last executing test programs: 4m34.305170207s ago: executing program 3 (id=1500): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) socket(0x15, 0x5, 0x0) 4m32.466108645s ago: executing program 3 (id=1505): bpf$auto(0x4, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) 4m30.959540952s ago: executing program 3 (id=1513): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x8, 0x1, 0x3, 0x1, "e205a4a21d2ddd2d6313691c349dd9f8278b9af0992431a1d29c8fb607713f6c"}) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket(0x2, 0x6, 0xfffffffe) r4 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x9}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x1}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0xc0a00, 0x0) pread64$auto(r6, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94p\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x10fd42, 0x9) socket(0x11, 0x3, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) bpf$auto(0x6a5, &(0x7f0000000280)=@link_detach={r0}, 0x7) shutdown$auto(r4, 0x4) listen$auto(r3, 0x7) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x1300, 0x0) ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r7, 0x4004550a, &(0x7f0000000080)=0x10d4) 4m28.71223907s ago: executing program 3 (id=1519): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xc3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x4000000000000009, 0x2, 0xfdfffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty26\x00', 0x14000, 0x0) 4m27.62817664s ago: executing program 3 (id=1521): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mseal$auto(0x0, 0x7dda, 0x4) madvise$auto(0x0, 0x200007, 0x8) 4m27.47042481s ago: executing program 3 (id=1523): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305602, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 4m11.916195883s ago: executing program 32 (id=1523): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305602, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m36.987441072s ago: executing program 4 (id=1869): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) socket(0x15, 0x5, 0x0) 2m35.607431963s ago: executing program 4 (id=1874): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mseal$auto(0x0, 0x7dda, 0x4) 2m34.820639232s ago: executing program 4 (id=1878): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000001", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 2m34.406932566s ago: executing program 4 (id=1881): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0xf, 0x5, 0xf) setsockopt$auto(r0, 0x1, 0xc, 0x0, 0x7fffffff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptye1\x00', 0x2e203, 0x0) ioctl$auto(r1, 0x5601, r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r0) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000040)=""/228, 0xe4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(0x0, 0x22240, 0x154) execve$auto(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x309043, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x1) socket(0x1, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x41a, 0xff, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0xe123, 0xffffffffffffffff}) getsockopt$auto_SO_RXQ_OVFL(r5, 0x42, 0x28, &(0x7f0000000040)='\x00', &(0x7f00000000c0)=0x8) 2m33.195154834s ago: executing program 4 (id=1883): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0xa, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) socket(0x2d, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x40200, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000140)=')\x00', 0xb8, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1025, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r2, r1, 0x0, 0x1000202) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') 2m31.384712156s ago: executing program 4 (id=1889): getgid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0xa, 0x3, 0x89) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$auto(r0, &(0x7f00000000c0)='{-\x00', 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x64040, 0x0) socket(0xa, 0x5, 0x3a) bpf$auto(0x0, &(0x7f0000000040)=@query={@target_ifindex, 0x3, 0x8001, 0x101, 0x0, @count, 0x0, 0x9, 0xbbbb, 0x9, 0x10000}, 0x8092) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80641, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyb4\x00', 0x40000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r1, 0x80044d76, &(0x7f0000000440)="d1d7519c6667206d6e5a2f67a3a01a857ea60344a549baf4297899aceda35d62e89ce2578a3e64c5374b343d23514f2e56aa88db8e306a1ba5df25ed836877aeacb197147a367ca67a30e14394cfb35c5c8e18b1bc998783583bfdf3278d834bd0b1c5adadd6591c8508c3884946fee19e5286dc236aa69d6c1fd9bba3dfca0a8f61616890998607717a2f03c3023a34b47a731559008d818064f84a805d0f96208d53fcef1e819732d05e56c2e0b162bfc2d7deed732b1ebbf9331e104037aba25434e1e1981d509e1dcd1ccb11f2bce521273b682ace178159d72011251fec") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) 2m16.066549745s ago: executing program 33 (id=1889): getgid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0xa, 0x3, 0x89) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$auto(r0, &(0x7f00000000c0)='{-\x00', 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x64040, 0x0) socket(0xa, 0x5, 0x3a) bpf$auto(0x0, &(0x7f0000000040)=@query={@target_ifindex, 0x3, 0x8001, 0x101, 0x0, @count, 0x0, 0x9, 0xbbbb, 0x9, 0x10000}, 0x8092) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80641, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyb4\x00', 0x40000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r1, 0x80044d76, &(0x7f0000000440)="d1d7519c6667206d6e5a2f67a3a01a857ea60344a549baf4297899aceda35d62e89ce2578a3e64c5374b343d23514f2e56aa88db8e306a1ba5df25ed836877aeacb197147a367ca67a30e14394cfb35c5c8e18b1bc998783583bfdf3278d834bd0b1c5adadd6591c8508c3884946fee19e5286dc236aa69d6c1fd9bba3dfca0a8f61616890998607717a2f03c3023a34b47a731559008d818064f84a805d0f96208d53fcef1e819732d05e56c2e0b162bfc2d7deed732b1ebbf9331e104037aba25434e1e1981d509e1dcd1ccb11f2bce521273b682ace178159d72011251fec") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2ec}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}, @NFSD_A_SERVER_GRACETIME={0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xffffffff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40040) 1m8.652110538s ago: executing program 5 (id=2138): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r4) write$auto(r3, 0x0, 0x100000a3d9) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) close_range$auto(r0, 0x8, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/dummy0/accept_ra_pinfo\x00', 0x795900, 0x0) timer_settime$auto(0x3, 0x368, &(0x7f00000003c0)={{0x0, 0xfffffffffffffffe}, {0x9, 0x97}}, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) 1m7.640420554s ago: executing program 5 (id=2142): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000004c0)="fea1d0616dd490d512af50e8609c8b477a9d973f1fc3d3be6507661c33917da74acd6b0d8959121f6538f79b83e0dac79ec71c3a946a1deca8b0e1c48d9cc360502f57db706ea14a47d12f9642966d34d2beaf17f0655611080d3219011a2470eafdb27df546c2fb4f9ff455bd0856bab4c3c7a2f50da0ed58f2f0c9", 0x80000001, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f00000001c0)="4023323b52a998fc53754442197547d986396e4ac2f991ce93879e2fbeea07fa975eb48bee358e775e6a6cb2e54acee2ef0183bef6b6e7f1890e3a4c066c8369918de3254172611a83c7b6aeb53a353babee4c2ad6f12b337831bbbaf52c5983650e99a42abaacfdb9f4d6a04de3be3a512d187885106cdfcc4c1689a5595c49bd441bc56a53eb770a52e744177964638bf33f56ce4a91dcc003a9223d9747abc414590b71854d97f54ae2c7bb520a969491a5b1f005c566eac9d76e18d704e44e4c9fdffc06ca1b360105327259906d669347745a04d428b2a5c2da5e23f85ef2d02da6022bf9bbb4292b4b82bcb077f23777", 0x7, 0x0, 0x7, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b74696a8d31d18442926c0be6dd278204adc60c01f8a77", 0x0, 0x5}, 0x8}, 0x4, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, r2, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000000000000001}, 0x1) 1m6.549391057s ago: executing program 5 (id=2149): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb0/power/runtime_status\x00', 0x220040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) rmdir$auto(&(0x7f0000000280)='./file0\x00') openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x3b0, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x21c, 0x2, 0x0, 0x1, [@generic="7f1642e9e20884af1ba99c0904e1811adc161672e5bf69bb111657c2e886ba8e95c90bfb39f8894c3f60862c00755012c844d9cafef932812a9465a4157044306b4660348b99ea1f6f0b9d7e0c38c19edac6fcfd7c57cf499704c8b322bfebd59e96d53fb3b2c98cd37ef8ec97b02ca0d8008ed2d2ccd2a949df3546a082cc74add91ae5cfafc5f4843c4989dfce18185499f9db27b80fbbac3bbb49df8377515746ef37d2770ff56ab8a5d08abe66acf490c4ea", @generic="15c49187cf43f666e35e60628deb4c46ba480a78397fa41200843541d8f1e0f11790b5371e46598e3a2fc503bcddd29d30eb7fab574c0ce5f54d9b3cac62b4eb91b59acefdebf35c7f174d2ee9d1b114917398d5dcadf1d63e98382532ee8ef08ff37fd1204583870ca5447f1a", @generic="33faaf3a", @generic="eacaf0cf7b8c000000000000f51b9bad80c6ab60ec121efbd292695aa0eab305fa10b9d48ef5a86cd376", @generic="c3c9b0b3d3d06f95e750e5fa7ae8fd25a661db74fbb86ed432a9c5ce69af8bebf2d6f4abb69cac334e0d807377f3d9a659cf66465bba0473693c32b20bbe3561248f92675e48270aca4bec3d67c252d188fc9fefd045027a496350811eb81155a6ce7782062d4e7a25da4f902fd7cb2579e9ede81ec9f471175a2c8d09e33c612fe6481f14f646d14e", @typed={0x4, 0xab}, @nested={0x30, 0x59, 0x0, 0x1, [@nested={0x4, 0xca}, @nested={0x4, 0x118}, @nested={0x4, 0x4e}, @nested={0x4, 0x2b}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x24}, @nested={0x4, 0x5d}]}, @typed={0xc, 0x11e, 0x0, 0x0, @u64=0x2}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x83a0}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x175, 0x3, 0x0, 0x1, [@generic="d9d7e3609c7c3be84abd7c80688a7ecfb3caafebc968010949d96a1f58be4aa5cf68fa32816f6f65cba03fe50744d4f06933285cd0fda6fd5a906191c9529f2ff001aeacf3bd17e9302b89bb647185e7e15db9df56eb1ca2ccf4d9d577e67eee8e714f1aac69bb4e28a19ae856c8ef1046c33d36841561bdb91aebe6a08fb183ee25d266279c8bec49b059125730f1bc9be608594f4d232b7a985ce5c638cf6ba3ba9e35", @generic="1ddb46c463769a7cdec99320547e9e20d74834e45892b713000e8cd10910011db8e2c6ed40cb1669a5cf3ae094bcae210225f39a0ca4454be1b9d7b5a035104d64c1300e6555a95652be75ef7f0bfe4d9b1bd35c54434f5741f2859dc984c78f5abed4f78ca7c1c67c8086c9b99f35b4611a394c6d0f5c0a4ff0f84e36f86fad8123c3626f52526d8490f277ccc958913a5aa95972d24d34a36cf6b1c2ea94c757b12d60d126b0a2842a6aeaabd1991ff25d2ce4f88f971b4bb54b0d45cb48c2104e829186", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c04, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x800}, @GTPA_TID={0xc, 0x3, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 1m5.95733273s ago: executing program 5 (id=2151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x2085c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r3, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) setreuid$auto(0x3, 0x7) socket(0x6, 0x800, 0x0) 1m2.764448111s ago: executing program 5 (id=2158): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x1, @inferred=r0, @inferred=r0, 0x0, 0x32, '\x00', {0x5044feec, 0xfff7, 0x4, 0xee01, 0xee01, 0xb, 0x8, 0xd0f9, {0x56c9, 0x6298000}, {0x6}, {0x4, 0x8}, 0x11, 0x4, 0x4, 0x2, 0x81, 0x9, 0x7f, 0x9, 0x4, 0xffff, '\x00', 0x6, 0xc6, 0x1000, 0x7}}) chown$auto(&(0x7f0000000180)='}[,&*}\x00', r2, 0xee01) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x2) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x40f49ef, 0x10001, 0x8, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x9, 0x0, 0x18) 1m0.631090636s ago: executing program 5 (id=2164): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x40084d02, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000a91870847e29116b9c9cabe634d90ffd39fb85ad9594c5841efd5d7cc4d6defc3962eee3b1b608f731761fb33b7bad93a0ace97f87823b4b92ab91efcbf02ed3d62f6e738e", @ANYRES16=r2, @ANYBLOB="000327bd7000fbdbdf2507000000538adfcea9ce681565d526510f13329629bcf0d02919bed6745b025192ec35074c5a62af72bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x28004090) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r1) r4 = getpid() getpgrp(r4) msgctl$auto_IPC_SET(0x1000, 0x1, &(0x7f0000000440)={{0x8, 0xffffffffffffffff, 0x0, 0xffffff11, 0x1, 0x7, 0x9a6}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x40, 0x5, 0x100, 0x5, 0x3, 0x6, 0x1000, 0x101, 0x7, @raw=0x40}) capget$auto(&(0x7f00000003c0)={0x5, 0xffffffffffffffff}, &(0x7f00000004c0)={0x1}) stat$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x2df, 0xa6, 0x9, 0xb, 0x0, 0xee00, 0x0, 0x81, 0x4, 0x8000000000000000, 0x4, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xf96}) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40102}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x3dc, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x3c0, 0xa, 0x0, 0x1, [@nested={0x1c, 0xdc, 0x0, 0x1, [@nested={0x4, 0x111}, @typed={0x8, 0x114, 0x0, 0x0, @pid=r4}, @nested={0x4, 0xae}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@local}]}, @nested={0x207, 0x8b, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x123, 0x0, 0x0, @pid=r6}, @generic="499d8ccc1143e818ef00e5018d5be590774d7c9c37eea5b3978b2ff3237a4699428494375296967565ab793a01b32fd6574cca398686c11adced3a0acad6f3ced8116c800b50f306979bd819621a19b6b4ce45455f084219ca6db8918e300f33a44e13d06cdf43f32473a021445af22a9a1b4fd51c842e9036", @typed={0x4, 0x26}, @nested={0x4, 0xc0}, @nested={0x4, 0x8a}, @generic="5926427c34c21b1e2152b4e454e40ebe5a49aa3341aab70ee321272b1dc6da6b597920055fb90151debdf0d119a6370282c874f667839885907c44ba37f4f96141bf67d1ca90886fb27ad025b2c13722216c5333433b87fbb43d6c815c674778867ff995a339f3f3f635e99d06a7e0ab315bd6ac45e64d896f5f6074558151a22f1d685db43feaa3b2014071065eec17b4ddb02ee285458c11e538ce6b7c0136a000b04130d7e5e2c8b2", @typed={0xb6, 0x69, 0x0, 0x0, @binary="1e202b1245404de5bd0f2b4c7bd9a04abc8ee96e56bda769e143046c039865984dda70cc8aefab0a9e8b9027edf9a87fba3d633be3828ff768fa967b16882a615dff3aaf03888b0502a44edf44e3ee9313fe8a96444b7a5e5d9a75060701b2a6b1d682d415fd3ce80ba68f660b17aeaf20d0153ec44acb6e68b69cdd22e8b52d9d4d6904a6ea29125ef2fe02a9588f1bd583ace0310cab1feb7b354a66f9dd0b39914843052d047f2da004325ca63ee7d7f1"}, @nested={0x4, 0xf2}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r7}]}, @nested={0x10, 0xee, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x9}]}, @nested={0x185, 0xba, 0x0, 0x1, [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x7}, @generic="caa747b61e8142fdd12a815beccb334f614cb5b81b5756e51f03d2d8c96bbbe9c3f43ab0b9bcefab74f705ec49f659b7c23ec9f18892c945a277c79bbbf92a5ae4fd285911123d87eaae669d50f5f5ba126c9e4c80a4a04c9098da74771f92e472bfacc06476349108fe22b9ab2e4375c2c477dae9bd9adb324bc9ce338e9108b6ac213b39180fcc6a37fbc2bb4d129057e401411d65f48cf42c309ae97830ef44cac636bbc5b156bed417620aac666566988e68ac937d70c008ff4d38607aea6382f2ffe49de298058c75d31d144440c988a4e3802ae35ecd1229a48f1710ce2ef7dc02b075deeeda600058342756dd634c1398c1", @generic="68d6dc4ed4e6dc84c46f13ab66be4b93dad1b1bab21ff9f6c15496f2c1bd0cd224bf2329dba709978a44ce44b08351ec61368bfc39276af698c67dc6b6bc603e8ab9daf4805cf5e34e068a", @nested={0x4, 0x95}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x6b}, @generic="aad5d3c3683394b257b1d481b1ef56f4d022f9d539d0259945", @typed={0x8, 0x53, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x6d}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x10000}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r9 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close_range$auto(r9, r8, 0x400d) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r10) ioctl$auto_KVM_GET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xda3, 0xe3, 0x81}]}) 45.359944667s ago: executing program 34 (id=2164): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x40084d02, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r1) sendmsg$auto_SMC_NETLINK_GET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000a91870847e29116b9c9cabe634d90ffd39fb85ad9594c5841efd5d7cc4d6defc3962eee3b1b608f731761fb33b7bad93a0ace97f87823b4b92ab91efcbf02ed3d62f6e738e", @ANYRES16=r2, @ANYBLOB="000327bd7000fbdbdf2507000000538adfcea9ce681565d526510f13329629bcf0d02919bed6745b025192ec35074c5a62af72bd0000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x28004090) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r1) r4 = getpid() getpgrp(r4) msgctl$auto_IPC_SET(0x1000, 0x1, &(0x7f0000000440)={{0x8, 0xffffffffffffffff, 0x0, 0xffffff11, 0x1, 0x7, 0x9a6}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x40, 0x5, 0x100, 0x5, 0x3, 0x6, 0x1000, 0x101, 0x7, @raw=0x40}) capget$auto(&(0x7f00000003c0)={0x5, 0xffffffffffffffff}, &(0x7f00000004c0)={0x1}) stat$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x2df, 0xa6, 0x9, 0xb, 0x0, 0xee00, 0x0, 0x81, 0x4, 0x8000000000000000, 0x4, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xf96}) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40102}, 0xc, &(0x7f0000000a00)={&(0x7f0000000600)={0x3dc, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x3c0, 0xa, 0x0, 0x1, [@nested={0x1c, 0xdc, 0x0, 0x1, [@nested={0x4, 0x111}, @typed={0x8, 0x114, 0x0, 0x0, @pid=r4}, @nested={0x4, 0xae}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@local}]}, @nested={0x207, 0x8b, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x123, 0x0, 0x0, @pid=r6}, @generic="499d8ccc1143e818ef00e5018d5be590774d7c9c37eea5b3978b2ff3237a4699428494375296967565ab793a01b32fd6574cca398686c11adced3a0acad6f3ced8116c800b50f306979bd819621a19b6b4ce45455f084219ca6db8918e300f33a44e13d06cdf43f32473a021445af22a9a1b4fd51c842e9036", @typed={0x4, 0x26}, @nested={0x4, 0xc0}, @nested={0x4, 0x8a}, @generic="5926427c34c21b1e2152b4e454e40ebe5a49aa3341aab70ee321272b1dc6da6b597920055fb90151debdf0d119a6370282c874f667839885907c44ba37f4f96141bf67d1ca90886fb27ad025b2c13722216c5333433b87fbb43d6c815c674778867ff995a339f3f3f635e99d06a7e0ab315bd6ac45e64d896f5f6074558151a22f1d685db43feaa3b2014071065eec17b4ddb02ee285458c11e538ce6b7c0136a000b04130d7e5e2c8b2", @typed={0xb6, 0x69, 0x0, 0x0, @binary="1e202b1245404de5bd0f2b4c7bd9a04abc8ee96e56bda769e143046c039865984dda70cc8aefab0a9e8b9027edf9a87fba3d633be3828ff768fa967b16882a615dff3aaf03888b0502a44edf44e3ee9313fe8a96444b7a5e5d9a75060701b2a6b1d682d415fd3ce80ba68f660b17aeaf20d0153ec44acb6e68b69cdd22e8b52d9d4d6904a6ea29125ef2fe02a9588f1bd583ace0310cab1feb7b354a66f9dd0b39914843052d047f2da004325ca63ee7d7f1"}, @nested={0x4, 0xf2}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r7}]}, @nested={0x10, 0xee, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x9}]}, @nested={0x185, 0xba, 0x0, 0x1, [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x7}, @generic="caa747b61e8142fdd12a815beccb334f614cb5b81b5756e51f03d2d8c96bbbe9c3f43ab0b9bcefab74f705ec49f659b7c23ec9f18892c945a277c79bbbf92a5ae4fd285911123d87eaae669d50f5f5ba126c9e4c80a4a04c9098da74771f92e472bfacc06476349108fe22b9ab2e4375c2c477dae9bd9adb324bc9ce338e9108b6ac213b39180fcc6a37fbc2bb4d129057e401411d65f48cf42c309ae97830ef44cac636bbc5b156bed417620aac666566988e68ac937d70c008ff4d38607aea6382f2ffe49de298058c75d31d144440c988a4e3802ae35ecd1229a48f1710ce2ef7dc02b075deeeda600058342756dd634c1398c1", @generic="68d6dc4ed4e6dc84c46f13ab66be4b93dad1b1bab21ff9f6c15496f2c1bd0cd224bf2329dba709978a44ce44b08351ec61368bfc39276af698c67dc6b6bc603e8ab9daf4805cf5e34e068a", @nested={0x4, 0x95}, @typed={0x8, 0x75, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x6b}, @generic="aad5d3c3683394b257b1d481b1ef56f4d022f9d539d0259945", @typed={0x8, 0x53, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x6d}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x10000}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r9 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close_range$auto(r9, r8, 0x400d) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r10) ioctl$auto_KVM_GET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xda3, 0xe3, 0x81}]}) 27.49362411s ago: executing program 6 (id=2273): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x2085c2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r2 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r2, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) setreuid$auto(0x3, 0x7) socket(0x6, 0x800, 0x0) 26.885330392s ago: executing program 0 (id=2275): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfa, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0x1ef) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x2, 0x2, "0200"}, 0x3ffff) prctl$auto(0x3e, 