last executing test programs: 11m15.632512443s ago: executing program 0 (id=371): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/9/smp_affinity\x00', 0x20000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 11m15.454989401s ago: executing program 0 (id=372): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x98, 0x81}, 0x9, 0x0, &(0x7f00000000c0)={0x3}, 0x8) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) getpgid$auto(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_ifindex=r2, 0x7, 0x6, 0x49f6bea2, 0x2, @count=0x1, 0x0, 0xf, 0x100, 0x7, 0xe235}, 0x6f4) preadv2$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000340)="f2ff1630fb547213ed9ad2ebef35f0d5ef3065d16ddafc9362945c3696d7c6303ebe13302c26c974ca2280918180a865ad84270d2ffa503955cd84d477e5606112511c805563f9daf29222b11681e370f8db4d3727222053aeb856fdfa7b", 0xa}, 0x7, 0x7fff, 0xb, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x8, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev$auto(r4, &(0x7f0000001100)={&(0x7f0000001080), 0xff}, 0x7f) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000400)={{0x5, 0x25, 0x8672, 0x80}, "66ac010005000000009b5fd59000002000ada7272464028fdce8ecc6000000000000e5ff81dcdbd3d2d9c50cb822f66eb624ad63110d61771552c03dce580000000000000000000b00"}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) ioctl$auto_UI_SET_PHYS(r5, 0x4008556c, 0x0) mmap$auto(0x0, 0x20009, 0x800000007, 0x12, r5, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r7 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) 11m14.226014842s ago: executing program 0 (id=379): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x40) readahead$auto(r0, 0x4, 0x4) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) (async, rerun: 32) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) (rerun: 32) write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) (async) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mbind$auto(0x0, 0x3, 0x4, 0x0, 0x6, 0x2) 11m13.188875541s ago: executing program 0 (id=382): r0 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0x163041, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x155) socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x6, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x48}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de48606", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r2, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xfffffffffffff000}, 0x1, 0x0, 0x0, 0x9}, 0x9a27}, 0x3, 0x0) writev$auto(0x3, &(0x7f0000000040)={0x0, 0x21f}, 0x800000007) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) mmap$auto(0x1, 0x0, 0xdd, 0x12, 0x401, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) 11m12.296429319s ago: executing program 0 (id=395): mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) 11m11.739608195s ago: executing program 0 (id=397): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x101, 0x8, 0x0, 0xffff) 11m11.399653846s ago: executing program 32 (id=397): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x101, 0x8, 0x0, 0xffff) 9m8.410337286s ago: executing program 4 (id=838): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r2, 0x80000201, 0xffffffffffffffff) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0380, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r4 = socket(0x11, 0x3, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="aa3329339974d8af79"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$auto(r5, &(0x7f0000000240)='\x00>\x1e0\x15\"\x85>\x96\xdd\t\x00\b\x00_\xd0\xff\xfc\xde\x10~\x9b\tc^\xb8<\n\xc7>q\x84\x91pi\xee\x91\xe6\xae\xad\xd8\xe7\x984Y\b\x00\x00\x00\xdep.!\xe0\xd3\x92e\nA\xb6\xb6t\xbb\xfa\x01H\xe75~\xe4e\xc3C\xe4GY\x01\xf4\xa7\x95Gd\x1f', 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240), 0x49}, 0x4, &(0x7f0000000180), 0x800000005, 0x11}, 0x8}, 0x2, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/7:1/uevent\x00', 0x300, 0x0) mmap$auto(0xffffffff7ffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) msgget$auto(0x0, 0x5) write$auto(0x3, 0x0, 0xfdef) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) 9m7.010868455s ago: executing program 4 (id=843): r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, 0x0, &(0x7f0000000300)=0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000740)=ANY=[@ANYBLOB="095c9ae9e003000083d8e22c681914cba3730448f16f1355afee6615001b41d6ff592cec4179455fb1d13a723b71eda420eec05b6f14d80f1f3e0e355796d6f200b13da4169f2ca6ae544e2d35cbbc6b0085820f876a7f2bc20b2fe5627e182223fabaa6a2eba994ed259396624f9e495ed44c80865704bbb17ea5b3b58210d8c4f64ab55da0b57f098cf12b9df425", @ANYRES16=r4, @ANYBLOB="01002bbd7008fcdbdf2506000000cc0301807a0001002b02cb348f1b3b1b45aefb7a3a7cf8cd112f0f9d484277432c640a3cce76984ef9d4b56291a0233d83ffbaf0ca9bc8dfac1df710d92fce2a4327bfe140222e9bf86f3be6375c09f60b8ce30b1621f11abeef4fac55010583f1d401daf84d2da8e94c950231d6b8fc94f2cc228531d9c570cc0760b9fb000007000200402a0000100002002f6465762f6e756c6c6230001a000100a19ab74e6c615b0107d5a1aa0e533d6d645fe5f8e7660000e7000100f60338afd1346bea96e1ad56be35629048b58c6c7f919f5d2b2b5da266bacf286ea257ef04dfd38f4406749f58fbf8f5cbba9d931ee781279f9fde47440a8f2e07a085b4ce8841a24951eccb6d7e7f5831273860b76d84cf399048efa8971adf376aab401970ebbd0abdb921b11b3dadc23d58c1422dbd37ba7614ff68b6c1a8797c011ab8011a69018290adb2e051ac00342114e91f1cd96513d2d98e0a6cd7e308cf1ded582274fd4f109e5a55c39469f03c81a373f4f2d7d6b929cc7a92db96f8e1a3b85a712d0e4a378d0b350d8ff57d23bfbb174ec625ea7fda2f8d1231f1402900ba000100023524991f3f1b92bbf0e65b586fc76195dee0276424906deef62d4a54188ba2b3c39dfecb6231da5a07daf77eaeeec96448e75b5725c104ac15b131d2131ba7a7ce1453246595175a4ef27638125182ebc8e5f7937f4605651559f5efc24a072ea36fa96f170e01235391aa94f6457ea4999342810a500439adb471e76f7fd36826b1d5337380a43de2fc9bbb52c973c7f0f0543a26c7df69f2077175485bdeb5fb31b0fc0ad7a60b9d06fbed997fff1ed4825e89f70000ba00010003ff35afcf1219f712ed02f56d8910974eb4a95a45c53ba1268952b0a50b81309eed2f6fcfa4cb58dc18da1e0d3b0d07c2973fa3a7983161c1979f2f19baa6be76071962edc92bf7279deb60bf6b6cccc4cb915fe59e2d93d50677779cb1fb733f6385e952b09dd0761079917272e8014b2e10d8cf5bacea93cd940892579bcdc4a1331fa32ab8b362b8dfbc012a7a49b9bebffc8a3c4c77cda691331a70f08c2e867fb2ddedcfbb993e8e9943d37ab8dbe7a9b006270000150001003ad325c5167e8d272cfa57c8a4115306900000009e000100ab310b8c6ca55be122fb2de7db6f4a97cfe76648eb4d2ff1817dfc11eef39de8fbbcfc3f3c402b11772bc06c8f3c90e3d1ebe94101dee128d164b13b8b3bd339c5f7bebab112f2246ca1ada281830cbf6714677757ded34c9008674eaeeed6a8a584cf0c821a8591561f27f40f212c98c234544b11b36e98d4512ea3c5da4f6c2c34c6583664ff80f430dd58c5ef39c9e06f84f982576a6f67b40000"], 0x3e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8001, 0x0, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x8005) mmap$auto(0x3, 0xbef, 0x9, 0x8000000000000011, r5, 0x755c913d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_clone(0x2419d6159e7d4f8a, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x3, 0x1) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(0x3, 0x0, 0x6a) write$auto(r7, &(0x7f00000002c0)='@*\x00', 0xf) sendfile$auto(r6, r3, 0x0, 0x8) sendfile$auto(0x1, r6, 0x0, 0x7ffff000) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x1ac}}, 0x810) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) 9m2.334705831s ago: executing program 4 (id=859): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) sendmsg$auto_OVS_METER_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) mlockall$auto(0x7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000240)) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mremap$auto(0x0, 0x4, 0x4, 0x3, 0x100000000) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup$auto(0x0, &(0x7f0000000000)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto(0xffffffffffffffff, 0x80045503, 0xffffffffffffffff) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000340)="03") sendfile$auto(r2, r2, 0x0, 0x10000800000003) 9m1.259768782s ago: executing program 4 (id=861): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0xc040, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x7, 0x1, 0x7fff, 0xe83, 0xe7}) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) readv$auto(0x3, 0x0, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x808, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) keyctl$auto_KEY_SPEC_GROUP_KEYRING(0x2, 0x0, 0xee00, 0x0, 0xfffffffffffffffa) getdents$auto(0x0, 0x0, 0x18) openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x581003, 0x0) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x10000, 0x0) mmap$auto(0x9, 0x8000000000000, 0xfffffffffffffffe, 0x11, r2, 0x800) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) read$auto_urandom_fops_random(r3, 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) write$auto_rfkill_fops_core(r1, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f851b1", 0x1a) 9m0.976246215s ago: executing program 4 (id=863): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x303101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x5, 0x80000001) getsockopt$auto_SO_PEEK_OFF(r0, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000140)={0x7ffffffe, 0x7, 0x7, 0x6}, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000440), 0x5}, 0x5) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000040)=0x8) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) 9m0.234951642s ago: executing program 4 (id=867): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x8d, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x3, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7) r2 = socket(0x1, 0x5, 0xe36f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000080)={"a19ed1f98cdc69d8c4edea48a3f7a87ec2e1fcaa807b9e9553e0dd8fd5ab83b0", 0xffc0, 0x5, 0x2, 0x40bd, 0x3, 0x0}) r5 = getpgid(0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000140)={{@inferred=r4, 0x0, 0x25, 0x80000000, "bd6f2a8ea99be85d735ba0ad0130d6c9514d272b7927fd8fad27342e001d89838b6caad38630eb8e0a505d02", @inferred=r5}, 0x3, 0x2, 0x1, @raw=0x80000001, @reserved="735030dc490b062257fc4d4725869403a370292e13988345846819944f271d70ec8a8b038ba1668979ade40030ffc9734d96070b8360e541232b9f5ba0de0066833c6c711241e55a88abf8e1b43c7c683b4f4ee538aa0db6ad2138355eceeaa65d616f9fcea526a24c274aac0478b8573e71f02bcfda15bb43000b9f7b963d9c", "41053545a90688ebbde9e7250e08364d0ca6adbeea7c9d4e37feeb6822190c5721215e8cd680319bc4261769f2147522ae1b3efbfda28954b3c157ae61b85b1a"}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/status\x00', 0x22000, 0x0) read$auto(r6, 0x0, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}}, 0x80000) exit$auto(0x6) 8m59.776814865s ago: executing program 33 (id=867): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x8d, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x3, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7) r2 = socket(0x1, 0x5, 0xe36f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r3, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) ioctl$auto_BLKTRACESETUP32(r2, 0xc0401273, &(0x7f0000000080)={"a19ed1f98cdc69d8c4edea48a3f7a87ec2e1fcaa807b9e9553e0dd8fd5ab83b0", 0xffc0, 0x5, 0x2, 0x40bd, 0x3, 0x0}) r5 = getpgid(0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000140)={{@inferred=r4, 0x0, 0x25, 0x80000000, "bd6f2a8ea99be85d735ba0ad0130d6c9514d272b7927fd8fad27342e001d89838b6caad38630eb8e0a505d02", @inferred=r5}, 0x3, 0x2, 0x1, @raw=0x80000001, @reserved="735030dc490b062257fc4d4725869403a370292e13988345846819944f271d70ec8a8b038ba1668979ade40030ffc9734d96070b8360e541232b9f5ba0de0066833c6c711241e55a88abf8e1b43c7c683b4f4ee538aa0db6ad2138355eceeaa65d616f9fcea526a24c274aac0478b8573e71f02bcfda15bb43000b9f7b963d9c", "41053545a90688ebbde9e7250e08364d0ca6adbeea7c9d4e37feeb6822190c5721215e8cd680319bc4261769f2147522ae1b3efbfda28954b3c157ae61b85b1a"}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub0/status\x00', 0x22000, 0x0) read$auto(r6, 0x0, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x10}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}}, 0x80000) exit$auto(0x6) 8m47.882881334s ago: executing program 1 (id=908): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x262802, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ioctl$auto(r0, 0x8008563f, r0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, 0x0) (async) read$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfdef) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/corrected_bits\x00', 0x540, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x8c00) (async) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) munmap$auto(0x1000000, 0x2000000c) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x9) (rerun: 32) mlockall$auto(0x3) 8m46.684355525s ago: executing program 1 (id=914): ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x98, 0x81}, 0x9, 0x0, &(0x7f00000000c0)={0x3}, 0x8) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) getpgid$auto(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_ifindex=r2, 0x7, 0x6, 0x49f6bea2, 0x2, @count=0x1, 0x0, 0xf, 0x100, 0x7, 0xe235}, 0x6f4) preadv2$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000340)="f2ff1630fb547213ed9ad2ebef35f0d5ef3065d16ddafc9362945c3696d7c6303ebe13302c26c974ca2280918180a865ad84270d2ffa503955cd84d477e5606112511c805563f9daf29222b11681e370f8db4d3727222053aeb856fdfa7b", 0xa}, 0x7, 0x7fff, 0xb, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x8, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event0\x00', 0x101, 0x0) writev$auto(r4, &(0x7f0000001100)={&(0x7f0000001080), 0xff}, 0x7f) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000400)={{0x5, 0x25, 0x8672, 0x80}, "66ac010005000000009b5fd59000002000ada7272464028fdce8ecc6000000000000e5ff81dcdbd3d2d9c50cb822f66eb624ad63110d61771552c03dce580000000000000000000b00"}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) ioctl$auto_UI_SET_PHYS(r5, 0x4008556c, 0x0) mmap$auto(0x0, 0x20009, 0x800000007, 0x12, r5, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r7 = socket(0x2b, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x4e22, @empty}, 0x800006a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) 8m45.666832147s ago: executing program 1 (id=920): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x568) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x22, 0x4, 0x83) setsockopt$auto(r1, 0x84, 0x15, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() mmap$auto(0x0, 0x4020009, 0xdb, 0x1000000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SEM_STAT(0x2, 0x400, 0x12, 0x1) (async) semctl$auto_SEM_STAT(0x2, 0x400, 0x12, 0x1) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r3, 0x4018bc0e, &(0x7f00000000c0)={0x7ff, 0x0, 0x101, 0x9d75}) (async) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r3, 0x4018bc0e, &(0x7f00000000c0)={0x7ff, 0x0, 0x101, 0x9d75}) write$auto(r2, &(0x7f0000000040)='/dev/audio1\x00', 0x100000a3d1) (async) write$auto(r2, &(0x7f0000000040)='/dev/audio1\x00', 0x100000a3d1) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r3, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x4, 0x80000) (async) sendmmsg$auto(0x3, 0x0, 0x4, 0x80000) 8m44.510924376s ago: executing program 1 (id=926): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg0\x00', 0x200, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r0, 0x4, &(0x7f0000000240)="bf15d2f045edeb7b7f33a44cd52773dee1d78fcb3727c3a38ce7") close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x10001, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x4) read$auto(r1, 0x0, 0x1f40) shmctl$auto(0xfffffff8, 0x7a, &(0x7f0000000180)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2bf, 0x0, 0x2, 0x200}, 0x101, 0x8, 0x8000000000000001, 0x8000, @inferred=0xffffffffffffffff, @raw=0x7, 0xaa8e, 0x0, &(0x7f0000000040)="8df1b04a163d810df286451a2721bd21364a6c2389b957ce543619", 0x0}) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/thread-self/fail-nth\x00', 0x141000, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0xf, r2, 0x1, 0x4053) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r3, 0x330b, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) 8m44.361749933s ago: executing program 1 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r0) acct$auto(&(0x7f0000000200)='wg2\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd11\x00', 0x80, 0x0) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x2, 0x3, 0x100) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) ioctl$auto_BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, 0x0) splice$auto(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)="1fab3673554ea00e1ac35fbb87deb241ab2eb64cb464b4b3043362c5f8b1d15d90c1581f448575e63e00"/56) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) socket(0x1d, 0x3, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x3, 0xe, 0x940, 0x7, 0x3, 0x2000000000000006, 0x2, 0x9, 0x9, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x49af]}, 0x1fe, 0x81) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r3, 0x0, 0xcd04) 8m44.026777854s ago: executing program 1 (id=931): socket(0x8, 0xa, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) lseek$auto(0x3, 0x0, 0x1) socket(0x11, 0x80003, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x653242, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/set_event\x00', 0x100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x181006, 0x140) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x220b42, 0x0) mmap$auto(0x0, 0x9, 0x24e2, 0x16, 0x401, 0xd5be) close_range$auto(0x2, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram11\x00', 0x14f602, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0xfffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 8m43.421944558s ago: executing program 34 (id=931): socket(0x8, 0xa, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) lseek$auto(0x3, 0x0, 0x1) socket(0x11, 0x80003, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x653242, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/set_event\x00', 0x100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x181006, 0x140) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x220b42, 0x0) mmap$auto(0x0, 0x9, 0x24e2, 0x16, 0x401, 0xd5be) close_range$auto(0x2, 