuset' [ 97.730643][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.713785][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.131502][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.147233][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.155587][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.164594][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.174183][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.197188][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.215095][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.230413][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.238218][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.242482][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.246276][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.255883][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.262977][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.269113][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.276366][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.283625][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.293329][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.296285][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.303322][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.325090][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.863135][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 102.935322][ T93] cfg80211: failed to load regulatory.db [ 103.079887][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 103.240876][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.248743][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.257553][ T5844] bridge_slave_0: entered allmulticast mode [ 103.266371][ T5844] bridge_slave_0: entered promiscuous mode [ 103.275859][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 103.301182][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.308689][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.316530][ T5844] bridge_slave_1: entered allmulticast mode [ 103.324944][ T5844] bridge_slave_1: entered promiscuous mode [ 103.367360][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 103.423378][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.472918][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.480393][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.488300][ T5845] bridge_slave_0: entered allmulticast mode [ 103.496700][ T5845] bridge_slave_0: entered promiscuous mode [ 103.507683][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.553322][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.560809][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.568846][ T5845] bridge_slave_1: entered allmulticast mode [ 103.577370][ T5845] bridge_slave_1: entered promiscuous mode [ 103.642366][ T5844] team0: Port device team_slave_0 added [ 103.693599][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.705300][ T5844] team0: Port device team_slave_1 added [ 103.739319][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.746879][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.754270][ T5843] bridge_slave_0: entered allmulticast mode [ 103.762325][ T5843] bridge_slave_0: entered promiscuous mode [ 103.774919][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.814880][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.822313][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.830566][ T5843] bridge_slave_1: entered allmulticast mode [ 103.838629][ T5843] bridge_slave_1: entered promiscuous mode [ 103.894012][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.901434][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.909187][ T5848] bridge_slave_0: entered allmulticast mode [ 103.918099][ T5848] bridge_slave_0: entered promiscuous mode [ 103.943618][ T5845] team0: Port device team_slave_0 added [ 103.951288][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.958537][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.985883][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.998714][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.006028][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.013248][ T5848] bridge_slave_1: entered allmulticast mode [ 104.021486][ T5848] bridge_slave_1: entered promiscuous mode [ 104.046067][ T5845] team0: Port device team_slave_1 added [ 104.052911][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.060266][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.086786][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.115706][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.165717][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.213919][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.240331][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.247675][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.275220][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.303176][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.316463][ T5843] team0: Port device team_slave_0 added [ 104.323318][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.330658][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.356831][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.368848][ T5852] Bluetooth: hci2: command tx timeout [ 104.374713][ T5168] Bluetooth: hci0: command tx timeout [ 104.374728][ T51] Bluetooth: hci1: command tx timeout [ 104.374973][ T51] Bluetooth: hci3: command tx timeout [ 104.426003][ T5843] team0: Port device team_slave_1 added [ 104.448106][ T5844] hsr_slave_0: entered promiscuous mode [ 104.455224][ T5844] hsr_slave_1: entered promiscuous mode [ 104.508871][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.516801][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.544810][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.559827][ T5848] team0: Port device team_slave_0 added [ 104.570509][ T5848] team0: Port device team_slave_1 added [ 104.578473][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.585534][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.611680][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.745629][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.752804][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.780282][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.799859][ T5845] hsr_slave_0: entered promiscuous mode [ 104.806510][ T5845] hsr_slave_1: entered promiscuous mode [ 104.812680][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.821079][ T5845] Cannot create hsr debugfs directory [ 104.865432][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.872556][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.899811][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.943061][ T5843] hsr_slave_0: entered promiscuous mode [ 104.949771][ T5843] hsr_slave_1: entered promiscuous mode [ 104.957350][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.965380][ T5843] Cannot create hsr debugfs directory [ 105.155450][ T5848] hsr_slave_0: entered promiscuous mode [ 105.162026][ T5848] hsr_slave_1: entered promiscuous mode [ 105.169561][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.177390][ T5848] Cannot create hsr debugfs directory [ 