last executing test programs: 1m30.380082342s ago: executing program 0 (id=146): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x67) mremap$auto(0x0, 0x7, 0x3ed9, 0x3, 0x1ffffffe) socket(0x10, 0x3, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) getpid() 1m28.435512327s ago: executing program 3 (id=151): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) socket(0xa, 0x801, 0x84) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x3, 0x1ff, 0x80000000, 0x11, r5, 0x1a6) ioctl$auto(0xffffffffffffffff, 0x4b32, 0x9) 1m27.909641723s ago: executing program 0 (id=155): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 1m27.815987253s ago: executing program 3 (id=156): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1m27.10440161s ago: executing program 3 (id=158): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x40000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1m27.101893318s ago: executing program 0 (id=167): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r0, 0x611e) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 1m25.288111547s ago: executing program 3 (id=164): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1m24.542203806s ago: executing program 3 (id=165): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 1m23.265320941s ago: executing program 3 (id=170): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m22.957786038s ago: executing program 0 (id=172): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) socket(0x29, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x28401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioctl$auto_BTRFS_IOC_FORGET_DEV(r2, 0x50009405, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) 1m21.45539681s ago: executing program 0 (id=173): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r1, 0x0, 0x0) 1m20.21369211s ago: executing program 0 (id=178): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 1m8.194688591s ago: executing program 32 (id=170): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m7.218114867s ago: executing program 2 (id=187): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) adjtimex$auto(0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000005880)='/dev/bus/usb/004/001\x00', 0x2082, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x23, 0x80805, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/2, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3a, 0xfff, 0x948b, 0x600000000000, 0x95f4da0a, 0xffffffffffffffff, 0x8001, 0x30, 0x80000001, 0x4, 0x6d3f, 0x100000000000009, 0xfffffffffffffffe, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syslog$auto(0x3, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x80, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x804, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) 1m5.004200003s ago: executing program 33 (id=178): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 1m4.761937458s ago: executing program 2 (id=191): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 1m4.262921726s ago: executing program 2 (id=192): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x8000009b72, 0x2, 0x8000) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xc3) 1m3.558661337s ago: executing program 2 (id=193): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) epoll_ctl$auto(0x5, 0x1, r0, 0x0) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) r1 = socket(0x6, 0x2, 0x80000000) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040c04}, 0x808c5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) fstatfs$auto(0x3, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x141001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r3, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) 1m1.721694994s ago: executing program 2 (id=205): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m0.0190124s ago: executing program 2 (id=208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 44.734488653s ago: executing program 34 (id=208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 13.877290231s ago: executing program 4 (id=316): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) io_uring_enter$auto(r1, 0x8001, 0x80, 0xf, &(0x7f0000000040)="6f6fdfc624482b6feebecf0c6f9b95dfda4c61249e97790decc0a3b8885108e61e06e4de584eb953737116e751be9b06447d68ceb2fbe4cab38f1f351737e8a1acfa09e4ad456d9b26a7f85a39540a7cb4f7adedabc87237db4dc316f7f529c11804c2db4dbf598c1ea68248f57e", 0x5) read$auto(r1, 0x0, 0xb4d3) 9.89025725s ago: executing program 4 (id=315): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 8.11893925s ago: executing program 5 (id=329): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 8.116399183s ago: executing program 1 (id=322): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e010600020001000000080018"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 8.005536921s ago: executing program 4 (id=323): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 7.500639906s ago: executing program 5 (id=324): write$auto(0xffffffffffffffff, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 6.996066907s ago: executing program 4 (id=325): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) r3 = socket(0x2b, 0x1, 0x1) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) inotify_rm_watch$auto(r0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sysfs$auto(0x2, 0x10000000000048, 0x0) 6.500125823s ago: executing program 1 (id=327): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x42, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000200)={0x7ff, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x0, 0x8, 0x8001, 0x3, 0x9, 0x0, 0x200, 0xe21f, 0x80000000, 0x2000009, 0x7, 0x10000001000}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) 6.277149938s ago: executing program 5 (id=330): write$auto(0xffffffffffffffff, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 5.349077751s ago: executing program 6 (id=331): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x8000009b72, 0x2, 0x8000) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r0, 0x0, 0xc3) 4.538633307s ago: executing program 4 (id=332): mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0x2, 0x111, 0x2, 0x8004) poll$auto(0x0, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.535987053s ago: executing program 5 (id=340): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 4.535164262s ago: executing program 1 (id=333): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) adjtimex$auto(0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000005880)='/dev/bus/usb/004/001\x00', 0x2082, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x23, 0x80805, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/2, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3a, 0xfff, 0x948b, 0x600000000000, 0x95f4da0a, 0xffffffffffffffff, 0x8001, 0x30, 0x80000001, 0x4, 0x6d3f, 0x100000000000009, 0xfffffffffffffffe, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syslog$auto(0x3, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x80, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x804, 0x5) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) 4.534924925s ago: executing program 6 (id=334): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 3.666162854s ago: executing program 6 (id=335): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 3.36580676s ago: executing program 1 (id=336): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 3.117444559s ago: executing program 5 (id=337): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e010600020001000000080018"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 2.099281269s ago: executing program 5 (id=338): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r3, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x1ef}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4082, 0xff2) setgroups$auto(0x1e9, &(0x7f0000000180)=0x400000) 2.098983369s ago: executing program 1 (id=339): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r1, 0xd, 0x23, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdb0025000800058004000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240088d4}, 0x2000c880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r4 = socket(0x2, 0x3, 0xa) r5 = gettid() r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r6, 0x90006442, r6) process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)=@link_create={@map_fd=r4, @target_fd=r4, 0x4, 0x3, @uprobe_multi={0x2, 0x7, 0x7, 0x3d, 0x2, 0x100, r5}}, 0xfffffff8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)="223b50f005b1f0a605a4a8dde40658d35be2f2ebf7304a258c0e7b1130a06874b744921ea7c323332d817b4afaebf41270970e2751a81dc6bbfdd1fa875c3714e9b9c55b05e5371ac803346254f6a73dfd42a4b912677a54af50ede684a0ff1fcb4f477aa79158234832a7f8b7df2c6d191c0031f4b31c49ab4c5e63359b", 0x2379c2ae}, 0x7) recvfrom$auto(0x3, 0x0, 0x27, 0x10ffe, 0x0, 0xfffffffffffffffd) 2.098808519s ago: executing program 6 (id=341): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x8000009b72, 0x2, 0x8000) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r0, 0x0, 0xc3) 1.710559687s ago: executing program 6 (id=342): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x8001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x610002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x3, 0x20009) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x4, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/dfscache\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x3, 0x6c2) r4 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f00000002c0)=0x401) close_range$auto(r0, r4, 0x7) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0xb0903, 0x0) 631.388508ms ago: executing program 1 (id=343): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="1f91f2c388274610e18d5fc5e5bfd9800e9b63", 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, 0x0, 0x20000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x85, 0x0, 0x0) socket(0x2a, 0x5, 0x7) capset$auto(0x0, 0x0) unshare$auto(0x40000080) 459.808431ms ago: executing program 4 (id=344): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0x6, 0x0, 0x7, 0xa505}, 0x800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 0s ago: executing program 6 (id=345): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 84.286630][ T5820] cgroup: Unknown subsys name 'net' [ 84.439143][ T5820] cgroup: Unknown subsys name 'cpuset' [ 84.448714][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.038002][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.217556][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.225873][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.234507][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.242500][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.250675][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.258000][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.266821][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.274163][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.282152][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.295442][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.314065][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.321896][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.330088][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.338612][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.345545][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.346820][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.361460][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.375430][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.385751][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.397166][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.759067][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.993100][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.008235][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.016059][ T5840] bridge_slave_0: entered allmulticast mode [ 89.023939][ T5840] bridge_slave_0: entered promiscuous mode [ 89.036949][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.068510][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.075740][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.082917][ T5840] bridge_slave_1: entered allmulticast mode [ 89.093436][ T5840] bridge_slave_1: entered promiscuous mode [ 89.125819][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.148126][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.234021][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.267019][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.274584][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.282429][ T5830] bridge_slave_0: entered allmulticast mode [ 89.289746][ T5830] bridge_slave_0: entered promiscuous mode [ 89.300935][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.335135][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.342474][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.349795][ T5830] bridge_slave_1: entered allmulticast mode [ 89.357166][ T5830] bridge_slave_1: entered promiscuous mode [ 89.421399][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.434265][ T5840] team0: Port device team_slave_0 added [ 89.471147][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.482350][ T5840] team0: Port device team_slave_1 added [ 89.536365][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.543499][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.553031][ T5831] bridge_slave_0: entered allmulticast mode [ 89.560494][ T5831] bridge_slave_0: entered promiscuous mode [ 89.569338][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.576975][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.584095][ T5829] bridge_slave_0: entered allmulticast mode [ 89.592312][ T5829] bridge_slave_0: entered promiscuous mode [ 89.622233][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.629578][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.636819][ T5831] bridge_slave_1: entered allmulticast mode [ 89.643921][ T5831] bridge_slave_1: entered promiscuous mode [ 89.651283][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.658699][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.666134][ T5829] bridge_slave_1: entered allmulticast mode [ 89.673848][ T5829] bridge_slave_1: entered promiscuous mode [ 89.683104][ T5830] team0: Port device team_slave_0 added [ 89.689979][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.697281][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.723367][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.760183][ T5830] team0: Port device team_slave_1 added [ 89.766814][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.773762][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.800516][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.831304][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.873849][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.887056][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.910219][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.917248][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.943528][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.956701][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.963687][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.989911][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.014896][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.097842][ T5831] team0: Port device team_slave_0 added [ 90.131131][ T5829] team0: Port device team_slave_0 added [ 90.140080][ T5829] team0: Port device team_slave_1 added [ 90.151070][ T5840] hsr_slave_0: entered promiscuous mode [ 90.158472][ T5840] hsr_slave_1: entered promiscuous mode [ 90.167837][ T5831] team0: Port device team_slave_1 added [ 90.180034][ T5830] hsr_slave_0: entered promiscuous mode [ 90.186588][ T5830] hsr_slave_1: entered promiscuous mode [ 90.192697][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.200446][ T5830] Cannot create hsr debugfs directory [ 90.267540][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.274572][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.300605][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.331266][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.338376][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.364577][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.382127][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.389522][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.389586][ T51] Bluetooth: hci1: command tx timeout [ 90.415865][ T5153] Bluetooth: hci3: command tx timeout [ 90.416075][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.438636][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.445925][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.472022][ T51] Bluetooth: hci2: command tx timeout [ 90.472031][ T5153] Bluetooth: hci0: command tx timeout [ 90.472765][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.635606][ T5829] hsr_slave_0: entered promiscuous mode [ 90.641870][ T5829] hsr_slave_1: entered promiscuous mode [ 90.648598][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.656285][ T5829] Cannot create hsr debugfs directory [ 90.668416][ T5831] hsr_slave_0: entered promiscuous mode [ 90.674908][ T5831] hsr_slave_1: entered promiscuous mode [ 90.681370][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.689090][ T5831] Cannot create hsr debugfs directory [ 