0x8, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram11\x00', 0x14f602, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0xfffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x541b, 0x38) 16.47575907s ago: executing program 3 (id=2261): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$auto(r0, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)="4be9c34cb53cb9ff3db5c7716bd839245877c148e958a37fb530720c5ab3e318f929f63122bccb112ac3693a8f6414f702bde2687f1acf41") r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x13\x00', 0x2fe) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x6, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) 16.086840852s ago: executing program 6 (id=2263): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, r1, 0x100000000008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b4b, r3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x11, 0x3, 0x2) getsockopt$auto(r4, 0x107, 0x1, 0x0, 0x0) r5 = getegid() setregid$auto(r5, 0x0) pread64$auto(r4, 0x0, 0x1ff, 0xf4) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x8090) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) 15.043522164s ago: executing program 6 (id=2265): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) r1 = socket(0x1, 0x80000, 0x106) ioctl$auto(0xc8, 0x401054d5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x3c1640, 0x0) r2 = socket(0x1b, 0x3, 0x76) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r2, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) lstat$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x8000000000000001, 0x546, 0x1d9c, 0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x9c75, 0x5, 0x401, 0x7, 0x94, 0x6, 0x7, 0x1000}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a3260000", @ANYRES16=0x0, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="ef00918004007280c703c86b2f4db7279f312682f0b9e17f01f1e4c0b2c164d2326e252d9f2969678ccb378f4f5becb126aea7e12e35d95dedb2c6ec7a01544ec76d53b1e27fcbc9271f51d5befc65582355f455f1ab7e77708c5aa7490047044426a49fed712084aef732f56a96e5c04fc5a8db58ffd2b39efdbafa9930c31b93db3373d03c1bd230153568f411ed627427e3a80e67f0a21f9e048914dca13f62c96e47a9e4570251dc83abd5d8a2e0bdef65ffffd73e2ed0036ab702872a73e27ff24cc71a6d575331006fd4316a84b0ec3760e99ef8b13923686d6866b6990314b70800a000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="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"], 0x2694}, 0x1, 0x0, 0x0, 0x800}, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) futex_wait$auto(0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x1) mmap$auto(0x0, 0xffffffffffffb410, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1c, &(0x7f0000000000), 0x1) fstat$auto(r0, 0x0) 15.00948331s ago: executing program 3 (id=2266): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) (async) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) (async) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0xfffffffd, &(0x7f0000000080)={0x0, 0x1}, 0xa, 0x0, 0x4, 0x401}, 0xed7138c}, 0xfffffffd, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 14.614853425s ago: executing program 3 (id=2267): r0 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x189803, 0x0) writev$auto(r0, &(0x7f0000004b80)={0x0, 0xa7ee}, 0x66) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose7/statistics/tx_heartbeat_errors\x00', 0x301000, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r2, 0x40084504, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x402063, 0x0) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES8=r1, @ANYRES64=r3, @ANYRES8, @ANYRES64=r3, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2c008015) write$auto(r3, 0x0, 0x8000098c6) socket(0x10, 0x2, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop9\x00', 0x254680, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r5, 0x300000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r7, 0xfff, 0x0) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x202800, 0x19c) fcntl$auto(0x3, 0x401, 0x3) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) r9 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) read$auto(r8, 0x0, 0x400004080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) getpgid$auto(0xffffffffffffffff) 14.547017038s ago: executing program 5 (id=2268): socket(0x11, 0x80003, 0x300) (async) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) (async) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x100, 0x0) open(0x0, 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be) (async) close_range$auto(0x2, 0x8, 0x7) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0xc0585605, 0x38) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x2006a) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) (async, rerun: 64) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async, rerun: 64) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) (async, rerun: 32) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 13.77225642s ago: executing program 3 (id=2270): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x9000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) socket(0x21, 0x800, 0xc) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0xe) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1000, 0x0, 0xfffffffffffffffd, 0x9}, 0xffffffff}, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40603d10, 0x0) open(0x0, 0x22240, 0x55) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3, 0x3e, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xe4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r4) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="01002bbd7000fbdbaddb50a72fc21e1f4d2409e9b8df25070000080200004a000000"], 0x24}}, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 13.69881647s ago: executing program 5 (id=2271): mmap$auto(0x0, 0x5, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000100000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000080)='\x00\x00\x06\x00', 0x8000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x80000001, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xd7\xff\x98bw\x02\x15\xb2\xbf\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\r\x1dNE\xd5\a\xa6\xab\x86\xdeJj\x17\x02\xf1\x1a\x1f\xa0\xad\x05L\xba\xd5\xb8\xbe\xf5m\xe2g\x82c.\xaa_\a(6\xf4\xeb\x990=\xcd\f\x8f\x12wW\xb0\xbf\xa9\xad;\xfa\x10%\xd6\xf0\x1f:pH\xbb\tk\xb1\x9dXD\xb6\x14g\xe9R\n\xa8\x1b1\x96\xbf\xf9\x8a\x96\xc2L\xee\xbe\xe3\xc5Y\x16do\f\xf4\xf5a\xdb\x1cd2\xcd\xaf\xc3rK4\xd8\xe0\\\xbf\xbc#\xe4G\x01\xf4\xd1\xe7\xc5n\xab\x99\x90\xf7\x96\xdd\xe7Z\x96\xf7\x15\xe6E\x89-\n\x81\xf1\xa8\xde?S\xd7%4\xb5<\xd0C\xe4)V\x13\x03x\x88DL\xe0F\xcf\xd5\x81\x1c*\xc8YG75\xe6\x8a\xf0\"\xb9\x0f\xd1(\xcbX%-\x9f\xc6\xf4+\x11\a\x1c\xe4q\xdcr\x99\xca\xf5uL\xa4o\x12v', 0x100000a3d9) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r3, &(0x7f0000000280)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\xc0\xf8\x01V?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99s\x81Q\xca\xeb\xee.\xe3\x85\xcd\xd0\xae!\x9fl}x\xd4\xa5D\x16\x94Ip\f\x96\xb8\xfa\xe5\xf9odtQ', 0x87ff, 0x8) readahead$auto(0xffffffffffffffff, 0xcc7f, 0x6) mmap$auto(0x10, 0x101, 0x1007, 0x12, r2, 0x7ffe) 3.721830493s ago: executing program 3 (id=2274): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, r1, 0x100000000008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b4b, r3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x11, 0x3, 0x2) getsockopt$auto(r4, 0x107, 0x1, 0x0, 0x0) r5 = getegid() setregid$auto(r5, 0x0) pread64$auto(r4, 0x0, 0x1ff, 0xf4) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x8090) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) 3.614952421s ago: executing program 2 (id=2275): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd6/trace/act_mask\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0xffffffff) 3.600065623s ago: executing program 6 (id=2276): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 3.483394948s ago: executing program 5 (id=2277): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x4000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) read$auto_stat_fops_per_vm_kvm_main(r0, &(0x7f0000000300)=""/4096, 0x1000) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 3.438924782s ago: executing program 2 (id=2278): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd6/trace/act_mask\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0xffffffff) 3.390906083s ago: executing program 2 (id=2279): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) sendmmsg$auto(r0, 0x0, 0x9, 0x20000000) (async) sendmmsg$auto(r0, 0x0, 0x9, 0x20000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) sendfile$auto(r0, r1, 0x0, 0x204) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x96934967338325c9, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x96934967338325c9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) (async) r2 = socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x800, 0x7) (async) r4 = socket(0x1a, 0x800, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r5) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c001000", @ANYRES16=r6, @ANYBLOB="010228bd7000ffdbdf250100000008000400", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25110000000400018024000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800fd00f9ffffff4300018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES64=r0, @ANYBLOB="1400020070696d36726567000000000000000000040001803800018008000300df82ef2e08000100", @ANYRES32=r9, @ANYBLOB="08000300b50f0000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="d9d89a0b9c"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25110000000400018024000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800fd00f9ffffff4300018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES64=r0, @ANYBLOB="1400020070696d36726567000000000000000000040001803800018008000300df82ef2e08000100", @ANYRES32=r9, @ANYBLOB="08000300b50f0000140002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="d9d89a0b9c"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x10001, 0x81) r10 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x100000001, 0xffffffffffffff7f, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x6, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 3.064648632s ago: executing program 6 (id=2280): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x400000, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) (async) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20803, 0x0) (async) setsockopt$auto(r0, 0x3, 0x8, &(0x7f0000000040)='/dev/dsp1\x00', 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) read$auto(0x3, 0x0, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000100)='%\x00', 0x38f) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptybc\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) (async) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) io_uring_setup$auto(0x6, 0x0) 2.422956029s ago: executing program 2 (id=2281): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto(r0, 0x5419, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port2/disable\x00', 0x4001, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) sysfs$auto(0x2, 0x10000000000000e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x2000003f, 0x4, 0x1}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 2.182333264s ago: executing program 5 (id=2282): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x9eb, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x402, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/192, 0xc0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2a, 0x2, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can, 0x69) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020009, 0x8000, 0xeb4, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) sendfile$auto(r4, r4, 0x0, 0x5) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/error_log\x00', 0x40, 0x0) 2.096860181s ago: executing program 6 (id=2283): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x6, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0xd, 0x4]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) 1.915425829s ago: executing program 3 (id=2284): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x6, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0xd, 0x4]}, 0x0) getgid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.033506234s ago: executing program 2 (id=2285): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x6, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x0, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0xd, 0x4]}, 0x0) getgid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) 1.015013276s ago: executing program 5 (id=2286): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40383d0c, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x2ffffffffffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101002, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r1, 0x5522, r1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) 570.101152ms ago: executing program 5 (id=2288): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) r1 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000240)=0x3) close_range$auto(r1, 0x8, 0x9) eventfd$auto(0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) r2 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) ioctl$auto(0x3, 0xae41, r0) 0s ago: executing program 2 (id=2290): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) socket(0x15, 0x800, 0x0) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (async, rerun: 64) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x80) tgkill$auto(0x0, 0x0, 0x10000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) (async) read$auto(0x3, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x400000000000000, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x80000001) (async) socket(0x2, 0x2, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, &(0x7f0000000c40)='gthtool\x00', 0x5) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x6fe, 0x0) kernel console output (not intermixed with test programs): t+0x7a5/0xe20 [ 541.937614][T14207] ? rcu_is_watching+0x12/0xc0 [ 541.937644][T14207] ? mptcp_getsockopt+0x7a5/0xe20 [ 541.937689][T14207] mptcp_getsockopt+0xcf8/0xe20 [ 541.937733][T14207] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 541.937777][T14207] ? __might_fault+0xe3/0x190 [ 541.937811][T14207] ? __might_fault+0x13b/0x190 [ 541.937843][T14207] ? rcu_is_watching+0x12/0xc0 [ 541.937871][T14207] ? __might_fault+0xe3/0x190 [ 541.937904][T14207] ? lock_release+0x201/0x2f0 [ 541.937947][T14207] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 541.937994][T14207] do_sock_getsockopt+0x34a/0x440 [ 541.938040][T14207] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 541.938086][T14207] ? lock_release+0x201/0x2f0 [ 541.938134][T14207] __sys_getsockopt+0x123/0x1b0 [ 541.938176][T14207] __x64_sys_getsockopt+0xbd/0x160 [ 541.938214][T14207] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 541.938262][T14207] do_syscall_64+0xcd/0x490 [ 541.938303][T14207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.938334][T14207] RIP: 0033:0x7f3c5c18ebe9 [ 541.938357][T14207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.938388][T14207] RSP: 002b:00007f3c5d039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 541.938419][T14207] RAX: ffffffffffffffda RBX: 00007f3c5c3b5fa0 RCX: 00007f3c5c18ebe9 [ 541.938439][T14207] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 541.938457][T14207] RBP: 00007f3c5c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 541.938476][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.938502][T14207] R13: 00007f3c5c3b6038 R14: 00007f3c5c3b5fa0 R15: 00007ffffd7b3358 [ 541.938532][T14207] [ 542.230476][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.571323][T14231] random: crng reseeded on system resumption [ 542.590979][T12566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 542.663798][T12566] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 542.677380][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 542.699769][T10275] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 542.750633][T12566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 542.832476][T12566] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 542.843177][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 542.955550][T12566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 542.967808][T10275] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 542.992851][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 543.010622][T12566] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 543.104229][T10275] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 543.147442][T12566] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 543.249677][T12566] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 543.266580][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 543.311653][T12566] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 543.325943][T10275] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 543.347342][T12566] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 543.365042][T10275] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 543.386973][T10275] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 547.119995][T14265] kexec: Could not allocate control_code_buffer [ 547.195292][T14272] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 547.204193][T14272] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 547.213592][T14272] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 547.221483][T14272] page_type: f5(slab) [ 547.225726][T14272] raw: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 547.234529][T14272] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 547.243503][T14272] head: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 547.253341][T14272] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 547.263623][T14272] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 547.272596][T14272] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 547.281568][T14272] page dumped because: unmovable page [ 