105.530345][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.558543][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.569126][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.586724][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.659848][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.677736][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.710519][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.733468][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.783135][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.817236][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.853005][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.888549][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.949856][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.962203][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.995506][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.009165][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.183471][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.218796][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.266469][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.302369][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.309796][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.329683][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.350241][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.357960][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.388436][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.412921][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.437557][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.445112][ T51] Bluetooth: hci3: command tx timeout [ 106.448844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.457964][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.466381][ T5849] Bluetooth: hci0: command tx timeout [ 106.467989][ T5852] Bluetooth: hci1: command tx timeout [ 106.475032][ T51] Bluetooth: hci2: command tx timeout [ 106.514142][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.521400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.555950][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.570989][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.578232][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.606955][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.614497][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.625862][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.633123][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.709846][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.717132][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.002136][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.130764][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.283829][ T5844] veth0_vlan: entered promiscuous mode [ 107.339510][ T5844] veth1_vlan: entered promiscuous mode [ 107.440738][ T5844] veth0_macvtap: entered promiscuous mode [ 107.472112][ T5844] veth1_macvtap: entered promiscuous mode [ 107.521230][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.566941][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.583031][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.622240][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632210][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.642578][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.651962][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.672846][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.700829][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.741528][ T5845] veth0_vlan: entered promiscuous mode [ 107.786127][ T5845] veth1_vlan: entered promiscuous mode [ 107.917593][ T5843] veth0_vlan: entered promiscuous mode [ 107.926032][ T5848] veth0_vlan: entered promiscuous mode [ 107.942099][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.963705][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.971768][ T5848] veth1_vlan: entered promiscuous mode [ 107.998532][ T5845] veth0_macvtap: entered promiscuous mode [ 108.035355][ T4954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.044223][ T4954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.045866][ T5843] veth1_vlan: entered promiscuous mode [ 108.066961][ T5845] veth1_macvtap: entered promiscuous mode [ 108.121675][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.161612][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.193347][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.203460][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210420][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.235053][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.246422][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.263432][ T5843] veth0_macvtap: entered promiscuous mode [ 108.299801][ T5843] veth1_macvtap: entered promiscuous mode [ 108.309478][ T5848] veth0_macvtap: entered promiscuous mode [ 108.370781][ T5848] veth1_macvtap: entered promiscuous mode [ 108.456770][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.465292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.524918][ T5852] Bluetooth: hci1: command tx timeout [ 108.525152][ T5849] Bluetooth: hci0: command tx timeout [ 108.530595][ T5852] Bluetooth: hci3: command tx timeout [ 108.537612][ T51] Bluetooth: hci2: command tx timeout [ 108.576948][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.598159][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.685643][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.706996][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.727302][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.763230][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.782637][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.793749][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.806960][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.829092][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.840652][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.853137][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.872229][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.936099][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.961229][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.262700][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.314159][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.370170][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.401140][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.475412][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.493634][ T5947] Zero length message leads to an empty skb [ 109.500222][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.644948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.661912][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.687663][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.697908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.814018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.391888][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.504757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.513543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.605754][ T51] Bluetooth: hci2: command tx timeout [ 110.605791][ T5168] Bluetooth: hci1: command tx timeout [ 110.618029][ T5168] Bluetooth: hci3: command tx timeout [ 110.624448][ T5852] Bluetooth: hci0: command tx timeout [ 110.736513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.294833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.768997][ T5958] kexec: Could not allocate control_code_buffer [ 111.788949][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.964468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.170088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.373892][ T5976] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 112.409110][ T5964] syz.2.6 (5964) used greatest stack depth: 19784 bytes left [ 113.169360][ T5988] [U]  [ 113.172828][ T5988] [U] [ 113.175650][ T5988] [U] [ 113.178431][ T5988] [U] [ 