last executing test programs: 5.072616762s ago: executing program 2 (id=314): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) eventfd$auto(0x2200000c) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x40000000000eb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x6, 0x43, &(0x7f0000000040)={@buf=&(0x7f00000007c0)="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", 0x3b98, 0x2, 0x2}, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) 4.260139303s ago: executing program 3 (id=318): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x10, 0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab04, r0) 4.03148604s ago: executing program 1 (id=320): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r3 = socket(0x23, 0x5, 0x0) listen$auto(r3, 0x5ed) unshare$auto(0x40000080) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r4, 0x0, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto(r5, 0x0, 0x6) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x400, 0x0) 3.793966695s ago: executing program 3 (id=321): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0xab) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x4085c2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000000c0)={r3, &(0x7f0000000140)="e43c5634d076dabbbe41d87eaa69457309260036d0ccb670486829231943b12bcf13dcc893d14bf3fd4206a7500f0bcf014a2a82b64b1741e4ae98176ec284796a2c6dbe235c85342235b289de74d95daa0c8e164a59f6c31633e2df6097105b0f04ec486027f7ad7ebdf86667d056c3203bc74eb53b51f0efd407fd6a707e450199e98a00fed5de04fffa4a4dabf9780c311eece47a04e24b8a311d8207c384f73a5a9c22ef9e52e6d76af7d2b424c4bef8a08ba86b2b37b45531e922de1cc1152e1f077d11c0d3b83b05ed83822f95d06aa97f6d", 0xd3d, &(0x7f0000000240)="8812030cd95246f35c40efc234e83bbbf0a055fdca03118eb325a5bc5519e659945460e46a64b7165ca4b4dae5e7a3f449b56b5f5bb850efab97b398fce6f8707ec981114ec7f244e19e3a3fb2393c20cc97c175b861afd9bd4768e9d7bda0942d754da4879c205a74448e5cf580c8d73cbca63a474c2f3e576b442cc80f87008417126520b3ab1630bfdaf76b6b2964946aaf5ebbedcd93b27865b6b81a4f970f6fee7569fbf2492e96335a39c5965769850a9fcbe9d3180b1859115852f479062e90ae96815d55", 0x33, &(0x7f0000000340)="c9b8bc90e395b61eef357695e802fb77840a1b380e779f4912596794e3fc10f21703ae444ed16bb143feb920b701f535ef4228022605474bbf9af3026425323a7befc041c935621d9209fdc9953eeccf99b70fbe4cccf512354a7463c83fd4f35801fbf33f22845cf946f00f9aecf2d102f4bb63b14654502142a99787bbbaba8950c7334a5b9ae8798930667af5adde95bcee252635cd6ab6ea5f5820e7fef7bc551e8c4fe0722d36d7ac21f8fc6f17c30af915ac1dab7379cd738e3d129bf18062877928031a85", &(0x7f0000000040)=0x1}) close_range$auto(r3, r4, 0x2) socket(0xa, 0x1, 0x84) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) alarm$auto(0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 3.696701863s ago: executing program 2 (id=322): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x480000, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) write$auto(0x3, 0x0, 0xfffffdef) 3.448734943s ago: executing program 1 (id=323): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = epoll_create$auto(0x3e) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000000000)="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") set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x401, 0x1) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) 3.436764001s ago: executing program 2 (id=324): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r2, &(0x7f0000000040)='\x00', 0x3) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0xee90ce37eb497475, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) 3.37181286s ago: executing program 0 (id=325): close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x1354}}, 0x40001) socket(0x21, 0x2, 0x2) write$auto(0x3, 0x0, 0x81) setsockopt$auto(0x3, 0x1000000110, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) mmap$auto(0x2, 0x3, 0xc4f, 0xb73b, 0x401, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0xffff, 0x8}, 0x6f4) close_range$auto(0x2, 0x8000, 0x0) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 3.084742611s ago: executing program 1 (id=326): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) shmctl$auto_SHM_UNLOCK(0x968, 0xc, &(0x7f00000000c0)={{0xfffffff9, 0x0, 0xee01, 0x8001, 0x7, 0x8, 0xfff0}, 0x400, 0x8001, 0x3, 0xfffffffffffffffe, @inferred, @inferred, 0x0, 0x0, 0x0, &(0x7f0000000200)="84666fc8db8184ebcda15d28e5df03da5155027e32ef43985f5797ca7b687b4a8eb26038d4e51847ff7562be99f6ea22311611b13ec6fccba35bcf688d0636eaf9b77856298a7e9fbd8660d876af5769bfd23193bceb9719d2ee9c401192fbc48a224f640db3588700fefd6e42748cb51ae00d24d39e380653dd5682ae19e7c18a66242b1f34d1e3fc55efc794264440f958fe5e12031a0818e0b5945305941d8fbe8be9c6f36219f1700d05bc8de3c744e431785ba1d4fb23b6511f0436dd2e837afedd"}) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) shmctl$auto(0xffffff6b, 0x7, &(0x7f00000003c0)={{0x7ff, 0x0, 0xee01, 0xfffff645, 0x9, 0x9, 0x1175}, 0x7, 0x4, 0x4, 0x0, @inferred=0xffffffffffffffff, @raw=0x400, 0x101, 0x0, &(0x7f0000000300)="2367711b142994635ddeec7a85cd79d0e3b635c38528467757c8cabfba475475f4cf91fa13bb5fddcc4dc1f73cb1b84db8cd9bc7c99340fce513cf9b05f12abe773be55dd0e108617bb2eb7c7884a1a7a2cd8fdd22fa19f75b4c4aab80b6124921e4b629351b5893ec0acf36b95c4965b73f5def10dd9d2206840ce31c03211d3aa82577eb", &(0x7f0000000140)="26c278691191e02a56c9f22e21793f3084e872f8a897c2719caf51e51f1831"}) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xa, 0x8, 0x5, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x401, 0x7, 0x3, 0x710, 0x100000001, 0x8, 0x4, 0x0, 0x8, 0x100000000}, 0x100) keyctl$auto(0x67, r1, r2, r3, 0x3) close_range$auto(0x2, 0x8, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffffff, &(0x7f00000001c0)="239cb836edc0", 0x6) ioctl$auto_TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000600)=0x80) setsockopt$auto_SO_REUSEPORT(r0, 0x80000001, 0xf, &(0x7f0000000540)='\x00', 0x10000000) r4 = ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r4, 0x101, &(0x7f0000000580)="f036de1b7671b614d15eeecbb54d97dd08d1c2f765886db004df10e519137bb460ccbf0bc9a9e1d9a7cbdbdc587735647e625c1dcf85a42759174673d91cd4b6f74380aca7d5e6ac57d42e0ceb5f352c7b7e55e3c4dabeeacb8a85f1cfd471f332a12970a4c969c1525e8c7714931dc5a06918") 3.067232797s ago: executing program 0 (id=327): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) mmap$auto(0xfffffffffffffffa, 0x2020006, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) unshare$auto(0x20000080) (rerun: 64) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x3a) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) (async, rerun: 32) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) (async) io_uring_setup$auto(0x4c2, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 64) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r1, 0x0, 0x1, 0x27) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x0, 0xc, 0x5) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0x80, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x22a080, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) getsockopt$auto(0xffffffffffffffff, 0x2, 0xfffffff8, 0x0, &(0x7f0000000040)=0x26) read$auto_proc_single_file_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/41, 0x11) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000380)={0x15, 0x81}) (async, rerun: 64) setreuid$auto(0x9, 0x1) (async, rerun: 64) getpriority$auto(0x2, 0x9) 2.883350959s ago: executing program 0 (id=328): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8bffe, 0x709, 0x100000000009, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x7ffffffffffffffc, 0x0, 0xc, 0x2, 0x101, 0x4, 0x84, 0x7ff, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400002, 0x6, 0x0, 0x1]}, 0x1fe, 0x6) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0xfffffffc, &(0x7f0000000000)={0x7, 0x8, 0x0, 0x0, 0x8, 0x7, r0, [0xfd91, 0x0, 0xfffff2f3], {0xeb0c, 0x1ff, 0xffff, 0x5, 0x1, 0x200, 0x200, 0x1, 0x6}, {0xfff, 0xff, 0x8, 0xff, 0x6, 0x4, 0x9, 0xf, 0x8}}) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x80108907, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002b8f7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) r3 = socket(0x2, 0x801, 0x100) poll$auto(&(0x7f0000000080)={r3, 0x81, 0x3}, 0x4, 0x7fffffff) connect$auto(0x3, &(0x7f0000000000), 0x55) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup$auto(0x2008, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd02, &(0x7f00000001c0)) 2.644355749s ago: executing program 3 (id=329): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, 0x0, 0x98c7) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x7, 0x4008) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sysfs$auto(0x2, 0x4b, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) 2.556643905s ago: executing program 0 (id=330): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) eventfd$auto(0x2200000c) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x40000000000eb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x6, 0x43, &(0x7f0000000040)={@buf=&(0x7f00000007c0)="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", 0x3b98, 0x2, 0x2}, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r2, 0x8, 0xff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) 2.168527078s ago: executing program 3 (id=331): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/net/nr12/iflink\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000340)) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x100006, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/de\xf8\xa5audio1\x00x\xe6\x1d\x99\x9c^\xcaY=\xdf\xcc\xbcX`O\xa7', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x4, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r3) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000680)="01000000b464df7da2f0ad3c5f4cbe092f3b236db408370be5b02a8cd4f8db1278a0aaaff5ab500bab0547e901151786197a6c7167a1bea54e0bb5100e4ee026afe2c62a558d2cb241f3c7bbb384b09eeda24152480325", 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24008004}, 0x8090) sysfs$auto(0x2, 0x23, 0x0) r5 = socket(0xe, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) listmount$auto(&(0x7f0000000240)={0x200, @raw=0xe, 0x1, 0x81, 0xf}, &(0x7f0000000140)=0x10000, 0xf, 0x7) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) 2.080798854s ago: executing program 1 (id=332): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r3 = socket(0x23, 0x5, 0x0) listen$auto(r3, 0x5ed) unshare$auto(0x40000080) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r4, 0x0, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto(r5, 0x0, 0x6) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x400, 0x0) 1.891754245s ago: executing program 2 (id=333): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x480000, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) write$auto(0x3, 0x0, 0xfffffdef) 1.735935654s ago: executing program 3 (id=334): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x1f00000000000000, 0xa00006, 0x4, 0x60eb1, 0x602, 