last executing test programs: 2m47.709135093s ago: executing program 1 (id=399): close_range$auto(0x2, 0xffffffffffffffff, 0x7e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/platform/drivers/cht_wcove_pwrsrc/bind\x00', 0x103000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) mbind$auto(0x100000000, 0x1, 0x9, &(0x7f0000000040)=0x48000000, 0xbca, 0x5) mmap$auto(0x3ff, 0x40000a, 0x9, 0x7f, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) unshare$auto(0x8000000) semget$auto(0x0, 0x13c, 0x1ff) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x7, 0x0, 0x0, 0x80000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, 0x0, 0x4) wait4$auto(0x0, &(0x7f0000000200)=0x8, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) 2m46.120565377s ago: executing program 1 (id=404): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x8, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/threaded\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xfbP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x921\a2\xa2X`\a\xf1y\xb3\"=', 0x40) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/yenta_socket/parameters/o2_speedup\x00', 0xc2902, 0x0) sysfs$auto(0x2, 0xd, 0x0) r3 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r3, 0x40000000029, 0x20, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', &(0x7f0000000100)=':,\x00') ioctl$auto(r6, 0x4004556e, 0x1f) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000ad887f99e1dc7d0e634addd550a1b25cec7a42c5969f2048114f2d31bcf4f5d8c3b23f1b74f691d484c683e2e8ba3ccc09acd797e5547d502bd021c86cf3daf9e02405d9c4990727a815b96", @ANYRES16=r8, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="0800070000010000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) read$auto(r2, 0x0, 0x2d) mmap$auto(0x7, 0x2020009, 0x3, 0x2eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x12, 0x0) r9 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r9, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) readv$auto(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x8}, 0x4) 2m45.387625716s ago: executing program 1 (id=405): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r2, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x15, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x18, 0x5, 0x5) 2m43.321439146s ago: executing program 1 (id=410): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xa, 0xa, 0x4c0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x200000000009, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4d5, 0x7ff, 0x5, 0xeb1, 0x405, 0x8000008000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) 2m42.299429336s ago: executing program 1 (id=412): read$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f0000000180)={0xe, 0x404, 0x1, 0x6, 0xffffffff, 0x2, "5e8bfd42dd7561d080b1cae2f40252dca82e86b3919814f2c52544036f5e184b0669e724b4a655c1b12aa30254ff4dc5a1f656a7e33492d57d0a6ee35aa3ceb21916df385b26520883115afd37ca9ae5fe3465b62de5e387806643d01ecf5f5887dda297517294d15e3a67162df9666a95d8278fc5f169941f215e5c245fdf79d0cc725f1c39028796bb877266a6aa165d0a6fc6d99befbf78ea8066a512"}, 0xe7, 0x0, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/4120, 0x1018) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/parport/drivers_probe\x00', 0x2cb02, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/037/001\x00', 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x14fc41, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/controlC1\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) 2m41.177368649s ago: executing program 1 (id=414): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) r3 = socket(0x2b, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010027bd7000fbdbeb252a00050020001180080003c1ff00020062617461647630000000372ee8410049c70ea3d8"], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000140), 0x8401, 0x0) writev$auto(r5, &(0x7f0000003640)={0x0, 0x3}, 0x3) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket(0x2b, 0x1, 0x1) listen$auto(r7, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x408000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048840) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r10 = socket(0x2, 0x5, 0x0) getsockopt$auto(r10, 0x84, 0xf, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0x4138ae84, 0x0) 2m31.982543134s ago: executing program 32 (id=401): write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100000005", 0x5) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) pipe$auto(0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r3, 0x4010ae68, r5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x7fff, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x6, 0xfff, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x1, 0x106) unshare$auto(0x20000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 2m29.947178664s ago: executing program 33 (id=407): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 2m25.874014977s ago: executing program 34 (id=414): r0 = socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, &(0x7f0000000040)=""/159, 0x9f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) r3 = socket(0x2b, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010027bd7000fbdbeb252a00050020001180080003c1ff00020062617461647630000000372ee8410049c70ea3d8"], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000140), 0x8401, 0x0) writev$auto(r5, &(0x7f0000003640)={0x0, 0x3}, 0x3) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket(0x2b, 0x1, 0x1) listen$auto(r7, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x408000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYRES8=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048840) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r10 = socket(0x2, 0x5, 0x0) getsockopt$auto(r10, 0x84, 0xf, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0x4138ae84, 0x0) 2m12.441736768s ago: executing program 5 (id=457): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fsconfig$auto(r1, 0x1, 0x0, &(0x7f0000000280)="ef63f33082be53c1707f37ff742f0bbf1caba1d44c", 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x7ffe, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x3a) 2m10.297880675s ago: executing program 5 (id=460): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181040, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}, {0x4, 0x3, 0x9, 0x8, 0x10000, 0x5, 0x2}]}) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x80201, 0x0) write$auto(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_fd=r2, 0xd}, 0xa2) sendto$auto(r2, 0x0, 0x3, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) prctl$auto_PR_SET_MM_BRK(0x9, 0x7, 0x0, 0x80000001, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x7, 0x5, 0x2, 0xffffffffffffffff, 0xf, 0xfff, 0xbf41055, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0x0, 0xffffffffffffffff, 0x80000000]}, 0x0, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xd0) 2m9.775903565s ago: executing program 5 (id=464): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytc\x00', 0x410101, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x7fffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0xc110700, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000180), &(0x7f00000012c0), &(0x7f0000001300)="bbb73aa13089f75e66dd51e04e2e34cc6ec234fc1d81b929365a3d3a3330a7bbdab9d0702bebd2ec3132f727c0370b92529bde859dcad1853d568bcd2c932dee5574fcb5310d5feaa77214bc0c52ffd7666876d172c5034595e6ce167223d6a6576a3d9ae985c29724afcc05b2f803b9d22aff880300000000002186e7877b6920ee495a0d3d9574357fc23b6723979f52008f9a0af78b82") close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m8.588424838s ago: executing program 5 (id=466): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x42005, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f680, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={"2252f65cf820f500000091dc2e2e9d42c14aef1500", 0x4, 0xba, 0x8020, 0x3, 0x100, 0x0}) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000003640)='/dev/dsp1\x00', 0x2001, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r3, 0x80044dfb, &(0x7f0000003680)) r4 = socket(0x2a, 0x0, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0x3, 0x89e1, 0x91) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000180)=0x5) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) r5 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r5, 0x65, 0x1, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6}, 0x6a) r7 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64$auto(r7, 0x0, 0x4, 0x80000000000006) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x47, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES16=r8, @ANYRES64=r0, @ANYBLOB="d88f1800bb6b3c4dbd58f126770117f8af657e18850382291a6dd11aa9d41dbb0ae00fa576cec623515638a6e85095d22888520b64c2c8a9bc138a1394fd7dc37fdd344e8f484e4bd2fce28d59b5ebd27c04bba44c80d9bea01ecec0336e05bc095075bfea0c85acf5e93973c0121d0475172045ec7ca858637fefd2cfa396e27e1aa386447f796c7d9b18f674cef7513aa28ea681f5efe04def9d4cf249a40b7aaf1dbbc3b72a"], 0x24}, 0x1, 0x9eff, 0x0, 0x8800}, 0x0) 2m7.020684068s ago: executing program 5 (id=469): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fsconfig$auto(r1, 0x1, 0x0, &(0x7f0000000280)="ef63f33082be53c1707f37ff742f0bbf1caba1d44cfea3fb3887a314e009c8", 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x7ffe, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x3a) 2m5.191051919s ago: executing program 5 (id=472): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/max_writeback_mb_bump\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x5, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x1260, 0x5) 1m49.809448858s ago: executing program 35 (id=472): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/max_writeback_mb_bump\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x5, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x1260, 0x5) 1m49.398340776s ago: executing program 3 (id=505): sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) madvise$auto(0x4, 0x7, 0x101) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r0, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x783540, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r1, 0x4b4e, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x800) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon11\x00', 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto(0x0, 0x0, 0x6f4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m48.07981751s ago: executing program 3 (id=507): close_range$auto(0x2, 0xffffffffffffffff, 0x7e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/platform/drivers/cht_wcove_pwrsrc/bind\x00', 0x103000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x9b) mbind$auto(0x100000000, 0x1, 0x9, &(0x7f0000000040)=0x48000000, 0xbca, 0x5) mmap$auto(0x3ff, 0x40000a, 0x9, 0x7f, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x8000000) semget$auto(0x0, 0x13c, 0x1ff) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x6, 0x7, 0x0, 0x0, 0x80000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) wait4$auto(0x0, &(0x7f0000000200)=0x8, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) 1m46.946942965s ago: executing program 3 (id=510): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0x1043, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0)="aeaa491b1a0548684996fad6f23ac2f7633284a949a5685083b3197f9ae9dc12", 0x7fff}, 0x3) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/blk_classic\x00', 0x942, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r2 = io_uring_setup$auto(0x59, &(0x7f0000000240)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x80008, 0xffffffffffffffff, [0x0, 0x1, 0x4000020], {0x7, 0x80000001, 0xf, 0x2a2, 0x100, 0x5, 0x105, 0x6, 0x9935}, {0x100, 0x1, 0x51, 0x5, 0x20000001, 0x40, 0x1076c5, 0x6, 0x81}}) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x15, r2, 0x300000000000) connect$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x85, 0x0) r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) write$auto_rfkill_fops_core(r3, 0x0, 0x700) 1m45.902685649s ago: executing program 3 (id=512): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x27) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x193400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0xa, 0x801, 0x106) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}}, 0x4044820) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) 1m45.141734753s ago: executing program 3 (id=515): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fsconfig$auto(r1, 0x1, 0x0, &(0x7f0000000280)="ef63f33082be53c1707f37ff742f0bbf1caba1d44cfea3fb3887a314e009c899859f4561", 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x7ffe, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x3a) 1m43.488061955s ago: executing program 3 (id=518): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 1m38.289874006s ago: executing program 7 (id=502): socket(0x2, 0x800, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xf, 0x3, 0x2) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/53, 0x35) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000340), r1) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r4, 0x4004550a, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x20c2417c, 0xffffffffffffffff, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) select$auto(0x0, &(0x7f0000000140)={[0x8, 0x5, 0xfffffffffffff801, 0x80000000, 0xf47, 0x8, 0x7, 0x1, 0x3, 0x100000001, 0x5b, 0x3ff, 0x2, 0x100000001, 0x9, 0x2]}, &(0x7f0000000240)={[0x3, 0x5, 0xf1d6, 0xfff, 0x8e, 0x2, 0x1, 0x100, 0x7, 0x1, 0x8, 0x6, 0x3ff, 0x6, 0x9, 0x4]}, &(0x7f00000002c0)={[0x1, 0x7ff, 0x9, 0x7, 0x7, 0x7f, 0x100000001, 0x16, 0x8, 0x4, 0xe, 0x3, 0xc, 0x4, 0x401, 0x6]}, &(0x7f00000000c0)={0x6, 0x8000}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1m36.655684143s ago: executing program 7 (id=528): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x1a9402, 0x0) socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x2, 0x0) socket(0xa, 0x2, 0x88) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) mmap$auto(0xffffffffffffffff, 0x0, 0xe3, 0x14, 0x2, 0x7fec) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x80000, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = gettid() prctl$auto(0x3e, 0x1, r3, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x6, 0x400008, 0xe2, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/pid\x00', 0x1a1842, 0x0) 1m35.477369821s ago: executing program 7 (id=530): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x100000000, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4M\x1ah\xc9\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_register$auto_IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)="9109cc9fe0d09ae14201910c2f87088153771384332be29ec00fbb4fe1cb585e4cbb3b1d8ad02618293292f3063d1c2b406db4a7ac778453c0a3762a80f2277b1f02a5208b9d0727c2d68aa7a8469fc99198a956ef38d809be20a36ccb262583f8ab82e0b87c7f8a52cdc4f14f04a623c3620c4101412716f12f29938b70a49750050974a342", 0x2) madvise$auto(0x0, 0x4, 0x15) socket(0x10, 0x2, 0xffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1b9540, 0x0) pread64$auto(r0, 0x0, 0x8, 0x24b) madvise$auto(0xffdffffffffffffc, 0x200006, 0x0) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2b, 0x2, 0x20a) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="0a1b9a3c3e3efd6ea3d31791840bd70c00000082574c58e9865c42d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db4b519958c62bf692d2c9df7a9a2e8a556b30aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a25e65be53e69c6369b67a4cbd6383a0d766de0287d84516183587530a17dbfd83a7678c6dad9917b91c7c9de3d61af452f90cf22400c4bcbb8410703641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b2537b0a63a5cf6ae230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6b59bce357b9a8b05b4ad586c7b72db5ae55e9d149330720a", 0x119) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x9dc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty51\x00', 0x442080, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) ioctl$auto(0xffffffffffffffff, 0x921064a4, 0x1000000000000003) 1m33.716204473s ago: executing program 7 (id=533): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, r1) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4069, 0xfe5) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) madvise$auto(0x8, 0xc89, 0xffffff33) r3 = socket(0x10, 0x3, 0xc) setsockopt$auto(r3, 0x104000000000010e, 0x1, 0x0, 0x16) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xc0a3, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x4e8c, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.3/usb16/ep_00/bmAttributes\x00', 0x2000, 0x0) 1m31.100870787s ago: executing program 7 (id=537): socket(0x25, 0xa, 0xfffffff8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000240)={@inferred, "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"}) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x0, 0xffffffffffffffff, 0x1) mmap$auto(0x43e3, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x8a) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x624}, 0x3, 0x80) modify_ldt$auto(0xfffffffe, 0x0, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) preadv$auto(r0, &(0x7f0000002940)={&(0x7f0000002880), 0xa93a}, 0xf, 0x1, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000000002e}, 0x8000040000000001) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x7113}, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003740)='/dev/nbd4\x00', 0x80000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x7) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) statmount$auto(0x0, &(0x7f0000001300)={0xa, 0x1, 0x3, 0x0, 0x5, 0x717e, 0x1ffde, 0x7, 0x3, 0x8, 0xffffffff, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x9, 0xe, 0x22000, 0x5, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, [0x0, 0xfffffffffffffffc, 0x80001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000]}, 0x1fa, 0xd) 1m28.394358807s ago: executing program 36 (id=518): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 1m15.868150153s ago: executing program 37 (id=537): socket(0x25, 0xa, 0xfffffff8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000240)={@inferred, "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"}) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x0, 0xffffffffffffffff, 0x1) mmap$auto(0x43e3, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x8a) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x624}, 0x3, 0x80) modify_ldt$auto(0xfffffffe, 0x0, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) preadv$auto(r0, &(0x7f0000002940)={&(0x7f0000002880), 0xa93a}, 0xf, 0x1, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000000002e}, 0x8000040000000001) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x7113}, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003740)='/dev/nbd4\x00', 0x80000, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x7) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) statmount$auto(0x0, &(0x7f0000001300)={0xa, 0x1, 0x3, 0x0, 0x5, 0x717e, 0x1ffde, 0x7, 0x3, 0x8, 0xffffffff, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x9, 0xe, 0x22000, 0x5, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, [0x0, 0xfffffffffffffffc, 0x80001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000]}, 0x1fa, 0xd) 1m7.615588183s ago: executing program 4 (id=582): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/current_speed\x00', 0x181040, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000100)={0x3fd}) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$auto(r1, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_fd=r2, 0xd}, 0xa2) sendto$auto(r2, 0x0, 0x3, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) prctl$auto_PR_SET_MM_BRK(0x9, 0x7, 0x0, 0x80000001, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x7, 0x5, 0x2, 0xffffffffffffffff, 0xf, 0xfff, 0xbf41055, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0x0, 0xffffffffffffffff, 0x80000000]}, 0x0, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xd0) 1m6.589156527s ago: executing program 4 (id=584): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 1m4.780646968s ago: executing program 4 (id=585): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x422801, 0x0) unshare$auto(0x40000080) clock_settime$auto(0x26f, &(0x7f0000000000)={0x100000004, 0x8}) adjtimex$auto(&(0x7f0000000280)={0x12, 0x0, 0x8, 0x100000003, 0x83, 0x0, 0x2, 0x0, 0xe, 0x0, 0x2, {0xf, 0x2}, 0x8000000000000001, 0x3a9d, 0x5, 0xf, 0x0, 0x10001, 0x1, 0x17, 0x8, 0xfffffffffffffffe, 0x1015c8}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4c041, 0x0) write$auto(r0, &(0x7f0000000040)=' ', 0x4) mmap$auto(0x7689, 0xe, 0x7ffffffb, 0xef8, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x2202, 0x0) mmap$auto(0x0, 0xede8, 0xdf, 0x9b72, 0x5, 0x28000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) read$auto(r2, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0xfff, 0x200008, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89b1, &(0x7f0000000040)={'bridge_slave_1\x00'}) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/vlan/vlan0\x00', 0x4800, 0x0) close_range$auto(r2, r1, 0x7) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1m4.237348963s ago: executing program 4 (id=588): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x1, 0x2, 0x3c52, 0x13, 0xffffffffffffffff, 0x40) close_range$auto(0x2, 0xa, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x6, 0x101, 0x1, 0xfffffffffffffff1, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) listmount$auto(&(0x7f0000000100)={0xfffffffc, @raw=0xffffffff, 0x844, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x84582, 0x0) write$auto(r1, 0x0, 0x2b6) syz_clone3(&(0x7f0000000140)={0xe0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r2, 0x40084504, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0x98c7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) 