113.202999][ T5988] [U] [ 113.205838][ T5988] [U] [ 113.208612][ T5988] [U] [ 113.211375][ T5988] [U] [ 113.243245][ T5988] [U] [ 113.246053][ T5988] [U] [ 113.248815][ T5988] [U] [ 113.251546][ T5988] [U] [ 113.262463][ T5988] [U] [ 113.265308][ T5988] [U] [ 113.268073][ T5988] [U] [ 113.270919][ T5988] [U] [ 113.277229][ T5988] [U] [ 113.280046][ T5988] [U] [ 113.282822][ T5988] [U] [ 113.285591][ T5988] [U] [ 113.313614][ T5988] [U] [ 113.316451][ T5988] [U] [ 113.319234][ T5988] [U] [ 113.322088][ T5988] [U] [ 113.384859][ T5988] [U] [ 113.387704][ T5988] [U] [ 113.390484][ T5988] [U] [ 113.393257][ T5988] [U] [ 113.529736][ T5988] [U] [ 113.532579][ T5988] [U] [ 113.535367][ T5988] [U] [ 113.538163][ T5988] [U] [ 113.547972][ T5988] [U] [ 113.550790][ T5988] [U] [ 113.553564][ T5988] [U] [ 113.556365][ T5988] [U] [ 113.605436][ T5988] [U] [ 113.608271][ T5988] [U] [ 113.611044][ T5988] [U] [ 113.613912][ T5988] [U] [ 113.640896][ T5988] [U] [ 113.643724][ T5988] [U] [ 113.646507][ T5988] [U] [ 113.649290][ T5988] [U] [ 113.653542][ T5988] [U] [ 113.656340][ T5988] [U] [ 113.659120][ T5988] [U] [ 113.661953][ T5988] [U] [ 113.671397][ T5988] [U] [ 113.674227][ T5988] [U] [ 113.677153][ T5988] [U] [ 113.680043][ T5988] [U] [ 113.683504][ T5988] [U] [ 113.686332][ T5988] [U] [ 113.689123][ T5988] [U] [ 113.691901][ T5988] [U] [ 113.710253][ T5988] [U] [ 113.713071][ T5988] [U] [ 113.715848][ T5988] [U] [ 113.718604][ T5988] [U] [ 113.737594][ T5988] [U] [ 113.740395][ T5988] [U] [ 113.743137][ T5988] [U] [ 113.745873][ T5988] [U] [ 113.751624][ T5988] [U] [ 113.754418][ T5988] [U] [ 113.757167][ T5988] [U] [ 113.759908][ T5988] [U] [ 113.771122][ T5988] [U] [ 113.773929][ T5988] [U] [ 113.776719][ T5988] [U] [ 113.779569][ T5988] [U] [ 113.783379][ T5988] [U] [ 113.786169][ T5988] [U] [ 113.788937][ T5988] [U] [ 113.791705][ T5988] [U] [ 113.794903][ T5988] [U] [ 113.797683][ T5988] [U] [ 113.800445][ T5988] [U] [ 113.803218][ T5988] [U] [ 113.811506][ T5988] [U] [ 113.814299][ T5988] [U] [ 113.817071][ T5988] [U] [ 113.819836][ T5988] [U] [ 113.823452][ T5988] [U] [ 113.826222][ T5988] [U] [ 113.829057][ T5988] [U] [ 113.831816][ T5988] [U] [ 113.835439][ T5988] [U] [ 113.838473][ T5988] [U] [ 113.841228][ T5988] [U] [ 113.843994][ T5988] [U] [ 113.855915][ T5998] ======================================================= [ 113.855915][ T5998] WARNING: The mand mount option has been deprecated and [ 113.855915][ T5998] and is ignored by this kernel. Remove the mand [ 113.855915][ T5998] option from the mount to silence this warning. [ 113.855915][ T5998] ======================================================= [ 113.904618][ T5988] [U] [ 113.907471][ T5988] [U] [ 113.910192][ T5988] [U] [ 113.912914][ T5988] [U] [ 114.002106][ T5988] [U] [ 114.004926][ T5988] [U] [ 114.007727][ T5988] [U] [ 114.010499][ T5988] [U] [ 114.063039][ T5988] [U] [ 114.065875][ T5988] [U] [ 114.068643][ T5988] [U] [ 114.071417][ T5988] [U] [ 114.084738][ T5988] [U] [ 114.087543][ T5988] [U] [ 114.090300][ T5988] [U] [ 114.093046][ T5988] [U] [ 114.132661][ T5988] [U] [ 114.135524][ T5988] [U] [ 114.138243][ T5988] [U] [ 114.140974][ T5988] [U] [ 114.372094][ T5988] [U] [ 114.374891][ T5988] [U] [ 114.377627][ T5988] [U] [ 114.380357][ T5988] [U] [ 114.428443][ T5988] [U] [ 114.431217][ T5988] [U] [ 114.433945][ T5988] [U] [ 114.436678][ T5988] [U] [ 114.596502][ T5988] [U] [ 114.599329][ T5988] [U] [ 114.602089][ T5988] [U] [ 114.604852][ T5988] [U] [ 114.615942][ T5988] [U] [ 114.618763][ T5988] [U] [ 114.621526][ T5988] [U] [ 114.634789][ T5988] [U] [ 115.359496][ T6007] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 115.386534][ T6007] FAULT_INJECTION: forcing a failure. [ 115.386534][ T6007] name failslab, interval 1, probability 0, space 0, times 1 [ 115.421224][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.3.15 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 115.421279][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.421303][ T6007] Call Trace: [ 115.421314][ T6007] [ 115.421331][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 115.421373][ T6007] should_fail_ex+0x512/0x640 [ 115.421406][ T6007] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 115.421445][ T6007] should_failslab+0xc2/0x120 [ 115.421483][ T6007] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.421517][ T6007] ? __kernfs_new_node+0xd2/0x8e0 [ 115.421576][ T6007] __kernfs_new_node+0xd2/0x8e0 [ 115.421635][ T6007] ? __pfx___kernfs_new_node+0x10/0x10 [ 115.421698][ T6007] ? find_held_lock+0x2b/0x80 [ 115.421735][ T6007] ? kernfs_root+0xee/0x2a0 [ 115.421773][ T6007] kernfs_new_node+0x13c/0x1e0 [ 115.421817][ T6007] kernfs_create_dir_ns+0x4c/0x1a0 [ 115.421858][ T6007] internal_create_group+0x34d/0xf30 [ 115.421898][ T6007] ? kernfs_add_one+0x14e/0x840 [ 115.421932][ T6007] ? __pfx_internal_create_group+0x10/0x10 [ 115.421970][ T6007] ? __pfx_dev_add_physical_location+0x10/0x10 [ 115.422009][ T6007] ? bus_to_subsys+0x131/0x160 [ 115.422061][ T6007] dpm_sysfs_add+0x80/0x280 [ 115.422104][ T6007] device_add+0x9a6/0x1a70 [ 115.422149][ T6007] ? __pfx_device_add+0x10/0x10 [ 115.422188][ T6007] ? __pfx_exact_lock+0x10/0x10 [ 115.422230][ T6007] ? kobject_get+0xbb/0x150 [ 115.422278][ T6007] cdev_device_add+0xc2/0x1e0 [ 115.422314][ T6007] evdev_connect+0x3a4/0x4c0 [ 115.422352][ T6007] input_attach_handler.isra.0+0x181/0x260 [ 115.422415][ T6007] input_register_device+0xa84/0x1130 [ 115.422469][ T6007] ? input_ff_create+0x256/0x350 [ 115.422516][ T6007] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 115.422567][ T6007] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 115.422623][ T6007] ? find_held_lock+0x2b/0x80 [ 115.422681][ T6007] ? __pfx_uinput_ioctl+0x10/0x10 [ 115.422724][ T6007] __x64_sys_ioctl+0x18e/0x210 [ 115.422777][ T6007] do_syscall_64+0xcd/0x490 [ 115.422816][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.422851][ T6007] RIP: 0033:0x7fd4de78e9a9 [ 115.422887][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.422921][ T6007] RSP: 002b:00007fd4df6dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.422953][ T6007] RAX: ffffffffffffffda RBX: 00007fd4de9b5fa0 RCX: 00007fd4de78e9a9 [ 115.422974][ T6007] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 115.422993][ T6007] RBP: 00007fd4de810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 115.423012][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.423031][ T6007] R13: 0000000000000000 R14: 00007fd4de9b5fa0 R15: 00007ffc3e109fc8 [ 115.423074][ T6007] [ 115.828808][ T6007] input: failed to attach handler evdev to device input5, error: -12 [ 116.170011][ T6017] random: crng reseeded on system resumption [ 116.401051][ T6015] usbip-vudc usbip-vudc.0: gadget not bound [ 117.598886][ T30] audit: type=1800 audit(1752844562.671:2): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21" name="dbroot" dev="configfs" ino=6091 res=0 errno=0 [ 118.863222][ T6043] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.982893][ T6026] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 119.066249][ T6026] netlink: zone id is out of range [ 119.267375][ T6051] netlink: 338 bytes leftover after parsing attributes in process `syz.0.26'. [ 119.418432][ T6051] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 121.224170][ T6066] mmap: syz.0.28 (6066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.191745][ T6118] FAULT_INJECTION: forcing a failure. [ 125.191745][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 125.217296][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.1.37 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 