last executing test programs: 18m46.402136056s ago: executing program 2 (id=42): close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ram14\x00', 0x109102, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/tx_queue_len\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1d\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 18m46.098295092s ago: executing program 2 (id=44): rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$auto(r0, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18m45.108438744s ago: executing program 2 (id=50): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) 18m44.020368413s ago: executing program 2 (id=57): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) 18m43.676196706s ago: executing program 2 (id=59): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 18m43.585047575s ago: executing program 2 (id=61): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000023, 0x400, 0x2}]}) 18m28.382872043s ago: executing program 32 (id=61): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000023, 0x400, 0x2}]}) 2m29.758971623s ago: executing program 1 (id=4475): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) 2m29.470442552s ago: executing program 1 (id=4476): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 2m27.749748364s ago: executing program 1 (id=4480): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) move_pages$auto(0x0, 0x4f4f, 0x0, 0x0, 0x0, 0xfffffffe) r1 = socket(0x2, 0x1, 0x0) ioctl$auto(r0, 0x5420, r1) ioctl$auto(0x3, 0x5403, 0x38) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x88) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x6) setsockopt$auto_SO_TIMESTAMPING_NEW(r2, 0x7ff, 0x41, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSWINSZ2(r5, 0x5414, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), r2) unshare$auto(0x40000080) 2m27.103156615s ago: executing program 1 (id=4481): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) write$auto(0x3, 0x0, 0x100082) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r0 = socket(0x5, 0x2, 0x73) getsockname$auto(r0, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) rseq$auto(0x0, 0x4, 0x0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) 2m24.627775286s ago: executing program 1 (id=4486): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r0, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7efffffc, 0x8, 0x3002, 0x7, 0x7, 0x4006, 0xffffffffffffffff, [0x0, 0x0, 0x4000000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x69cb, 0x6, 0x3}, {0x5, 0x8001, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000040)=""/15, 0xf) 2m22.6026137s ago: executing program 1 (id=4491): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x800, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8048ae66, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000200)={0x2, &(0x7f00000001c0)={0x8ee, 0x2, 0xac, @raw=0x6}}) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x28}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r7 = socket(0x11, 0x1, 0x87) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r7) sendmsg$auto_NFC_CMD_ENABLE_SE(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=r8, @ANYBLOB="040026bd7000fcdbdf25110000000800040003000000e1011380f74f6457281e806894afc92463eda69c8ab78b8418f93f828d1dc1b543dea59a6c79d379defaf313c92cc2ba5f8592dca46d5caad2f0cd2c5b859fe40a31ff929996f10c0fc43b2e7fdeb013bf2144b6c81d83303dee607548a63e2a7df8eaddece92a6b0c004d800400258004006d0018002a800800df00", @ANYRES32, @ANYBLOB="0826ddb67f2bbd681c47a69ab2ce82dcefb554bb8df7d4c9da7f7d30622f363ec8a83e4b773cd0460bc57a2753d55e9978c965c3f5fc5497efa2dfaadfd1dc193042ce2c98ecbe062127d7bf8d2aa73cf04fa13856d4cee0c814a695ff1f2a89033b0000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x4048000}, 0x48800) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200027bd7000fddbdf251b000000080004000800000008000e00900600004225fa302ccf64f3e6459a56dd17e5d0fd54d36dac5fbc8c9bf4f44b39637a947893596220170b6173fa264f945597de0962f956b845285f3324309d"], 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000006) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x3f1, 0x400, 0x2}]}) 2m22.049730255s ago: executing program 0 (id=4493): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) setgroups$auto(0xe32, 0x0) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f00000010c0)=""/4082, 0xff2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/176, 0xb0) 2m21.114474664s ago: executing program 0 (id=4496): mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) getpid() r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x361201, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000840)=""/41, 0x29) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) geteuid() ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) pread64$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x400, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x1, 0x958b, 0xffffffffffffffff, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(r2, 0x8, 0x0) mq_notify$auto(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x551400, 0x0) 2m20.498003515s ago: executing program 0 (id=4497): mmap$auto(0x5, 0xfffffffffffffffc, 0x5, 0x13, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$auto_UI_SET_LEDBIT(r0, 0x40045569, &(0x7f00000003c0)=0x698d) socket(0x28, 0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x1e, 0x1, 0x0) socket(0x6, 0x2, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xffff, 0x0, 0x0, &(0x7f0000000100)={[0x8, 0x6, 0x1, 0xfffff7fffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8001, 0x26, 0x1, 0x20000000007fff, 0x2, 0x6]}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) getpriority$auto_PRIO_USER(0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x8, 0x10, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x1, 0x104, 0x6, 0x3}, {0x100, 0x101, 0x52, 0x6, 0x2, 0x1a7b870a, 0x76c3, 0x9, 0xfffffffd}}) 2m19.554525186s ago: executing program 0 (id=4499): unshare$auto(0x40000080) futex$auto(0x0, 0x85, 0x104, 0x0, 0x0, 0x7fffffff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r1 = socket(0xa, 0x1, 0x0) recvmmsg$auto(r1, 0x0, 0x80000000, 0x7956, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x980, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000240), r3) sendmsg$auto_NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="39042c03fdffff07000200030000009e6afc59b329531c671a23d9cb78add42498ed5f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffc54, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) write$auto(0x3, 0x0, 0xfdef) 2m18.418471563s ago: executing program 0 (id=4500): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0x5) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sysfs$auto(0x2, 0x100000000000030, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 2m17.872429991s ago: executing program 0 (id=4502): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) symlinkat$auto(0x0, r5, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) gettimeofday$auto(&(0x7f0000000080), &(0x7f00000000c0)={0x9, 0x6}) bpf$auto(0x0, 0x0, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) 2m7.403326807s ago: executing program 33 (id=4491): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x800, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8048ae66, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000200)={0x2, &(0x7f00000001c0)={0x8ee, 0x2, 0xac, @raw=0x6}}) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x28}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x800) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r7 = socket(0x11, 0x1, 0x87) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r7) sendmsg$auto_NFC_CMD_ENABLE_SE(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=r8, @ANYBLOB="040026bd7000fcdbdf25110000000800040003000000e1011380f74f6457281e806894afc92463eda69c8ab78b8418f93f828d1dc1b543dea59a6c79d379defaf313c92cc2ba5f8592dca46d5caad2f0cd2c5b859fe40a31ff929996f10c0fc43b2e7fdeb013bf2144b6c81d83303dee607548a63e2a7df8eaddece92a6b0c004d800400258004006d0018002a800800df00", @ANYRES32, @ANYBLOB="0826ddb67f2bbd681c47a69ab2ce82dcefb554bb8df7d4c9da7f7d30622f363ec8a83e4b773cd0460bc57a2753d55e9978c965c3f5fc5497efa2dfaadfd1dc193042ce2c98ecbe062127d7bf8d2aa73cf04fa13856d4cee0c814a695ff1f2a89033b0000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x4048000}, 