0x0, 0x0, 0x1, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r4, 0x84, 0x14, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi10\x00', 0x2, 0x0) write$auto(r5, 0x0, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x800000002}, 0x2000000400) ppoll$auto(&(0x7f0000000100)={r1, 0xf, 0x8e}, 0x3, 0x0, 0x0, 0x8) copy_file_range$auto(r3, 0x0, r7, 0x0, 0x6, 0x0) 25.884669038s ago: executing program 0 (id=2277): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b48, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x800000002}, 0x2000000400) ppoll$auto(&(0x7f0000000100)={r1, 0xf, 0x8e}, 0x3, 0x0, 0x0, 0x8) copy_file_range$auto(r2, 0x0, r3, 0x0, 0x6, 0x0) 25.406476853s ago: executing program 0 (id=2278): r0 = socket(0x18, 0x4, 0x6) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x8000403) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_count\x00', 0x8080, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) r4 = pipe$auto(0x0) fcntl$auto(0x8000000000000001, 0x26, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0xffffff1e, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x3b8}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000100)={0x0, &(0x7f00000000c0)={0x2, 0x1, 0x8, @inferred=r2}}) socketpair$auto(0x1, 0x4, 0xfffffffc, 0x0) socket(0xf, 0x800, 0xd) close_range$auto(0x2, 0xa, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, r3, 0x100000000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/gretap0/bc_forwarding\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x1ff) 25.117122236s ago: executing program 0 (id=2280): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb0/power/runtime_status\x00', 0x220040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) rmdir$auto(&(0x7f0000000280)='./file0\x00') openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x3a0, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x20b, 0x2, 0x0, 0x1, [@generic="7f1642e9e20884af1ba99c0904e1811adc161672e5bf69bb111657c2e886ba8e95c90bfb39f8894c3f60862c00755012c844d9cafef932812a9465a4157044306b4660348b99ea1f6f0b9d7e0c38c19edac6fcfd7c57cf499704c8b322bfebd59e96d53fb3b2c98cd37ef8ec97b02ca0d8008ed2d2ccd2a949df3546a082cc74add91ae5cfafc5f4843c4989dfce18185499f9db27b80fbbac3bbb49df8377515746ef37d2770ff56ab8a5d08abe66acf490c4ea", @generic="15c49187cf43f666e35e60628deb4c46ba480a78397fa41200843541d8f1e0f11790b5371e46598e3a2fc503bcddd29d30eb7fab574c0ce5f54d9b3cac62b4eb91b59acefdebf35c7f174d2ee9d1b114917398d5dcadf1d63e98382532ee8ef08ff37fd1204583870ca5447f1a", @generic="33faaf3a", @generic="eacaf0cf7b8c000000000000f51b9bad80c6ab60ec", @generic="c3c9b0b3d3d06f95e750e5fa7ae8fd25a661db74fbb86ed432a9c5ce69af8bebf2d6f4abb69cac334e0d807377f3d9a659cf66465bba0473693c32b20bbe3561248f92675e48270aca4bec3d67c252d188fc9fefd045027a496350811eb81155a6ce7782062d4e7a25da4f902fd7cb2579e9ede81ec9f471175a2c8d09e33c612fe6481f14f646d14ea8855099", @typed={0x4, 0xab}, @nested={0x30, 0x59, 0x0, 0x1, [@nested={0x4, 0xca}, @nested={0x4, 0x118}, @nested={0x4, 0x4e}, @nested={0x4, 0x2b}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x24}, @nested={0x4, 0x5d}]}, @typed={0xc, 0x11e, 0x0, 0x0, @u64=0x2}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x83a0}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x175, 0x3, 0x0, 0x1, [@generic="d9d7e3609c7c3be84abd7c80688a7ecfb3caafebc968010949d96a1f58be4aa5cf68fa32816f6f65cba03fe50744d4f06933285cd0fda6fd5a906191c9529f2ff001aeacf3bd17e9302b89bb647185e7e15db9df56eb1ca2ccf4d9d577e67eee8e714f1aac69bb4e28a19ae856c8ef1046c33d36841561bdb91aebe6a08fb183ee25d266279c8bec49b059125730f1bc9be608594f4d232b7a985ce5c638cf6ba3ba9e35", @generic="1ddb46c463769a7cdec99320547e9e20d74834e45892b713000e8cd10910011db8e2c6ed40cb1669a5cf3ae094bcae210225f39a0ca4454be1b9d7b5a035104d64c1300e6555a95652be75ef7f0bfe4d9b1bd35c54434f5741f2859dc984c78f5abed4f78ca7c1c67c8086c9b99f35b4611a394c6d0f5c0a4ff0f84e36f86fad8123c3626f52526d8490f277ccc958913a5aa95972d24d34a36cf6b1c2ea94c757b12d60d126b0a2842a6aeaabd1991ff25d2ce4f88f971b4bb54b0d45cb48c2104e829186", @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x400, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c04, 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x800}, @GTPA_TID={0xc, 0x3, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 24.901128536s ago: executing program 6 (id=2281): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1000) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mseal$auto(0x0, 0x7dda, 0x4) madvise$auto(0x0, 0x200007, 0x8) 24.573130469s ago: executing program 6 (id=2282): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x200007, 0x8) 24.461790287s ago: executing program 0 (id=2283): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x1, @inferred=r0, @inferred=r0, 0x0, 0x32, '\x00', {0x5044feec, 0xfff7, 0x4, 0xee01, 0xee01, 0xb, 0x8, 0xd0f9, {0x56c9, 0x6298000}, {0x6}, {0x4, 0x8}, 0x11, 0x4, 0x4, 0x2, 0x81, 0x9, 0x7f, 0x9, 0x4, 0xffff, '\x00', 0x6, 0xc6, 0x1000, 0x7}}) chown$auto(&(0x7f0000000180)='}[,&*}\x00', r2, 0xee01) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x2) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x40f49ef, 0x10001, 0x8, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) 23.841506306s ago: executing program 6 (id=2284): bpf$auto(0x4, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183841, 0x0) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r3) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) 23.041551506s ago: executing program 0 (id=2286): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyw0\x00', 0x212400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) socket(0x2, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, &(0x7f0000000180)="fc732b0608a6361b2b6275cf0b6ddcb78f621f4bd10f2f763f24252d9e1f3d6d346bc68bffde77f15624eb307aa1f630e5799c41107198dde65a3ce865ead5bbedb8ad4c5e9fc261221c1e439d") ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=0xffffffffffffffff}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8) ioctl$auto_BTRFS_IOC_DEFRAG(r3, 0x50009402, &(0x7f0000000380)={@raw=0x7fffffff, "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"}) 22.461730161s ago: executing program 1 (id=2287): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) ioctl$auto(0x3, 0xae60, 0x38) socket(0x15, 0x5, 0x0) 22.35120849s ago: executing program 6 (id=2288): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x1, @inferred=r0, @inferred=r0, 0x0, 0x32, '\x00', {0x5044feec, 0xfff7, 0x4, 0xee01, 0xee01, 0xb, 0x8, 0xd0f9, {0x56c9, 0x6298000}, {0x6}, {0x4, 0x8}, 0x11, 0x4, 0x4, 0x2, 0x81, 0x9, 0x7f, 0x9, 0x4, 0xffff, '\x00', 0x6, 0xc6, 0x1000, 0x7}}) chown$auto(&(0x7f0000000180)='}[,&*}\x00', r2, 0xee01) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x2) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x40f49ef, 0x10001, 0x8, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) 21.255926563s ago: executing program 6 (id=2289): r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x501102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) shutdown$auto(0x200000003, 0x2) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000140)="48b901d140aba20accf81032294f2893425ccd65c1e6c4eb7e709880e7231e8e60f2f193c96e0f19220eadc01f44b709a69d89ad45ce7eb2c8388ec198e091568c2d52cc36ff910f04c2ccc20bdaf704ffc7d531de144dd41a7db6fa3b97b467f155ba0d8fb8044662cb838604b2c66890af46301a359f82d9a693840ade10c504468dca7fb141cdb970000a88d7012d2f903c7299e757a2e5b62c1597c49800", 0x6, &(0x7f0000000240)="a63cab1fbd43d92aad4a2739431c82d6ed98f754f5ddaccaf064b80eec05e65605621d7b38324218592d0b37a49ee1cfce435127ede813d1f910b8bb8be4ec08a3551d82d5119564601029b68ade1c1054aa5e1007a000162ed0386f7866af459ddf6aeae8a1f2185962b011200cc2a6bb6ce62941ecb05b469ad58de5987f53641484fead14a64d0f648aabfb3936b68b3679f62cd195cc567e2b748176dd83c18068a4b0152de22836761a67d58f77c516864904bc3b51d1d6103fc15347bf0759a1e03a9b8b964ca017f3f76166959a30", 0x2, &(0x7f0000000340)="420a86b55a3d8a35e6f8c0a22bb44963543608bcacef99287970bcc522d3447d771a90720640f0a1ea8bcfac2a9b010e9ede10ae85ecb71ce6072108ac9810e1ee1d42344813edfad27332c0431defa3963a2fc90d4f490cf50c39360dfe39e703842c3bace64466c23ad93d97a78bfffe615ee0fd03a5cb45d68335c51cae82ee82bb0372bf54d2d14d19054ab2434868fb523d8b555674c15312368b43ce30ff9bd7ec8df0af8dde2a152820919d824484e6fe9f97c8eae482db132c", &(0x7f00000000c0)=0x6}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) setsockopt$auto(r3, 0x107, 0x2012, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x6, r6) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x104, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) r7 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$auto_NS_GET_USERNS(r7, 0xb701, 0x0) ioctl$auto_NS_GET_OWNER_UID(r8, 0xb704, 0x0) write$auto(r0, 0x0, 0xfdf2) 21.237019526s ago: executing program 1 (id=2290): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) ioctl$auto(0x3, 0xae60, 0x38) socket(0x15, 0x5, 0x0) 11.033465066s ago: executing program 1 (id=2292): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000004c0)="fea1d0616dd490d512af50e8609c8b477a9d973f1fc3d3be6507661c33917da74acd6b0d8959121f6538f79b83e0dac79ec71c3a946a1deca8b0e1c48d9cc360502f57db706ea14a47d12f9642966d34d2beaf17f0655611080d3219011a2470eafdb27df546c2fb4f9ff455bd0856bab4c3c7a2f50da0ed58f2f0c9", 0x80000001, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f00000001c0)="4023323b52a998fc53754442197547d986396e4ac2f991ce93879e2fbeea07fa975eb48bee358e775e6a6cb2e54acee2ef0183bef6b6e7f1890e3a4c066c8369918de3254172611a83c7b6aeb53a353babee4c2ad6f12b337831bbbaf52c5983650e99a42abaacfdb9f4d6a04de3be3a512d187885106cdfcc4c1689a5595c49bd441bc56a53eb770a52e744177964638bf33f56ce4a91dcc003a9223d9747abc414590b71854d97f54ae2c7bb520a969491a5b1f005c566eac9d76e18d704e44e4c9fdffc06ca1b360105327259906d669347745a04d428b2a5c2da5e23f85ef2d02da6022bf9bbb4292b4b82bcb077f23777", 0x7, &(0x7f0000000380)={&(0x7f0000000300)="8aa9a5160af8440dc90e74695da680d7674b6d62213afd39ee7c5c59891cc010fc30a6ffadf8", 0xd9}, 0x7, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b74696a8d31d18442926c0be6dd278204adc60c01f8a77", 0x0, 0x5}, 0x8}, 0x4, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, r2, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x2, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000000000000001}, 0x1) 10.054175914s ago: executing program 1 (id=2302): r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x501102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0x100eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = pipe2$auto(0x0, 0x80000000) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) shutdown$auto(0x200000003, 0x2) socket(0x11, 0x80003, 0x300) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000140)="48b901d140aba20accf81032294f2893425ccd65c1e6c4eb7e709880e7231e8e60f2f193c96e0f19220eadc01f44b709a69d89ad45ce7eb2c8388ec198e091568c2d52cc36ff910f04c2ccc20bdaf704ffc7d531de144dd41a7db6fa3b97b467f155ba0d8fb8044662cb838604b2c66890af46301a359f82d9a693840ade10c504468dca7fb141cdb970000a88d7012d2f903c7299e757a2e5b62c1597c49800", 0x6, &(0x7f0000000240)="a63cab1fbd43d92aad4a2739431c82d6ed98f754f5ddaccaf064b80eec05e65605621d7b38324218592d0b37a49ee1cfce435127ede813d1f910b8bb8be4ec08a3551d82d5119564601029b68ade1c1054aa5e1007a000162ed0386f7866af459ddf6aeae8a1f2185962b011200cc2a6bb6ce62941ecb05b469ad58de5987f53641484fead14a64d0f648aabfb3936b68b3679f62cd195cc567e2b748176dd83c18068a4b0152de22836761a67d58f77c516864904bc3b51d1d6103fc15347bf0759a1e03a9b8b964ca017f3f76166959a30", 0x2, &(0x7f0000000340)="420a86b55a3d8a35e6f8c0a22bb44963543608bcacef99287970bcc522d3447d771a90720640f0a1ea8bcfac2a9b010e9ede10ae85ecb71ce6072108ac9810e1ee1d42344813edfad27332c0431defa3963a2fc90d4f490cf50c39360dfe39e703842c3bace64466c23ad93d97a78bfffe615ee0fd03a5cb45d68335c51cae82ee82bb0372bf54d2d14d19054ab2434868fb523d8b555674c15312368b43ce30ff9bd7ec8df0af8dde2a152820919d824484e6fe9f97c8eae482db132c", &(0x7f00000000c0)=0x6}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)) write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) setsockopt$auto(0xffffffffffffffff, 0x400008, 0x9, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x6, r5) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) r6 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) r7 = ioctl$auto_NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$auto_NS_GET_OWNER_UID(r7, 0xb704, 0x0) 9.41963213s ago: executing program 1 (id=2304): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x1, @inferred=r0, @inferred=r0, 0x0, 0x32, '\x00', {0x5044feec, 0xfff7, 0x4, 0xee01, 0xee01, 0xb, 0x8, 0xd0f9, {0x56c9, 0x6298000}, {0x6}, {0x4, 0x8}, 0x11, 0x4, 0x4, 0x2, 0x81, 0x9, 0x7f, 0x9, 0x4, 0xffff, '\x00', 0x6, 0xc6, 0x1000, 0x7}}) chown$auto(&(0x7f0000000180)='}[,&*}\x00', r2, 0xee01) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1000000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x2) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) mlockall$auto(0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x40f49ef, 0x10001, 0x8, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) 8.726903086s ago: executing program 1 (id=2307): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mseal$auto(0x0, 0x7dda, 0x4) madvise$auto(0x0, 0x200007, 0x8) 7.861774738s ago: executing program 35 (id=2286): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyw0\x00', 0x212400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) socket(0x2, 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, &(0x7f0000000180)="fc732b0608a6361b2b6275cf0b6ddcb78f621f4bd10f2f763f24252d9e1f3d6d346bc68bffde77f15624eb307aa1f630e5799c41107198dde65a3ce865ead5bbedb8ad4c5e9fc261221c1e439d") ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500", @inferred=0xffffffffffffffff}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x8) ioctl$auto_BTRFS_IOC_DEFRAG(r3, 0x50009402, &(0x7f0000000380)={@raw=0x7fffffff, "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"}) 6.079560814s ago: executing program 36 (id=2289): r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x501102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) shutdown$auto(0x200000003, 0x2) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000140)="48b901d140aba20accf81032294f2893425ccd65c1e6c4eb7e709880e7231e8e60f2f193c96e0f19220eadc01f44b709a69d89ad45ce7eb2c8388ec198e091568c2d52cc36ff910f04c2ccc20bdaf704ffc7d531de144dd41a7db6fa3b97b467f155ba0d8fb8044662cb838604b2c66890af46301a359f82d9a693840ade10c504468dca7fb141cdb970000a88d7012d2f903c7299e757a2e5b62c1597c49800", 0x6, &(0x7f0000000240)="a63cab1fbd43d92aad4a2739431c82d6ed98f754f5ddaccaf064b80eec05e65605621d7b38324218592d0b37a49ee1cfce435127ede813d1f910b8bb8be4ec08a3551d82d5119564601029b68ade1c1054aa5e1007a000162ed0386f7866af459ddf6aeae8a1f2185962b011200cc2a6bb6ce62941ecb05b469ad58de5987f53641484fead14a64d0f648aabfb3936b68b3679f62cd195cc567e2b748176dd83c18068a4b0152de22836761a67d58f77c516864904bc3b51d1d6103fc15347bf0759a1e03a9b8b964ca017f3f76166959a30", 0x2, &(0x7f0000000340)="420a86b55a3d8a35e6f8c0a22bb44963543608bcacef99287970bcc522d3447d771a90720640f0a1ea8bcfac2a9b010e9ede10ae85ecb71ce6072108ac9810e1ee1d42344813edfad27332c0431defa3963a2fc90d4f490cf50c39360dfe39e703842c3bace64466c23ad93d97a78bfffe615ee0fd03a5cb45d68335c51cae82ee82bb0372bf54d2d14d19054ab2434868fb523d8b555674c15312368b43ce30ff9bd7ec8df0af8dde2a152820919d824484e6fe9f97c8eae482db132c", &(0x7f00000000c0)=0x6}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000340)) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) setsockopt$auto(r3, 0x107, 0x2012, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x6, r6) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x104, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) r7 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$auto_NS_GET_USERNS(r7, 0xb701, 0x0) ioctl$auto_NS_GET_OWNER_UID(r8, 0xb704, 0x0) write$auto(r0, 0x0, 0xfdf2) 3.990222406s ago: executing program 2 (id=2317): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) socket(0x15, 0x5, 0x0) 2.838559659s ago: executing program 2 (id=2318): getgid() mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$auto(r0, &(0x7f00000000c0)='{-\x00', 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x0, 0x8, 0x1, @relative_id=0xce, 0xf}, 0x92) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyb4\x00', 0x40000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r1, 0x80044d76, &(0x7f0000000440)="d1d7519c6667206d6e5a2f67a3a01a857ea60344a549baf4297899aceda35d62e89ce2578a3e64c5374b343d23514f2e56aa88db8e306a1ba5df25ed836877aeacb197147a367ca67a30e14394cfb35c5c8e18b1bc998783583bfdf3278d834bd0b1c5adadd6591c8508c3884946fee19e5286dc236aa69d6c1fd9bba3dfca0a8f61616890998607717a2f03c3023a34b47a731559008d818064f84a805d0f96208d53fcef1e819732d05e56c2e0b162bfc2d7deed732b1ebbf9331e104037aba25434e1e1981d509e1dcd1ccb11f2bce521273b682ace178159d72011251fec") r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x405, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) prctl$auto(0x41, 0x2, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x6000000) 2.367715051s ago: executing program 2 (id=2319): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptybd/power/control\x00', 0x2062, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/255, 0xff) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000400), 0x284280, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x38, 0x1, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000044) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mseal$auto(0x0, 0x7dda, 0x4) madvise$auto(0x0, 0x200007, 0x8) 2.018167404s ago: executing program 7 (id=2309): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x2085c2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r2 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r2, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) setreuid$auto(0x3, 0x7) socket(0x6, 0x800, 0x0) 1.968850855s ago: executing program 2 (id=2320): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r3, 0x0, 0x100000a3d9) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) close_range$auto(r0, 0x8, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/dummy0/accept_ra_pinfo\x00', 0x795900, 0x0) timer_settime$auto(0x3, 0x368, &(0x7f00000003c0)={{0x0, 0xfffffffffffffffe}, {0x9, 0x97}}, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) 704.63073ms ago: executing program 2 (id=2321): r0 = socket(0x18, 0x4, 0x6) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, 0x0, 0x8000403) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_count\x00', 0x8080, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) r4 = pipe$auto(0x0) fcntl$auto(0x8000000000000001, 0x26, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000140)={0x0, 0xffffff1e, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x3b8}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000100)={0x0, &(0x7f00000000c0)={0x2, 0x1, 0x8, @inferred=r2}}) socketpair$auto(0x1, 0x4, 0xfffffffc, 0x0) socket(0xf, 0x800, 0xd) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, r3, 0x100000000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/gretap0/bc_forwarding\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x1ff) 537.168912ms ago: executing program 2 (id=2322): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0x4500, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) r3 = clone3$auto(0x0, 0xa) capset$auto(&(0x7f0000000080)={0x2, r3}, &(0x7f0000000280)={0xe, 0x1000, 0x8}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000006c0)={0x0, [{[0x4, 0x2, 0x5, 0xe8, 0x0, 0x8, 0x200, 0xffffff00]}, {[0x2, 0xfffff374, 0x5, 0x3ff, 0x2, 0xd, 0x800, 0xfffffffc]}, {[0x2, 0x78e, 0x197, 0x5, 0x100, 0x9, 0x3, 0x3]}], [{[0xd, 0x80d, 0x9796, 0x8001, 0x8e16, 0x9b, 0x3, 0xffffff13]}, {[0xa9f, 0xd, 0x8, 0x0, 0x9, 0xa6a0, 0x1, 0x8]}, {[0x1, 0x5, 0x80, 0x8, 0x9, 0x9, 0x6, 0x6]}, {[0x1, 0x5, 0xa34a, 0xffffffff, 0x6, 0x2, 0x6, 0x3]}, {[0xc, 0x2, 0x16a464d0, 0x1fffc0, 0xda07, 0xffffffff, 0x3]}], [{0xc, 0x9, 0x1, 0x1, 0x1}, {0x1000, 0x10001, 0x1, 0x1, 0x0, 0x1}, {0xd, 0xf7a, 0x0, 0x1}, {0x7ffffffb, 0x10001, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5}, {0xc0000000, 0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x5b9e, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x4, 0x1, 0x1, 0x0, 0x1}, {0xb, 0xffffffff, 0x1, 0x1, 0x0, 0x1}], [{0x5, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x0, 0x1}, {0x4, 