1m3.009687289s ago: executing program 4 (id=592): mmap$auto(0x0, 0x3, 0xfffffffffffffff8, 0x200000eb1, 0xfffffffffffffffa, 0x1000000000000006) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x104, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) ioctl$auto_ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000440)={0x3, 0xfffffff8, 0x8, 0x5}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) 1m1.5896908s ago: executing program 4 (id=595): write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100000005", 0x5) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) pipe$auto(0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r3, 0x4010ae68, r5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x6, 0xfff, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x1, 0x106) unshare$auto(0x20000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 46.489563788s ago: executing program 38 (id=595): write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100000005", 0x5) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) pipe$auto(0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r3, 0x4010ae68, r5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x6, 0xfff, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x25, 0x1, 0x106) unshare$auto(0x20000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 45.419980867s ago: executing program 9 (id=627): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytc\x00', 0x410101, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x7fffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0xc110700, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000180), &(0x7f00000012c0), &(0x7f0000001300)="bbb73aa13089f75e66dd51e04e2e34cc6ec234fc1d81b929365a3d3a3330a7bbdab9d0702bebd2ec3132f727c0370b92529bde859dcad1853d568bcd2c932dee5574fcb5310d5feaa77214bc0c52ffd7666876d172c5034595e6ce167223d6a6576a3d9ae985c29724afcc05b2f803b9d22aff880300000000002186e7877b6920ee495a0d3d9574357fc23b6723979f52008f9a0af78b82") prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, r2, 0x1ff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 44.632660356s ago: executing program 9 (id=629): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 42.580725012s ago: executing program 9 (id=631): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0xf, 0x800000000000ebf, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000005c40)='/dev/nbd9\x00', 0x2000, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x86, 0x8, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b70, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye6\x00', 0x400600, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) ioctl$auto(r2, 0x100, r2) 41.932169722s ago: executing program 9 (id=633): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd70007cdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) open(0x0, 0x1e1401, 0xe5) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) unshare$auto(0x40000080) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000e00)="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", 0xcb6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 39.49779051s ago: executing program 9 (id=638): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x7f, 0x2, 0x9b72, 0x2, 0x7fff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sched_rr_get_interval$auto(0x0, 0x0) getrandom$auto(0x0, 0xe, 0x7) madvise$auto(0x81, 0x3, 0x9) madvise$auto(0x0, 0x2003f0, 0x13) mincore$auto(0x0, 0x10000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r1, 0x7, 0x6}, 0x4, 0x100000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x9, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x8, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x4040000) 38.043129074s ago: executing program 9 (id=641): close_range$auto(0x2, 0x8, 0x0) finit_module$auto(0xffffffffffffffff, &(0x7f0000000080)='(&:\\]\x00', 0x6) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x147602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000780)={0x3, 0x2a2ac88b, 0x7f6, @raw=0x7, 0x0, "e7a6b861dcbde9deb2c11f7e019b498d171b0cd6555901db83a25536fc1f5662819ab1220e23b007fe795ca45f29f0c2a7f7"}) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x85, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) dup$auto(0xffffffffffffffff) unshare$auto(0x40000080) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) msync$auto(0x7, 0x4, 0x4) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000002c0), 0x50b602, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000002600)) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi21\x00', 0x149800, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) 26.792698107s ago: executing program 6 (id=659): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x11, 0x0, 0x56b) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x15, 0x5, 0x0) mmap$auto(0x4, 0x400008, 0xe1, 0x9b72, 0x2, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x800000000009) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa000006c}, 0xc, &(0x7f0000000380)={&(0x7f00000021c0)=ANY=[@ANYBLOB="f8060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="dfb72820d0d7ca666c33dadfd95228b3254e45cce9038210653a079c5bc053530cad479ecfc8f5aac32615b262a4b70d0f5babb12b72018e9d95715b468be35dd4f2a09997fde497ea100d5ca85f52cee3b2cddf19cd2fe586e832ec498e814a3d3be040d5d9aeb4042e33d672b2f9dd11f0f81074011d73047acf3645934a78bf74db2af68345dd8eb0db19b42d14b3e1fa4469bb05c4c5b698bd64ce701405714936cac5be21ed7490fc35525dc3cebf4c91746b59b195aa6241c989c0309225f6bc8af992ea76f79d62d8c726031b52d54cb3cbb5ee85320c3b20dc845bd2895206c10e13a51c13357cffda0ea07d99756a2075569184bfc89096f9c156dee90b42fec27bdfbea3c5d6c31293583ce72513e531efbccbad08fc8d2464788f2de028754ae94125301389e5f5f074d965d3037bd5a9d0b56d92654c1de91f455305de91daf020e19abfdb97a3ec2487ec850b40a7d6907b5bae3c004a80e68004006280040047800400188008009a00", @ANYRES32=0x0, @ANYBLOB="0c00f800010000000000000004007880040029800800c200", @ANYRES32=r0, @ANYBLOB="00000f9dbc44dfac6469364152e4881450baa94390ac4bcadc5a78fd62c6a476591340218690eb21d944d48e9b4506b0f9ef95c9b56f187207f45408ec7216e4ff3f333ebfb9fd6473d88f15d8e57f221d07e9e8aa76c1e430d306ed804a944b45c53ac41b20dbd4b921309c1e155528c58a28f418565dbe5a07791e3d56102590cfcc5245f4760c7d8476e8420abfd19599a1235c1cd4566e5639b998fa87c86d56fbfc1b7227c4ba3c6df85e024197aa48fd1d904140a549a45e76a00fdab971940d0800ee00", @ANYRES32=0x0, @ANYBLOB="0000009500ba00793c13f731d8307988681c1169f82002cd3bfa51a0925c98812e75efbbe129ce2510cecafbe1e2873cab5b9b9e5a9679a8f2e8fe481bcc34f54fad163923bd4c60a7fec9794cc7869fe12ec5711652d04bb1d94276a53608f3e66cf543798098a67cd87da7728c84df42cb44b598cb26906a37f5180d193545371381ae66c809477ba8166c7a94c2338a4e21a212759ed100000006004f01ffff00000800270005000000"], 0x6f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x101142, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000e00)="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", 0xbe5) socket(0x5, 0x6, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2a, 0x3, 0x2000000000ebe, r3, 0x7ffc) mmap$auto(0xffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r4, r5, 0x0) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000080)={0x0, 0x82ed0e3}, 0x1) 24.654226294s ago: executing program 6 (id=662): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) capset$auto(0x0, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) r2 = socket(0x11, 0x1, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000180)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c1fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0d5ef018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e4") sendmsg$auto_NFC_CMD_ENABLE_SE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=r3, @ANYBLOB="040026bd7000fcdbdf25110000000800040003000000e1011380f74f6457281e806894afc92463eda69c8ab78b8418f93f828d1dc1b543dea59a6c79d379defaf313c92cc2ba5f8592dca46d5caad2f0cd2c5b859fe40a31ff929996f10c0fc43b2e7fdeb013bf2144b6c81d83303dee607548a63e2a7df8eaddece92a6b0c004d800400258004006d0018002a800800df00", @ANYRES32, @ANYBLOB="0826ddb67f2bbd681c47a69ab2ce82dcefb554bb8df7d4c9da7f7d30622f363ec8a83e4b773cd0460bc57a2753d55e9978c965c3f5fc5497efa2dfaadfd1dc193042ce2c98ecbe062127d7bf8d2aa73cf04fa13856d4cee0c814a695ff1f2a89033b0000000000", @ANYRES32=0x0, @ANYRESOCT=r5], 0x244}, 0x1, 0x0, 0x0, 0x4048000}, 0x48800) ioctl$auto(r4, 0x541c, r5) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x8, 0x23, &(0x7f0000000140)='/dev/tty12\x00', 0x7) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) timer_create$auto(0x9, 0x0, 0x0) 22.966098568s ago: executing program 39 (id=641): close_range$auto(0x2, 0x8, 0x0) finit_module$auto(0xffffffffffffffff, &(0x7f0000000080)='(&:\\]\x00', 0x6) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x147602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000780)={0x3, 0x2a2ac88b, 0x7f6, @raw=0x7, 0x0, "e7a6b861dcbde9deb2c11f7e019b498d171b0cd6555901db83a25536fc1f5662819ab1220e23b007fe795ca45f29f0c2a7f7"}) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x85, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) dup$auto(0xffffffffffffffff) unshare$auto(0x40000080) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) msync$auto(0x7, 0x4, 0x4) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r3, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000002c0), 0x50b602, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000002600)) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi21\x00', 0x149800, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) 22.956540439s ago: executing program 6 (id=673): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xa, 0xa, 0x4c0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x200000000009, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4d5, 0x7ff, 0x5, 0xeb1, 0x405, 0x8000008000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xc8e, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x20499d, 0x9) socket(0x200000000000011, 0x2, 0x0) 21.584134654s ago: executing program 6 (id=669): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 19.141840076s ago: executing program 6 (id=675): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytc\x00', 0x410101, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x7fffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0xc110700, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000180), &(0x7f00000012c0), &(0x7f0000001300)="bbb73aa13089f75e66dd51e04e2e34cc6ec234fc1d81b929365a3d3a3330a7bbdab9d0702bebd2ec3132f727c0370b92529bde859dcad1853d568bcd2c932dee5574fcb5310d5feaa77214bc0c52ffd7666876d172c5034595e6ce167223d6a6576a3d9ae985c29724afcc05b2f803b9d22aff880300000000002186e7877b6920ee495a0d3d9574357fc23b6723979f52008f9a0af78b82") prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, r3, 0x1ff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18.048976984s ago: executing program 6 (id=677): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88001, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x400008, 0x40df, 0x13, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) ioctl$auto(0x3, 0xc, 0x38) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0xfffffffffffffffd, 0x0, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0xbf36) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) 9.256678067s ago: executing program 8 (id=696): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) socket(0xa, 0x2, 0x3a) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0xf4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x2, {0x2100000000, 0x10000}, 0xffffffffffffffff, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d7) socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0x800000000008) memfd_secret$auto(0x0) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) select$auto(0x1, &(0x7f0000000040)={[0x8, 0xfffffffffffffff7, 0x100, 0x7fff, 0x79, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x10000000009, 0x0, 0x4, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x80000012, 0x2, 0x4e4bcd3b, 0x8, 0x8000000000005, 0x4, 0x5, 0x12, 0xfffffffffffffffe, 0x1, 0xffffffff00000001, 0xe25, 0x48, 0x8]}, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) shmdt$auto(&(0x7f0000000180)='/dev/dlm_plock\x00') openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000002140), 0xa002, 0x0) clock_adjtime$auto(0xd, &(0x7f0000000600)={0x2, 0x0, 0x6, 0x4, 0x101, 0x0, 0x6383, 0x0, 0x2, 0x40, 0x0, {0x0, 0x1}, 0x5, 0x9, 0x5, 0x70317c3b, 0x0, 0x6, 0x9, 0x3d2fa6fb, 0x1bff, 0x8001, 0x3}) acct$auto(&(0x7f00000000c0)='/dev/cachefiles\x00') sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x4011) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) getsockopt$auto_SO_PASSPIDFD(r0, 0x12, 0x4c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', &(0x7f0000000340)=0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.664315118s ago: executing program 2 (id=698): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) sysfs$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1) r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) writev$auto(r3, &(0x7f0000000140)={&(0x7f0000002ac0), 0x1ff}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r1, 0x5382, &(0x7f00000002c0)="2023aa3b8a11942cf9fae0bf2ca907cd1910a3dacf56f742ff53aae49aabd00700c8acac61bd10a779f5b3e867b95d4f5a698773f30997a24e757a962868e6845e8c6362d445342a3718f7f42c8749a07401154ea06fce09442942b587aac7d8e5aa639304e308199eabefe8d5172cfe03f64f63a8929189a4ec71dfb31cc4322c49d662bdd54cc5e5b33561b0190e996d11af8662") socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = setfsgid$auto(0xee00) fchown$auto(r3, 0xee00, r4) fsconfig$auto(0xffffffffffffffff, 0x6, &(0x7f0000000080)=',\xd6{/@){--\xd4\x00', &(0x7f0000000380)="ed866ad7625148e6fb7003dd923e63ba59443a3c4d8ec4985e3531c2dfb7145166453aa4e0ec035225fc27a72a14d2d8ab4954fa5e4258cd2bada8a685a08639a60b1acff51d6be788231f7c975aac4bfae7a4586644a5babedf816e9f4777e2b4d68236c6fe1b730575cdb7ffbde3b38743a6e8a92392fb684fdfa902490837c2dc4b134394b2898b0125b91bc355a794c94fdb63a0e450818598", r4) listen$auto(0x3, 0x3) 7.636806022s ago: executing program 8 (id=699): prctl$auto_PR_SET_MM_START_DATA(0x80000001, 0x3, 0x0, 0xa3, 0x1000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0x400) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/sctp/remaddr\x00', 0xb00, 0x0) pread64$auto(r1, 0x0, 0xf469, 0xbc3ab41) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = set_tid_address$auto(0x0) r4 = prctl$auto(0xfff, 0x1, r3, 0x100000000001, 0x3) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto_regulator_summary_fops_(r4, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) listen$auto(0xffffffffffffffff, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r4, 0x0, 0x0) 6.746404777s ago: executing program 0 (id=701): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000100)='\xe1\x9eHU\x00', 0xfffc, 0x7be) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x25, 0x400005, 0xdb, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) close_range$auto(0xffffffffffffffff, r1, 0x4) socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) 5.935322611s ago: executing program 2 (id=702): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x103, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x3, 0x40006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xffff7ffffffffffa, 0x8100) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(0x0, 0x8004, 0x0, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readv$auto(0x3, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 5.934617417s ago: executing program 8 (id=703): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x10000, 0x0) socket(0x1e, 0x80000, 0x5c) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto_cachefiles_daemon_fops_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc814}, 0x10) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) 4.941038016s ago: executing program 0 (id=704): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xa, 0xa, 0x4c0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x200000000009, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4d5, 0x7ff, 0x5, 0xeb1, 0x405, 0x8000008000) write$auto(0x3, 0x0, 0xffd8) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xc8e, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x20499d, 0x9) socket(0x200000000000011, 0x2, 0x0) 4.86426996s ago: executing program 2 (id=705): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x10000, 0x0) socket(0x1e, 0x80000, 0x5c) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto_cachefiles_daemon_fops_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc814}, 0x10) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) 4.647156163s ago: executing program 8 (id=706): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xa, 0xa, 0x4c0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x200000000009, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4d5, 0x7ff, 0x5, 0xeb1, 0x405, 0x8000008000) write$auto(0x3, 0x0, 0xffd8) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xc8e, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x20499d, 0x9) socket(0x200000000000011, 0x2, 0x0) 3.828748019s ago: executing program 0 (id=707): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x10000, 0x0) socket(0x1e, 0x80000, 0x5c) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$auto_cachefiles_daemon_fops_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc814}, 0x10) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x810) madvise$auto(0x108000, 0x800032, 0x4) 3.79466764s ago: executing program 2 (id=708): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytc\x00', 0x410101, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8000d, 0x7fffffff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0xc110700, &(0x7f00000002c0)="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", 0x1000, &(0x7f0000000180), &(0x7f00000012c0), &(0x7f0000001300)="bbb73aa13089f75e66dd51e04e2e34cc6ec234fc1d81b929365a3d3a3330a7bbdab9d0702bebd2ec3132f727c0370b92529bde859dcad1853d568bcd2c932dee5574fcb5310d5feaa77214bc0c52ffd7666876d172c5034595e6ce167223d6a6576a3d9ae985c29724afcc05b2f803b9d22aff880300000000002186e7877b6920ee495a0d3d9574357fc23b6723979f52008f9a0af78b82") prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, r3, 0x1ff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.629467272s ago: executing program 8 (id=709): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 2.758903365s ago: executing program 40 (id=677): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x88001, 0x0) sysfs$auto(0x2, 0x4d, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x400008, 0x40df, 0x13, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) ioctl$auto(0x3, 0xc, 0x38) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0xfffffffffffffffd, 0x0, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0xbf36) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) 2.517768131s ago: executing program 2 (id=711): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x149443, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x400, 0x0) mount$auto(0x0, 0x0, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0x7fff, 0x2}, 0x0, 0x7fffffffeffd, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) ioctl$auto(r0, 0x64d0, 0x40) r1 = fanotify_init$auto(0x6, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) sysfs$auto(0x2, 0xf, 0x0) r2 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x9, 0xaf, 0x1000000eb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x107, 0x17, 0x0, 0xfffffffc) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x13c, 0x0, 0x0, 0xd}, 0x5af}, 0x40, 0x100) acct$auto(&(0x7f0000000040)='/dev/dri/card1\x00') openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/fib_trie\x00', 0x69800, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 2.290837446s ago: executing program 0 (id=712): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bddf00000000000000000000000000762193fe54c621095ee4097d6deca64c95a11998f66fdd33a0c3c41d4f9b818f440ebf06c7e04dd209953239627e0a54d27efd297feac5ef99add5f11330bdf7d41e79764a389a4cfa2ff929d52d9650e6806a7b5a9017b3b71dfad6b129e1c5a4286cf4a1ff24a4b502e633db3c6b54", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) 1.974327935s ago: executing program 8 (id=713): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000100)='\xe1\x9eHU\x00', 0xfffc, 0x7be) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x25, 0x400005, 0xdb, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) close_range$auto(0xffffffffffffffff, r1, 0x4) socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) 1.540633306s ago: executing program 2 (id=714): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\v\xba\x8av\xf0\x85\x9e`\x1fN$\xd4\x1c\xe0\xa6\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x89\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI', 0x100000a3db) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x5, 0x5, 0x2009, 0x0, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/numa_maps\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(r3, 0x8926, r3) read$auto_proc_sessionid_operations_base(r2, &(0x7f00000000c0)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffffffd, 0x2003f0, 0xffffff04) madvise$auto(0x0, 0x200007, 0x19) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[@ANYRES16=r4, @ANYBLOB="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"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram4/queue/physical_block_size\x00', 0xa00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000004c0)=""/206, 0xce) syz_open_procfs$namespace(0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7f1) modify_ldt$auto(0x40, 0x0, 0x7ff) pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) 1.43290806s ago: executing program 0 (id=715): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) 