547.287309][T14272] page_owner tracks the page as allocated [ 547.293123][T14272] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 88087933788, free_ts 88020632387 [ 547.319421][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1625'. [ 547.328550][T14272] post_alloc_hook+0x1c0/0x230 [ 547.333368][T14272] get_page_from_freelist+0x132b/0x38e0 [ 547.340036][T14272] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 547.346264][T14272] alloc_pages_mpol+0x1fb/0x550 [ 547.352947][T14272] new_slab+0x247/0x330 [ 547.357520][T14272] ___slab_alloc+0xcf2/0x1740 [ 547.362298][T14272] __slab_alloc.constprop.0+0x56/0xb0 [ 547.369227][T14272] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 547.375938][T14272] kmalloc_reserve+0xef/0x2c0 [ 547.380765][T14272] pskb_expand_head+0x238/0x1030 [ 547.386131][T14272] netlink_trim+0x22d/0x310 [ 547.390725][T14272] netlink_broadcast_filtered+0xf1/0xf90 [ 547.396802][T14272] nlmsg_notify+0x9e/0x220 [ 547.401333][T14272] rtmsg_ifinfo+0x174/0x1a0 [ 547.406292][T14272] __dev_notify_flags+0x24c/0x2e0 [ 547.411460][T14272] netif_change_flags+0x108/0x160 [ 547.416861][T14272] page last free pid 5861 tgid 5861 stack trace: [ 547.423314][T14272] __free_frozen_pages+0x7d5/0x10f0 [ 547.428989][T14272] qlist_free_all+0x4d/0x120 [ 547.433713][T14272] kasan_quarantine_reduce+0x195/0x1e0 [ 547.439699][T14272] __kasan_slab_alloc+0x69/0x90 [ 547.444690][T14272] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 547.450503][T14272] ref_tracker_alloc+0x18e/0x5b0 [ 547.455817][T14272] netdev_get_by_index+0x7c/0xb0 [ 547.460857][T14272] fib6_nh_init+0x791/0x1fb0 [ 547.466458][T14272] ip6_route_info_create_nh+0x507/0xfa0 [ 547.472118][T14272] ip6_route_add.part.0+0x56/0x1d0 [ 547.477977][T14272] ip6_route_add+0x45/0x60 [ 547.482779][T14272] addrconf_add_mroute+0x1dd/0x350 [ 547.488290][T14272] addrconf_add_dev+0x14e/0x1c0 [ 547.493262][T14272] addrconf_init_auto_addrs+0x201/0x810 [ 547.499240][T14272] addrconf_notify+0xe93/0x19e0 [ 547.504183][T14272] notifier_call_chain+0xbc/0x410 [ 554.673478][T14313] Invalid ELF header magic: != ELF [ 555.076879][T14320] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 555.404124][T14332] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1640'. [ 555.881439][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 555.913259][T10511] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 555.926778][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 555.955582][T10275] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 556.002817][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 556.065242][T10511] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 556.075603][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 556.152401][T10275] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 556.165884][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 556.279325][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 556.290686][T10511] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 556.342859][T10275] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 556.364231][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 556.418701][T10511] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 556.431288][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 556.477672][T10511] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 556.500433][T10275] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 556.532117][T10511] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 556.544202][T10275] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 556.598372][T10275] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 556.906489][T14371] FAULT_INJECTION: forcing a failure. [ 556.906489][T14371] name failslab, interval 1, probability 0, space 0, times 0 [ 556.935264][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.5.1651 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 556.935322][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.935342][T14371] Call Trace: [ 556.935352][T14371] [ 556.935364][T14371] dump_stack_lvl+0x16c/0x1f0 [ 556.935410][T14371] should_fail_ex+0x512/0x640 [ 556.935459][T14371] should_failslab+0xc2/0x120 [ 556.935502][T14371] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 556.935541][T14371] ? flock_lock_inode+0xbe5/0x1030 [ 556.935596][T14371] flock_lock_inode+0xbe5/0x1030 [ 556.935650][T14371] ? __pfx_flock_lock_inode+0x10/0x10 [ 556.935701][T14371] ? __pfx___might_resched+0x10/0x10 [ 556.935737][T14371] locks_lock_inode_wait+0x1da/0x490 [ 556.935768][T14371] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 556.935803][T14371] ? common_file_perm+0x1a9/0x340 [ 556.935845][T14371] __do_sys_flock+0x446/0x520 [ 556.935874][T14371] ? __pfx___do_sys_flock+0x10/0x10 [ 556.935915][T14371] ? xfd_validate_state+0x61/0x180 [ 556.935961][T14371] ? __pfx_ksys_write+0x10/0x10 [ 556.936004][T14371] do_syscall_64+0xcd/0x490 [ 556.936049][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.936082][T14371] RIP: 0033:0x7f074f78ebe9 [ 556.936105][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.936136][T14371] RSP: 002b:00007f07506bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 556.936167][T14371] RAX: ffffffffffffffda RBX: 00007f074f9b5fa0 RCX: 00007f074f78ebe9 [ 556.936189][T14371] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 556.936208][T14371] RBP: 00007f074f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.936229][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.936249][T14371] R13: 00007f074f9b6038 R14: 00007f074f9b5fa0 R15: 00007ffdf4b83d78 [ 556.936280][T14371] [ 559.201466][T14390] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 567.125801][T14346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 567.132010][T14346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 567.139039][T14346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 567.145483][T14346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 567.375774][T14406] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1657'. [ 567.441747][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1658'. [ 567.509067][T14413] futex_wake_op: syz.3.1659 tries to shift op by -9; fix this program [ 568.643599][T14429] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1663'. [ 569.175022][T10248] Bluetooth: hci3: command 0x0c1a tx timeout [ 569.176008][T10374] Bluetooth: hci0: command 0x0406 tx timeout [ 569.189351][T10248] Bluetooth: hci1: command 0x0406 tx timeout [ 569.225039][T14453] Bluetooth: hci2: command 0x0c1a tx timeout [ 569.347846][T14455] FAULT_INJECTION: forcing a failure. [ 569.347846][T14455] name failslab, interval 1, probability 0, space 0, times 0 [ 569.361166][T14455] CPU: 1 UID: 0 PID: 14455 Comm: syz.5.1668 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 569.361215][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.361234][T14455] Call Trace: [ 569.361245][T14455] [ 569.361256][T14455] dump_stack_lvl+0x16c/0x1f0 [ 569.361303][T14455] should_fail_ex+0x512/0x640 [ 569.361350][T14455] should_failslab+0xc2/0x120 [ 569.361393][T14455] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 569.361430][T14455] ? __pmd_alloc+0xbf/0x930 [ 569.361481][T14455] __pmd_alloc+0xbf/0x930 [ 569.361530][T14455] huge_pte_alloc+0x41d/0x5b0 [ 569.361571][T14455] hugetlb_fault+0x373/0x2f40 [ 569.361606][T14455] ? __pfx_hugetlb_fault+0x10/0x10 [ 569.361642][T14455] ? find_vma+0xbf/0x140 [ 569.361683][T14455] ? __pfx_find_vma+0x10/0x10 [ 569.361728][T14455] handle_mm_fault+0xbfa/0xd10 [ 569.361761][T14455] ? __bpf_trace_exceptions+0x1/0x40 [ 569.361811][T14455] do_user_addr_fault+0x7a6/0x1370 [ 569.361864][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.361899][T14455] exc_page_fault+0x5c/0xb0 [ 569.361936][T14455] asm_exc_page_fault+0x26/0x30 [ 569.361966][T14455] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 569.361998][T14455] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 569.362031][T14455] RSP: 0018:ffffc90003227950 EFLAGS: 00050246 [ 569.362059][T14455] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 569.362078][T14455] RDX: fffff52000644f43 RSI: 0000000000000000 RDI: ffffc90003227a10 [ 569.362099][T14455] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000644f42 [ 569.362124][T14455] R10: ffffc90003227a17 R11: 0000000000000000 R12: 0000000000000000 [ 569.362144][T14455] R13: ffffc90003227a10 R14: ffffffff8960d660 R15: ffff88807a5c6f00 [ 569.362167][T14455] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 569.362227][T14455] _copy_from_user+0x98/0xd0 [ 569.362279][T14455] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 569.362333][T14455] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 569.362377][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.362414][T14455] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 569.362467][T14455] ? __pfx___might_resched+0x10/0x10 [ 569.362499][T14455] ? sctp_getsockopt+0x291/0x69b0 [ 569.362553][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.362586][T14455] ? sctp_getsockopt+0x291/0x69b0 [ 569.362633][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.362666][T14455] ? sctp_getsockopt+0x291/0x69b0 [ 569.362716][T14455] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 569.362767][T14455] sctp_getsockopt+0x124f/0x69b0 [ 569.362815][T14455] ? __futex_wait+0x24c/0x2f0 [ 569.362865][T14455] ? __pfx_sctp_getsockopt+0x10/0x10 [ 569.362911][T14455] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 569.362961][T14455] ? __pfx_futex_wake_mark+0x10/0x10 [ 569.363010][T14455] ? __pfx___might_resched+0x10/0x10 [ 569.363046][T14455] ? aa_sk_perm+0x2f4/0xb10 [ 569.363087][T14455] ? futex_wait+0x120/0x380 [ 569.363134][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.363167][T14455] ? __might_fault+0xe3/0x190 [ 569.363203][T14455] ? __might_fault+0x13b/0x190 [ 569.363239][T14455] ? rcu_is_watching+0x12/0xc0 [ 569.363270][T14455] ? __might_fault+0xe3/0x190 [ 569.363305][T14455] ? lock_release+0x201/0x2f0 [ 569.363352][T14455] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 569.363400][T14455] do_sock_getsockopt+0x34a/0x440 [ 569.363449][T14455] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 569.363499][T14455] ? lock_release+0x201/0x2f0 [ 569.363558][T14455] __sys_getsockopt+0x123/0x1b0 [ 569.363602][T14455] __x64_sys_getsockopt+0xbd/0x160 [ 569.363643][T14455] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 569.363695][T14455] do_syscall_64+0xcd/0x490 [ 569.363739][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.363771][T14455] RIP: 0033:0x7f074f78ebe9 [ 569.363796][T14455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.363829][T14455] RSP: 002b:00007f075069c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 569.363860][T14455] RAX: ffffffffffffffda RBX: 00007f074f9b6090 RCX: 00007f074f78ebe9 [ 569.363882][T14455] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 569.363903][T14455] RBP: 00007f074f811e19 R08: 0000200000000280 R09: 0000000000000000 [ 569.363925][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.363945][T14455] R13: 00007f074f9b6128 R14: 00007f074f9b6090 R15: 00007ffdf4b83d78 [ 569.363977][T14455] [ 569.976357][T14460] ICMPv6: process `syz.2.1669' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 570.431353][T14470] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1671'. [ 571.773006][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 571.883615][T14506] netlink: 'syz.6.1678': attribute type 11 has an invalid length. [ 572.071012][T14510] random: crng reseeded on system resumption [ 572.110091][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 572.220742][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 572.233454][T10511] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 572.272992][T10275] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 572.311476][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 572.445171][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 572.456966][T10511] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 572.695786][T10275] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 572.715140][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 572.801771][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 572.815554][T10511] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 572.859919][T10275] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 572.874118][T10511] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 572.908865][T10511] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 572.918201][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 572.944204][T10511] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 572.953582][T10275] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 572.975931][T10511] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 572.984305][T10275] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 573.006025][T10275] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 573.468282][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.474707][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.955493][T14592] FAULT_INJECTION: forcing a failure. [ 584.955493][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 585.105016][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.2.1695 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 585.105064][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.105084][T14592] Call Trace: [ 585.105094][T14592] [ 585.105106][T14592] dump_stack_lvl+0x16c/0x1f0 [ 585.105150][T14592] should_fail_ex+0x512/0x640 [ 585.105206][T14592] should_failslab+0xc2/0x120 [ 585.105248][T14592] __kmalloc_cache_noprof+0x6a/0x3e0 [ 585.105280][T14592] ? debug_mutex_init+0x37/0x70 [ 585.105310][T14592] ? single_open+0x4d/0x1f0 [ 585.105357][T14592] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 585.105391][T14592] single_open+0x4d/0x1f0 [ 585.105436][T14592] blk_mq_debugfs_open+0xde/0x1b0 [ 585.105472][T14592] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 585.105507][T14592] full_proxy_open_regular+0x1b9/0x360 [ 585.105541][T14592] do_dentry_open+0x982/0x1530 [ 585.105581][T14592] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 585.105616][T14592] vfs_open+0x82/0x3f0 [ 585.105664][T14592] path_openat+0x1de4/0x2cb0 [ 585.105706][T14592] ? __pfx_path_openat+0x10/0x10 [ 585.105749][T14592] do_filp_open+0x20b/0x470 [ 585.105786][T14592] ? __pfx_do_filp_open+0x10/0x10 [ 585.105838][T14592] ? alloc_fd+0x471/0x7d0 [ 585.105876][T14592] do_sys_openat2+0x11b/0x1d0 [ 585.105923][T14592] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.105978][T14592] __x64_sys_openat+0x174/0x210 [ 585.106026][T14592] ? __pfx___x64_sys_openat+0x10/0x10 [ 585.106084][T14592] do_syscall_64+0xcd/0x490 [ 585.106127][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.106159][T14592] RIP: 0033:0x7f0d0b58ebe9 [ 585.106191][T14592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.106223][T14592] RSP: 002b:00007f0d0c411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.106256][T14592] RAX: ffffffffffffffda RBX: 00007f0d0b7b5fa0 RCX: 00007f0d0b58ebe9 [ 585.106278][T14592] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 585.106299][T14592] RBP: 00007f0d0b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 585.106319][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.106347][T14592] R13: 00007f0d0b7b6038 R14: 00007f0d0b7b5fa0 R15: 00007ffffd4ae7a8 [ 585.106379][T14592] [ 585.692003][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 587.872044][ T30] audit: type=1806 audit(1843104683.610:40): xattr="" res=-22 [ 587.905548][T14662] netlink: zone id is out of range [ 587.914922][T14662] netlink: zone id is out of range [ 588.043701][T14662] netlink: zone id is out of range [ 588.121120][T14662] netlink: zone id is out of range [ 588.146220][T14662] netlink: zone id is out of range [ 588.156240][T14662] netlink: zone id is out of range [ 588.162341][T14662] netlink: zone id is out of range [ 588.168130][T14662] netlink: zone id is out of range [ 588.173731][T14662] netlink: zone id is out of range [ 588.194478][T14662] netlink: zone id is out of range [ 588.426214][T14670] __vm_enough_memory: pid: 14670, comm: syz.3.1705, bytes: 4398046511104 not enough memory for the allocation [ 588.463903][T14670] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 588.546716][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 588.591245][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.644235][T14671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.742236][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.839701][T14671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.892774][T14681] Console: switching to colour VGA+ 80x25 [ 589.102375][T14673] ubi0: attaching mtd0 [ 589.163822][T14673] ubi0: scanning is finished [ 589.249814][T14691] random: crng reseeded on system resumption [ 589.279537][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 589.294073][T14673] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 589.424474][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 589.437558][T12554] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 589.569365][T11582] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 589.608046][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 589.725113][T12554] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 589.744990][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 589.789252][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 589.801751][T11582] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 589.841442][T14673] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 589.855862][T12554] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 589.873041][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 589.910040][T11582] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 589.931755][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 589.969645][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 589.984943][T12554] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 590.011699][T12554] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 