0x5f, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1}, {0x4, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x9ca, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x401, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1}], 0x0, 0x1, 0xbfc5, 0x0, 0x7, 0x6, 0x7, "79a40432ea7ee5b06e740907be144d26", "c3b7c39d857e5996b2faeb964875b073bba39ea360fe0c8c65eb4d6a4cc16395e49948a84dc75492deeeac740bd86c86"}) socket(0x15, 0x5, 0x0) 0s ago: executing program 7 (id=2323): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r3, 0x0, 0x100000a3d9) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) close_range$auto(r0, 0x8, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/dummy0/accept_ra_pinfo\x00', 0x795900, 0x0) timer_settime$auto(0x3, 0x368, &(0x7f00000003c0)={{0x0, 0xfffffffffffffffe}, {0x9, 0x97}}, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) kernel console output (not intermixed with test programs): ) [ 556.813469][T13633] bond0: option all_slaves_active: invalid value () [ 557.397917][ T30] audit: type=1800 audit(1755188295.637:67): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1539" name="features" dev="configfs" ino=40891 res=0 errno=0 [ 558.842901][ T30] audit: type=1800 audit(1755188297.086:68): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1544" name="features" dev="configfs" ino=41478 res=0 errno=0 [ 560.911037][T13688] bond0: option all_slaves_active: invalid value () [ 561.172927][T13688] bond0: option all_slaves_active: invalid value () [ 563.612296][ T30] audit: type=1800 audit(1755188301.764:69): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1558" name="features" dev="configfs" ino=41718 res=0 errno=0 [ 566.676082][T13774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 568.375982][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.382836][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.562316][T13807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.572077][T13807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.581242][T13807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.589296][T13807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.597320][T13807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.410387][ T30] audit: type=1800 audit(1755188307.641:70): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1575" name="features" dev="configfs" ino=41871 res=0 errno=0 [ 569.760357][T13803] chnl_net:caif_netlink_parms(): no params data found [ 570.700978][ T5875] Bluetooth: hci4: command tx timeout [ 570.755736][T13803] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.763930][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.790990][T13803] bridge_slave_0: entered allmulticast mode [ 570.798838][T13803] bridge_slave_0: entered promiscuous mode [ 570.823988][T13803] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.831316][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.971348][T13803] bridge_slave_1: entered allmulticast mode [ 570.979362][T13803] bridge_slave_1: entered promiscuous mode [ 571.118347][T13803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.137999][T13803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.278484][T13803] team0: Port device team_slave_0 added [ 571.288514][T13803] team0: Port device team_slave_1 added [ 571.408891][T13803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.417978][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.444996][T13803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.477059][T13803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.486283][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.515227][T13803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.724970][T13803] hsr_slave_0: entered promiscuous mode [ 571.736395][T13803] hsr_slave_1: entered promiscuous mode [ 571.748690][T13803] debugfs: 'hsr0' already exists in 'hsr' [ 571.759214][T13803] Cannot create hsr debugfs directory [ 572.349114][ T30] audit: type=1800 audit(1755188310.570:71): pid=13877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1583" name="features" dev="configfs" ino=43159 res=0 errno=0 [ 572.546487][T13803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.597090][T13803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.771841][ T5875] Bluetooth: hci4: command tx timeout [ 572.795854][T13803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.893579][T13803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.293374][T13803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.356919][T13803] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.560724][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.568111][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.633335][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.640649][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.203584][T13803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.432732][ T30] audit: type=1800 audit(1755188312.668:72): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1590" name="features" dev="configfs" ino=43402 res=0 errno=0 [ 574.853054][ T5875] Bluetooth: hci4: command tx timeout [ 575.237512][T13803] veth0_vlan: entered promiscuous mode [ 575.336237][T13803] veth1_vlan: entered promiscuous mode [ 575.540656][ T30] audit: type=1107 audit(1755188313.778:73): pid=13937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 575.594652][T13803] veth0_macvtap: entered promiscuous mode [ 575.648535][T13803] veth1_macvtap: entered promiscuous mode [ 575.772666][T13803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.867506][T13803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.905324][ T1338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.973366][ T1338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.996379][ T1338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.026437][ T1338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.233457][ T7164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.249203][ T7164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.418580][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.434699][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.933951][ T5875] Bluetooth: hci4: command tx timeout [ 577.086487][T13973] bond0: option all_slaves_active: invalid value () [ 577.297429][T13965] bond0: option all_slaves_active: invalid value () [ 580.145172][ T30] audit: type=1800 audit(1755188318.376:74): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1611" name="features" dev="configfs" ino=43838 res=0 errno=0 [ 580.883292][ T30] audit: type=1800 audit(1755188319.115:75): pid=14029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1614" name="features" dev="configfs" ino=43956 res=0 errno=0 [ 583.143875][ T30] audit: type=1800 audit(1755188321.374:76): pid=14051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1619" name="features" dev="configfs" ino=44434 res=0 errno=0 [ 586.855279][ T30] audit: type=1800 audit(1755188325.082:77): pid=14108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1630" name="features" dev="configfs" ino=45276 res=0 errno=0 [ 587.401740][T14115] bond0: option all_slaves_active: invalid value () [ 587.623023][T14097] bond0: option all_slaves_active: invalid value () [ 588.770600][ T5875] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9 [ 590.908017][ T30] audit: type=1800 audit(1755188329.140:78): pid=14165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1642" name="features" dev="configfs" ino=44842 res=0 errno=0 [ 591.706405][ T5875] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 591.783169][T14173] FAULT_INJECTION: forcing a failure. [ 591.783169][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 591.859620][T14173] CPU: 1 UID: 0 PID: 14173 Comm: syz.0.1644 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 591.859658][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.859673][T14173] Call Trace: [ 591.859683][T14173] [ 591.859691][T14173] dump_stack_lvl+0x16c/0x1f0 [ 591.859724][T14173] should_fail_ex+0x512/0x640 [ 591.859753][T14173] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 591.859785][T14173] should_failslab+0xc2/0x120 [ 591.859814][T14173] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 591.859850][T14173] ? alloc_empty_file+0x55/0x1e0 [ 591.859887][T14173] alloc_empty_file+0x55/0x1e0 [ 591.859919][T14173] path_openat+0xda/0x2cb0 [ 591.859944][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.859978][T14173] ? __pfx_path_openat+0x10/0x10 [ 591.860013][T14173] do_filp_open+0x20b/0x470 [ 591.860041][T14173] ? __pfx_do_filp_open+0x10/0x10 [ 591.860094][T14173] ? alloc_fd+0x471/0x7d0 [ 591.860126][T14173] do_sys_openat2+0x11b/0x1d0 [ 591.860159][T14173] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.860197][T14173] ? __fget_files+0x20e/0x3c0 [ 591.860229][T14173] __x64_sys_openat+0x174/0x210 [ 591.860264][T14173] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.860297][T14173] ? ksys_write+0x1ac/0x250 [ 591.860335][T14173] do_syscall_64+0xcd/0x490 [ 591.860369][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.860393][T14173] RIP: 0033:0x7f1f3478ebe9 [ 591.860417][T14173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.860440][T14173] RSP: 002b:00007f1f355f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.860464][T14173] RAX: ffffffffffffffda RBX: 00007f1f349b5fa0 RCX: 00007f1f3478ebe9 [ 591.860481][T14173] RDX: 00000000000ca003 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 591.860497][T14173] RBP: 00007f1f355f0090 R08: 0000000000000000 R09: 0000000000000000 [ 591.860513][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.860529][T14173] R13: 00007f1f349b6038 R14: 00007f1f349b5fa0 R15: 00007ffea8168018 [ 591.860562][T14173] [ 592.628968][T14178] bond0: option all_slaves_active: invalid value () [ 592.682464][ T30] audit: type=1800 audit(1755188330.909:79): pid=14192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1647" name="features" dev="configfs" ino=44892 res=0 errno=0 [ 594.139869][ T30] audit: type=1800 audit(1755188332.369:80): pid=14207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1652" name="features" dev="configfs" ino=44995 res=0 errno=0 [ 595.210694][ T30] audit: type=1800 audit(1755188333.438:81): pid=14221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1661" name="features" dev="configfs" ino=45049 res=0 errno=0 [ 596.078040][ T30] audit: type=1800 audit(1755188334.308:82): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1657" name="features" dev="configfs" ino=45644 res=0 errno=0 [ 596.464486][ T30] audit: type=1800 audit(1755188334.657:83): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1658" name="features" dev="configfs" ino=46175 res=0 errno=0 [ 598.168543][ T30] audit: type=1800 audit(1755188336.387:84): pid=14267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1665" name="features" dev="configfs" ino=45698 res=0 errno=0 [ 599.800665][ T30] audit: type=1800 audit(1755188338.026:85): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1670" name="features" dev="configfs" ino=45734 res=0 errno=0 [ 600.582031][ T30] audit: type=1800 audit(1755188338.795:86): pid=14297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1671" name="features" dev="configfs" ino=45760 res=0 errno=0 [ 602.333806][ T30] audit: type=1800 audit(1755188340.545:87): pid=14330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1678" name="features" dev="configfs" ino=46668 res=0 errno=0 [ 603.252941][T14316] netlink: 'syz.0.1675': attribute type 19 has an invalid length. [ 603.261500][T14316] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1675'. [ 606.600607][T14394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 606.782366][T14397] FAULT_INJECTION: forcing a failure. [ 606.782366][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 606.816795][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.2.1694 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 606.816835][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.816851][T14397] Call Trace: [ 606.816860][T14397] [ 606.816870][T14397] dump_stack_lvl+0x16c/0x1f0 [ 606.816911][T14397] should_fail_ex+0x512/0x640 [ 606.816955][T14397] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 606.816991][T14397] should_failslab+0xc2/0x120 [ 606.817023][T14397] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 606.817051][T14397] ? vma_merge_new_range+0x3ae/0xa50 [ 606.817077][T14397] ? vm_area_alloc+0x1f/0x160 [ 606.817108][T14397] vm_area_alloc+0x1f/0x160 [ 606.817134][T14397] __mmap_region+0xf90/0x27b0 [ 606.817178][T14397] ? finish_task_switch.isra.0+0x21c/0xc10 [ 606.817204][T14397] ? __pfx___mmap_region+0x10/0x10 [ 606.817239][T14397] ? rcu_is_watching+0x12/0xc0 [ 606.817281][T14397] ? rcu_is_watching+0x12/0xc0 [ 606.817307][T14397] ? trace_sched_exit_tp+0xd1/0x120 [ 606.817343][T14397] ? __schedule+0x11a3/0x5de0 [ 606.817369][T14397] ? __lock_acquire+0x62e/0x1ce0 [ 606.817420][T14397] ? __pfx___schedule+0x10/0x10 [ 606.817488][T14397] ? trace_cap_capable+0x18d/0x200 [ 606.817527][T14397] mmap_region+0x1ab/0x3f0 [ 606.817557][T14397] ? __get_unmapped_area+0x267/0x440 [ 606.817595][T14397] do_mmap+0xa3e/0x1210 [ 606.817635][T14397] ? __pfx_do_mmap+0x10/0x10 [ 606.817668][T14397] ? __pfx_down_write_killable+0x10/0x10 [ 606.817708][T14397] vm_mmap_pgoff+0x29e/0x470 [ 606.817748][T14397] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 606.817784][T14397] ? find_held_lock+0x2b/0x80 [ 606.817815][T14397] ? __x64_sys_futex+0x1e0/0x4c0 [ 606.817844][T14397] ? __x64_sys_futex+0x1e9/0x4c0 [ 606.817879][T14397] ksys_mmap_pgoff+0x7d/0x5c0 [ 606.817913][T14397] ? xfd_validate_state+0x61/0x180 [ 606.817961][T14397] __x64_sys_mmap+0x125/0x190 [ 606.818005][T14397] do_syscall_64+0xcd/0x490 [ 606.818039][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.818065][T14397] RIP: 0033:0x7f73c498ebe9 [ 606.818087][T14397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.818109][T14397] RSP: 002b:00007f73c2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 606.818135][T14397] RAX: ffffffffffffffda RBX: 00007f73c4bb6090 RCX: 00007f73c498ebe9 [ 606.818151][T14397] RDX: 00000000000000df RSI: 000000000040000d RDI: 0000000000000000 [ 606.818165][T14397] RBP: 00007f73c4a11e19 R08: 0000000000000002 R09: 0000000000008000 [ 606.818179][T14397] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 606.818195][T14397] R13: 00007f73c4bb6128 R14: 00007f73c4bb6090 R15: 00007ffc8c551868 [ 606.818236][T14397] [ 607.324750][T14409] FAULT_INJECTION: forcing a failure. [ 607.324750][T14409] name fail_futex, interval 1, probability 0, space 0, times 0 [ 607.338766][T14409] CPU: 1 UID: 0 PID: 14409 Comm: syz.1.1699 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 607.338805][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.338822][T14409] Call Trace: [ 607.338831][T14409] [ 607.338841][T14409] dump_stack_lvl+0x16c/0x1f0 [ 607.338883][T14409] should_fail_ex+0x512/0x640 [ 607.338923][T14409] get_futex_key+0x1d0/0x1560 [ 607.338959][T14409] ? __pfx_get_futex_key+0x10/0x10 [ 607.339001][T14409] ? futex_private_hash_put+0x176/0x300 [ 607.339042][T14409] futex_wake+0xea/0x530 [ 607.339074][T14409] ? futex_wait+0x120/0x380 [ 607.339109][T14409] ? __pfx_futex_wait+0x10/0x10 [ 607.339144][T14409] ? __pfx_futex_wake+0x10/0x10 [ 607.339195][T14409] do_futex+0x1e3/0x350 [ 607.339226][T14409] ? __pfx_do_futex+0x10/0x10 [ 607.339259][T14409] ? __pfx___might_resched+0x10/0x10 [ 607.339289][T14409] __x64_sys_futex+0x1e0/0x4c0 [ 607.339323][T14409] ? __x64_sys_openat+0x174/0x210 [ 607.339359][T14409] ? __pfx___x64_sys_futex+0x10/0x10 [ 607.339405][T14409] do_syscall_64+0xcd/0x490 [ 607.339441][T14409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.339469][T14409] RIP: 0033:0x7f3461d8ebe9 [ 607.339491][T14409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.339517][T14409] RSP: 002b:00007f3462b860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 607.339543][T14409] RAX: ffffffffffffffda RBX: 00007f3461fb5fa8 RCX: 00007f3461d8ebe9 [ 607.339560][T14409] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3461fb5fac [ 607.339576][T14409] RBP: 00007f3461fb5fa0 R08: 00007f3462b87000 R09: 0000000000000000 [ 607.339592][T14409] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 607.339609][T14409] R13: 00007f3461fb6038 R14: 00007ffff50dd120 R15: 00007ffff50dd208 [ 607.339643][T14409] [ 608.163338][T14425] bond0: option all_slaves_active: invalid value () [ 608.572017][T14418] bond0: option all_slaves_active: invalid value () [ 608.615783][ T30] audit: type=1800 audit(1755188346.831:88): pid=14430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1703" name="features" dev="configfs" ino=47143 res=0 errno=0 [ 611.545446][ T30] audit: type=1800 audit(1755188349.760:89): pid=14466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1707" name="features" dev="configfs" ino=47225 res=0 errno=0 [ 616.164070][T14551] bond0: option all_slaves_active: invalid value () [ 616.254486][T14551] bond0: option all_slaves_active: invalid value () [ 617.604986][ T30] audit: type=1800 audit(1755188355.827:90): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1728" name="features" dev="configfs" ino=48405 res=0 errno=0 [ 618.337522][T14566] netlink: 'syz.4.1726': attribute type 19 has an invalid length. [ 618.360126][T14566] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1726'. [ 622.462015][T14654] bond0: option all_slaves_active: invalid value () [ 622.887275][T14654] bond0: option all_slaves_active: invalid value () [ 624.261781][ T30] audit: type=1800 audit(1755188362.434:91): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1748" name="features" dev="configfs" ino=47935 res=0 errno=0 [ 625.728397][ T30] audit: type=1800 audit(1755188363.943:92): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1753" name="features" dev="configfs" ino=48070 res=0 errno=0 [ 626.435077][T14711] bond0: option all_slaves_active: invalid value () [ 628.267830][T14756] bond0: option all_slaves_active: invalid value () [ 628.307509][T14744] bond0: option all_slaves_active: invalid value () [ 628.339059][ T30] audit: type=1800 audit(1755188366.552:93): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1760" name="features" dev="configfs" ino=48814 res=0 errno=0 [ 629.864065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.870843][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.295217][ T30] audit: type=1800 audit(1755188370.500:94): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1772" name="features" dev="configfs" ino=49459 res=0 errno=0 [ 632.565526][ T30] audit: type=1800 audit(1755188370.779:95): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1773" name="features" dev="configfs" ino=48937 res=0 errno=0 [ 635.843808][ T30] audit: type=1800 audit(1755188374.038:96): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1785" name="features" dev="configfs" ino=49063 res=0 errno=0 [ 638.950953][ T30] audit: type=1800 audit(1755188377.156:97): pid=14914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1794" name="features" dev="configfs" ino=50242 res=0 errno=0 [ 639.885827][T14922] bond0: option all_slaves_active: invalid value () [ 640.293579][T14922] bond0: option all_slaves_active: invalid value () [ 641.720520][ T30] audit: type=1800 audit(1755188379.915:98): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1804" name="features" dev="configfs" ino=50324 res=0 errno=0 [ 642.329791][T14960] bond0: option all_slaves_active: invalid value () [ 642.348808][T14960] bond0: option all_slaves_active: invalid value () [ 642.667596][T14963] bond0: option all_slaves_active: invalid value () [ 643.024185][T14952] bond0: option all_slaves_active: invalid value () [ 644.306180][ T30] audit: type=1800 audit(1755188382.514:99): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1808" name="features" dev="configfs" ino=50386 res=0 errno=0 [ 645.540960][ T30] audit: type=1800 audit(1755188383.743:100): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1813" name="features" dev="configfs" ino=50509 res=0 errno=0 [ 647.284973][T15020] bond0: option all_slaves_active: invalid value () [ 647.316802][ T30] audit: type=1800 audit(1755188385.522:101): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1821" name="features" dev="configfs" ino=51328 res=0 errno=0 [ 647.384404][T15034] bond0: option all_slaves_active: invalid value () [ 648.608696][ T30] audit: type=1800 