0s ago: executing program 0 (id=716): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0xa, 0xa, 0x4c0) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x200000000009, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x4d5, 0x7ff, 0x5, 0xeb1, 0x405, 0x8000008000) write$auto(0x3, 0x0, 0xffd8) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xc8e, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x20499d, 0x9) socket(0x200000000000011, 0x2, 0x0) kernel console output (not intermixed with test programs): T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.091131][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.420257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.457499][ T5956] FAULT_INJECTION: forcing a failure. [ 103.457499][ T5956] name failslab, interval 1, probability 0, space 0, times 1 [ 103.471087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.480206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.503610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.523967][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.2.3 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 103.524013][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.524037][ T5956] Call Trace: [ 103.524049][ T5956] [ 103.524066][ T5956] dump_stack_lvl+0x16c/0x1f0 [ 103.524129][ T5956] should_fail_ex+0x512/0x640 [ 103.524179][ T5956] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 103.524236][ T5956] should_failslab+0xc2/0x120 [ 103.524269][ T5956] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 103.524322][ T5956] ? sk_prot_alloc+0x60/0x2a0 [ 103.524363][ T5956] sk_prot_alloc+0x60/0x2a0 [ 103.524402][ T5956] sk_alloc+0x36/0xc20 [ 103.524451][ T5956] tipc_sk_create+0xcf/0x21a0 [ 103.524500][ T5956] ? find_held_lock+0x2b/0x80 [ 103.524537][ T5956] ? __sock_create+0x2f2/0x8d0 [ 103.524581][ T5956] __sock_create+0x335/0x8d0 [ 103.524628][ T5956] __sys_socket+0x14d/0x260 [ 103.524669][ T5956] ? __pfx___sys_socket+0x10/0x10 [ 103.524709][ T5956] ? xfd_validate_state+0x61/0x180 [ 103.524777][ T5956] __x64_sys_socket+0x72/0xb0 [ 103.524815][ T5956] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.524875][ T5956] do_syscall_64+0xcd/0x490 [ 103.524928][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.524961][ T5956] RIP: 0033:0x7f94db18e929 [ 103.524988][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.525019][ T5956] RSP: 002b:00007f94dbf64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.525050][ T5956] RAX: ffffffffffffffda RBX: 00007f94db3b5fa0 RCX: 00007f94db18e929 [ 103.525071][ T5956] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 103.525090][ T5956] RBP: 00007f94db210b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.525109][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.525127][ T5956] R13: 0000000000000000 R14: 00007f94db3b5fa0 R15: 00007ffddcfffa98 [ 103.525168][ T5956] [ 103.962433][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 104.009271][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.074049][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.164177][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.172650][ T5855] Bluetooth: hci0: command tx timeout [ 104.331111][ T5855] Bluetooth: hci3: command tx timeout [ 104.331161][ T5855] Bluetooth: hci1: command tx timeout [ 104.337375][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.340442][ T5852] Bluetooth: hci2: command tx timeout [ 104.467534][ T5954] can: request_module (can-proto-0) failed. [ 104.521308][ T5954] mmap: syz.3.4 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.211715][ T5977] tipc: Started in network mode [ 105.216720][ T5977] tipc: Node identity ee00, cluster identity 4711 [ 105.240959][ T5977] tipc: Node number set to 60928 [ 105.318778][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 105.344935][ T5979] netlink: 354 bytes leftover after parsing attributes in process `syz.3.9'. [ 105.960752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.040570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.050172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.058878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.590147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.598843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.370253][ T30] audit: type=1800 audit(6047280621.507:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 110.023762][ T6029] FAULT_INJECTION: forcing a failure. [ 110.023762][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 110.023806][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.0.16 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 110.023835][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.023849][ T6029] Call Trace: [ 110.023857][ T6029] [ 110.023865][ T6029] dump_stack_lvl+0x16c/0x1f0 [ 110.023906][ T6029] should_fail_ex+0x512/0x640 [ 110.023940][ T6029] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 110.023976][ T6029] should_failslab+0xc2/0x120 [ 110.023999][ T6029] __kmalloc_cache_noprof+0x6a/0x3e0 [ 110.024031][ T6029] ? vc_allocate+0x16c/0x880 [ 110.024072][ T6029] vc_allocate+0x16c/0x880 [ 110.024109][ T6029] ? __pfx_vc_allocate+0x10/0x10 [ 110.024154][ T6029] con_install+0xa1/0x600 [ 110.024193][ T6029] ? __pfx_con_install+0x10/0x10 [ 110.024235][ T6029] ? __pfx_con_install+0x10/0x10 [ 110.024287][ T6029] tty_init_dev.part.0+0x99/0x500 [ 110.024313][ T6029] tty_open+0xa50/0xf90 [ 110.024342][ T6029] ? __pfx_tty_open+0x10/0x10 [ 110.024365][ T6029] ? chrdev_open+0x58c/0x6a0 [ 110.024406][ T6029] ? __pfx_tty_open+0x10/0x10 [ 110.024429][ T6029] chrdev_open+0x234/0x6a0 [ 110.024467][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 110.024506][ T6029] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 110.024544][ T6029] do_dentry_open+0x741/0x1c10 [ 110.024580][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 110.024624][ T6029] vfs_open+0x82/0x3f0 [ 110.024652][ T6029] path_openat+0x1de4/0x2cb0 [ 110.024697][ T6029] ? __pfx_path_openat+0x10/0x10 [ 110.024733][ T6029] ? __lock_acquire+0xb8a/0x1c90 [ 110.024770][ T6029] do_filp_open+0x20b/0x470 [ 110.024805][ T6029] ? __pfx_do_filp_open+0x10/0x10 [ 110.024861][ T6029] ? alloc_fd+0x471/0x7d0 [ 110.024902][ T6029] do_sys_openat2+0x11b/0x1d0 [ 110.024928][ T6029] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.024983][ T6029] __x64_sys_openat+0x174/0x210 [ 110.025009][ T6029] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.025047][ T6029] do_syscall_64+0xcd/0x490 [ 110.025085][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.025109][ T6029] RIP: 0033:0x7fd2f0b8e929 [ 110.025127][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.025148][ T6029] RSP: 002b:00007fd2ee9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.025169][ T6029] RAX: ffffffffffffffda RBX: 00007fd2f0db6160 RCX: 00007fd2f0b8e929 [ 110.025184][ T6029] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 110.025199][ T6029] RBP: 00007fd2f0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 110.025212][ T6029] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 110.025225][ T6029] R13: 0000000000000000 R14: 00007fd2f0db6160 R15: 00007ffe788aff58 [ 110.025254][ T6029] [ 110.401547][ T6032] ubi0: attaching mtd0 [ 110.413654][ T6032] ubi0: scanning is finished [ 110.413677][ T6032] ubi0: empty MTD device detected [ 110.921321][ T6038] vivid-007: ================= START STATUS ================= [ 110.921379][ T6038] vivid-007: Generate PTS: true [ 110.921423][ T6038] vivid-007: Generate SCR: true [ 110.921453][ T6038] tpg source WxH: 320x240 (Y'CbCr) [ 110.921468][ T6038] tpg field: 1 [ 110.921476][ T6038] tpg crop: (0,0)/320x240 [ 110.921491][ T6038] tpg compose: (0,0)/320x240 [ 110.921506][ T6038] tpg colorspace: 8 [ 110.921515][ T6038] tpg transfer function: 0/0 [ 110.921526][ T6038] tpg Y'CbCr encoding: 0/0 [ 110.921537][ T6038] tpg quantization: 0/0 [ 110.921547][ T6038] tpg RGB range: 0/2 [ 110.921558][ T6038] vivid-007: ================== END STATUS ================== [ 111.022428][ T6032] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.056152][ T6032] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.056187][ T6032] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.056205][ T6032] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 111.056224][ T6032] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.056242][ T6032] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.056261][ T6032] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1817843236 [ 111.056283][ T6032] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.057200][ T6033] ubi0: detaching mtd0 [ 111.455981][ T6033] ubi0: mtd0 is detached [ 112.325965][ T6045] can: request_module (can-proto-3) failed. [ 113.120263][ T6052] binder: 6051:6052 unknown command 3 [ 113.125698][ T6052] binder: 6051:6052 ioctl c0306201 0 returned -22 [ 117.885823][ T6091] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 119.177079][ T6097] ima: policy update failed [ 119.190510][ T30] audit: type=1802 audit(6047280632.337:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.28" res=0 errno=0 [ 119.839948][ T6097] syz.2.28 (6097) used greatest stack depth: 17976 bytes left [ 120.969994][ T5852] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 121.442858][ T6129] Invalid ELF header magic: != ELF [ 123.027813][ T6148] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.180471][ T6133] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.180471][ T6133] The task syz.0.36 (6133) triggered the difference, watch for misbehavior. [ 123.697846][ T6160] netlink: 13 bytes leftover after parsing attributes in process `syz.0.40'. [ 132.184009][ T5852] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 133.702702][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.783154][ T6312] random: crng reseeded on system resumption [ 133.810319][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.068617][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.078314][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.640445][ T6339] random: crng reseeded on system resumption [ 136.001403][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.073506][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.948602][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.955251][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.950349][ T6378] random: crng reseeded on system resumption [ 139.030779][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.082576][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.616037][ T6392] random: crng reseeded on system resumption [ 141.071253][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.170929][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.345792][ T6426] random: crng reseeded on system resumption [ 142.496915][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.505954][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.956174][ T6453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.461347][ T6458] random: crng reseeded on system resumption [ 145.493710][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.503490][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.987174][ T5852] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 151.209658][ T6547] netlink: zone id is out of range [ 151.229091][ T6547] netlink: zone id is out of range [ 151.260011][ T6547] netlink: zone id is out of range [ 151.265192][ T6547] netlink: zone id is out of range [ 151.320021][ T6547] netlink: zone id is out of range [ 151.325981][ T6547] netlink: zone id is out of range [ 151.360305][ T6547] netlink: zone id is out of range [ 151.730387][ T6547] netlink: zone id is out of range [ 151.737833][ T6547] netlink: zone id is out of range [ 151.743144][ T6547] netlink: zone id is out of range [ 152.128110][ T6558] FAULT_INJECTION: forcing a failure. [ 152.128110][ T6558] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.144108][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.1.99 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 152.144156][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.144176][ T6558] Call Trace: [ 152.144187][ T6558] [ 152.144200][ T6558] dump_stack_lvl+0x16c/0x1f0 [ 152.144258][ T6558] should_fail_ex+0x512/0x640 [ 152.144315][ T6558] get_futex_key+0x1d0/0x1540 [ 152.144361][ T6558] ? __pfx_get_futex_key+0x10/0x10 [ 152.144424][ T6558] futex_wake+0xe7/0x4e0 [ 152.144477][ T6558] ? __pfx_futex_wake+0x10/0x10 [ 152.144533][ T6558] ? __pfx___might_resched+0x10/0x10 [ 152.144570][ T6558] ? rcu_is_watching+0x12/0xc0 [ 152.144607][ T6558] ? lockdep_init_map_type+0x5c/0x280 [ 152.144661][ T6558] do_futex+0x1e3/0x350 [ 152.144703][ T6558] ? __pfx_do_futex+0x10/0x10 [ 152.144746][ T6558] ? file_init_path+0x4fe/0x760 [ 152.144788][ T6558] __x64_sys_futex+0x1e0/0x4c0 [ 152.144836][ T6558] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.144896][ T6558] do_syscall_64+0xcd/0x490 [ 152.144951][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.144985][ T6558] RIP: 0033:0x7f3c5b38e929 [ 152.145012][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.145045][ T6558] RSP: 002b:00007f3c5c1450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.145082][ T6558] RAX: ffffffffffffffda RBX: 00007f3c5b5b6248 RCX: 00007f3c5b38e929 [ 152.145105][ T6558] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c5b5b624c [ 152.145126][ T6558] RBP: 00007f3c5b5b6240 R08: 00007f3c5c1a9000 R09: 0000000000000000 [ 152.145146][ T6558] R10: 000000000000000e R11: 0000000000000246 R12: 00007f3c5b5b624c [ 152.145167][ T6558] R13: 0000000000000000 R14: 00007ffebb050ac0 R15: 00007ffebb050ba8 [ 152.145209][ T6558] [ 152.331467][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.499115][ T6621] FAULT_INJECTION: forcing a failure. [ 157.499115][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 157.549491][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.0.113 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 157.549537][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.549555][ T6621] Call Trace: [ 157.549565][ T6621] [ 157.549577][ T6621] dump_stack_lvl+0x16c/0x1f0 [ 157.549633][ T6621] should_fail_ex+0x512/0x640 [ 157.549681][ T6621] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.549737][ T6621] should_failslab+0xc2/0x120 [ 157.549771][ T6621] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.549820][ T6621] ? d_instantiate+0x77/0x90 [ 157.549847][ T6621] ? alloc_empty_file+0x55/0x1e0 [ 157.549887][ T6621] alloc_empty_file+0x55/0x1e0 [ 157.549930][ T6621] alloc_file_pseudo+0x13a/0x230 [ 157.549969][ T6621] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 157.550007][ T6621] ? security_inode_init_security_anon+0x79/0x240 [ 157.550056][ T6621] secretmem_file_create.constprop.0+0x89/0x270 [ 157.550094][ T6621] __x64_sys_memfd_secret+0xc5/0x1a0 [ 157.550127][ T6621] do_syscall_64+0xcd/0x490 [ 157.550181][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.550213][ T6621] RIP: 0033:0x7fd2f0b8e929 [ 157.550239][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.550271][ T6621] RSP: 002b:00007fd2ee591038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 157.550301][ T6621] RAX: ffffffffffffffda RBX: 00007fd2f0db6240 RCX: 00007fd2f0b8e929 [ 157.550340][ T6621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.550359][ T6621] RBP: 00007fd2f0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 157.550379][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.550398][ T6621] R13: 0000000000000000 R14: 00007fd2f0db6240 R15: 00007ffe788aff58 [ 157.550451][ T6621] [ 160.799393][ T6662] random: crng reseeded on system resumption [ 161.019698][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.046520][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.318565][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.333032][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.979747][ T6738] net_ratelimit: 21 callbacks suppressed [ 164.985764][ T6738] netlink: zone id is out of range [ 164.990954][ T6738] netlink: zone id is out of range [ 164.996162][ T6738] netlink: zone id is out of range [ 165.001427][ T6738] netlink: zone id is out of range [ 165.006863][ T6738] netlink: zone id is out of range [ 165.012111][ T6738] netlink: zone id is out of range [ 165.034785][ T6738] netlink: zone id is out of range [ 165.051521][ T6738] netlink: zone id is out of range [ 165.056713][ T6738] netlink: zone id is out of range [ 165.065896][ T6738] netlink: zone id is out of range [ 166.255120][ T6750] random: crng reseeded on system resumption [ 166.492290][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.506016][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.119136][ T6798] random: crng reseeded on system resumption [ 169.504221][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.524141][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.375792][ T6834] random: crng reseeded on system resumption [ 171.669637][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.844026][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.939602][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.996145][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.418440][ T6920] random: crng reseeded on system resumption [ 177.765218][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.944268][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.690364][ T6937] random: crng reseeded on system resumption [ 179.238532][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.344303][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.347494][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.373001][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.058615][ T6957] netlink: 504 bytes leftover after parsing attributes in process `syz.0.164'. [ 180.113791][ T6957] netlink: 350 bytes leftover after parsing attributes in process `syz.0.164'. [ 181.525551][ T6970] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 182.508916][ T6973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 183.755756][ T7012] random: crng reseeded on system resumption [ 184.083112][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.095844][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.355283][ T7015] ptrace attach of ""[7016] was attempted by "./syz-executor exec"[7015] [ 185.414976][ T7030] random: crng reseeded on system resumption [ 185.577802][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.593951][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.452089][ T7048] random: crng reseeded on system resumption [ 186.543520][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.623081][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.628492][ T5852] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 191.114648][ T7120] random: crng reseeded on system resumption [ 191.388726][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.401201][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.030782][ T7133] program syz.2.