590.022700][T11582] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 590.043476][T11582] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 590.053142][T12554] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 590.079469][T11582] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 600.611977][T14728] net_ratelimit: 74 callbacks suppressed [ 600.612007][T14728] openvswitch: netlink: Multiple metadata blocks provided [ 600.666541][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 601.128029][T14747] syz.3.1723: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 601.158833][T14747] CPU: 1 UID: 0 PID: 14747 Comm: syz.3.1723 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 601.158882][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.158913][T14747] Call Trace: [ 601.158924][T14747] [ 601.158938][T14747] dump_stack_lvl+0x16c/0x1f0 [ 601.158985][T14747] warn_alloc+0x248/0x3a0 [ 601.159024][T14747] ? __pfx_warn_alloc+0x10/0x10 [ 601.159081][T14747] ? packet_set_ring+0xb52/0x18d0 [ 601.159115][T14747] ? __vmalloc_node_noprof+0xad/0xf0 [ 601.159157][T14747] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 601.159196][T14747] ? packet_set_ring+0xb52/0x18d0 [ 601.159234][T14747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 601.159268][T14747] ? alloc_pages_mpol+0x25a/0x550 [ 601.159313][T14747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 601.159359][T14747] ? packet_set_ring+0xb52/0x18d0 [ 601.159392][T14747] __vmalloc_node_noprof+0xad/0xf0 [ 601.159423][T14747] ? packet_set_ring+0xb52/0x18d0 [ 601.159460][T14747] packet_set_ring+0xb52/0x18d0 [ 601.159502][T14747] packet_setsockopt+0x121b/0x33c0 [ 601.159541][T14747] ? __pfx___might_resched+0x10/0x10 [ 601.159576][T14747] ? __pfx_futex_wake+0x10/0x10 [ 601.159627][T14747] ? __pfx_packet_setsockopt+0x10/0x10 [ 601.159665][T14747] ? aa_sk_perm+0x2f4/0xb10 [ 601.159710][T14747] ? file_init_path+0x4fe/0x760 [ 601.159757][T14747] ? __pfx_aa_sk_perm+0x10/0x10 [ 601.159798][T14747] ? rcu_is_watching+0x12/0xc0 [ 601.159836][T14747] ? aa_sock_opt_perm+0xfd/0x1c0 [ 601.159867][T14747] ? __pfx_packet_setsockopt+0x10/0x10 [ 601.159907][T14747] do_sock_setsockopt+0xf3/0x1d0 [ 601.159959][T14747] __sys_setsockopt+0x120/0x1a0 [ 601.160002][T14747] __x64_sys_setsockopt+0xbd/0x160 [ 601.160042][T14747] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 601.160094][T14747] do_syscall_64+0xcd/0x490 [ 601.160145][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.160181][T14747] RIP: 0033:0x7f2c76d8ebe9 [ 601.160206][T14747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.160244][T14747] RSP: 002b:00007f2c77bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.160277][T14747] RAX: ffffffffffffffda RBX: 00007f2c76fb5fa0 RCX: 00007f2c76d8ebe9 [ 601.160301][T14747] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 601.160322][T14747] RBP: 00007f2c76e11e19 R08: 000000000000ce24 R09: 0000000000000000 [ 601.160344][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.160367][T14747] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 601.160400][T14747] [ 601.160518][T14747] Mem-Info: [ 601.526011][T14747] active_anon:15475 inactive_anon:2426 isolated_anon:0 [ 601.526011][T14747] active_file:19024 inactive_file:40101 isolated_file:0 [ 601.526011][T14747] unevictable:768 dirty:575 writeback:0 [ 601.526011][T14747] slab_reclaimable:12300 slab_unreclaimable:99224 [ 601.526011][T14747] mapped:25646 shmem:1578 pagetables:1642 [ 601.526011][T14747] sec_pagetables:0 bounce:0 [ 601.526011][T14747] kernel_misc_reclaimable:0 [ 601.526011][T14747] free:1271998 free_pcp:23327 free_cma:0 [ 601.571803][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.705712][T14747] Node 0 active_anon:61916kB inactive_anon:7592kB active_file:76092kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102584kB dirty:2296kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:40960kB kernel_stack:12792kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.762465][T14747] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.870406][T14747] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.899319][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.953706][T14747] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 601.960293][T14747] Node 0 DMA32 free:1196024kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61868kB inactive_anon:9584kB active_file:74948kB inactive_file:160104kB unevictable:1536kB writepending:2296kB present:3129332kB managed:2539608kB mlocked:0kB bounce:0kB free_pcp:60792kB local_pcp:36048kB free_cma:0kB [ 601.996825][T14747] lowmem_reserve[]: 0 0 1 1 1 [ 602.002106][T14747] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1244kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 602.032493][T14747] lowmem_reserve[]: 0 0 0 0 0 [ 602.038846][T14747] Node 1 Normal free:3876596kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31860kB local_pcp:31860kB free_cma:0kB [ 602.196962][T14747] lowmem_reserve[]: 0 0 0 0 0 [ 602.226427][T14747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 602.279235][T14747] Node 0 DMA32: 4*4kB (ME) 995*8kB (M) 869*16kB (UME) 1038*32kB (UME) 896*64kB (UME) 570*128kB (ME) 382*256kB (UME) 213*512kB (UME) 103*1024kB (UME) 7*2048kB (UM) 168*4096kB (UM) = 1200184kB [ 602.395135][T14747] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 602.416407][T14779] netlink: 'syz.5.1729': attribute type 2 has an invalid length. [ 602.426157][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 602.445229][T14747] Node 1 Normal: 8*4kB (UE) 4*8kB (E) 7*16kB (UE) 8*32kB (UE) 7*64kB (UE) 5*128kB (UE) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (ME) 944*4096kB (UM) = 3876848kB [ 602.498941][T14747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.541437][T14747] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 602.585128][T14747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.586801][T14778] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1730: iget: checksum invalid [ 602.617403][T14747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 602.627499][T14778] faux_driver regulatory: loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 602.644474][T14747] 60671 total pagecache pages [ 602.656673][T14778] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1730: iget: checksum invalid [ 602.670108][T14747] 22 pages in swap cache [ 602.674392][T14747] Free swap = 124744kB [ 602.700809][T14747] Total swap = 124996kB [ 602.721821][T14778] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 602.744924][T14747] 2097051 pages RAM [ 602.748782][T14747] 0 pages HighMem/MovableOnly [ 602.758801][T14778] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1730: iget: checksum invalid [ 602.769885][T14747] 430187 pages reserved [ 602.770724][T14778] faux_driver regulatory: loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 602.774073][T14747] 0 pages cma reserved [ 602.795735][T14778] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1730: iget: checksum invalid [ 602.842478][T14778] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 602.878923][T14778] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 602.942949][T14778] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 603.300748][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1734'. [ 603.691070][T14800] FAULT_INJECTION: forcing a failure. [ 603.691070][T14800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.704317][T14800] CPU: 1 UID: 0 PID: 14800 Comm: syz.3.1736 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 603.704352][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.704367][T14800] Call Trace: [ 603.704375][T14800] [ 603.704384][T14800] dump_stack_lvl+0x16c/0x1f0 [ 603.704418][T14800] should_fail_ex+0x512/0x640 [ 603.704454][T14800] _copy_from_iter+0x29f/0x16f0 [ 603.704493][T14800] ? __alloc_skb+0x200/0x380 [ 603.704522][T14800] ? __pfx__copy_from_iter+0x10/0x10 [ 603.704560][T14800] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 603.704596][T14800] netlink_sendmsg+0x829/0xdd0 [ 603.704630][T14800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.704664][T14800] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 603.704691][T14800] __sys_sendto+0x4a3/0x520 [ 603.704717][T14800] ? __pfx___sys_sendto+0x10/0x10 [ 603.704749][T14800] ? lock_release+0x201/0x2f0 [ 603.704786][T14800] ? __pfx___sys_socket+0x10/0x10 [ 603.704809][T14800] ? xfd_validate_state+0x61/0x180 [ 603.704867][T14800] __x64_sys_sendto+0xe0/0x1c0 [ 603.704904][T14800] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 603.704956][T14800] do_syscall_64+0xcd/0x490 [ 603.705021][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.705056][T14800] RIP: 0033:0x7f2c76d90a7c [ 603.705081][T14800] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 603.705106][T14800] RSP: 002b:00007f2c77bf7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 603.705130][T14800] RAX: ffffffffffffffda RBX: 00007f2c77bf7fc0 RCX: 00007f2c76d90a7c [ 603.705146][T14800] RDX: 0000000000000028 RSI: 00007f2c77bf8010 RDI: 0000000000000007 [ 603.705162][T14800] RBP: 0000000000000000 R08: 00007f2c77bf7f14 R09: 000000000000000c [ 603.705177][T14800] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 603.705192][T14800] R13: 00007f2c77bf7f68 R14: 00007f2c77bf8010 R15: 0000000000000000 [ 603.705214][T14800] [ 605.986870][T14842] FAULT_INJECTION: forcing a failure. [ 605.986870][T14842] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.021564][T14842] CPU: 0 UID: 0 PID: 14842 Comm: syz.6.1745 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 606.021601][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.021616][T14842] Call Trace: [ 606.021624][T14842] [ 606.021633][T14842] dump_stack_lvl+0x16c/0x1f0 [ 606.021673][T14842] should_fail_ex+0x512/0x640 [ 606.021714][T14842] get_futex_key+0x1d0/0x1560 [ 606.021751][T14842] ? inet_sendmsg+0xc0/0x140 [ 606.021775][T14842] ? __pfx_get_futex_key+0x10/0x10 [ 606.021802][T14842] ? __pfx_sock_write_iter+0x10/0x10 [ 606.021844][T14842] futex_wake+0xea/0x530 [ 606.021878][T14842] ? bpf_lsm_file_permission+0x9/0x10 [ 606.021914][T14842] ? __pfx_futex_wake+0x10/0x10 [ 606.021948][T14842] ? vfs_write+0x15d/0x11d0 [ 606.021975][T14842] ? __pfx_sock_write_iter+0x10/0x10 [ 606.022025][T14842] do_futex+0x1e3/0x350 [ 606.022053][T14842] ? __pfx_do_futex+0x10/0x10 [ 606.022080][T14842] ? lock_release+0x201/0x2f0 [ 606.022114][T14842] __x64_sys_futex+0x1e0/0x4c0 [ 606.022143][T14842] ? fput+0x9b/0xd0 [ 606.022173][T14842] ? __pfx___x64_sys_futex+0x10/0x10 [ 606.022201][T14842] ? ksys_write+0x1ac/0x250 [ 606.022226][T14842] ? __pfx_ksys_write+0x10/0x10 [ 606.022256][T14842] do_syscall_64+0xcd/0x490 [ 606.022286][T14842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.022309][T14842] RIP: 0033:0x7f3c5c18ebe9 [ 606.022326][T14842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.022349][T14842] RSP: 002b:00007f3c5d0180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 606.022370][T14842] RAX: ffffffffffffffda RBX: 00007f3c5c3b6098 RCX: 00007f3c5c18ebe9 [ 606.022388][T14842] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c5c3b609c [ 606.022409][T14842] RBP: 00007f3c5c3b6090 R08: 00007f3c5d03a000 R09: 0000000000000000 [ 606.022429][T14842] R10: 000000000000fdf3 R11: 0000000000000246 R12: 0000000000000000 [ 606.022449][T14842] R13: 00007f3c5c3b6128 R14: 00007ffffd7b3270 R15: 00007ffffd7b3358 [ 606.022479][T14842] [ 606.229100][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.523960][T14854] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 606.637143][T14857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1748'. [ 606.769771][T14858] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1748'. [ 607.699698][T14882] random: crng reseeded on system resumption [ 607.770455][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 607.825867][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 607.837285][T11582] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 607.875178][T10275] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 607.914371][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 607.966440][T11582] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 607.979937][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 607.996114][T14888] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1751'. [ 608.001693][T10275] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 608.026819][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 608.059199][T11582] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 608.082427][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 608.114045][T10275] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 608.134435][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 608.190629][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 608.221574][T11582] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 608.254944][T11582] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 608.306237][T10275] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 608.319891][T11582] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 608.347453][T10275] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 608.367425][T10275] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 608.559712][T14901] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1754'. [ 610.484711][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 619.903217][T14958] program syz.6.1767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.420085][T14964] openvswitch: netlink: Multiple metadata blocks provided [ 620.544509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.550949][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.562960][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.569373][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.596516][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.602848][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.616830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.623139][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 621.313535][T14977] netlink: 'syz.6.1773': attribute type 2 has an invalid length. [ 621.321541][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 622.648304][T15003] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 622.879471][T15008] blktrace: Concurrent blktraces are not allowed on ram4 [ 622.947598][T15009] __vm_enough_memory: pid: 15009, comm: syz.5.1778, bytes: 4398046511104 not enough memory for the allocation [ 623.102251][T15008] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 623.194631][T15009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1778'. [ 623.304440][T15009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.346969][T15009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.424710][T15009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.474875][T15009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.381244][ T30] audit: type=1806 audit(1843104720.120:41): xattr="" res=-22 [ 624.668474][T15035] netlink: zone id is out of range [ 624.715031][T15035] netlink: zone id is out of range [ 624.825574][T15035] netlink: zone id is out of range [ 624.830752][T15035] netlink: zone id is out of range [ 624.836284][T15035] netlink: zone id is out of range [ 624.841430][T15035] netlink: zone id is out of range [ 624.866785][T15035] netlink: zone id is out of range [ 624.909355][T15035] netlink: zone id is out of range [ 624.969957][T15035] netlink: zone id is out of range [ 626.387684][T15061] netlink: 'syz.2.1788': attribute type 2 has an invalid length. [ 626.397946][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 628.664992][T15093] blktrace: Concurrent blktraces are not allowed on ram4 [ 628.731859][T15083] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 628.928209][T15096] __vm_enough_memory: pid: 15096, comm: syz.2.1793, bytes: 4398046511104 not enough memory for the allocation [ 629.073396][T15093] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 629.123194][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 633.915015][T15166] FAULT_INJECTION: forcing a failure. [ 633.915015][T15166] name fail_futex, interval 1, probability 0, space 0, times 0 [ 633.928054][T15166] CPU: 1 UID: 0 PID: 15166 Comm: syz.3.1808 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 633.928100][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.928120][T15166] Call Trace: [ 633.928133][T15166] [ 633.928143][T15166] dump_stack_lvl+0x16c/0x1f0 [ 633.928177][T15166] should_fail_ex+0x512/0x640 [ 633.928213][T15166] should_fail_futex+0x4c/0x60 [ 633.928239][T15166] futex_lock_pi_atomic+0x101/0xd50 [ 633.928275][T15166] futex_lock_pi+0x23f/0x7c0 [ 633.928310][T15166] ? __pfx_futex_lock_pi+0x10/0x10 [ 633.928342][T15166] ? __futex_wait+0x24c/0x2f0 [ 633.928435][T15166] ? futex_private_hash_put+0x11c/0x300 [ 633.928465][T15166] ? __pfx_futex_wake_mark+0x10/0x10 [ 633.928504][T15166] ? ksys_write+0x190/0x250 [ 633.928531][T15166] ? rcu_is_watching+0x12/0xc0 [ 633.928559][T15166] ? lock_release+0x201/0x2f0 [ 633.928592][T15166] do_futex+0x11a/0x350 [ 633.928622][T15166] ? __pfx_do_futex+0x10/0x10 [ 633.928660][T15166] __x64_sys_futex+0x1e0/0x4c0 [ 633.928690][T15166] ? fput+0x9b/0xd0 [ 633.928722][T15166] ? __pfx___x64_sys_futex+0x10/0x10 [ 633.928752][T15166] ? xfd_validate_state+0x61/0x180 [ 633.928786][T15166] ? __pfx_ksys_write+0x10/0x10 [ 633.928817][T15166] do_syscall_64+0xcd/0x490 [ 633.928850][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.928874][T15166] RIP: 0033:0x7f2c76d8ebe9 [ 633.928893][T15166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.928916][T15166] RSP: 002b:00007f2c77bf9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.928939][T15166] RAX: ffffffffffffffda RBX: 00007f2c76fb5fa0 RCX: 00007f2c76d8ebe9 [ 633.928955][T15166] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 633.928970][T15166] RBP: 00007f2c76e11e19 R08: 0000000000000000 R09: 000000008000fff2 [ 633.928985][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.929000][T15166] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 633.929023][T15166] [ 