0x48800) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200027bd7000fddbdf251b000000080004000800000008000e00900600004225fa302ccf64f3e6459a56dd17e5d0fd54d36dac5fbc8c9bf4f44b39637a947893596220170b6173fa264f945597de0962f956b845285f3324309d"], 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000006) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x3f1, 0x400, 0x2}]}) 2m2.604379182s ago: executing program 34 (id=4502): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r4) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) symlinkat$auto(0x0, r5, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) gettimeofday$auto(&(0x7f0000000080), &(0x7f00000000c0)={0x9, 0x6}) bpf$auto(0x0, 0x0, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0xc) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) 9.176660504s ago: executing program 5 (id=4850): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(0xffffffffffffffff, 0x4, 0x14, &(0x7f0000000040)='\x00', 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/dev_mcast\x00', 0x4001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x7fffffffffffffff, 0x0, 0x2, 0x8f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x108000, 0x800034, 0x9) mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) 7.238550991s ago: executing program 5 (id=4853): socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) 7.237658082s ago: executing program 6 (id=4861): set_mempolicy$auto(0x1, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r0, 0x0, 0x0, 0x2000000000040007) landlock_restrict_self$auto(0xffffffffffffffff, 0xffffff0a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) shmctl$auto(0x3, 0x3, &(0x7f00000011c0)={{0x40, 0xee00, 0xee01, 0x4, 0xc6, 0x39ad, 0x9}, 0x107, 0x7, 0x6, 0x3, @raw=0x1, @raw=0x1, 0xfffb, 0x0, &(0x7f00000001c0)="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", &(0x7f00000000c0)="5ea2aeaada0ca534171e59be60ce3220a210758d49587dc48b521b1ea23b94f81640fd7fd3748bbe116f92c695cda990f1fa4e062688ed66eb68d4330a2a0bf4708e121de903fb29efb8bdb13b41779cde53688041f7cf8fbe1aac11560dd4cc5393237910c93f1ba02564f7f80d063bdffbe5bf114d72b8"}) getpgrp(0x0) capset$auto(0x0, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x0, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto(0x3, 0x541b, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x13fffffd, 0x2, 0xfffffffe, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x7, 0x0, 0x6, 0x0, 0x85, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 7.015475392s ago: executing program 3 (id=4854): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r0, 0x5, 0x2b, 0x0, &(0x7f0000000080)=0x7ff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x56c, 0x0) write$auto(0x3, 0x0, 0x2a9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x100e983, 0x5, 0xebd, 0x401, 0x10000008000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) bind$auto(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto(0x3, 0x0, 0xf34) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) 6.173272956s ago: executing program 6 (id=4855): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket(0xa, 0x2, 0x0) r1 = socket(0x22, 0x3, 0x1) connect$auto(r1, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 6.173030016s ago: executing program 4 (id=4856): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4073, 0xfe9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.618738837s ago: executing program 5 (id=4857): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)="748c71542be98e770ba5c6ba43dff2587884738ab8c9fd79566afe07fed0766d2e8bd35c75d932c63b808ac700554d6a78d7bbe34b9917458bbc021fdb7ee40383d779897f9063e4b275c918f0673b89058d76baf95d9101d716f1deb20e64fb1855a6998b29bb21f4557521a2e6b09332284f8a1c410f8cb5237a2c2dfdf413c7896d1dbd0321cc7b0d144d5d53515e268687110969051804deb3cce3b2b0f81123e08f43a5d7120934107ad931d62e53d861d3f5e79eb900e9f537cc2f62eca0b4348aec16bb8ab6ad1463b157d37dbef4b455fead5a81a4f5149a5cd1c4") modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 5.442677284s ago: executing program 3 (id=4858): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:128/stats\x00', 0x40000, 0x0) recvfrom$auto(r3, &(0x7f0000000040)="313718966d9eef307bc720fb4119f5373bfe431e75e76cc4ff9cdbed43d9b5de0a518e", 0x3, 0x1, &(0x7f0000000380)=@llc={0x1a, 0x8, 0x8, 0x9, 0x0, 0xfe, @multicast}, &(0x7f00000003c0)=0x2f9) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r5 = socket(0x10, 0x2, 0x0) waitid$auto_P_ALL(0x0, 0x7, &(0x7f0000000480)={@siginfo_0_0={0x3ff, 0x99e, 0x5, @_sigfault={&(0x7f0000000400)="648c14fc1904234a189d8129057226c7e182aad581cc43c899f593ddf8380013d6a0f6293414768015c7dcc3c9f09e10d4da003068335d97855efe1dfe9ddcdd04abb3f479b7f64743beb5f42fa0beade8ee25014e5223acc05d681d9ac817856b9e281417628ecf18c6690595d6", @_perf={0x4462d9dd, 0x2, 0x4}}}}, 0x7, &(0x7f0000000500)={{0x3, 0x2}, {0x5, 0x5}, 0x5f3, 0xf659, 0x2, 0x8e, 0x40, 0xfe8, 0x3, 0x9, 0xe, 0x10, 0x3ff, 0x8, 0x93, 0x2}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x2b, 0x1, 0x1) ioctl$auto(r6, 0x8901, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 5.176925892s ago: executing program 4 (id=4859): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0x5, 0x22, 0x8672, 0x80}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd81dcdbd3b2683e95b822f66eb624ad63110d61771552c03de65800"}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x1a) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) clock_adjtime$auto(0xb, &(0x7f00000000c0)={0xfffffff9, 0x0, 0x0, 0xc, 0x8001, 0x1, 0x5, 0x0, 0xef08, 0x3, 0x9, {0x0, 0xe6}, 0x9406, 0x3, 0x6, 0x4, 0x0, 0x1ff, 0x1, 0x2, 0x40, 0xa5dd, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x3, 0x0, 0x23, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) ioctl$auto(0x3, 0x894b, 0x38) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 4.931857904s ago: executing program 4 (id=4860): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4001, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/neigh/ip_vti0/base_reachable_time_ms\x00', 0x202, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4089c}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(r3, 0x0, 0xb5) write$auto(0x3, 0x0, 0xfdef) 4.828516119s ago: executing program 3 (id=4862): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) 4.391363033s ago: executing program 3 (id=4863): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0xf53, 0xffffffffffff0008, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) 4.110869108s ago: executing program 5 (id=4864): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x41, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$auto_TIOCNXCL2(0xffffffffffffffff, 0x540d, &(0x7f0000000500)) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r0 = socket(0xd45a78b599bc539, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) set_mempolicy_home_node$auto(0x0, 0x10001, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x600, 0x0) 3.328069866s ago: executing program 6 (id=4865): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x72180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_VHOST_GET_FEATURES2(r0, 0x8008af00, &(0x7f0000000040)=0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) listen$auto(0x3, 0x83) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x381, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r1, 0x0, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x1, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 3.101468592s ago: executing program 4 (id=4866): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x80a00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2e0b03, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) 3.088051019s ago: executing program 3 (id=4867): prctl$auto(0x27, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x936355e497c8b7e3, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a) socket(0x2c, 0x80003, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) select$auto(0x981, 0x0, &(0x7f0000000980)={[0x5, 0x40, 0xffffffff, 0x72634de1, 0x4000000000, 0x9, 0x0, 0x4, 0x1, 0xd0d, 0xc76a, 0x5, 0x2, 0x2, 0x7, 0x9]}, &(0x7f0000000a00)={[0x4, 0xd, 0x5, 0x6e, 0x1, 0x8, 0x6, 0xfffffffffffff800, 0xfffffffffffffffc, 0x200, 0x7, 0x8, 0x2, 0x6, 0x9, 0x9]}, &(0x7f0000000a80)={0x100000000, 0x2}) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 2.248422665s ago: executing program 6 (id=4868): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0x5) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sysfs$auto(0x2, 0x100000000000030, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 2.126872065s ago: executing program 4 (id=4869): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/softirqs\x00', 0x400, 0x0) kill$auto(0x0, 0x12) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x100000000000005, 0x0, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0xffffffffffffffff, 0xffb, 0x8000000008011, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r1, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.920003048s ago: executing program 5 (id=4870): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) setsockopt$auto_SO_OOBINLINE(r0, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88542, 0x0) 1.62097469s ago: executing program 6 (id=4871): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(0xffffffffffffffff, &(0x7f0000000180), 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x2a, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) 552.315061ms ago: executing program 3 (id=4872): ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(r2, r0, &(0x7f0000000080)=0x8, 0x3508) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r3, 0x0, 0x41000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x18, 0x4, 0x0) ioctl$auto_RTC_WKALM_SET(r4, 0x4028700f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20040, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x222c8518}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="e70229055399a2"], 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) 496.974525ms ago: executing program 4 (id=4873): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(0x0, 0x22240, 0x155) 131.735061ms ago: executing program 6 (id=4874): r0 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x668, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x639, 0x33, "afa6e0335f4a2c0c9b03ed037529ed1f8c19df0534c0c618363857d371dfe3575f074ed09281c32a0f2392027bee6d0506bdc9f52f16c9cddce2ee2bf411b5c37071c69297cbc252870e10ae089076ebd6ce5e42336573f7457224fb6e4d5cbc4b2847351ae8b9723b261b5876aa693b1f99786a8aff10d220aadda3c7f68a53903dbf2891b524fb9d9f1935f6873af22229e32a71276fac61cfbb99a0e9896735a111f46a73d9141b874444d253c3bcc98c2eddc451cb222af5ff8bdf0222e89524e44e1550d57f65061818b2e64ed23cbadd4cd35c4e675a6c76c93487649d5e120e876eef7d33bda62ec8ff4194ac957e81ef9aea0f96d44b4d7d28d0a90f3f3f1ab2302188a33eba4baeb8a36328ff04c2f77de5f5c1a202b358ced0d7ea41158c3745dc867e377ecadeccfcd5b8b519bef4dabe08dc5d923fb1a0bcfb63eb4c8e2143c4d2132e5e9c82712afab78723dc43d092eeb8a1bf619dd7d7c27b9785b953d4506d0d5207f3e8b76284b7749045ca2b5f062013c53f35be3e4489a1b8e3232314c86fbe18a58751f0b58219c53c1907daa47745badd8947431a66134913519262c65969aae0a78e040810ad130354b65c729754e9af226114904d39c5b24eaf02702067fdae7ae01c7fb58aa834b3d815caabb1761ba0d83cf8d53502a268b63fc3501fb67ded5c1b1482367ee4f5214303dc652abe046ce1abf20a3f49e1036026d77c132d332e98878ea17bd994e882becd6fc52d9fd91260ef25c204390f2c88c9e8cccd2d3f51bb9a93f0765f02dd8422bd3715b1205811f72ef91397fd5ab58f60cd10542ef3fa257e6cb0c311287b1af50dac0fb5614eaa5e67563c8efd9e89bb8fc2d7c6c4f64e95768bed149a69a345aadb64c89bb9e4bec361d74bef891543a5c8ba242c434b476bad123aece2a552ad43999907b425f4df57d3e4ca2c2b865568e619be2ef134718b47b6055a0bcc8ea64ff4ebc05339f5481e3c6fceadbd6f4126ccca4fb0e6b2303c4ec0d591cb45a076706a700ff34ad1c569fd11674bcbab1228132f1bfe192d138f25ec2520da501ed6e583492447734f69fa581e64a96f90582f9d757e391c0d33ce8250cc7c9e0d3651801cb285c9eee5bd0224d388dddf8527e49ca9030fd7955e93e3365f9602b4a4ef1aaca177e44e7f1142c8ec0015f2b505a775afe9ae820df18adaad4b3924d8033965991fe1e59acbbad440bc64b3198a4eae215fd32283be418b6ee791a89eaf386422aed1ca9a18a0220f88a7609d536ffd7db73c9654cbe7a7835668771f8f2f98d58cf1d60cff1004ee2fb4c394bf3b48d0232866d382ceeae8f340bddb3ac677edc560982312ac13bf765db179a235e47ec0747d428fe273fda500641154f168cad55351172f93a970ccf26626ec89d52f64d89f0d7456212854f35542794264126abf75567f56cf0081de22def6305d279b2aabdb91ac0813ccd0a4e87dd63b3188cc10a3eee94e7af67e2ab5070bc5e639a204af69b49aef29b61c7efd1a9f4b6bc51659aeb399b34cf21dc827259991979828515c776d86f06cf69ea710e6be91ec0ea9e46e9d08e07ad2ab67a4b43e2d0763a4673a8002df95761309b011b25a6effab4da60e599c27e263394328da81b0af4ebcd6d838c1a9ff729482681115b4964be42bb4b8d8855c71450e9c48999e195227f41eb0fde516123e1da39f0db125045c3e5dadbfba05b329cf3d02dbd9fa01c75856ee233ef96b5e61f845560c640758d3883bb7ca2da85c9c5c15dc0f4033bc8140ec0965f91a4be0692c0348a3cc38fbac8a0e6db18433aeb3f05921c5cf614be4754f76c9e3323026a646d89a7a894e1b493a999af49864886b6ed68ce635ba2eeff167e99ac5fa5696aca29f1517b47f460151ca4b9afb34cc5ffbeb037ece8de9d223d8a1124b6c0ce000928070c021dc17499c9313264903ccc5ba90f9b0eb3c1617cb53c8192a7e2d12c566c83ac35ee265bd5bafb2b3208af0cc938e8306a45b50ccd17ee5e59fbfcf30c09185c2d84db35e05190a3251c097c288d5bfd800f2fc5e60aaaaa7bb297e39e40dfc35da14b1ffa060ed3f02722f35e345e7ad453e6758b5ec8ef2ebd3a57413a1ea68df9684dc4dda5bdeaf81ec602fee0057dfa42fe9bcd7f571e906b31c4044c07070a0cdfab85594b18c54691b269a23e39fcbcb48eb4aab9b7950f145d87c750a5bd301ef6c1816aee61ac31b"}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x9}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}]}, 0x668}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='.\'*&\x04!\x00', 0x1, 0x8) 0s ago: executing program 5 (id=4875): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x8) socket(0xa, 0x2, 0x0) r1 = socket(0x22, 0x3, 0x1) connect$auto(r1, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 [ 1109.648863][T23006] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' syzkaller syzkaller login: [ 1109.739449][T22938] veth1_vlan: entered promiscuous mode [ 1109.841323][T22938] veth0_macvtap: entered promiscuous mode [ 1109.877733][T22938] veth1_macvtap: entered promiscuous mode [ 1109.996504][T22938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.052095][T22938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.116192][T22938] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.164914][T22938] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.184868][T22938] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.213259][T22938] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.417056][T22938] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 1110.517785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.519094][T22938] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht' [ 1110.545882][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.591356][ T5848] Bluetooth: hci5: command tx timeout [ 1110.634427][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.686559][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.593265][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1112.418492][T23064] ptrace attach of "./syz-executor exec"[23068] was attempted by "./syz-executor exec"[23064] [ 1112.529429][T23069] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1112.660540][ T5848] Bluetooth: hci5: command tx timeout [ 1113.764688][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 1116.405760][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.412111][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.183988][T23123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1118.546313][T23145] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1118.834248][T23152] [ 1119.034047][T23156] WARNING! power/level is deprecated; use power/control instead [ 