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.186743][ T7144] ptrace attach of "./syz-executor exec"[7145] was attempted by "./syz-executor exec"[7144] [ 193.407547][ T7147] random: crng reseeded on system resumption [ 193.567085][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.632834][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.957212][ T7169] random: crng reseeded on system resumption [ 195.201921][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.211903][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.286852][ T7185] random: crng reseeded on system resumption [ 196.542482][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.552277][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.122346][ T7195] random: crng reseeded on system resumption [ 197.332677][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.383400][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.604598][ T7217] random: crng reseeded on system resumption [ 198.831592][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.857165][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.928861][ T7205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.965990][ T7205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.210310][ T7219] ptrace attach of ""[7221] was attempted by "./syz-executor exec"[7219] [ 199.375283][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.381836][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.391886][ T7234] random: crng reseeded on system resumption [ 200.417747][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.483596][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.826478][ T7237] vivid-003: ================= START STATUS ================= [ 200.849426][ T7237] vivid-003: Radio HW Seek Mode: Bounded [ 200.879861][ T7237] vivid-003: Radio Programmable HW Seek: false [ 200.909851][ T7237] vivid-003: RDS Rx I/O Mode: Block I/O [ 200.916601][ T7237] vivid-003: Generate RBDS Instead of RDS: false [ 200.924776][ T7237] vivid-003: RDS Reception: true [ 200.974936][ T7237] vivid-003: RDS Program Type: 0 inactive [ 200.981881][ T7237] vivid-003: RDS PS Name: inactive [ 200.993183][ T7237] vivid-003: RDS Radio Text: inactive [ 201.021571][ T7237] vivid-003: RDS Traffic Announcement: false inactive [ 201.028744][ T7237] vivid-003: RDS Traffic Program: false inactive [ 201.035468][ T7237] vivid-003: RDS Music: false inactive [ 201.042580][ T7237] vivid-003: ================== END STATUS ================== [ 202.525463][ T7276] FAULT_INJECTION: forcing a failure. [ 202.525463][ T7276] name failslab, interval 1, probability 0, space 0, times 0 [ 202.560242][ T7276] CPU: 1 UID: 0 PID: 7276 Comm: syz.1.221 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 202.560285][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.560299][ T7276] Call Trace: [ 202.560307][ T7276] [ 202.560316][ T7276] dump_stack_lvl+0x16c/0x1f0 [ 202.560356][ T7276] should_fail_ex+0x512/0x640 [ 202.560390][ T7276] ? __kmalloc_noprof+0xbf/0x510 [ 202.560426][ T7276] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 202.560451][ T7276] should_failslab+0xc2/0x120 [ 202.560473][ T7276] __kmalloc_noprof+0xd2/0x510 [ 202.560514][ T7276] apply_wqattrs_prepare+0xf8/0xbd0 [ 202.560550][ T7276] workqueue_apply_unbound_cpumask+0x17e/0x4f0 [ 202.560580][ T7276] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 202.560608][ T7276] ? bitmap_parse+0x327/0x410 [ 202.560645][ T7276] cpumask_store+0x1ad/0x220 [ 202.560670][ T7276] ? __pfx_cpumask_store+0x10/0x10 [ 202.560696][ T7276] ? find_held_lock+0x2b/0x80 [ 202.560721][ T7276] ? sysfs_file_kobj+0xe4/0x290 [ 202.560751][ T7276] ? __pfx_cpumask_store+0x10/0x10 [ 202.560774][ T7276] dev_attr_store+0x55/0x80 [ 202.560796][ T7276] ? __pfx_dev_attr_store+0x10/0x10 [ 202.560819][ T7276] sysfs_kf_write+0xef/0x150 [ 202.560848][ T7276] kernfs_fop_write_iter+0x351/0x510 [ 202.560872][ T7276] ? __pfx_sysfs_kf_write+0x10/0x10 [ 202.560903][ T7276] vfs_write+0x6c4/0x1150 [ 202.560936][ T7276] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 202.560963][ T7276] ? __pfx___mutex_lock+0x10/0x10 [ 202.560998][ T7276] ? __pfx_vfs_write+0x10/0x10 [ 202.561050][ T7276] ksys_write+0x12a/0x250 [ 202.561082][ T7276] ? __pfx_ksys_write+0x10/0x10 [ 202.561124][ T7276] do_syscall_64+0xcd/0x490 [ 202.561161][ T7276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.561184][ T7276] RIP: 0033:0x7f3c5b38e929 [ 202.561203][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.561230][ T7276] RSP: 002b:00007f3c5c1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.561251][ T7276] RAX: ffffffffffffffda RBX: 00007f3c5b5b5fa0 RCX: 00007f3c5b38e929 [ 202.561266][ T7276] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000004 [ 202.561280][ T7276] RBP: 00007f3c5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.561293][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.561307][ T7276] R13: 0000000000000000 R14: 00007f3c5b5b5fa0 R15: 00007ffebb050ba8 [ 202.561336][ T7276] [ 202.813804][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.876230][ T7290] random: crng reseeded on system resumption [ 206.419547][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.420025][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.600254][ T7322] random: crng reseeded on system resumption [ 210.073775][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.504298][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.300209][ T7358] tipc: Started in network mode [ 213.305158][ T7358] tipc: Node identity ee00, cluster identity 4711 [ 213.610355][ T7358] tipc: Node number set to 60928 [ 221.931960][ T5169] Bluetooth: hci0: command 0x0406 tx timeout [ 221.938110][ T5169] Bluetooth: hci1: command 0x0406 tx timeout [ 221.938187][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 221.949854][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 223.523341][ T7440] random: crng reseeded on system resumption [ 223.694951][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.759233][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.863686][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.969967][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.742848][ T7477] bridge0: port 3(vlan1) entered blocking state [ 226.751361][ T7477] bridge0: port 3(vlan1) entered disabled state [ 226.758032][ T7477] vlan1: entered allmulticast mode [ 226.781203][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 226.800212][ T7477] veth0_vlan: entered allmulticast mode [ 226.851374][ T7477] vlan1: entered promiscuous mode [ 226.878673][ T7477] bridge0: port 3(vlan1) entered blocking state [ 226.886211][ T7477] bridge0: port 3(vlan1) entered forwarding state [ 227.754505][ T7477] zswap: compressor not available [ 228.088794][ T7493] program syz.2.255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.101613][ T7493] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 229.690898][ T7512] random: crng reseeded on system resumption [ 230.150892][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.189600][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.773732][ T30] audit: type=1800 audit(6047280745.917:4): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.263" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 233.589578][ T7573] random: crng reseeded on system resumption [ 233.812316][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.841576][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.718893][ T7585] random: crng reseeded on system resumption [ 235.158803][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.169627][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.821257][ T7586] netlink: 186 bytes leftover after parsing attributes in process `syz.2.269'. [ 236.272309][ T7593] random: crng reseeded on system resumption [ 239.715846][ T7648] random: crng reseeded on system resumption [ 241.050554][ T7660] capability: warning: `syz.0.284' uses 32-bit capabilities (legacy support in use) [ 243.342842][ T7690] FAULT_INJECTION: forcing a failure. [ 243.342842][ T7690] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 243.359326][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.1.290 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 243.359372][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.359396][ T7690] Call Trace: [ 243.359407][ T7690] [ 243.359424][ T7690] dump_stack_lvl+0x16c/0x1f0 [ 243.359480][ T7690] should_fail_ex+0x512/0x640 [ 243.359547][ T7690] should_fail_alloc_page+0xe7/0x130 [ 243.359580][ T7690] prepare_alloc_pages+0x3c2/0x610 [ 243.359616][ T7690] ? lock_acquire+0x179/0x350 [ 243.359663][ T7690] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 243.359719][ T7690] ? __lock_acquire+0x622/0x1c90 [ 243.359765][ T7690] ? css_rstat_updated+0x9d/0xd30 [ 243.359802][ T7690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.359860][ T7690] ? find_held_lock+0x2b/0x80 [ 243.359924][ T7690] ? find_held_lock+0x2b/0x80 [ 243.359959][ T7690] ? rcu_read_unlock+0x17/0x60 [ 243.359990][ T7690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.360052][ T7690] ? policy_nodemask+0xea/0x4e0 [ 243.360088][ T7690] alloc_pages_mpol+0x1fb/0x550 [ 243.360122][ T7690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.360153][ T7690] ? rcu_is_watching+0x12/0xc0 [ 243.360187][ T7690] ? trace_kmem_cache_alloc+0x28/0xc0 [ 243.360221][ T7690] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 243.360277][ T7690] alloc_pages_noprof+0x131/0x390 [ 243.360311][ T7690] kvm_vm_ioctl+0xbce/0x3dd0 [ 243.360380][ T7690] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.360456][ T7690] ? kasan_quarantine_put+0x10a/0x240 [ 243.360504][ T7690] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.360558][ T7690] ? find_held_lock+0x2b/0x80 [ 243.360593][ T7690] ? tomoyo_path_number_perm+0x295/0x580 [ 243.360640][ T7690] ? tomoyo_path_number_perm+0x18d/0x580 [ 243.360683][ T7690] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.360724][ T7690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.360776][ T7690] ? do_vfs_ioctl+0x523/0x1a60 [ 243.360815][ T7690] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.360882][ T7690] ? find_held_lock+0x2b/0x80 [ 243.360915][ T7690] ? hook_file_ioctl_common+0x145/0x410 [ 243.360960][ T7690] ? __fget_files+0x20e/0x3c0 [ 243.361011][ T7690] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 243.361073][ T7690] __x64_sys_ioctl+0x18e/0x210 [ 243.361115][ T7690] do_syscall_64+0xcd/0x490 [ 243.361169][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.361203][ T7690] RIP: 0033:0x7f3c5b38e929 [ 243.361228][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.361259][ T7690] RSP: 002b:00007f3c5c1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.361290][ T7690] RAX: ffffffffffffffda RBX: 00007f3c5b5b5fa0 RCX: 00007f3c5b38e929 [ 243.361312][ T7690] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 243.361331][ T7690] RBP: 00007f3c5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 243.361350][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.361369][ T7690] R13: 0000000000000000 R14: 00007f3c5b5b5fa0 R15: 00007ffebb050ba8 [ 243.361416][ T7690] [ 243.758532][ T7690] sg_write: data in/out 1624916139/266 bytes for SCSI command 0x7f-- guessing data in; [ 243.758532][ T7690] program syz.1.290 not setting count and/or reply_len properly [ 244.750683][ T7716] FAULT_INJECTION: forcing a failure. [ 244.750683][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 244.763936][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.2.293 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 244.763981][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.764001][ T7716] Call Trace: [ 244.764012][ T7716] [ 244.764025][ T7716] dump_stack_lvl+0x16c/0x1f0 [ 244.764082][ T7716] should_fail_ex+0x512/0x640 [ 244.764130][ T7716] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 244.764195][ T7716] should_failslab+0xc2/0x120 [ 244.764227][ T7716] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 244.764279][ T7716] ? _raw_spin_unlock+0x28/0x50 [ 244.764323][ T7716] ? alloc_inode+0xc3/0x240 [ 244.764363][ T7716] alloc_inode+0xc3/0x240 [ 244.764396][ T7716] new_inode+0x22/0x1c0 [ 244.764434][ T7716] simple_fill_super+0x306/0x720 [ 244.764489][ T7716] ? __pfx_nfsd_fill_super+0x10/0x10 [ 244.764527][ T7716] nfsd_fill_super+0x90/0x530 [ 244.764561][ T7716] ? __pfx_set_anon_super_fc+0x10/0x10 [ 244.764626][ T7716] ? __pfx_nfsd_fill_super+0x10/0x10 [ 244.764663][ T7716] get_tree_keyed+0x10e/0x1d0 [ 244.764712][ T7716] vfs_get_tree+0x8e/0x340 [ 244.764769][ T7716] path_mount+0x1414/0x2020 [ 244.764823][ T7716] ? kmem_cache_free+0x2d1/0x4d0 [ 244.764871][ T7716] ? __pfx_path_mount+0x10/0x10 [ 244.764929][ T7716] ? putname+0x154/0x1a0 [ 244.764967][ T7716] __x64_sys_mount+0x28d/0x310 [ 244.765023][ T7716] ? __pfx___x64_sys_mount+0x10/0x10 [ 244.765090][ T7716] do_syscall_64+0xcd/0x490 [ 244.765147][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.765191][ T7716] RIP: 0033:0x7f94db18e929 [ 244.765218][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.765249][ T7716] RSP: 002b:00007f94dbf43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.765281][ T7716] RAX: ffffffffffffffda RBX: 00007f94db3b6080 RCX: 00007f94db18e929 [ 244.765303][ T7716] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 244.765324][ T7716] RBP: 00007f94db210b39 R08: 0000000000000000 R09: 0000000000000000 [ 244.765344][ T7716] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 244.765362][ T7716] R13: 0000000000000000 R14: 00007f94db3b6080 R15: 00007ffddcfffa98 [ 244.765405][ T7716] [ 245.306686][ T7721] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 250.850610][ T7785] zswap: compressor 000 not available [ 250.996254][ T7793] zswap: compressor not available [ 254.742971][ T7840] lo: entered allmulticast mode [ 255.514119][ T7836] lo: left allmulticast mode [ 258.701904][ T7892] random: crng reseeded on system resumption [ 259.499156][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.518019][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.772924][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 259.941118][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 260.815220][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.824959][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.054254][ T7985] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 265.660215][ T7996] can: request_module (can-proto-0) failed. [ 265.886650][ T8000] random: crng reseeded on system resumption [ 266.109371][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.119682][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.298051][ T8029] random: crng reseeded on system resumption [ 267.422482][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.498242][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.802274][ T8061] random: crng reseeded on system resumption [ 269.843984][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.855164][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.930761][ T8073] random: crng reseeded on system resumption [ 271.230198][ T30] audit: type=1800 audit(6047280784.367:5): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.355" name="features" dev="configfs" ino=20484 res=0 errno=0 [ 271.338925][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.418738][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.129986][ T8108] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 273.266207][ T8100] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.347697][ T8100] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 273.716910][ T8100] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.786801][ T8100] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.882931][ T8100] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.899487][ T8100] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.004017][ T8100] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.011559][ T8100] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 274.506776][ T8128] blktrace: Concurrent blktraces are not allowed on loop2 [ 275.290061][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 275.769848][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 275.929989][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 276.094509][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 276.129301][ T8151] random: crng reseeded on system resumption [ 277.369979][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 277.488479][ T8171] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 277.849929][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 278.009996][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 278.169932][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 285.210124][ T8260] ptrace attach of "./syz-executor exec"[8267] was attempted by "./syz-executor exec"[8260] [ 285.677133][ T8273] random: crng reseeded on system resumption [ 286.107075][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.140723][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.675830][ T8347] syz.1.398 uses obsolete (PF_INET,SOCK_PACKET) [ 291.696099][ T8290] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 291.696129][ T8290] Bluetooth: hci0: unexpected subevent 0x0a length: 725 > 30 [ 293.789408][ T8381] FAULT_INJECTION: forcing a failure. [ 293.789408][ T8381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 293.875629][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.1.404 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 293.875684][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.875704][ T8381] Call Trace: [ 293.875714][ T8381] [ 293.875727][ T8381] dump_stack_lvl+0x16c/0x1f0 [ 293.875788][ T8381] should_fail_ex+0x512/0x640 [ 293.875845][ T8381] get_futex_key+0x1d0/0x1540 [ 293.875892][ T8381] ? __pfx_get_futex_key+0x10/0x10 [ 293.875928][ T8381] ? plist_check_head+0xa3/0x150 [ 293.875967][ T8381] ? find_held_lock+0x2b/0x80 [ 293.876016][ T8381] futex_wake+0xe7/0x4e0 [ 293.876068][ T8381] ? __pfx_futex_wake+0x10/0x10 [ 293.876125][ T8381] ? __lock_acquire+0xb8a/0x1c90 [ 293.876181][ T8381] do_futex+0x1e3/0x350 [ 293.876223][ T8381] ? __pfx_do_futex+0x10/0x10 [ 293.876269][ T8381] ? find_held_lock+0x2b/0x80 [ 293.876308][ T8381] __x64_sys_futex+0x1e0/0x4c0 [ 293.876357][ T8381] ? __pfx___x64_sys_futex+0x10/0x10 [ 293.876411][ T8381] ? _copy_to_user+0x48/0xd0 [ 293.876477][ T8381] do_syscall_64+0xcd/0x490 [ 293.876533][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.876566][ T8381] RIP: 0033:0x7f3c5b38e929 [ 293.876593][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.876625][ T8381] RSP: 002b:00007f3c5c1a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 293.876656][ T8381] RAX: ffffffffffffffda RBX: 00007f3c5b5b5fa8 RCX: 00007f3c5b38e929 [ 293.876678][ T8381] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c5b5b5fac [ 293.876698][ T8381] RBP: 00007f3c5b5b5fa0 R08: 00007f3c5c1a9000 R09: 0000000000000000 [ 293.876719][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c5b5b5fac [ 293.876737][ T8381] R13: 0000000000000000 R14: 00007ffebb050ac0 R15: 00007ffebb050ba8 [ 293.876776][ T8381] [ 294.064933][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.801965][ T8400] random: crng reseeded on system resumption [ 295.914743][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.970687][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.042150][ T8474] random: crng reseeded on system resumption [ 303.136820][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.145675][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.450243][ T8492] random: crng reseeded on system resumption [ 305.536328][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.548492][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.608687][ T8502] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 307.993344][ T8290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.003434][ T8290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.015017][ T8290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.028208][ T8290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.036915][ T8290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.374587][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 308.529377][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.547569][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.555534][ T8511] bridge_slave_0: entered allmulticast mode [ 308.563940][ T8511] bridge_slave_0: entered promiscuous mode [ 308.573829][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.582196][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.589592][ T8511] bridge_slave_1: entered allmulticast mode [ 308.598336][ T8511] bridge_slave_1: entered promiscuous mode [ 308.664970][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.686459][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.754847][ T8511] team0: Port device team_slave_0 added [ 308.765224][ T8511] team0: Port device team_slave_1 added [ 308.814044][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.823276][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.850385][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.864446][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.871896][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.898708][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.980670][ T8511] hsr_slave_0: entered promiscuous mode [ 308.987660][ T8511] hsr_slave_1: entered promiscuous mode [ 308.995487][ T8511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.003597][ T8511] Cannot create hsr debugfs directory [ 309.253167][ T8511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.269542][ T8511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.282347][ T8511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.294436][ T8511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.447495][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.484505][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.508570][ T8319] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.515839][ T8319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.538328][ T8319] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.545610][ T8319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.936730][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.092405][ T8284] Bluetooth: hci4: command tx timeout [ 310.475074][ T8290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.487023][ T8290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.496266][ T8290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.507591][ T8290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.529053][ T8290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.782459][ T8511] veth0_vlan: entered promiscuous mode [ 310.892565][ T8511] veth1_vlan: entered promiscuous mode [ 311.027240][ T8511] veth0_macvtap: entered promiscuous mode [ 311.085354][ T8511] veth1_macvtap: entered promiscuous mode [ 311.171802][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.201210][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.266077][ T8511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.277060][ T8511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.286663][ T8511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.296905][ T8511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.554418][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 311.599315][ T8311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.619832][ T8311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.757197][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.764994][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.778233][ T8550] bridge_slave_0: entered allmulticast mode [ 311.789884][ T8550] bridge_slave_0: entered promiscuous mode [ 311.800468][ T8283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.809515][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.817942][ T8283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.824975][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.835642][ T8550] bridge_slave_1: entered allmulticast mode [ 311.844512][ T8550] bridge_slave_1: entered promiscuous mode [ 311.926454][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.953215][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.063591][ T8550] team0: Port device team_slave_0 added [ 312.100677][ T8550] team0: Port device team_slave_1 added [ 312.170284][ T8290] Bluetooth: hci4: command tx timeout [ 