91.009408][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.049795][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.075060][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.090712][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.133999][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.146994][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.171239][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.182083][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.240479][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.253633][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.271848][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.284115][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.398863][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.410294][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.423850][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.446268][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.513710][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.570596][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.583647][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.620393][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.640988][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.654088][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.661350][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.688971][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.696141][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.712127][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.742396][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.749645][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.778621][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785778][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.838078][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.845331][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.891743][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.898932][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.921353][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.959241][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.007742][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.044092][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.080933][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.088171][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.180193][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.187372][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.475907][ T51] Bluetooth: hci1: command tx timeout [ 92.475985][ T5153] Bluetooth: hci3: command tx timeout [ 92.546532][ T5153] Bluetooth: hci0: command tx timeout [ 92.551581][ T51] Bluetooth: hci2: command tx timeout [ 92.660093][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.707930][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.831309][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.873749][ T5830] veth0_vlan: entered promiscuous mode [ 92.881147][ T5840] veth0_vlan: entered promiscuous mode [ 92.895121][ T5840] veth1_vlan: entered promiscuous mode [ 92.938430][ T5830] veth1_vlan: entered promiscuous mode [ 92.971273][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.034594][ T5830] veth0_macvtap: entered promiscuous mode [ 93.049509][ T5831] veth0_vlan: entered promiscuous mode [ 93.070482][ T5840] veth0_macvtap: entered promiscuous mode [ 93.077839][ T5830] veth1_macvtap: entered promiscuous mode [ 93.100357][ T5829] veth0_vlan: entered promiscuous mode [ 93.112579][ T5831] veth1_vlan: entered promiscuous mode [ 93.121448][ T5840] veth1_macvtap: entered promiscuous mode [ 93.150751][ T5829] veth1_vlan: entered promiscuous mode [ 93.171540][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.183467][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.212558][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.223143][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232889][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241729][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250553][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.289808][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.319131][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.328973][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.337898][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.346900][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.378867][ T5831] veth0_macvtap: entered promiscuous mode [ 93.409803][ T5829] veth0_macvtap: entered promiscuous mode [ 93.421520][ T5831] veth1_macvtap: entered promiscuous mode [ 93.453029][ T5829] veth1_macvtap: entered promiscuous mode [ 93.519195][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.533086][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.544229][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.553660][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.569465][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.596642][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.617434][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.619022][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.628764][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.639250][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.645121][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.659938][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698815][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.707950][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.718357][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.727415][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771162][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.779916][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.789183][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.802213][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.920844][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.958178][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.967738][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.022781][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.031077][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.169579][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.190830][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.228225][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.251304][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.549191][ T51] Bluetooth: hci3: command tx timeout [ 94.555976][ T5153] Bluetooth: hci1: command tx timeout [ 94.625573][ T51] Bluetooth: hci0: command tx timeout [ 94.636486][ T51] Bluetooth: hci2: command tx timeout [ 94.981882][ T5933] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.995737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.005656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.146519][ T5933] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.180245][ T5933] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.245395][ T5941] netlink: 102 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.320303][ T5933] mmap: syz.0.1 (5933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.372167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.576833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.585811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.594024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.696096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.704714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.714859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.217430][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.628585][ T5153] Bluetooth: hci3: command tx timeout [ 96.634409][ T51] Bluetooth: hci1: command tx timeout [ 96.706159][ T51] Bluetooth: hci2: command tx timeout [ 96.711607][ T51] Bluetooth: hci0: command tx timeout [ 96.787730][ T980] cfg80211: failed to load regulatory.db [ 97.505554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.761230][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.544524][ T5986] Invalid ELF header magic: != ELF [ 98.602712][ T5986] netlink: zone id is out of range [ 98.622202][ T5986] netlink: zone id is out of range [ 98.640986][ T5986] netlink: zone id is out of range [ 98.699076][ T5986] netlink: zone id is out of range [ 98.704227][ T5986] netlink: zone id is out of range [ 99.897928][ T6007] tipc: Started in network mode [ 99.902936][ T6007] tipc: Node identity ee00, cluster identity 4711 [ 99.926692][ T6007] tipc: Node number set to 60928 [ 99.997448][ T6003] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 100.971315][ T6024] process 'syz.2.19' launched './file0' with NULL argv: empty string added [ 101.249185][ T51] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 105.559424][ T6079] random: crng reseeded on system resumption [ 108.169473][ T6116] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 109.122161][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 109.226772][ T6143] Zero length message leads to an empty skb [ 110.065303][ T6154] vivid-009: ================= START STATUS ================= [ 110.115006][ T6154] vivid-009: Enable Output Cropping: true grabbed [ 110.177145][ T6154] vivid-009: Enable Output Composing: true grabbed [ 110.272009][ T6154] vivid-009: Enable Output Scaler: true grabbed [ 110.346035][ T6154] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 110.387492][ T6154] vivid-009: Transmit Mode: HDMI grabbed [ 110.428520][ T6160] block nbd7: not configured, cannot reconfigure [ 110.462459][ T6154] vivid-009: Hotplug Present: 0x00000000 [ 110.570862][ T6154] vivid-009: RxSense Present: 0x00000000 [ 110.666973][ T6154] vivid-009: EDID Present: 0x00000000 [ 110.724861][ T6162] sd 0:0:1:0: PR command