1120.780052][T23169] sysfs_service_op_show: Client not running :-5: [ 1123.236225][T23205] FAULT_INJECTION: forcing a failure. [ 1123.236225][T23205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1123.251522][T23205] CPU: 0 UID: 0 PID: 23205 Comm: syz.6.4591 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1123.251557][T23205] Tainted: [U]=USER [ 1123.251564][T23205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1123.251577][T23205] Call Trace: [ 1123.251583][T23205] [ 1123.251591][T23205] dump_stack_lvl+0x16c/0x1f0 [ 1123.251626][T23205] should_fail_ex+0x512/0x640 [ 1123.251660][T23205] should_fail_alloc_page+0xe7/0x130 [ 1123.251682][T23205] prepare_alloc_pages+0x3c2/0x610 [ 1123.251710][T23205] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1123.251743][T23205] ? copy_splice_read+0x1a8/0xba0 [ 1123.251770][T23205] ? stack_trace_save+0x8e/0xc0 [ 1123.251793][T23205] ? __pfx_stack_trace_save+0x10/0x10 [ 1123.251816][T23205] ? stack_depot_save_flags+0x28/0xa40 [ 1123.251847][T23205] ? debug_check_no_obj_freed+0x31f/0x600 [ 1123.251871][T23205] ? rcu_is_watching+0x12/0xc0 [ 1123.251894][T23205] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1123.251926][T23205] ? kasan_save_stack+0x33/0x60 [ 1123.251963][T23205] ? __kasan_kmalloc+0xaa/0xb0 [ 1123.251994][T23205] ? copy_splice_read+0x1a8/0xba0 [ 1123.252020][T23205] ? do_splice_read+0x285/0x370 [ 1123.252045][T23205] ? splice_direct_to_actor+0x2a1/0xa30 [ 1123.252072][T23205] ? do_splice_direct+0x174/0x240 [ 1123.252115][T23205] ? do_sendfile+0xb06/0xe50 [ 1123.252145][T23205] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1123.252166][T23205] ? do_syscall_64+0xcd/0x490 [ 1123.252208][T23205] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1123.252246][T23205] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1123.252283][T23205] ? trace_kmalloc+0x2b/0xd0 [ 1123.252305][T23205] ? __kmalloc_noprof+0x242/0x510 [ 1123.252341][T23205] copy_splice_read+0x1e1/0xba0 [ 1123.252369][T23205] ? __pfx_pipe_to_null+0x10/0x10 [ 1123.252391][T23205] ? __pfx_copy_splice_read+0x10/0x10 [ 1123.252418][T23205] ? pipe_unlock+0x4a/0x70 [ 1123.252462][T23205] ? __pfx_splice_from_pipe+0x10/0x10 [ 1123.252493][T23205] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1123.252524][T23205] ? __pfx_copy_splice_read+0x10/0x10 [ 1123.252549][T23205] do_splice_read+0x285/0x370 [ 1123.252576][T23205] splice_direct_to_actor+0x2a1/0xa30 [ 1123.252604][T23205] ? __pfx_direct_splice_actor+0x10/0x10 [ 1123.252634][T23205] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1123.252665][T23205] do_splice_direct+0x174/0x240 [ 1123.252692][T23205] ? __pfx_do_splice_direct+0x10/0x10 [ 1123.252719][T23205] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1123.252746][T23205] ? bpf_lsm_file_permission+0x9/0x10 [ 1123.252770][T23205] ? security_file_permission+0x71/0x210 [ 1123.252798][T23205] ? rw_verify_area+0xcf/0x680 [ 1123.252826][T23205] do_sendfile+0xb06/0xe50 [ 1123.252856][T23205] ? __pfx_do_sendfile+0x10/0x10 [ 1123.252886][T23205] ? __x64_sys_futex+0x1e0/0x4c0 [ 1123.252911][T23205] ? __x64_sys_futex+0x1e9/0x4c0 [ 1123.252939][T23205] __x64_sys_sendfile64+0x1d8/0x220 [ 1123.252966][T23205] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1123.252991][T23205] do_syscall_64+0xcd/0x490 [ 1123.253024][T23205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.253046][T23205] RIP: 0033:0x7f7c0858e929 [ 1123.253061][T23205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.253082][T23205] RSP: 002b:00007f7c093eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1123.253101][T23205] RAX: ffffffffffffffda RBX: 00007f7c087b5fa0 RCX: 00007f7c0858e929 [ 1123.253115][T23205] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1123.253127][T23205] RBP: 00007f7c08610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1123.253140][T23205] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1123.253152][T23205] R13: 0000000000000000 R14: 00007f7c087b5fa0 R15: 00007fff87de0488 [ 1123.253172][T23205] [ 1125.261366][T23239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 1125.573143][T23241] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 1129.289218][T23287] caif:caif_disconnect_client(): nothing to disconnect [ 1130.691277][T23302] net_ratelimit: 77 callbacks suppressed [ 1130.691294][T23302] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1130.772650][T23302] netlink: zone id is out of range [ 1133.468774][T23362] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1133.725504][T23352] FAULT_INJECTION: forcing a failure. [ 1133.725504][T23352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1133.751185][T23352] CPU: 1 UID: 0 PID: 23352 Comm: syz.5.4619 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1133.751245][T23352] Tainted: [U]=USER [ 1133.751256][T23352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1133.751274][T23352] Call Trace: [ 1133.751283][T23352] [ 1133.751294][T23352] dump_stack_lvl+0x16c/0x1f0 [ 1133.751341][T23352] should_fail_ex+0x512/0x640 [ 1133.751382][T23352] should_fail_alloc_page+0xe7/0x130 [ 1133.751410][T23352] prepare_alloc_pages+0x3c2/0x610 [ 1133.751441][T23352] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1133.751480][T23352] ? kernel_text_address+0x8d/0x100 [ 1133.751502][T23352] ? __kernel_text_address+0xd/0x40 [ 1133.751523][T23352] ? unwind_get_return_address+0x59/0xa0 [ 1133.751560][T23352] ? arch_stack_walk+0xa6/0x100 [ 1133.751585][T23352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1133.751625][T23352] ? stack_trace_save+0x8e/0xc0 [ 1133.751652][T23352] ? __pfx_stack_trace_save+0x10/0x10 [ 1133.751678][T23352] ? stack_depot_save_flags+0x28/0xa40 [ 1133.751716][T23352] ? xas_start+0x153/0x790 [ 1133.751752][T23352] ? filemap_get_entry+0x1a7/0x3b0 [ 1133.751775][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.751807][T23352] ? lock_release+0x201/0x2f0 [ 1133.751840][T23352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1133.751879][T23352] ? policy_nodemask+0xea/0x4e0 [ 1133.751903][T23352] alloc_pages_mpol+0x1fb/0x550 [ 1133.751927][T23352] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1133.751950][T23352] ? _raw_spin_unlock+0x28/0x50 [ 1133.751980][T23352] ? swap_entry_swapped+0x122/0x190 [ 1133.752002][T23352] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1133.752027][T23352] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1133.752056][T23352] __read_swap_cache_async+0x3b6/0x5a0 [ 1133.752090][T23352] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1133.752123][T23352] ? arch_scale_cpu_capacity+0x15/0xb0 [ 1133.752164][T23352] ? swp_swap_info+0xce/0x130 [ 1133.752187][T23352] ? __pfx_swp_swap_info+0x10/0x10 [ 1133.752220][T23352] swap_cluster_readahead+0x3eb/0x710 [ 1133.752257][T23352] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1133.752293][T23352] ? lock_release+0x201/0x2f0 [ 1133.752327][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.752351][T23352] ? xas_start+0x153/0x790 [ 1133.752392][T23352] ? get_vma_policy+0x242/0x3c0 [ 1133.752419][T23352] swapin_readahead+0x13a/0xd60 [ 1133.752451][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.752480][T23352] ? __pfx_swapin_readahead+0x10/0x10 [ 1133.752512][T23352] ? __filemap_get_folio+0x32b/0xc30 [ 1133.752538][T23352] ? swap_cache_get_folio+0x1df/0x450 [ 1133.752571][T23352] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1133.752602][T23352] ? __pfx_get_swap_device+0x10/0x10 [ 1133.752623][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.752647][T23352] ? lock_release+0x201/0x2f0 [ 1133.752679][T23352] do_swap_page+0x635/0x65c0 [ 1133.752714][T23352] ? __pfx_do_swap_page+0x10/0x10 [ 1133.752740][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.752764][T23352] ? __pfx_default_wake_function+0x10/0x10 [ 1133.752794][T23352] ? ___pte_offset_map+0x58/0x570 [ 1133.752816][T23352] ? ___pte_offset_map+0x1d5/0x570 [ 1133.752843][T23352] __handle_mm_fault+0x162f/0x5490 [ 1133.752879][T23352] ? __pfx___handle_mm_fault+0x10/0x10 [ 1133.752910][T23352] ? lock_vma_under_rcu+0x47d/0x970 [ 