125.217346][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.217372][ T6118] Call Trace: [ 125.217384][ T6118] [ 125.217398][ T6118] dump_stack_lvl+0x16c/0x1f0 [ 125.217440][ T6118] should_fail_ex+0x512/0x640 [ 125.217475][ T6118] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 125.217536][ T6118] should_failslab+0xc2/0x120 [ 125.217576][ T6118] __kmalloc_cache_noprof+0x6a/0x3e0 [ 125.217628][ T6118] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 125.217668][ T6118] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 125.217716][ T6118] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 125.217773][ T6118] drm_atomic_helper_commit+0xa9/0x380 [ 125.217816][ T6118] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 125.217855][ T6118] drm_atomic_commit+0x231/0x300 [ 125.217900][ T6118] ? __pfx_drm_atomic_commit+0x10/0x10 [ 125.217943][ T6118] ? __pfx___drm_printfn_info+0x10/0x10 [ 125.217994][ T6118] ? drm_client_rotation+0x4da/0x6a0 [ 125.218035][ T6118] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 125.218110][ T6118] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 125.218191][ T6118] drm_client_modeset_commit_locked+0x14d/0x580 [ 125.218238][ T6118] drm_client_modeset_commit+0x4f/0x80 [ 125.218278][ T6118] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 125.218317][ T6118] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 125.218366][ T6118] drm_fbdev_client_restore+0x2c/0x40 [ 125.218410][ T6118] drm_client_dev_restore+0x1f3/0x2a0 [ 125.218456][ T6118] drm_release+0x2c4/0x360 [ 125.218502][ T6118] ? __pfx_drm_release+0x10/0x10 [ 125.218536][ T6118] __fput+0x402/0xb70 [ 125.218581][ T6118] task_work_run+0x150/0x240 [ 125.218632][ T6118] ? __pfx_task_work_run+0x10/0x10 [ 125.218676][ T6118] ? __pfx___do_sys_close_range+0x10/0x10 [ 125.218715][ T6118] exit_to_user_mode_loop+0xeb/0x110 [ 125.218764][ T6118] do_syscall_64+0x3f6/0x490 [ 125.218795][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.218823][ T6118] RIP: 0033:0x7f1020d8e9a9 [ 125.218846][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.218891][ T6118] RSP: 002b:00007f1021bee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 125.218920][ T6118] RAX: 0000000000000000 RBX: 00007f1020fb5fa0 RCX: 00007f1020d8e9a9 [ 125.218938][ T6118] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 125.218954][ T6118] RBP: 00007f1020e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 125.218972][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.218989][ T6118] R13: 0000000000000000 R14: 00007f1020fb5fa0 R15: 00007fff66935a88 [ 125.219026][ T6118] [ 129.132150][ T6160] FAULT_INJECTION: forcing a failure. [ 129.132150][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 129.157785][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.0.45 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 129.157824][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.157840][ T6160] Call Trace: [ 129.157848][ T6160] [ 129.157860][ T6160] dump_stack_lvl+0x16c/0x1f0 [ 129.157892][ T6160] should_fail_ex+0x512/0x640 [ 129.157927][ T6160] should_failslab+0xc2/0x120 [ 129.157965][ T6160] __kmalloc_cache_noprof+0x6a/0x3e0 [ 129.158004][ T6160] ? __pfx_sctp_get_port_local+0x10/0x10 [ 129.158106][ T6160] ? sctp_bind_addr_match+0x193/0x300 [ 129.158128][ T6160] ? sctp_add_bind_addr+0xae/0x3f0 [ 129.158176][ T6160] sctp_add_bind_addr+0xae/0x3f0 [ 129.158220][ T6160] sctp_do_bind+0x2d6/0x700 [ 129.158258][ T6160] sctp_connect_new_asoc+0x5fd/0x790 [ 129.158295][ T6160] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 129.158335][ T6160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.158377][ T6160] ? sctp_get_af_specific+0x62/0x70 [ 129.158408][ T6160] __sctp_connect+0x3f3/0xc60 [ 129.158445][ T6160] ? do_raw_spin_lock+0x12c/0x2b0 [ 129.158488][ T6160] ? __pfx___sctp_connect+0x10/0x10 [ 129.158524][ T6160] ? __pfx_sctp_inet_connect+0x10/0x10 [ 129.158559][ T6160] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.158600][ T6160] ? __pfx_sctp_inet_connect+0x10/0x10 [ 129.158632][ T6160] sctp_inet_connect+0x15f/0x200 [ 129.158668][ T6160] __sys_connect_file+0x13e/0x1a0 [ 129.158712][ T6160] __sys_connect+0x13b/0x160 [ 129.158755][ T6160] ? __pfx___sys_connect+0x10/0x10 [ 129.158818][ T6160] ? xfd_validate_state+0x61/0x180 [ 129.158855][ T6160] ? __pfx___do_sys_close_range+0x10/0x10 [ 129.158890][ T6160] __x64_sys_connect+0x72/0xb0 [ 129.158928][ T6160] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.158970][ T6160] do_syscall_64+0xcd/0x490 [ 129.158999][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.159025][ T6160] RIP: 0033:0x7f3da498e9a9 [ 129.159046][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.159070][ T6160] RSP: 002b:00007f3da57be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 129.159095][ T6160] RAX: ffffffffffffffda RBX: 00007f3da4bb5fa0 RCX: 00007f3da498e9a9 [ 129.159112][ T6160] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 129.159127][ T6160] RBP: 00007f3da4a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 129.159142][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.159156][ T6160] R13: 0000000000000000 R14: 00007f3da4bb5fa0 R15: 00007fff0bbbfa38 [ 129.159187][ T6160] [ 130.139955][ T6147] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 130.686741][ T6169] random: crng reseeded on system resumption [ 130.839433][ T6170] loop6: detected capacity change from 0 to 2097152 [ 132.172602][ T6182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 132.280240][ T6186] FAULT_INJECTION: forcing a failure. [ 132.280240][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 132.370068][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.3.52 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 132.370117][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.370137][ T6186] Call Trace: [ 132.370147][ T6186] [ 132.370159][ T6186] dump_stack_lvl+0x16c/0x1f0 [ 132.370201][ T6186] should_fail_ex+0x512/0x640 [ 132.370233][ T6186] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 132.370274][ T6186] should_failslab+0xc2/0x120 [ 132.370316][ T6186] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 132.370349][ T6186] ? dup_fd+0x6ac/0xb90 [ 132.370377][ T6186] ? copy_fs_struct+0x49/0x340 [ 132.370425][ T6186] copy_fs_struct+0x49/0x340 [ 132.370470][ T6186] copy_process+0x3219/0x7650 [ 132.370533][ T6186] ? __pfx___futex_wait+0x10/0x10 [ 132.370581][ T6186] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 132.370654][ T6186] ? __pfx_copy_process+0x10/0x10 [ 132.370702][ T6186] ? find_held_lock+0x2b/0x80 [ 132.370756][ T6186] kernel_clone+0xfc/0x960 [ 132.370803][ T6186] ? __pfx_kernel_clone+0x10/0x10 [ 132.370872][ T6186] __do_sys_clone+0xce/0x120 [ 132.370914][ T6186] ? __pfx___do_sys_clone+0x10/0x10 [ 132.370978][ T6186] ? xfd_validate_state+0x61/0x180 [ 132.371024][ T6186] ? __pfx_do_writev+0x10/0x10 [ 132.371090][ T6186] do_syscall_64+0xcd/0x490 [ 132.371127][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371162][ T6186] RIP: 0033:0x7fd4de78e9a9 [ 132.371190][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.371222][ T6186] RSP: 002b:00007fd4df6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 132.371255][ T6186] RAX: ffffffffffffffda RBX: 00007fd4de9b6080 RCX: 00007fd4de78e9a9 [ 132.371276][ T6186] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 132.371296][ T6186] RBP: 00007fd4de810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 132.371316][ T6186] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 132.371336][ T6186] R13: 0000000000000000 R14: 00007fd4de9b6080 R15: 00007ffc3e109fc8 [ 132.371379][ T6186] [ 132.745744][ T6187] process 'syz.3.52' launched '15 [ 132.745744][ T6187] ' with NULL argv: empty string added [ 136.332330][ T6224] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input6 [ 137.859575][ T6240] random: crng reseeded on system resumption [ 138.512754][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.555218][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.909643][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 139.532770][ T6262] netlink: 504 bytes leftover after parsing attributes in process `syz.0.67'. [ 139.550890][ T6262] netlink: 350 bytes leftover after parsing attributes in process `syz.0.67'. [ 140.471010][ T6276] FAULT_INJECTION: forcing a failure. [ 140.471010][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 140.555525][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.1.68 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 140.555573][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.555592][ T6276] Call Trace: [ 140.555603][ T6276] [ 140.555616][ T6276] dump_stack_lvl+0x16c/0x1f0 [ 140.555657][ T6276] should_fail_ex+0x512/0x640 [ 140.555691][ T6276] ? __kmalloc_noprof+0xbf/0x510 [ 140.555731][ T6276] ? mpi_alloc_limb_space+0x31/0x60 [ 140.555779][ T6276] should_failslab+0xc2/0x120 [ 140.555819][ T6276] __kmalloc_noprof+0xd2/0x510 [ 140.555863][ T6276] mpi_alloc_limb_space+0x31/0x60 [ 140.555910][ T6276] mpi_powm+0xff7/0x1bf0 [ 140.555977][ T6276] ? __pfx_mpi_powm+0x10/0x10 [ 140.556023][ T6276] ? kfree+0x2b4/0x4d0 [ 140.556071][ T6276] ? mpi_free+0xe1/0x160 [ 140.556123][ T6276] ? mpi_free+0xe1/0x160 [ 140.556174][ T6276] rsa_enc+0x1fe/0x3b0 [ 140.556212][ T6276] ? __pfx_rsa_enc+0x10/0x10 [ 140.556247][ T6276] ? __virt_addr_valid+0x81/0x610 [ 140.556283][ T6276] ? __phys_addr+0xe8/0x180 [ 140.556318][ T6276] ? sg_init_one+0xf5/0x1b0 [ 140.556398][ T6276] rsassa_pkcs1_verify+0x502/0xb60 [ 140.556456][ T6276] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 140.556532][ T6276] ? rsa_max_size+0xd/0x70 [ 140.556564][ T6276] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 140.556613][ T6276] public_key_verify_signature+0x66f/0x970 [ 140.556671][ T6276] ? __pfx_public_key_verify_signature+0x10/0x10 [ 140.556723][ T6276] ? crypto_destroy_tfm+0x14d/0x2b0 [ 140.556798][ T6276] pkcs7_verify+0x32f/0x1b20 [ 140.556847][ T6276] verify_pkcs7_message_sig+0xdd/0x250 [ 140.556894][ T6276] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 140.556938][ T6276] ? kfree+0x2b4/0x4d0 [ 140.556981][ T6276] ? public_key_signature_free+0xda/0x110 [ 140.557040][ T6276] ? pkcs7_parse_message+0x536/0x720 [ 140.557076][ T6276] verify_pkcs7_signature+0x6d/0xa0 [ 140.557125][ T6276] valid_regdb+0x215/0x590 [ 140.557165][ T6276] ? __pfx___mutex_lock+0x10/0x10 [ 140.557201][ T6276] ? __pfx_valid_regdb+0x10/0x10 [ 140.557250][ T6276] reg_reload_regdb+0x11e/0x460 [ 140.557303][ T6276] ? __pfx_reg_reload_regdb+0x10/0x10 [ 140.557349][ T6276] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.557388][ T6276] ? nl80211_pre_doit+0x1b0/0xb10 [ 140.557425][ T6276] genl_family_rcv_msg_doit+0x206/0x2f0 [ 140.557478][ T6276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.557522][ T6276] ? rcu_is_watching+0x12/0xc0 [ 140.557574][ T6276] ? bpf_lsm_capable+0x9/0x10 [ 140.557623][ T6276] ? security_capable+0x7e/0x260 [ 140.557674][ T6276] genl_rcv_msg+0x55c/0x800 [ 140.557725][ T6276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.557770][ T6276] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.557797][ T6276] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 140.557837][ T6276] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.557882][ T6276] netlink_rcv_skb+0x155/0x420 [ 140.557918][ T6276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.557958][ T6276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.558009][ T6276] ? netlink_deliver_tap+0x1ae/0xd30 [ 140.558044][ T6276] genl_rcv+0x28/0x40 [ 140.558077][ T6276] netlink_unicast+0x58d/0x850 [ 140.558114][ T6276] ? __pfx_netlink_unicast+0x10/0x10 [ 140.558157][ T6276] netlink_sendmsg+0x8d1/0xdd0 [ 140.558195][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.558241][ T6276] ____sys_sendmsg+0xa98/0xc70 [ 140.558279][ T6276] ? copy_msghdr_from_user+0x10a/0x160 [ 140.558307][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.558351][ T6276] ? __pfx_futex_wake_mark+0x10/0x10 [ 140.558406][ T6276] ___sys_sendmsg+0x134/0x1d0 [ 140.558436][ T6276] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.558461][ T6276] ? __lock_acquire+0x622/0x1c90 [ 140.558544][ T6276] __sys_sendmsg+0x16d/0x220 [ 140.558572][ T6276] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.558599][ T6276] ? __x64_sys_futex+0x1e0/0x4c0 [ 140.558656][ T6276] do_syscall_64+0xcd/0x490 [ 140.558686][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.558715][ T6276] RIP: 0033:0x7f1020d8e9a9 [ 140.558736][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.558763][ T6276] RSP: 002b:00007f1021bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.558789][ T6276] RAX: ffffffffffffffda RBX: 00007f1020fb5fa0 RCX: 00007f1020d8e9a9 [ 140.558807][ T6276] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 140.558823][ T6276] RBP: 00007f1020e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 140.558839][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.558855][ T6276] R13: 0000000000000000 R14: 00007f1020fb5fa0 R15: 00007fff66935a88 [ 140.558890][ T6276] [ 143.908020][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.918557][ T1301] ieee802154 phy1 wpan1: encryption failed: -22                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           syzkaller syzkaller login: [ 181.143168][ T30] audit: type=1400 audit(6047811922.363:3): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6722 comm="syz.3.153" [ 181.379402][ T6730] FAULT_INJECTION: forcing a failure. [ 181.379402][ T6730] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 181.439235][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.0.154 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 181.439288][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.439311][ T6730] Call Trace: [ 181.439324][ T6730] [ 181.439338][ T6730] dump_stack_lvl+0x16c/0x1f0 [ 181.439379][ T6730] should_fail_ex+0x512/0x640 [ 181.439422][ T6730] should_fail_alloc_page+0xe7/0x130 [ 181.439468][ T6730] prepare_alloc_pages+0x3c2/0x610 [ 181.439521][ T6730] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.439595][ T6730] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 181.439713][ T6730] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 181.439776][ T6730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.439818][ T6730] ? __pfx___text_poke+0x10/0x10 [ 181.439856][ T6730] ? find_held_lock+0x2b/0x80 [ 181.439902][ T6730] ? static_key_slow_inc_cpuslocked+0xd2/0x120 [ 181.439969][ T6730] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 181.440003][ T6730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.440068][ T6730] ? policy_nodemask+0xea/0x4e0 [ 181.440115][ T6730] alloc_pages_mpol+0x1fb/0x550 [ 181.440158][ T6730] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.440214][ T6730] alloc_pages_noprof+0x131/0x390 [ 181.440257][ T6730] kvm_arch_vcpu_create+0x2a7/0xb20 [ 181.440306][ T6730] ? lockdep_init_map_type+0x5c/0x280 [ 181.440364][ T6730] kvm_vm_ioctl+0xf6f/0x3dd0 [ 181.440438][ T6730] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 181.440517][ T6730] ? kasan_quarantine_put+0x10a/0x240 [ 181.440552][ T6730] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.440610][ T6730] ? find_held_lock+0x2b/0x80 [ 181.440650][ T6730] ? tomoyo_path_number_perm+0x295/0x580 [ 181.440710][ T6730] ? tomoyo_path_number_perm+0x18d/0x580 [ 