634.297079][T15164] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1806'. [ 634.723067][T15175] blktrace: Concurrent blktraces are not allowed on ram7 [ 634.918715][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.925151][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.122660][T15192] netlink: 'syz.6.1812': attribute type 2 has an invalid length. [ 635.145999][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1812'. [ 635.597605][T15186] random: crng reseeded on system resumption [ 635.604671][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 635.669837][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 635.691690][T11582] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 635.872557][T12563] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 635.888797][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 635.926387][T11582] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 635.936706][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 635.963695][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 635.979684][T12563] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 636.008147][T11582] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 636.021239][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 636.055454][T12563] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 636.082825][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 636.180257][T11582] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 636.208068][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 636.238529][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'. [ 636.285242][T11582] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 636.294404][T11582] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 636.302705][T12563] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 636.337417][T12563] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 636.377421][T12563] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 647.366065][T15239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 647.484228][T15238] Invalid ELF header magic: != ELF [ 649.865283][T15271] netlink: 'syz.5.1827': attribute type 27 has an invalid length. [ 649.873207][T15271] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1827'. [ 650.001689][T15273] random: crng reseeded on system resumption [ 650.118376][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 650.163697][T12563] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 650.185343][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 650.235001][T12564] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 650.269045][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 650.301395][T12563] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 650.311455][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 650.363493][T12564] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 650.363643][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 650.473678][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 650.498450][T12563] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 650.543196][T12564] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 650.562266][T12563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:20: iget: checksum invalid [ 650.602934][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 650.620925][T12563] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 650.640849][T12563] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 650.652397][T12564] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 650.675138][T12563] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 650.684630][T12564] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 650.717957][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1830'. [ 650.749058][T12564] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 661.560794][T15316] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 661.741597][T15320] random: crng reseeded on system resumption [ 661.748272][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 661.808443][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 661.821696][T12554] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 661.874555][T12564] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 661.905660][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 661.930094][T12554] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 661.939828][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 661.972983][T12564] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 661.983168][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 662.035102][T12554] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 662.058219][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 662.104863][T12564] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 662.129141][T12554] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 662.162016][T12554] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 662.175600][T12564] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 662.196089][T15321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 662.255216][T12554] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 662.278888][T12564] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 662.294837][T12554] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 662.303467][T12564] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 662.324940][T12564] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 663.248278][T15346] __vm_enough_memory: pid: 15346, comm: syz.5.1837, bytes: 4398046511104 not enough memory for the allocation [ 672.695050][T15343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 674.315809][T15415] CIFS: VFS: Unsupported security flags: 0x20 [ 677.126095][T15483] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1861'. [ 677.508688][T15487] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1862: iget: checksum invalid [ 677.520735][T15487] faux_driver regulatory: loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 677.572363][T15487] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1862: iget: checksum invalid [ 677.600815][T15487] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 677.680888][T15487] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1862: iget: checksum invalid [ 677.751078][T15487] faux_driver regulatory: loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 677.805040][T15487] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1862: iget: checksum invalid [ 677.850155][T15487] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 677.866445][T15487] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 677.884865][T15487] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 678.526541][T15519] IPVS: length: 7562853 != 24 [ 680.387633][T15553] input: f as /devices/virtual/input/input86 [ 680.519500][ T30] audit: type=1800 audit(1843104776.260:42): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1874" name="dbroot" dev="configfs" ino=61790 res=0 errno=0 [ 680.832793][T15566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1876'. [ 680.854675][T15566] bridge_slave_1: left allmulticast mode [ 680.860516][T15566] bridge_slave_1: left promiscuous mode [ 680.866833][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.877893][T15566] bridge_slave_0: left allmulticast mode [ 680.883576][T15566] bridge_slave_0: left promiscuous mode [ 680.916149][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.120200][T15597] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 685.326752][T15663] random: crng reseeded on system resumption [ 685.435385][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 685.517242][T10275] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 685.534317][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 685.565463][T11582] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 685.579189][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 685.608236][T10275] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 685.622423][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 685.670128][T11582] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 685.680816][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 685.736867][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 685.758595][T10275] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 685.811389][T11582] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 685.828600][T10275] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:4: iget: checksum invalid [ 685.865086][T10275] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 685.874205][T11582] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:9: iget: checksum invalid [ 685.902534][T10275] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 685.919106][T11582] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 685.942149][T10275] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 685.954822][T11582] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 685.985363][T11582] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 689.342749][T15711] ICMPv6: process `syz.2.1910' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 689.438600][ T30] audit: type=1804 audit(1843104785.180:43): pid=15713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1911" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=61790 res=1 errno=0 [ 689.530297][T15715] warning: `syz.2.1912' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 689.542927][T15715] program syz.2.1912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.552762][T15716] program syz.2.1912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.768803][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.775306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.792909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.799412][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.846567][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.852885][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.864645][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.871084][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.347746][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.358863][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.121705][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 697.226675][T15755] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 697.245706][T15755] netlink: 'syz.3.1920': attribute type 6 has an invalid length. [ 698.369656][T15769] vhci_hcd: invalid port number 21 [ 698.479211][T15772] FAULT_INJECTION: forcing a failure. [ 698.479211][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 698.531224][T15772] CPU: 0 UID: 0 PID: 15772 Comm: syz.3.1924 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 698.531268][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.531287][T15772] Call Trace: [ 698.531298][T15772] [ 698.531310][T15772] dump_stack_lvl+0x16c/0x1f0 [ 698.531354][T15772] should_fail_ex+0x512/0x640 [ 698.531399][T15772] should_failslab+0xc2/0x120 [ 698.531437][T15772] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 698.531471][T15772] ? skb_clone+0x190/0x3f0 [ 698.531509][T15772] skb_clone+0x190/0x3f0 [ 698.531559][T15772] netlink_deliver_tap+0xabd/0xd30 [ 698.531598][T15772] netlink_unicast+0x64c/0x870 [ 698.531638][T15772] ? __pfx_netlink_unicast+0x10/0x10 [ 698.531676][T15772] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 698.531718][T15772] netlink_sendmsg+0x8d1/0xdd0 [ 698.531758][T15772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.531800][T15772] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 698.531832][T15772] __sys_sendto+0x4a3/0x520 [ 698.531864][T15772] ? __pfx___sys_sendto+0x10/0x10 [ 698.531901][T15772] ? lock_release+0x201/0x2f0 [ 698.531943][T15772] ? __pfx___sys_socket+0x10/0x10 [ 698.531974][T15772] __x64_sys_sendto+0xe0/0x1c0 [ 698.532005][T15772] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 698.532049][T15772] do_syscall_64+0xcd/0x490 [ 698.532087][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.532129][T15772] RIP: 0033:0x7f2c76d90a7c [ 698.532149][T15772] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 698.532177][T15772] RSP: 002b:00007f2c77bb5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 698.532204][T15772] RAX: ffffffffffffffda RBX: 00007f2c77bb5fc0 RCX: 00007f2c76d90a7c [ 698.532222][T15772] RDX: 0000000000000020 RSI: 00007f2c77bb6010 RDI: 000000000000000a [ 698.532239][T15772] RBP: 0000000000000000 R08: 00007f2c77bb5f14 R09: 000000000000000c [ 698.532256][T15772] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 698.532273][T15772] R13: 00007f2c77bb5f68 R14: 00007f2c77bb6010 R15: 0000000000000000 [ 698.532298][T15772] [ 698.744108][ C0] vkms_vblank_simulate: vblank timer overrun [ 699.439917][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 700.061996][T15808] vivid-009: ================= START STATUS ================= [ 700.084453][T15808] vivid-009: Enable Output Cropping: true grabbed [ 700.102762][T15808] vivid-009: Enable Output Composing: true grabbed [ 700.286768][T15808] vivid-009: Enable Output Scaler: true grabbed [ 700.315091][T15808] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 700.322531][T15808] vivid-009: Transmit Mode: HDMI grabbed [ 700.330237][T15808] vivid-009: Hotplug Present: 0x00000000 [ 700.348254][T15808] vivid-009: RxSense Present: 0x00000000 [ 700.424067][T15808] vivid-009: EDID Present: 0x00000000 [ 700.429671][T15808] vivid-009: ================== END STATUS ================== [ 700.775930][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 701.976046][T15845] bond0: option num_grat_arp: invalid value () [ 702.041639][T15845] bond0: option num_grat_arp: allowed values 0 - 255 [ 702.349105][T15857] blktrace: Concurrent blktraces are not allowed on ram7 [ 702.362389][T15850] delete_channel: no stack [ 702.370601][T15850] delete_channel: no stack [ 706.648885][T15947] netlink: 'syz.6.1957': attribute type 27 has an invalid length. [ 706.718444][T15947] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1957'. [ 707.918331][T15995] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1965'. [ 709.397337][T16018] dyndbg: bad flag-op :, at start of :, [ 709.457904][T16018] dyndbg: flags parse failed [ 710.063140][T16034] bond0: option num_grat_arp: invalid value () [ 710.082354][T16034] bond0: option num_grat_arp: allowed values 0 - 255 [ 710.727612][T16051] FAULT_INJECTION: forcing a failure. [ 710.727612][T16051] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.740841][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.5.1978 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 710.740875][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.740889][T16051] Call Trace: [ 710.740897][T16051] [ 710.740905][T16051] dump_stack_lvl+0x16c/0x1f0 [ 710.740937][T16051] should_fail_ex+0x512/0x640 [ 710.740973][T16051] get_futex_key+0x293/0x1560 [ 710.741002][T16051] ? __pfx_get_futex_key+0x10/0x10 [ 710.741029][T16051] ? __mutex_trylock_common+0xe9/0x250 [ 710.741062][T16051] ? __pfx___mutex_trylock_common+0x10/0x10 [ 710.741097][T16051] futex_wake+0xea/0x530 [ 710.741131][T16051] ? __pfx_futex_wake+0x10/0x10 [ 710.741165][T16051] ? rcu_is_watching+0x12/0xc0 [ 710.741195][T16051] ? rcu_is_watching+0x12/0xc0 [ 710.741219][T16051] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 710.741251][T16051] do_futex+0x1e3/0x350 [ 710.741280][T16051] ? __pfx_do_futex+0x10/0x10 [ 710.741309][T16051] ? lock_release+0x201/0x2f0 [ 710.741341][T16051] mm_release+0x24e/0x300 [ 710.741367][T16051] do_exit+0x68e/0x2bf0 [ 710.741419][T16051] ? __pfx_do_exit+0x10/0x10 [ 710.741450][T16051] ? do_raw_spin_lock+0x12c/0x2b0 [ 710.741486][T16051] ? get_signal+0x8f5/0x26d0 [ 710.741518][T16051] ? rcu_is_watching+0x12/0xc0 [ 710.741543][T16051] do_group_exit+0xd3/0x2a0 [ 710.741579][T16051] get_signal+0x2673/0x26d0 [ 710.741607][T16051] ? rcu_is_watching+0x12/0xc0 [ 710.741630][T16051] ? lock_release+0x201/0x2f0 [ 710.741662][T16051] ? __pfx_get_signal+0x10/0x10 [ 710.741689][T16051] ? do_futex+0x122/0x350 [ 710.741721][T16051] ? __pfx_do_futex+0x10/0x10 [ 710.741752][T16051] arch_do_signal_or_restart+0x8f/0x790 [ 710.741784][T16051] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 710.741822][T16051] exit_to_user_mode_loop+0x84/0x110 [ 710.741858][T16051] do_syscall_64+0x3f6/0x490 [ 710.741889][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.741913][T16051] RIP: 0033:0x7f074f78ebe9 [ 710.741929][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.741954][T16051] RSP: 002b:00007f075069c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.741981][T16051] RAX: fffffffffffffe00 RBX: 00007f074f9b6098 RCX: 00007f074f78ebe9 [ 710.741998][T16051] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f074f9b6098 [ 710.742014][T16051] RBP: 00007f074f9b6090 R08: 0000000000000000 R09: 0000000000000000 [ 710.742029][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.742045][T16051] R13: 00007f074f9b6128 R14: 00007ffdf4b83c90 R15: 00007ffdf4b83d78 [ 710.742072][T16051] [ 711.589818][T16065] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1989'. [ 713.719165][T16102] FAULT_INJECTION: forcing a failure. [ 713.719165][T16102] name fail_futex, interval 1, probability 0, space 0, times 0 [ 713.742379][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.5.1990 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 713.742428][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.742449][T16102] Call Trace: [ 713.742461][T16102] [ 713.742472][T16102] dump_stack_lvl+0x16c/0x1f0 [ 713.742520][T16102] should_fail_ex+0x512/0x640 [ 713.742568][T16102] get_futex_key+0x1d0/0x1560 [ 713.742609][T16102] ? __pfx_get_futex_key+0x10/0x10 [ 713.742647][T16102] ? lock_release+0x201/0x2f0 [ 713.742694][T16102] futex_wake+0xea/0x530 [ 713.742744][T16102] ? futex_wait+0x120/0x380 [ 713.742819][T16102] ? __pfx_futex_wait+0x10/0x10 [ 713.742868][T16102] ? ksys_write+0x12a/0x250 [ 713.742905][T16102] ? __pfx_futex_wake+0x10/0x10 [ 713.742965][T16102] ? rcu_is_watching+0x12/0xc0 [ 713.742997][T16102] ? rcu_is_watching+0x12/0xc0 [ 713.743034][T16102] do_futex+0x1e3/0x350 [ 713.743074][T16102] ? __pfx_do_futex+0x10/0x10 [ 713.743113][T16102] ? find_get_task_by_vpid+0x1a8/0x310 [ 713.743162][T16102] ? yama_task_prctl+0xbb/0x1d0 [ 713.743211][T16102] __x64_sys_futex+0x1e0/0x4c0 [ 713.743256][T16102] ? __pfx___x64_sys_futex+0x10/0x10 [ 713.743299][T16102] ? __pfx___do_sys_prctl+0x10/0x10 [ 713.743365][T16102] do_syscall_64+0xcd/0x490 [ 713.743408][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.743440][T16102] RIP: 0033:0x7f074f78ebe9 [ 713.743464][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.743496][T16102] RSP: 002b:00007f07506bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 713.743527][T16102] RAX: ffffffffffffffda RBX: 00007f074f9b5fa8 RCX: 00007f074f78ebe9 [ 713.743549][T16102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f074f9b5fac [ 713.743570][T16102] RBP: 00007f074f9b5fa0 R08: 00007f07506be000 R09: 0000000000000000 [ 713.743591][T16102] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 713.743612][T16102] R13: 00007f074f9b6038 R14: 00007ffdf4b83c90 R15: 00007ffdf4b83d78 [ 713.743660][T16102] [ 714.296368][T16107] random: crng reseeded on system resumption [ 714.321206][T12561] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:18: iget: checksum invalid [ 714.381835][T12561] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 714.395678][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 714.461641][T12562] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 714.498971][T12561] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:18: iget: checksum invalid [ 714.545395][T12561] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 714.555593][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 714.577642][T12562] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 714.591112][T12561] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:18: iget: checksum invalid [ 714.629167][T12561] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 714.642245][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 714.666102][T12562] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 714.685016][T12561] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:18: iget: checksum invalid [ 714.705280][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 714.720061][T12561] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 714.746912][T12561] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 714.757964][T12562] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 714.784964][T12561] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 714.797227][T12562] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 714.835633][T12562] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 725.214278][T16153] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 726.897712][T16220] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 36 out of range (51000000..2150000000) [ 726.993509][T16225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 728.644556][T16262] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 730.390935][T16326] ima: policy update failed [ 730.453137][ T30] audit: type=1802 audit(1843105849.189:44): pid=16326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2024" res=0 errno=0 [ 731.015234][T16335] CIFS: VFS: Invalid SecurityFlags: [ 731.109337][T16337] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2029: iget: checksum invalid [ 731.130851][T16337] faux_driver regulatory: loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 731.214833][T16337] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2029: iget: checksum invalid [ 731.229748][T16337] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 731.265579][T16337] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2029: iget: checksum invalid [ 731.351224][T16337] faux_driver regulatory: loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 731.366098][T16337] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.2029: iget: checksum invalid [ 731.564155][T16337] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 731.685821][T16337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 731.696498][T16337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 732.145197][T16360] FAULT_INJECTION: forcing a failure. [ 732.145197][T16360] name failslab, interval 1, probability 0, space 0, times 0 [ 732.178188][T16360] CPU: 0 UID: 0 PID: 16360 Comm: syz.5.2031 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 732.178247][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 732.178268][T16360] Call Trace: [ 732.178279][T16360] [ 732.178290][T16360] dump_stack_lvl+0x16c/0x1f0 [ 732.178336][T16360] should_fail_ex+0x512/0x640 [ 732.178387][T16360] should_failslab+0xc2/0x120 [ 732.178431][T16360] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 732.178469][T16360] ? __kernfs_new_node+0x2fd/0x8e0 [ 732.178508][T16360] ? __kernfs_new_node+0xd2/0x8e0 [ 732.178551][T16360] __kernfs_new_node+0xd2/0x8e0 [ 732.178593][T16360] ? rcu_is_watching+0x12/0xc0 [ 732.178628][T16360] ? __pfx___kernfs_new_node+0x10/0x10 [ 732.178669][T16360] ? __pfx___might_resched+0x10/0x10 [ 732.178704][T16360] ? rcu_is_watching+0x12/0xc0 [ 732.178739][T16360] ? kernfs_root+0xee/0x2a0 [ 732.178776][T16360] ? rcu_is_watching+0x12/0xc0 [ 732.178808][T16360] ? lock_release+0x201/0x2f0 [ 732.178852][T16360] kernfs_new_node+0x13c/0x1e0 [ 732.178903][T16360] __kernfs_create_file+0x53/0x350 [ 732.178937][T16360] sysfs_add_file_mode_ns+0x207/0x3c0 [ 732.178979][T16360] internal_create_group+0x578/0xf30 [ 732.179027][T16360] ? __pfx_internal_create_group+0x10/0x10 [ 732.179072][T16360] ? kernfs_create_link+0x1bd/0x240 [ 732.179109][T16360] internal_create_groups+0x9d/0x150 [ 732.179154][T16360] device_add+0xf30/0x1aa0 [ 732.179187][T16360] ? __pfx_device_add+0x10/0x10 [ 732.179229][T16360] ? lockdep_init_map_type+0x5c/0x280 [ 732.179274][T16360] ? __init_waitqueue_head+0xca/0x150 [ 732.179329][T16360] netdev_register_kobject+0x1a9/0x3d0 [ 732.179382][T16360] register_netdevice+0x13dc/0x2270 [ 732.179431][T16360] ? __pfx_register_netdevice+0x10/0x10 [ 732.179482][T16360] __tun_chr_ioctl+0x1ed9/0x48b0 [ 732.179513][T16360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 732.179570][T16360] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 732.179623][T16360] ? rcu_is_watching+0x12/0xc0 [ 732.179658][T16360] ? hook_file_ioctl_common+0x145/0x410 [ 732.179705][T16360] ? __fget_files+0x20e/0x3c0 [ 732.179764][T16360] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 732.179796][T16360] __x64_sys_ioctl+0x18b/0x210 [ 732.179846][T16360] do_syscall_64+0xcd/0x490 [ 732.179891][T16360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.179923][T16360] RIP: 0033:0x7f074f78ebe9 [ 732.179949][T16360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.179982][T16360] RSP: 002b:00007f07506bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.180015][T16360] RAX: ffffffffffffffda RBX: 00007f074f9b5fa0 RCX: 00007f074f78ebe9 [ 732.180037][T16360] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 732.180056][T16360] RBP: 00007f074f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 732.180076][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.180096][T16360] R13: 00007f074f9b6038 R14: 00007f074f9b5fa0 R15: 00007ffdf4b83d78 [ 732.180128][T16360] [ 732.478945][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.579484][T16369] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 734.878849][T16403] bond0: no command found in slaves file - use +ifname or -ifname [ 734.911584][T16403] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 735.316740][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 735.334864][T16410] nbd: must specify a size in bytes for the device [ 736.107129][T16425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2047'. [ 736.209525][ T30] audit: type=1800 audit(1843105854.937:45): pid=16422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2046" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 736.440539][T16436] ICMPv6: process `syz.2.2050' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 736.494841][T16440] program syz.6.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.561090][T16445] random: crng reseeded on system resumption [ 736.869822][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 736.997154][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:28: iget: checksum invalid [ 737.009867][T10256] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 737.057773][T15969] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 737.119591][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 737.191149][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:28: iget: checksum invalid [ 737.204018][T10256] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 737.286971][T15969] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 737.297545][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 737.351150][T10256] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 737.365823][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:28: iget: checksum invalid [ 737.502610][T15969] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 737.566729][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 737.610966][T10256] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 737.621442][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:28: iget: checksum invalid [ 737.689951][T10256] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 737.703583][T15969] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 737.736771][T10256] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 737.745190][T15969] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 737.809378][T15969] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 741.084687][T16493] netlink: 4792 bytes leftover after parsing attributes in process `syz.6.2062'. [ 748.389538][T16501] serio: Serial port pty6 [ 751.203587][T16557] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2072'. [ 752.163668][ T30] audit: type=1800 audit(1843105870.879:46): pid=16564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2075" name="members" dev="configfs" ino=65681 res=0 errno=0 [ 752.725436][T16570] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2077'. [ 753.391547][T16592] FAULT_INJECTION: forcing a failure. [ 753.391547][T16592] name failslab, interval 1, probability 0, space 0, times 0 [ 753.540643][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.5.2081 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 753.540680][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.540695][T16592] Call Trace: [ 753.540703][T16592] [ 753.540712][T16592] dump_stack_lvl+0x16c/0x1f0 [ 753.540745][T16592] should_fail_ex+0x512/0x640 [ 753.540780][T16592] should_failslab+0xc2/0x120 [ 753.540812][T16592] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 753.540841][T16592] ? __d_alloc+0x32/0xae0 [ 753.540870][T16592] __d_alloc+0x32/0xae0 [ 753.540899][T16592] d_alloc+0x4a/0x1e0 [ 753.540928][T16592] lookup_one_qstr_excl+0x175/0x250 [ 753.540964][T16592] ? mnt_want_write+0x161/0x450 [ 753.540985][T16592] filename_create+0x1e7/0x4a0 [ 753.541010][T16592] ? __pfx_filename_create+0x10/0x10 [ 753.541034][T16592] ? rcu_is_watching+0x12/0xc0 [ 753.541058][T16592] ? __might_fault+0x13b/0x190 [ 753.541083][T16592] ? rcu_is_watching+0x12/0xc0 [ 753.541106][T16592] ? __might_fault+0xe3/0x190 [ 753.541130][T16592] ? lock_release+0x201/0x2f0 [ 753.541161][T16592] do_mkdirat+0xaa/0x3e0 [ 753.541188][T16592] ? __pfx_do_mkdirat+0x10/0x10 [ 753.541216][T16592] ? getname_flags.part.0+0x1c5/0x550 [ 753.541253][T16592] __x64_sys_mkdir+0xef/0x140 [ 753.541284][T16592] do_syscall_64+0xcd/0x490 [ 753.541316][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.541340][T16592] RIP: 0033:0x7f074f78ebe9 [ 753.541358][T16592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.541382][T16592] RSP: 002b:00007f07506bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 753.541404][T16592] RAX: ffffffffffffffda RBX: 00007f074f9b5fa0 RCX: 00007f074f78ebe9 [ 753.541427][T16592] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000100 [ 753.541442][T16592] RBP: 00007f074f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 753.541457][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.541471][T16592] R13: 00007f074f9b6038 R14: 00007f074f9b5fa0 R15: 00007ffdf4b83d78 [ 753.541493][T16592] [ 754.292114][T16597] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2082'. [ 754.357840][T16601] blktrace: Concurrent blktraces are not allowed on ram7 [ 754.677122][T16613] FAULT_INJECTION: forcing a failure. [ 754.677122][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 754.677165][T16613] CPU: 1 UID: 0 PID: 16613 Comm: syz.2.2085 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 754.677205][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.677236][T16613] Call Trace: [ 754.677246][T16613] [ 754.677258][T16613] dump_stack_lvl+0x16c/0x1f0 [ 754.677301][T16613] should_fail_ex+0x512/0x640 [ 754.677352][T16613] should_failslab+0xc2/0x120 [ 754.677396][T16613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 754.677434][T16613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.677480][T16613] ? mas_alloc_nodes+0x18b/0x8b0 [ 754.677516][T16613] mas_alloc_nodes+0x18b/0x8b0 [ 754.677555][T16613] mas_node_count_gfp+0x105/0x130 [ 754.677592][T16613] mas_preallocate+0x7e0/0xde0 [ 754.677641][T16613] ? __pfx_mas_preallocate+0x10/0x10 [ 754.677692][T16613] ? anon_vma_name+0x81/0x2f0 [ 754.677740][T16613] __split_vma+0x34a/0x1070 [ 754.677776][T16613] ? __pfx___split_vma+0x10/0x10 [ 754.677809][T16613] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.677852][T16613] ? unwind_get_return_address+0x59/0xa0 [ 754.677885][T16613] ? arch_stack_walk+0xa6/0x100 [ 754.677922][T16613] vma_modify+0xee1/0x2030 [ 754.677957][T16613] ? _parse_integer_limit+0x17f/0x1d0 [ 754.677997][T16613] ? __pfx_vma_modify+0x10/0x10 [ 754.678049][T16613] ? aa_file_perm+0x28f/0x12e0 [ 754.678096][T16613] ? rcu_is_watching+0x12/0xc0 [ 754.678130][T16613] vma_modify_flags+0x212/0x2d0 [ 754.678166][T16613] ? __pfx_vma_modify_flags+0x10/0x10 [ 754.678221][T16613] mprotect_fixup+0x1df/0xb40 [ 754.678258][T16613] ? __pfx_mprotect_fixup+0x10/0x10 [ 754.678297][T16613] do_mprotect_pkey+0x9ca/0xd50 [ 754.678335][T16613] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 754.678369][T16613] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 754.678417][T16613] ? __fget_files+0x20e/0x3c0 [ 754.678465][T16613] ? __pfx_ksys_write+0x10/0x10 [ 754.678507][T16613] __x64_sys_mprotect+0x78/0xc0 [ 754.678540][T16613] do_syscall_64+0xcd/0x490 [ 754.678583][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.678615][T16613] RIP: 0033:0x7f0d0b58ebe9 [ 754.678637][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.678669][T16613] RSP: 002b:00007f0d0c411038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 754.678700][T16613] RAX: ffffffffffffffda RBX: 00007f0d0b7b5fa0 RCX: 00007f0d0b58ebe9 [ 754.678722][T16613] RDX: 0000000000000004 RSI: 0000000000401000 RDI: 0000000000001000 [ 754.678741][T16613] RBP: 00007f0d0c411090 R08: 0000000000000000 R09: 0000000000000000 [ 754.678761][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.678780][T16613] R13: 00007f0d0b7b6038 R14: 00007f0d0b7b5fa0 R15: 00007ffffd4ae7a8 [ 754.678812][T16613] [ 757.543264][T16664] FAULT_INJECTION: forcing a failure. [ 757.543264][T16664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.736461][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.3.2094 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 757.736496][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.736510][T16664] Call Trace: [ 757.736518][T16664] [ 757.736526][T16664] dump_stack_lvl+0x16c/0x1f0 [ 757.736563][T16664] should_fail_ex+0x512/0x640 [ 757.736599][T16664] _copy_to_user+0x32/0xd0 [ 757.736621][T16664] simple_read_from_buffer+0xcb/0x170 [ 757.736645][T16664] proc_fail_nth_read+0x197/0x240 [ 757.736669][T16664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.736693][T16664] ? security_file_permission+0x71/0x210 [ 757.736727][T16664] ? rw_verify_area+0xcf/0x6c0 [ 757.736749][T16664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.736773][T16664] vfs_read+0x1e1/0xcf0 [ 757.736799][T16664] ? __pfx___mutex_lock+0x10/0x10 [ 757.736830][T16664] ? __pfx_vfs_read+0x10/0x10 [ 757.736854][T16664] ? __fget_files+0x204/0x3c0 [ 757.736878][T16664] ? rcu_is_watching+0x12/0xc0 [ 757.736904][T16664] ? __fget_files+0x20e/0x3c0 [ 757.736932][T16664] ksys_read+0x12a/0x250 [ 757.736957][T16664] ? __pfx_ksys_read+0x10/0x10 [ 757.736986][T16664] do_syscall_64+0xcd/0x490 [ 757.737018][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.737042][T16664] RIP: 0033:0x7f2c76d8d5fc [ 757.737059][T16664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 757.737082][T16664] RSP: 002b:00007f2c77bf9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.737104][T16664] RAX: ffffffffffffffda RBX: 00007f2c76fb5fa0 RCX: 00007f2c76d8d5fc [ 757.737119][T16664] RDX: 000000000000000f RSI: 00007f2c77bf90a0 RDI: 0000000000000003 [ 757.737133][T16664] RBP: 00007f2c77bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 757.737147][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.737160][T16664] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 757.737182][T16664] [ 757.942921][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.077020][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.083751][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.173338][T16711] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2102'. [ 763.412702][ T980] Process accounting resumed [ 763.771850][T16760] bond0: option all_slaves_active: invalid value () [ 764.502001][T16770] sock: sock_timestamping_bind_phc: sock not bind to device [ 766.277423][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 766.970891][T16825] net_ratelimit: 75 callbacks suppressed [ 766.970918][T16825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 766.983107][T16825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 767.981259][T16846] zswap: compressor not available [ 