1133.752942][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.752967][T23352] ? lock_release+0x201/0x2f0 [ 1133.753003][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.753030][T23352] handle_mm_fault+0x589/0xd10 [ 1133.753062][T23352] ? __pkru_allows_pkey+0x41/0xb0 [ 1133.753095][T23352] do_user_addr_fault+0x60c/0x1370 [ 1133.753129][T23352] ? rcu_is_watching+0x12/0xc0 [ 1133.753154][T23352] exc_page_fault+0x5c/0xb0 [ 1133.753187][T23352] asm_exc_page_fault+0x26/0x30 [ 1133.753210][T23352] RIP: 0033:0x7fbeb4539deb [ 1133.753235][T23352] Code: 00 00 00 0f 45 d0 85 d2 0f 85 11 06 00 00 45 85 e4 0f 88 b8 00 00 00 4c 8b a4 24 90 00 00 00 41 80 3c 24 00 0f 84 a5 00 00 00 <48> 8b 05 c6 3b db 00 48 89 44 24 78 48 85 c0 0f 85 40 1a 00 00 48 [ 1133.753261][T23352] RSP: 002b:00007fbeb54c77d0 EFLAGS: 00010202 [ 1133.753281][T23352] RAX: 0000000000000001 RBX: 00007fbeb54c7d30 RCX: 0000000000000000 [ 1133.753297][T23352] RDX: 0000000000000000 RSI: 00007fbeb461085f RDI: 00007fbeb54c7fb0 [ 1133.753312][T23352] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1133.753326][T23352] R10: 000000000000004f R11: 0000000000000000 R12: 00007fbeb461086f [ 1133.753341][T23352] R13: 00007fbeb54c7eb0 R14: 0000000000000000 R15: 00007fbeb54c7d30 [ 1133.753365][T23352] [ 1134.826999][T23374] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 1136.182755][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4629'. [ 1138.417779][T23438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4636'. [ 1138.656327][T23423] random: crng reseeded on system resumption [ 1138.659830][T23423] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1138.659854][T23423] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1138.659882][T23423] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1138.659900][T23423] PM: hibernation: Basic memory bitmaps created [ 1138.699431][T23423] PM: hibernation: Basic memory bitmaps freed [ 1141.850285][T23491] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1141.953654][T23487] program syz.6.4651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1141.970308][T23492] ubi0: attaching mtd0 [ 1141.983108][T23492] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1142.227707][T23495] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1142.439193][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4643'. [ 1142.472376][T23502] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1145.444237][T23530] FAULT_INJECTION: forcing a failure. [ 1145.444237][T23530] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.495002][T23530] CPU: 1 UID: 0 PID: 23530 Comm: syz.3.4653 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1145.495055][T23530] Tainted: [U]=USER [ 1145.495066][T23530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1145.495086][T23530] Call Trace: [ 1145.495097][T23530] [ 1145.495109][T23530] dump_stack_lvl+0x16c/0x1f0 [ 1145.495163][T23530] should_fail_ex+0x512/0x640 [ 1145.495215][T23530] should_failslab+0xc2/0x120 [ 1145.495249][T23530] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1145.495300][T23530] ? lockdep_init_map_type+0x5c/0x280 [ 1145.495347][T23530] ? mempool_init_node+0x320/0x760 [ 1145.495387][T23530] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1145.495425][T23530] mempool_init_node+0x320/0x760 [ 1145.495466][T23530] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1145.495503][T23530] ? __pfx_mempool_free_slab+0x10/0x10 [ 1145.495540][T23530] mempool_init_noprof+0x3a/0x50 [ 1145.495581][T23530] bioset_init+0x37a/0x880 [ 1145.495616][T23530] ? __pfx_bioset_init+0x10/0x10 [ 1145.495657][T23530] __alloc_disk_node+0x83/0x630 [ 1145.495709][T23530] __blk_mq_alloc_disk+0x89/0x120 [ 1145.495760][T23530] loop_add+0x49e/0xb70 [ 1145.495805][T23530] ? do_vfs_ioctl+0x523/0x1a60 [ 1145.495844][T23530] ? __pfx_loop_add+0x10/0x10 [ 1145.495881][T23530] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1145.495931][T23530] ? rcu_is_watching+0x12/0xc0 [ 1145.495968][T23530] ? __fget_files+0x204/0x3c0 [ 1145.496017][T23530] loop_control_ioctl+0x13e/0x630 [ 1145.496057][T23530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1145.496099][T23530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1145.496140][T23530] __x64_sys_ioctl+0x18b/0x210 [ 1145.496182][T23530] do_syscall_64+0xcd/0x490 [ 1145.496252][T23530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.496287][T23530] RIP: 0033:0x7fcc0178e929 [ 1145.496315][T23530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.496349][T23530] RSP: 002b:00007fcc02547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.496382][T23530] RAX: ffffffffffffffda RBX: 00007fcc019b5fa0 RCX: 00007fcc0178e929 [ 1145.496405][T23530] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000005 [ 1145.496427][T23530] RBP: 00007fcc01810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1145.496447][T23530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.496467][T23530] R13: 0000000000000000 R14: 00007fcc019b5fa0 R15: 00007ffdcd8c2518 [ 1145.496498][T23530] [ 1145.742919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1148.271867][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4658'. [ 1151.940589][T23635] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4671'. [ 1155.686994][T23705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1157.561667][T23733] ptrace attach of "./syz-executor exec"[22850] was attempted by "./syz-executor exec"[23733] [ 1158.307671][T23738] can: request_module (can-proto-3) failed. [ 1159.904333][T23786] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4692'. [ 1162.944031][T23841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1163.368806][T23848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4699'. [ 1165.345230][T23854] ptrace attach of "./syz-executor exec"[14585] was attempted by "./syz-executor exec"[23854] [ 1166.451672][T23887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4703'. [ 1170.598773][T23942] ptrace attach of "./syz-executor exec"[6296] was attempted by "./syz-executor exec"[23942] [ 1171.269489][T23964] caif:caif_disconnect_client(): nothing to disconnect [ 1171.411600][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1171.598971][T23972] netlink: 354 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1172.484823][T23965] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1174.650529][T23999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1177.533248][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.540077][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.963016][T24054] ptrace attach of "./syz-executor exec"[22938] was attempted by ""[24054] [ 1179.989146][T24068] FAULT_INJECTION: forcing a failure. [ 1179.989146][T24068] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.010496][T24068] CPU: 1 UID: 0 PID: 24068 Comm: syz.6.4739 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1180.010555][T24068] Tainted: [U]=USER [ 1180.010566][T24068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.010586][T24068] Call Trace: [ 1180.010595][T24068] [ 1180.010607][T24068] dump_stack_lvl+0x16c/0x1f0 [ 1180.010660][T24068] should_fail_ex+0x512/0x640 [ 1180.010721][T24068] ? snd_pcm_plugin_build+0x434/0x650 [ 1180.010765][T24068] should_failslab+0xc2/0x120 [ 1180.010796][T24068] __kmalloc_noprof+0xd2/0x510 [ 1180.010846][T24068] snd_pcm_plugin_build+0x434/0x650 [ 1180.010884][T24068] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1180.010922][T24068] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1180.010959][T24068] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1180.011000][T24068] snd_pcm_oss_change_params_locked+0x2e62/0x3a30 [ 1180.011042][T24068] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1180.011077][T24068] ? rcu_is_watching+0x12/0xc0 [ 1180.011123][T24068] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1180.011161][T24068] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1180.011195][T24068] ? __fget_files+0x204/0x3c0 [ 1180.011236][T24068] ? hook_file_ioctl_common+0x145/0x410 [ 