181.440767][ T6730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.440819][ T6730] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.440877][ T6730] ? do_vfs_ioctl+0x523/0x1a60 [ 181.440927][ T6730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.441006][ T6730] ? find_held_lock+0x2b/0x80 [ 181.441049][ T6730] ? hook_file_ioctl_common+0x145/0x410 [ 181.441107][ T6730] ? __fget_files+0x20e/0x3c0 [ 181.441148][ T6730] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 181.441209][ T6730] __x64_sys_ioctl+0x18e/0x210 [ 181.441260][ T6730] do_syscall_64+0xcd/0x490 [ 181.441297][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.441332][ T6730] RIP: 0033:0x7f3da498e9a9 [ 181.441360][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.441394][ T6730] RSP: 002b:00007f3da57be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.441428][ T6730] RAX: ffffffffffffffda RBX: 00007f3da4bb5fa0 RCX: 00007f3da498e9a9 [ 181.441452][ T6730] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 181.441473][ T6730] RBP: 00007f3da4a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 181.441494][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.441514][ T6730] R13: 0000000000000000 R14: 00007f3da4bb5fa0 R15: 00007fff0bbbfa38 [ 181.441557][ T6730] [ 181.769248][ T6730] sg_write: data in/out 1624916139/266 bytes for SCSI command 0x7f-- guessing data in; [ 181.769248][ T6730] program syz.0.154 not setting count and/or reply_len properly [ 187.135488][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.165423][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.023709][ T6811] ubi0: attaching mtd0 [ 189.030603][ T6811] ubi0: scanning is finished [ 189.035368][ T6811] ubi0: empty MTD device detected [ 189.041398][ T6811] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 189.292608][ T6812] Invalid ELF header magic: != ELF [ 189.381798][ T6812] Invalid ELF header magic: != ELF [ 189.536639][ T6811] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 193.616745][ T6853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.648095][ T6853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.028107][ T6853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.128149][ T6853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.161018][ T6853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 194.223777][ T6853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 194.353757][ T6853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.375329][ T6853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.398281][ T6853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 194.469042][ T6853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.514739][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.597045][ T6853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.654791][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.132833][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.364697][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.524740][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.560165][ T6881] zswap: compressor not available [ 197.729930][ T6896] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 197.754479][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.259343][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.444453][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.605146][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.729261][ T6909] syz.3.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 199.607727][ T6892] FAULT_INJECTION: forcing a failure. [ 199.607727][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 199.607903][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.0.181 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 199.607947][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.607968][ T6892] Call Trace: [ 199.607979][ T6892] [ 199.607992][ T6892] dump_stack_lvl+0x16c/0x1f0 [ 199.608034][ T6892] should_fail_ex+0x512/0x640 [ 199.608069][ T6892] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 199.608110][ T6892] should_failslab+0xc2/0x120 [ 199.608163][ T6892] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 199.608198][ T6892] ? find_held_lock+0x2b/0x80 [ 199.608234][ T6892] ? vm_area_dup+0x27/0x8d0 [ 199.608285][ T6892] ? dup_mmap+0x5cb/0x21d0 [ 199.608338][ T6892] vm_area_dup+0x27/0x8d0 [ 199.608393][ T6892] dup_mmap+0x877/0x21d0 [ 199.608481][ T6892] ? __pfx_dup_mmap+0x10/0x10 [ 199.608561][ T6892] copy_process+0x4081/0x7650 [ 199.608607][ T6892] ? __pfx___futex_wait+0x10/0x10 [ 199.608675][ T6892] ? __pfx_copy_process+0x10/0x10 [ 199.608720][ T6892] ? __lock_acquire+0xb8a/0x1c90 [ 199.608767][ T6892] ? __futex_hash.constprop.0+0x1e9/0x440 [ 199.608808][ T6892] kernel_clone+0xfc/0x960 [ 199.608848][ T6892] ? __pfx_kernel_clone+0x10/0x10 [ 199.608914][ T6892] __do_sys_clone+0xce/0x120 [ 199.608955][ T6892] ? __pfx___do_sys_clone+0x10/0x10 [ 199.608996][ T6892] ? ksys_unshare+0x687/0xa40 [ 199.609052][ T6892] ? xfd_validate_state+0x61/0x180 [ 199.609256][ T6892] do_syscall_64+0xcd/0x490 [ 199.609298][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.609331][ T6892] RIP: 0033:0x7f3da498e9a9 [ 199.609359][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.609390][ T6892] RSP: 002b:00007f3da57bdfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 199.609420][ T6892] RAX: ffffffffffffffda RBX: 00007f3da4bb5fa0 RCX: 00007f3da498e9a9 [ 199.609440][ T6892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 199.609459][ T6892] RBP: 00007f3da4a10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 199.609478][ T6892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.609496][ T6892] R13: 0000000000000000 R14: 00007f3da4bb5fa0 R15: 00007fff0bbbfa38 [ 199.609538][ T6892] [ 199.817412][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.313966][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.525071][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.692173][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.970725][ T6903] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 202.096029][ T6946] FAULT_INJECTION: forcing a failure. [ 202.096029][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 202.109988][ T6946] CPU: 1 UID: 0 PID: 6946 Comm: syz.1.191 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 202.110034][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.110052][ T6946] Call Trace: [ 202.110063][ T6946] [ 202.110074][ T6946] dump_stack_lvl+0x16c/0x1f0 [ 202.110114][ T6946] should_fail_ex+0x512/0x640 [ 202.110149][ T6946] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 202.110184][ T6946] should_failslab+0xc2/0x120 [ 202.110219][ T6946] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 202.110246][ T6946] ? security_inode_alloc+0x3b/0x2b0 [ 202.110282][ T6946] ? sk_prot_alloc+0x60/0x2a0 [ 202.110322][ T6946] sk_prot_alloc+0x60/0x2a0 [ 202.110358][ T6946] sk_alloc+0x36/0xc20 [ 202.110402][ T6946] smc_create+0x114/0x2a0 [ 202.110444][ T6946] __sock_create+0x335/0x8d0 [ 202.110489][ T6946] __sys_socket+0x14d/0x260 [ 202.110529][ T6946] ? fput+0x70/0xf0 [ 202.110561][ T6946] ? __pfx___sys_socket+0x10/0x10 [ 202.110607][ T6946] ? xfd_validate_state+0x61/0x180 [ 202.110654][ T6946] ? __pfx_ksys_read+0x10/0x10 [ 202.110694][ T6946] __x64_sys_socket+0x72/0xb0 [ 202.110748][ T6946] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.110802][ T6946] do_syscall_64+0xcd/0x490 [ 202.110837][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.110871][ T6946] RIP: 0033:0x7f1020d8e9a9 [ 202.110897][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.110929][ T6946] RSP: 002b:00007f1021bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 202.110957][ T6946] RAX: ffffffffffffffda RBX: 00007f1020fb5fa0 RCX: 00007f1020d8e9a9 [ 202.110977][ T6946] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 202.110995][ T6946] RBP: 00007f1020e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 202.111013][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.111031][ T6946] R13: 0000000000000000 R14: 00007f1020fb5fa0 R15: 00007fff66935a88 [ 202.111065][ T6946] [ 202.314682][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.832351][ T6949] svc: failed to register nfsdv3 RPC service (errno 111). [ 202.880023][ T6949] svc: failed to register nfsaclv3 RPC service (errno 111). [ 204.523663][ T6976] program syz.2.