0x300100000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000700)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4044090) ioprio_set$auto(0x2, 0x0, 0x208) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x2400, 0x0) read$auto(r3, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x3, 0xc24) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 1.611030657s ago: executing program 2 (id=335): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1ff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(r0, 0x2000107, 0x200d, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x1000000000006, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0xfffffffa, 0x10000, 0x4}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r2, r2, 0x0, 0x100000001) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x88986, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0x7f9, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r1, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto_proc_timers_operations_base(r3, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0xaa, 0x6, 0x4, 0x15, 0xf6f6, 0x8000000000007ffd) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 1.436805763s ago: executing program 0 (id=336): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x10, 0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab04, r0) 1.375162516s ago: executing program 1 (id=337): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0xab) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x4085c2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000000c0)={r3, &(0x7f0000000140)="e43c5634d076dabbbe41d87eaa69457309260036d0ccb670486829231943b12bcf13dcc893d14bf3fd4206a7500f0bcf014a2a82b64b1741e4ae98176ec284796a2c6dbe235c85342235b289de74d95daa0c8e164a59f6c31633e2df6097105b0f04ec486027f7ad7ebdf86667d056c3203bc74eb53b51f0efd407fd6a707e450199e98a00fed5de04fffa4a4dabf9780c311eece47a04e24b8a311d8207c384f73a5a9c22ef9e52e6d76af7d2b424c4bef8a08ba86b2b37b45531e922de1cc1152e1f077d11c0d3b83b05ed83822f95d06aa97f6d", 0xd3d, &(0x7f0000000240)="8812030cd95246f35c40efc234e83bbbf0a055fdca03118eb325a5bc5519e659945460e46a64b7165ca4b4dae5e7a3f449b56b5f5bb850efab97b398fce6f8707ec981114ec7f244e19e3a3fb2393c20cc97c175b861afd9bd4768e9d7bda0942d754da4879c205a74448e5cf580c8d73cbca63a474c2f3e576b442cc80f87008417126520b3ab1630bfdaf76b6b2964946aaf5ebbedcd93b27865b6b81a4f970f6fee7569fbf2492e96335a39c5965769850a9fcbe9d3180b1859115852f479062e90ae96815d55", 0x33, &(0x7f0000000340)="c9b8bc90e395b61eef357695e802fb77840a1b380e779f4912596794e3fc10f21703ae444ed16bb143feb920b701f535ef4228022605474bbf9af3026425323a7befc041c935621d9209fdc9953eeccf99b70fbe4cccf512354a7463c83fd4f35801fbf33f22845cf946f00f9aecf2d102f4bb63b14654502142a99787bbbaba8950c7334a5b9ae8798930667af5adde95bcee252635cd6ab6ea5f5820e7fef7bc551e8c4fe0722d36d7ac21f8fc6f17c30af915ac1dab7379cd738e3d129bf18062877928031a85", &(0x7f0000000040)=0x1}) close_range$auto(r3, r4, 0x2) socket(0xa, 0x1, 0x84) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) alarm$auto(0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 858.283223ms ago: executing program 0 (id=338): r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) write$auto(r1, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1c/xrun_debug\x00', 0x20440, 0x0) socket(0x27, 0x2, 0xffffff80) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch13\x00', 0x280, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x9) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x2) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, 0x0, 0x781dc0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x184b01, 0x0) (fail_nth: 10) socket(0x2, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, 0x0, 0x400c000) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6bfdffff", @ANYRES16=r0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x24050803}, 0x100040c0) 438.564174ms ago: executing program 2 (id=339): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x21, 0x2, 0xa) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0xfa, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) select$auto(0x32fa, &(0x7f0000000240)={[0x9, 0x5, 0x3, 0x5, 0x800, 0x2, 0x5, 0x1000, 0x9, 0x9, 0x8, 0x47, 0x800000d, 0x8, 0x5013, 0x1]}, &(0x7f00000002c0)={[0x9, 0xa, 0x104, 0x4002, 0x4, 0x2, 0x8, 0xa, 0x2, 0x69b11ec, 0x62a10e5, 0x5, 0x0, 0x401, 0x9, 0x7]}, &(0x7f0000000340)={[0x9, 0x7, 0x1, 0x3, 0xd6b, 0xc, 0x20000000000, 0x1, 0x3b4, 0x1, 0x6b6a, 0xeacb, 0x26, 0x99, 0xd5f, 0x3]}, &(0x7f0000000180)={0x8, 0x51a}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/radio-keene/new_id\x00', 0x640202, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x7ffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bc7000fddbdf2501080000100007b1ca9542c92150e900018000000000060000000600000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r6, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) getitimer$auto(0x2, &(0x7f0000000040)={{0x8, 0x8001}, {0x0, 0x5}}) 78.724401ms ago: executing program 3 (id=340): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) shmctl$auto_SHM_UNLOCK(0x968, 0xc, &(0x7f00000000c0)={{0xfffffff9, 0x0, 0xee01, 0x8001, 0x7, 0x8, 0xfff0}, 0x400, 0x8001, 0x3, 0xfffffffffffffffe, @inferred, @inferred, 0x0, 0x0, 0x0, &(0x7f0000000200)="84666fc8db8184ebcda15d28e5df03da5155027e32ef43985f5797ca7b687b4a8eb26038d4e51847ff7562be99f6ea22311611b13ec6fccba35bcf688d0636eaf9b77856298a7e9fbd8660d876af5769bfd23193bceb9719d2ee9c401192fbc48a224f640db3588700fefd6e42748cb51ae00d24d39e380653dd5682ae19e7c18a66242b1f34d1e3fc55efc794264440f958fe5e12031a0818e0b5945305941d8fbe8be9c6f36219f1700d05bc8de3c744e431785ba1d4fb23b6511f0436dd2e837afedd"}) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) shmctl$auto(0xffffff6b, 0x7, &(0x7f00000003c0)={{0x7ff, 0x0, 0xee01, 0xfffff645, 0x9, 0x9, 0x1175}, 0x7, 0x4, 0x4, 0x0, @inferred=0xffffffffffffffff, @raw=0x400, 0x101, 0x0, &(0x7f0000000300)="2367711b142994635ddeec7a85cd79d0e3b635c38528467757c8cabfba475475f4cf91fa13bb5fddcc4dc1f73cb1b84db8cd9bc7c99340fce513cf9b05f12abe773be55dd0e108617bb2eb7c7884a1a7a2cd8fdd22fa19f75b4c4aab80b6124921e4b629351b5893ec0acf36b95c4965b73f5def10dd9d2206840ce31c03211d3aa82577eb", &(0x7f0000000140)="26c278691191e02a56c9f22e21793f3084e872f8a897c2719caf51e51f183190ed139261d71a78644ccbe3242997c5"}) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xa, 0x8, 0x5, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x401, 0x7, 0x3, 0x710, 0x100000001, 0x8, 0x4, 0x0, 0x8, 0x100000000}, 0x100) keyctl$auto(0x67, r1, r2, r3, 0x3) close_range$auto(0x2, 0x8, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffffff, &(0x7f00000001c0)="239cb836edc0", 0x6) ioctl$auto_TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000600)=0x80) setsockopt$auto_SO_REUSEPORT(r0, 0x80000001, 0xf, &(0x7f0000000540)='\x00', 0x10000000) r4 = ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r4, 0x101, &(0x7f0000000580)="f036de1b7671b614d15eeecbb54d97dd08d1c2f765886db004df10e519137bb460ccbf0bc9a9e1d9a7cbdbdc587735647e625c1dcf85a42759174673d91cd4b6f74380aca7d5e6ac57d42e0ceb5f352c7b7e55e3c4dabeeacb8a85f1cfd471f332a12970a4c969c1525e8c7714931dc5a06918") 0s ago: executing program 1 (id=341): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64a1d2) (fail_nth: 7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 96.772805][ T5825] cgroup: Unknown subsys name 'net' [ 96.883291][ T5825] cgroup: Unknown subsys name 'cpuset' [ 96.892982][ T5825] cgroup: Unknown subsys name 'rlimit' [ 97.040774][ T926] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 98.666245][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.958127][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.966276][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.974925][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.983431][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.019251][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.019658][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.035496][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.044597][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.051787][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.056598][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.060368][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.073407][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.073873][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.088650][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.090524][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.097348][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.104442][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.111292][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.128388][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.137364][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.723694][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 101.807432][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 101.838138][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 102.009852][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 102.056107][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.063946][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.073003][ T5841] bridge_slave_0: entered allmulticast mode [ 102.080643][ T5841] bridge_slave_0: entered promiscuous mode [ 102.096372][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.103575][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.111006][ T5844] bridge_slave_0: entered allmulticast mode [ 102.118334][ T5844] bridge_slave_0: entered promiscuous mode [ 102.152105][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.159436][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.166590][ T5841] bridge_slave_1: entered allmulticast mode [ 102.174943][ T5841] bridge_slave_1: entered promiscuous mode [ 102.191676][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.199244][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.206450][ T5844] bridge_slave_1: entered allmulticast mode [ 102.213991][ T5844] bridge_slave_1: entered promiscuous mode [ 102.234243][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.241957][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.249229][ T5842] bridge_slave_0: entered allmulticast mode [ 102.256659][ T5842] bridge_slave_0: entered promiscuous mode [ 102.314415][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.324281][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.331741][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.339371][ T5842] bridge_slave_1: entered allmulticast mode [ 102.346721][ T5842] bridge_slave_1: entered promiscuous mode [ 102.376032][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.403035][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.416018][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.501406][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.515321][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.555913][ T5844] team0: Port device team_slave_0 added [ 102.579207][ T5841] team0: Port device team_slave_0 added [ 102.585371][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.593278][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.600561][ T5843] bridge_slave_0: entered allmulticast mode [ 102.607878][ T5843] bridge_slave_0: entered promiscuous mode [ 102.617338][ T5844] team0: Port device team_slave_1 added [ 102.640041][ T5841] team0: Port device team_slave_1 added [ 102.648554][ T5842] team0: Port device team_slave_0 added [ 102.655104][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.664167][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.671983][ T5843] bridge_slave_1: entered allmulticast mode [ 102.679416][ T5843] bridge_slave_1: entered promiscuous mode [ 102.736127][ T5842] team0: Port device team_slave_1 added [ 102.780359][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.787357][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.813649][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.853268][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.860374][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.886986][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.899162][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.906134][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.932181][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.952727][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.962907][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.989864][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.004171][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.017374][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.027249][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.034561][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.060566][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.082427][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.089767][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.115826][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.195914][ T5843] team0: Port device team_slave_0 added [ 103.202021][ T5849] Bluetooth: hci0: command tx timeout [ 103.209639][ T5849] Bluetooth: hci2: command tx timeout [ 103.209655][ T5853] Bluetooth: hci3: command tx timeout [ 103.209872][ T5853] Bluetooth: hci1: command tx timeout [ 103.255928][ T5844] hsr_slave_0: entered promiscuous mode [ 103.262929][ T5844] hsr_slave_1: entered promiscuous mode [ 103.285547][ T5843] team0: Port device team_slave_1 added [ 103.323671][ T5842] hsr_slave_0: entered promiscuous mode [ 103.330452][ T5842] hsr_slave_1: entered promiscuous mode [ 103.336669][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.345089][ T5842] Cannot create hsr debugfs directory [ 103.355668][ T5841] hsr_slave_0: entered promiscuous mode [ 103.362347][ T5841] hsr_slave_1: entered promiscuous mode [ 103.368437][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.376079][ T5841] Cannot create hsr debugfs directory [ 103.436690][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.444854][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.471252][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.483906][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.491073][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.517218][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.755656][ T5843] hsr_slave_0: entered promiscuous mode [ 103.763034][ T5843] hsr_slave_1: entered promiscuous mode [ 103.769913][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.777521][ T5843] Cannot create hsr debugfs directory [ 104.037308][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.052156][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.080935][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.108420][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.176827][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.188160][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.220899][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.232561][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.327347][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.365044][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.378058][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.401836][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.478588][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.505392][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.517253][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.532930][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.573747][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.631570][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.652981][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.683926][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.691319][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.721060][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.728289][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.745105][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.798596][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.805780][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.856284][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.863511][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.993068][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.051282][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.070764][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.102964][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.110248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.148070][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.172173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.179556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.212831][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.220057][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.280258][ T5857] Bluetooth: hci2: command tx timeout [ 105.285835][ T5857] Bluetooth: hci3: command tx timeout [ 105.291298][ T5849] Bluetooth: hci0: command tx timeout [ 105.292083][ T5853] Bluetooth: hci1: command tx timeout [ 105.328112][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.335378][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.485181][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.564866][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.654681][ T5844] veth0_vlan: entered promiscuous mode [ 105.708029][ T5844] veth1_vlan: entered promiscuous mode [ 105.787251][ T5841] veth0_vlan: entered promiscuous mode [ 105.815479][ T5844] veth0_macvtap: entered promiscuous mode [ 105.834273][ T5841] veth1_vlan: entered promiscuous mode [ 105.870362][ T5844] veth1_macvtap: entered promiscuous mode [ 105.920531][ T5841] veth0_macvtap: entered promiscuous mode [ 105.957267][ T5841] veth1_macvtap: entered promiscuous mode [ 105.971072][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.983442][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.002959][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.012672][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.021552][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.031358][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.060379][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.072754][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.092207][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.102452][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.111650][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.121264][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.138144][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.148978][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.348267][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.357171][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.373127][ T5843] veth0_vlan: entered promiscuous mode [ 106.390713][ T5842] veth0_vlan: entered promiscuous mode [ 106.408463][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.427649][ T5843] veth1_vlan: entered promiscuous mode [ 106.435822][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.470895][ T5842] veth1_vlan: entered promiscuous mode [ 106.527230][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.536146][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.542430][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.549277][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.598103][ T5843] veth0_macvtap: entered promiscuous mode [ 106.645100][ T5842] veth0_macvtap: entered promiscuous mode [ 106.660637][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.683127][ T5842] veth1_macvtap: entered promiscuous mode [ 106.694213][ T5843] veth1_macvtap: entered promiscuous mode [ 106.734243][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.794877][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.851074][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.873513][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.899017][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.907806][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.917128][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.934308][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.980708][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.993577][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.013664][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.027714][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.359801][ T5857] Bluetooth: hci2: command tx timeout [ 107.360641][ T5158] Bluetooth: hci1: command tx timeout [ 107.365293][ T5857] Bluetooth: hci3: command tx timeout [ 107.376281][ T5853] Bluetooth: hci0: command tx timeout [ 107.568454][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.582314][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.842731][ T3032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.861311][ T3032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.919309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.956645][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.985825][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.099945][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.107814][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.199288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.600545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.609693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.869395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 109.344278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.353426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.381598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.391800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.439670][ T5853] Bluetooth: hci0: command tx timeout [ 109.445161][ T5853] Bluetooth: hci3: command tx timeout [ 109.451555][ T5853] Bluetooth: hci1: command tx timeout [ 109.456981][ T5853] Bluetooth: hci2: command tx timeout [ 109.791438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.219938][ T5975] Invalid ELF header magic: != ELF [ 111.254572][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.287965][ T5997] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.450136][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 112.619266][ T6005] hsr_slave_0 (unregistering): hsr_addr_subst_dest: Unknown node [ 112.627452][ T6005] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.717374][ T6002] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 112.932386][ T5998] hsr_slave_0 (unregistering): left promiscuous mode [ 112.966176][ T6011] Console: switching to colour VGA+ 80x25 [ 113.024865][ T6015] process 'syz.0.16' launched '/dev/fd/0' with NULL argv: empty string added [ 113.294691][ T5998] Zero length message leads to an empty skb [ 113.699604][ T6018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 114.000985][ T6021] FAULT_INJECTION: forcing a failure. [ 114.000985][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 114.047601][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.3.18 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 114.047638][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.047658][ T6021] Call Trace: [ 114.047670][ T6021] [ 114.047684][ T6021] dump_stack_lvl+0x16c/0x1f0 [ 114.047737][ T6021] should_fail_ex+0x512/0x640 [ 114.047779][ T6021] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 114.047826][ T6021] should_failslab+0xc2/0x120 [ 114.047870][ T6021] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 114.047911][ T6021] ? __asan_memcpy+0x3c/0x60 [ 114.047943][ T6021] ? __kernfs_new_node+0xd2/0x8e0 [ 114.047980][ T6021] __kernfs_new_node+0xd2/0x8e0 [ 114.048015][ T6021] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.048056][ T6021] ? find_held_lock+0x2b/0x80 [ 114.048083][ T6021] ? kernfs_root+0xee/0x2a0 [ 114.048123][ T6021] kernfs_new_node+0x13c/0x1e0 [ 114.048166][ T6021] kernfs_create_link+0xcc/0x240 [ 114.048201][ T6021] sysfs_do_create_link_sd+0x90/0x140 [ 114.048242][ T6021] sysfs_create_link+0x61/0xc0 [ 114.048276][ T6021] device_add+0x62c/0x1a70 [ 114.048307][ T6021] ? alloc_workqueue+0x198/0x200 [ 114.048339][ T6021] ? __pfx_device_add+0x10/0x10 [ 114.048402][ T6021] nfc_register_device+0x41/0x3c0 [ 114.048436][ T6021] nci_register_device+0x7f1/0xb80 [ 114.048483][ T6021] ? __pfx_nci_register_device+0x10/0x10 [ 114.048546][ T6021] ? lockdep_init_map_type+0x5c/0x280 [ 114.048595][ T6021] virtual_ncidev_open+0x141/0x220 [ 114.048636][ T6021] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 114.048676][ T6021] misc_open+0x35d/0x420 [ 114.048717][ T6021] ? __pfx_misc_open+0x10/0x10 [ 114.048758][ T6021] chrdev_open+0x231/0x6a0 [ 114.048805][ T6021] ? __pfx_apparmor_file_open+0x10/0x10 [ 114.048847][ T6021] ? __pfx_chrdev_open+0x10/0x10 [ 114.048899][ T6021] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 114.048949][ T6021] do_dentry_open+0x744/0x1c10 [ 114.048996][ T6021] ? __pfx_chrdev_open+0x10/0x10 [ 114.049053][ T6021] vfs_open+0x82/0x3f0 [ 114.049092][ T6021] path_openat+0x1de4/0x2cb0 [ 114.049150][ T6021] ? __pfx_path_openat+0x10/0x10 [ 114.049198][ T6021] ? __lock_acquire+0xb8a/0x1c90 [ 114.049245][ T6021] do_filp_open+0x20b/0x470 [ 114.049291][ T6021] ? __pfx_do_filp_open+0x10/0x10 [ 114.049369][ T6021] ? alloc_fd+0x471/0x7d0 [ 114.049425][ T6021] do_sys_openat2+0x11b/0x1d0 [ 114.049459][ T6021] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.049546][ T6021] ? __fget_files+0x20e/0x3c0 [ 114.049603][ T6021] __x64_sys_openat+0x174/0x210 [ 114.049641][ T6021] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.049698][ T6021] do_syscall_64+0xcd/0x490 [ 114.049733][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.049766][ T6021] RIP: 0033:0x7f577818e929 [ 114.049803][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.049834][ T6021] RSP: 002b:00007f5778fd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.049862][ T6021] RAX: ffffffffffffffda RBX: 00007f57783b5fa0 RCX: 00007f577818e929 [ 114.049881][ T6021] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 114.049901][ T6021] RBP: 00007f5778210b39 R08: 0000000000000000 R09: 0000000000000000 [ 114.049916][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.049930][ T6021] R13: 0000000000000000 R14: 00007f57783b5fa0 R15: 00007ffe6d87ed58 [ 114.049961][ T6021] [ 115.428850][ T6019] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 117.015432][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 117.255818][ T6064] mmap: syz.1.25 (6064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.949928][ T6082] sysfs_service_op_show: Client not running :-5: [ 119.859184][ T6102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 122.773295][ T6125] random: crng reseeded on system resumption [ 122.782208][ T6127] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 124.343990][ T6137] busy [ 124.746221][ T6141] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 125.162281][ T6142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 syzkaller syzkaller login: [ 128.824175][ T6189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 129.276664][ T6195] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 129.719948][ T6209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 130.217593][ T6215] FAULT_INJECTION: forcing a failure. [ 130.217593][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 130.270214][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.1.51 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 130.270252][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.270269][ T6215] Call Trace: [ 130.270278][ T6215] [ 130.270289][ T6215] dump_stack_lvl+0x16c/0x1f0 [ 130.270338][ T6215] should_fail_ex+0x512/0x640 [ 130.270378][ T6215] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 130.270425][ T6215] should_failslab+0xc2/0x120 [ 130.270450][ T6215] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 130.270493][ T6215] ? __kernfs_new_node+0xd2/0x8e0 [ 130.270538][ T6215] __kernfs_new_node+0xd2/0x8e0 [ 130.270589][ T6215] ? __pfx___kernfs_new_node+0x10/0x10 [ 130.270639][ T6215] ? find_held_lock+0x2b/0x80 [ 130.270669][ T6215] ? kernfs_root+0xee/0x2a0 [ 130.270717][ T6215] kernfs_new_node+0x13c/0x1e0 [ 130.270768][ T6215] __kernfs_create_file+0x53/0x350 [ 130.270805][ T6215] sysfs_add_file_mode_ns+0x207/0x3c0 [ 130.270853][ T6215] internal_create_group+0x578/0xf30 [ 130.270904][ T6215] ? __pfx_internal_create_group+0x10/0x10 [ 130.270951][ T6215] ? kernfs_create_link+0x1bd/0x240 [ 130.270989][ T6215] internal_create_groups+0x9d/0x150 [ 130.271035][ T6215] device_add+0x77f/0x1a70 [ 130.271088][ T6215] ? __pfx_device_add+0x10/0x10 [ 130.271137][ T6215] __add_disk+0x457/0xf00 [ 130.271183][ T6215] ? find_held_lock+0x2b/0x80 [ 130.271216][ T6215] add_disk_fwnode+0x3f8/0x5d0 [ 130.271265][ T6215] zram_add+0x4c8/0x700 [ 130.271301][ T6215] ? __pfx_zram_add+0x10/0x10 [ 130.271363][ T6215] ? find_held_lock+0x2b/0x80 [ 130.271400][ T6215] ? __pfx_hot_add_show+0x10/0x10 [ 130.271434][ T6215] ? __pfx_class_attr_show+0x10/0x10 [ 130.271464][ T6215] hot_add_show+0x21/0x80 [ 130.271500][ T6215] class_attr_show+0x72/0xa0 [ 130.271533][ T6215] sysfs_kf_seq_show+0x216/0x3e0 [ 130.271584][ T6215] seq_read_iter+0x506/0x12c0 [ 130.271642][ T6215] kernfs_fop_read_iter+0x40f/0x5a0 [ 130.271675][ T6215] ? rw_verify_area+0xcf/0x680 [ 130.271718][ T6215] vfs_read+0x8bc/0xc60 [ 130.271765][ T6215] ? __pfx___mutex_lock+0x10/0x10 [ 130.271794][ T6215] ? __pfx_vfs_read+0x10/0x10 [ 130.271862][ T6215] ksys_read+0x12a/0x250 [ 130.271903][ T6215] ? __pfx_ksys_read+0x10/0x10 [ 130.271956][ T6215] do_syscall_64+0xcd/0x490 [ 130.272020][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.272049][ T6215] RIP: 0033:0x7f6f6e78e929 [ 130.272102][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.272133][ T6215] RSP: 002b:00007f6f6f54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.272178][ T6215] RAX: ffffffffffffffda RBX: 00007f6f6e9b5fa0 RCX: 00007f6f6e78e929 [ 130.272198][ T6215] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 130.272215][ T6215] RBP: 00007f6f6e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.272232][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.272248][ T6215] R13: 0000000000000000 R14: 00007f6f6e9b5fa0 R15: 00007fff0ba47588 [ 130.272287][ T6215] [ 130.780163][ T6210] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 131.654635][ T6230] netlink: 'syz.2.54': attribute type 21 has an invalid length. [ 131.683134][ T6230] netlink: 334 bytes leftover after parsing attributes in process `syz.2.54'. [ 132.156562][ T6243] netlink: 'syz.2.57': attribute type 21 has an invalid length. [ 132.238323][ T6248] Invalid ELF header magic: != ELF [ 132.267743][ T6243] netlink: 334 bytes leftover after parsing attributes in process `syz.2.57'. [ 135.426875][ T6289] netlink: 'syz.2.65': attribute type 21 has an invalid length. [ 135.487107][ T6289] netlink: 334 bytes leftover after parsing attributes in process `syz.2.65'. [ 136.031104][ T6309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 136.403693][ T6311] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 136.758952][ T6320] usb usb36: usbfs: process 6320 (syz.1.72) did not claim interface 0 before use [ 138.022852][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.029506][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.046997][ T6333] capability: warning: `syz.2.75' uses 32-bit capabilities (legacy support in use) [ 138.700146][ T6333] FAULT_INJECTION: forcing a failure. [ 138.700146][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 138.744212][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.2.75 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 138.744254][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.744271][ T6333] Call Trace: [ 138.744282][ T6333] [ 138.744294][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 138.744347][ T6333] should_fail_ex+0x512/0x640 [ 138.744389][ T6333] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 138.744440][ T6333] should_failslab+0xc2/0x120 [ 138.744469][ T6333] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 138.744523][ T6333] ? alloc_inode+0x61/0x240 [ 138.744551][ T6333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.744605][ T6333] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 138.744640][ T6333] alloc_inode+0x61/0x240 [ 138.744668][ T6333] new_inode+0x22/0x1c0 [ 138.744699][ T6333] __rpc_create_common+0x57/0x2f0 [ 138.744745][ T6333] rpc_populate.constprop.0+0x153/0x5d0 [ 138.744797][ T6333] rpc_fill_super+0x2bc/0x840 [ 138.744836][ T6333] ? sget_fc+0x808/0xc20 [ 138.744873][ T6333] ? __pfx_set_anon_super_fc+0x10/0x10 [ 138.744909][ T6333] ? __pfx_rpc_fill_super+0x10/0x10 [ 138.744949][ T6333] get_tree_keyed+0x10b/0x1d0 [ 138.744988][ T6333] vfs_get_tree+0x8e/0x340 [ 138.745020][ T6333] vfs_cmd_create+0xd7/0x2a0 [ 138.745047][ T6333] __do_sys_fsconfig+0x7b8/0xbe0 [ 138.745076][ T6333] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 138.745120][ T6333] do_syscall_64+0xcd/0x490 [ 138.745150][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.745178][ T6333] RIP: 0033:0x7f91ed18e929 [ 138.745200][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.745225][ T6333] RSP: 002b:00007f91edff1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 138.745268][ T6333] RAX: ffffffffffffffda RBX: 00007f91ed3b5fa0 RCX: 00007f91ed18e929 [ 138.745286][ T6333] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000c [ 138.745302][ T6333] RBP: 00007f91ed210b39 R08: 0000000000000000 R09: 0000000000000000 [ 138.745318][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.745334][ T6333] R13: 0000000000000000 R14: 00007f91ed3b5fa0 R15: 00007ffec404d078 [ 138.745383][ T6333] [ 138.745435][ T6333] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 138.981820][ T6333] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 140.149841][ T6369] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.592449][ T6382] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 140.616167][ T6379] FAULT_INJECTION: forcing a failure. [ 140.616167][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 140.653336][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.2.84 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 140.653370][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.653384][ T6379] Call Trace: [ 140.653392][ T6379] [ 140.653401][ T6379] dump_stack_lvl+0x16c/0x1f0 [ 140.653444][ T6379] should_fail_ex+0x512/0x640 [ 140.653490][ T6379] should_failslab+0xc2/0x120 [ 140.653516][ T6379] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 140.653558][ T6379] ? skb_clone+0x190/0x3f0 [ 140.653589][ T6379] skb_clone+0x190/0x3f0 [ 140.653617][ T6379] netlink_deliver_tap+0xabd/0xd30 [ 140.653655][ T6379] netlink_unicast+0x5df/0x7f0 [ 140.653691][ T6379] ? __pfx_netlink_unicast+0x10/0x10 [ 140.653737][ T6379] netlink_sendmsg+0x8d1/0xdd0 [ 140.653770][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.653810][ T6379] ____sys_sendmsg+0xa95/0xc70 [ 140.653840][ T6379] ? copy_msghdr_from_user+0x10a/0x160 [ 140.653878][ T6379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.653912][ T6379] ? __pfx__kstrtoull+0x10/0x10 [ 140.653953][ T6379] ___sys_sendmsg+0x134/0x1d0 [ 140.654001][ T6379] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.654063][ T6379] ? find_held_lock+0x2b/0x80 [ 140.654114][ T6379] __sys_sendmmsg+0x200/0x420 [ 140.654148][ T6379] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.654188][ T6379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.654231][ T6379] ? fput+0x70/0xf0 [ 140.654259][ T6379] ? ksys_write+0x1ac/0x250 [ 140.654297][ T6379] ? __pfx_ksys_write+0x10/0x10 [ 140.654345][ T6379] __x64_sys_sendmmsg+0x9c/0x100 [ 140.654371][ T6379] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.654413][ T6379] do_syscall_64+0xcd/0x490 [ 140.654443][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.654472][ T6379] RIP: 0033:0x7f91ed18e929 [ 140.654494][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.654520][ T6379] RSP: 002b:00007f91edfd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.654544][ T6379] RAX: ffffffffffffffda RBX: 00007f91ed3b6080 RCX: 00007f91ed18e929 [ 140.654561][ T6379] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004 [ 140.654577][ T6379] RBP: 00007f91edfd0090 R08: 0000000000000000 R09: 0000000000000000 [ 140.654592][ T6379] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.654608][ T6379] R13: 0000000000000000 R14: 00007f91ed3b6080 R15: 00007ffec404d078 [ 140.654644][ T6379] [ 140.957026][ T6385] netlink: 'syz.1.87': attribute type 21 has an invalid length. [ 140.964727][ T6385] netlink: 334 bytes leftover after parsing attributes in process `syz.1.87'. [ 141.105165][ T6387] hugetlbfs: syz.0.86 (6387): Using mlock ulimits for SHM_HUGETLB is obsolete [ 141.749839][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 141.851678][ T6398] netlink: 334 bytes leftover after parsing attributes in process `syz.1.89'. [ 143.108198][ T6405] busy [ 144.395482][ T6411] Invalid ELF header magic: != ELF [ 144.807895][ T6431] block nbd8: NBD_DISCONNECT [ 145.205419][ T6434] netlink: 'syz.0.97': attribute type 21 has an invalid length. [ 145.217646][ T6434] netlink: 334 bytes leftover after parsing attributes in process `syz.0.97'. [ 145.406399][ T6441] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 145.813888][ T5857] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 145.813948][ T5857] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 145.828820][ T5857] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 146.239964][ T6453] busy [ 146.734372][ T6445] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 147.381960][ T6446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 148.400489][ T6467] can: request_module (can-proto-0) failed. [ 148.420662][ T6479] netlink: 334 bytes leftover after parsing attributes in process `syz.2.107'. [ 148.507938][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.632199][ T6491] busy [ 150.169487][ T6500] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 150.578246][ T6501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 151.347718][ T6508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 152.133322][ T6523] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 152.346477][ T6527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 152.714238][ T6535] random: crng reseeded on system resumption [ 152.727272][ T6535] FAULT_INJECTION: forcing a failure. [ 152.727272][ T6535] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 152.819739][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.3.119 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 152.819773][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.819788][ T6535] Call Trace: [ 152.819796][ T6535] [ 152.819805][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 152.819846][ T6535] should_fail_ex+0x512/0x640 [ 152.819885][ T6535] should_fail_alloc_page+0xe7/0x130 [ 152.819908][ T6535] prepare_alloc_pages+0x3c2/0x610 [ 152.819940][ T6535] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 152.819983][ T6535] ? stack_trace_save+0x8e/0xc0 [ 152.820008][ T6535] ? __pfx_stack_trace_save+0x10/0x10 [ 152.820031][ T6535] ? stack_depot_save_flags+0x28/0xa40 [ 152.820067][ T6535] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.820105][ T6535] ? kasan_save_stack+0x42/0x60 [ 152.820136][ T6535] ? kasan_save_stack+0x33/0x60 [ 152.820172][ T6535] ? do_dentry_open+0x744/0x1c10 [ 152.820209][ T6535] ? vfs_open+0x82/0x3f0 [ 152.820236][ T6535] ? path_openat+0x1de4/0x2cb0 [ 152.820277][ T6535] ? do_filp_open+0x20b/0x470 [ 152.820315][ T6535] ? do_sys_openat2+0x11b/0x1d0 [ 152.820345][ T6535] ? __x64_sys_openat+0x174/0x210 [ 152.820377][ T6535] ? do_syscall_64+0xcd/0x490 [ 152.820403][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.820438][ T6535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.820482][ T6535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.820539][ T6535] ? policy_nodemask+0xea/0x4e0 [ 152.820573][ T6535] alloc_pages_mpol+0x1fb/0x550 [ 152.820605][ T6535] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.820647][ T6535] alloc_pages_noprof+0x131/0x390 [ 152.820678][ T6535] get_zeroed_page_noprof+0x18/0xb0 [ 152.820713][ T6535] get_image_page+0x18/0x190 [ 152.820743][ T6535] alloc_rtree_node+0x3c/0xb0 [ 152.820774][ T6535] memory_bm_create+0x519/0x810 [ 152.820821][ T6535] create_basic_memory_bitmaps+0x10b/0x320 [ 152.820863][ T6535] snapshot_open+0x235/0x2b0 [ 152.820900][ T6535] ? __pfx_snapshot_open+0x10/0x10 [ 152.820937][ T6535] misc_open+0x35d/0x420 [ 152.820976][ T6535] ? __pfx_misc_open+0x10/0x10 [ 152.821015][ T6535] chrdev_open+0x231/0x6a0 [ 152.821060][ T6535] ? __pfx_apparmor_file_open+0x10/0x10 [ 152.821099][ T6535] ? __pfx_chrdev_open+0x10/0x10 [ 152.821150][ T6535] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 152.821199][ T6535] do_dentry_open+0x744/0x1c10 [ 152.821246][ T6535] ? __pfx_chrdev_open+0x10/0x10 [ 152.821303][ T6535] vfs_open+0x82/0x3f0 [ 152.821341][ T6535] path_openat+0x1de4/0x2cb0 [ 152.821420][ T6535] ? __pfx_path_openat+0x10/0x10 [ 152.821469][ T6535] ? __lock_acquire+0xb8a/0x1c90 [ 152.821515][ T6535] do_filp_open+0x20b/0x470 [ 152.821573][ T6535] ? __pfx_do_filp_open+0x10/0x10 [ 152.821642][ T6535] ? alloc_fd+0x471/0x7d0 [ 152.821683][ T6535] do_sys_openat2+0x11b/0x1d0 [ 152.821710][ T6535] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.821749][ T6535] __x64_sys_openat+0x174/0x210 [ 152.821777][ T6535] ? __pfx___x64_sys_openat+0x10/0x10 [ 152.821819][ T6535] do_syscall_64+0xcd/0x490 [ 152.821843][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.821868][ T6535] RIP: 0033:0x7f577818e929 [ 152.821886][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.821909][ T6535] RSP: 002b:00007f5778fd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.821932][ T6535] RAX: ffffffffffffffda RBX: 00007f57783b5fa0 RCX: 00007f577818e929 [ 152.821947][ T6535] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 152.821963][ T6535] RBP: 00007f5778210b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.821977][ T6535] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 152.821992][ T6535] R13: 0000000000000000 R14: 00007f57783b5fa0 R15: 00007ffe6d87ed58 [ 152.822022][ T6535] [ 153.192120][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.912344][ T6545] busy [ 154.437741][ T6549] FAULT_INJECTION: forcing a failure. [ 154.437741][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 154.462427][ T6529] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 154.492181][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.3.122 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 154.492216][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.492231][ T6549] Call Trace: [ 154.492239][ T6549] [ 154.492249][ T6549] dump_stack_lvl+0x16c/0x1f0 [ 154.492298][ T6549] should_fail_ex+0x512/0x640 [ 154.492337][ T6549] ? fs_reclaim_acquire+0xae/0x150 [ 154.492371][ T6549] ? tomoyo_encode2+0x100/0x3e0 [ 154.492405][ T6549] should_failslab+0xc2/0x120 [ 154.492430][ T6549] __kmalloc_noprof+0xd2/0x510 [ 154.492469][ T6549] ? d_absolute_path+0x136/0x1a0 [ 154.492503][ T6549] tomoyo_encode2+0x100/0x3e0 [ 154.492544][ T6549] tomoyo_encode+0x29/0x50 [ 154.492577][ T6549] tomoyo_realpath_from_path+0x18f/0x6e0 [ 154.492652][ T6549] tomoyo_check_open_permission+0x2ab/0x3c0 [ 154.492688][ T6549] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 154.492763][ T6549] ? do_raw_spin_lock+0x12c/0x2b0 [ 154.492817][ T6549] tomoyo_file_open+0x6b/0x90 [ 154.492863][ T6549] security_file_open+0x84/0x1e0 [ 154.492921][ T6549] do_dentry_open+0x596/0x1c10 [ 154.492979][ T6549] vfs_open+0x82/0x3f0 [ 154.493017][ T6549] path_openat+0x1de4/0x2cb0 [ 154.493073][ T6549] ? __pfx_path_openat+0x10/0x10 [ 154.493120][ T6549] ? __lock_acquire+0xb8a/0x1c90 [ 154.493165][ T6549] do_filp_open+0x20b/0x470 [ 154.493210][ T6549] ? __pfx_do_filp_open+0x10/0x10 [ 154.493304][ T6549] ? alloc_fd+0x471/0x7d0 [ 154.493360][ T6549] do_sys_openat2+0x11b/0x1d0 [ 154.493395][ T6549] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.493435][ T6549] ? __fget_files+0x20e/0x3c0 [ 154.493488][ T6549] __x64_sys_openat+0x174/0x210 [ 154.493524][ T6549] ? __pfx___x64_sys_openat+0x10/0x10 [ 154.493560][ T6549] ? ksys_write+0x1ac/0x250 [ 154.493626][ T6549] do_syscall_64+0xcd/0x490 [ 154.493659][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.493690][ T6549] RIP: 0033:0x7f577818e929 [ 154.493715][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.493745][ T6549] RSP: 002b:00007f5778fd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.493774][ T6549] RAX: ffffffffffffffda RBX: 00007f57783b5fa0 RCX: 00007f577818e929 [ 154.493794][ T6549] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.493813][ T6549] RBP: 00007f5778fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 154.493830][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.493847][ T6549] R13: 0000000000000000 R14: 00007f57783b5fa0 R15: 00007ffe6d87ed58 [ 154.493887][ T6549] [ 154.493916][ T6549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 154.792478][ T6549] random: crng reseeded on system resumption [ 157.031288][ T6582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 157.704621][ T6591] Invalid ELF header magic: != ELF [ 158.078143][ T6595] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 158.971381][ T6601] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 159.217360][ T6602] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 159.824170][ T6615] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 160.328236][ T6616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 161.843171][ T6647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 162.462776][ T6650] Invalid ELF header magic: != ELF [ 163.039209][ T6649] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 164.307221][ T6666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 164.702783][ T6667] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 165.596645][ T6692] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 165.655687][ T6688] Invalid ELF header magic: != ELF [ 166.470482][ T6693] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 168.076019][ T6719] busy [ 168.349239][ T5857] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 168.625738][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 168.635919][ T6727] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 169.256597][ T6728] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 170.696264][ T6763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 171.048286][ T6766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 171.732216][ T6786] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 172.210654][ T6788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 175.595246][ T6839] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 175.834686][ T6840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 176.252852][ T6854] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 176.536292][ T6856] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 177.175858][ T6873] busy [ 178.063377][ T6888] busy [ 178.320612][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 178.582212][ T6880] Console: switching to colour frame buffer device 128x48 [ 180.501449][ T6904] busy [ 181.567506][ T6926] Invalid ELF header magic: != ELF [ 182.312318][ T6935] busy [ 182.924424][ T6937] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 183.445674][ T6939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 184.956573][ T6958] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 185.354836][ T6964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'. [ 185.424673][ T6963] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 186.365293][ T6962] syz.1.211 (6962) used greatest stack depth: 19800 bytes left [ 186.506905][ T6975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 186.705605][ T6976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 187.288152][ T6982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 187.672391][ T6991] usb usb36: usbfs: process 6991 (syz.2.220) did not claim interface 0 before use [ 187.727870][ T6983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 190.687247][ T7031] FAULT_INJECTION: forcing a failure. [ 190.687247][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 190.770294][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.2.232 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 190.770332][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.770348][ T7031] Call Trace: [ 190.770356][ T7031] [ 190.770367][ T7031] dump_stack_lvl+0x16c/0x1f0 [ 190.770418][ T7031] should_fail_ex+0x512/0x640 [ 190.770479][ T7031] ? __kvmalloc_node_noprof+0x124/0x620 [ 190.770527][ T7031] should_failslab+0xc2/0x120 [ 190.770557][ T7031] __kvmalloc_node_noprof+0x137/0x620 [ 190.770599][ T7031] ? seq_read_iter+0x826/0x12c0 [ 190.770652][ T7031] ? seq_read_iter+0x826/0x12c0 [ 190.770689][ T7031] seq_read_iter+0x826/0x12c0 [ 190.770726][ T7031] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 190.770788][ T7031] kernfs_fop_read_iter+0x40f/0x5a0 [ 190.770827][ T7031] copy_splice_read+0x615/0xba0 [ 190.770874][ T7031] ? __pfx_copy_splice_read+0x10/0x10 [ 190.770917][ T7031] ? look_up_lock_class+0x6b/0x150 [ 190.770970][ T7031] ? lockdep_init_map_type+0x5c/0x280 [ 190.771016][ T7031] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 190.771060][ T7031] ? __pfx_copy_splice_read+0x10/0x10 [ 190.771097][ T7031] do_splice_read+0x285/0x370 [ 190.771139][ T7031] splice_direct_to_actor+0x2a1/0xa30 [ 190.771182][ T7031] ? __pfx_direct_splice_actor+0x10/0x10 [ 190.771229][ T7031] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 190.771265][ T7031] ? get_pid_task+0xfc/0x250 [ 190.771314][ T7031] do_splice_direct+0x174/0x240 [ 190.771354][ T7031] ? __pfx_do_splice_direct+0x10/0x10 [ 190.771394][ T7031] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 190.771438][ T7031] ? rw_verify_area+0xcf/0x680 [ 190.771480][ T7031] do_sendfile+0xb06/0xe50 [ 190.771529][ T7031] ? __pfx_do_sendfile+0x10/0x10 [ 190.771570][ T7031] ? __fget_files+0x20e/0x3c0 [ 190.771630][ T7031] __x64_sys_sendfile64+0x1d8/0x220 [ 190.771659][ T7031] ? ksys_write+0x1ac/0x250 [ 190.771700][ T7031] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 190.771742][ T7031] do_syscall_64+0xcd/0x490 [ 190.771774][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.771817][ T7031] RIP: 0033:0x7f91ed18e929 [ 190.771840][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.771866][ T7031] RSP: 002b:00007f91edff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 190.771891][ T7031] RAX: ffffffffffffffda RBX: 00007f91ed3b5fa0 RCX: 00007f91ed18e929 [ 190.771908][ T7031] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 190.771923][ T7031] RBP: 00007f91edff1090 R08: 0000000000000000 R09: 0000000000000000 [ 190.771959][ T7031] R10: 000000004f64a1d2 R11: 0000000000000246 R12: 0000000000000001 [ 190.771977][ T7031] R13: 0000000000000000 R14: 00007f91ed3b5fa0 R15: 00007ffec404d078 [ 190.772018][ T7031] [ 191.052659][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.832945][ T7049] random: crng reseeded on system resumption [ 191.880547][ T7049] FAULT_INJECTION: forcing a failure. [ 191.880547][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 191.893436][ T7049] CPU: 0 UID: 0 PID: 7049 Comm: syz.1.235 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 191.893476][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.893489][ T7049] Call Trace: [ 191.893496][ T7049] [ 191.893504][ T7049] dump_stack_lvl+0x116/0x1f0 [ 191.893544][ T7049] should_fail_ex+0x512/0x640 [ 191.893599][ T7049] should_failslab+0xc2/0x120 [ 191.893621][ T7049] __kmalloc_cache_noprof+0x6a/0x3e0 [ 191.893653][ T7049] ? alloc_fw_cache_entry+0x3f/0xd0 [ 191.893696][ T7049] ? __pfx_fw_name_devm_release+0x10/0x10 [ 191.893723][ T7049] alloc_fw_cache_entry+0x3f/0xd0 [ 191.893751][ T7049] dev_create_fw_entry+0x3d/0x150 [ 191.893783][ T7049] ? __pfx_fw_name_devm_release+0x10/0x10 [ 191.893808][ T7049] devres_for_each_res+0x173/0x1d0 [ 191.893829][ T7049] ? __pfx_devm_name_match+0x10/0x10 [ 191.893854][ T7049] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 191.893883][ T7049] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 191.893912][ T7049] dev_cache_fw_image+0xa2/0x490 [ 191.893942][ T7049] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 191.893975][ T7049] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 191.894004][ T7049] dpm_for_each_dev+0x5a/0xb0 [ 191.894031][ T7049] fw_pm_notify+0x81/0x150 [ 191.894056][ T7049] notifier_call_chain+0xbc/0x410 [ 191.894080][ T7049] ? __pfx_fw_pm_notify+0x10/0x10 [ 191.894112][ T7049] blocking_notifier_call_chain_robust+0xc8/0x160 [ 191.894141][ T7049] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 191.894178][ T7049] pm_notifier_call_chain_robust+0x27/0x60 [ 191.894208][ T7049] snapshot_open+0x218/0x2b0 [ 191.894233][ T7049] ? __pfx_snapshot_open+0x10/0x10 [ 191.894270][ T7049] misc_open+0x35d/0x420 [ 191.894296][ T7049] ? __pfx_misc_open+0x10/0x10 [ 191.894322][ T7049] chrdev_open+0x231/0x6a0 [ 191.894353][ T7049] ? __pfx_apparmor_file_open+0x10/0x10 [ 191.894398][ T7049] ? __pfx_chrdev_open+0x10/0x10 [ 191.894434][ T7049] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 191.894469][ T7049] do_dentry_open+0x744/0x1c10 [ 191.894502][ T7049] ? __pfx_chrdev_open+0x10/0x10 [ 191.894544][ T7049] vfs_open+0x82/0x3f0 [ 191.894570][ T7049] path_openat+0x1de4/0x2cb0 [ 191.894612][ T7049] ? __pfx_path_openat+0x10/0x10 [ 191.894645][ T7049] ? __lock_acquire+0xb8a/0x1c90 [ 191.894676][ T7049] do_filp_open+0x20b/0x470 [ 191.894708][ T7049] ? __pfx_do_filp_open+0x10/0x10 [ 191.894761][ T7049] ? alloc_fd+0x471/0x7d0 [ 191.894805][ T7049] do_sys_openat2+0x11b/0x1d0 [ 191.894829][ T7049] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.894857][ T7049] ? __fget_files+0x20e/0x3c0 [ 191.894893][ T7049] __x64_sys_openat+0x174/0x210 [ 191.894919][ T7049] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.894944][ T7049] ? ksys_write+0x1ac/0x250 [ 191.894988][ T7049] do_syscall_64+0xcd/0x490 [ 191.895011][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.895034][ T7049] RIP: 0033:0x7f6f6e78e929 [ 191.895052][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.895073][ T7049] RSP: 002b:00007f6f6c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.895094][ T7049] RAX: ffffffffffffffda RBX: 00007f6f6e9b6160 RCX: 00007f6f6e78e929 [ 191.895109][ T7049] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.895123][ T7049] RBP: 00007f6f6c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.895137][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.895150][ T7049] R13: 0000000000000000 R14: 00007f6f6e9b6160 R15: 00007fff0ba47588 [ 191.895179][ T7049] [ 192.860943][ T7056] Invalid ELF header magic: != ELF [ 194.459038][ T7078] Invalid ELF header magic: != ELF [ 196.659346][ T7120] busy [ 198.999232][ T7161] busy [ 199.489387][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.532382][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.345451][ T7172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.265'. [ 200.374770][ T7172] netlink: 651 bytes leftover after parsing attributes in process `syz.1.265'. [ 201.172817][ T7178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 201.745341][ T7180] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 202.649687][ T7198] busy [ 203.254255][ T7209] netlink: 'syz.1.272': attribute type 15 has an invalid length. [ 203.287882][ T7209] netlink: 'syz.1.272': attribute type 16 has an invalid length. [ 203.323335][ T7209] netlink: 'syz.1.272': attribute type 17 has an invalid length. [ 203.362884][ T7209] netlink: 'syz.1.272': attribute type 19 has an invalid length. [ 203.434591][ T7209] netlink: 'syz.1.272': attribute type 27 has an invalid length. [ 203.541941][ T7209] netlink: 'syz.1.272': attribute type 28 has an invalid length. [ 203.559937][ T7209] netlink: 'syz.1.272': attribute type 29 has an invalid length. [ 203.609090][ T7209] netlink: 'syz.1.272': attribute type 30 has an invalid length. [ 203.701894][ T7209] netlink: 18 bytes leftover after parsing attributes in process `syz.1.272'. [ 204.541683][ T7235] busy [ 204.945409][ T7237] netlink: 342 bytes leftover after parsing attributes in process `syz.3.282'. [ 205.198571][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 207.097917][ T7276] busy [ 207.409492][ T7281] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 207.767774][ T7279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 208.525996][ T7297] Invalid ELF header magic: != ELF [ 208.556592][ T7295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 209.094115][ T7298] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 210.261262][ T7315] busy [ 211.329772][ T7325] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 212.318879][ T7327] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 213.213433][ T7355] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 213.757895][ T7356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 214.422134][ T7370] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[7370] [ 215.907787][ T7378] Invalid ELF header magic: != ELF [ 216.412519][ T7384] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 217.019303][ T7387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 218.213984][ T7411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 218.931134][ T7431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 219.680013][ T7449] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 220.270690][ T7459] busy [ 221.663902][ T7491] random: crng reseeded on system resumption [ 221.693706][ T7491] FAULT_INJECTION: forcing a failure. [ 221.693706][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 221.734767][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.0.338 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 221.734801][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.734816][ T7491] Call Trace: [ 221.734825][ T7491] [ 221.734835][ T7491] dump_stack_lvl+0x16c/0x1f0 [ 221.734882][ T7491] should_fail_ex+0x512/0x640 [ 221.734927][ T7491] should_failslab+0xc2/0x120 [ 221.734952][ T7491] __kmalloc_cache_noprof+0x6a/0x3e0 [ 221.734985][ T7491] ? do_raw_spin_lock+0x12c/0x2b0 [ 221.735025][ T7491] ? find_held_lock+0x2b/0x80 [ 221.735047][ T7491] ? async_schedule_node_domain+0x54/0x120 [ 221.735082][ T7491] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 221.735120][ T7491] async_schedule_node_domain+0x54/0x120 [ 221.735152][ T7491] dev_cache_fw_image+0x38e/0x490 [ 221.735191][ T7491] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 221.735229][ T7491] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 221.735266][ T7491] dpm_for_each_dev+0x5a/0xb0 [ 221.735300][ T7491] fw_pm_notify+0x81/0x150 [ 221.735332][ T7491] notifier_call_chain+0xbc/0x410 [ 221.735361][ T7491] ? __pfx_fw_pm_notify+0x10/0x10 [ 221.735400][ T7491] blocking_notifier_call_chain_robust+0xc8/0x160 [ 221.735433][ T7491] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 221.735486][ T7491] pm_notifier_call_chain_robust+0x27/0x60 [ 221.735526][ T7491] snapshot_open+0x218/0x2b0 [ 221.735556][ T7491] ? __pfx_snapshot_open+0x10/0x10 [ 221.735588][ T7491] misc_open+0x35d/0x420 [ 221.735621][ T7491] ? __pfx_misc_open+0x10/0x10 [ 221.735654][ T7491] chrdev_open+0x231/0x6a0 [ 221.735691][ T7491] ? __pfx_apparmor_file_open+0x10/0x10 [ 221.735725][ T7491] ? __pfx_chrdev_open+0x10/0x10 [ 221.735767][ T7491] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 221.735807][ T7491] do_dentry_open+0x744/0x1c10 [ 221.735846][ T7491] ? __pfx_chrdev_open+0x10/0x10 [ 221.735893][ T7491] vfs_open+0x82/0x3f0 [ 221.735925][ T7491] path_openat+0x1de4/0x2cb0 [ 221.735975][ T7491] ? __pfx_path_openat+0x10/0x10 [ 221.736014][ T7491] ? __lock_acquire+0xb8a/0x1c90 [ 221.736052][ T7491] do_filp_open+0x20b/0x470 [ 221.736109][ T7491] ? __pfx_do_filp_open+0x10/0x10 [ 221.736181][ T7491] ? alloc_fd+0x471/0x7d0 [ 221.736231][ T7491] do_sys_openat2+0x11b/0x1d0 [ 221.736262][ T7491] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.736299][ T7491] ? __fget_files+0x20e/0x3c0 [ 221.736343][ T7491] __x64_sys_openat+0x174/0x210 [ 221.736396][ T7491] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.736431][ T7491] ? ksys_write+0x1ac/0x250 [ 221.736503][ T7491] do_syscall_64+0xcd/0x490 [ 221.736536][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.736568][ T7491] RIP: 0033:0x7f979b18e929 [ 221.736593][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.736622][ T7491] RSP: 002b:00007f979bf5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.736652][ T7491] RAX: ffffffffffffffda RBX: 00007f979b3b6160 RCX: 00007f979b18e929 [ 221.736673][ T7491] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 221.736693][ T7491] RBP: 00007f979bf5e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.736711][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.736728][ T7491] R13: 0000000000000000 R14: 00007f979b3b6160 R15: 00007ffd82c02738 [ 221.736771][ T7491] [ 222.063680][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.140895][ T7491] [ 222.143308][ T7491] ====================================================== [ 222.150340][ T7491] WARNING: possible circular locking dependency detected [ 222.157380][ T7491] 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 Not tainted [ 222.164525][ T7491] ------------------------------------------------------ [ 222.171559][ T7491] syz.0.338/7491 is trying to acquire lock: [ 222.177485][ T7491] ffff8880253f04a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 222.188187][ T7491] [ 222.188187][ T7491] but task is already holding lock: [ 222.195591][ T7491] ffffffff8f3105c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 222.204522][ T7491] [ 222.204522][ T7491] which lock already depends on the new lock. [ 222.204522][ T7491] [ 222.214952][ T7491] [ 222.214952][ T7491] the existing dependency chain (in reverse order) is: [ 222.223986][ T7491] [ 222.223986][ T7491] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 222.231500][ T7491] __mutex_lock+0x199/0xb90 [ 222.236533][ T7491] device_pm_add+0x87/0x3e0 [ 222.241581][ T7491] device_add+0x9cd/0x1a70 [ 222.246530][ T7491] device_create_groups_vargs+0x1f8/0x270 [ 222.252782][ T7491] device_create+0xed/0x130 [ 222.257815][ T7491] msr_device_create+0x31/0x70 [ 222.263105][ T7491] cpuhp_invoke_callback+0x3d5/0xa10 [ 222.268918][ T7491] cpuhp_thread_fun+0x47e/0x6f0 [ 222.274302][ T7491] smpboot_thread_fn+0x3f7/0xae0 [ 222.279774][ T7491] kthread+0x3c2/0x780 [ 222.284387][ T7491] ret_from_fork+0x5d4/0x6f0 [ 222.289525][ T7491] ret_from_fork_asm+0x1a/0x30 [ 222.294818][ T7491] [ 222.294818][ T7491] -> #3 (cpuhp_state-up){+.+.}-{0:0}: [ 222.302388][ T7491] cpuhp_thread_fun+0x193/0x6f0 [ 222.307776][ T7491] smpboot_thread_fn+0x3f7/0xae0 [ 222.313248][ T7491] kthread+0x3c2/0x780 [ 222.317859][ T7491] ret_from_fork+0x5d4/0x6f0 [ 222.322983][ T7491] ret_from_fork_asm+0x1a/0x30 [ 222.328277][ T7491] [ 222.328277][ T7491] -> #2 (cpu_hotplug_lock){++++}-{0:0}: [ 222.336029][ T7491] cpus_read_lock+0x42/0x160 [ 222.341165][ T7491] ring_buffer_resize+0x105/0x15c0 [ 222.346815][ T7491] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 222.353771][ T7491] tracing_free_buffer_release+0x104/0x270 [ 222.360112][ T7491] __fput+0x402/0xb70 [ 222.364617][ T7491] task_work_run+0x150/0x240 [ 222.369748][ T7491] exit_to_user_mode_loop+0xeb/0x110 [ 222.375562][ T7491] do_syscall_64+0x3f6/0x490 [ 222.380677][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.387109][ T7491] [ 222.387109][ T7491] -> #1 (trace_types_lock){+.+.}-{4:4}: [ 222.394866][ T7491] __mutex_lock+0x199/0xb90 [ 222.399894][ T7491] tracing_check_open_get_tr.part.0+0x45/0x130 [ 222.406584][ T7491] tracing_open_generic_tr+0x66/0xf0 [ 222.412412][ T7491] do_dentry_open+0x744/0x1c10 [ 222.417725][ T7491] vfs_open+0x82/0x3f0 [ 222.422345][ T7491] dentry_open+0x71/0xd0 [ 222.427127][ T7491] ima_calc_file_hash+0x2b6/0x490 [ 222.432687][ T7491] ima_collect_measurement+0x897/0xa40 [ 222.438680][ T7491] process_measurement+0x11fa/0x23e0 [ 222.444516][ T7491] ima_file_check+0xc5/0x110 [ 222.449645][ T7491] security_file_post_open+0x8e/0x210 [ 222.455548][ T7491] path_openat+0x1404/0x2cb0 [ 222.460677][ T7491] do_filp_open+0x20b/0x470 [ 222.465717][ T7491] do_sys_openat2+0x11b/0x1d0 [ 222.470922][ T7491] __x64_sys_openat+0x174/0x210 [ 222.476307][ T7491] do_syscall_64+0xcd/0x490 [ 222.481357][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.487791][ T7491] [ 222.487791][ T7491] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 222.496441][ T7491] __lock_acquire+0x126f/0x1c90 [ 222.501835][ T7491] lock_acquire+0x179/0x350 [ 222.506877][ T7491] __mutex_lock+0x199/0xb90 [ 222.511908][ T7491] process_measurement+0x7e0/0x23e0 [ 222.517644][ T7491] ima_file_check+0xc5/0x110 [ 222.522773][ T7491] security_file_post_open+0x8e/0x210 [ 222.528677][ T7491] path_openat+0x1404/0x2cb0 [ 222.533808][ T7491] do_file_open_root+0x322/0x610 [ 222.539278][ T7491] file_open_root+0x2a7/0x450 [ 222.544502][ T7491] kernel_read_file_from_path_initns+0x189/0x260 [ 222.551358][ T7491] _request_firmware+0x744/0x1470 [ 222.556919][ T7491] __async_dev_cache_fw_image+0xb1/0x340 [ 222.563091][ T7491] async_schedule_node_domain+0xd4/0x120 [ 222.569274][ T7491] dev_cache_fw_image+0x38e/0x490 [ 222.574842][ T7491] dpm_for_each_dev+0x5a/0xb0 [ 222.580065][ T7491] fw_pm_notify+0x81/0x150 [ 222.585018][ T7491] notifier_call_chain+0xbc/0x410 [ 222.590597][ T7491] blocking_notifier_call_chain_robust+0xc8/0x160 [ 222.597575][ T7491] pm_notifier_call_chain_robust+0x27/0x60 [ 222.603931][ T7491] snapshot_open+0x218/0x2b0 [ 222.609060][ T7491] misc_open+0x35d/0x420 [ 222.613838][ T7491] chrdev_open+0x231/0x6a0 [ 222.618802][ T7491] do_dentry_open+0x744/0x1c10 [ 222.624118][ T7491] vfs_open+0x82/0x3f0 [ 222.628719][ T7491] path_openat+0x1de4/0x2cb0 [ 222.633850][ T7491] do_filp_open+0x20b/0x470 [ 222.638890][ T7491] do_sys_openat2+0x11b/0x1d0 [ 222.644100][ T7491] __x64_sys_openat+0x174/0x210 [ 222.649485][ T7491] do_syscall_64+0xcd/0x490 [ 222.654509][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.660930][ T7491] [ 222.660930][ T7491] other info that might help us debug this: [ 222.660930][ T7491] [ 222.671157][ T7491] Chain exists of: [ 222.671157][ T7491] &ima_iint_mutex_key[depth] --> cpuhp_state-up --> dpm_list_mtx [ 222.671157][ T7491] [ 222.684859][ T7491] Possible unsafe locking scenario: [ 222.684859][ T7491] [ 222.692317][ T7491] CPU0 CPU1 [ 222.697797][ T7491] ---- ---- [ 222.703159][ T7491] lock(dpm_list_mtx); [ 222.707325][ T7491] lock(cpuhp_state-up); [ 222.714188][ T7491] lock(dpm_list_mtx); [ 222.720887][ T7491] lock(&ima_iint_mutex_key[depth]); [ 222.726267][ T7491] [ 222.726267][ T7491] *** DEADLOCK *** [ 222.726267][ T7491] [ 222.734409][ T7491] 5 locks held by syz.0.338/7491: [ 222.739440][ T7491] #0: ffffffff8f103a28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 222.747947][ T7491] #1: ffffffff8e287ba8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 222.758357][ T7491] #2: ffffffff8e2c8350 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 222.770201][ T7491] #3: ffffffff8f315bc8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 222.778830][ T7491] #4: ffffffff8f3105c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 222.788156][ T7491] [ 222.788156][ T7491] stack backtrace: [ 222.794054][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.0.338 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 222.794089][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.794105][ T7491] Call Trace: [ 222.794114][ T7491] [ 222.794130][ T7491] dump_stack_lvl+0x116/0x1f0 [ 222.794175][ T7491] print_circular_bug+0x275/0x350 [ 222.794211][ T7491] check_noncircular+0x14c/0x170 [ 222.794251][ T7491] __lock_acquire+0x126f/0x1c90 [ 222.794293][ T7491] lock_acquire+0x179/0x350 [ 222.794328][ T7491] ? process_measurement+0x7e0/0x23e0 [ 222.794370][ T7491] ? __pfx___might_resched+0x10/0x10 [ 222.794401][ T7491] __mutex_lock+0x199/0xb90 [ 222.794424][ T7491] ? process_measurement+0x7e0/0x23e0 [ 222.794466][ T7491] ? process_measurement+0x7e0/0x23e0 [ 222.794506][ T7491] ? __pfx___mutex_lock+0x10/0x10 [ 222.794530][ T7491] ? __pfx___might_resched+0x10/0x10 [ 222.794558][ T7491] ? find_held_lock+0x2b/0x80 [ 222.794585][ T7491] ? down_write+0x14d/0x200 [ 222.794617][ T7491] ? process_measurement+0x7e0/0x23e0 [ 222.794657][ T7491] process_measurement+0x7e0/0x23e0 [ 222.794704][ T7491] ? __pfx_process_measurement+0x10/0x10 [ 222.794748][ T7491] ? find_held_lock+0x2b/0x80 [ 222.794784][ T7491] ? fscrypt_file_open+0x47c/0x590 [ 222.794832][ T7491] ? __pfx___fsnotify_parent+0x10/0x10 [ 222.794868][ T7491] ima_file_check+0xc5/0x110 [ 222.794906][ T7491] ? __pfx_ima_file_check+0x10/0x10 [ 222.794945][ T7491] ? vfs_open+0x2e3/0x3f0 [ 222.794974][ T7491] security_file_post_open+0x8e/0x210 [ 222.795007][ T7491] path_openat+0x1404/0x2cb0 [ 222.795045][ T7491] ? trace_kmem_cache_alloc+0x28/0xc0 [ 222.795072][ T7491] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 222.795110][ T7491] ? __pfx_path_openat+0x10/0x10 [ 222.795154][ T7491] ? __asan_memcpy+0x3c/0x60 [ 222.795189][ T7491] do_file_open_root+0x322/0x610 [ 222.795227][ T7491] ? __pfx_do_file_open_root+0x10/0x10 [ 222.795281][ T7491] ? vsnprintf+0x318/0x1160 [ 222.795320][ T7491] file_open_root+0x2a7/0x450 [ 222.795359][ T7491] ? __pfx_file_open_root+0x10/0x10 [ 222.795396][ T7491] ? find_held_lock+0x2b/0x80 [ 222.795421][ T7491] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 222.795452][ T7491] kernel_read_file_from_path_initns+0x189/0x260 [ 222.795481][ T7491] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 222.795509][ T7491] ? trace_kmem_cache_alloc+0x28/0xc0 [ 222.795535][ T7491] ? _request_firmware+0x503/0x1470 [ 222.795571][ T7491] _request_firmware+0x744/0x1470 [ 222.795613][ T7491] ? __pfx__request_firmware+0x10/0x10 [ 222.795649][ T7491] ? dump_stack_lvl+0x197/0x1f0 [ 222.795689][ T7491] ? dump_stack_lvl+0x1a3/0x1f0 [ 222.795730][ T7491] __async_dev_cache_fw_image+0xb1/0x340 [ 222.795764][ T7491] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 222.795802][ T7491] ? mark_held_locks+0x49/0x80 [ 222.795834][ T7491] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 222.795872][ T7491] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 222.795911][ T7491] async_schedule_node_domain+0xd4/0x120 [ 222.795941][ T7491] dev_cache_fw_image+0x38e/0x490 [ 222.795974][ T7491] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 222.796027][ T7491] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 222.796062][ T7491] dpm_for_each_dev+0x5a/0xb0 [ 222.796094][ T7491] fw_pm_notify+0x81/0x150 [ 222.796135][ T7491] notifier_call_chain+0xbc/0x410 [ 222.796165][ T7491] ? __pfx_fw_pm_notify+0x10/0x10 [ 222.796202][ T7491] blocking_notifier_call_chain_robust+0xc8/0x160 [ 222.796237][ T7491] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 222.796278][ T7491] pm_notifier_call_chain_robust+0x27/0x60 [ 222.796315][ T7491] snapshot_open+0x218/0x2b0 [ 222.796364][ T7491] ? __pfx_snapshot_open+0x10/0x10 [ 222.796400][ T7491] misc_open+0x35d/0x420 [ 222.796438][ T7491] ? __pfx_misc_open+0x10/0x10 [ 222.796476][ T7491] chrdev_open+0x231/0x6a0 [ 222.796522][ T7491] ? __pfx_apparmor_file_open+0x10/0x10 [ 222.796561][ T7491] ? __pfx_chrdev_open+0x10/0x10 [ 222.796606][ T7491] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 222.796651][ T7491] do_dentry_open+0x744/0x1c10 [ 222.796697][ T7491] ? __pfx_chrdev_open+0x10/0x10 [ 222.796747][ T7491] vfs_open+0x82/0x3f0 [ 222.796780][ T7491] path_openat+0x1de4/0x2cb0 [ 222.796830][ T7491] ? __pfx_path_openat+0x10/0x10 [ 222.796875][ T7491] ? __lock_acquire+0xb8a/0x1c90 [ 222.796915][ T7491] do_filp_open+0x20b/0x470 [ 222.796958][ T7491] ? __pfx_do_filp_open+0x10/0x10 [ 222.797016][ T7491] ? alloc_fd+0x471/0x7d0 [ 222.797062][ T7491] do_sys_openat2+0x11b/0x1d0 [ 222.797094][ T7491] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.797139][ T7491] ? __fget_files+0x20e/0x3c0 [ 222.797185][ T7491] __x64_sys_openat+0x174/0x210 [ 222.797220][ T7491] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.797255][ T7491] ? ksys_write+0x1ac/0x250 [ 222.797303][ T7491] do_syscall_64+0xcd/0x490 [ 222.797332][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.797363][ T7491] RIP: 0033:0x7f979b18e929 [ 222.797386][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.797415][ T7491] RSP: 002b:00007f979bf5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.797443][ T7491] RAX: ffffffffffffffda RBX: 00007f979b3b6160 RCX: 00007f979b18e929 [ 222.797462][ T7491] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 222.797481][ T7491] RBP: 00007f979bf5e090 R08: 0000000000000000 R09: 0000000000000000 [ 222.797498][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.797515][ T7491] R13: 0000000000000000 R14: 00007f979b3b6160 R15: 00007ffd82c02738 [ 222.797542][ T7491] [ 223.336633][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.387828][ T7499] FAULT_INJECTION: forcing a failure. [ 223.387828][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 223.400515][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.1.341 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 223.400545][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.400558][ T7499] Call Trace: [ 223.400565][ T7499] [ 223.400572][ T7499] dump_stack_lvl+0x16c/0x1f0 [ 223.400610][ T7499] should_fail_ex+0x512/0x640 [ 223.400644][ T7499] ? kernfs_fop_write_iter+0x237/0x510 [ 223.400666][ T7499] should_failslab+0xc2/0x120 [ 223.400685][ T7499] __kmalloc_noprof+0xd2/0x510 [ 223.400720][ T7499] kernfs_fop_write_iter+0x237/0x510 [ 223.400743][ T7499] iter_file_splice_write+0x91c/0x1150 [ 223.400779][ T7499] ? copy_splice_read+0x89c/0xba0 [ 223.400804][ T7499] ? __pfx_iter_file_splice_write+0x10/0x10 [ 223.400835][ T7499] ? __pfx_copy_splice_read+0x10/0x10 [ 223.400862][ T7499] ? look_up_lock_class+0x6b/0x150 [ 223.400897][ T7499] ? __pfx___might_resched+0x10/0x10 [ 223.400919][ T7499] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 223.400950][ T7499] ? __pfx_iter_file_splice_write+0x10/0x10 [ 223.400979][ T7499] direct_splice_actor+0x18f/0x6c0 [ 223.401007][ T7499] splice_direct_to_actor+0x342/0xa30 [ 223.401035][ T7499] ? __pfx_direct_splice_actor+0x10/0x10 [ 223.401083][ T7499] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 223.401135][ T7499] do_splice_direct+0x174/0x240 [ 223.401163][ T7499] ? __pfx_do_splice_direct+0x10/0x10 [ 223.401192][ T7499] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 223.401222][ T7499] ? bpf_lsm_file_permission+0x9/0x10 [ 223.401246][ T7499] ? security_file_permission+0x71/0x210 [ 223.401278][ T7499] ? rw_verify_area+0xcf/0x680 [ 223.401308][ T7499] do_sendfile+0xb06/0xe50 [ 223.401341][ T7499] ? __pfx_do_sendfile+0x10/0x10 [ 223.401372][ T7499] ? __fget_files+0x20e/0x3c0 [ 223.401408][ T7499] __x64_sys_sendfile64+0x1d8/0x220 [ 223.401428][ T7499] ? ksys_write+0x1ac/0x250 [ 223.401461][ T7499] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 223.401487][ T7499] do_syscall_64+0xcd/0x490 [ 223.401508][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.401532][ T7499] RIP: 0033:0x7f6f6e78e929 [ 223.401548][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.401570][ T7499] RSP: 002b:00007f6f6f54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.401592][ T7499] RAX: ffffffffffffffda RBX: 00007f6f6e9b5fa0 RCX: 00007f6f6e78e929 [ 223.401607][ T7499] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 223.401621][ T7499] RBP: 00007f6f6f54e090 R08: 0000000000000000 R09: 0000000000000000 [ 223.401635][ T7499] R10: 000000004f64a1d2 R11: 0000000000000246 R12: 0000000000000001 [ 223.401649][ T7499] R13: 0000000000000000 R14: 00007f6f6e9b5fa0 R15: 00007fff0ba47588 [ 223.401671][ T7499] [ 223.676062][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.076589][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 224.088319][ T7500] nbd: must specify at least one socket [ 227.178441][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 227.178818][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 227.184509][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 227.191183][ T7504] Bluetooth: hci3: command 0x0406 tx timeout