audit(1755188386.811:102): pid=15057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1824" name="features" dev="configfs" ino=50739 res=0 errno=0 [ 649.832404][T15065] bond0: option all_slaves_active: invalid value () [ 649.869606][T15067] bond0: option all_slaves_active: invalid value () [ 651.072059][T15088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 651.257912][T15089] FAULT_INJECTION: forcing a failure. [ 651.257912][T15089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.386789][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.1.1832 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 651.386829][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.386847][T15089] Call Trace: [ 651.386857][T15089] [ 651.386868][T15089] dump_stack_lvl+0x16c/0x1f0 [ 651.386909][T15089] should_fail_ex+0x512/0x640 [ 651.386950][T15089] _copy_from_user+0x2e/0xd0 [ 651.386992][T15089] io_uring_setup+0xb4/0x2080 [ 651.387028][T15089] ? __pfx_io_uring_setup+0x10/0x10 [ 651.387059][T15089] ? do_futex+0x122/0x350 [ 651.387093][T15089] ? __pfx_do_futex+0x10/0x10 [ 651.387138][T15089] ? find_held_lock+0x2b/0x80 [ 651.387180][T15089] ? xfd_validate_state+0x61/0x180 [ 651.387227][T15089] __x64_sys_io_uring_setup+0xc2/0x170 [ 651.387261][T15089] do_syscall_64+0xcd/0x490 [ 651.387297][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.387323][T15089] RIP: 0033:0x7f3461d8ebe9 [ 651.387345][T15089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.387381][T15089] RSP: 002b:00007f3462b65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 651.387407][T15089] RAX: ffffffffffffffda RBX: 00007f3461fb6090 RCX: 00007f3461d8ebe9 [ 651.387426][T15089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000004a [ 651.387444][T15089] RBP: 00007f3461e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 651.387461][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.387478][T15089] R13: 00007f3461fb6128 R14: 00007f3461fb6090 R15: 00007ffff50dd208 [ 651.387514][T15089] [ 652.020452][T15100] syz.4.1836 (15100): drop_caches: 0 [ 652.097784][ T30] audit: type=1800 audit(1755188390.300:103): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1837" name="features" dev="configfs" ino=50885 res=0 errno=0 [ 652.640177][T15109] bond0: option all_slaves_active: invalid value () [ 652.739934][T15095] bond0: option all_slaves_active: invalid value () [ 653.925975][T15122] random: crng reseeded on system resumption [ 656.658124][ T30] audit: type=1800 audit(1755188394.847:104): pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1852" name="features" dev="configfs" ino=51073 res=0 errno=0 [ 658.198002][T15206] FAULT_INJECTION: forcing a failure. [ 658.198002][T15206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.284853][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.1.1857 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 658.284899][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 658.284914][T15206] Call Trace: [ 658.284924][T15206] [ 658.284934][T15206] dump_stack_lvl+0x16c/0x1f0 [ 658.284969][T15206] should_fail_ex+0x512/0x640 [ 658.285007][T15206] _copy_to_user+0x32/0xd0 [ 658.285046][T15206] simple_read_from_buffer+0xcb/0x170 [ 658.285075][T15206] proc_fail_nth_read+0x197/0x240 [ 658.285104][T15206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.285133][T15206] ? rw_verify_area+0xcf/0x6c0 [ 658.285156][T15206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 658.285195][T15206] vfs_read+0x1e4/0xcf0 [ 658.285231][T15206] ? __pfx___mutex_lock+0x10/0x10 [ 658.285260][T15206] ? __pfx_vfs_read+0x10/0x10 [ 658.285297][T15206] ? __fget_files+0x20e/0x3c0 [ 658.285318][T15206] ? do_raw_spin_unlock+0x160/0x230 [ 658.285366][T15206] ksys_read+0x12a/0x250 [ 658.285390][T15206] ? __pfx_ksys_read+0x10/0x10 [ 658.285423][T15206] do_syscall_64+0xcd/0x490 [ 658.285456][T15206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.285482][T15206] RIP: 0033:0x7f3461d8d5fc [ 658.285502][T15206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 658.285526][T15206] RSP: 002b:00007f3462b86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.285549][T15206] RAX: ffffffffffffffda RBX: 00007f3461fb5fa0 RCX: 00007f3461d8d5fc [ 658.285589][T15206] RDX: 000000000000000f RSI: 00007f3462b860a0 RDI: 0000000000000004 [ 658.285604][T15206] RBP: 00007f3462b86090 R08: 0000000000000000 R09: 0000000000000000 [ 658.285619][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.285634][T15206] R13: 00007f3461fb6038 R14: 00007f3461fb5fa0 R15: 00007ffff50dd208 [ 658.285669][T15206] [ 659.622375][T15237] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 659.961585][T15240] FAULT_INJECTION: forcing a failure. [ 659.961585][T15240] name failslab, interval 1, probability 0, space 0, times 0 [ 660.050999][T15240] CPU: 0 UID: 0 PID: 15240 Comm: syz.1.1863 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 660.051025][T15240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.051035][T15240] Call Trace: [ 660.051041][T15240] [ 660.051047][T15240] dump_stack_lvl+0x16c/0x1f0 [ 660.051070][T15240] should_fail_ex+0x512/0x640 [ 660.051091][T15240] ? __kvmalloc_node_noprof+0x124/0x620 [ 660.051109][T15240] should_failslab+0xc2/0x120 [ 660.051129][T15240] __kvmalloc_node_noprof+0x137/0x620 [ 660.051146][T15240] ? io_alloc_cache_init+0x33/0x170 [ 660.051171][T15240] ? io_alloc_cache_init+0x33/0x170 [ 660.051190][T15240] io_alloc_cache_init+0x33/0x170 [ 660.051211][T15240] io_uring_setup+0x5e1/0x2080 [ 660.051231][T15240] ? __pfx_io_uring_setup+0x10/0x10 [ 660.051248][T15240] ? do_futex+0x122/0x350 [ 660.051267][T15240] ? __pfx_do_futex+0x10/0x10 [ 660.051294][T15240] ? xfd_validate_state+0x61/0x180 [ 660.051314][T15240] ? __pfx_ksys_write+0x10/0x10 [ 660.051334][T15240] __x64_sys_io_uring_setup+0xc2/0x170 [ 660.051352][T15240] do_syscall_64+0xcd/0x490 [ 660.051371][T15240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.051386][T15240] RIP: 0033:0x7f3461d8ebe9 [ 660.051399][T15240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.051413][T15240] RSP: 002b:00007f3462b44038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 660.051429][T15240] RAX: ffffffffffffffda RBX: 00007f3461fb6180 RCX: 00007f3461d8ebe9 [ 660.051456][T15240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000004a [ 660.051466][T15240] RBP: 00007f3461e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 660.051475][T15240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.051483][T15240] R13: 00007f3461fb6218 R14: 00007f3461fb6180 R15: 00007ffff50dd208 [ 660.051502][T15240] [ 660.653172][T15230] bond0: option all_slaves_active: invalid value () [ 660.974386][T15221] bond0: option all_slaves_active: invalid value () [ 661.852727][ T30] audit: type=1800 audit(1755188400.045:105): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1866" name="features" dev="configfs" ino=51803 res=0 errno=0 [ 663.120163][ T30] audit: type=1800 audit(1755188401.304:106): pid=15285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1869" name="features" dev="configfs" ino=52470 res=0 errno=0 [ 663.983796][ T30] audit: type=1800 audit(1755188402.174:107): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1872" name="features" dev="configfs" ino=51868 res=0 errno=0 [ 664.777901][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 664.838072][T15311] netlink: 98 bytes leftover after parsing attributes in process `syz.4.1878'. [ 664.872453][ T30] audit: type=1107 audit(1755188403.073:108): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 665.431254][ T30] audit: type=1800 audit(1755188403.633:109): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1879" name="features" dev="configfs" ino=51982 res=0 errno=0 [ 667.483193][ T30] audit: type=1800 audit(1755188405.682:110): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1886" name="features" dev="configfs" ino=52631 res=0 errno=0 [ 668.089902][T15368] random: crng reseeded on system resumption [ 669.023986][T15380] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 670.036350][ T30] audit: type=1800 audit(1755188408.231:111): pid=15397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1892" name="features" dev="configfs" ino=52807 res=0 errno=0 [ 672.332408][ T30] audit: type=1800 audit(1755188410.500:112): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1899" name="features" dev="configfs" ino=52889 res=0 errno=0 [ 672.960995][T15445] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 677.859281][T15524] bond0: option all_slaves_active: invalid value () [ 678.153108][T15518] bond0: option all_slaves_active: invalid value () [ 678.497775][T15515] bond0: option all_slaves_active: invalid value () [ 678.507036][T15525] bond0: option all_slaves_active: invalid value () [ 678.733795][T15534] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 680.118184][ T30] audit: type=1800 audit(1755188418.306:113): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1920" name="features" dev="configfs" ino=54286 res=0 errno=0 [ 680.271228][ T30] audit: type=1800 audit(1755188418.456:114): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1921" name="features" dev="configfs" ino=53486 res=0 errno=0 [ 680.837913][ T30] audit: type=1800 audit(1755188418.995:115): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1923" name="features" dev="configfs" ino=54374 res=0 errno=0 [ 683.437903][T15591] FAULT_INJECTION: forcing a failure. [ 683.437903][T15591] name failslab, interval 1, probability 0, space 0, times 0 [ 683.467578][T15591] CPU: 0 UID: 0 PID: 15591 Comm: syz.2.1929 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 683.467617][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.467633][T15591] Call Trace: [ 683.467642][T15591] [ 683.467652][T15591] dump_stack_lvl+0x16c/0x1f0 [ 683.467687][T15591] should_fail_ex+0x512/0x640 [ 683.467717][T15591] ? fs_reclaim_acquire+0xae/0x150 [ 683.467753][T15591] should_failslab+0xc2/0x120 [ 683.467784][T15591] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 683.467813][T15591] ? security_inode_alloc+0x3b/0x2b0 [ 683.467845][T15591] security_inode_alloc+0x3b/0x2b0 [ 683.467873][T15591] inode_init_always_gfp+0xce4/0x1030 [ 683.467906][T15591] alloc_inode+0x86/0x240 [ 683.467939][T15591] new_inode+0x22/0x1c0 [ 683.467974][T15591] proc_pid_make_inode+0x22/0x160 [ 683.468013][T15591] proc_pident_instantiate+0x85/0x310 [ 683.468047][T15591] proc_pident_lookup+0x1f5/0x270 [ 683.468086][T15591] __lookup_slow+0x251/0x460 [ 683.468123][T15591] ? __pfx___lookup_slow+0x10/0x10 [ 683.468180][T15591] ? lookup_fast+0x156/0x610 [ 683.468209][T15591] walk_component+0x353/0x5b0 [ 683.468236][T15591] link_path_walk+0x627/0xe20 [ 683.468274][T15591] path_openat+0x1b0/0x2cb0 [ 683.468299][T15591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.468337][T15591] ? __pfx_path_openat+0x10/0x10 [ 683.468375][T15591] do_filp_open+0x20b/0x470 [ 683.468404][T15591] ? __pfx_do_filp_open+0x10/0x10 [ 683.468444][T15591] ? __pfx_kfree_link+0x10/0x10 [ 683.468490][T15591] ? alloc_fd+0x471/0x7d0 [ 683.468525][T15591] do_sys_openat2+0x11b/0x1d0 [ 683.468560][T15591] ? __pfx_do_sys_openat2+0x10/0x10 [ 683.468604][T15591] ? __fget_files+0x20e/0x3c0 [ 683.468632][T15591] __x64_sys_openat+0x174/0x210 [ 683.468664][T15591] ? __pfx___x64_sys_openat+0x10/0x10 [ 683.468694][T15591] ? ksys_write+0x1ac/0x250 [ 683.468732][T15591] do_syscall_64+0xcd/0x490 [ 683.468764][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.468787][T15591] RIP: 0033:0x7f73c498d550 [ 683.468806][T15591] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 683.468830][T15591] RSP: 002b:00007f73c5712f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 683.468854][T15591] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f73c498d550 [ 683.468871][T15591] RDX: 0000000000000002 RSI: 00007f73c5712fa0 RDI: 00000000ffffff9c [ 683.468885][T15591] RBP: 00007f73c5712fa0 R08: 0000000000000000 R09: 0000000000000000 [ 683.468898][T15591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 683.468913][T15591] R13: 00007f73c4bb6038 R14: 00007f73c4bb5fa0 R15: 00007ffc8c551868 [ 683.468945][T15591] [ 683.812184][ T30] audit: type=1800 audit(1755188422.004:116): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1931" name="features" dev="configfs" ino=54419 res=0 errno=0 [ 684.035649][T13807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.072019][T13807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.085441][T13807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.100968][T13807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.115960][T13807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 684.272499][ T30] audit: type=1800 audit(1755188422.464:117): pid=15604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1932" name="features" dev="configfs" ino=54540 res=0 errno=0 [ 685.057383][T15595] chnl_net:caif_netlink_parms(): no params data found [ 685.324373][T15595] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.342229][T15595] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.355947][T15595] bridge_slave_0: entered allmulticast mode [ 685.364106][T15595] bridge_slave_0: entered promiscuous mode [ 685.373367][T15595] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.380700][T15595] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.389682][T15595] bridge_slave_1: entered allmulticast mode [ 685.396865][T15595] bridge_slave_1: entered promiscuous mode [ 685.522907][T15595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.552614][T15595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.871445][T15595] team0: Port device team_slave_0 added [ 685.904606][T15595] team0: Port device team_slave_1 added [ 686.184785][T15595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.200582][ T5875] Bluetooth: hci5: command tx timeout [ 686.217443][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.246604][T15595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.264028][T15595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.332532][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.549870][T15595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.862967][T15595] hsr_slave_0: entered promiscuous mode [ 686.880438][T15595] hsr_slave_1: entered promiscuous mode [ 686.913572][T15595] debugfs: 'hsr0' already exists in 'hsr' [ 686.919690][T15595] Cannot create hsr debugfs directory [ 687.567554][T15650] bond0: option all_slaves_active: invalid value () [ 688.077224][T15595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.091168][T15595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 688.106497][T15595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 688.119739][T15595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 688.183819][ T30] audit: type=1800 audit(1755188426.372:118): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1946" name="features" dev="configfs" ino=53813 res=0 errno=0 [ 688.269922][ T5875] Bluetooth: hci5: command tx timeout [ 688.738787][T15595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.843262][T15595] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.927383][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.934587][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.963490][ T7153] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.970665][ T7153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.013982][ T30] audit: type=1800 audit(1755188427.201:119): pid=15680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1948" name="features" dev="configfs" ino=55022 res=0 errno=0 [ 689.176354][T15595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.641462][T15595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.073394][ T30] audit: type=1800 audit(1755188428.251:120): pid=15695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1952" name="features" dev="configfs" ino=55090 res=0 errno=0 [ 690.360706][ T5875] Bluetooth: hci5: command tx timeout [ 690.623668][T15595] veth0_vlan: entered promiscuous mode [ 690.712312][T15595] veth1_vlan: entered promiscuous mode [ 690.889901][T15595] veth0_macvtap: entered promiscuous mode [ 691.161599][T15595] veth1_macvtap: entered promiscuous mode [ 691.319789][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.326919][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.356238][T15595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.378440][T15595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.435011][ T7153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.490101][ T7153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.640713][T15718] bond0: option all_slaves_active: invalid value () [ 691.657274][T15718] bond0: option all_slaves_active: invalid value () [ 691.762111][ T7153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.776019][ T7153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.124559][ T30] audit: type=1800 audit(1755188430.310:121): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1956" name="features" dev="configfs" ino=55280 res=0 errno=0 [ 692.351508][ T7165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.370971][ T7165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.435195][ T5875] Bluetooth: hci5: command tx timeout [ 692.779290][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.813256][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.049945][T15737] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 693.393662][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 694.298586][ T30] audit: type=1800 audit(1755188432.429:122): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1962" name="features" dev="configfs" ino=55503 res=0 errno=0 [ 696.302076][T15801] bond0: option all_slaves_active: invalid value () [ 696.395653][T15795] bond0: option all_slaves_active: invalid value () [ 698.429544][ T30] audit: type=1800 audit(1755188436.596:123): pid=15839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1974" name="dbroot" dev="configfs" ino=55653 res=0 errno=0 [ 699.905847][T15861] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 700.683155][T15873] bond0: option all_slaves_active: invalid value () [ 700.732294][T15873] bond0: option all_slaves_active: invalid value () [ 701.734540][ T30] audit: type=1800 audit(1755188439.905:124): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1987" name="features" dev="configfs" ino=56736 res=0 errno=0 [ 702.555165][ T30] audit: type=1800 audit(1755188440.694:125): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1989" name="features" dev="configfs" ino=55809 res=0 errno=0 [ 703.463129][T15908] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1991'. [ 704.086878][T15936] ubi: mtd0 is already attached to ubi0 [ 704.126806][T15932] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 705.145860][T15942] capability: warning: `syz.1.1995' uses deprecated v2 capabilities in a way that may be insecure [ 705.191914][T15954] FAULT_INJECTION: forcing a failure. [ 705.191914][T15954] name failslab, interval 1, probability 0, space 0, times 0 [ 705.245150][T15954] CPU: 0 UID: 0 PID: 15954 Comm: syz.5.1998 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 705.245190][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.245205][T15954] Call Trace: [ 705.245214][T15954] [ 705.245225][T15954] dump_stack_lvl+0x16c/0x1f0 [ 705.245261][T15954] should_fail_ex+0x512/0x640 [ 705.245293][T15954] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 705.245321][T15954] should_failslab+0xc2/0x120 [ 705.245349][T15954] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 705.245375][T15954] ? __mpol_dup+0x74/0x380 [ 705.245409][T15954] __mpol_dup+0x74/0x380 [ 705.245441][T15954] ? __pfx___mpol_dup+0x10/0x10 [ 705.245471][T15954] ? trace_kmem_cache_alloc+0x28/0xc0 [ 705.245504][T15954] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 705.245530][T15954] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 705.245560][T15954] ? sp_alloc+0x27/0x160 [ 705.245597][T15954] sp_alloc+0x4d/0x160 [ 705.245632][T15954] mpol_set_shared_policy+0xab/0x8c0 [ 705.245673][T15954] ? __pfx_shmem_set_policy+0x10/0x10 [ 705.245705][T15954] mbind_range+0x339/0x570 [ 705.245744][T15954] do_mbind+0x848/0xf30 [ 705.245787][T15954] ? __pfx_do_mbind+0x10/0x10 [ 705.245822][T15954] ? ksys_write+0x190/0x250 [ 705.245855][T15954] ? __mutex_unlock_slowpath+0x163/0x800 [ 705.245895][T15954] ? __pfx_get_nodes+0x10/0x10 [ 705.245933][T15954] ? __fget_files+0x20e/0x3c0 [ 705.245967][T15954] kernel_mbind+0x1e3/0x1f0 [ 705.246005][T15954] ? __pfx_kernel_mbind+0x10/0x10 [ 705.246087][T15954] do_syscall_64+0xcd/0x490 [ 705.246117][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.246139][T15954] RIP: 0033:0x7f6a96b8ebe9 [ 705.246159][T15954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.246182][T15954] RSP: 002b:00007f6a97916038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 705.246206][T15954] RAX: ffffffffffffffda RBX: 00007f6a96db6180 RCX: 00007f6a96b8ebe9 [ 705.246223][T15954] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 705.246239][T15954] RBP: 00007f6a97916090 R08: 0000000000000006 R09: 0000000000000002 [ 705.246255][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.246270][T15954] R13: 00007f6a96db6218 R14: 00007f6a96db6180 R15: 00007ffdce580048 [ 705.246306][T15954] [ 706.696453][T15944] bond0: option all_slaves_active: invalid value () [ 707.163733][T15979] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 708.081898][T15990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 708.146993][ T30] audit: type=1800 audit(1755188446.322:126): pid=15991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2004" name="features" dev="configfs" ino=56985 res=0 errno=0 [ 708.543592][T15995] FAULT_INJECTION: forcing a failure. [ 708.543592][T15995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.698304][T16000] ubi: mtd0 is already attached to ubi0 [ 708.733135][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.1.2013 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 708.733178][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.733194][T15995] Call Trace: [ 708.733204][T15995] [ 708.733216][T15995] dump_stack_lvl+0x16c/0x1f0 [ 708.733255][T15995] should_fail_ex+0x512/0x640 [ 708.733297][T15995] should_fail_alloc_page+0xe7/0x130 [ 708.733335][T15995] prepare_alloc_pages+0x3c2/0x610 [ 708.733374][T15995] ? rcu_is_watching+0x12/0xc0 [ 708.733406][T15995] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 708.733446][T15995] ? lock_acquire+0x179/0x350 [ 708.733479][T15995] ? find_held_lock+0x2b/0x80 [ 708.733511][T15995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.733564][T15995] ? __lock_acquire+0x62e/0x1ce0 [ 708.733605][T15995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.733647][T15995] ? policy_nodemask+0xea/0x4e0 [ 708.733684][T15995] alloc_pages_mpol+0x1fb/0x550 [ 708.733720][T15995] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 708.733757][T15995] ? __lock_acquire+0x62e/0x1ce0 [ 708.733789][T15995] folio_alloc_mpol_noprof+0x36/0x2f0 [ 708.733824][T15995] vma_alloc_folio_noprof+0xed/0x1e0 [ 708.733854][T15995] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 708.733925][T15995] do_pte_missing+0x2230/0x3ba0 [ 708.733952][T15995] ? find_held_lock+0x2b/0x80 [ 708.733985][T15995] __handle_mm_fault+0x152a/0x2a50 [ 708.734022][T15995] ? __pfx___handle_mm_fault+0x10/0x10 [ 708.734053][T15995] ? __pte_offset_map_lock+0x174/0x310 [ 708.734088][T15995] ? find_held_lock+0x2b/0x80 [ 708.734126][T15995] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 708.734172][T15995] handle_mm_fault+0x589/0xd10 [ 708.734206][T15995] __get_user_pages+0x551/0x34a0 [ 708.734259][T15995] ? __pfx___get_user_pages+0x10/0x10 [ 708.734305][T15995] populate_vma_page_range+0x267/0x3f0 [ 708.734345][T15995] ? __pfx_populate_vma_page_range+0x10/0x10 [ 708.734382][T15995] ? __pfx_find_vma_intersection+0x10/0x10 [ 708.734412][T15995] ? do_mmap+0x69c/0x1210 [ 708.734447][T15995] __mm_populate+0x1d8/0x380 [ 708.734481][T15995] ? __pfx___mm_populate+0x10/0x10 [ 708.734520][T15995] ? up_write+0x1b2/0x520 [ 708.734567][T15995] vm_mmap_pgoff+0x37f/0x470 [ 708.734609][T15995] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 708.734647][T15995] ? find_held_lock+0x2b/0x80 [ 708.734678][T15995] ? __x64_sys_futex+0x1e0/0x4c0 [ 708.734709][T15995] ? __x64_sys_futex+0x1e9/0x4c0 [ 708.734746][T15995] ksys_mmap_pgoff+0x7d/0x5c0 [ 708.734781][T15995] ? xfd_validate_state+0x61/0x180 [ 708.734823][T15995] __x64_sys_mmap+0x125/0x190 [ 708.734865][T15995] do_syscall_64+0xcd/0x490 [ 708.734901][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.734928][T15995] RIP: 0033:0x7f3461d8ebe9 [ 708.734951][T15995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.734976][T15995] RSP: 002b:00007f3462b44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 708.735001][T15995] RAX: ffffffffffffffda RBX: 00007f3461fb6180 RCX: 00007f3461d8ebe9 [ 708.735019][T15995] RDX: 00000000000000df RSI: 000000000040000d RDI: 0000000000000000 [ 708.735036][T15995] RBP: 00007f3461e11e19 R08: 0000000000000002 R09: 0000000000008000 [ 708.735053][T15995] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 708.735071][T15995] R13: 00007f3461fb6218 R14: 00007f3461fb6180 R15: 00007ffff50dd208 [ 708.735108][T15995] [ 709.940965][T16002] bond0: option all_slaves_active: invalid value () [ 710.103953][ T30] audit: type=1800 audit(1755188448.261:127): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2008" name="features" dev="configfs" ino=57034 res=0 errno=0 [ 710.280112][T16002] bond0: option all_slaves_active: invalid value () [ 712.848517][ T30] audit: type=1800 audit(1755188451.019:128): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2017" name="features" dev="configfs" ino=57176 res=0 errno=0 [ 715.466324][T16092] bond0: option all_slaves_active: invalid value () [ 715.801073][T16086] bond0: option all_slaves_active: invalid value () [ 715.830757][ T30] audit: type=1800 audit(1755188453.998:129): pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2030" name="features" dev="configfs" ino=57565 res=0 errno=0 [ 716.272346][T16109] bond0: option all_slaves_active: invalid value () [ 717.013496][T16104] bond0: option all_slaves_active: invalid value () [ 718.031526][T16138] bond0: option all_slaves_active: invalid value () [ 718.430773][T16143] bond0: option all_slaves_active: invalid value () [ 718.562544][ T30] audit: type=1800 audit(1755188456.726:130): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2036" name="features" dev="configfs" ino=57667 res=0 errno=0 [ 719.501761][T16160] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 721.948339][ T30] audit: type=1800 audit(1755188460.115:131): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2044" name="dbroot" dev="configfs" ino=58665 res=0 errno=0 [ 722.133849][T16191] bond0: option all_slaves_active: invalid value () [ 722.383265][T16192] bond0: option all_slaves_active: invalid value () [ 723.484001][ T30] audit: type=1800 audit(1755188461.644:132): pid=16209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2048" name="features" dev="configfs" ino=57785 res=0 errno=0 [ 724.751735][T16222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 725.522974][ T30] audit: type=1800 audit(1755188463.673:133): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2051" name="features" dev="configfs" ino=58780 res=0 errno=0 [ 726.230964][T16242] ptrace attach of ""[16243] was attempted by "./syz-executor exec"[16242] [ 727.380071][ T30] audit: type=1800 audit(1755188465.552:134): pid=16262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2059" name="features" dev="configfs" ino=58814 res=0 errno=0 [ 728.092734][T16268] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 728.653022][T16280] bond0: option all_slaves_active: invalid value () [ 728.782996][T16280] bond0: option all_slaves_active: invalid value () [ 728.888969][ T30] audit: type=1800 audit(1755188467.051:135): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2062" name="features" dev="configfs" ino=58842 res=0 errno=0 [ 728.934953][T16285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 731.882895][ T30] audit: type=1800 audit(1755188470.020:136): pid=16337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2074" name="features" dev="configfs" ino=58985 res=0 errno=0 [ 732.479014][ T30] audit: type=1800 audit(1755188470.629:137): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2075" name="features" dev="configfs" ino=58126 res=0 errno=0 [ 735.346984][T16380] Unable to find swap-space signature [ 736.476163][T16398] bond0: option all_slaves_active: invalid value () [ 737.142687][T16391] bond0: option all_slaves_active: invalid value () [ 737.431674][T13540] svc: failed to register nfsdv3 RPC service (errno 512). [ 737.522443][T13540] svc: failed to register nfsaclv3 RPC service (errno 512). [ 739.542471][ T30] audit: type=1800 audit(1755188477.686:138): pid=16449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2097" name="features" dev="configfs" ino=59337 res=0 errno=0 [ 740.748430][T16461] bond0: option all_slaves_active: invalid value () [ 740.755810][T16466] bond0: option all_slaves_active: invalid value () [ 741.396109][T16485] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.458440][T16485] FAULT_INJECTION: forcing a failure. [ 741.458440][T16485] name failslab, interval 1, probability 0, space 0, times 0 [ 741.487251][T16485] CPU: 0 UID: 0 PID: 16485 Comm: syz.5.2103 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 741.487286][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.487301][T16485] Call Trace: [ 741.487310][T16485] [ 741.487320][T16485] dump_stack_lvl+0x16c/0x1f0 [ 741.487357][T16485] should_fail_ex+0x512/0x640 [ 741.487389][T16485] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 741.487425][T16485] should_failslab+0xc2/0x120 [ 741.487457][T16485] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 741.487489][T16485] ? kstrdup_const+0x63/0x80 [ 741.487523][T16485] kstrdup+0x53/0x100 [ 741.487552][T16485] kstrdup_const+0x63/0x80 [ 741.487578][T16485] alloc_vfsmnt+0xea/0x6b0 [ 741.487612][T16485] vfs_create_mount.part.0+0x44/0x4b0 [ 741.487653][T16485] fc_mount+0xd5/0x110 [ 741.487686][T16485] trace_automount+0xc3/0xd0 [ 741.487714][T16485] __traverse_mounts+0x192/0x790 [ 741.487754][T16485] step_into+0x5aa/0x2270 [ 741.487787][T16485] ? __pfx_step_into+0x10/0x10 [ 741.487809][T16485] ? __d_lookup+0x266/0x4a0 [ 741.487845][T16485] ? lookup_fast+0x156/0x610 [ 741.487873][T16485] walk_component+0xfc/0x5b0 [ 741.487900][T16485] link_path_walk+0x627/0xe20 [ 741.487939][T16485] path_openat+0x1b0/0x2cb0 [ 741.487965][T16485] ? __pfx_stack_trace_save+0x10/0x10 [ 741.487993][T16485] ? stack_depot_save_flags+0x29/0x9c0 [ 741.488029][T16485] ? __pfx_path_openat+0x10/0x10 [ 741.488053][T16485] ? kasan_save_track+0x14/0x30 [ 741.488081][T16485] ? __kasan_slab_alloc+0x89/0x90 [ 741.488106][T16485] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 741.488132][T16485] ? getname_flags.part.0+0x4c/0x550 [ 741.488165][T16485] ? getname_flags+0x93/0xf0 [ 741.488186][T16485] ? __do_sys_swapoff+0xeb/0x2e80 [ 741.488214][T16485] ? do_syscall_64+0xcd/0x490 [ 741.488241][T16485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.488274][T16485] do_filp_open+0x20b/0x470 [ 741.488299][T16485] ? __pfx_do_filp_open+0x10/0x10 [ 741.488342][T16485] ? find_held_lock+0x2b/0x80 [ 741.488361][T16485] ? __might_fault+0xe3/0x190 [ 741.488383][T16485] ? __might_fault+0xe3/0x190 [ 741.488402][T16485] ? __might_fault+0x13b/0x190 [ 741.488428][T16485] file_open_name+0x2a3/0x450 [ 741.488459][T16485] ? __pfx_file_open_name+0x10/0x10 [ 741.488490][T16485] ? getname_flags.part.0+0x1c5/0x550 [ 741.488523][T16485] __do_sys_swapoff+0x12b/0x2e80 [ 741.488548][T16485] ? ksys_write+0x190/0x250 [ 741.488573][T16485] ? __mutex_unlock_slowpath+0x163/0x800 [ 741.488602][T16485] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.488630][T16485] ? __fget_files+0x20e/0x3c0 [ 741.488653][T16485] ? __pfx___do_sys_swapoff+0x10/0x10 [ 741.488678][T16485] ? fput+0x9b/0xd0 [ 741.488703][T16485] ? ksys_write+0x1ac/0x250 [ 741.488724][T16485] ? __pfx_ksys_write+0x10/0x10 [ 741.488753][T16485] do_syscall_64+0xcd/0x490 [ 741.488778][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.488797][T16485] RIP: 0033:0x7f6a96b8ebe9 [ 741.488814][T16485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.488833][T16485] RSP: 002b:00007f6a97958038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a8 [ 741.488853][T16485] RAX: ffffffffffffffda RBX: 00007f6a96db5fa0 RCX: 00007f6a96b8ebe9 [ 741.488867][T16485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 741.488879][T16485] RBP: 00007f6a97958090 R08: 0000000000000000 R09: 0000000000000000 [ 741.488892][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.488903][T16485] R13: 00007f6a96db6038 R14: 00007f6a96db5fa0 R15: 00007ffdce580048 [ 741.488930][T16485] [ 743.814541][ T30] audit: type=1800 audit(1755188481.974:139): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2108" name="features" dev="configfs" ino=59677 res=0 errno=0 [ 744.940297][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 745.564387][T16540] zswap: compressor not available [ 747.084781][T16576] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 747.276575][T16578] FAULT_INJECTION: forcing a failure. [ 747.276575][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 747.316757][T16578] CPU: 1 UID: 0 PID: 16578 Comm: syz.0.2122 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 747.316784][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.316794][T16578] Call Trace: [ 747.316800][T16578] [ 747.316806][T16578] dump_stack_lvl+0x16c/0x1f0 [ 747.316829][T16578] should_fail_ex+0x512/0x640 [ 747.316849][T16578] ? __kvmalloc_node_noprof+0x124/0x620 [ 747.316869][T16578] should_failslab+0xc2/0x120 [ 747.316889][T16578] __kvmalloc_node_noprof+0x137/0x620 [ 747.316905][T16578] ? io_alloc_cache_init+0x33/0x170 [ 747.316929][T16578] ? io_alloc_cache_init+0x33/0x170 [ 747.316947][T16578] io_alloc_cache_init+0x33/0x170 [ 747.316968][T16578] io_uring_setup+0x61d/0x2080 [ 747.316988][T16578] ? __pfx_io_uring_setup+0x10/0x10 [ 747.317004][T16578] ? do_futex+0x122/0x350 [ 747.317023][T16578] ? __pfx_do_futex+0x10/0x10 [ 747.317041][T16578] ? __do_sys_capget+0x109/0x540 [ 747.317065][T16578] ? xfd_validate_state+0x61/0x180 [ 747.317090][T16578] __x64_sys_io_uring_setup+0xc2/0x170 [ 747.317108][T16578] do_syscall_64+0xcd/0x490 [ 747.317127][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.317142][T16578] RIP: 0033:0x7f1f3478ebe9 [ 747.317155][T16578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.317169][T16578] RSP: 002b:00007f1f355ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 747.317184][T16578] RAX: ffffffffffffffda RBX: 00007f1f349b6180 RCX: 00007f1f3478ebe9 [ 747.317194][T16578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000004a [ 747.317202][T16578] RBP: 00007f1f34811e19 R08: 0000000000000000 R09: 0000000000000000 [ 747.317211][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.317219][T16578] R13: 00007f1f349b6218 R14: 00007f1f349b6180 R15: 00007ffea8168018 [ 747.317240][T16578] [ 747.783491][T16587] blktrace: Concurrent blktraces are not allowed on mtdblock0 [ 747.830611][ T30] audit: type=1800 audit(1755188485.982:140): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2127" name="features" dev="configfs" ino=59788 res=0 errno=0 [ 749.519366][ T30] audit: type=1800 audit(1755188487.661:141): pid=16614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2132" name="features" dev="configfs" ino=59911 res=0 errno=0 [ 750.236089][ T30] audit: type=1800 audit(1755188488.391:142): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2136" name="features" dev="configfs" ino=59982 res=0 errno=0 [ 750.332408][T16628] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 750.839471][T16634] netlink: 'syz.2.2139': attribute type 11 has an invalid length. [ 750.849889][T16634] netlink: 'syz.2.2139': attribute type 11 has an invalid length. [ 750.896657][T16634] netlink: 'syz.2.2139': attribute type 11 has an invalid length. [ 750.977270][T16638] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 751.244637][T16643] FAULT_INJECTION: forcing a failure. [ 751.244637][T16643] name failslab, interval 1, probability 0, space 0, times 0 [ 751.285785][T16643] CPU: 1 UID: 0 PID: 16643 Comm: syz.1.2140 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 751.285815][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.285825][T16643] Call Trace: [ 751.285831][T16643] [ 751.285838][T16643] dump_stack_lvl+0x16c/0x1f0 [ 751.285868][T16643] should_fail_ex+0x512/0x640 [ 751.285889][T16643] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 751.285908][T16643] should_failslab+0xc2/0x120 [ 751.285928][T16643] __kmalloc_cache_noprof+0x6a/0x3e0 [ 751.285944][T16643] ? drm_atomic_state_alloc+0xb8/0x120 [ 751.285963][T16643] drm_atomic_state_alloc+0xb8/0x120 [ 751.285978][T16643] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 751.285994][T16643] ? __pfx___might_resched+0x10/0x10 [ 751.286014][T16643] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 751.286030][T16643] ? __mutex_lock+0x1c4/0x10b0 [ 751.286046][T16643] ? rcu_is_watching+0x12/0xc0 [ 751.286081][T16643] drm_client_modeset_commit_locked+0x14d/0x580 [ 751.286105][T16643] drm_client_modeset_commit+0x4f/0x80 [ 751.286288][T16643] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 751.286317][T16643] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 751.286339][T16643] drm_fbdev_client_restore+0x2c/0x40 [ 751.286359][T16643] drm_client_dev_restore+0x1f3/0x2a0 [ 751.286378][T16643] drm_release+0x2c4/0x360 [ 751.286394][T16643] ? __pfx_drm_release+0x10/0x10 [ 751.286408][T16643] __fput+0x3ff/0xb70 [ 751.286434][T16643] task_work_run+0x150/0x240 [ 751.286457][T16643] ? __pfx_task_work_run+0x10/0x10 [ 751.286479][T16643] ? __pfx___do_sys_close_range+0x10/0x10 [ 751.286502][T16643] exit_to_user_mode_loop+0xeb/0x110 [ 751.286525][T16643] do_syscall_64+0x3f6/0x490 [ 751.286545][T16643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.286560][T16643] RIP: 0033:0x7f3461d8ebe9 [ 751.286574][T16643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.286588][T16643] RSP: 002b:00007f3462b65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 751.286602][T16643] RAX: 0000000000000000 RBX: 00007f3461fb6090 RCX: 00007f3461d8ebe9 [ 751.286612][T16643] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 751.286620][T16643] RBP: 00007f3461e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 751.286630][T16643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.286638][T16643] R13: 00007f3461fb6128 R14: 00007f3461fb6090 R15: 00007ffff50dd208 [ 751.286662][T16643] [ 751.622867][T16643] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2140'. [ 752.802261][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.812150][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.351767][T16686] bond0: option all_slaves_active: invalid value () [ 753.539868][T16680] bond0: option all_slaves_active: invalid value () [ 754.056708][T16698] bond0: option all_slaves_active: invalid value () [ 754.241094][T16694] bond0: option all_slaves_active: invalid value () [ 758.505475][ T30] audit: type=1800 audit(1755188496.646:143): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2161" name="features" dev="configfs" ino=60331 res=0 errno=0 [ 759.469238][ T30] audit: type=1800 audit(1755188497.616:144): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2166" name="features" dev="configfs" ino=61444 res=0 errno=0 [ 759.962482][T16788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 760.215412][ T30] audit: type=1800 audit(1755188498.336:145): pid=16790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2175" name="features" dev="configfs" ino=61202 res=0 errno=0 [ 760.290677][T16791] FAULT_INJECTION: forcing a failure. [ 760.290677][T16791] name failslab, interval 1, probability 0, space 0, times 0 [ 760.366322][T16791] CPU: 0 UID: 0 PID: 16791 Comm: syz.1.2167 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 760.366372][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.366389][T16791] Call Trace: [ 760.366399][T16791] [ 760.366410][T16791] dump_stack_lvl+0x16c/0x1f0 [ 760.366450][T16791] should_fail_ex+0x512/0x640 [ 760.366484][T16791] ? __kvmalloc_node_noprof+0x124/0x620 [ 760.366518][T16791] should_failslab+0xc2/0x120 [ 760.366551][T16791] __kvmalloc_node_noprof+0x137/0x620 [ 760.366581][T16791] ? io_alloc_cache_init+0x33/0x170 [ 760.366622][T16791] ? io_alloc_cache_init+0x33/0x170 [ 760.366654][T16791] io_alloc_cache_init+0x33/0x170 [ 760.366691][T16791] io_uring_setup+0x5e1/0x2080 [ 760.366727][T16791] ? __pfx_io_uring_setup+0x10/0x10 [ 760.366758][T16791] ? do_futex+0x122/0x350 [ 760.366790][T16791] ? __pfx_do_futex+0x10/0x10 [ 760.366886][T16791] ? xfd_validate_state+0x61/0x180 [ 760.366926][T16791] ? __pfx_ksys_write+0x10/0x10 [ 760.366964][T16791] __x64_sys_io_uring_setup+0xc2/0x170 [ 760.367000][T16791] do_syscall_64+0xcd/0x490 [ 760.367035][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.367062][T16791] RIP: 0033:0x7f3461d8ebe9 [ 760.367083][T16791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.367109][T16791] RSP: 002b:00007f3462b44038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 760.367134][T16791] RAX: ffffffffffffffda RBX: 00007f3461fb6180 RCX: 00007f3461d8ebe9 [ 760.367154][T16791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000004a [ 760.367171][T16791] RBP: 00007f3461e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 760.367187][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.367204][T16791] R13: 00007f3461fb6218 R14: 00007f3461fb6180 R15: 00007ffff50dd208 [ 760.367241][T16791] [ 761.201839][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2168'. [ 761.423632][T16802] veth0_macvtap: left promiscuous mode [ 762.090951][ T30] audit: type=1806 audit(1755188500.225:146): xattr="." res=0 [ 763.148006][ T30] audit: type=1800 audit(1755188501.284:147): pid=16827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2177" name="features" dev="configfs" ino=61635 res=0 errno=0 [ 763.531436][ T30] audit: type=1800 audit(1755188501.664:148): pid=16831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2178" name="features" dev="configfs" ino=61406 res=0 errno=0 [ 764.442217][T16844] FAULT_INJECTION: forcing a failure. [ 764.442217][T16844] name failslab, interval 1, probability 0, space 0, times 0 [ 764.585936][T16844] CPU: 1 UID: 0 PID: 16844 Comm: syz.0.2181 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 764.585979][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.585997][T16844] Call Trace: [ 764.586006][T16844] [ 764.586018][T16844] dump_stack_lvl+0x16c/0x1f0 [ 764.586056][T16844] should_fail_ex+0x512/0x640 [ 764.586090][T16844] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 764.586122][T16844] should_failslab+0xc2/0x120 [ 764.586157][T16844] __kmalloc_cache_noprof+0x6a/0x3e0 [ 764.586185][T16844] ? drm_atomic_state_alloc+0xb8/0x120 [ 764.586220][T16844] drm_atomic_state_alloc+0xb8/0x120 [ 764.586249][T16844] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 764.586277][T16844] ? __pfx___might_resched+0x10/0x10 [ 764.586315][T16844] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 764.586343][T16844] ? __mutex_lock+0x1c4/0x10b0 [ 764.586373][T16844] ? rcu_is_watching+0x12/0xc0 [ 764.586448][T16844] drm_client_modeset_commit_locked+0x14d/0x580 [ 764.586485][T16844] drm_client_modeset_commit+0x4f/0x80 [ 764.586514][T16844] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 764.586559][T16844] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 764.586595][T16844] drm_fbdev_client_restore+0x2c/0x40 [ 764.586629][T16844] drm_client_dev_restore+0x1f3/0x2a0 [ 764.586663][T16844] drm_release+0x2c4/0x360 [ 764.586691][T16844] ? __pfx_drm_release+0x10/0x10 [ 764.586713][T16844] __fput+0x3ff/0xb70 [ 764.586759][T16844] task_work_run+0x150/0x240 [ 764.586798][T16844] ? __pfx_task_work_run+0x10/0x10 [ 764.586836][T16844] ? __pfx___do_sys_close_range+0x10/0x10 [ 764.586876][T16844] exit_to_user_mode_loop+0xeb/0x110 [ 764.586915][T16844] do_syscall_64+0x3f6/0x490 [ 764.586950][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.586977][T16844] RIP: 0033:0x7f1f3478ebe9 [ 764.586999][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.587024][T16844] RSP: 002b:00007f1f355cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 764.587051][T16844] RAX: 0000000000000000 RBX: 00007f1f349b6090 RCX: 00007f1f3478ebe9 [ 764.587069][T16844] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 764.587085][T16844] RBP: 00007f1f34811e19 R08: 0000000000000000 R09: 0000000000000000 [ 764.587103][T16844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.587120][T16844] R13: 00007f1f349b6128 R14: 00007f1f349b6090 R15: 00007ffea8168018 [ 764.587159][T16844] [ 764.845544][T16844] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2181'. [ 764.931981][ T30] audit: type=1800 audit(1755188503.083:149): pid=16848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2183" name="features" dev="configfs" ino=62592 res=0 errno=0 [ 765.312043][T16852] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 766.951008][T16879] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 769.720659][T16919] FAULT_INJECTION: forcing a failure. [ 769.720659][T16919] name failslab, interval 1, probability 0, space 0, times 0 [ 769.841340][T16919] CPU: 1 UID: 0 PID: 16919 Comm: syz.1.2202 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 769.841377][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.841393][T16919] Call Trace: [ 769.841402][T16919] [ 769.841414][T16919] dump_stack_lvl+0x16c/0x1f0 [ 769.841449][T16919] should_fail_ex+0x512/0x640 [ 769.841481][T16919] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 769.841512][T16919] should_failslab+0xc2/0x120 [ 769.841544][T16919] __kmalloc_cache_noprof+0x6a/0x3e0 [ 769.841571][T16919] ? kvm_dev_ioctl+0xa7a/0x1af0 [ 769.841608][T16919] kvm_dev_ioctl+0xa7a/0x1af0 [ 769.841640][T16919] ? find_held_lock+0x2b/0x80 [ 769.841664][T16919] ? hook_file_ioctl_common+0x145/0x410 [ 769.841696][T16919] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 769.841726][T16919] ? __fget_files+0x20e/0x3c0 [ 769.841759][T16919] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 769.841796][T16919] __x64_sys_ioctl+0x18e/0x210 [ 769.841835][T16919] do_syscall_64+0xcd/0x490 [ 769.841869][T16919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.841893][T16919] RIP: 0033:0x7f3461d8ebe9 [ 769.841914][T16919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.841937][T16919] RSP: 002b:00007f3462b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.841962][T16919] RAX: ffffffffffffffda RBX: 00007f3461fb5fa0 RCX: 00007f3461d8ebe9 [ 769.841979][T16919] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 769.841994][T16919] RBP: 00007f3462b86090 R08: 0000000000000000 R09: 0000000000000000 [ 769.842009][T16919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.842024][T16919] R13: 00007f3461fb6038 R14: 00007f3461fb5fa0 R15: 00007ffff50dd208 [ 769.842059][T16919] [ 770.107332][ T30] audit: type=1800 audit(1755188508.211:150): pid=16921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2201" name="features" dev="configfs" ino=62839 res=0 errno=0 [ 770.188110][T16923] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 770.847411][ T30] audit: type=1800 audit(1755188508.980:151): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2205" name="features" dev="configfs" ino=62868 res=0 errno=0 [ 772.558345][ T30] audit: type=1800 audit(1755188510.689:152): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2211" name="features" dev="configfs" ino=61983 res=0 errno=0 [ 773.560180][T16977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 774.778450][T16990] bond0: option all_slaves_active: invalid value () [ 774.808988][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 774.826397][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 774.843362][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 774.859423][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 774.875826][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 775.112157][T16983] bond0: option all_slaves_active: invalid value () [ 775.252089][ T30] audit: type=1800 audit(1755188513.388:153): pid=17000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2219" name="features" dev="configfs" ino=63108 res=0 errno=0 [ 776.166901][T16993] chnl_net:caif_netlink_parms(): no params data found [ 776.740841][T17030] bond0: option all_slaves_active: invalid value () [ 776.851927][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.918299][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.941135][T16993] bridge_slave_0: entered allmulticast mode [ 776.954265][ T5875] Bluetooth: hci6: command tx timeout [ 776.971592][T16993] bridge_slave_0: entered promiscuous mode [ 777.000145][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.026260][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.105826][T16993] bridge_slave_1: entered allmulticast mode [ 777.116836][T16993] bridge_slave_1: entered promiscuous mode [ 777.198494][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.220931][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.294362][T16993] team0: Port device team_slave_0 added [ 777.303415][T16993] team0: Port device team_slave_1 added [ 777.421994][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.432140][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.488342][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.540819][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.552141][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.579498][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.692476][ T30] audit: type=1800 audit(1755188515.827:154): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2227" name="features" dev="configfs" ino=62121 res=0 errno=0 [ 778.119714][T17039] bond0: option all_slaves_active: invalid value () [ 778.475763][T16993] hsr_slave_0: entered promiscuous mode [ 778.489922][T16993] hsr_slave_1: entered promiscuous mode [ 778.498274][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 778.504050][T16993] Cannot create hsr debugfs directory [ 779.034807][ T5875] Bluetooth: hci6: command tx timeout [ 779.462410][T16993] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.497586][T16993] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 779.543401][T16993] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 779.594786][T16993] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 779.903315][T16993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.977233][T16993] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.992603][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.000034][ T7155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.056308][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.063520][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.233954][T17089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 780.680128][T16993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.126079][ T5875] Bluetooth: hci6: command tx timeout [ 781.641082][T17118] FAULT_INJECTION: forcing a failure. [ 781.641082][T17118] name fail_futex, interval 1, probability 0, space 0, times 0 [ 781.704836][T17118] CPU: 1 UID: 0 PID: 17118 Comm: syz.0.2241 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 781.704876][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.704892][T17118] Call Trace: [ 781.704903][T17118] [ 781.704914][T17118] dump_stack_lvl+0x16c/0x1f0 [ 781.704953][T17118] should_fail_ex+0x512/0x640 [ 781.704994][T17118] get_futex_key+0x1d0/0x1560 [ 781.705028][T17118] ? kasan_save_stack+0x42/0x60 [ 781.705063][T17118] ? kasan_save_stack+0x33/0x60 [ 781.705093][T17118] ? __pfx_get_futex_key+0x10/0x10 [ 781.705121][T17118] ? evict+0x5b4/0x920 [ 781.705154][T17118] ? __sock_release+0x20b/0x270 [ 781.705186][T17118] ? __sock_create+0x27a/0x8d0 [ 781.705220][T17118] ? __sys_socket+0x14d/0x260 [ 781.705242][T17118] ? __x64_sys_socket+0x72/0xb0 [ 781.705265][T17118] ? do_syscall_64+0xcd/0x490 [ 781.705295][T17118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.705330][T17118] futex_wait_setup+0x9d/0x550 [ 781.705376][T17118] __futex_wait+0x194/0x2f0 [ 781.705417][T17118] ? __pfx___futex_wait+0x10/0x10 [ 781.705459][T17118] ? __pfx_futex_wake_mark+0x10/0x10 [ 781.705500][T17118] ? futex_private_hash_put+0x176/0x300 [ 781.705536][T17118] ? futex_private_hash_put+0x18a/0x300 [ 781.705567][T17118] futex_wait+0xe8/0x380 [ 781.705603][T17118] ? __pfx_futex_wait+0x10/0x10 [ 781.705648][T17118] ? __pfx_evict+0x10/0x10 [ 781.705689][T17118] ? iput+0x519/0x880 [ 781.705732][T17118] do_futex+0x229/0x350 [ 781.705765][T17118] ? __pfx_do_futex+0x10/0x10 [ 781.705797][T17118] ? __sock_release+0x20b/0x270 [ 781.705837][T17118] __x64_sys_futex+0x1e0/0x4c0 [ 781.705876][T17118] ? __sys_socket+0xac/0x260 [ 781.705902][T17118] ? __pfx___x64_sys_futex+0x10/0x10 [ 781.705936][T17118] ? xfd_validate_state+0x61/0x180 [ 781.705972][T17118] ? __pfx_do_writev+0x10/0x10 [ 781.706004][T17118] do_syscall_64+0xcd/0x490 [ 781.706035][T17118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.706057][T17118] RIP: 0033:0x7f1f3478ebe9 [ 781.706079][T17118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.706104][T17118] RSP: 002b:00007f1f355f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.706130][T17118] RAX: ffffffffffffffda RBX: 00007f1f349b5fa8 RCX: 00007f1f3478ebe9 [ 781.706148][T17118] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f349b5fa8 [ 781.706165][T17118] RBP: 00007f1f349b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 781.706183][T17118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.706199][T17118] R13: 00007f1f349b6038 R14: 00007ffea8167f30 R15: 00007ffea8168018 [ 781.706234][T17118] [ 782.063953][T17120] bond0: option all_slaves_active: invalid value () [ 782.070779][T17121] bond0: option all_slaves_active: invalid value () [ 782.436523][T16993] veth0_vlan: entered promiscuous mode [ 782.452015][T16993] veth1_vlan: entered promiscuous mode [ 782.482032][T16993] veth0_macvtap: entered promiscuous mode [ 782.516339][T16993] veth1_macvtap: entered promiscuous mode [ 782.603752][T16993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.624342][T16993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.680706][ T7166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.703118][ T7166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.737742][T14007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.767671][T14007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.828332][T17135] ovs_: entered promiscuous mode [ 783.128882][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.181597][T17140] FAULT_INJECTION: forcing a failure. [ 783.181597][T17140] name failslab, interval 1, probability 0, space 0, times 0 [ 783.196933][ T5875] Bluetooth: hci6: command tx timeout [ 783.202719][T17140] CPU: 0 UID: 0 PID: 17140 Comm: syz.0.2243 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 783.202753][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.202767][T17140] Call Trace: [ 783.202776][T17140] [ 783.202785][T17140] dump_stack_lvl+0x16c/0x1f0 [ 783.202820][T17140] should_fail_ex+0x512/0x640 [ 783.202852][T17140] ? fs_reclaim_acquire+0xae/0x150 [ 783.202890][T17140] should_failslab+0xc2/0x120 [ 783.202921][T17140] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 783.202951][T17140] ? ext4_init_io_end+0x24/0x170 [ 783.202980][T17140] ext4_init_io_end+0x24/0x170 [ 783.203004][T17140] ext4_do_writepages+0x9e7/0x3cf0 [ 783.203037][T17140] ? __lock_acquire+0x62e/0x1ce0 [ 783.203092][T17140] ? __pfx_ext4_do_writepages+0x10/0x10 [ 783.203143][T17140] ? ext4_writepages+0x37a/0x7d0 [ 783.203172][T17140] ext4_writepages+0x37a/0x7d0 [ 783.203202][T17140] ? __lock_acquire+0x62e/0x1ce0 [ 783.203231][T17140] ? __pfx_ext4_writepages+0x10/0x10 [ 783.203277][T17140] ? do_writepages+0x4b7/0x600 [ 783.203303][T17140] ? __pfx_ext4_writepages+0x10/0x10 [ 783.203337][T17140] do_writepages+0x27a/0x600 [ 783.203364][T17140] ? __pfx_do_writepages+0x10/0x10 [ 783.203386][T17140] ? do_raw_spin_unlock+0x172/0x230 [ 783.203421][T17140] ? _raw_spin_unlock+0x28/0x50 [ 783.203450][T17140] filemap_fdatawrite_wbc+0x104/0x160 [ 783.203477][T17140] __filemap_fdatawrite_range+0xb9/0x100 [ 783.203508][T17140] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 783.203600][T17140] file_write_and_wait_range+0xca/0x140 [ 783.203635][T17140] ext4_sync_file+0x310/0xf10 [ 783.203674][T17140] ? __pfx___up_read+0x10/0x10 [ 783.203709][T17140] ? __pfx_ext4_sync_file+0x10/0x10 [ 783.203736][T17140] vfs_fsync_range+0x139/0x220 [ 783.203770][T17140] __do_sys_msync+0x3cb/0x5c0 [ 783.203806][T17140] do_syscall_64+0xcd/0x490 [ 783.203839][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.203864][T17140] RIP: 0033:0x7f1f3478ebe9 [ 783.203883][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.203906][T17140] RSP: 002b:00007f1f3554b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 783.203929][T17140] RAX: ffffffffffffffda RBX: 00007f1f349b6450 RCX: 00007f1f3478ebe9 [ 783.203946][T17140] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 783.203963][T17140] RBP: 00007f1f3554b090 R08: 0000000000000000 R09: 0000000000000000 [ 783.203978][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.203993][T17140] R13: 00007f1f349b64e8 R14: 00007f1f349b6450 R15: 00007ffea8168018 [ 783.204027][T17140] [ 783.473956][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.602771][ T7166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.642414][ T7166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.359437][ T30] audit: type=1800 audit(1755188522.464:155): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2252" name="features" dev="configfs" ino=63979 res=0 errno=0 [ 784.386169][T17167] FAULT_INJECTION: forcing a failure. [ 784.386169][T17167] name failslab, interval 1, probability 0, space 0, times 0 [ 784.482799][T17167] CPU: 0 UID: 0 PID: 17167 Comm: syz.6.2253 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 784.482841][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.482857][T17167] Call Trace: [ 784.482867][T17167] [ 784.482878][T17167] dump_stack_lvl+0x16c/0x1f0 [ 784.482917][T17167] should_fail_ex+0x512/0x640 [ 784.482952][T17167] ? __kmalloc_noprof+0xbf/0x510 [ 784.482986][T17167] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 784.483014][T17167] should_failslab+0xc2/0x120 [ 784.483050][T17167] __kmalloc_noprof+0xd2/0x510 [ 784.483079][T17167] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 784.483115][T17167] vkms_crtc_atomic_check+0x3c5/0x880 [ 784.483152][T17167] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 784.483179][T17167] drm_atomic_helper_check_planes+0x4dd/0x900 [ 784.483228][T17167] drm_atomic_helper_check+0xae/0x190 [ 784.483270][T17167] vkms_atomic_check+0x1d9/0x250 [ 784.483305][T17167] ? __pfx_vkms_atomic_check+0x10/0x10 [ 784.483344][T17167] drm_atomic_check_only+0x19c7/0x3130 [ 784.483471][T17167] drm_atomic_commit+0x136/0x300 [ 784.483502][T17167] ? __pfx_drm_atomic_commit+0x10/0x10 [ 784.483540][T17167] ? __pfx___drm_printfn_info+0x10/0x10 [ 784.483579][T17167] ? drm_client_rotation+0x4da/0x6a0 [ 784.483611][T17167] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 784.483652][T17167] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 784.483712][T17167] ? rcu_is_watching+0x12/0xc0 [ 784.483780][T17167] drm_client_modeset_commit_locked+0x14d/0x580 [ 784.483816][T17167] drm_client_modeset_commit+0x4f/0x80 [ 784.483848][T17167] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 784.483892][T17167] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 784.483930][T17167] drm_fbdev_client_restore+0x2c/0x40 [ 784.483966][T17167] drm_client_dev_restore+0x1f3/0x2a0 [ 784.484002][T17167] drm_release+0x2c4/0x360 [ 784.484031][T17167] ? __pfx_drm_release+0x10/0x10 [ 784.484055][T17167] __fput+0x3ff/0xb70 [ 784.484102][T17167] task_work_run+0x150/0x240 [ 784.484144][T17167] ? __pfx_task_work_run+0x10/0x10 [ 784.484198][T17167] ? __pfx___do_sys_close_range+0x10/0x10 [ 784.484229][T17167] ? syscall_user_dispatch+0x78/0x140 [ 784.484278][T17167] exit_to_user_mode_loop+0xeb/0x110 [ 784.484317][T17167] do_syscall_64+0x3f6/0x490 [ 784.484354][T17167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.484384][T17167] RIP: 0033:0x7fc16dd8ebe9 [ 784.484407][T17167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.484445][T17167] RSP: 002b:00007fc16ec23038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 784.484476][T17167] RAX: 0000000000000000 RBX: 00007fc16dfb5fa0 RCX: 00007fc16dd8ebe9 [ 784.484494][T17167] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 784.484510][T17167] RBP: 00007fc16de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.484527][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.484542][T17167] R13: 00007fc16dfb6038 R14: 00007fc16dfb5fa0 R15: 00007ffd574835a8 [ 784.484581][T17167] [ 785.479172][ T30] audit: type=1800 