failed: 1026 [ 110.780875][ T6154] vivid-009: ================== END STATUS ================== [ 110.800739][ T6162] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 110.856134][ T6162] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.881101][ T6252] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.881101][ T6252] The task syz.2.62 (6252) triggered the difference, watch for misbehavior. [ 120.027287][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 120.096356][ T6273] netlink: 354 bytes leftover after parsing attributes in process `syz.3.66'. [ 122.237556][ T6306] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 122.463244][ T6304] random: crng reseeded on system resumption [ 122.767395][ T6306] HfR: entered promiscuous mode [ 123.029186][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 123.078945][ T6306] openvswitch: HfR: Dropping previously announced user features [ 123.714131][ T6318] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 123.867678][ T6306] syz.1.72 (6306) used greatest stack depth: 20936 bytes left [ 124.525870][ T6330] FAULT_INJECTION: forcing a failure. [ 124.525870][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 124.655831][ T6329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 124.686343][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz.3.77 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 124.686381][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.686401][ T6330] Call Trace: [ 124.686410][ T6330] [ 124.686424][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 124.686477][ T6330] should_fail_ex+0x512/0x640 [ 124.686516][ T6330] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 124.686564][ T6330] should_failslab+0xc2/0x120 [ 124.686591][ T6330] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 124.686632][ T6330] ? __proc_create+0xc3/0x8c0 [ 124.686674][ T6330] ? __proc_create+0x2ce/0x8c0 [ 124.686722][ T6330] __proc_create+0x2ce/0x8c0 [ 124.686766][ T6330] ? __pfx___proc_create+0x10/0x10 [ 124.686813][ T6330] ? proc_register+0x314/0x5f0 [ 124.686863][ T6330] proc_create_reg+0x7d/0x180 [ 124.686891][ T6330] proc_create_net_data+0x8e/0x1b0 [ 124.686937][ T6330] ? __pfx_proc_create_net_data+0x10/0x10 [ 124.686979][ T6330] ? __pfx_uevent_net_rcv+0x10/0x10 [ 124.687015][ T6330] ? __pfx_dev_mc_net_init+0x10/0x10 [ 124.687053][ T6330] dev_mc_net_init+0x50/0x70 [ 124.687086][ T6330] ops_init+0x1df/0x5f0 [ 124.687133][ T6330] setup_net+0x1ff/0x510 [ 124.687156][ T6330] ? lockdep_init_map_type+0x5c/0x280 [ 124.687193][ T6330] ? __pfx_setup_net+0x10/0x10 [ 124.687220][ T6330] ? debug_mutex_init+0x37/0x70 [ 124.687250][ T6330] copy_net_ns+0x2a6/0x5f0 [ 124.687282][ T6330] create_new_namespaces+0x3ea/0xa90 [ 124.687330][ T6330] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 124.687365][ T6330] ksys_unshare+0x45b/0xa40 [ 124.687403][ T6330] ? __pfx_ksys_unshare+0x10/0x10 [ 124.687440][ T6330] ? xfd_validate_state+0x61/0x180 [ 124.687485][ T6330] __x64_sys_unshare+0x31/0x40 [ 124.687520][ T6330] do_syscall_64+0xcd/0x490 [ 124.687565][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.687593][ T6330] RIP: 0033:0x7f854e18e929 [ 124.687620][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.687650][ T6330] RSP: 002b:00007f854f04b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.687680][ T6330] RAX: ffffffffffffffda RBX: 00007f854e3b6080 RCX: 00007f854e18e929 [ 124.687698][ T6330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 124.687714][ T6330] RBP: 00007f854e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.687730][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.687745][ T6330] R13: 0000000000000000 R14: 00007f854e3b6080 R15: 00007ffc09d0f6c8 [ 124.687780][ T6330] [ 127.229518][ T6333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 127.703811][ T30] audit: type=1800 audit(1750819335.843:2): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.82" name="members" dev="configfs" ino=14689 res=0 errno=0 [ 132.068539][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 132.127554][ T6408] netlink: 354 bytes leftover after parsing attributes in process `syz.0.89'. [ 134.676542][ T6431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.801104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.810561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.694537][ T6466] random: crng reseeded on system resumption [ 143.375648][ T6503] can: request_module (can-proto-0) failed. [ 143.624021][ T6503] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 143.742963][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 147.935981][ T6552] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.925966][ T6585] FAULT_INJECTION: forcing a failure. [ 149.925966][ T6585] name failslab, interval 1, probability 0, space 0, times 0 [ 149.979066][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.0.120 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 149.979103][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.979119][ T6585] Call Trace: [ 149.979128][ T6585] [ 149.979139][ T6585] dump_stack_lvl+0x16c/0x1f0 [ 149.979187][ T6585] should_fail_ex+0x512/0x640 [ 149.979225][ T6585] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 149.979273][ T6585] should_failslab+0xc2/0x120 [ 149.979299][ T6585] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 149.979342][ T6585] ? __d_alloc+0x31/0xaa0 [ 149.979390][ T6585] __d_alloc+0x31/0xaa0 [ 149.979435][ T6585] d_alloc+0x4a/0x1e0 [ 149.979478][ T6585] d_alloc_parallel+0xe3/0x12e0 [ 149.979520][ T6585] ? find_held_lock+0x2b/0x80 [ 149.979548][ T6585] ? __pfx_d_alloc_parallel+0x10/0x10 [ 149.979585][ T6585] ? __d_lookup+0x266/0x4a0 [ 149.979626][ T6585] lookup_open.isra.0+0x665/0x1580 [ 149.979668][ T6585] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 149.979723][ T6585] ? mnt_get_write_access+0x20c/0x300 [ 149.979759][ T6585] path_openat+0x893/0x2cb0 [ 149.979806][ T6585] ? __pfx_path_openat+0x10/0x10 [ 149.979851][ T6585] ? __lock_acquire+0xb8a/0x1c90 [ 149.979890][ T6585] do_filp_open+0x20b/0x470 [ 149.979929][ T6585] ? __pfx_do_filp_open+0x10/0x10 [ 149.979999][ T6585] ? alloc_fd+0x471/0x7d0 [ 149.980047][ T6585] do_sys_openat2+0x11b/0x1d0 [ 149.980079][ T6585] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.980123][ T6585] __x64_sys_openat+0x174/0x210 [ 149.980156][ T6585] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.980204][ T6585] do_syscall_64+0xcd/0x490 [ 149.980248][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.980268][ T6585] RIP: 0033:0x7f279f78e929 [ 149.980284][ T6585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.980303][ T6585] RSP: 002b:00007f279d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.980321][ T6585] RAX: ffffffffffffffda RBX: 00007f279f9b6080 RCX: 00007f279f78e929 [ 149.980334][ T6585] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 149.980346][ T6585] RBP: 00007f279f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.980358][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.980369][ T6585] R13: 0000000000000000 R14: 00007f279f9b6080 R15: 00007ffd498fead8 [ 149.980393][ T6585] [ 151.342724][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 151.568726][ T6598] hsr_slave_0 (unregistering): left promiscuous mode [ 152.612329][ T6617] FAULT_INJECTION: forcing a failure. [ 152.612329][ T6617] name failslab, interval 1, probability 0, space 0, times 0 [ 152.642748][ T6617] CPU: 1 UID: 0 PID: 6617 Comm: syz.2.129 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 152.642791][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.642809][ T6617] Call Trace: [ 152.642819][ T6617] [ 152.642832][ T6617] dump_stack_lvl+0x16c/0x1f0 [ 152.642886][ T6617] should_fail_ex+0x512/0x640 [ 152.642933][ T6617] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 152.642988][ T6617] should_failslab+0xc2/0x120 [ 152.643019][ T6617] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 152.643068][ T6617] ? alloc_empty_file+0x55/0x1e0 [ 152.643109][ T6617] alloc_empty_file+0x55/0x1e0 [ 152.643145][ T6617] path_openat+0xda/0x2cb0 [ 152.643199][ T6617] ? rcu_is_watching+0x12/0xc0 [ 152.643232][ T6617] ? trace_kmem_cache_alloc+0x28/0xc0 [ 152.643265][ T6617] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 152.643315][ T6617] ? __pfx_path_openat+0x10/0x10 [ 152.643364][ T6617] ? __asan_memcpy+0x3c/0x60 [ 152.643412][ T6617] do_file_open_root+0x322/0x610 [ 152.643463][ T6617] ? __pfx_do_file_open_root+0x10/0x10 [ 152.643552][ T6617] ? vsnprintf+0x318/0x1160 [ 152.643603][ T6617] file_open_root+0x2a7/0x450 [ 152.643662][ T6617] ? __pfx_file_open_root+0x10/0x10 [ 152.643703][ T6617] ? find_held_lock+0x2b/0x80 [ 152.643743][ T6617] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 152.643785][ T6617] kernel_read_file_from_path_initns+0x189/0x260 [ 152.643822][ T6617] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 152.643854][ T6617] ? trace_kmem_cache_alloc+0x28/0xc0 [ 152.643887][ T6617] ? _request_firmware+0x503/0x1470 [ 152.643932][ T6617] _request_firmware+0x744/0x1470 [ 152.643984][ T6617] ? __pfx__request_firmware+0x10/0x10 [ 152.644038][ T6617] request_firmware+0x35/0x50 [ 152.644077][ T6617] valid_regdb+0x188/0x590 [ 152.644107][ T6617] ? __pfx___mutex_lock+0x10/0x10 [ 152.644153][ T6617] ? __pfx_valid_regdb+0x10/0x10 [ 152.644192][ T6617] reg_reload_regdb+0x11e/0x460 [ 152.644229][ T6617] ? __pfx_reg_reload_regdb+0x10/0x10 [ 152.644265][ T6617] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 152.644307][ T6617] ? nl80211_pre_doit+0x1b0/0xb10 [ 152.644355][ T6617] genl_family_rcv_msg_doit+0x209/0x2f0 [ 152.644402][ T6617] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.644457][ T6617] ? rcu_is_watching+0x12/0xc0 [ 152.644503][ T6617] ? bpf_lsm_capable+0x9/0x10 [ 152.644542][ T6617] ? security_capable+0x7e/0x260 [ 152.644602][ T6617] genl_rcv_msg+0x55c/0x800 [ 152.644647][ T6617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.644688][ T6617] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 152.644741][ T6617] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 152.644776][ T6617] ? __pfx_nl80211_post_doit+0x10/0x10 [ 152.644843][ T6617] netlink_rcv_skb+0x158/0x420 [ 152.644877][ T6617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.644920][ T6617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.644974][ T6617] ? netlink_deliver_tap+0x1ae/0xd30 [ 152.645012][ T6617] genl_rcv+0x28/0x40 [ 152.645046][ T6617] netlink_unicast+0x53a/0x7f0 [ 152.645086][ T6617] ? __pfx_netlink_unicast+0x10/0x10 [ 152.645138][ T6617] netlink_sendmsg+0x8d1/0xdd0 [ 152.645179][ T6617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.645231][ T6617] ____sys_sendmsg+0xa98/0xc70 [ 152.645268][ T6617] ? copy_msghdr_from_user+0x10a/0x160 [ 152.645315][ T6617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.645363][ T6617] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.645418][ T6617] ___sys_sendmsg+0x134/0x1d0 [ 152.645468][ T6617] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.645514][ T6617] ? __lock_acquire+0x622/0x1c90 [ 152.645621][ T6617] __sys_sendmsg+0x16d/0x220 [ 152.645680][ T6617] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.645731][ T6617] ? __x64_sys_futex+0x1e0/0x4c0 [ 152.645792][ T6617] do_syscall_64+0xcd/0x490 [ 152.645839][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.645868][ T6617] RIP: 0033:0x7fb40f58e929 [ 152.645891][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.645919][ T6617] RSP: 002b:00007fb410372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.645947][ T6617] RAX: ffffffffffffffda RBX: 00007fb40f7b5fa0 RCX: 00007fb40f58e929 [ 152.645966][ T6617] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 152.645983][ T6617] RBP: 00007fb40f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.646000][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.646016][ T6617] R13: 0000000000000000 R14: 00007fb40f7b5fa0 R15: 00007ffd99358238 [ 152.646052][ T6617] [ 153.110308][ T6617] platform regulatory.0: loading /lib/firmware/updates/regulatory.db.p7s failed with error -12 [ 153.487499][ T6617] syz.2.129 (6617) used greatest stack depth: 17976 bytes left [ 154.262628][ T6643] HfR: entered promiscuous mode [ 154.284770][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 154.318960][ T6643] openvswitch: HfR: Dropping previously announced user features [ 154.390217][ T6619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.396549][ T6619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.432477][ T6619] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.474927][ T6619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.481026][ T6619] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.501073][ T6619] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.510221][ T6619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.520226][ T6619] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.535092][ T6619] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.558432][ T6619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.598534][ T6619] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.614688][ T6619] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.641021][ T6619] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.905296][ T6531] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.134593][ T6672] tipc: Started in network mode [ 156.139947][ T6672] tipc: Node identity ee00, cluster identity 4711 [ 156.146818][ T6672] tipc: Node number set to 60928 [ 156.555359][ T6531] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.562638][ T6531] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.625299][ T6531] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.986263][ T6538] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.635865][ T6538] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.641918][ T6683] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.705856][ T6683] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.873300][ T30] audit: type=1800 audit(6045786664.015:3): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.150" name="members" dev="configfs" ino=18389 res=0 errno=0 [ 160.065222][ T6683] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.705429][ T6683] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.711482][ T6683] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.786369][ T6683] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.925340][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 162.870134][ T6683] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.141224][ T6784] FAULT_INJECTION: forcing a failure. [ 163.141224][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 163.154103][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.2.161 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 163.154138][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.154155][ T6784] Call Trace: [ 163.154164][ T6784] [ 163.154174][ T6784] dump_stack_lvl+0x16c/0x1f0 [ 163.154221][ T6784] should_fail_ex+0x512/0x640 [ 163.154261][ T6784] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 163.154302][ T6784] should_failslab+0xc2/0x120 [ 163.154329][ T6784] __kmalloc_cache_noprof+0x6a/0x3e0 [ 163.154367][ T6784] ? netdev_create_hash+0x3c/0xc0 [ 163.154411][ T6784] ? __pfx_netdev_init+0x10/0x10 [ 163.154466][ T6784] netdev_create_hash+0x3c/0xc0 [ 163.154503][ T6784] ? __pfx_netdev_init+0x10/0x10 [ 163.154536][ T6784] netdev_init+0xa5/0x230 [ 163.154572][ T6784] ops_init+0x1df/0x5f0 [ 163.154629][ T6784] setup_net+0x1ff/0x510 [ 163.154657][ T6784] ? lockdep_init_map_type+0x5c/0x280 [ 163.154701][ T6784] ? __pfx_setup_net+0x10/0x10 [ 163.154734][ T6784] ? debug_mutex_init+0x37/0x70 [ 163.154770][ T6784] copy_net_ns+0x2a6/0x5f0 [ 163.154808][ T6784] create_new_namespaces+0x3ea/0xa90 [ 163.154855][ T6784] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 163.154895][ T6784] ksys_unshare+0x45b/0xa40 [ 163.154938][ T6784] ? __pfx_ksys_unshare+0x10/0x10 [ 163.154984][ T6784] ? xfd_validate_state+0x61/0x180 [ 163.155038][ T6784] __x64_sys_unshare+0x31/0x40 [ 163.155081][ T6784] do_syscall_64+0xcd/0x490 [ 163.155135][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.155171][ T6784] RIP: 0033:0x7fb40f58e929 [ 163.155196][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.155227][ T6784] RSP: 002b:00007fb410351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.155257][ T6784] RAX: ffffffffffffffda RBX: 00007fb40f7b6080 RCX: 00007fb40f58e929 [ 163.155277][ T6784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 163.155296][ T6784] RBP: 00007fb40f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.155315][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.155333][ T6784] R13: 0000000000000000 R14: 00007fb40f7b6080 R15: 00007ffd99358238 [ 163.155375][ T6784] [ 165.061898][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 165.634447][ T6822] HfR: entered promiscuous mode [ 165.649014][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 165.695534][ T6822] openvswitch: HfR: Dropping previously announced user features [ 168.709164][ T30] audit: type=1800 audit(6045786672.855:4): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.177" name="members" dev="configfs" ino=20590 res=0 errno=0 [ 181.194822][ T6538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.205391][ T6538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.213328][ T6538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.221135][ T6538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.230003][ T6538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.390979][ T6900] chnl_net:caif_netlink_parms(): no params data found [ 181.463289][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.470648][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.477948][ T6900] bridge_slave_0: entered allmulticast mode [ 181.487659][ T6900] bridge_slave_0: entered promiscuous mode [ 181.497365][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.504531][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.514048][ T6900] bridge_slave_1: entered allmulticast mode [ 181.523946][ T6900] bridge_slave_1: entered promiscuous mode [ 181.559213][ T6900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.571149][ T6900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.614017][ T6900] team0: Port device team_slave_0 added [ 181.623738][ T6900] team0: Port device team_slave_1 added [ 181.654654][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.661788][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.688436][ T6900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.701318][ T6900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.708633][ T6900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.735535][ T6900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.785630][ T6900] hsr_slave_0: entered promiscuous mode [ 181.792066][ T6900] hsr_slave_1: entered promiscuous mode [ 181.798865][ T6900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.806554][ T6900] Cannot create hsr debugfs directory [ 181.974549][ T6900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.000450][ T6900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.028946][ T6900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.054249][ T6900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.140698][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.148036][ T6900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.155946][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.163048][ T6900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.447183][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.543887][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.746364][ T6900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.783910][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.799256][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.806385][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.871737][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.878885][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.236748][ T6900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.265793][ T6538] Bluetooth: hci4: command tx timeout [ 183.668005][ T6900] veth0_vlan: entered promiscuous mode [ 183.688509][ T6900] veth1_vlan: entered promiscuous mode [ 183.737623][ T6900] veth0_macvtap: entered promiscuous mode [ 183.759012][ T6900] veth1_macvtap: entered promiscuous mode [ 183.779355][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.798856][ T6900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.821098][ T6900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.835685][ T6900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.844422][ T6900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.865597][ T6900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.952026][ T6745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.965221][ T6745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.021753][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.029881][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.538261][ T30] audit: type=1800 audit(6045786688.685:5): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.190" name="members" dev="configfs" ino=20341 res=0 errno=0 [ 185.052395][ T6683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.062095][ T6683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.070109][ T6683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.080661][ T6683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.088875][ T6683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.351267][ T6538] Bluetooth: hci4: command tx timeout [ 185.640931][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 186.056130][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.077989][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.086083][ T6963] bridge_slave_0: entered allmulticast mode [ 186.108882][ T6963] bridge_slave_0: entered promiscuous mode [ 186.128252][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.146411][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.153834][ T6963] bridge_slave_1: entered allmulticast mode [ 186.211608][ T6963] bridge_slave_1: entered promiscuous mode [ 186.539714][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.572745][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.983587][ T6963] team0: Port device team_slave_0 added [ 187.030366][ T6963] team0: Port device team_slave_1 added [ 187.186181][ T6538] Bluetooth: hci5: command tx timeout [ 187.228297][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.243072][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.291937][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.344894][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.362309][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.425745][ T6538] Bluetooth: hci4: command tx timeout [ 187.440243][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.789384][ T6963] hsr_slave_0: entered promiscuous mode [ 187.825856][ T6963] hsr_slave_1: entered promiscuous mode [ 187.836030][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.895341][ T6963] Cannot create hsr debugfs directory [ 189.256664][ T6963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.269681][ T6538] Bluetooth: hci5: command tx timeout [ 189.295849][ T6963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.451001][ T6963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.506845][ T6538] Bluetooth: hci4: command tx timeout [ 189.522150][ T6963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.152298][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.257422][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.490690][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.497939][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.519049][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.526194][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.066702][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.345723][ T6538] Bluetooth: hci5: command tx timeout [ 191.491091][ T6963] veth0_vlan: entered promiscuous mode [ 191.504284][ T6963] veth1_vlan: entered promiscuous mode [ 191.546482][ T6963] veth0_macvtap: entered promiscuous mode [ 191.557654][ T6963] veth1_macvtap: entered promiscuous mode [ 191.582230][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.600830][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.613538][ T6963] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.625394][ T6963] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.636465][ T6963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.646121][ T6963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.733411][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.747901][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.795953][ T6929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.804188][ T6929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.425551][ T6538] Bluetooth: hci5: command tx timeout [ 193.634452][ T7086] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 195.334165][ T7104] random: crng reseeded on system resumption [ 199.156450][ T7165] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 199.189490][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.195988][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.216057][ T7167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 202.847729][ T7197] syz.5.226 (7197): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.959366][ T6683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 204.968482][ T6683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 204.976275][ T6683] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 204.984725][ T6683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 204.992614][ T6683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.240843][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 205.356415][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.363605][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.371064][ T7220] bridge_slave_0: entered allmulticast mode [ 205.378790][ T7220] bridge_slave_0: entered promiscuous mode [ 205.386743][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.393825][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.401311][ T7220] bridge_slave_1: entered allmulticast mode [ 205.408401][ T7220] bridge_slave_1: entered promiscuous mode [ 205.440462][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.453609][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.488585][ T7220] team0: Port device team_slave_0 added [ 205.497258][ T7220] team0: Port device team_slave_1 added [ 205.526837][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.533783][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.565266][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.577730][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.584687][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.611367][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.654645][ T7220] hsr_slave_0: entered promiscuous mode [ 205.661685][ T7220] hsr_slave_1: entered promiscuous mode [ 205.668321][ T7220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.680489][ T7220] Cannot create hsr debugfs directory [ 205.827295][ T7220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.838933][ T7220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.848697][ T7220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.858800][ T7220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.891644][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.898815][ T7220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.906323][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.913508][ T7220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.972974][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.990808][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.999736][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.017205][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.033242][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.040383][ T6929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.052963][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.060103][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.266859][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.501723][ T7220] veth0_vlan: entered promiscuous mode [ 206.512831][ T7220] veth1_vlan: entered promiscuous mode [ 206.541843][ T7220] veth0_macvtap: entered promiscuous mode [ 206.551321][ T7220] veth1_macvtap: entered promiscuous mode [ 206.569659][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.584888][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.598766][ T7220] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.607623][ T7220] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.616381][ T7220] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.625100][ T7220] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.690443][ T6929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.706618][ T6929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.730572][ T6745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.739877][ T6745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.903207][ T30] audit: type=1800 audit(6045786711.045:6): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.233" name="members" dev="configfs" ino=22488 res=0 errno=0 [ 207.025778][ T6683] Bluetooth: hci6: command tx timeout [ 209.105368][ T6683] Bluetooth: hci6: command tx timeout [ 210.618130][ T30] audit: type=1800 audit(6045786714.765:7): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.246" name="members" dev="configfs" ino=23005 res=0 errno=0 [ 211.195281][ T6683] Bluetooth: hci6: command tx timeout [ 213.270365][ T6538] Bluetooth: hci6: command tx timeout [ 215.637115][ T30] audit: type=1800 audit(6045786719.785:8): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.257" name="members" dev="configfs" ino=23753 res=0 errno=0 [ 216.829239][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 216.839314][ T7388] netlink: 354 bytes leftover after parsing attributes in process `syz.4.261'. [ 217.495358][ T7385] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 218.721912][ T7404] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 219.357830][ T7406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 221.081446][ T30] audit: type=1800 audit(6045786725.225:9): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.271" name="members" dev="configfs" ino=23879 res=0 errno=0 [ 222.663860][ T30] audit: type=1800 audit(6045786726.805:10): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.282" name="members" dev="configfs" ino=23241 res=0 errno=0 [ 222.993578][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.274'. [ 223.105381][ T7462] netlink: 354 bytes leftover after parsing attributes in process `syz.5.274'. [ 223.509190][ T7457] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 225.978096][ T7476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.000884][ T7476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.010403][ T7476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.038238][ T7476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.055331][ T7476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.061425][ T7476] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 226.098689][ T7476] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 226.147062][ T7476] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 226.153206][ T7476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 226.181973][ T7476] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 226.207049][ T7476] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 226.231708][ T7476] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 226.248707][ T7476] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 226.945500][ T6538] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.006336][ T6538] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.075557][ T6538] Bluetooth: hci4: command 0x0c1a tx timeout [ 228.084649][ T6683] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.090946][ T6683] Bluetooth: hci0: command 0x0c1a tx timeout [ 228.239323][ T6538] Bluetooth: hci6: command 0x0c1a tx timeout [ 228.245432][ T7533] Bluetooth: hci5: command 0x0c1a tx timeout [ 230.145301][ T6538] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.305361][ T6538] Bluetooth: hci6: command 0x0c1a tx timeout [ 230.311524][ T6538] Bluetooth: hci5: command 0x0c1a tx timeout [ 231.614997][ T7565] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 231.684634][ T7561] random: crng reseeded on system resumption [ 232.233543][ T6538] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.385571][ T7533] Bluetooth: hci6: command 0x0c1a tx timeout [ 232.391715][ T6538] Bluetooth: hci5: command 0x0c1a tx timeout [ 242.453739][ T7721] netlink: 342 bytes leftover after parsing attributes in process `syz.4.325'. [ 242.531935][ T7723] netlink: 354 bytes leftover after parsing attributes in process `syz.6.326'. [ 242.547617][ T7721] netlink: 114 bytes leftover after parsing attributes in process `syz.4.325'. [ 242.966746][ T7727] FAULT_INJECTION: forcing a failure. [ 242.966746][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 243.024719][ T7727] CPU: 0 UID: 0 PID: 7727 Comm: syz.6.328 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 243.024764][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.024788][ T7727] Call Trace: [ 243.024799][ T7727] [ 243.024815][ T7727] dump_stack_lvl+0x16c/0x1f0 [ 243.024872][ T7727] should_fail_ex+0x512/0x640 [ 243.024918][ T7727] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 243.024973][ T7727] should_failslab+0xc2/0x120 [ 243.025005][ T7727] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 243.025053][ T7727] ? __proc_create+0xc3/0x8c0 [ 243.025103][ T7727] ? __proc_create+0x2ce/0x8c0 [ 243.025162][ T7727] __proc_create+0x2ce/0x8c0 [ 243.025213][ T7727] ? __pfx___proc_create+0x10/0x10 [ 243.025272][ T7727] ? _raw_write_unlock+0x28/0x50 [ 243.025323][ T7727] proc_create_reg+0x7d/0x180 [ 243.025358][ T7727] proc_create_data+0x86/0x110 [ 243.025389][ T7727] ? __pfx_proc_create_data+0x10/0x10 [ 243.025424][ T7727] ? cache_register_net+0x137/0x5e0 [ 243.025477][ T7727] cache_register_net+0x1e0/0x5e0 [ 243.025515][ T7727] nfsd_idmap_init+0xb6/0x250 [ 243.025559][ T7727] ? __pfx_nfsd_net_init+0x10/0x10 [ 243.025593][ T7727] nfsd_net_init+0x69/0x3d0 [ 243.025628][ T7727] ? __pfx_nfsd_net_init+0x10/0x10 [ 243.025662][ T7727] ops_init+0x1df/0x5f0 [ 243.025721][ T7727] setup_net+0x1ff/0x510 [ 243.025749][ T7727] ? lockdep_init_map_type+0x5c/0x280 [ 243.025795][ T7727] ? __pfx_setup_net+0x10/0x10 [ 243.025829][ T7727] ? debug_mutex_init+0x37/0x70 [ 243.025866][ T7727] copy_net_ns+0x2a6/0x5f0 [ 243.025904][ T7727] create_new_namespaces+0x3ea/0xa90 [ 243.025960][ T7727] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 243.025999][ T7727] ksys_unshare+0x45b/0xa40 [ 243.026040][ T7727] ? __pfx_ksys_unshare+0x10/0x10 [ 243.026084][ T7727] ? xfd_validate_state+0x61/0x180 [ 243.026138][ T7727] __x64_sys_unshare+0x31/0x40 [ 243.026179][ T7727] do_syscall_64+0xcd/0x490 [ 243.026232][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.026264][ T7727] RIP: 0033:0x7fcd1b58e929 [ 243.026297][ T7727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.026327][ T7727] RSP: 002b:00007fcd1c3a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 243.026358][ T7727] RAX: ffffffffffffffda RBX: 00007fcd1b7b5fa0 RCX: 00007fcd1b58e929 [ 243.026379][ T7727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 243.026397][ T7727] RBP: 00007fcd1b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 243.026416][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.026441][ T7727] R13: 0000000000000000 R14: 00007fcd1b7b5fa0 R15: 00007ffc720c2508 [ 243.026482][ T7727] [ 248.780827][ T7801] FAULT_INJECTION: forcing a failure. [ 248.780827][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 248.816321][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.1.343 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 248.816357][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.816373][ T7801] Call Trace: [ 248.816381][ T7801] [ 248.816391][ T7801] dump_stack_lvl+0x16c/0x1f0 [ 248.816437][ T7801] should_fail_ex+0x512/0x640 [ 248.816474][ T7801] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 248.816518][ T7801] should_failslab+0xc2/0x120 [ 248.816543][ T7801] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.816582][ T7801] ? __proc_create+0xc3/0x8c0 [ 248.816623][ T7801] ? __proc_create+0x2ce/0x8c0 [ 248.816668][ T7801] __proc_create+0x2ce/0x8c0 [ 248.816711][ T7801] ? __pfx___proc_create+0x10/0x10 [ 248.816759][ T7801] ? _raw_write_unlock+0x28/0x50 [ 248.816796][ T7801] ? proc_register+0x314/0x5f0 [ 248.816842][ T7801] proc_create_reg+0x7d/0x180 [ 248.816870][ T7801] proc_create_net_data+0x8e/0x1b0 [ 248.816915][ T7801] ? __pfx_proc_create_net_data+0x10/0x10 [ 248.816969][ T7801] nfs_fs_proc_net_init+0x141/0x1e0 [ 248.817006][ T7801] nfs_net_init+0x130/0x300 [ 248.817040][ T7801] ? __pfx_nfs_net_init+0x10/0x10 [ 248.817071][ T7801] ops_init+0x1df/0x5f0 [ 248.817126][ T7801] setup_net+0x1ff/0x510 [ 248.817149][ T7801] ? lockdep_init_map_type+0x5c/0x280 [ 248.817188][ T7801] ? __pfx_setup_net+0x10/0x10 [ 248.817217][ T7801] ? debug_mutex_init+0x37/0x70 [ 248.817248][ T7801] copy_net_ns+0x2a6/0x5f0 [ 248.817279][ T7801] create_new_namespaces+0x3ea/0xa90 [ 248.817318][ T7801] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 248.817351][ T7801] ksys_unshare+0x45b/0xa40 [ 248.817386][ T7801] ? __pfx_ksys_unshare+0x10/0x10 [ 248.817423][ T7801] ? xfd_validate_state+0x61/0x180 [ 248.817470][ T7801] __x64_sys_unshare+0x31/0x40 [ 248.817505][ T7801] do_syscall_64+0xcd/0x490 [ 248.817549][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.817577][ T7801] RIP: 0033:0x7f9aecf8e929 [ 248.817599][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.817625][ T7801] RSP: 002b:00007f9aedd5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.817651][ T7801] RAX: ffffffffffffffda RBX: 00007f9aed1b5fa0 RCX: 00007f9aecf8e929 [ 248.817669][ T7801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 248.817684][ T7801] RBP: 00007f9aed010b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.817700][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.817716][ T7801] R13: 0000000000000000 R14: 00007f9aed1b5fa0 R15: 00007ffe1c596f08 [ 248.817751][ T7801] [ 249.145452][ T7801] ------------[ cut here ]------------ [ 249.150960][ T7801] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 249.217718][ T7801] WARNING: CPU: 1 PID: 7801 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 249.227187][ T7801] Modules linked in: [ 249.231248][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.1.343 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 249.243201][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.253341][ T7801] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 249.259146][ T7801] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 bc c2 8b 48 c7 c7 20 bb c2 8b e8 23 71 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 5b 5e ff 90 48 b8 00 00 00 00 00 [ 249.279537][ T7801] RSP: 0018:ffffc90003097b08 EFLAGS: 00010282 [ 249.286013][ T7801] RAX: 0000000000000000 RBX: ffff88807c9da280 RCX: ffffc9000ba7a000 [ 249.294007][ T7801] RDX: 0000000000080000 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 249.302060][ T7801] RBP: ffff8880838ece80 R08: 0000000000000001 R09: 0000000000000000 [ 249.310063][ T7801] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880838ecdc0 [ 249.318056][ T7801] R13: ffff8880838ecea4 R14: ffff8880838edae4 R15: dffffc0000000000 [ 249.326074][ T7801] FS: 00007f9aedd5d6c0(0000) GS:ffff888124860000(0000) knlGS:0000000000000000 [ 249.335016][ T7801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.341836][ T7801] CR2: 0000001b2e3c8ff8 CR3: 00000000355a6000 CR4: 00000000003526f0 [ 249.349908][ T7801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.357946][ T7801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.365968][ T7801] Call Trace: [ 249.369338][ T7801] [ 249.372276][ T7801] ? __pfx_remove_proc_entry+0x10/0x10 [ 249.377774][ T7801] ? cache_destroy_net+0x31/0x50 [ 249.383191][ T7801] ? sunrpc_exit_net+0x37/0x90 [ 249.388131][ T7801] sunrpc_exit_net+0x46/0x90 [ 249.392740][ T7801] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 249.398085][ T7801] ops_undo_list+0x2eb/0xab0 [ 249.402683][ T7801] ? __pfx_ops_undo_list+0x10/0x10 [ 249.407937][ T7801] ? ops_init+0x2fa/0x5f0 [ 249.412285][ T7801] setup_net+0x2e1/0x510 [ 249.416564][ T7801] ? __pfx_setup_net+0x10/0x10 [ 249.421333][ T7801] ? debug_mutex_init+0x37/0x70 [ 249.426297][ T7801] copy_net_ns+0x2a6/0x5f0 [ 249.430723][ T7801] create_new_namespaces+0x3ea/0xa90 [ 249.436079][ T7801] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 249.441723][ T7801] ksys_unshare+0x45b/0xa40 [ 249.446256][ T7801] ? __pfx_ksys_unshare+0x10/0x10 [ 249.451317][ T7801] ? xfd_validate_state+0x61/0x180 [ 249.456472][ T7801] __x64_sys_unshare+0x31/0x40 [ 249.461247][ T7801] do_syscall_64+0xcd/0x490 [ 249.465824][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.471725][ T7801] RIP: 0033:0x7f9aecf8e929 [ 249.476164][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.496199][ T7801] RSP: 002b:00007f9aedd5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.504623][ T7801] RAX: ffffffffffffffda RBX: 00007f9aed1b5fa0 RCX: 00007f9aecf8e929 [ 249.512804][ T7801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.520841][ T7801] RBP: 00007f9aed010b39 R08: 0000000000000000 R09: 0000000000000000 [ 249.528847][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.536839][ T7801] R13: 0000000000000000 R14: 00007f9aed1b5fa0 R15: 00007ffe1c596f08 [ 249.544843][ T7801] [ 249.547926][ T7801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.555220][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.1.343 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 249.567125][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.577182][ T7801] Call Trace: [ 249.580483][ T7801] [ 249.583415][ T7801] dump_stack_lvl+0x3d/0x1f0 [ 249.588027][ T7801] panic+0x71c/0x800 [ 249.591939][ T7801] ? __pfx_panic+0x10/0x10 [ 249.596380][ T7801] ? show_trace_log_lvl+0x29b/0x3e0 [ 249.601598][ T7801] ? remove_proc_entry+0x45e/0x530 [ 249.606741][ T7801] check_panic_on_warn+0xab/0xb0 [ 249.611698][ T7801] __warn+0xf6/0x3c0 [ 249.615609][ T7801] ? remove_proc_entry+0x45e/0x530 [ 249.620747][ T7801] report_bug+0x3c3/0x580 [ 249.625217][ T7801] ? remove_proc_entry+0x45e/0x530 [ 249.630364][ T7801] handle_bug+0x184/0x210 [ 249.634717][ T7801] exc_invalid_op+0x17/0x50 [ 249.639241][ T7801] asm_exc_invalid_op+0x1a/0x20 [ 249.644106][ T7801] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 249.649844][ T7801] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 bc c2 8b 48 c7 c7 20 bb c2 8b e8 23 71 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 04 5b 5e ff 90 48 b8 00 00 00 00 00 [ 249.669488][ T7801] RSP: 0018:ffffc90003097b08 EFLAGS: 00010282 [ 249.675599][ T7801] RAX: 0000000000000000 RBX: ffff88807c9da280 RCX: ffffc9000ba7a000 [ 249.683606][ T7801] RDX: 0000000000080000 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 249.691590][ T7801] RBP: ffff8880838ece80 R08: 0000000000000001 R09: 0000000000000000 [ 249.699575][ T7801] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880838ecdc0 [ 249.707560][ T7801] R13: ffff8880838ecea4 R14: ffff8880838edae4 R15: dffffc0000000000 [ 249.715562][ T7801] ? __warn_printk+0x1a5/0x350 [ 249.720381][ T7801] ? remove_proc_entry+0x45d/0x530 [ 249.725520][ T7801] ? __pfx_remove_proc_entry+0x10/0x10 [ 249.731009][ T7801] ? cache_destroy_net+0x31/0x50 [ 249.735971][ T7801] ? sunrpc_exit_net+0x37/0x90 [ 249.740764][ T7801] sunrpc_exit_net+0x46/0x90 [ 249.745382][ T7801] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 249.750703][ T7801] ops_undo_list+0x2eb/0xab0 [ 249.755334][ T7801] ? __pfx_ops_undo_list+0x10/0x10 [ 249.760482][ T7801] ? ops_init+0x2fa/0x5f0 [ 249.764858][ T7801] setup_net+0x2e1/0x510 [ 249.769127][ T7801] ? __pfx_setup_net+0x10/0x10 [ 249.773907][ T7801] ? debug_mutex_init+0x37/0x70 [ 249.778775][ T7801] copy_net_ns+0x2a6/0x5f0 [ 249.783211][ T7801] create_new_namespaces+0x3ea/0xa90 [ 249.788518][ T7801] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 249.794173][ T7801] ksys_unshare+0x45b/0xa40 [ 249.798704][ T7801] ? __pfx_ksys_unshare+0x10/0x10 [ 249.803753][ T7801] ? xfd_validate_state+0x61/0x180 [ 249.808892][ T7801] __x64_sys_unshare+0x31/0x40 [ 249.813676][ T7801] do_syscall_64+0xcd/0x490 [ 249.818210][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.824116][ T7801] RIP: 0033:0x7f9aecf8e929 [ 249.828545][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.848167][ T7801] RSP: 002b:00007f9aedd5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.856595][ T7801] RAX: ffffffffffffffda RBX: 00007f9aed1b5fa0 RCX: 00007f9aecf8e929 [ 249.864580][ T7801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.872567][ T7801] RBP: 00007f9aed010b39 R08: 0000000000000000 R09: 0000000000000000 [ 249.880547][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.888527][ T7801] R13: 0000000000000000 R14: 00007f9aed1b5fa0 R15: 00007ffe1c596f08 [ 249.896522][ T7801] [ 249.899910][ T7801] Kernel Offset: disabled [ 249.904254][ T7801] Rebooting in 86400 seconds..