769.517208][T16898] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 770.280668][T16907] i2c i2c-0: delete_device: Can't parse I2C address [ 770.313394][T16907] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2142'. [ 770.758726][T16920] kexec: Could not allocate control_code_buffer [ 771.171797][T16930] syz.2.2144 (16930): attempted to duplicate a private mapping with mremap. This is not supported. [ 771.793301][T16952] zram0: detected capacity change from 0 to 8 [ 772.281201][T16962] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2150'. [ 772.311539][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 772.705989][T16969] FAULT_INJECTION: forcing a failure. [ 772.705989][T16969] name failslab, interval 1, probability 0, space 0, times 0 [ 772.750686][T16969] CPU: 0 UID: 0 PID: 16969 Comm: syz.6.2152 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 772.750725][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 772.750740][T16969] Call Trace: [ 772.750748][T16969] [ 772.750757][T16969] dump_stack_lvl+0x16c/0x1f0 [ 772.750790][T16969] should_fail_ex+0x512/0x640 [ 772.750825][T16969] ? __register_sysctl_table+0xea2/0x1900 [ 772.750860][T16969] should_failslab+0xc2/0x120 [ 772.750892][T16969] __kmalloc_noprof+0xd2/0x510 [ 772.750919][T16969] ? lock_release+0x201/0x2f0 [ 772.750952][T16969] __register_sysctl_table+0xea2/0x1900 [ 772.750991][T16969] ? __pfx___register_sysctl_table+0x10/0x10 [ 772.751026][T16969] ? is_module_address+0x69/0xf0 [ 772.751066][T16969] ? register_net_sysctl_sz+0x228/0x3e0 [ 772.751101][T16969] ? __asan_memcpy+0x3c/0x60 [ 772.751125][T16969] sysctl_core_net_init+0xe3/0x280 [ 772.751150][T16969] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 772.751174][T16969] ops_init+0x1df/0x5f0 [ 772.751207][T16969] setup_net+0x10f/0x380 [ 772.751237][T16969] ? lockdep_init_map_type+0x5c/0x280 [ 772.751269][T16969] ? __pfx_setup_net+0x10/0x10 [ 772.751301][T16969] ? debug_mutex_init+0x37/0x70 [ 772.751325][T16969] copy_net_ns+0x2a6/0x5f0 [ 772.751360][T16969] create_new_namespaces+0x3ea/0xa90 [ 772.751390][T16969] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 772.751419][T16969] ksys_unshare+0x45b/0xa40 [ 772.751451][T16969] ? __pfx_ksys_unshare+0x10/0x10 [ 772.751483][T16969] ? xfd_validate_state+0x61/0x180 [ 772.751522][T16969] __x64_sys_unshare+0x31/0x40 [ 772.751553][T16969] do_syscall_64+0xcd/0x490 [ 772.751585][T16969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.751609][T16969] RIP: 0033:0x7f3c5c18ebe9 [ 772.751626][T16969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.751650][T16969] RSP: 002b:00007f3c5d039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 772.751672][T16969] RAX: ffffffffffffffda RBX: 00007f3c5c3b5fa0 RCX: 00007f3c5c18ebe9 [ 772.751688][T16969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 772.751702][T16969] RBP: 00007f3c5c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 772.751716][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.751731][T16969] R13: 00007f3c5c3b6038 R14: 00007f3c5c3b5fa0 R15: 00007ffffd7b3358 [ 772.751753][T16969] [ 772.751762][T16969] sysctl could not get directory: /net/core -12 [ 773.635034][T16976] could not allocate digest TFM handle [ 773.713010][T16986] random: crng reseeded on system resumption [ 773.773706][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 773.803855][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 773.825944][T10247] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 773.830500][T16984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2153'. [ 773.973746][T10256] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 774.005052][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 774.026776][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 774.038343][T10247] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 774.105248][T10256] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 774.115764][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 774.254832][T10247] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 774.274977][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 774.384632][T10256] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 774.386011][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 774.490402][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 774.509060][T10247] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 774.545167][T10256] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 774.562128][T10247] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 774.587548][T10256] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 774.613466][T10247] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 774.723033][T10256] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 785.584339][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 785.599504][T10252] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 785.630832][T10252] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 785.644365][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 785.658773][T10256] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 785.686313][T10252] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 785.710989][T10252] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 785.721373][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 785.746234][T10256] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 785.755982][T17032] netlink: 'syz.5.2165': attribute type 4 has an invalid length. [ 785.756758][T10252] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 785.777558][T17032] netlink: 314 bytes leftover after parsing attributes in process `syz.5.2165'. [ 785.801580][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 785.815246][T10252] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 785.836692][T10256] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 785.870703][T10252] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 785.904158][T10256] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 785.916130][T10252] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 786.034643][T10252] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 786.035416][T17038] FAULT_INJECTION: forcing a failure. [ 786.035416][T17038] name failslab, interval 1, probability 0, space 0, times 0 [ 786.044762][T10256] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 786.107281][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.5.2167 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 786.107329][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.107350][T17038] Call Trace: [ 786.107362][T17038] [ 786.107376][T17038] dump_stack_lvl+0x16c/0x1f0 [ 786.107423][T17038] should_fail_ex+0x512/0x640 [ 786.107472][T17038] should_failslab+0xc2/0x120 [ 786.107517][T17038] __kvmalloc_node_noprof+0x137/0x620 [ 786.107555][T17038] ? lockdep_init_map_type+0x5c/0x280 [ 786.107600][T17038] ? __v4l2_subdev_state_alloc+0x1a7/0x400 [ 786.107639][T17038] ? __v4l2_subdev_state_alloc+0x1a7/0x400 [ 786.107673][T17038] __v4l2_subdev_state_alloc+0x1a7/0x400 [ 786.107709][T17038] subdev_open+0xa6/0x560 [ 786.107741][T17038] v4l2_open+0x225/0x490 [ 786.107781][T17038] ? __pfx_v4l2_open+0x10/0x10 [ 786.107821][T17038] chrdev_open+0x234/0x6a0 [ 786.107862][T17038] ? __pfx_apparmor_file_open+0x10/0x10 [ 786.107899][T17038] ? __pfx_chrdev_open+0x10/0x10 [ 786.107941][T17038] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 786.107983][T17038] do_dentry_open+0x982/0x1530 [ 786.108025][T17038] ? __pfx_chrdev_open+0x10/0x10 [ 786.108080][T17038] vfs_open+0x82/0x3f0 [ 786.108131][T17038] path_openat+0x1de4/0x2cb0 [ 786.108178][T17038] ? __pfx_path_openat+0x10/0x10 [ 786.108222][T17038] do_filp_open+0x20b/0x470 [ 786.108273][T17038] ? __pfx_do_filp_open+0x10/0x10 [ 786.108325][T17038] ? alloc_fd+0x471/0x7d0 [ 786.108364][T17038] do_sys_openat2+0x11b/0x1d0 [ 786.108412][T17038] ? __pfx_do_sys_openat2+0x10/0x10 [ 786.108470][T17038] __x64_sys_openat+0x174/0x210 [ 786.108519][T17038] ? __pfx___x64_sys_openat+0x10/0x10 [ 786.108598][T17038] do_syscall_64+0xcd/0x490 [ 786.108644][T17038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.108678][T17038] RIP: 0033:0x7f074f78ebe9 [ 786.108703][T17038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.108737][T17038] RSP: 002b:00007f07506bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.108771][T17038] RAX: ffffffffffffffda RBX: 00007f074f9b5fa0 RCX: 00007f074f78ebe9 [ 786.108794][T17038] RDX: 0000000000080002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 786.108816][T17038] RBP: 00007f074f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 786.108838][T17038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.108859][T17038] R13: 00007f074f9b6038 R14: 00007f074f9b5fa0 R15: 00007ffdf4b83d78 [ 786.108892][T17038] [ 786.358979][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.463500][T10252] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 786.472300][T10256] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 786.481878][T10256] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 796.906985][T17026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 796.913203][T17026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 796.920186][T17026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 796.926612][T17026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 798.434362][ T30] audit: type=1326 audit(1843105917.126:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17106 comm="syz.6.2181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c5c18ebe9 code=0x0 [ 798.492775][T17109] FAULT_INJECTION: forcing a failure. [ 798.492775][T17109] name failslab, interval 1, probability 0, space 0, times 0 [ 798.513652][T17109] CPU: 0 UID: 0 PID: 17109 Comm: syz.6.2181 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 798.513687][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.513703][T17109] Call Trace: [ 798.513710][T17109] [ 798.513725][T17109] dump_stack_lvl+0x16c/0x1f0 [ 798.513768][T17109] should_fail_ex+0x512/0x640 [ 798.513804][T17109] should_failslab+0xc2/0x120 [ 798.513841][T17109] __kmalloc_cache_noprof+0x6a/0x3e0 [ 798.513867][T17109] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 798.513911][T17109] ? kasan_save_track+0x14/0x30 [ 798.513942][T17109] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 798.513985][T17109] ? __mutex_lock+0x1c5/0x1060 [ 798.514023][T17109] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 798.514066][T17109] ? __pfx___mutex_lock+0x10/0x10 [ 798.514100][T17109] ? __fsnotify_parent+0x24b/0xc40 [ 798.514128][T17109] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 798.514152][T17109] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 798.514181][T17109] snd_pcm_oss_sync+0x1de/0x840 [ 798.514204][T17109] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 798.514227][T17109] snd_pcm_oss_release+0x28b/0x310 [ 798.514258][T17109] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 798.514282][T17109] __fput+0x402/0xb70 [ 798.514318][T17109] task_work_run+0x150/0x240 [ 798.514356][T17109] ? __pfx_task_work_run+0x10/0x10 [ 798.514394][T17109] ? __pfx___do_sys_close_range+0x10/0x10 [ 798.514425][T17109] exit_to_user_mode_loop+0xeb/0x110 [ 798.514461][T17109] do_syscall_64+0x3f6/0x490 [ 798.514493][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.514518][T17109] RIP: 0033:0x7f3c5c18ebe9 [ 798.514536][T17109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.514560][T17109] RSP: 002b:00007f3c5d018038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 798.514583][T17109] RAX: 0000000000000000 RBX: 00007f3c5c3b6090 RCX: 00007f3c5c18ebe9 [ 798.514599][T17109] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 798.514614][T17109] RBP: 00007f3c5c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.514629][T17109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.514643][T17109] R13: 00007f3c5c3b6128 R14: 00007f3c5c3b6090 R15: 00007ffffd7b3358 [ 798.514665][T17109] [ 798.745972][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.060835][T14453] Bluetooth: hci2: command 0x0c1a tx timeout [ 799.068667][T14453] Bluetooth: hci3: command 0x0c1a tx timeout [ 799.077287][T14453] Bluetooth: hci0: command 0x0406 tx timeout [ 799.088341][T14453] Bluetooth: hci1: command 0x0406 tx timeout [ 800.467646][T17142] UHID_CREATE from different security context by process 2121 (syz.2.2187), this is not allowed. [ 800.588712][T17142] FAULT_INJECTION: forcing a failure. [ 800.588712][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 800.700419][T17142] CPU: 0 UID: 0 PID: 17142 Comm: syz.2.2187 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 800.700469][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.700491][T17142] Call Trace: [ 800.700502][T17142] [ 800.700516][T17142] dump_stack_lvl+0x16c/0x1f0 [ 800.700562][T17142] should_fail_ex+0x512/0x640 [ 800.700611][T17142] should_failslab+0xc2/0x120 [ 800.700652][T17142] __kmalloc_cache_noprof+0x6a/0x3e0 [ 800.700686][T17142] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 800.700746][T17142] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 800.700802][T17142] ? trace_contention_end+0xdd/0x130 [ 800.700847][T17142] ? __mutex_lock+0x1c5/0x1060 [ 800.700910][T17142] ? tomoyo_path_number_perm+0x18d/0x580 [ 800.700950][T17142] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 800.701003][T17142] ? __pfx___mutex_lock+0x10/0x10 [ 800.701050][T17142] ? rcu_is_watching+0x12/0xc0 [ 800.701081][T17142] ? __might_fault+0xe3/0x190 [ 800.701119][T17142] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 800.701176][T17142] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 800.701207][T17142] ? __fget_files+0x204/0x3c0 [ 800.701238][T17142] ? hook_file_ioctl_common+0x145/0x410 [ 800.701280][T17142] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 800.701311][T17142] ? __fget_files+0x20e/0x3c0 [ 800.701347][T17142] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 800.701397][T17142] __x64_sys_ioctl+0x18b/0x210 [ 800.701455][T17142] do_syscall_64+0xcd/0x490 [ 800.701500][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.701533][T17142] RIP: 0033:0x7f0d0b58ebe9 [ 800.701558][T17142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.701592][T17142] RSP: 002b:00007f0d0c411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.701622][T17142] RAX: ffffffffffffffda RBX: 00007f0d0b7b5fa0 RCX: 00007f0d0b58ebe9 [ 800.701639][T17142] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 800.701655][T17142] RBP: 00007f0d0b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 800.701670][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.701685][T17142] R13: 00007f0d0b7b6038 R14: 00007f0d0b7b5fa0 R15: 00007ffffd4ae7a8 [ 800.701708][T17142] [ 800.932553][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.324369][T17162] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 803.647382][T17203] random: crng reseeded on system resumption [ 803.654923][T10284] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 803.720524][T10284] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 803.749537][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 803.864520][T12555] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 803.882076][T10284] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 803.914873][T10284] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 803.928302][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 803.956155][T10284] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 803.968617][T12555] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 804.018290][T10284] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 804.033682][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 804.090976][T12555] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 804.104164][T10284] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 804.167035][ T30] audit: type=1326 audit(1843105922.863:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17210 comm="syz.5.