audit(1755188523.563:156): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2255" name="features" dev="configfs" ino=64015 res=0 errno=0 [ 786.818813][T17194] can: request_module (can-proto-0) failed. [ 787.319784][T17210] FAULT_INJECTION: forcing a failure. [ 787.319784][T17210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.417352][T17210] CPU: 1 UID: 0 PID: 17210 Comm: syz.2.2260 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 787.417389][T17210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.417404][T17210] Call Trace: [ 787.417413][T17210] [ 787.417423][T17210] dump_stack_lvl+0x16c/0x1f0 [ 787.417458][T17210] should_fail_ex+0x512/0x640 [ 787.417495][T17210] strncpy_from_user+0x3b/0x2e0 [ 787.417529][T17210] getname_flags.part.0+0x8f/0x550 [ 787.417564][T17210] ? lockdep_init_map_type+0x5c/0x280 [ 787.417604][T17210] getname_flags+0x93/0xf0 [ 787.417635][T17210] __do_sys_swapon+0x845/0x3bd0 [ 787.417666][T17210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 787.417702][T17210] ? __fget_files+0x20e/0x3c0 [ 787.417734][T17210] ? fput+0x9b/0xd0 [ 787.417766][T17210] ? ksys_write+0x1ac/0x250 [ 787.417792][T17210] ? __pfx___do_sys_swapon+0x10/0x10 [ 787.417833][T17210] do_syscall_64+0xcd/0x490 [ 787.417864][T17210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.417890][T17210] RIP: 0033:0x7f73c498ebe9 [ 787.417909][T17210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.417934][T17210] RSP: 002b:00007f73c5713038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 787.417958][T17210] RAX: ffffffffffffffda RBX: 00007f73c4bb5fa0 RCX: 00007f73c498ebe9 [ 787.417976][T17210] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 787.417991][T17210] RBP: 00007f73c5713090 R08: 0000000000000000 R09: 0000000000000000 [ 787.418005][T17210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.418020][T17210] R13: 00007f73c4bb6038 R14: 00007f73c4bb5fa0 R15: 00007ffc8c551868 [ 787.418054][T17210] [ 789.106384][T17247] FAULT_INJECTION: forcing a failure. [ 789.106384][T17247] name failslab, interval 1, probability 0, space 0, times 0 [ 789.130152][T17247] CPU: 1 UID: 0 PID: 17247 Comm: syz.0.2266 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 789.130189][T17247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 789.130206][T17247] Call Trace: [ 789.130215][T17247] [ 789.130225][T17247] dump_stack_lvl+0x16c/0x1f0 [ 789.130264][T17247] should_fail_ex+0x512/0x640 [ 789.130297][T17247] ? __kmalloc_noprof+0xbf/0x510 [ 789.130330][T17247] ? lsm_blob_alloc+0x68/0x90 [ 789.130372][T17247] should_failslab+0xc2/0x120 [ 789.130407][T17247] __kmalloc_noprof+0xd2/0x510 [ 789.130445][T17247] lsm_blob_alloc+0x68/0x90 [ 789.130484][T17247] security_sk_alloc+0x30/0x270 [ 789.130515][T17247] sk_prot_alloc+0xfb/0x2a0 [ 789.130556][T17247] sk_alloc+0x36/0xc20 [ 789.130587][T17247] rds_create+0x9e/0x5f0 [ 789.130623][T17247] __sock_create+0x335/0x8d0 [ 789.130661][T17247] __sys_socket+0x14d/0x260 [ 789.130688][T17247] ? __pfx___sys_socket+0x10/0x10 [ 789.130713][T17247] ? xfd_validate_state+0x61/0x180 [ 789.130748][T17247] ? __pfx_do_writev+0x10/0x10 [ 789.130784][T17247] __x64_sys_socket+0x72/0xb0 [ 789.130808][T17247] ? lockdep_hardirqs_on+0x7c/0x110 [ 789.130840][T17247] do_syscall_64+0xcd/0x490 [ 789.130876][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.130902][T17247] RIP: 0033:0x7f1f3478ebe9 [ 789.130924][T17247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.130952][T17247] RSP: 002b:00007f1f355ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 789.130979][T17247] RAX: ffffffffffffffda RBX: 00007f1f349b6180 RCX: 00007f1f3478ebe9 [ 789.130997][T17247] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 789.131014][T17247] RBP: 00007f1f34811e19 R08: 0000000000000000 R09: 0000000000000000 [ 789.131030][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.131045][T17247] R13: 00007f1f349b6218 R14: 00007f1f349b6180 R15: 00007ffea8168018 [ 789.131079][T17247] [ 790.269362][T17258] bond0: option all_slaves_active: invalid value () [ 790.281764][T17261] bond0: option all_slaves_active: invalid value () [ 791.024274][T13807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 791.037193][T13807] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 791.046198][T13807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 791.054524][T13807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 791.062294][T13807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 791.396341][ T30] audit: type=1800 audit(1755188529.530:157): pid=17273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2271" name="features" dev="configfs" ino=64177 res=0 errno=0 [ 791.830384][T17268] chnl_net:caif_netlink_parms(): no params data found [ 792.430540][T17268] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.461675][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.470478][T17268] bridge_slave_0: entered allmulticast mode [ 792.497411][T17287] FAULT_INJECTION: forcing a failure. [ 792.497411][T17287] name fail_futex, interval 1, probability 0, space 0, times 0 [ 792.528879][T17268] bridge_slave_0: entered promiscuous mode [ 792.548536][T17287] CPU: 0 UID: 0 PID: 17287 Comm: syz.1.2274 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 792.548578][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.548594][T17287] Call Trace: [ 792.548604][T17287] [ 792.548615][T17287] dump_stack_lvl+0x16c/0x1f0 [ 792.548664][T17287] should_fail_ex+0x512/0x640 [ 792.548767][T17287] get_futex_key+0x1d0/0x1560 [ 792.548834][T17287] ? mas_prev+0x9b/0xf0 [ 792.548865][T17287] ? __pfx_get_futex_key+0x10/0x10 [ 792.548898][T17287] ? vma_prepare+0x466/0x690 [ 792.548936][T17287] futex_wait_setup+0x9d/0x550 [ 792.548984][T17287] __futex_wait+0x194/0x2f0 [ 792.549022][T17287] ? __pfx___futex_wait+0x10/0x10 [ 792.549065][T17287] ? __pfx_futex_wake_mark+0x10/0x10 [ 792.549113][T17287] ? futex_private_hash_put+0x176/0x300 [ 792.549154][T17287] ? futex_private_hash_put+0x18a/0x300 [ 792.549189][T17287] futex_wait+0xe8/0x380 [ 792.549227][T17287] ? __pfx_futex_wait+0x10/0x10 [ 792.549269][T17287] ? __pfx_vma_modify_flags+0x10/0x10 [ 792.549308][T17287] ? do_mseal+0x76a/0x900 [ 792.549347][T17287] do_futex+0x229/0x350 [ 792.549376][T17287] ? __pfx_do_futex+0x10/0x10 [ 792.549414][T17287] __x64_sys_futex+0x1e0/0x4c0 [ 792.549447][T17287] ? __pfx___x64_sys_futex+0x10/0x10 [ 792.549510][T17287] ? xfd_validate_state+0x61/0x180 [ 792.549546][T17287] ? __pfx_ksys_write+0x10/0x10 [ 792.549584][T17287] do_syscall_64+0xcd/0x490 [ 792.549617][T17287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.549643][T17287] RIP: 0033:0x7f3461d8ebe9 [ 792.549662][T17287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.549686][T17287] RSP: 002b:00007f3462b860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 792.549711][T17287] RAX: ffffffffffffffda RBX: 00007f3461fb5fa8 RCX: 00007f3461d8ebe9 [ 792.549727][T17287] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3461fb5fa8 [ 792.549743][T17287] RBP: 00007f3461fb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 792.549764][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.549781][T17287] R13: 00007f3461fb6038 R14: 00007ffff50dd120 R15: 00007ffff50dd208 [ 792.549818][T17287] [ 792.550055][T17268] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.560615][T17287] i2c i2c-0: new_device: Can't parse I2C address [ 792.726251][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.752355][T17268] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.824850][T17268] bridge_slave_1: entered allmulticast mode [ 792.956884][T17268] bridge_slave_1: entered promiscuous mode [ 793.149639][ T5875] Bluetooth: hci7: command tx timeout [ 793.199978][T17268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.211024][T17294] bond0: option all_slaves_active: invalid value () [ 793.223206][T17268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.298263][T17268] team0: Port device team_slave_0 added [ 793.319760][T17268] team0: Port device team_slave_1 added [ 793.400701][ T30] audit: type=1804 audit(1755188531.529:158): pid=17298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2276" name="/newroot/sys/kernel/tracing/free_buffer" dev="tracefs" ino=1069 res=1 errno=0 [ 793.747170][T17268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.756765][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.860201][T17268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.999133][T17268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.029361][T17268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.096438][T17268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.250598][T17268] hsr_slave_0: entered promiscuous mode [ 794.261051][T17268] hsr_slave_1: entered promiscuous mode [ 794.275949][T17268] debugfs: 'hsr0' already exists in 'hsr' [ 794.281841][T17268] Cannot create hsr debugfs directory [ 795.202893][ T5875] Bluetooth: hci7: command tx timeout [ 795.399368][T17268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.607491][T17268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.727700][T17268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.691071][T17268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.283899][ T5875] Bluetooth: hci7: command tx timeout [ 797.318658][T17268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 797.334870][T17268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 797.359019][T17268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 797.372031][T17268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 797.442708][ T30] audit: type=1800 audit(1755188535.567:159): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2287" name="features" dev="configfs" ino=64455 res=0 errno=0 [ 797.463182][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.652205][T17268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.688039][T17268] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.716311][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.723497][ T7155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.808810][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.816098][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.205990][T17268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.263674][T17268] veth0_vlan: entered promiscuous mode [ 798.291802][T17268] veth1_vlan: entered promiscuous mode [ 798.426450][T17268] veth0_macvtap: entered promiscuous mode [ 798.440064][T17268] veth1_macvtap: entered promiscuous mode [ 798.475961][T17268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.497978][T17268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.534068][ T7165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.572571][ T7165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.589355][ T7165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.608962][ T7165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.619604][ T30] audit: type=1800 audit(1755188536.746:160): pid=17368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2290" name="features" dev="configfs" ino=66660 res=0 errno=0 [ 798.709003][T14007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.732188][T14007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.789830][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.812331][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.938580][T17370] FAULT_INJECTION: forcing a failure. [ 798.938580][T17370] name failslab, interval 1, probability 0, space 0, times 0 [ 798.952838][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.2.2270 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 798.952873][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.952888][T17370] Call Trace: [ 798.952897][T17370] [ 798.952907][T17370] dump_stack_lvl+0x16c/0x1f0 [ 798.952941][T17370] should_fail_ex+0x512/0x640 [ 798.952971][T17370] ? fs_reclaim_acquire+0xae/0x150 [ 798.953003][T17370] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 798.953033][T17370] should_failslab+0xc2/0x120 [ 798.953062][T17370] __kmalloc_noprof+0xd2/0x510 [ 798.953095][T17370] tomoyo_realpath_from_path+0xc2/0x6e0 [ 798.953139][T17370] ? tomoyo_profile+0x47/0x60 [ 798.953177][T17370] tomoyo_path_number_perm+0x245/0x580 [ 798.953204][T17370] ? tomoyo_path_number_perm+0x237/0x580 [ 798.953236][T17370] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 798.953267][T17370] ? find_held_lock+0x2b/0x80 [ 798.953323][T17370] ? find_held_lock+0x2b/0x80 [ 798.953347][T17370] ? hook_file_ioctl_common+0x145/0x410 [ 798.953385][T17370] ? __fget_files+0x20e/0x3c0 [ 798.953419][T17370] security_file_ioctl+0x9b/0x240 [ 798.953450][T17370] __x64_sys_ioctl+0xb7/0x210 [ 798.953489][T17370] do_syscall_64+0xcd/0x490 [ 798.953522][T17370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.953547][T17370] RIP: 0033:0x7f2b2cb8ebe9 [ 798.953568][T17370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.953592][T17370] RSP: 002b:00007f2b2dad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.953616][T17370] RAX: ffffffffffffffda RBX: 00007f2b2cdb5fa0 RCX: 00007f2b2cb8ebe9 [ 798.953634][T17370] RDX: 0000200000000040 RSI: 0000000040045701 RDI: 0000000000000004 [ 798.953649][T17370] RBP: 00007f2b2dad9090 R08: 0000000000000000 R09: 0000000000000000 [ 798.953665][T17370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.953679][T17370] R13: 00007f2b2cdb6038 R14: 00007f2b2cdb5fa0 R15: 00007fff83e69f78 [ 798.953714][T17370] [ 798.953770][T17370] ERROR: Out of memory at tomoyo_realpath_from_path. [ 799.375277][ T5875] Bluetooth: hci7: command tx timeout [ 800.020323][T13807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.036357][T13807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.044655][T13807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.058378][T13807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.079950][T13807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 800.591971][T14007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.621132][T17378] chnl_net:caif_netlink_parms(): no params data found [ 800.694505][T14007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.885243][T14007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.991407][T14007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.071014][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.103673][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.145124][T17378] bridge_slave_0: entered allmulticast mode [ 801.178634][T17378] bridge_slave_0: entered promiscuous mode [ 801.210747][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.260333][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.299264][T17378] bridge_slave_1: entered allmulticast mode [ 801.321177][T17378] bridge_slave_1: entered promiscuous mode [ 801.390091][T17378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.472234][T17378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.581139][T17378] team0: Port device team_slave_0 added [ 801.646908][T17378] team0: Port device team_slave_1 added [ 801.665669][T14007] bridge_slave_1: left allmulticast mode [ 801.674417][T14007] bridge_slave_1: left promiscuous mode [ 801.685570][T14007] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.702885][T14007] bridge_slave_0: left allmulticast mode [ 801.709182][T14007] bridge_slave_0: left promiscuous mode [ 801.715003][T14007] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.908123][ T30] audit: type=1800 audit(1755188540.025:161): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2294" name="features" dev="configfs" ino=66965 res=0 errno=0 [ 802.167153][ T5875] Bluetooth: hci1: command tx timeout [ 802.370209][T14007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.390164][T14007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.401556][T14007] bond0 (unregistering): Released all slaves [ 802.690511][T17378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.703636][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.736045][T17378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.748868][T17378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.755855][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.784108][T17378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.013664][T17378] hsr_slave_0: entered promiscuous mode [ 803.152276][T17378] hsr_slave_1: entered promiscuous mode [ 803.159009][T17378] debugfs: 'hsr0' already exists in 'hsr' [ 803.164816][T17378] Cannot create hsr debugfs directory [ 803.234304][ T30] audit: type=1800 audit(1755188541.354:162): pid=17408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2295" name="features" dev="configfs" ino=66002 res=0 errno=0 [ 803.285035][T14007] hsr_slave_0: left promiscuous mode [ 803.301000][T14007] hsr_slave_1: left promiscuous mode [ 803.325394][T14007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.371513][T14007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.384650][T14007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.392900][T14007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.442178][T14007] veth1_macvtap: left promiscuous mode [ 803.455151][T14007] veth0_macvtap: left promiscuous mode [ 803.480354][T14007] veth1_vlan: left promiscuous mode [ 803.494285][T14007] veth0_vlan: left promiscuous mode [ 804.259027][ T5875] Bluetooth: hci1: command tx timeout [ 804.374788][T14007] team0 (unregistering): Port device team_slave_1 removed [ 804.422025][T14007] team0 (unregistering): Port device team_slave_0 removed [ 806.328865][ T5875] Bluetooth: hci1: command tx timeout [ 806.345888][T17378] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 806.372918][T17378] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 806.385170][T17378] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 806.395711][T17378] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 806.594822][T17378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.643192][T17378] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.664947][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.672357][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.701088][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.708283][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.101038][T17464] FAULT_INJECTION: forcing a failure. [ 807.101038][T17464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.114935][T17464] CPU: 1 UID: 0 PID: 17464 Comm: syz.2.2299 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 807.114971][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 807.114986][T17464] Call Trace: [ 807.114994][T17464] [ 807.115005][T17464] dump_stack_lvl+0x16c/0x1f0 [ 807.115041][T17464] should_fail_ex+0x512/0x640 [ 807.115078][T17464] _copy_from_user+0x2e/0xd0 [ 807.115115][T17464] copy_msghdr_from_user+0x98/0x160 [ 807.115146][T17464] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 807.115179][T17464] ? __pfx__kstrtoull+0x10/0x10 [ 807.115213][T17464] ___sys_sendmsg+0xfe/0x1d0 [ 807.115251][T17464] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.115298][T17464] ? find_held_lock+0x2b/0x80 [ 807.115342][T17464] __sys_sendmmsg+0x200/0x420 [ 807.115377][T17464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.115418][T17464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 807.115463][T17464] ? fput+0x9b/0xd0 [ 807.115496][T17464] ? ksys_write+0x1ac/0x250 [ 807.115522][T17464] ? __pfx_ksys_write+0x10/0x10 [ 807.115556][T17464] __x64_sys_sendmmsg+0x9c/0x100 [ 807.115585][T17464] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.115614][T17464] do_syscall_64+0xcd/0x490 [ 807.115647][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.115672][T17464] RIP: 0033:0x7f2b2cb8ebe9 [ 807.115692][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.115717][T17464] RSP: 002b:00007f2b2dab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.115742][T17464] RAX: ffffffffffffffda RBX: 00007f2b2cdb6090 RCX: 00007f2b2cb8ebe9 [ 807.115760][T17464] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 807.115775][T17464] RBP: 00007f2b2dab8090 R08: 0000000000000000 R09: 0000000000000000 [ 807.115791][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.115806][T17464] R13: 00007f2b2cdb6128 R14: 00007f2b2cdb6090 R15: 00007fff83e69f78 [ 807.115841][T17464] [ 807.373745][T17378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.548494][T17378] veth0_vlan: entered promiscuous mode [ 807.586477][T17470] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 