1180.011272][T24068] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1180.011326][T24068] ? __fget_files+0x20e/0x3c0 [ 1180.011373][T24068] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1180.011412][T24068] __x64_sys_ioctl+0x18b/0x210 [ 1180.011453][T24068] do_syscall_64+0xcd/0x490 [ 1180.011505][T24068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.011538][T24068] RIP: 0033:0x7f7c0858e929 [ 1180.011574][T24068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.011604][T24068] RSP: 002b:00007f7c093ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1180.011632][T24068] RAX: ffffffffffffffda RBX: 00007f7c087b6080 RCX: 00007f7c0858e929 [ 1180.011653][T24068] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1180.011673][T24068] RBP: 00007f7c08610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1180.011691][T24068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.011709][T24068] R13: 0000000000000000 R14: 00007f7c087b6080 R15: 00007fff87de0488 [ 1180.011735][T24068] [ 1181.129033][T24078] Invalid ELF header magic: != ELF [ 1183.512144][T24114] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1184.647786][T24132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4751'. [ 1185.115171][T24141] sd 0:0:1:0: PR command failed: 1026 [ 1185.131367][T24141] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1185.185977][T24141] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1187.721733][T24185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1188.413136][T24196] Invalid ELF header magic: != ELF [ 1188.572339][T24208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4765'. [ 1189.379969][T24217] vivid-003: ================= START STATUS ================= [ 1189.569913][T24217] vivid-003: Radio HW Seek Mode: Bounded [ 1189.600062][T24217] vivid-003: Radio Programmable HW Seek: false [ 1189.606584][T24217] vivid-003: RDS Rx I/O Mode: Block I/O [ 1189.709582][T24217] vivid-003: Generate RBDS Instead of RDS: false [ 1189.718472][T24217] vivid-003: RDS Reception: true [ 1189.728983][T24217] vivid-003: RDS Program Type: 0 inactive [ 1189.826779][T24217] vivid-003: RDS PS Name: inactive [ 1189.933504][T24217] vivid-003: RDS Radio Text: inactive [ 1190.335487][T24217] vivid-003: RDS Traffic Announcement: false inactive [ 1190.443073][T24217] vivid-003: RDS Traffic Program: false inactive [ 1190.493306][T24217] vivid-003: RDS Music: false inactive [ 1190.513028][T24217] vivid-003: ================== END STATUS ================== [ 1191.660591][T24247] FAULT_INJECTION: forcing a failure. [ 1191.660591][T24247] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.729747][T24247] CPU: 0 UID: 0 PID: 24247 Comm: syz.5.4774 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1191.729816][T24247] Tainted: [U]=USER [ 1191.729827][T24247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1191.729845][T24247] Call Trace: [ 1191.729855][T24247] [ 1191.729866][T24247] dump_stack_lvl+0x16c/0x1f0 [ 1191.729917][T24247] should_fail_ex+0x512/0x640 [ 1191.729967][T24247] ? snd_pcm_plugin_build+0x434/0x650 [ 1191.730005][T24247] should_failslab+0xc2/0x120 [ 1191.730037][T24247] __kmalloc_noprof+0xd2/0x510 [ 1191.730107][T24247] snd_pcm_plugin_build+0x434/0x650 [ 1191.730149][T24247] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1191.730190][T24247] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1191.730232][T24247] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1191.730276][T24247] snd_pcm_oss_change_params_locked+0x2e62/0x3a30 [ 1191.730321][T24247] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1191.730358][T24247] ? rcu_is_watching+0x12/0xc0 [ 1191.730406][T24247] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1191.730446][T24247] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1191.730485][T24247] ? __fget_files+0x204/0x3c0 [ 1191.730538][T24247] ? hook_file_ioctl_common+0x145/0x410 [ 1191.730577][T24247] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1191.730616][T24247] ? __fget_files+0x20e/0x3c0 [ 1191.730660][T24247] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1191.730698][T24247] __x64_sys_ioctl+0x18b/0x210 [ 1191.730735][T24247] do_syscall_64+0xcd/0x490 [ 1191.730806][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.730836][T24247] RIP: 0033:0x7fbeb458e929 [ 1191.730859][T24247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.730899][T24247] RSP: 002b:00007fbeb54a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.730926][T24247] RAX: ffffffffffffffda RBX: 00007fbeb47b6080 RCX: 00007fbeb458e929 [ 1191.730945][T24247] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1191.730962][T24247] RBP: 00007fbeb4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1191.730979][T24247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.730996][T24247] R13: 0000000000000000 R14: 00007fbeb47b6080 R15: 00007ffcba5bd598 [ 1191.731023][T24247] [ 1194.307618][T24280] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1195.161185][T24286] tc_dump_action: action bad kind [ 1195.566493][T24291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4782'. [ 1199.110342][T24350] random: crng reseeded on system resumption [ 1199.142467][T24350] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1199.150722][T24350] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1199.158929][T24350] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1199.265209][T24350] PM: hibernation: Basic memory bitmaps created [ 1199.896279][T24333] PM: hibernation: Basic memory bitmaps freed [ 1201.394057][T24375] sp0: Synchronizing with TNC [ 1203.129923][T24408] vhci_hcd: invalid port number 16 [ 1203.135742][T24408] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 1205.255902][T24445] : renamed from gre0 (while UP) [ 1206.194813][T24459] tipc: Started in network mode [ 1206.225390][T24459] tipc: Node identity ee00, cluster identity 4711 [ 1206.231880][T24459] tipc: Node number set to 60928 [ 1207.748691][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045e1a800: rx timeout, send abort [ 1207.812844][T24499] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1208.254486][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045e1a800: abort rx timeout. Force session deactivation [ 1209.053283][T24514] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1209.294999][T24519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 1209.535027][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4824'. [ 1209.696327][T24531] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1210.754481][T24558] block nbd2: Unsupported socket: shutdown callout must be supported. [ 1212.365186][T24580] caif:caif_disconnect_client(): nothing to disconnect [ 1212.508350][T24584] FAULT_INJECTION: forcing a failure. [ 1212.508350][T24584] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.522666][T24584] CPU: 0 UID: 0 PID: 24584 Comm: syz.5.4836 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1212.522702][T24584] Tainted: [U]=USER [ 1212.522709][T24584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1212.522722][T24584] Call Trace: [ 1212.522729][T24584] [ 1212.522737][T24584] dump_stack_lvl+0x16c/0x1f0 [ 1212.522774][T24584] should_fail_ex+0x512/0x640 [ 1212.522810][T24584] should_failslab+0xc2/0x120 [ 1212.522833][T24584] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1212.522867][T24584] ? alloc_empty_file+0x55/0x1e0 [ 1212.522893][T24584] alloc_empty_file+0x55/0x1e0 [ 1212.522917][T24584] path_openat+0xda/0x2cb0 [ 1212.522951][T24584] ? rcu_is_watching+0x12/0xc0 [ 1212.522974][T24584] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1212.522998][T24584] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1212.523032][T24584] ? __pfx_path_openat+0x10/0x10 [ 1212.523064][T24584] ? __asan_memcpy+0x3c/0x60 [ 1212.523095][T24584] do_file_open_root+0x322/0x610 [ 1212.523127][T24584] ? stack_trace_save+0x8e/0xc0 [ 1212.523153][T24584] ? __pfx_do_file_open_root+0x10/0x10 [ 1212.523198][T24584] ? vsnprintf+0x318/0x1160 [ 1212.523229][T24584] file_open_root+0x2a7/0x450 [ 1212.523263][T24584] ? __pfx_file_open_root+0x10/0x10 [ 1212.523300][T24584] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 1212.523325][T24584] ? rcu_is_watching+0x12/0xc0 [ 1212.523347][T24584] ? lock_release+0x201/0x2f0 [ 1212.523378][T24584] kernel_read_file_from_path_initns+0x189/0x260 [ 1212.523405][T24584] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 1212.523431][T24584] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1212.523456][T24584] ? _request_firmware+0x503/0x1470 [ 1212.523487][T24584] _request_firmware+0x744/0x1470 [ 1212.523530][T24584] ? __pfx__request_firmware+0x10/0x10 [ 1212.523565][T24584] request_firmware+0x35/0x50 [ 1212.523595][T24584] valid_regdb+0x188/0x590 [ 1212.523617][T24584] ? __pfx___mutex_lock+0x10/0x10 [ 1212.523650][T24584] ? __pfx_valid_regdb+0x10/0x10 [ 1212.523674][T24584] reg_reload_regdb+0x11e/0x460 [ 1212.523700][T24584] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1212.523726][T24584] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1212.523758][T24584] ? nl80211_pre_doit+0x1b0/0xb10 [ 1212.523791][T24584] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1212.523820][T24584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1212.523847][T24584] ? rcu_is_watching+0x12/0xc0 [ 1212.523873][T24584] ? bpf_lsm_capable+0x9/0x10 [ 1212.523901][T24584] ? security_capable+0x7e/0x260 [ 1212.523925][T24584] genl_rcv_msg+0x55c/0x800 [ 1212.523952][T24584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.523978][T24584] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1212.524010][T24584] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1212.524034][T24584] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1212.524071][T24584] netlink_rcv_skb+0x158/0x420 [ 1212.524093][T24584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1212.524120][T24584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1212.524148][T24584] ? netlink_deliver_tap+0x1ae/0xd30 [ 1212.524170][T24584] genl_rcv+0x28/0x40 [ 1212.524192][T24584] netlink_unicast+0x53a/0x7f0 [ 1212.524216][T24584] ? __pfx_netlink_unicast+0x10/0x10 [ 1212.524242][T24584] netlink_sendmsg+0x8d1/0xdd0 [ 1212.524266][T24584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.524293][T24584] ____sys_sendmsg+0xa98/0xc70 [ 1212.524318][T24584] ? copy_msghdr_from_user+0x10a/0x160 [ 1212.524350][T24584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.524377][T24584] ? __pfx_futex_wake_mark+0x10/0x10 [ 1212.524411][T24584] ___sys_sendmsg+0x134/0x1d0 [ 1212.524444][T24584] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.524500][T24584] ? rcu_is_watching+0x12/0xc0 [ 1212.524553][T24584] __sys_sendmsg+0x16d/0x220 [ 1212.524588][T24584] ? __pfx___sys_sendmsg+0x10/0x10 [ 1212.524622][T24584] ? __x64_sys_futex+0x1e0/0x4c0 [ 1212.524660][T24584] do_syscall_64+0xcd/0x490 [ 1212.524697][T24584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.524720][T24584] RIP: 0033:0x7fbeb458e929 [ 1212.524738][T24584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.524762][T24584] RSP: 002b:00007fbeb54c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.524796][T24584] RAX: ffffffffffffffda RBX: 00007fbeb47b5fa0 RCX: 00007fbeb458e929 [ 1212.524811][T24584] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 1212.524825][T24584] RBP: 00007fbeb4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1212.524838][T24584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1212.524852][T24584] R13: 0000000000000000 R14: 00007fbeb47b5fa0 R15: 00007ffcba5bd598 [ 1212.524872][T24584] [ 1212.525005][T24584] platform regulatory.0: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12 [ 1216.400323][T24624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1217.777469][T24669] FAULT_INJECTION: forcing a failure. [ 1217.777469][T24669] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.801969][T24669] CPU: 1 UID: 0 PID: 24669 Comm: syz.5.4850 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1217.802005][T24669] Tainted: [U]=USER [ 1217.802012][T24669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1217.802025][T24669] Call Trace: [ 1217.802032][T24669] [ 1217.802039][T24669] dump_stack_lvl+0x16c/0x1f0 [ 1217.802075][T24669] should_fail_ex+0x512/0x640 [ 1217.802113][T24669] should_failslab+0xc2/0x120 [ 1217.802135][T24669] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1217.802168][T24669] ? seq_open+0x55/0x170 [ 1217.802192][T24669] ? __pfx_snd_info_seq_show+0x10/0x10 [ 1217.802218][T24669] seq_open+0x55/0x170 [ 1217.802238][T24669] ? __pfx_snd_info_seq_show+0x10/0x10 [ 1217.802258][T24669] single_open+0xfc/0x1f0 [ 1217.802280][T24669] snd_info_text_entry_open+0x175/0x2a0 [ 1217.802302][T24669] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1217.802323][T24669] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1217.802346][T24669] ? __pfx_apparmor_file_open+0x10/0x10 [ 1217.802373][T24669] ? path_get+0x61/0x80 [ 1217.802392][T24669] ? proc_reg_open+0x21d/0x610 [ 1217.802422][T24669] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1217.802443][T24669] proc_reg_open+0x289/0x610 [ 1217.802477][T24669] do_dentry_open+0x744/0x1c10 [ 1217.802509][T24669] ? __pfx_proc_reg_open+0x10/0x10 [ 1217.802542][T24669] vfs_open+0x82/0x3f0 [ 1217.802566][T24669] path_openat+0x1de4/0x2cb0 [ 1217.802600][T24669] ? __pfx_path_openat+0x10/0x10 [ 1217.802633][T24669] do_filp_open+0x20b/0x470 [ 1217.802663][T24669] ? __pfx_do_filp_open+0x10/0x10 [ 1217.802702][T24669] ? alloc_fd+0x471/0x7d0 [ 1217.802733][T24669] do_sys_openat2+0x11b/0x1d0 [ 1217.802756][T24669] ? __pfx_do_sys_openat2+0x10/0x10 [ 1217.802779][T24669] ? lock_release+0x201/0x2f0 [ 1217.802810][T24669] __x64_sys_openat+0x174/0x210 [ 1217.802835][T24669] ? __pfx___x64_sys_openat+0x10/0x10 [ 1217.802864][T24669] do_syscall_64+0xcd/0x490 [ 1217.802896][T24669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.802917][T24669] RIP: 0033:0x7fbeb458e929 [ 1217.802932][T24669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.802952][T24669] RSP: 002b:00007fbeb54a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1217.802972][T24669] RAX: ffffffffffffffda RBX: 00007fbeb47b6080 RCX: 00007fbeb458e929 [ 1217.802987][T24669] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1217.803000][T24669] RBP: 00007fbeb4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1217.803013][T24669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.803026][T24669] R13: 0000000000000000 R14: 00007fbeb47b6080 R15: 00007ffcba5bd598 [ 1217.803045][T24669] [ 1219.306588][T24690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1221.241915][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1221.359749][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1225.069528][T24788] mkiss: ax0: crc mode is auto. [ 1225.435950][T24758] Bluetooth: hci4: command 0x0406 tx timeout [ 1227.188049][ T31] INFO: task syz.1.4491:22653 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1227.279212][ T31] Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 [ 1227.299120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1227.307900][ T31] task:syz.1.4491 state:D stack:28264 pid:22653 tgid:22650 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 1227.323894][ T31] Call Trace: [ 1227.327248][ T31] [ 1227.330297][ T31] __schedule+0x116a/0x5de0 [ 1227.339924][ T31] ? __sys_sendmsg+0x16d/0x220 [ 1227.344892][ T31] ? do_syscall_64+0xcd/0x490 [ 1227.349602][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.358681][ T31] ? __pfx___schedule+0x10/0x10 [ 1227.363574][ T31] ? schedule+0x2d7/0x3a0 [ 1227.378448][ T31] ? rcu_is_watching+0x12/0xc0 [ 1227.403425][ T31] ? lock_release+0x201/0x2f0 [ 1227.444323][ T31] schedule+0xe7/0x3a0 [ 1227.547215][ T31] schedule_preempt_disabled+0x13/0x30 [ 1227.582871][ T31] __mutex_lock+0x6c7/0xb90 [ 1227.598660][ T31] ? nfsd_nl_version_get_doit+0x18a/0x800 [ 1227.604795][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1227.609917][ T31] ? skb_put+0x138/0x1b0 [ 1227.622308][ T31] ? genlmsg_put+0x258/0x2d0 [ 1227.627286][ T31] ? nfsd_nl_version_get_doit+0x18a/0x800 [ 1227.633826][ T31] nfsd_nl_version_get_doit+0x18a/0x800 [ 1227.641628][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1227.649061][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 1227.656501][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1227.668133][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1227.752690][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1227.758888][ T31] ? __dev_queue_xmit+0x896/0x43e0 [ 1227.764220][ T31] ? genl_get_cmd+0x194/0x580 [ 1227.768964][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1227.774373][ T31] genl_rcv_msg+0x55c/0x800 [ 1227.781644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.786757][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1227.793405][ T31] netlink_rcv_skb+0x158/0x420 [ 1227.798221][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1227.803756][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1227.825960][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1227.859517][ T31] genl_rcv+0x28/0x40 [ 1227.871508][ T31] netlink_unicast+0x53a/0x7f0 [ 1227.880999][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1227.896744][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1227.906843][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.940522][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1227.958117][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1227.972869][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.050227][ T31] ? page_table_check_set+0x631/0x750 [ 1228.058923][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1228.068190][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.079623][ T31] ? lock_release+0x201/0x2f0 [ 1228.088832][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.108377][ T31] __sys_sendmsg+0x16d/0x220 [ 1228.148151][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1228.195925][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1228.289081][ T31] do_syscall_64+0xcd/0x490 [ 1228.318727][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.383946][ T31] RIP: 0033:0x7fedd2d8e929 [ 1228.400261][ T31] RSP: 002b:00007fedd0bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.486993][ T31] RAX: ffffffffffffffda RBX: 00007fedd2fb6080 RCX: 00007fedd2d8e929 [ 1228.519557][ T31] RDX: 0000000000000800 RSI: 0000200000000140 RDI: 0000000000000003 [ 1228.547528][ T31] RBP: 00007fedd2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1228.597249][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.666974][ T31] R13: 0000000000000001 R14: 00007fedd2fb6080 R15: 00007ffe3fe0da68 [ 1228.675031][ T31] [ 1228.681250][ T31] INFO: lockdep is turned off. [ 1228.726642][ T31] NMI backtrace for cpu 0 [ 1228.726673][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1228.726719][ T31] Tainted: [U]=USER [ 1228.726730][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1228.726748][ T31] Call Trace: [ 1228.726758][ T31] [ 1228.726769][ T31] dump_stack_lvl+0x116/0x1f0 [ 1228.726827][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1228.726864][ T31] ? watchdog+0xd79/0x12c0 [ 1228.726913][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1228.726958][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1228.727000][ T31] watchdog+0xf70/0x12c0 [ 1228.727053][ T31] ? __pfx_watchdog+0x10/0x10 [ 1228.727100][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1228.727149][ T31] ? __kthread_parkme+0x19e/0x250 [ 1228.727190][ T31] ? __pfx_watchdog+0x10/0x10 [ 1228.727239][ T31] kthread+0x3c5/0x780 [ 1228.727284][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.727332][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.727365][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.727414][ T31] ret_from_fork+0x5d4/0x6f0 [ 1228.727470][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.727515][ T31] ret_from_fork_asm+0x1a/0x30 [ 1228.727558][ T31] [ 1228.727569][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1228.859634][ C1] NMI backtrace for cpu 1 [ 1228.859654][ C1] CPU: 1 UID: 0 PID: 21029 Comm: kworker/u8:9 Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1228.859688][ C1] Tainted: [U]=USER [ 1228.859696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1228.859711][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1228.859740][ C1] RIP: 0010:kasan_save_stack+0x49/0x60 [ 1228.859777][ C1] Code: 02 00 00 48 89 e3 48 89 df f3 48 ab 48 89 df e8 7d d2 85 ff 44 89 e1 89 ea 48 89 df 89 c6 e8 9e 7f e9 02 48 81 c4 00 02 00 00 <5b> 5d 41 5c c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 1228.859800][ C1] RSP: 0018:ffffc9000b9cfa18 EFLAGS: 00000286 [ 1228.859816][ C1] RAX: 00000000040a0272 RBX: ffffc9000b9cf818 RCX: ffff88805b1ce050 [ 1228.859832][ C1] RDX: 00000000a0d840f8 RSI: ffffffff812c009a RDI: 000000003b998927 [ 1228.859846][ C1] RBP: 0000000000000000 R08: ffffffff9138dbc8 R09: ffff88823ae52410 [ 1228.859861][ C1] R10: ffffc9000b9cf6e8 R11: 0000000000002c00 R12: 0000000000000001 [ 1228.859881][ C1] R13: 0000000000212110 R14: ffffea0001b28300 R15: 0000000000000000 [ 1228.859896][ C1] FS: 0000000000000000(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 1228.859917][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1228.859932][ C1] CR2: 00007f4e434e7d60 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1228.859946][ C1] Call Trace: [ 1228.859953][ C1] [ 1228.859962][ C1] kasan_save_track+0x14/0x30 [ 1228.859997][ C1] kasan_save_free_info+0x3b/0x60 [ 1228.860025][ C1] __kasan_slab_free+0x51/0x70 [ 1228.860045][ C1] kmem_cache_free+0x2d1/0x4d0 [ 1228.860078][ C1] ? skb_free_head+0x1b7/0x210 [ 1228.860110][ C1] skb_free_head+0x1b7/0x210 [ 1228.860139][ C1] skb_release_data+0x776/0x9c0 [ 1228.860173][ C1] ? rcu_is_watching+0x12/0xc0 [ 1228.860199][ C1] sk_skb_reason_drop+0x129/0x1a0 [ 1228.860220][ C1] ieee80211_iface_work+0x434/0x1020 [ 1228.860253][ C1] ? rcu_is_watching+0x12/0xc0 [ 1228.860277][ C1] cfg80211_wiphy_work+0x3dc/0x550 [ 1228.860302][ C1] process_one_work+0x9cf/0x1b70 [ 1228.860362][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1228.860388][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1228.860429][ C1] ? assign_work+0x1a0/0x250 [ 1228.860464][ C1] worker_thread+0x6c8/0xf10 [ 1228.860507][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1228.860544][ C1] kthread+0x3c5/0x780 [ 1228.860579][ C1] ? __pfx_kthread+0x10/0x10 [ 1228.860613][ C1] ? rcu_is_watching+0x12/0xc0 [ 1228.860639][ C1] ? __pfx_kthread+0x10/0x10 [ 1228.860674][ C1] ret_from_fork+0x5d4/0x6f0 [ 1228.860707][ C1] ? __pfx_kthread+0x10/0x10 [ 1228.860741][ C1] ret_from_fork_asm+0x1a/0x30 [ 1228.860783][ C1] [ 1229.128241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1229.188785][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1229.195714][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1229.209145][ T31] Tainted: [U]=USER [ 1229.212974][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1229.223069][ T31] Call Trace: [ 1229.226392][ T31] [ 1229.229359][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1229.234002][ T31] panic+0x71c/0x800 [ 1229.237946][ T31] ? __pfx_panic+0x10/0x10 [ 1229.242417][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1229.247840][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1229.253948][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1229.259348][ T31] ? watchdog+0xdda/0x12c0 [ 1229.263823][ T31] ? watchdog+0xdcd/0x12c0 [ 1229.268280][ T31] watchdog+0xdeb/0x12c0 [ 1229.272559][ T31] ? __pfx_watchdog+0x10/0x10 [ 1229.277286][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1229.282520][ T31] ? __kthread_parkme+0x19e/0x250 [ 1229.287568][ T31] ? __pfx_watchdog+0x10/0x10 [ 1229.292293][ T31] kthread+0x3c5/0x780 [ 1229.296401][ T31] ? __pfx_kthread+0x10/0x10 [ 1229.301032][ T31] ? rcu_is_watching+0x12/0xc0 [ 1229.305814][ T31] ? __pfx_kthread+0x10/0x10 [ 1229.310435][ T31] ret_from_fork+0x5d4/0x6f0 [ 1229.315063][ T31] ? __pfx_kthread+0x10/0x10 [ 1229.319690][ T31] ret_from_fork_asm+0x1a/0x30 [ 1229.324491][ T31] [ 1229.327909][ T31] Kernel Offset: disabled [ 1229.332245][ T31] Rebooting in 86400 seconds..