312.181607][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.188702][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.214644][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.229337][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.291442][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.301992][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.328065][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.446751][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.570161][ T8290] Bluetooth: hci5: command tx timeout [ 312.782352][ T8550] hsr_slave_0: entered promiscuous mode [ 312.807754][ T8550] hsr_slave_1: entered promiscuous mode [ 312.876009][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.907231][ T8550] Cannot create hsr debugfs directory [ 313.032445][ T8575] zswap: compressor not available [ 313.624205][ T8550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.641824][ T8550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.673930][ T8550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.763327][ T8550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.249871][ T8290] Bluetooth: hci4: command tx timeout [ 314.376454][ T8284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.385330][ T8284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.394437][ T8284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.402914][ T8284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.411200][ T8284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.616300][ T8604] random: crng reseeded on system resumption [ 314.653720][ T8290] Bluetooth: hci5: command tx timeout [ 314.788293][ T8592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.842377][ T8592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.322675][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.474054][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.516117][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.523334][ T8311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.592588][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.599906][ T8286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.707892][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 315.999452][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.020286][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.027675][ T8600] bridge_slave_0: entered allmulticast mode [ 316.052031][ T8600] bridge_slave_0: entered promiscuous mode [ 316.104821][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.122910][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.123159][ T8600] bridge_slave_1: entered allmulticast mode [ 316.159382][ T8600] bridge_slave_1: entered promiscuous mode [ 316.349897][ T8290] Bluetooth: hci4: command tx timeout [ 316.488899][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.500339][ T8290] Bluetooth: hci6: command tx timeout [ 316.742524][ T8290] Bluetooth: hci5: command tx timeout [ 316.790452][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.830881][ T8600] team0: Port device team_slave_0 added [ 316.841083][ T8600] team0: Port device team_slave_1 added [ 316.878130][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.888518][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.917048][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.940634][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.985254][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.015471][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.310710][ T8600] hsr_slave_0: entered promiscuous mode [ 317.343530][ T8600] hsr_slave_1: entered promiscuous mode [ 317.371267][ T8600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.378921][ T8600] Cannot create hsr debugfs directory [ 317.903289][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.572493][ T8290] Bluetooth: hci6: command tx timeout [ 318.711404][ T8600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.761831][ T8600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.812794][ T8290] Bluetooth: hci5: command tx timeout [ 318.821451][ T8600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.874300][ T8600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 319.296322][ T8550] veth0_vlan: entered promiscuous mode [ 319.494032][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.527891][ T8550] veth1_vlan: entered promiscuous mode [ 319.593319][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.717607][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.724813][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.774846][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.782078][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.826366][ T8550] veth0_macvtap: entered promiscuous mode [ 319.933116][ T8550] veth1_macvtap: entered promiscuous mode [ 320.177125][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.244487][ T8550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.327308][ T8550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.360085][ T8550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.398097][ T8550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.433922][ T8550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.651546][ T8290] Bluetooth: hci6: command tx timeout [ 320.907221][ T8288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.071960][ T8288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.253847][ T8286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.299765][ T8286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.535865][ T8712] random: crng reseeded on system resumption [ 321.850711][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.861927][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.905305][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.260509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.266911][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.410412][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 322.465438][ T8728] netlink: 330 bytes leftover after parsing attributes in process `syz.3.447'. [ 322.530173][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 322.731485][ T8290] Bluetooth: hci6: command tx timeout [ 323.235499][ T8600] veth0_vlan: entered promiscuous mode [ 323.255417][ T8600] veth1_vlan: entered promiscuous mode [ 323.363531][ T8600] veth0_macvtap: entered promiscuous mode [ 323.398897][ T8600] veth1_macvtap: entered promiscuous mode [ 323.435264][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.502861][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.535657][ T8600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.564213][ T8600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.580979][ T8600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.591564][ T8744] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 323.599913][ T8600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.642794][ T8741] blktrace: Concurrent blktraces are not allowed on loop2 [ 323.875333][ T8288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.917252][ T8288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.051233][ T8708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.059238][ T8708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.336966][ T8759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.452'. [ 324.413960][ T8759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.452'. [ 324.425925][ T8759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.452'. [ 324.437109][ T8759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.452'. [ 324.454120][ T8759] netlink: 342 bytes leftover after parsing attributes in process `syz.5.452'. [ 325.027866][ T8758] FAULT_INJECTION: forcing a failure. [ 325.027866][ T8758] name failslab, interval 1, probability 0, space 0, times 0 [ 325.042310][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.4.451 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 325.042359][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.042379][ T8758] Call Trace: [ 325.042390][ T8758] [ 325.042403][ T8758] dump_stack_lvl+0x16c/0x1f0 [ 325.042460][ T8758] should_fail_ex+0x512/0x640 [ 325.042512][ T8758] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 325.042582][ T8758] should_failslab+0xc2/0x120 [ 325.042614][ T8758] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 325.042678][ T8758] ? __d_alloc+0x31/0xaa0 [ 325.042736][ T8758] __d_alloc+0x31/0xaa0 [ 325.042791][ T8758] d_alloc_pseudo+0x1c/0xc0 [ 325.042829][ T8758] alloc_file_pseudo+0xcf/0x230 [ 325.042868][ T8758] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 325.042905][ T8758] ? alloc_fd+0x471/0x7d0 [ 325.042957][ T8758] sock_alloc_file+0x50/0x210 [ 325.042999][ T8758] __sys_socket+0x1c0/0x260 [ 325.043036][ T8758] ? fput+0x70/0xf0 [ 325.043066][ T8758] ? __pfx___sys_socket+0x10/0x10 [ 325.043106][ T8758] ? xfd_validate_state+0x61/0x180 [ 325.043149][ T8758] ? __pfx_ksys_write+0x10/0x10 [ 325.043216][ T8758] __x64_sys_socket+0x72/0xb0 [ 325.043254][ T8758] ? lockdep_hardirqs_on+0x7c/0x110 [ 325.043302][ T8758] do_syscall_64+0xcd/0x490 [ 325.043355][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.043388][ T8758] RIP: 0033:0x7f2052f8e929 [ 325.043414][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.043445][ T8758] RSP: 002b:00007f2053d4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 325.043475][ T8758] RAX: ffffffffffffffda RBX: 00007f20531b6080 RCX: 00007f2052f8e929 [ 325.043496][ T8758] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 325.043516][ T8758] RBP: 00007f2053010b39 R08: 0000000000000000 R09: 0000000000000000 [ 325.043535][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.043554][ T8758] R13: 0000000000000000 R14: 00007f20531b6080 R15: 00007ffd45c4e748 [ 325.043594][ T8758] [ 325.827481][ T8779] vivid-007: ================= START STATUS ================= [ 325.878510][ T8779] vivid-007: Generate PTS: true [ 325.906720][ T8779] vivid-007: Generate SCR: true [ 325.932118][ T8779] tpg source WxH: 320x240 (Y'CbCr) [ 325.937391][ T8779] tpg field: 1 [ 325.941143][ T8779] tpg crop: (0,0)/320x240 [ 325.945577][ T8779] tpg compose: (0,0)/320x240 [ 325.950514][ T8779] tpg colorspace: 8 [ 325.954478][ T8779] tpg transfer function: 0/0 [ 325.959126][ T8779] tpg Y'CbCr encoding: 0/0 [ 325.963746][ T8779] tpg quantization: 0/0 [ 325.968022][ T8779] tpg RGB range: 0/2 [ 325.972947][ T8779] vivid-007: ================== END STATUS ================== [ 328.501023][ T8812] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 328.732901][ T8812] FAULT_INJECTION: forcing a failure. [ 328.732901][ T8812] name failslab, interval 1, probability 0, space 0, times 0 [ 328.789915][ T8812] CPU: 1 UID: 0 PID: 8812 Comm: syz.6.459 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 328.789965][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.789986][ T8812] Call Trace: [ 328.789997][ T8812] [ 328.790011][ T8812] dump_stack_lvl+0x16c/0x1f0 [ 328.790069][ T8812] should_fail_ex+0x512/0x640 [ 328.790119][ T8812] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 328.790176][ T8812] should_failslab+0xc2/0x120 [ 328.790210][ T8812] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 328.790264][ T8812] ? proc_alloc_inode+0x25/0x200 [ 328.790319][ T8812] ? __pfx_proc_alloc_inode+0x10/0x10 [ 328.790364][ T8812] proc_alloc_inode+0x25/0x200 [ 328.790410][ T8812] alloc_inode+0x61/0x240 [ 328.790460][ T8812] new_inode+0x22/0x1c0 [ 328.790500][ T8812] proc_pid_make_inode+0x22/0x160 [ 328.790551][ T8812] proc_pident_instantiate+0x85/0x320 [ 328.790612][ T8812] proc_fill_cache+0x35e/0x470 [ 328.790661][ T8812] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 328.790711][ T8812] ? __pfx_proc_fill_cache+0x10/0x10 [ 328.790802][ T8812] proc_pident_readdir+0x1bc/0x560 [ 328.790865][ T8812] iterate_dir+0x296/0xb40 [ 328.790913][ T8812] __x64_sys_getdents+0x13c/0x2b0 [ 328.790956][ T8812] ? __pfx___x64_sys_getdents+0x10/0x10 [ 328.791007][ T8812] ? __pfx_filldir+0x10/0x10 [ 328.791065][ T8812] do_syscall_64+0xcd/0x490 [ 328.791129][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.791164][ T8812] RIP: 0033:0x7fec8798e929 [ 328.791198][ T8812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.791232][ T8812] RSP: 002b:00007fec888cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 328.791263][ T8812] RAX: ffffffffffffffda RBX: 00007fec87bb5fa0 RCX: 00007fec8798e929 [ 328.791284][ T8812] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000008 [ 328.791304][ T8812] RBP: 00007fec87a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 328.791323][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.791342][ T8812] R13: 0000000000000000 R14: 00007fec87bb5fa0 R15: 00007ffd131776b8 [ 328.791385][ T8812] [ 329.014311][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.597583][ T8838] random: crng reseeded on system resumption [ 330.765271][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.819553][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.039973][ T8864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.046974][ T8864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.100705][ T8864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.106835][ T8864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.133742][ T8864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.161755][ T8864] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.177561][ T8864] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 334.213758][ T8864] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.220045][ T8864] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 334.238289][ T8864] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 334.265233][ T8864] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 334.275926][ T8864] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 334.295650][ T8864] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 334.316770][ T8867] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 335.139883][ T8284] Bluetooth: hci0: command 0x0406 tx timeout [ 336.089895][ T8284] Bluetooth: hci2: command 0x0406 tx timeout [ 336.170000][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.176110][ T8284] Bluetooth: hci3: command 0x0406 tx timeout [ 336.182196][ T8290] Bluetooth: hci1: command 0x0406 tx timeout [ 336.250175][ T8909] Bluetooth: hci5: command 0x0c1a tx timeout [ 336.337511][ T8909] Bluetooth: hci6: command 0x0c1a tx timeout [ 337.628608][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 338.254056][ T8909] Bluetooth: hci4: command 0x0c1a tx timeout [ 338.329836][ T8909] Bluetooth: hci5: command 0x0c1a tx timeout [ 338.410276][ T8909] Bluetooth: hci6: command 0x0c1a tx timeout [ 338.933100][ T8947] random: crng reseeded on system resumption [ 339.161371][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.176643][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.688093][ T8956] netlink: 93 bytes leftover after parsing attributes in process `syz.4.480'. [ 340.329998][ T8909] Bluetooth: hci4: command 0x0c1a tx timeout [ 340.409841][ T8909] Bluetooth: hci5: command 0x0c1a tx timeout [ 340.508711][ T8909] Bluetooth: hci6: command 0x0c1a tx timeout [ 341.922794][ T8988] __vm_enough_memory: pid: 8988, comm: syz.4.486, bytes: 4398046511104 not enough memory for the allocation [ 343.977079][ T9019] net_ratelimit: 21 callbacks suppressed [ 343.977101][ T9019] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 344.941704][ T9047] random: crng reseeded on system resumption [ 348.861413][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.962671][ T9080] ptrace attach of "./syz-executor exec"[8600] was attempted by "./syz-executor exec"[9080] [ 351.057305][ T8512] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.067719][ T8512] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.469850][ T8512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.489312][ T8512] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.500485][ T8512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.286902][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 352.894877][ T9165] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 352.905380][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.933559][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.943737][ T9137] bridge_slave_0: entered allmulticast mode [ 352.998022][ T9137] bridge_slave_0: entered promiscuous mode [ 353.074001][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.130987][ T9167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.141466][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.157081][ T9167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.170800][ T9137] bridge_slave_1: entered allmulticast mode [ 353.178428][ T9137] bridge_slave_1: entered promiscuous mode [ 353.218394][ T9167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.229438][ T9167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.251875][ T9167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 353.267908][ T9167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 353.276022][ T9167] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 353.328496][ T9167] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 353.378333][ T9167] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 353.472129][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.483050][ T9167] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 353.494506][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.603324][ T9137] team0: Port device team_slave_0 added [ 353.662434][ T9137] team0: Port device team_slave_1 added [ 353.956336][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.980584][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.049963][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.082421][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.089438][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.129019][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.392733][ T9137] hsr_slave_0: entered promiscuous mode [ 354.400270][ T9137] hsr_slave_1: entered promiscuous mode [ 354.408270][ T9137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.416710][ T9137] Cannot create hsr debugfs directory [ 354.702096][ T9193] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 354.979568][ T9196] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 355.210315][ T8909] Bluetooth: hci2: command 0x0406 tx timeout [ 355.211384][ T8290] Bluetooth: hci0: command 0x0406 tx timeout [ 355.224046][ T8512] Bluetooth: hci1: command 0x0406 tx timeout [ 355.290297][ T8512] Bluetooth: hci6: command 0x0c1a tx timeout [ 355.291120][ T8290] Bluetooth: hci5: command 0x0c1a tx timeout [ 355.291219][ T8909] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.313739][ T8290] Bluetooth: hci3: command 0x0406 tx timeout [ 355.370106][ T8909] Bluetooth: hci7: command 0x041b tx timeout [ 355.455831][ T9137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 355.557063][ T9137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 355.650969][ T9137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 355.734193][ T9137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.427232][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.632847][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.652842][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.660091][ T8286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.719563][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.726769][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.042466][ T9229] random: crng reseeded on system resumption [ 357.183510][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.264899][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.453934][ T8909] Bluetooth: hci7: command 0x041b tx timeout [ 357.912839][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.958044][ T9247] FAULT_INJECTION: forcing a failure. [ 357.958044][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 358.037922][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.6.520 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 358.037958][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.037971][ T9247] Call Trace: [ 358.037978][ T9247] [ 358.037986][ T9247] dump_stack_lvl+0x16c/0x1f0 [ 358.038023][ T9247] should_fail_ex+0x512/0x640 [ 358.038055][ T9247] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 358.038087][ T9247] should_failslab+0xc2/0x120 [ 358.038107][ T9247] __kmalloc_cache_noprof+0x6a/0x3e0 [ 358.038136][ T9247] ? io_uring_setup+0x24f/0x2080 [ 358.038168][ T9247] io_uring_setup+0x24f/0x2080 [ 358.038228][ T9247] ? __pfx_io_uring_setup+0x10/0x10 [ 358.038258][ T9247] ? do_futex+0x122/0x350 [ 358.038287][ T9247] ? __pfx_do_futex+0x10/0x10 [ 358.038313][ T9247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 358.038366][ T9247] ? xfd_validate_state+0x61/0x180 [ 358.038397][ T9247] ? __pfx_do_writev+0x10/0x10 [ 358.038433][ T9247] __x64_sys_io_uring_setup+0xc2/0x170 [ 358.038486][ T9247] do_syscall_64+0xcd/0x490 [ 358.038525][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.038549][ T9247] RIP: 0033:0x7fec8798e929 [ 358.038567][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.038589][ T9247] RSP: 002b:00007fec8888a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 358.038610][ T9247] RAX: ffffffffffffffda RBX: 00007fec87bb6160 RCX: 00007fec8798e929 [ 358.038625][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 358.038639][ T9247] RBP: 00007fec87a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 358.038653][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.038667][ T9247] R13: 0000000000000000 R14: 00007fec87bb6160 R15: 00007ffd131776b8 [ 358.038695][ T9247] [ 358.223599][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.542301][ T8909] Bluetooth: hci7: command 0x041b tx timeout [ 360.153090][ T9137] veth0_vlan: entered promiscuous mode [ 360.239613][ T9137] veth1_vlan: entered promiscuous mode [ 360.539744][ T9137] veth0_macvtap: entered promiscuous mode [ 360.624887][ T9137] veth1_macvtap: entered promiscuous mode [ 360.667792][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.712420][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.752363][ T9137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.762148][ T9137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.771493][ T9137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.780575][ T9137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.983293][ T8286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.001282][ T8286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.146861][ T8283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.182518][ T8283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.610214][ T8909] Bluetooth: hci7: command 0x041b tx timeout [ 363.691806][ T9209] Bluetooth: hci7: command 0x041b tx timeout [ 364.398124][ T9334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 364.875163][ T9338] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 365.610560][ T8909] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 365.774166][ T8909] Bluetooth: hci7: command 0x041b tx timeout [ 367.028847][ T9375] netlink: 338 bytes leftover after parsing attributes in process `syz.4.535'. [ 367.354410][ T8909] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 369.966125][ T9209] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 369.978463][ T9209] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 370.433282][ T9399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.440522][ T9399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.447222][ T9399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.453731][ T9399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.467460][ T9399] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 370.474109][ T9399] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 370.484296][ T9399] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 370.491952][ T9399] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 370.499564][ T9399] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 372.089986][ T8909] Bluetooth: hci0: command 0x0406 tx timeout [ 372.489933][ T8909] Bluetooth: hci6: command 0x0c1a tx timeout [ 372.496078][ T8909] Bluetooth: hci5: command 0x0c1a tx timeout [ 372.505346][ T9209] Bluetooth: hci4: command 0x0c1a tx timeout [ 372.514975][ T8512] Bluetooth: hci3: command 0x0406 tx timeout [ 372.521178][ T8290] Bluetooth: hci1: command 0x0406 tx timeout [ 372.527204][ T8290] Bluetooth: hci2: command 0x0406 tx timeout [ 372.545159][ T8284] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.554266][ T8284] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 372.578274][ T8284] Bluetooth: hci7: command 0x041b tx timeout [ 372.584454][ T8290] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 372.593437][ T8290] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 372.601516][ T8290] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.576225][ T9449] chnl_net:caif_netlink_parms(): no params data found [ 374.057548][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.081119][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.088636][ T9449] bridge_slave_0: entered allmulticast mode [ 374.111807][ T9449] bridge_slave_0: entered promiscuous mode [ 374.288031][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.297597][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.320180][ T9449] bridge_slave_1: entered allmulticast mode [ 374.331091][ T9449] bridge_slave_1: entered promiscuous mode [ 374.569905][ T8290] Bluetooth: hci6: command 0x0c1a tx timeout [ 374.590502][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.630869][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.654042][ T8290] Bluetooth: hci8: command tx timeout [ 374.806398][ T9449] team0: Port device team_slave_0 added [ 374.914981][ T9449] team0: Port device team_slave_1 added [ 375.030421][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.038926][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.065787][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.140354][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.147620][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.180945][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.361949][ T9449] hsr_slave_0: entered promiscuous mode [ 375.389117][ T9449] hsr_slave_1: entered promiscuous mode [ 375.415689][ T9449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.425511][ T9449] Cannot create hsr debugfs directory [ 375.970570][ T9449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 376.109175][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.550'. [ 376.133237][ T9449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 376.435643][ T9449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 376.448959][ T9449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.736053][ T8290] Bluetooth: hci8: command tx timeout [ 376.772579][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.816962][ T9449] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.846877][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.854208][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.884337][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.891589][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.945801][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'. [ 376.967790][ T9501] hub 8-0:1.0: USB hub found [ 376.973799][ T9501] hub 8-0:1.0: 1 port detected [ 377.909141][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.405267][ T9449] veth0_vlan: entered promiscuous mode [ 378.425700][ T9449] veth1_vlan: entered promiscuous mode [ 378.485692][ T9449] veth0_macvtap: entered promiscuous mode [ 378.524440][ T9449] veth1_macvtap: entered promiscuous mode [ 378.556502][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.619300][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.634571][ T9449] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.645925][ T9449] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.661892][ T9449] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.670826][ T9449] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.810144][ T8290] Bluetooth: hci8: command tx timeout [ 379.172096][ T8608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.181438][ T8608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.200822][ T9529] nvme_fcloop: unknown parameter or missing value '^/]' [ 379.303603][ T8286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.375426][ T8286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.891079][ T8290] Bluetooth: hci8: command tx timeout [ 382.029989][ T9560] can0: slcan on ttyS2. [ 382.290702][ T9555] can0 (unregistered): slcan off ttyS2. [ 383.214814][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.562'. [ 383.238752][ T9566] bridge0: port 3(netdevsim1) entered blocking state [ 383.246786][ T9566] bridge0: port 3(netdevsim1) entered disabled state [ 383.257168][ T9566] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 383.293966][ T9566] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 383.323573][ T9566] bridge0: port 3(netdevsim1) entered blocking state [ 383.330558][ T9566] bridge0: port 3(netdevsim1) entered forwarding state [ 383.714403][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.720866][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.855252][ T9574] can: request_module (can-proto-3) failed. [ 385.233310][ T9601] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.255838][ T9601] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.287458][ T9601] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.310029][ T9601] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.320504][ T9601] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.336951][ T9601] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.347079][ T9601] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 385.377572][ T9601] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 385.396175][ T9601] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 385.404171][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.8.567'. [ 385.426617][ T9601] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 385.522623][ T9601] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 385.621298][ T9450] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 385.623180][ T9450] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 385.624056][ T9450] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 385.625243][ T9450] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 385.626486][ T9450] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 386.564568][ T9611] chnl_net:caif_netlink_parms(): no params data found [ 386.735069][ T9450] Bluetooth: hci0: command 0x0406 tx timeout [ 387.011123][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.084208][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.101226][ T9651] random: crng reseeded on system resumption [ 387.152045][ T9611] bridge_slave_0: entered allmulticast mode [ 387.262699][ T9611] bridge_slave_0: entered promiscuous mode [ 387.299263][ T9450] Bluetooth: hci1: command 0x0406 tx timeout [ 387.305973][ T8290] Bluetooth: hci2: command 0x0406 tx timeout [ 387.306439][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.319429][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.328427][ T9611] bridge_slave_1: entered allmulticast mode [ 387.335981][ T9611] bridge_slave_1: entered promiscuous mode [ 387.372877][ T8290] Bluetooth: hci6: command 0x0c1a tx timeout [ 387.379140][ T9450] Bluetooth: hci5: command 0x0c1a tx timeout [ 387.392505][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 387.402736][ T9450] Bluetooth: hci3: command 0x0406 tx timeout [ 387.449249][ T9450] Bluetooth: hci8: command 0x0c1a tx timeout [ 387.455344][ T9450] Bluetooth: hci7: command 0x041b tx timeout [ 387.711767][ T9450] Bluetooth: hci9: command tx timeout [ 387.728326][ T9611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.744979][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.777645][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.787974][ T9611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.057570][ T9611] team0: Port device team_slave_0 added [ 388.087679][ T9611] team0: Port device team_slave_1 added [ 388.196079][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.211669][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.244119][ T9611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.261821][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.268985][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.299151][ T9611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.573263][ T9670] HfR: entered promiscuous mode [ 388.660457][ T9611] hsr_slave_0: entered promiscuous mode [ 388.675867][ T9611] hsr_slave_1: entered promiscuous mode [ 388.707895][ T9611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.736276][ T9611] Cannot create hsr debugfs directory [ 389.093990][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.576'. [ 389.241550][ T9611] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 389.273586][ T9611] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 389.297374][ T9611] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 389.321843][ T9611] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 389.528261][ T9450] Bluetooth: hci8: command 0x0c1a tx timeout [ 389.715355][ T9611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.740349][ T9611] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.768678][ T9450] Bluetooth: hci9: command tx timeout [ 389.776946][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.784261][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.967864][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.975143][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.653205][ T9450] Bluetooth: hci8: command 0x0c1a tx timeout [ 391.800886][ T9611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.849283][ T9450] Bluetooth: hci9: command tx timeout [ 392.015584][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.8.581'. [ 392.254405][ T9720] team0: Port device team_slave_1 removed [ 392.632965][ T9734] FAULT_INJECTION: forcing a failure. [ 392.632965][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 392.662106][ T9734] CPU: 0 UID: 0 PID: 9734 Comm: syz.8.583 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 392.662141][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.662155][ T9734] Call Trace: [ 392.662163][ T9734] [ 392.662172][ T9734] dump_stack_lvl+0x16c/0x1f0 [ 392.662212][ T9734] should_fail_ex+0x512/0x640 [ 392.662246][ T9734] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 392.662286][ T9734] should_failslab+0xc2/0x120 [ 392.662316][ T9734] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 392.662352][ T9734] ? __alloc_skb+0x2b2/0x380 [ 392.662389][ T9734] __alloc_skb+0x2b2/0x380 [ 392.662421][ T9734] ? __pfx___alloc_skb+0x10/0x10 [ 392.662455][ T9734] ? tcp_chrono_stop+0x95/0x420 [ 392.662497][ T9734] tcp_stream_alloc_skb+0x34/0x570 [ 392.662530][ T9734] tcp_connect+0xe75/0x5480 [ 392.662582][ T9734] ? __pfx_tcp_connect+0x10/0x10 [ 392.662616][ T9734] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 392.662653][ T9734] ? inet6_hash_connect+0xe2/0x180 [ 392.662679][ T9734] tcp_v6_connect+0x157c/0x2170 [ 392.662711][ T9734] ? __pfx_tcp_v6_connect+0x10/0x10 [ 392.662734][ T9734] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 392.662778][ T9734] ? __lock_acquire+0xb8a/0x1c90 [ 392.662819][ T9734] ? __inet_stream_connect+0x3c5/0x1020 [ 392.662850][ T9734] __inet_stream_connect+0x3c5/0x1020 [ 392.662891][ T9734] ? __pfx___inet_stream_connect+0x10/0x10 [ 392.662927][ T9734] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.662968][ T9734] ? __pfx_inet_stream_connect+0x10/0x10 [ 392.663001][ T9734] ? __local_bh_enable_ip+0xa4/0x120 [ 392.663031][ T9734] ? __pfx_inet_stream_connect+0x10/0x10 [ 392.663061][ T9734] inet_stream_connect+0x57/0xa0 [ 392.663094][ T9734] __sys_connect_file+0x13e/0x1a0 [ 392.663127][ T9734] __sys_connect+0x13b/0x160 [ 392.663156][ T9734] ? __pfx___sys_connect+0x10/0x10 [ 392.663196][ T9734] ? xfd_validate_state+0x61/0x180 [ 392.663227][ T9734] ? __sys_setsockopt+0x140/0x1a0 [ 392.663264][ T9734] __x64_sys_connect+0x72/0xb0 [ 392.663293][ T9734] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.663335][ T9734] do_syscall_64+0xcd/0x490 [ 392.663377][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.663401][ T9734] RIP: 0033:0x7f498358e929 [ 392.663420][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.663442][ T9734] RSP: 002b:00007f49844d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 392.663464][ T9734] RAX: ffffffffffffffda RBX: 00007f49837b5fa0 RCX: 00007f498358e929 [ 392.663479][ T9734] RDX: 000000000000001b RSI: 00002000000018c0 RDI: 0000000000000003 [ 392.663493][ T9734] RBP: 00007f4983610b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.663507][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.663520][ T9734] R13: 0000000000000000 R14: 00007f49837b5fa0 R15: 00007fff65da83a8 [ 392.663548][ T9734] [ 393.055769][ T9611] veth0_vlan: entered promiscuous mode [ 393.087256][ T9611] veth1_vlan: entered promiscuous mode [ 393.163408][ T9611] veth0_macvtap: entered promiscuous mode [ 393.211616][ T9611] veth1_macvtap: entered promiscuous mode [ 393.231115][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.249733][ T9611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.267054][ T9611] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.278465][ T9611] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.287223][ T9611] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.313998][ T9611] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.619890][ T8286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.627949][ T8286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.819396][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.839237][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.931052][ T9450] Bluetooth: hci9: command tx timeout [ 394.259565][ T9745] random: crng reseeded on system resumption [ 394.506541][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.573135][ T9746] binder: 9744:9746 ioctl c018620c 0 returned -1 [ 394.589351][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.746393][ T9762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.810538][ T9762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.820371][ T9762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.826640][ T9762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 395.833527][ T9762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.882669][ T9762] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.889333][ T9762] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 395.895619][ T9762] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 395.902450][ T9762] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 395.909074][ T9762] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 395.915216][ T9762] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 396.015208][ T9762] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 396.247415][ T9762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 397.734634][ T8284] Bluetooth: hci0: command 0x0406 tx timeout [ 397.850426][ T8284] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.856537][ T8284] Bluetooth: hci3: command 0x0406 tx timeout [ 397.865027][ T9450] Bluetooth: hci1: command 0x0406 tx timeout [ 397.871541][ T9450] Bluetooth: hci2: command 0x0406 tx timeout [ 397.928239][ T9450] Bluetooth: hci8: command 0x0c1a tx timeout [ 397.934343][ T9450] Bluetooth: hci7: command 0x041b tx timeout [ 397.940572][ T8909] Bluetooth: hci6: command 0x0c1a tx timeout [ 397.946608][ T8909] Bluetooth: hci5: command 0x0c1a tx timeout [ 397.953896][ T8284] Bluetooth: hci9: command 0x0c1a tx timeout [ 399.060908][ T9797] nvme_fcloop: unknown parameter or missing value '^/]' [ 400.005773][ T8284] Bluetooth: hci9: command 0x0c1a tx timeout [ 400.510399][ T9828] random: crng reseeded on system resumption [ 400.820019][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.846570][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.084860][ T8284] Bluetooth: hci9: command 0x0c1a tx timeout [ 402.377569][ T9846] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 403.760518][ T9864] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input22 [ 404.363996][ T9869] random: crng reseeded on system resumption [ 404.622909][ T9875] netlink: 'syz.9.606': attribute type 2 has an invalid length. [ 404.665827][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.687717][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.654376][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.607'. [ 405.695318][ T9877] netlink: 13 bytes leftover after parsing attributes in process `syz.8.607'. [ 405.840403][ T9881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 406.786319][ T9890] binder: 9889:9890 ioctl c018620c 0 returned -1 [ 407.185748][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.9.612'. [ 407.209806][ T9899] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.291950][ T9897] hub 8-0:1.0: USB hub found [ 407.299217][ T9897] hub 8-0:1.0: 1 port detected [ 408.743840][ T9909] FAULT_INJECTION: forcing a failure. [ 408.743840][ T9909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.743983][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.9.614 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 408.744026][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.744045][ T9909] Call Trace: [ 408.744054][ T9909] [ 408.744067][ T9909] dump_stack_lvl+0x16c/0x1f0 [ 408.744123][ T9909] should_fail_ex+0x512/0x640 [ 408.744178][ T9909] should_fail_alloc_page+0xe7/0x130 [ 408.744213][ T9909] prepare_alloc_pages+0x3c2/0x610 [ 408.744252][ T9909] ? rcu_is_watching+0x12/0xc0 [ 408.744292][ T9909] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 408.744344][ T9909] ? kasan_save_stack+0x42/0x60 [ 408.744403][ T9909] ? __lock_acquire+0x622/0x1c90 [ 408.744450][ T9909] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.744491][ T9909] ? __lock_acquire+0x622/0x1c90 [ 408.744541][ T9909] ? __lock_acquire+0x622/0x1c90 [ 408.744575][ T9909] ? __lock_acquire+0x622/0x1c90 [ 408.744606][ T9909] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.744644][ T9909] ? policy_nodemask+0xea/0x4e0 [ 408.744668][ T9909] alloc_pages_mpol+0x1fb/0x550 [ 408.744692][ T9909] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 408.744722][ T9909] folio_alloc_mpol_noprof+0x36/0x2f0 [ 408.744751][ T9909] vma_alloc_folio_noprof+0xed/0x1e0 [ 408.744778][ T9909] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 408.744803][ T9909] ? find_held_lock+0x2b/0x80 [ 408.744828][ T9909] ? __handle_mm_fault+0x1092/0x5490 [ 408.744863][ T9909] __handle_mm_fault+0x2f21/0x5490 [ 408.744901][ T9909] ? __pfx___handle_mm_fault+0x10/0x10 [ 408.744933][ T9909] ? __pte_offset_map_lock+0x174/0x310 [ 408.744957][ T9909] ? find_held_lock+0x2b/0x80 [ 408.744980][ T9909] ? find_held_lock+0x2b/0x80 [ 408.745010][ T9909] ? follow_page_pte+0x3af/0x14c0 [ 408.745043][ T9909] handle_mm_fault+0x589/0xd10 [ 408.745079][ T9909] __get_user_pages+0x589/0x3b80 [ 408.745114][ T9909] ? __pfx_mt_find+0x10/0x10 [ 408.745135][ T9909] ? __pfx___get_user_pages+0x10/0x10 [ 408.745172][ T9909] populate_vma_page_range+0x278/0x3a0 [ 408.745203][ T9909] ? __pfx_populate_vma_page_range+0x10/0x10 [ 408.745231][ T9909] ? __pfx_find_vma_intersection+0x10/0x10 [ 408.745265][ T9909] __mm_populate+0x1d8/0x380 [ 408.745294][ T9909] ? __pfx___mm_populate+0x10/0x10 [ 408.745324][ T9909] ? up_write+0x1b2/0x520 [ 408.745362][ T9909] vm_mmap_pgoff+0x362/0x450 [ 408.745389][ T9909] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 408.745410][ T9909] ? find_held_lock+0x2b/0x80 [ 408.745440][ T9909] ? __x64_sys_futex+0x1e0/0x4c0 [ 408.745467][ T9909] ? __x64_sys_futex+0x1e9/0x4c0 [ 408.745505][ T9909] ksys_mmap_pgoff+0x7d/0x5c0 [ 408.745529][ T9909] ? xfd_validate_state+0x61/0x180 [ 408.745566][ T9909] __x64_sys_mmap+0x125/0x190 [ 408.745621][ T9909] do_syscall_64+0xcd/0x490 [ 408.745660][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.745684][ T9909] RIP: 0033:0x7fc189d8e929 [ 408.745703][ T9909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.745726][ T9909] RSP: 002b:00007fc18ab16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 408.745749][ T9909] RAX: ffffffffffffffda RBX: 00007fc189fb6080 RCX: 00007fc189d8e929 [ 408.745765][ T9909] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 408.745780][ T9909] RBP: 00007fc189e10b39 R08: 0000000000000002 R09: 0000000000008000 [ 408.745795][ T9909] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 408.745810][ T9909] R13: 0000000000000000 R14: 00007fc189fb6080 R15: 00007ffc1c75c488 [ 408.745839][ T9909] [ 410.714815][ T9948] random: crng reseeded on system resumption [ 411.033133][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.045465][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.097541][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.185429][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.511460][ T9961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 412.901005][ T9969] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 413.171507][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.622'. [ 413.347488][ T9987] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 413.531927][ T9980] team0: Port device team_slave_1 removed [ 414.129959][ T9450] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 414.140286][ T9450] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 414.159417][ T9450] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 414.178476][ T9450] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 414.187340][ T9450] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 414.490758][T10001] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 415.228335][ T9994] chnl_net:caif_netlink_parms(): no params data found [ 415.535467][T10020] random: crng reseeded on system resumption [ 415.546618][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.554181][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.561730][ T9994] bridge_slave_0: entered allmulticast mode [ 415.570420][ T9994] bridge_slave_0: entered promiscuous mode [ 415.596573][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.633865][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.678786][ T9994] bridge_slave_1: entered allmulticast mode [ 415.704384][ T9994] bridge_slave_1: entered promiscuous mode [ 415.985174][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.020807][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.051240][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.066477][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.114905][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.155388][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.237974][ T9450] Bluetooth: hci10: command tx timeout [ 416.541356][ T9994] team0: Port device team_slave_0 added [ 416.556490][ T9994] team0: Port device team_slave_1 added [ 416.960071][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.967418][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.002128][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.018307][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.025395][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.074421][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.427348][ T9994] hsr_slave_0: entered promiscuous mode [ 417.434654][ T9994] hsr_slave_1: entered promiscuous mode [ 417.461128][ T9994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.481225][ T9994] Cannot create hsr debugfs directory [ 418.200491][ T9994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.328274][ T9450] Bluetooth: hci10: command tx timeout [ 418.395548][ T9994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.515934][ T9994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.716191][ T9994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.416501][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.6.637'. [ 419.492704][T10054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.517310][T10054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.554796][T10054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.578377][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.764102][ T9994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.868193][ T9994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.956935][ T9994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.011986][ T9994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.394130][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.401079][ T9450] Bluetooth: hci10: command tx timeout [ 420.430461][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.444137][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.451324][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.474176][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.481334][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.500644][T10069] [U]  [ 420.503741][T10069] [U] [ 420.506509][T10069] [U] [ 420.509282][T10069] [U] [ 420.516785][T10069] [U] [ 420.519580][T10069] [U] [ 420.522345][T10069] [U] [ 420.525119][T10069] [U] [ 420.736371][T10069] [U] [ 420.739197][T10069] [U] [ 420.741987][T10069] [U] [ 420.744772][T10069] [U] [ 420.749883][T10073] [U] [ 420.998060][T10077] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 421.397057][T10069] sctp: failed to load transform for md5: -4 [ 421.824246][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.986573][T10095] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input25 [ 422.064801][ T9994] veth0_vlan: entered promiscuous mode [ 422.315398][ T9994] veth1_vlan: entered promiscuous mode [ 422.326397][T10100] random: crng reseeded on system resumption [ 422.481262][ T9450] Bluetooth: hci10: command tx timeout [ 422.904926][ T9994] veth0_macvtap: entered promiscuous mode [ 422.916275][ T9994] veth1_macvtap: entered promiscuous mode [ 422.939383][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.961756][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.987854][ T9994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.000588][ T9994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.017306][ T9994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.027385][ T9994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.107784][T10103] random: crng reseeded on system resumption [ 423.229943][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.257712][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.329979][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.376351][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.541586][ T8311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.554039][ T8311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.934329][T10110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'. [ 424.009313][T10112] hub 8-0:1.0: USB hub found [ 424.014915][T10112] hub 8-0:1.0: 1 port detected [ 426.041309][ T9450] Bluetooth: hci10: unexpected event 0x3e length: 726 > 260 [ 426.041355][ T9450] Bluetooth: hci10: unexpected subevent 0x0d length: 725 > 260 [ 426.067512][ T9450] Bluetooth: hci10: Unknown advertising packet type: 0x7f [ 426.067572][ T9450] Bluetooth: hci10: adv larger than maximum supported [ 426.076227][ T9450] Bluetooth: hci10: adv larger than maximum supported [ 426.085275][ T9450] Bluetooth: hci10: Unknown advertising packet type: 0x72 [ 426.092067][ T9450] Bluetooth: hci10: adv larger than maximum supported [ 426.099228][ T9450] Bluetooth: hci10: Malformed LE Event: 0x0d [ 426.629275][T10145] netlink: 'syz.8.648': attribute type 2 has an invalid length. [ 428.414241][T10157] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 430.558159][T10172] random: crng reseeded on system resumption [ 431.242035][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.253458][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.661821][T10206] FAULT_INJECTION: forcing a failure. [ 433.661821][T10206] name failslab, interval 1, probability 0, space 0, times 0 [ 433.697685][T10206] CPU: 0 UID: 0 PID: 10206 Comm: syz.6.659 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 433.697766][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.697784][T10206] Call Trace: [ 433.697794][T10206] [ 433.697805][T10206] dump_stack_lvl+0x16c/0x1f0 [ 433.697853][T10206] should_fail_ex+0x512/0x640 [ 433.697896][T10206] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 433.697948][T10206] should_failslab+0xc2/0x120 [ 433.697976][T10206] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 433.698015][T10206] ? d_instantiate+0x77/0x90 [ 433.698038][T10206] ? alloc_empty_file+0x55/0x1e0 [ 433.698070][T10206] alloc_empty_file+0x55/0x1e0 [ 433.698099][T10206] alloc_file_pseudo+0x13a/0x230 [ 433.698129][T10206] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 433.698159][T10206] ? alloc_fd+0x471/0x7d0 [ 433.698199][T10206] sock_alloc_file+0x50/0x210 [ 433.698225][T10206] __sys_socket+0x1c0/0x260 [ 433.698254][T10206] ? fput+0x70/0xf0 [ 433.698277][T10206] ? __pfx___sys_socket+0x10/0x10 [ 433.698307][T10206] ? xfd_validate_state+0x61/0x180 [ 433.698342][T10206] ? __pfx_ksys_write+0x10/0x10 [ 433.698386][T10206] __x64_sys_socket+0x72/0xb0 [ 433.698415][T10206] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.698453][T10206] do_syscall_64+0xcd/0x490 [ 433.698496][T10206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.698523][T10206] RIP: 0033:0x7fec8798e929 [ 433.698544][T10206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.698571][T10206] RSP: 002b:00007fec888cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.698597][T10206] RAX: ffffffffffffffda RBX: 00007fec87bb5fa0 RCX: 00007fec8798e929 [ 433.698616][T10206] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 433.698631][T10206] RBP: 00007fec87a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 433.698648][T10206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.698664][T10206] R13: 0000000000000000 R14: 00007fec87bb5fa0 R15: 00007ffd131776b8 [ 433.698707][T10206] [ 434.193359][T10216] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 435.333625][T10228] FAULT_INJECTION: forcing a failure. [ 435.333625][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 435.346800][T10228] CPU: 0 UID: 0 PID: 10228 Comm: syz.0.663 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 435.346843][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.346862][T10228] Call Trace: [ 435.346873][T10228] [ 435.346885][T10228] dump_stack_lvl+0x16c/0x1f0 [ 435.346936][T10228] should_fail_ex+0x512/0x640 [ 435.346986][T10228] should_failslab+0xc2/0x120 [ 435.347015][T10228] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 435.347061][T10228] ? do_raw_spin_lock+0x12c/0x2b0 [ 435.347106][T10228] ? inet_bind2_bucket_create+0x36/0x580 [ 435.347150][T10228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 435.347201][T10228] inet_bind2_bucket_create+0x36/0x580 [ 435.347249][T10228] __inet_hash_connect+0x1501/0x1e30 [ 435.347304][T10228] ? __pfx___inet6_check_established+0x10/0x10 [ 435.347341][T10228] ? __pfx___inet_hash_connect+0x10/0x10 [ 435.347392][T10228] ? inet6_hash_connect+0xe2/0x180 [ 435.347425][T10228] tcp_v6_connect+0x1301/0x2170 [ 435.347465][T10228] ? __pfx_tcp_v6_connect+0x10/0x10 [ 435.347494][T10228] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 435.347551][T10228] ? __lock_acquire+0xb8a/0x1c90 [ 435.347599][T10228] ? __inet_stream_connect+0x3c5/0x1020 [ 435.347638][T10228] __inet_stream_connect+0x3c5/0x1020 [ 435.347686][T10228] ? __pfx___inet_stream_connect+0x10/0x10 [ 435.347738][T10228] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 435.347800][T10228] ? __pfx_inet_stream_connect+0x10/0x10 [ 435.347841][T10228] ? __local_bh_enable_ip+0xa4/0x120 [ 435.347880][T10228] ? __pfx_inet_stream_connect+0x10/0x10 [ 435.347926][T10228] inet_stream_connect+0x57/0xa0 [ 435.347971][T10228] __sys_connect_file+0x13e/0x1a0 [ 435.348017][T10228] __sys_connect+0x13b/0x160 [ 435.348056][T10228] ? __pfx___sys_connect+0x10/0x10 [ 435.348105][T10228] ? xfd_validate_state+0x61/0x180 [ 435.348144][T10228] ? __sys_setsockopt+0x140/0x1a0 [ 435.348190][T10228] __x64_sys_connect+0x72/0xb0 [ 435.348229][T10228] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.348275][T10228] do_syscall_64+0xcd/0x490 [ 435.348321][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.348351][T10228] RIP: 0033:0x7fde2598e929 [ 435.348373][T10228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.348420][T10228] RSP: 002b:00007fde2689b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 435.348448][T10228] RAX: ffffffffffffffda RBX: 00007fde25bb5fa0 RCX: 00007fde2598e929 [ 435.348468][T10228] RDX: 000000000000001b RSI: 00002000000018c0 RDI: 0000000000000003 [ 435.348488][T10228] RBP: 00007fde25a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 435.348507][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.348525][T10228] R13: 0000000000000000 R14: 00007fde25bb5fa0 R15: 00007fff940d01f8 [ 435.348562][T10228] [ 435.802655][T10231] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 435.861625][ T9450] Bluetooth: hci6: Unable to find connection for big 0xd2 [ 437.744938][ T8284] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 437.756188][ T8284] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 437.767084][ T8284] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 437.782486][ T8284] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 437.790777][ T8284] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 438.173790][T10261] random: crng reseeded on system resumption [ 438.447859][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.511437][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.822012][T10271] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 438.857943][T10255] chnl_net:caif_netlink_parms(): no params data found [ 439.109733][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 439.123610][T10275] random: crng reseeded on system resumption [ 439.324554][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.363070][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.594724][T10255] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.607757][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.615706][T10255] bridge_slave_0: entered allmulticast mode [ 439.627206][T10255] bridge_slave_0: entered promiscuous mode [ 439.744042][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.785954][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.806482][T10255] bridge_slave_1: entered allmulticast mode [ 439.827485][ T8284] Bluetooth: hci11: command tx timeout [ 439.833932][T10255] bridge_slave_1: entered promiscuous mode [ 439.897718][T10281] i2c i2c-0: Failed to register i2c client card: at 0x01 (-16) [ 439.932109][T10283] vivid-007: ================= START STATUS ================= [ 439.941498][T10283] vivid-007: Generate PTS: true [ 439.943609][T10281] FAULT_INJECTION: forcing a failure. [ 439.943609][T10281] name failslab, interval 1, probability 0, space 0, times 0 [ 439.959465][T10283] vivid-007: Generate SCR: true [ 439.964375][T10283] tpg source WxH: 320x240 (Y'CbCr) [ 439.971820][T10281] CPU: 1 UID: 0 PID: 10281 Comm: syz.8.671 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 439.971866][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.971886][T10281] Call Trace: [ 439.971898][T10281] [ 439.971910][T10281] dump_stack_lvl+0x16c/0x1f0 [ 439.971967][T10281] should_fail_ex+0x512/0x640 [ 439.972013][T10281] ? fs_reclaim_acquire+0xae/0x150 [ 439.972058][T10281] should_failslab+0xc2/0x120 [ 439.972090][T10281] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 439.972144][T10281] ? security_inode_alloc+0x3b/0x2b0 [ 439.972189][T10281] security_inode_alloc+0x3b/0x2b0 [ 439.972238][T10281] inode_init_always_gfp+0xce4/0x1030 [ 439.972295][T10281] alloc_inode+0x86/0x240 [ 439.972331][T10281] new_inode+0x22/0x1c0 [ 439.972370][T10281] proc_pid_make_inode+0x22/0x160 [ 439.972421][T10281] proc_pident_instantiate+0x85/0x320 [ 439.972473][T10281] proc_fill_cache+0x35e/0x470 [ 439.972521][T10281] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 439.972574][T10281] ? __pfx_proc_fill_cache+0x10/0x10 [ 439.972666][T10281] proc_pident_readdir+0x1bc/0x560 [ 439.972725][T10281] iterate_dir+0x296/0xb40 [ 439.972773][T10281] __x64_sys_getdents+0x13c/0x2b0 [ 439.972815][T10281] ? __pfx___x64_sys_getdents+0x10/0x10 [ 439.972862][T10281] ? __pfx_filldir+0x10/0x10 [ 439.972919][T10281] do_syscall_64+0xcd/0x490 [ 439.972986][T10281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.973020][T10281] RIP: 0033:0x7f498358e929 [ 439.973047][T10281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.973079][T10281] RSP: 002b:00007f49844d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 439.973110][T10281] RAX: ffffffffffffffda RBX: 00007f49837b5fa0 RCX: 00007f498358e929 [ 439.973131][T10281] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000008 [ 439.973151][T10281] RBP: 00007f4983610b39 R08: 0000000000000000 R09: 0000000000000000 [ 439.973170][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.973189][T10281] R13: 0000000000000000 R14: 00007f49837b5fa0 R15: 00007fff65da83a8 [ 439.973239][T10281] [ 440.199921][T10283] tpg field: 1 [ 440.203474][T10283] tpg crop: (0,0)/320x240 [ 440.207959][T10283] tpg compose: (0,0)/320x240 [ 440.228937][T10255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.239413][T10283] tpg colorspace: 8 [ 440.243256][T10283] tpg transfer function: 0/0 [ 440.255392][T10255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.284823][T10283] tpg Y'CbCr encoding: 0/0 [ 440.304134][T10283] tpg quantization: 0/0 [ 440.309502][T10283] tpg RGB range: 0/2 [ 440.313441][T10283] vivid-007: ================== END STATUS ================== [ 440.404603][T10287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.482034][T10255] team0: Port device team_slave_0 added [ 440.529388][T10255] team0: Port device team_slave_1 added [ 440.674955][T10255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.700181][T10292] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 440.725502][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.795584][T10255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.811179][T10255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.823478][T10255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.850057][T10255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.078101][T10255] hsr_slave_0: entered promiscuous mode [ 441.089800][T10255] hsr_slave_1: entered promiscuous mode [ 441.112747][T10255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.128610][T10255] Cannot create hsr debugfs directory [ 441.650045][T10297] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 441.691314][T10255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.860915][T10255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.906667][ T8284] Bluetooth: hci11: command tx timeout [ 442.030782][T10255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.326011][T10255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.884782][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.8.679'. [ 443.983818][ T8284] Bluetooth: hci11: command tx timeout [ 444.346307][T10255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.374915][T10255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.402402][T10255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.431555][T10255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.825561][T10255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.855779][T10255] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.870839][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.878104][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.919455][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.926657][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.119273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.125711][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.514775][T10338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 445.571233][T10255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.742707][T10255] veth0_vlan: entered promiscuous mode [ 445.769378][T10255] veth1_vlan: entered promiscuous mode [ 445.776375][T10342] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 445.880188][T10255] veth0_macvtap: entered promiscuous mode [ 445.907811][T10255] veth1_macvtap: entered promiscuous mode [ 445.940363][T10255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.986483][T10255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.019933][T10255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.053054][T10255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.067584][ T8284] Bluetooth: hci11: command tx timeout [ 446.075258][T10255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.085675][T10255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.449117][ T8319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.475509][ T8319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.555404][ T8283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.564063][ T8283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.805672][T10368] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 450.531907][T10402] warning: `syz.8.696' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 451.243969][T10411] netlink: 'syz.0.695': attribute