807.601700][T17378] veth1_vlan: entered promiscuous mode [ 807.726637][T17378] veth0_macvtap: entered promiscuous mode [ 807.758704][T17378] veth1_macvtap: entered promiscuous mode [ 807.842602][T17378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.886898][T17378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.955989][ T7155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.967459][ T7155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.005090][ T7155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.034076][ T7153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.147347][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.179360][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.263888][ T7153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.272743][ T7153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.409837][ T5875] Bluetooth: hci1: command tx timeout [ 809.458342][T17498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 811.159855][T17531] bond0: option all_slaves_active: invalid value () [ 811.211259][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 811.383189][T17529] bond0: option all_slaves_active: invalid value () [ 811.762404][T17536] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 811.980196][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.994844][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.009189][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.022398][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.030308][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.290684][T17538] chnl_net:caif_netlink_parms(): no params data found [ 812.443503][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.451620][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.462152][T17538] bridge_slave_0: entered allmulticast mode [ 812.473473][T17538] bridge_slave_0: entered promiscuous mode [ 812.500581][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.510359][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.521974][T17538] bridge_slave_1: entered allmulticast mode [ 812.531747][T17538] bridge_slave_1: entered promiscuous mode [ 812.744343][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.772416][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.836489][T17538] team0: Port device team_slave_0 added [ 812.858160][T17538] team0: Port device team_slave_1 added [ 812.915328][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.926569][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.967069][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.991078][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.999726][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.034067][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.130187][T17538] hsr_slave_0: entered promiscuous mode [ 813.139635][T17538] hsr_slave_1: entered promiscuous mode [ 813.146259][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 813.152208][T17538] Cannot create hsr debugfs directory [ 813.625475][T17538] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 813.667890][T17538] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 813.687167][T17538] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 813.711323][T17538] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 813.823090][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 813.844230][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 813.861539][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 813.871927][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 813.881164][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 814.041652][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.099262][T13807] Bluetooth: hci0: command tx timeout [ 814.135743][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.193150][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.200388][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.268375][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.275114][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.345346][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.352548][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.480500][T17538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.608859][T17563] chnl_net:caif_netlink_parms(): no params data found [ 814.883609][T17563] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.891639][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.915998][T17563] bridge_slave_0: entered allmulticast mode [ 814.934243][T17563] bridge_slave_0: entered promiscuous mode [ 814.945061][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.953329][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.960932][T17563] bridge_slave_1: entered allmulticast mode [ 814.979509][T17563] bridge_slave_1: entered promiscuous mode [ 815.075474][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.091901][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.151875][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.162170][T17563] team0: Port device team_slave_0 added [ 815.182363][T17563] team0: Port device team_slave_1 added [ 815.442764][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.450903][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.479501][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.523056][ T30] audit: type=1800 audit(1755188553.638:163): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2317" name="features" dev="configfs" ino=68676 res=0 errno=0 [ 815.547691][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.569334][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.625060][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.847784][T17563] hsr_slave_0: entered promiscuous mode [ 815.861638][T17563] hsr_slave_1: entered promiscuous mode [ 815.874473][T17563] debugfs: 'hsr0' already exists in 'hsr' [ 815.881218][T17563] Cannot create hsr debugfs directory [ 815.943654][T13807] Bluetooth: hci8: command tx timeout [ 816.175359][T13807] Bluetooth: hci0: command tx timeout [ 816.214949][T17538] veth0_vlan: entered promiscuous mode [ 816.230038][T17538] veth1_vlan: entered promiscuous mode [ 816.409438][T17538] veth0_macvtap: entered promiscuous mode [ 816.459883][T17538] veth1_macvtap: entered promiscuous mode [ 816.516906][T17563] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 816.533930][T17563] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 816.560682][T17563] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 816.587370][T17563] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 816.600738][T17597] random: crng reseeded on system resumption [ 816.667066][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.681608][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 816.717795][ T7165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.737303][ T7165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.757926][ T7165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.783715][ T7165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.051047][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.069805][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.138959][T17563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.151570][T14007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.170704][T17563] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.174017][T14007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.212737][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.220080][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.349416][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.356742][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.848217][T17563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.024462][T13807] Bluetooth: hci8: command tx timeout [ 818.264547][T13807] Bluetooth: hci0: command tx timeout [ 818.656726][T17631] bond0: option all_slaves_active: invalid value () [ 818.808753][T17563] veth0_vlan: entered promiscuous mode [ 818.873666][T17625] bond0: option all_slaves_active: invalid value () [ 818.917485][T17563] veth1_vlan: entered promiscuous mode [ 819.041585][T17563] veth0_macvtap: entered promiscuous mode [ 819.118275][T17563] veth1_macvtap: entered promiscuous mode [ 819.253352][ T30] audit: type=1800 audit(1755188557.356:164): pid=17639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2322" name="features" dev="configfs" ino=68494 res=0 errno=0 [ 819.281927][T17563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.386276][ T31] INFO: task syz.4.1889:15374 blocked for more than 143 seconds. [ 819.405345][ T31] Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 [ 819.419576][T17563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.427780][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 819.448748][ T31] task:syz.4.1889 state:D stack:27688 pid:15374 tgid:15364 ppid:13803 task_flags:0x400140 flags:0x00004004 [ 819.469767][ T31] Call Trace: [ 819.493731][ T31] [ 819.544645][ T31] __schedule+0x1190/0x5de0 [ 819.590764][ T31] ? __pfx___schedule+0x10/0x10 [ 819.628750][ T31] ? find_held_lock+0x2b/0x80 [ 819.650928][ T31] ? schedule+0x2d7/0x3a0 [ 819.730615][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.762814][ T31] schedule+0xe7/0x3a0 [ 819.805444][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.858661][ T31] __mutex_lock+0x82a/0x10b0 [ 819.875569][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 819.880629][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.929292][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.951639][ T31] ? net_generic+0xea/0x2a0 [ 819.956724][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.969277][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.976423][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 819.982598][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 819.989156][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.994510][ T31] ? bpf_lsm_capable+0x9/0x10 [ 819.999373][ T31] ? security_capable+0x7e/0x260 [ 820.007135][ T31] genl_rcv_msg+0x55c/0x800 [ 820.011698][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.021160][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 820.028515][ T31] netlink_rcv_skb+0x158/0x420 [ 820.033444][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.040451][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 820.045886][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 820.051205][ T31] genl_rcv+0x28/0x40 [ 820.055252][ T31] netlink_unicast+0x5a7/0x870 [ 820.060325][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 820.065990][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 820.070787][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.076205][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 820.082313][ T31] ____sys_sendmsg+0xa95/0xc70 [ 820.087195][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 820.092724][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.099207][T13807] Bluetooth: hci8: command tx timeout [ 820.109061][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 820.114600][ T31] ___sys_sendmsg+0x134/0x1d0 [ 820.119832][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.125315][ T31] __sys_sendmsg+0x16d/0x220 [ 820.131411][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.136708][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 820.141858][ T31] do_syscall_64+0xcd/0x490 [ 820.147585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.153645][ T31] RIP: 0033:0x7fd74db8ebe9 [ 820.158125][ T31] RSP: 002b:00007fd74ea2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.166630][ T31] RAX: ffffffffffffffda RBX: 00007fd74ddb6360 RCX: 00007fd74db8ebe9 [ 820.174634][ T31] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000008 [ 820.183696][ T31] RBP: 00007fd74dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.194101][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.202233][ T31] R13: 00007fd74ddb63f8 R14: 00007fd74ddb6360 R15: 00007ffd89c3a8a8 [ 820.212421][ T31] [ 820.215632][ T31] [ 820.215632][ T31] Showing all locks held in the system: [ 820.223559][ T31] 1 lock held by khungtaskd/31: [ 820.239697][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 820.256119][ T31] 3 locks held by kworker/u8:20/7165: [ 820.261964][ T31] #0: ffff88814ca9c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 820.273392][ T31] #1: ffffc9000be17d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 820.286345][ T31] #2: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 820.304718][ T31] 3 locks held by kworker/u8:21/7166: [ 820.311968][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 820.323741][ T31] #1: ffffc9000be27d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 820.336224][T13807] Bluetooth: hci0: command tx timeout [ 820.341800][ T31] #2: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 820.351160][ T31] 2 locks held by syz-executor/8053: [ 820.356530][ T31] #0: ffff88803785a0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 820.367216][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 820.376906][ T31] 2 locks held by getty/10268: [ 820.381711][ T31] #0: ffff88814e0a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 820.391627][ T31] #1: ffffc90003cdb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 820.401912][ T31] 2 locks held by syz.3.1523/13540: [ 820.407402][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 820.418109][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 820.428565][ T31] 4 locks held by kworker/u8:0/14007: [ 820.434145][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 820.445702][ T31] #1: ffffc90002eb7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 820.456114][ T31] #2: ffffffff9036f370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 820.465562][ T31] #3: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 820.474702][ T31] 2 locks held by syz.4.1889/15374: [ 820.480014][ T31] #0: ffffffff90428a90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 820.488323][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 820.498659][ T31] 2 locks held by syz-executor/15595: [ 820.504046][ T31] #0: ffff888056b1a0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 820.516336][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 820.526112][ T31] 2 locks held by syz-executor/16993: [ 820.531504][ T31] #0: ffff8880336060e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 820.543009][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 820.552726][ T31] 2 locks held by syz-executor/17378: [ 820.558308][ T31] #0: ffff888057dca0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 820.568679][ T31] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 820.578577][ T31] 1 lock held by syz-executor/17563: [ 820.584148][ T31] #0: ffffffff903855c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 820.594196][ T31] 1 lock held by syz.2.2322/17639: [ 820.600825][ T31] #0: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 820.611528][ T31] 1 lock held by syz.7.2323/17641: [ 820.620898][ T31] #0: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 820.631330][ T31] [ 820.655908][ T31] ============================================= [ 820.655908][ T31] [ 820.664486][ T31] NMI backtrace for cpu 1 [ 820.664513][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 820.664545][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.664560][ T31] Call Trace: [ 820.664569][ T31] [ 820.664579][ T31] dump_stack_lvl+0x116/0x1f0 [ 820.664615][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 820.664650][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.664680][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.664715][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 820.664756][ T31] watchdog+0xf0e/0x1260 [ 820.664801][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.664829][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.664860][ T31] ? __kthread_parkme+0x19e/0x250 [ 820.664891][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.664923][ T31] kthread+0x3c5/0x780 [ 820.664956][ T31] ? __pfx_kthread+0x10/0x10 [ 820.664991][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.665016][ T31] ? __pfx_kthread+0x10/0x10 [ 820.665049][ T31] ret_from_fork+0x5d4/0x6f0 [ 820.665082][ T31] ? __pfx_kthread+0x10/0x10 [ 820.665114][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.665158][ T31] [ 820.665168][ T31] Sending NMI from CPU 1 to CPUs 0: [ 820.802026][ C0] NMI backtrace for cpu 0 [ 820.802046][ C0] CPU: 0 UID: 0 PID: 7164 Comm: kworker/u8:19 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 820.802078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.802094][ C0] Workqueue: bat_events batadv_nc_worker [ 820.802124][ C0] RIP: 0010:__lock_acquire+0x568/0x1ce0 [ 820.802157][ C0] Code: 34 01 00 00 00 49 89 0c 24 41 8b 85 e8 0a 00 00 85 c0 74 16 48 8d 04 80 0f b6 44 c3 f9 41 32 44 24 21 a8 60 0f 85 f9 05 00 00 <48> 89 c8 89 4c 24 20 48 c1 e8 20 89 c7 89 44 24 28 01 c1 c1 c7 04 [ 820.802182][ C0] RSP: 0018:ffffc9000be079e0 EFLAGS: 00000046 [ 820.802199][ C0] RAX: 0000000000000007 RBX: ffff8880298a28f0 RCX: 86f6c83ef3d1d497 [ 820.802216][ C0] RDX: 0000000000000000 RSI: ffff8880298a2940 RDI: ffff8880298a1e00 [ 820.802244][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 820.802259][ C0] R10: 0000000000000050 R11: 0000000000000001 R12: ffff8880298a2940 [ 820.802275][ C0] R13: ffff8880298a1e00 R14: 0000000000000002 R15: 0000000000000001 [ 820.802290][ C0] FS: 0000000000000000(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 820.802313][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.802329][ C0] CR2: 0000001b33abcff8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 820.802346][ C0] Call Trace: [ 820.802353][ C0] [ 820.802365][ C0] ? ath10k_wmi_wait_for_service_ready+0x12e/0x260 [ 820.802404][ C0] lock_acquire+0x179/0x350 [ 820.802433][ C0] ? batadv_nc_worker+0x159/0x1030 [ 820.802460][ C0] ? batadv_nc_worker+0x895/0x1030 [ 820.802486][ C0] batadv_nc_worker+0x16a/0x1030 [ 820.802510][ C0] ? batadv_nc_worker+0x159/0x1030 [ 820.802536][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.802566][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 820.802595][ C0] ? rcu_is_watching+0x12/0xc0 [ 820.802621][ C0] process_one_work+0x9cc/0x1b70 [ 820.802663][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 820.802688][ C0] ? __pfx_process_one_work+0x10/0x10 [ 820.802729][ C0] ? assign_work+0x1a0/0x250 [ 820.802764][ C0] worker_thread+0x6c8/0xf10 [ 820.802807][ C0] ? __pfx_worker_thread+0x10/0x10 [ 820.802872][ C0] kthread+0x3c5/0x780 [ 820.802905][ C0] ? __pfx_kthread+0x10/0x10 [ 820.802939][ C0] ? rcu_is_watching+0x12/0xc0 [ 820.802962][ C0] ? __pfx_kthread+0x10/0x10 [ 820.802996][ C0] ret_from_fork+0x5d4/0x6f0 [ 820.803032][ C0] ? __pfx_kthread+0x10/0x10 [ 820.803065][ C0] ret_from_fork_asm+0x1a/0x30 [ 820.803101][ C0] [ 820.829414][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.829438][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 820.829469][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.829485][ T31] Call Trace: [ 820.829494][ T31] [ 820.829504][ T31] dump_stack_lvl+0x3d/0x1f0 [ 820.829540][ T31] vpanic+0x6e8/0x7a0 [ 820.829582][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.829616][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.829657][ T31] panic+0xca/0xd0 [ 820.829687][ T31] ? __pfx_panic+0x10/0x10 [ 820.829720][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 820.829756][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 820.829794][ T31] ? watchdog+0xd78/0x1260 [ 820.829826][ T31] ? watchdog+0xd6b/0x1260 [ 820.829859][ T31] watchdog+0xd89/0x1260 [ 820.829897][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.829928][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.829958][ T31] ? __kthread_parkme+0x19e/0x250 [ 820.829988][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.830020][ T31] kthread+0x3c5/0x780 [ 820.830053][ T31] ? __pfx_kthread+0x10/0x10 [ 820.830088][ T31] ? rcu_is_watching+0x12/0xc0 [ 820.830112][ T31] ? __pfx_kthread+0x10/0x10 [ 820.830146][ T31] ret_from_fork+0x5d4/0x6f0 [ 820.830179][ T31] ? __pfx_kthread+0x10/0x10 [ 820.830212][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.830255][ T31] [ 821.195439][ T31] Kernel Offset: disabled [ 821.199799][ T31] Rebooting in 86400 seconds..