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074f78ebe9 code=0x0 [ 804.179066][T10284] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 804.204762][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 804.232582][T17216] FAULT_INJECTION: forcing a failure. [ 804.232582][T17216] name failslab, interval 1, probability 0, space 0, times 0 [ 804.279808][T17216] CPU: 1 UID: 0 PID: 17216 Comm: syz.5.2201 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 804.279856][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.279875][T17216] Call Trace: [ 804.279886][T17216] [ 804.279898][T17216] dump_stack_lvl+0x16c/0x1f0 [ 804.279939][T17216] should_fail_ex+0x512/0x640 [ 804.279975][T17216] should_failslab+0xc2/0x120 [ 804.280007][T17216] __kmalloc_cache_noprof+0x6a/0x3e0 [ 804.280032][T17216] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 804.280073][T17216] ? kasan_save_track+0x14/0x30 [ 804.280101][T17216] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 804.280145][T17216] ? __mutex_lock+0x1c5/0x1060 [ 804.280178][T17216] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 804.280219][T17216] ? __pfx___mutex_lock+0x10/0x10 [ 804.280252][T17216] ? __fsnotify_parent+0x24b/0xc40 [ 804.280281][T17216] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 804.280303][T17216] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 804.280325][T17216] snd_pcm_oss_sync+0x1de/0x840 [ 804.280348][T17216] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 804.280371][T17216] snd_pcm_oss_release+0x28b/0x310 [ 804.280393][T17216] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 804.280424][T17216] __fput+0x402/0xb70 [ 804.280461][T17216] task_work_run+0x150/0x240 [ 804.280500][T17216] ? __pfx_task_work_run+0x10/0x10 [ 804.280537][T17216] ? __pfx___do_sys_close_range+0x10/0x10 [ 804.280569][T17216] exit_to_user_mode_loop+0xeb/0x110 [ 804.280605][T17216] do_syscall_64+0x3f6/0x490 [ 804.280637][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.280661][T17216] RIP: 0033:0x7f074f78ebe9 [ 804.280678][T17216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.280702][T17216] RSP: 002b:00007f075067b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 804.280724][T17216] RAX: 0000000000000000 RBX: 00007f074f9b6180 RCX: 00007f074f78ebe9 [ 804.280740][T17216] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 804.280766][T17216] RBP: 00007f074f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 804.280781][T17216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.280794][T17216] R13: 00007f074f9b6218 R14: 00007f074f9b6180 R15: 00007ffdf4b83d78 [ 804.280815][T17216] [ 804.285064][T12555] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 804.540657][T10284] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 804.577034][T10284] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 804.910118][T12555] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 804.919690][T12555] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 815.951630][T17243] sctp: [Deprecated]: syz.6.2208 (pid 17243) Use of int in max_burst socket option deprecated. [ 815.951630][T17243] Use struct sctp_assoc_value instead [ 818.463601][T17289] could not allocate digest TFM handle [ 819.192439][T17321] random: crng reseeded on system resumption [ 819.280135][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.286515][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.297285][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 819.343284][T17084] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: checksum invalid [ 819.355239][T12555] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 819.378018][T17084] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 819.401854][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 819.424693][T17084] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: checksum invalid [ 819.438723][T12555] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 819.467446][T17084] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 819.482077][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 819.549004][T12555] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 819.561798][T17084] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: checksum invalid [ 819.593729][T17084] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 819.619422][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:12: iget: checksum invalid [ 819.639159][T17084] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:35: iget: checksum invalid [ 819.657455][T12555] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 819.676969][T17084] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 819.692635][T12555] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 819.712205][T12555] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 819.728704][T17084] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 819.758143][T17084] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 819.771711][T17331] openvswitch: netlink: IPv6 tunnel dst address is zero [ 819.850978][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 819.895447][T17331] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2228'. [ 823.405491][T17375] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 830.429228][T17577] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 830.789744][T17585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2241'. [ 833.312495][T17642] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 833.350016][T17642] FAULT_INJECTION: forcing a failure. [ 833.350016][T17642] name failslab, interval 1, probability 0, space 0, times 0 [ 833.396373][T17642] CPU: 0 UID: 0 PID: 17642 Comm: syz.3.2250 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 833.396422][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.396442][T17642] Call Trace: [ 833.396453][T17642] [ 833.396472][T17642] dump_stack_lvl+0x16c/0x1f0 [ 833.396519][T17642] should_fail_ex+0x512/0x640 [ 833.396568][T17642] should_failslab+0xc2/0x120 [ 833.396611][T17642] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 833.396654][T17642] ? __pfx_proc_create_net_data+0x10/0x10 [ 833.396705][T17642] ? nf_log_net_init+0x9f/0x450 [ 833.396747][T17642] ? __pfx_nf_log_net_init+0x10/0x10 [ 833.396792][T17642] kmemdup_noprof+0x29/0x60 [ 833.396833][T17642] nf_log_net_init+0x9f/0x450 [ 833.396877][T17642] ? __pfx_nf_log_net_init+0x10/0x10 [ 833.396921][T17642] ops_init+0x1df/0x5f0 [ 833.396966][T17642] setup_net+0x10f/0x380 [ 833.397008][T17642] ? lockdep_init_map_type+0x5c/0x280 [ 833.397054][T17642] ? __pfx_setup_net+0x10/0x10 [ 833.397098][T17642] ? debug_mutex_init+0x37/0x70 [ 833.397131][T17642] copy_net_ns+0x2a6/0x5f0 [ 833.397181][T17642] create_new_namespaces+0x3ea/0xa90 [ 833.397222][T17642] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 833.397261][T17642] ksys_unshare+0x45b/0xa40 [ 833.397306][T17642] ? __pfx_ksys_unshare+0x10/0x10 [ 833.397351][T17642] ? xfd_validate_state+0x61/0x180 [ 833.397411][T17642] __x64_sys_unshare+0x31/0x40 [ 833.397455][T17642] do_syscall_64+0xcd/0x490 [ 833.397509][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.397544][T17642] RIP: 0033:0x7f2c76d8ebe9 [ 833.397569][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.397603][T17642] RSP: 002b:00007f2c77bf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 833.397638][T17642] RAX: ffffffffffffffda RBX: 00007f2c76fb5fa0 RCX: 00007f2c76d8ebe9 [ 833.397661][T17642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 833.397681][T17642] RBP: 00007f2c76e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 833.397702][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.397722][T17642] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 833.397755][T17642] [ 833.626893][ C0] vkms_vblank_simulate: vblank timer overrun [ 835.520549][T17706] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 836.411777][T17720] openvswitch: netlink: IPv6 tunnel dst address is zero [ 836.449649][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 836.489176][T17720] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2258'. [ 837.658700][T17755] : Can't lookup blockdev [ 838.394357][T12567] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:24: iget: checksum invalid [ 838.429417][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 838.440274][T17767] Invalid ELF header magic: != ELF [ 838.441358][T12567] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 838.487474][T10247] (NULL device *): loading /lib/firmware/updates/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 838.547249][T12567] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:24: iget: checksum invalid [ 838.600319][T12567] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 838.610578][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 838.637841][T10247] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 838.648050][T12567] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:24: iget: checksum invalid [ 838.677979][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 838.707044][T12567] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db failed with error -74 [ 838.757911][T10247] (NULL device *): loading /lib/firmware/6.17.0-rc1-syzkaller-00224-g8d561baae505/regulatory.db.p7s failed with error -74 [ 838.780563][T12567] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:24: iget: checksum invalid [ 838.863526][T12567] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 838.873281][T10247] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 838.920935][T12567] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 838.962337][T10247] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 839.010632][T12567] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 839.037135][T10247] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 839.058551][T10247] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 839.476830][T17809] can: request_module (can-proto-3) failed. [ 849.413825][T17769] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 849.431336][T17769] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 849.437957][T17769] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.448626][T17769] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 849.463305][T17795] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 849.492487][T17831] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 850.374058][T17929] ptrace attach of "./syz-executor exec"[17932] was attempted by "./syz-executor exec"[17929] [ 851.453401][T14453] Bluetooth: hci3: command 0x0c1a tx timeout [ 851.459452][T10374] Bluetooth: hci0: command 0x0406 tx timeout [ 851.465906][T10374] Bluetooth: hci1: command 0x0406 tx timeout [ 851.472002][T10258] Bluetooth: hci2: command 0x0c1a tx timeout [ 852.767577][T17966] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139 [ 852.860895][T17971] QAT: Device 86 not found [ 853.164524][T17975] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 853.609764][T15868] ------------[ cut here ]------------ [ 853.615469][T15868] ODEBUG: free active (active state 0) object: ffff8880579cd358 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 853.729443][T15868] WARNING: CPU: 0 PID: 15868 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 853.739201][T15868] Modules linked in: [ 853.743141][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.3.1944 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 853.755379][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.765476][T15868] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 853.771321][T15868] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 ff 2b 92 fc 90 <0f> 0b 90 90 58 83 05 16 cf c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 853.791218][T15868] RSP: 0018:ffffc900042c7768 EFLAGS: 00010286 [ 853.797713][T15868] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a02c8 [ 853.806088][T15868] RDX: ffff888030761e00 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 853.814079][T15868] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 853.822095][T15868] R10: 0000000000000001 R11: fffffffffffd7620 R12: ffffffff8c163700 [ 853.830094][T15868] R13: ffffffff8bafec00 R14: ffffffff8a9a3610 R15: ffffc900042c7868 [ 853.838262][T15868] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 853.847270][T15868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 853.853909][T15868] CR2: 0000000000000000 CR3: 000000007cd86000 CR4: 00000000003526f0 [ 853.862041][T15868] Call Trace: [ 853.865377][T15868] [ 853.868360][T15868] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 853.873885][T15868] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 853.880025][T15868] debug_check_no_obj_freed+0x4b7/0x600 [ 853.885668][T15868] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 853.891913][T15868] ? rcu_is_watching+0x12/0xc0 [ 853.897304][T15868] ? kmem_cache_free+0x2d1/0x4d0 [ 853.903067][T15868] ? kfree_skbmem+0x1a4/0x1f0 [ 853.907868][T15868] kfree+0x28f/0x4d0 [ 853.911795][T15868] ? hci_release_dev+0x4ef/0x610 [ 853.916816][T15868] hci_release_dev+0x4ef/0x610 [ 853.921609][T15868] ? __pfx_hci_release_dev+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 853.926955][T15868] ? rcu_is_watching+0x12/0xc0 [ 853.931734][T15868] ? kfree+0x24f/0x4d0 [ 853.935872][T15868] bt_host_release+0x6a/0xb0 [ 853.940489][T15868] ? __pfx_bt_host_release+0x10/0x10 [ 853.945866][T15868] device_release+0xa1/0x240 [ 853.950510][T15868] kobject_put+0x1e7/0x5a0 [ 853.955029][T15868] ? __pfx_vhci_release+0x10/0x10 [ 853.960087][T15868] put_device+0x1f/0x30 [ 853.964288][T15868] vhci_release+0x81/0xf0 [ 853.968746][T15868] __fput+0x402/0xb70 [ 853.972783][T15868] task_work_run+0x150/0x240 [ 853.977465][T15868] ? __pfx_task_work_run+0x10/0x10 [ 853.982636][T15868] do_exit+0x86f/0x2bf0 [ 853.986941][T15868] ? do_raw_spin_lock+0x12c/0x2b0 [ 853.992156][T15868] ? __pfx_do_exit+0x10/0x10 [ 853.996846][T15868] ? cgroup_update_frozen_flag+0x107/0x210 [ 854.003285][T15868] ? get_signal+0x1d05/0x26d0 [ 854.008529][T15868] ? rcu_is_watching+0x12/0xc0 [ 854.013338][T15868] do_group_exit+0xd3/0x2a0 [ 854.017941][T15868] get_signal+0x2673/0x26d0 [ 854.022489][T15868] ? hrtimer_nanosleep+0x187/0x380 [ 854.027708][T15868] ? __pfx_get_signal+0x10/0x10 [ 854.032612][T15868] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 854.037916][T15868] arch_do_signal_or_restart+0x8f/0x790 [ 854.043516][T15868] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 854.049788][T15868] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 854.056014][T15868] exit_to_user_mode_loop+0x84/0x110 [ 854.061350][T15868] do_syscall_64+0x3f6/0x490 [ 854.066013][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.071970][T15868] RIP: 0033:0x7f2c76dc14a5 [ 854.076465][T15868] Code: Unable to access opcode bytes at 0x7f2c76dc147b. [ 854.083522][T15868] RSP: 002b:00007f2c77bf8f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 854.092015][T15868] RAX: fffffffffffffdfc RBX: 00007f2c76fb5fa0 RCX: 00007f2c76dc14a5 [ 854.100123][T15868] RDX: 00007f2c77bf8fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 854.108492][T15868] RBP: 00007f2c76e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 854.116829][T15868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 854.124832][T15868] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 854.132820][T15868] [ 854.135931][T15868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 854.143213][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.3.1944 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 854.155308][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.165369][T15868] Call Trace: [ 854.168654][T15868] [ 854.171595][T15868] dump_stack_lvl+0x3d/0x1f0 [ 854.176217][T15868] vpanic+0x6e8/0x7a0 [ 854.180216][T15868] ? __pfx_vpanic+0x10/0x10 [ 854.184750][T15868] ? debug_print_object+0x1a2/0x2b0 [ 854.189956][T15868] panic+0xca/0xd0 [ 854.193703][T15868] ? __pfx_panic+0x10/0x10 [ 854.198229][T15868] ? check_panic_on_warn+0x1f/0xb0 [ 854.203360][T15868] check_panic_on_warn+0xab/0xb0 [ 854.208333][T15868] __warn+0xf6/0x3c0 [ 854.212270][T15868] ? debug_print_object+0x1a2/0x2b0 [ 854.217476][T15868] report_bug+0x3c3/0x580 [ 854.221814][T15868] ? debug_print_object+0x1a2/0x2b0 [ 854.227026][T15868] handle_bug+0x184/0x210 [ 854.231373][T15868] exc_invalid_op+0x17/0x50 [ 854.235894][T15868] asm_exc_invalid_op+0x1a/0x20 [ 854.240751][T15868] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 854.246569][T15868] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 ff 2b 92 fc 90 <0f> 0b 90 90 58 83 05 16 cf c3 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 854.266191][T15868] RSP: 0018:ffffc900042c7768 EFLAGS: 00010286 [ 854.272280][T15868] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a02c8 [ 854.280258][T15868] RDX: ffff888030761e00 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 854.288233][T15868] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 854.296212][T15868] R10: 0000000000000001 R11: fffffffffffd7620 R12: ffffffff8c163700 [ 854.304196][T15868] R13: ffffffff8bafec00 R14: ffffffff8a9a3610 R15: ffffc900042c7868 [ 854.312181][T15868] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 854.317677][T15868] ? __warn_printk+0x198/0x350 [ 854.322467][T15868] ? __warn_printk+0x1a5/0x350 [ 854.327253][T15868] ? debug_print_object+0x1a1/0x2b0 [ 854.332459][T15868] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 854.337942][T15868] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 854.343948][T15868] debug_check_no_obj_freed+0x4b7/0x600 [ 854.349513][T15868] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 854.355604][T15868] ? rcu_is_watching+0x12/0xc0 [ 854.360391][T15868] ? kmem_cache_free+0x2d1/0x4d0 [ 854.365346][T15868] ? kfree_skbmem+0x1a4/0x1f0 [ 854.370029][T15868] kfree+0x28f/0x4d0 [ 854.373932][T15868] ? hci_release_dev+0x4ef/0x610 [ 854.378878][T15868] hci_release_dev+0x4ef/0x610 [ 854.383652][T15868] ? __pfx_hci_release_dev+0x10/0x10 [ 854.389043][T15868] ? rcu_is_watching+0x12/0xc0 [ 854.393824][T15868] ? kfree+0x24f/0x4d0 [ 854.397898][T15868] bt_host_release+0x6a/0xb0 [ 854.402499][T15868] ? __pfx_bt_host_release+0x10/0x10 [ 854.407796][T15868] device_release+0xa1/0x240 [ 854.412398][T15868] kobject_put+0x1e7/0x5a0 [ 854.416831][T15868] ? __pfx_vhci_release+0x10/0x10 [ 854.421875][T15868] put_device+0x1f/0x30 [ 854.426045][T15868] vhci_release+0x81/0xf0 [ 854.430394][T15868] __fput+0x402/0xb70 [ 854.434405][T15868] task_work_run+0x150/0x240 [ 854.439020][T15868] ? __pfx_task_work_run+0x10/0x10 [ 854.444158][T15868] do_exit+0x86f/0x2bf0 [ 854.448334][T15868] ? do_raw_spin_lock+0x12c/0x2b0 [ 854.453377][T15868] ? __pfx_do_exit+0x10/0x10 [ 854.457982][T15868] ? cgroup_update_frozen_flag+0x107/0x210 [ 854.463814][T15868] ? get_signal+0x1d05/0x26d0 [ 854.468501][T15868] ? rcu_is_watching+0x12/0xc0 [ 854.473272][T15868] do_group_exit+0xd3/0x2a0 [ 854.477792][T15868] get_signal+0x2673/0x26d0 [ 854.482303][T15868] ? hrtimer_nanosleep+0x187/0x380 [ 854.487427][T15868] ? __pfx_get_signal+0x10/0x10 [ 854.492292][T15868] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 854.497516][T15868] arch_do_signal_or_restart+0x8f/0x790 [ 854.503078][T15868] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 854.509260][T15868] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 854.515424][T15868] exit_to_user_mode_loop+0x84/0x110 [ 854.520727][T15868] do_syscall_64+0x3f6/0x490 [ 854.525338][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.531237][T15868] RIP: 0033:0x7f2c76dc14a5 [ 854.535656][T15868] Code: Unable to access opcode bytes at 0x7f2c76dc147b. [ 854.542953][T15868] RSP: 002b:00007f2c77bf8f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 854.551375][T15868] RAX: fffffffffffffdfc RBX: 00007f2c76fb5fa0 RCX: 00007f2c76dc14a5 [ 854.559353][T15868] RDX: 00007f2c77bf8fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 854.567331][T15868] RBP: 00007f2c76e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 854.575306][T15868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 854.583279][T15868] R13: 00007f2c76fb6038 R14: 00007f2c76fb5fa0 R15: 00007ffd3c255f78 [ 854.591260][T15868] [ 854.594680][T15868] Kernel Offset: disabled [ 854.599014][T15868] Rebooting in 86400 seconds..