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.677276][ T6980] netlink: 342 bytes leftover after parsing attributes in process `syz.3.197'. [ 205.328000][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.334546][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.933129][ T7018] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 208.933180][ T7018] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 208.950448][ T7018] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 210.464234][ T7036] Invalid ELF header magic: != ELF [ 210.856972][ T7038] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 210.856972][ T7038] The task syz.3.207 (7038) triggered the difference, watch for misbehavior. [ 211.957310][ T30] audit: type=1400 audit(6047811953.193:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7047 comm="syz.2.211" [ 212.858439][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.864937][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.878349][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.885061][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.897111][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.904216][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.935977][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.943700][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.566905][ T7074] ubi0: attaching mtd0 [ 213.596496][ T7074] ubi0: scanning is finished [ 213.601207][ T7074] ubi0: empty MTD device detected [ 213.666899][ T7074] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 213.831680][ T7074] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 213.889324][ T7079] ubi0: attaching mtd0 [ 213.909701][ T7079] ubi0: scanning is finished [ 213.959196][ T7079] ubi0: empty MTD device detected [ 213.968567][ T7080] Invalid ELF header magic: != ELF [ 213.971306][ T7079] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 214.006614][ T7083] Invalid ELF header magic: != ELF [ 214.393658][ T7086] Invalid ELF header magic: != ELF [ 214.412147][ T7074] Invalid ELF header magic: != ELF [ 214.619166][ T7079] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 214.907997][ T7090] netlink: 342 bytes leftover after parsing attributes in process `syz.2.216'. [ 215.003595][ T7094] ubi0: attaching mtd0 [ 215.011415][ T7094] ubi0: scanning is finished [ 215.018507][ T7094] ubi0: empty MTD device detected [ 215.024067][ T7094] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 215.099680][ T7097] Invalid ELF header magic: != ELF [ 215.281924][ T7094] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 215.298784][ T7097] Invalid ELF header magic: != ELF [ 218.563387][ T7133] ubi0: attaching mtd0 [ 218.577824][ T7133] ubi0: scanning is finished [ 218.610836][ T7133] ubi0: empty MTD device detected [ 218.621018][ T7133] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 218.847320][ T7135] Invalid ELF header magic: != ELF [ 219.055853][ T7135] Invalid ELF header magic: != ELF [ 219.087160][ T7133] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 219.325973][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.332529][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.357639][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.373741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.392207][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.424157][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.437395][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.447346][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.463909][ T30] audit: type=1400 audit(6047811960.693:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7140 comm="syz.1.224" [ 220.067883][ T7152] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 220.182635][ T7152] FAULT_INJECTION: forcing a failure. [ 220.182635][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 220.226373][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.3.228 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 220.226421][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.226440][ T7152] Call Trace: [ 220.226451][ T7152] [ 220.226464][ T7152] dump_stack_lvl+0x16c/0x1f0 [ 220.226503][ T7152] should_fail_ex+0x512/0x640 [ 220.226535][ T7152] ? fs_reclaim_acquire+0xae/0x150 [ 220.226588][ T7152] should_failslab+0xc2/0x120 [ 220.226629][ T7152] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 220.226666][ T7152] ? security_inode_alloc+0x3b/0x2b0 [ 220.226717][ T7152] security_inode_alloc+0x3b/0x2b0 [ 220.226771][ T7152] inode_init_always_gfp+0xce4/0x1030 [ 220.226833][ T7152] alloc_inode+0x86/0x240 [ 220.226876][ T7152] new_inode+0x22/0x1c0 [ 220.226923][ T7152] proc_pid_make_inode+0x22/0x160 [ 220.226980][ T7152] proc_pident_instantiate+0x85/0x320 [ 220.227017][ T7152] proc_fill_cache+0x361/0x470 [ 220.227048][ T7152] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 220.227105][ T7152] ? __pfx_proc_fill_cache+0x10/0x10 [ 220.227180][ T7152] proc_pident_readdir+0x1bc/0x560 [ 220.227224][ T7152] iterate_dir+0x293/0xb40 [ 220.227279][ T7152] __x64_sys_getdents+0x13c/0x2b0 [ 220.227331][ T7152] ? __pfx___x64_sys_getdents+0x10/0x10 [ 220.227388][ T7152] ? __pfx_filldir+0x10/0x10 [ 220.227467][ T7152] do_syscall_64+0xcd/0x490 [ 220.227504][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.227539][ T7152] RIP: 0033:0x7fd4de78e9a9 [ 220.227566][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.227598][ T7152] RSP: 002b:00007fd4df6dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 220.227629][ T7152] RAX: ffffffffffffffda RBX: 00007fd4de9b5fa0 RCX: 00007fd4de78e9a9 [ 220.227650][ T7152] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000008 [ 220.227669][ T7152] RBP: 00007fd4de810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 220.227688][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.227706][ T7152] R13: 0000000000000000 R14: 00007fd4de9b5fa0 R15: 00007ffc3e109fc8 [ 220.227756][ T7152] [ 220.956350][ T7155] ubi0: attaching mtd0 [ 220.981236][ T7155] ubi0: scanning is finished [ 220.986308][ T7155] ubi0: empty MTD device detected [ 220.991549][ T7155] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 221.371983][ T7157] Invalid ELF header magic: != ELF [ 221.385408][ T7155] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 221.477177][ T30] audit: type=1400 audit(6047811962.713:6): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7160 comm="syz.1.231" [ 221.684539][ T7155] Invalid ELF header magic: != ELF [ 222.493674][ T7156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.525491][ T7156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.542307][ T7156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.551373][ T7156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.329333][ T7018] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.960391][ T7190] Invalid ELF header magic: != ELF [ 223.997365][ T7185] netlink: 186 bytes leftover after parsing attributes in process `syz.2.236'. [ 224.256044][ T7192] random: crng reseeded on system resumption [ 224.457562][ T7018] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 224.614640][ T7018] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.620985][ T7018] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.627106][ T7018] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.077490][ T30] audit: type=1400 audit(6047811967.313:7): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7210 comm="syz.0.248" [ 226.326309][ T7213] FAULT_INJECTION: forcing a failure. [ 226.326309][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 226.398620][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.1.241 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 226.398669][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.398688][ T7213] Call Trace: [ 226.398699][ T7213] [ 226.398713][ T7213] dump_stack_lvl+0x16c/0x1f0 [ 226.398752][ T7213] should_fail_ex+0x512/0x640 [ 226.398794][ T7213] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 226.398852][ T7213] should_failslab+0xc2/0x120 [ 226.398894][ T7213] __kmalloc_cache_noprof+0x6a/0x3e0 [ 226.398950][ T7213] ? percpu_ref_init+0xec/0x410 [ 226.399004][ T7213] ? __pfx_css_release+0x10/0x10 [ 226.399051][ T7213] percpu_ref_init+0xec/0x410 [ 226.399099][ T7213] ? init_and_link_css+0x32c/0x700 [ 226.399140][ T7213] cgroup_apply_control_enable+0x50b/0xbb0 [ 226.399210][ T7213] cgroup_mkdir+0x5e7/0x11f0 [ 226.399272][ T7213] ? __pfx_cgroup_mkdir+0x10/0x10 [ 226.399329][ T7213] kernfs_iop_mkdir+0x111/0x190 [ 226.399365][ T7213] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 226.399413][ T7213] vfs_mkdir+0x593/0x8c0 [ 226.399469][ T7213] do_mkdirat+0x304/0x3e0 [ 226.399507][ T7213] ? __pfx_do_mkdirat+0x10/0x10 [ 226.399546][ T7213] ? getname_flags.part.0+0x1c5/0x550 [ 226.399598][ T7213] __x64_sys_mkdir+0xef/0x140 [ 226.399635][ T7213] do_syscall_64+0xcd/0x490 [ 226.399673][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.399707][ T7213] RIP: 0033:0x7f1020d8e9a9 [ 226.399734][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.399766][ T7213] RSP: 002b:00007f1021bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 226.399806][ T7213] RAX: ffffffffffffffda RBX: 00007f1020fb5fa0 RCX: 00007f1020d8e9a9 [ 226.399829][ T7213] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 226.399849][ T7213] RBP: 00007f1020e10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 226.399870][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.399889][ T7213] R13: 0000000000000000 R14: 00007f1020fb5fa0 R15: 00007fff66935a88 [ 226.399933][ T7213] [ 226.846854][ T5938] ------------[ cut here ]------------ [ 226.852757][ T5938] WARNING: CPU: 1 PID: 5938 at kernel/cgroup/rstat.c:497 css_rstat_exit+0x368/0x470 [ 226.863164][ T5938] Modules linked in: [ 226.869878][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: kworker/1:4 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 226.882210][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.892446][ T5938] Workqueue: cgroup_destroy css_free_rwork_fn [ 226.898753][ T5938] RIP: 0010:css_rstat_exit+0x368/0x470 [ 226.904400][ T5938] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 d9 09 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 cb 09 07 00 90 0f 0b 90 e9 30 ff ff ff [ 226.924149][ T5938] RSP: 0018:ffffc900049cfbc0 EFLAGS: 00010293 [ 226.930363][ T5938] RAX: 0000000000000000 RBX: ffff88801e2f3400 RCX: ffff88812472e000 [ 226.938663][ T5938] RDX: ffff888031c91e00 RSI: ffffffff81b44b87 RDI: ffffffff8df34da0 [ 226.946788][ T5938] RBP: ffff88801e2f3408 R08: 0000000000000005 R09: 0000000000000007 [ 226.954873][ T5938] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e2f3420 [ 226.963567][ T5938] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 226.972219][ T5938] FS: 0000000000000000(0000) GS:ffff88812482e000(0000) knlGS:0000000000000000 [ 226.981287][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.988016][ T5938] CR2: 0000001b311b7ff8 CR3: 0000000035348000 CR4: 00000000003526f0 [ 226.996131][ T5938] Call Trace: [ 226.999456][ T5938] [ 227.002441][ T5938] css_free_rwork_fn+0x80/0x12e0 [ 227.007564][ T5938] ? rcu_is_watching+0x12/0xc0 [ 227.012421][ T5938] process_one_work+0x9cf/0x1b70 [ 227.017513][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 227.022995][ T5938] ? assign_work+0x1a0/0x250 [ 227.027780][ T5938] worker_thread+0x6c8/0xf10 [ 227.032568][ T5938] ? __kthread_parkme+0x19e/0x250 [ 227.037764][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 227.043013][ T5938] kthread+0x3c2/0x780 [ 227.047206][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.051868][ T5938] ? rcu_is_watching+0x12/0xc0 [ 227.056718][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.061915][ T5938] ret_from_fork+0x5d7/0x6f0 [ 227.067154][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.071815][ T5938] ret_from_fork_asm+0x1a/0x30 [ 227.076899][ T5938] [ 227.079995][ T5938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.087388][ T5938] CPU: 1 UID: 0 PID: 5938 Comm: kworker/1:4 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 227.099577][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.109680][ T5938] Workqueue: cgroup_destroy css_free_rwork_fn [ 227.115832][ T5938] Call Trace: [ 227.119128][ T5938] [ 227.122078][ T5938] dump_stack_lvl+0x3d/0x1f0 [ 227.126782][ T5938] panic+0x71c/0x800 [ 227.130807][ T5938] ? __pfx_panic+0x10/0x10 [ 227.135270][ T5938] ? show_trace_log_lvl+0x29b/0x3e0 [ 227.140523][ T5938] ? check_panic_on_warn+0x1f/0xb0 [ 227.145704][ T5938] ? css_rstat_exit+0x368/0x470 [ 227.150591][ T5938] check_panic_on_warn+0xab/0xb0 [ 227.155578][ T5938] __warn+0xf6/0x3c0 [ 227.159526][ T5938] ? css_rstat_exit+0x368/0x470 [ 227.164443][ T5938] report_bug+0x3c3/0x580 [ 227.168871][ T5938] ? css_rstat_exit+0x368/0x470 [ 227.173771][ T5938] handle_bug+0x184/0x210 [ 227.178158][ T5938] exc_invalid_op+0x17/0x50 [ 227.182969][ T5938] asm_exc_invalid_op+0x1a/0x20 [ 227.187855][ T5938] RIP: 0010:css_rstat_exit+0x368/0x470 [ 227.193346][ T5938] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 d9 09 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 cb 09 07 00 90 0f 0b 90 e9 30 ff ff ff [ 227.213006][ T5938] RSP: 0018:ffffc900049cfbc0 EFLAGS: 00010293 [ 227.219201][ T5938] RAX: 0000000000000000 RBX: ffff88801e2f3400 RCX: ffff88812472e000 [ 227.227202][ T5938] RDX: ffff888031c91e00 RSI: ffffffff81b44b87 RDI: ffffffff8df34da0 [ 227.235205][ T5938] RBP: ffff88801e2f3408 R08: 0000000000000005 R09: 0000000000000007 [ 227.243242][ T5938] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801e2f3420 [ 227.251239][ T5938] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 227.259255][ T5938] ? css_rstat_exit+0x367/0x470 [ 227.264159][ T5938] css_free_rwork_fn+0x80/0x12e0 [ 227.269156][ T5938] ? rcu_is_watching+0x12/0xc0 [ 227.273963][ T5938] process_one_work+0x9cf/0x1b70 [ 227.278969][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 227.284495][ T5938] ? assign_work+0x1a0/0x250 [ 227.289156][ T5938] worker_thread+0x6c8/0xf10 [ 227.293820][ T5938] ? __kthread_parkme+0x19e/0x250 [ 227.298903][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 227.304074][ T5938] kthread+0x3c2/0x780 [ 227.308199][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.312841][ T5938] ? rcu_is_watching+0x12/0xc0 [ 227.317641][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.322284][ T5938] ret_from_fork+0x5d7/0x6f0 [ 227.326933][ T5938] ? __pfx_kthread+0x10/0x10 [ 227.331682][ T5938] ret_from_fork_asm+0x1a/0x30 [ 227.336521][ T5938] [ 227.339897][ T5938] Kernel Offset: disabled [ 227.344251][ T5938] Rebooting in 86400 seconds..