type 2 has an invalid length. [ 454.170042][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 454.220829][T10444] netlink: 13 bytes leftover after parsing attributes in process `syz.2.702'. [ 456.079577][T10471] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 457.199936][T10484] random: crng reseeded on system resumption [ 457.478931][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.504082][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.567258][T10489] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 457.887777][T10491] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 457.908733][T10486] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 458.052309][ T9450] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 458.062320][ T9450] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 458.070763][ T9450] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 458.086424][ T9450] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 458.097740][ T9450] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 459.159666][T10512] random: crng reseeded on system resumption [ 459.717241][T10499] chnl_net:caif_netlink_parms(): no params data found [ 459.816899][ T31] INFO: task kworker/u8:4:75 blocked for more than 143 seconds. [ 459.828158][ T31] Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 [ 459.854730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 459.865955][ T31] task:kworker/u8:4 state:D stack:24264 pid:75 tgid:75 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 459.945712][ T31] Workqueue: netns cleanup_net [ 459.956060][ T31] Call Trace: [ 459.971132][ T31] [ 459.985515][ T31] __schedule+0x116a/0x5de0 [ 459.995463][ T31] ? __pfx___schedule+0x10/0x10 [ 460.005640][ T31] ? find_held_lock+0x2b/0x80 [ 460.024415][ T31] ? schedule+0x2d7/0x3a0 [ 460.103068][ T31] schedule+0xe7/0x3a0 [ 460.107434][ T31] schedule_timeout+0x257/0x290 [ 460.135873][ T9450] Bluetooth: hci12: command tx timeout [ 460.138756][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 460.191153][ T31] ? mark_held_locks+0x49/0x80 [ 460.199223][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.204482][ T31] __wait_for_common+0x2ff/0x4e0 [ 460.210788][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 460.218173][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 460.224084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.234136][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 460.240193][ T31] __flush_workqueue+0x3e2/0x1230 [ 460.245282][ T31] ? find_held_lock+0x2b/0x80 [ 460.251249][ T31] ? find_held_lock+0x2b/0x80 [ 460.256032][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 460.261530][ T31] ? __queue_work+0x431/0x10f0 [ 460.266369][ T31] ? queue_work_on+0x12a/0x1f0 [ 460.271154][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.277155][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 460.283091][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 460.299250][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 460.305324][ T31] rxrpc_exit_net+0x7b/0xc0 [ 460.309984][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 460.315229][ T31] ops_undo_list+0x2eb/0xab0 [ 460.340871][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 460.361161][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 460.412923][ T31] cleanup_net+0x408/0x890 [ 460.423076][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 460.431890][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.477424][ T31] process_one_work+0x9cf/0x1b70 [ 460.525761][ T31] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 460.531498][ T31] ? __pfx_process_one_work+0x10/0x10 [ 460.642260][ T31] ? assign_work+0x1a0/0x250 [ 460.665876][ T31] worker_thread+0x6c8/0xf10 [ 460.715452][ T31] ? __kthread_parkme+0x19e/0x250 [ 460.720589][ T31] ? __pfx_worker_thread+0x10/0x10 [ 460.735302][ T31] kthread+0x3c2/0x780 [ 460.739544][ T31] ? __pfx_kthread+0x10/0x10 [ 460.750202][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.755054][ T31] ? __pfx_kthread+0x10/0x10 [ 460.770738][ T31] ret_from_fork+0x5d7/0x6f0 [ 460.775813][ T31] ? __pfx_kthread+0x10/0x10 [ 460.780485][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.785542][ T31] [ 460.788795][ T31] INFO: task syz.0.401:8364 blocked for more than 144 seconds. [ 460.818766][ T31] Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 [ 460.831004][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.890469][ T31] task:syz.0.401 state:D stack:27000 pid:8364 tgid:8356 ppid:5851 task_flags:0x400140 flags:0x00004006 [ 460.902930][ T31] Call Trace: [ 460.906602][ T31] [ 460.913147][ T31] __schedule+0x116a/0x5de0 [ 460.919791][ T31] ? __pfx___schedule+0x10/0x10 [ 460.924721][ T31] ? find_held_lock+0x2b/0x80 [ 460.934012][ T31] ? schedule+0x2d7/0x3a0 [ 460.938980][ T31] schedule+0xe7/0x3a0 [ 460.943119][ T31] schedule_timeout+0x257/0x290 [ 460.957903][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 460.963359][ T31] ? mark_held_locks+0x49/0x80 [ 460.968698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.974060][ T31] __wait_for_common+0x2ff/0x4e0 [ 460.981817][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 460.987633][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 460.993193][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.998993][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 461.004879][ T31] __flush_workqueue+0x3e2/0x1230 [ 461.010475][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 461.026412][ T31] ? rxrpc_discard_prealloc+0xb6/0x9b0 [ 461.031959][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 461.047593][ T31] rxrpc_release+0x27a/0x670 [ 461.061025][ T31] sock_release+0x91/0x1d0 [ 461.067014][ T31] afs_open_socket+0x334/0x400 [ 461.071871][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 461.077714][ T31] ? proc_create_net_single_write+0x141/0x1b0 [ 461.083841][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 461.092848][ T31] afs_net_init+0x825/0xb00 [ 461.105503][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 461.110600][ T31] ops_init+0x1df/0x5f0 [ 461.118303][ T31] setup_net+0x1ff/0x510 [ 461.122751][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 461.128700][ T31] ? __pfx_setup_net+0x10/0x10 [ 461.133565][ T31] ? debug_mutex_init+0x37/0x70 [ 461.140057][ T31] copy_net_ns+0x2a6/0x5f0 [ 461.144574][ T31] create_new_namespaces+0x3ea/0xa90 [ 461.161025][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 461.170415][ T31] ksys_unshare+0x45b/0xa40 [ 461.176431][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 461.181550][ T31] ? xfd_validate_state+0x61/0x180 [ 461.187249][ T31] __x64_sys_unshare+0x31/0x40 [ 461.192081][ T31] do_syscall_64+0xcd/0x490 [ 461.199258][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.205551][ T31] RIP: 0033:0x7fd2f0b8e929 [ 461.210009][ T31] RSP: 002b:00007fd2ee9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 461.221993][ T31] RAX: ffffffffffffffda RBX: 00007fd2f0db6080 RCX: 00007fd2f0b8e929 [ 461.230358][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 461.238622][ T31] RBP: 00007fd2f0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.247548][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.258083][ T31] R13: 0000000000000000 R14: 00007fd2f0db6080 R15: 00007ffe788aff58 [ 461.266475][ T31] [ 461.331661][ T31] INFO: task syz.2.407:8396 blocked for more than 144 seconds. [ 461.434981][ T31] Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 [ 461.442751][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.484954][ T31] task:syz.2.407 state:D stack:26200 pid:8396 tgid:8393 ppid:5857 task_flags:0x400140 flags:0x00004006 [ 461.505118][ T31] Call Trace: [ 461.508473][ T31] [ 461.511465][ T31] __schedule+0x116a/0x5de0 [ 461.534347][ T31] ? __pfx___schedule+0x10/0x10 [ 461.539484][ T31] ? find_held_lock+0x2b/0x80 [ 461.544255][ T31] ? schedule+0x2d7/0x3a0 [ 461.548910][ T31] schedule+0xe7/0x3a0 [ 461.553065][ T31] schedule_timeout+0x257/0x290 [ 461.558136][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 461.569354][ T31] ? mark_held_locks+0x49/0x80 [ 461.574213][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.579681][ T31] __wait_for_common+0x2ff/0x4e0 [ 461.584704][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 461.590455][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 461.601258][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.607302][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 461.613199][ T31] __flush_workqueue+0x3e2/0x1230 [ 461.618769][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 461.624324][ T31] ? rxrpc_discard_prealloc+0xb6/0x9b0 [ 461.643964][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 461.650524][ T31] rxrpc_release+0x27a/0x670 [ 461.658147][ T31] sock_release+0x91/0x1d0 [ 461.669381][ T31] afs_open_socket+0x334/0x400 [ 461.674239][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 461.680119][ T31] ? proc_create_net_single_write+0x141/0x1b0 [ 461.686677][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 461.693195][ T31] afs_net_init+0x825/0xb00 [ 461.698229][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 461.703428][ T31] ops_init+0x1df/0x5f0 [ 461.713520][ T31] setup_net+0x1ff/0x510 [ 461.718096][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 461.723537][ T31] ? __pfx_setup_net+0x10/0x10 [ 461.731318][ T31] ? debug_mutex_init+0x37/0x70 [ 461.739310][ T31] copy_net_ns+0x2a6/0x5f0 [ 461.743804][ T31] create_new_namespaces+0x3ea/0xa90 [ 461.771099][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 461.780032][ T31] ksys_unshare+0x45b/0xa40 [ 461.784635][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 461.795103][ T31] ? xfd_validate_state+0x61/0x180 [ 461.800312][ T31] __x64_sys_unshare+0x31/0x40 [ 461.820301][ T31] do_syscall_64+0xcd/0x490 [ 461.827446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.838676][ T31] RIP: 0033:0x7f94db18e929 [ 461.843167][ T31] RSP: 002b:00007f94dbf43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 461.852180][ T31] RAX: ffffffffffffffda RBX: 00007f94db3b6080 RCX: 00007f94db18e929 [ 461.865135][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 461.880120][ T31] RBP: 00007f94db210b39 R08: 0000000000000000 R09: 0000000000000000 [ 461.888464][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.898189][ T31] R13: 0000000000000000 R14: 00007f94db3b6080 R15: 00007ffddcfffa98 [ 461.906635][ T31] [ 461.909795][ T31] INFO: task syz.1.414:8434 blocked for more than 145 seconds. [ 461.935892][ T31] Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 [ 461.943601][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.008710][ T31] task:syz.1.414 state:D stack:26920 pid:8434 tgid:8432 ppid:5846 task_flags:0x400140 flags:0x00004004 [ 462.023712][ T31] Call Trace: [ 462.027397][ T31] [ 462.030384][ T31] __schedule+0x116a/0x5de0 [ 462.042889][ T31] ? __lock_acquire+0x622/0x1c90 [ 462.049506][ T31] ? __pfx___schedule+0x10/0x10 [ 462.054462][ T31] ? find_held_lock+0x2b/0x80 [ 462.059857][ T31] ? schedule+0x2d7/0x3a0 [ 462.064279][ T31] schedule+0xe7/0x3a0 [ 462.068879][ T31] schedule_timeout+0x257/0x290 [ 462.079924][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 462.090009][ T31] ? mark_held_locks+0x49/0x80 [ 462.096388][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.101696][ T31] __wait_for_common+0x2ff/0x4e0 [ 462.107730][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 462.113219][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 462.119172][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.124451][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 462.130870][ T31] __flush_workqueue+0x3e2/0x1230 [ 462.136420][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 462.149583][ T31] ? find_held_lock+0x2b/0x80 [ 462.154441][ T31] ? rxrpc_discard_prealloc+0xb6/0x9b0 [ 462.161586][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 462.168234][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.173514][ T31] rxrpc_release+0x27a/0x670 [ 462.184410][ T31] __sock_release+0xb0/0x270 [ 462.189442][ T31] ? __pfx_sock_close+0x10/0x10 [ 462.194373][ T31] sock_close+0x1c/0x30 [ 462.203434][ T31] __fput+0x402/0xb70 [ 462.209045][ T31] task_work_run+0x150/0x240 [ 462.213725][ T31] ? __pfx_task_work_run+0x10/0x10 [ 462.219417][ T9450] Bluetooth: hci12: command tx timeout [ 462.225935][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 462.231758][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 462.237622][ T31] do_syscall_64+0x3f6/0x490 [ 462.245695][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.251669][ T31] RIP: 0033:0x7f3c5b38e929 [ 462.261016][ T31] RSP: 002b:00007f3c5c1a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 462.271071][ T31] RAX: 0000000000000000 RBX: 00007f3c5b5b5fa0 RCX: 00007f3c5b38e929 [ 462.286286][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 462.294331][ T31] RBP: 00007f3c5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 462.303845][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.317525][ T31] R13: 0000000000000000 R14: 00007f3c5b5b5fa0 R15: 00007ffebb050ba8 [ 462.326021][ T31] [ 462.370088][ T31] [ 462.370088][ T31] Showing all locks held in the system: [ 462.476411][ T31] 1 lock held by pool_workqueue_/3: [ 462.483561][ T31] 1 lock held by khungtaskd/31: [ 462.534423][ T31] #0: ffffffff8e5c4d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 462.644334][ T31] 3 locks held by kworker/u8:4/75: [ 462.649517][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 462.744368][ T31] #1: ffffc9000217fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 462.782598][ T31] #2: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 462.824291][ T31] 2 locks held by getty/5616: [ 462.829025][ T31] #0: ffff8880321760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 462.874220][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 463.014680][ T31] 2 locks held by kworker/0:4/5883: [ 463.024214][ T31] 3 locks held by kworker/u10:0/8283: [ 463.029651][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 463.094267][ T31] #1: ffffc900193dfd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 463.114384][ T31] #2: ffffffff903647a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 463.123673][ T31] 1 lock held by syz.0.401/8364: [ 463.129169][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.139032][ T31] 1 lock held by syz.2.407/8396: [ 463.144283][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.153803][ T31] 1 lock held by syz.1.414/8434: [ 463.160043][ T31] #0: ffff8880664a8208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 463.171131][ T31] 1 lock held by syz.5.472/8886: [ 463.184154][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.193696][ T31] 1 lock held by syz.3.518/9226: [ 463.201037][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.210942][ T31] 1 lock held by syz.7.537/9393: [ 463.218445][ T31] #0: ffff88805db5dc08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 463.230567][ T31] 1 lock held by syz-executor/9449: [ 463.236106][ T31] #0: ffffffff903647a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 463.245409][ T31] 1 lock held by syz.4.595/9805: [ 463.250390][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.260147][ T31] 1 lock held by syz.9.641/10096: [ 463.265763][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.275557][ T31] 1 lock held by syz.6.677/10304: [ 463.280629][ T31] #0: ffffffff9034e750 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 463.290282][ T31] 5 locks held by syz-executor/10499: [ 463.295751][ T31] #0: ffff888085c74dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.309396][ T31] #1: ffff888085c740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.319323][ T31] #2: ffffffff905d6268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 463.329489][ T31] #3: ffff88808bff4b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 463.343286][ T31] #4: ffffffff8e5d02f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 463.354280][ T31] 3 locks held by syz.2.714/10502: [ 463.359444][ T31] #0: ffff888091e48dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.369529][ T31] #1: ffff888091e480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.379363][ T31] #2: ffffffff905d6268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 463.389768][ T31] 3 locks held by syz.0.716/10521: [ 463.395089][ T31] #0: ffff888032d00dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 463.406457][ T31] #1: ffff888032d000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 463.416405][ T31] #2: ffffffff905d6268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 463.426691][ T31] [ 463.429137][ T31] ============================================= [ 463.429137][ T31] [ 463.437945][ T31] NMI backtrace for cpu 1 [ 463.437971][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 463.438007][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.438025][ T31] Call Trace: [ 463.438035][ T31] [ 463.438047][ T31] dump_stack_lvl+0x116/0x1f0 [ 463.438101][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 463.438135][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 463.438179][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.438229][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 463.438272][ T31] watchdog+0xf70/0x12c0 [ 463.438327][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.438381][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.438434][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.438476][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.438525][ T31] kthread+0x3c2/0x780 [ 463.438572][ T31] ? __pfx_kthread+0x10/0x10 [ 463.438621][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.438656][ T31] ? __pfx_kthread+0x10/0x10 [ 463.438712][ T31] ret_from_fork+0x5d7/0x6f0 [ 463.438756][ T31] ? __pfx_kthread+0x10/0x10 [ 463.438802][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.438854][ T31] [ 463.438864][ T31] Sending NMI from CPU 1 to CPUs 0: [ 463.566566][ C0] NMI backtrace for cpu 0 [ 463.566586][ C0] CPU: 0 UID: 0 PID: 8695 Comm: kworker/u10:7 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 463.566626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.566644][ C0] Workqueue: 0x0 (events_unbound) [ 463.566674][ C0] RIP: 0010:__list_del_entry_valid_or_report+0x0/0x200 [ 463.566706][ C0] Code: fd 48 8b 34 24 eb 98 4c 89 ef e8 3b f0 42 fd 48 8b 34 24 e9 4a ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 [ 463.566732][ C0] RSP: 0018:ffffc90002e17870 EFLAGS: 00000046 [ 463.566750][ C0] RAX: 0000000000000000 RBX: ffff88801eea5ac0 RCX: ffffffff81858777 [ 463.566767][ C0] RDX: 0000000000000004 RSI: ffffffff81858797 RDI: ffff88801eea5ac0 [ 463.566784][ C0] RBP: ffffc90002e17a50 R08: 0000000000000000 R09: ffffed1003c5e700 [ 463.566801][ C0] R10: ffff88801e2f3807 R11: ffffc90002e1798c R12: ffff8880b853b030 [ 463.566818][ C0] R13: ffff88801eea5a00 R14: ffff8880b853a400 R15: dffffc0000000000 [ 463.566835][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 463.566870][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.566886][ C0] CR2: 000055fe0b8cf138 CR3: 000000000e382000 CR4: 00000000003526f0 [ 463.566902][ C0] Call Trace: [ 463.566909][ C0] [ 463.566917][ C0] sched_balance_rq+0x10e9/0x3110 [ 463.566947][ C0] ? sched_clock_cpu+0x6c/0x530 [ 463.567002][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 463.567026][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 463.567058][ C0] sched_balance_newidle+0x720/0x1390 [ 463.567090][ C0] ? dl_server_stop+0x49/0x90 [ 463.567126][ C0] ? __pfx_sched_balance_newidle+0x10/0x10 [ 463.567161][ C0] balance_fair+0x4a/0x70 [ 463.567186][ C0] __schedule+0x1c97/0x5de0 [ 463.567217][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 463.567259][ C0] ? __lock_acquire+0x622/0x1c90 [ 463.567294][ C0] ? __pfx___schedule+0x10/0x10 [ 463.567329][ C0] ? find_held_lock+0x2b/0x80 [ 463.567354][ C0] ? schedule+0x2d7/0x3a0 [ 463.567386][ C0] schedule+0xe7/0x3a0 [ 463.567415][ C0] ? worker_thread+0x28b/0xf10 [ 463.567452][ C0] worker_thread+0x2e5/0xf10 [ 463.567493][ C0] ? __kthread_parkme+0x19e/0x250 [ 463.567524][ C0] ? __pfx_worker_thread+0x10/0x10 [ 463.567561][ C0] kthread+0x3c2/0x780 [ 463.567600][ C0] ? __pfx_kthread+0x10/0x10 [ 463.567635][ C0] ? rcu_is_watching+0x12/0xc0 [ 463.567660][ C0] ? __pfx_kthread+0x10/0x10 [ 463.567694][ C0] ret_from_fork+0x5d7/0x6f0 [ 463.567726][ C0] ? __pfx_kthread+0x10/0x10 [ 463.567760][ C0] ret_from_fork_asm+0x1a/0x30 [ 463.567794][ C0] [ 463.569593][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 463.838309][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 463.850142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.860211][ T31] Call Trace: [ 463.863522][ T31] [ 463.866473][ T31] dump_stack_lvl+0x3d/0x1f0 [ 463.871115][ T31] panic+0x71c/0x800 [ 463.875052][ T31] ? __pfx_panic+0x10/0x10 [ 463.879508][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 463.884938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.890960][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 463.896461][ T31] ? watchdog+0xdda/0x12c0 [ 463.900924][ T31] ? watchdog+0xdcd/0x12c0 [ 463.905388][ T31] watchdog+0xdeb/0x12c0 [ 463.909680][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.914400][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.919655][ T31] ? __kthread_parkme+0x19e/0x250 [ 463.924724][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.929454][ T31] kthread+0x3c2/0x780 [ 463.933565][ T31] ? __pfx_kthread+0x10/0x10 [ 463.938195][ T31] ? rcu_is_watching+0x12/0xc0 [ 463.942980][ T31] ? __pfx_kthread+0x10/0x10 [ 463.947633][ T31] ret_from_fork+0x5d7/0x6f0 [ 463.952287][ T31] ? __pfx_kthread+0x10/0x10 [ 463.956923][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.961732][ T31] [ 463.965181][ T31] Kernel Offset: disabled [ 463.969521][ T31] Rebooting in 86400 seconds..